September 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2024:3176-1: important: Recommended update for mksusecd
by OPENSUSE-UPDATES 09 Sep '24

09 Sep '24

# Recommended update for mksusecd Announcement ID: SUSE-RU-2024:3176-1 Rating: important References: * bsc#1223982 * bsc#1227668 * jsc#PED-8374 Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains one feature and has two fixes can now be installed. ## Description: This update for mksusecd fixes the following issues: * Make some compression settings configurable (bsc#1223982, jsc#PED-8374). * Update documentation. * Fix UEFI image rebuild detection (bsc#1227668). * Allow updating kernel in live initrd. * Allow updating kernel in live root, support resizing live root. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3176=1 openSUSE-SLE-15.5-2024-3176=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3176=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * mksusecd-3.0-150500.3.9.3 * mksusecd-debugsource-3.0-150500.3.9.3 * mksusecd-debuginfo-3.0-150500.3.9.3 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * mksusecd-3.0-150500.3.9.3 * mksusecd-debugsource-3.0-150500.3.9.3 * mksusecd-debuginfo-3.0-150500.3.9.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223982 * https://bugzilla.suse.com/show_bug.cgi?id=1227668 * https://jira.suse.com/browse/PED-8374

1 0

openSUSE-RU-2024:0287-1: moderate: Recommended update for cockpit, cockpit-machines
by maintenance＠opensuse.org 07 Sep '24

07 Sep '24

openSUSE Recommended Update: Recommended update for cockpit, cockpit-machines ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0287-1 Rating: moderate References: #1196971 #1197003 #1199672 #1199673 #1202166 #1223533 #1226541 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for cockpit, cockpit-machines fixes the following issues: Changes in cockpit: - Fix libexecdir for leap and sle (boo#1223533) - Fix systemd units folder for leap and sle (boo#1226541) - Recommend cockpit-packagekit if zypper is installed - new version 321: * Bug fixes and performance improvements - update_version.sh: use instead of `osc service mr` to do version updates. updated README.packaging Changes in cockpit-machines: - Add initial package of version 316 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-287=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 ppc64le s390x x86_64): cockpit-321-bp156.2.9.1 cockpit-bridge-321-bp156.2.9.1 cockpit-devel-321-bp156.2.9.1 cockpit-pcp-321-bp156.2.9.1 cockpit-ws-321-bp156.2.9.1 - openSUSE Backports SLE-15-SP6 (noarch): cockpit-doc-321-bp156.2.9.1 cockpit-kdump-321-bp156.2.9.1 cockpit-machines-316-bp156.2.2 cockpit-networkmanager-321-bp156.2.9.1 cockpit-packagekit-321-bp156.2.9.1 cockpit-selinux-321-bp156.2.9.1 cockpit-storaged-321-bp156.2.9.1 cockpit-system-321-bp156.2.9.1 References: https://bugzilla.suse.com/1196971 https://bugzilla.suse.com/1197003 https://bugzilla.suse.com/1199672 https://bugzilla.suse.com/1199673 https://bugzilla.suse.com/1202166 https://bugzilla.suse.com/1223533 https://bugzilla.suse.com/1226541

1 0

openSUSE-SU-2024:0283-1: important: Security update for chromium
by opensuse-security＠opensuse.org 06 Sep '24

06 Sep '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0283-1 Rating: important References: #1230108 Cross-References: CVE-2024-7970 CVE-2024-8362 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108) * CVE-2024-8362: Use after free in WebAudio * CVE-2024-7970: Out of bounds write in V8 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-283=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-128.0.6613.119-bp155.2.111.1 chromium-128.0.6613.119-bp155.2.111.1 References: https://www.suse.com/security/cve/CVE-2024-7970.html https://www.suse.com/security/cve/CVE-2024-8362.html https://bugzilla.suse.com/1230108

1 0

openSUSE-RU-2024:0284-1: moderate: Recommended update for python-maxminddb
by maintenance＠opensuse.org 06 Sep '24

06 Sep '24

openSUSE Recommended Update: Recommended update for python-maxminddb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0284-1 Rating: moderate References: #1186841 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-maxminddb delivers the 2.2.0 version. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-284=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): python3-maxminddb-2.2.0-bp156.2.1 References: https://bugzilla.suse.com/1186841

1 0

openSUSE-RU-2024:0285-1: moderate: Recommended update for python-PasteDeploy
by maintenance＠opensuse.org 06 Sep '24

06 Sep '24

openSUSE Recommended Update: Recommended update for python-PasteDeploy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0285-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-PasteDeploy fixes the following issues: Ship python-PasteDeploy version 2.1.1+git.1652668078.0f0697d. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-285=1 Package List: - openSUSE Backports SLE-15-SP6 (noarch): python311-PasteDeploy-2.1.1+git.1652668078.0f0697d-bp156.2.1 References:

1 0

SUSE-SU-2024:3151-1: important: Security update for buildah
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for buildah Announcement ID: SUSE-SU-2024:3151-1 Rating: important References: * bsc#1221243 * bsc#1221677 * bsc#1224117 Cross-References: * CVE-2024-1753 * CVE-2024-24786 * CVE-2024-28180 * CVE-2024-3727 CVSS scores: * CVE-2024-1753 ( SUSE ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2024-24786 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3727 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for buildah fixes the following issues: Update to version 1.35.4: * Bump to Buildah v1.35.4 * CVE-2024-3727 updates (bsc#1224117) * integration test: handle new labels in "bud and test --unsetlabel" * Bump go-jose CVE-2024-28180 * Bump ocicrypt and go-jose CVE-2024-28180 Update to version 1.35.3: * correctly configure /etc/hosts and resolv.conf * buildah: refactor resolv/hosts setup. * CVE-2024-24786 protobuf to 1.33 Update to version 1.35.1: * CVE-2024-1753 container escape fix (bsc#1221677) * Buildah dropped cni support, require netavark instead (bsc#1221243) * Remove obsolete requires libcontainers-image & libcontainers-storage * Require passt for rootless networking (poo#156955) Buildah moved to passt/pasta for rootless networking from slirp4netns (https://github.com/containers/common/pull/1846) Update to version 1.35.0: * Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0 * conformance tests: don't break on trailing zeroes in layer blobs * Add a conformance test for copying to a mounted prior stage * cgroups: reuse version check from c/common * Update vendor of containers/(common,image) * manifest add: complain if we get artifact flags without --artifact * Use retry logic from containers/common * Vendor in containers/(storage,image,common) * Update module golang.org/x/crypto to v0.20.0 * Add comment re: Total Success task name * tests: skip_if_no_unshare(): check for --setuid * Properly handle build --pull=false * [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1 * Update module go.etcd.io/bbolt to v1.3.9 * Revert "Reduce official image size" * Update module github.com/opencontainers/image-spec to v1.1.0 * Reduce official image size * Build with CNI support on FreeBSD * build --all-platforms: skip some base "image" platforms * Bump main to v1.35.0-dev * Vendor in latest containers/(storage,image,common) * Split up error messages for missing --sbom related flags * `buildah manifest`: add artifact-related options * cmd/buildah/manifest.go: lock lists before adding/annotating/pushing * cmd/buildah/manifest.go: don't make struct declarations aliases * Use golang.org/x/exp/slices.Contains * Disable loong64 again * Fix a couple of typos in one-line comments * egrep is obsolescent; use grep -E * Try Cirrus with a newer VM version * Set CONTAINERS_CONF in the chroot-mount-flags integration test * Update to match dependency API update * Update github.com/openshift/imagebuilder and containers/common * docs: correct default authfile path * tests: retrofit test for heredoc summary * build, heredoc: show heredoc summary in build output * manifest, push: add support for --retry and --retry-delay * imagebuildah: fix crash with empty RUN * Make buildah match podman for handling of ulimits * docs: move footnotes to where they're applicable * Allow users to specify no-dereference * docs: use reversed logo for dark theme in README * build,commit: add --sbom to scan and produce SBOMs when committing * commit: force omitHistory if the parent has layers but no history * docs: fix a couple of typos * internal/mkcw.Archive(): handle extra image content * stage_executor,heredoc: honor interpreter in heredoc * stage_executor,layers: burst cache if heredoc content is changed * Replace map[K]bool with map[K]struct{} where it makes sense * Replace strings.SplitN with strings.Cut * Document use of containers-transports values in buildah * manifest: addCompression use default from containers.conf * commit: add a --add-file flag * mkcw: populate the rootfs using an overlay * Ignore errors if label.Relabel returns ENOSUP ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3151=1 openSUSE-SLE-15.5-2024-3151=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3151=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3151=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3151=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.35.4-150500.3.10.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.10.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.10.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.10.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1753.html * https://www.suse.com/security/cve/CVE-2024-24786.html * https://www.suse.com/security/cve/CVE-2024-28180.html * https://www.suse.com/security/cve/CVE-2024-3727.html * https://bugzilla.suse.com/show_bug.cgi?id=1221243 * https://bugzilla.suse.com/show_bug.cgi?id=1221677 * https://bugzilla.suse.com/show_bug.cgi?id=1224117

1 0

SUSE-SU-2024:3153-1: important: Security update for postgresql16
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for postgresql16 Announcement ID: SUSE-SU-2024:3153-1 Rating: important References: * bsc#1229013 Cross-References: * CVE-2024-7348 CVSS scores: * CVE-2024-7348 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7348 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7348 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql16 fixes the following issues: * Upgrade to 12.20 (bsc#1229013) * CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3153=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3153=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3153=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3153=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3153=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3153=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3153=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3153=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3153=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * postgresql12-debugsource-12.20-150200.8.63.1 * postgresql12-plpython-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-12.20-150200.8.63.1 * postgresql12-server-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-12.20-150200.8.63.1 * postgresql12-server-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-test-12.20-150200.8.63.1 * postgresql12-pltcl-debuginfo-12.20-150200.8.63.1 * postgresql12-server-12.20-150200.8.63.1 * postgresql12-llvmjit-debuginfo-12.20-150200.8.63.1 * postgresql12-12.20-150200.8.63.1 * postgresql12-llvmjit-12.20-150200.8.63.1 * postgresql12-llvmjit-devel-12.20-150200.8.63.1 * postgresql12-server-devel-12.20-150200.8.63.1 * postgresql12-pltcl-12.20-150200.8.63.1 * postgresql12-devel-12.20-150200.8.63.1 * postgresql12-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-12.20-150200.8.63.1 * postgresql12-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-debuginfo-12.20-150200.8.63.1 * openSUSE Leap 15.5 (noarch) * postgresql12-docs-12.20-150200.8.63.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * postgresql12-debugsource-12.20-150200.8.63.1 * postgresql12-plpython-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-12.20-150200.8.63.1 * postgresql12-server-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-12.20-150200.8.63.1 * postgresql12-server-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-test-12.20-150200.8.63.1 * postgresql12-pltcl-debuginfo-12.20-150200.8.63.1 * postgresql12-server-12.20-150200.8.63.1 * postgresql12-llvmjit-debuginfo-12.20-150200.8.63.1 * postgresql12-12.20-150200.8.63.1 * postgresql12-llvmjit-12.20-150200.8.63.1 * postgresql12-llvmjit-devel-12.20-150200.8.63.1 * postgresql12-server-devel-12.20-150200.8.63.1 * postgresql12-pltcl-12.20-150200.8.63.1 * postgresql12-devel-12.20-150200.8.63.1 * postgresql12-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-12.20-150200.8.63.1 * postgresql12-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-debuginfo-12.20-150200.8.63.1 * openSUSE Leap 15.6 (noarch) * postgresql12-docs-12.20-150200.8.63.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * postgresql12-plperl-12.20-150200.8.63.1 * postgresql12-contrib-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-12.20-150200.8.63.1 * postgresql12-server-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debugsource-12.20-150200.8.63.1 * postgresql12-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-debuginfo-12.20-150200.8.63.1 * postgresql12-pltcl-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-12.20-150200.8.63.1 * postgresql12-12.20-150200.8.63.1 * postgresql12-server-12.20-150200.8.63.1 * postgresql12-server-debuginfo-12.20-150200.8.63.1 * postgresql12-server-devel-12.20-150200.8.63.1 * postgresql12-pltcl-12.20-150200.8.63.1 * postgresql12-devel-12.20-150200.8.63.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * postgresql12-docs-12.20-150200.8.63.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * postgresql12-plperl-12.20-150200.8.63.1 * postgresql12-contrib-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-12.20-150200.8.63.1 * postgresql12-server-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debugsource-12.20-150200.8.63.1 * postgresql12-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-debuginfo-12.20-150200.8.63.1 * postgresql12-pltcl-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-12.20-150200.8.63.1 * postgresql12-12.20-150200.8.63.1 * postgresql12-server-12.20-150200.8.63.1 * postgresql12-server-debuginfo-12.20-150200.8.63.1 * postgresql12-server-devel-12.20-150200.8.63.1 * postgresql12-pltcl-12.20-150200.8.63.1 * postgresql12-devel-12.20-150200.8.63.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * postgresql12-docs-12.20-150200.8.63.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * postgresql12-plperl-12.20-150200.8.63.1 * postgresql12-contrib-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-12.20-150200.8.63.1 * postgresql12-server-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debugsource-12.20-150200.8.63.1 * postgresql12-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-debuginfo-12.20-150200.8.63.1 * postgresql12-pltcl-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-12.20-150200.8.63.1 * postgresql12-12.20-150200.8.63.1 * postgresql12-server-12.20-150200.8.63.1 * postgresql12-server-debuginfo-12.20-150200.8.63.1 * postgresql12-server-devel-12.20-150200.8.63.1 * postgresql12-pltcl-12.20-150200.8.63.1 * postgresql12-devel-12.20-150200.8.63.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * postgresql12-docs-12.20-150200.8.63.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * postgresql12-plperl-12.20-150200.8.63.1 * postgresql12-contrib-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-12.20-150200.8.63.1 * postgresql12-server-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debugsource-12.20-150200.8.63.1 * postgresql12-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-debuginfo-12.20-150200.8.63.1 * postgresql12-pltcl-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-12.20-150200.8.63.1 * postgresql12-12.20-150200.8.63.1 * postgresql12-server-12.20-150200.8.63.1 * postgresql12-server-debuginfo-12.20-150200.8.63.1 * postgresql12-server-devel-12.20-150200.8.63.1 * postgresql12-pltcl-12.20-150200.8.63.1 * postgresql12-devel-12.20-150200.8.63.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * postgresql12-docs-12.20-150200.8.63.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * postgresql12-plperl-12.20-150200.8.63.1 * postgresql12-contrib-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-12.20-150200.8.63.1 * postgresql12-server-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debugsource-12.20-150200.8.63.1 * postgresql12-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-debuginfo-12.20-150200.8.63.1 * postgresql12-pltcl-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-12.20-150200.8.63.1 * postgresql12-12.20-150200.8.63.1 * postgresql12-server-12.20-150200.8.63.1 * postgresql12-server-debuginfo-12.20-150200.8.63.1 * postgresql12-server-devel-12.20-150200.8.63.1 * postgresql12-pltcl-12.20-150200.8.63.1 * postgresql12-devel-12.20-150200.8.63.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * postgresql12-docs-12.20-150200.8.63.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * postgresql12-plperl-12.20-150200.8.63.1 * postgresql12-contrib-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-12.20-150200.8.63.1 * postgresql12-server-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debugsource-12.20-150200.8.63.1 * postgresql12-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-debuginfo-12.20-150200.8.63.1 * postgresql12-pltcl-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-12.20-150200.8.63.1 * postgresql12-12.20-150200.8.63.1 * postgresql12-server-12.20-150200.8.63.1 * postgresql12-server-debuginfo-12.20-150200.8.63.1 * postgresql12-server-devel-12.20-150200.8.63.1 * postgresql12-pltcl-12.20-150200.8.63.1 * postgresql12-devel-12.20-150200.8.63.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * postgresql12-docs-12.20-150200.8.63.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * postgresql12-plperl-12.20-150200.8.63.1 * postgresql12-contrib-debuginfo-12.20-150200.8.63.1 * postgresql12-contrib-12.20-150200.8.63.1 * postgresql12-server-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debugsource-12.20-150200.8.63.1 * postgresql12-devel-debuginfo-12.20-150200.8.63.1 * postgresql12-debuginfo-12.20-150200.8.63.1 * postgresql12-plperl-debuginfo-12.20-150200.8.63.1 * postgresql12-pltcl-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-debuginfo-12.20-150200.8.63.1 * postgresql12-plpython-12.20-150200.8.63.1 * postgresql12-12.20-150200.8.63.1 * postgresql12-server-12.20-150200.8.63.1 * postgresql12-server-debuginfo-12.20-150200.8.63.1 * postgresql12-server-devel-12.20-150200.8.63.1 * postgresql12-pltcl-12.20-150200.8.63.1 * postgresql12-devel-12.20-150200.8.63.1 * SUSE Enterprise Storage 7.1 (noarch) * postgresql12-docs-12.20-150200.8.63.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7348.html * https://bugzilla.suse.com/show_bug.cgi?id=1229013

1 0

SUSE-SU-2024:3155-1: important: Security update for kubernetes1.26
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for kubernetes1.26 Announcement ID: SUSE-SU-2024:3155-1 Rating: important References: * bsc#1229869 Cross-References: * CVE-2023-45288 CVSS scores: * CVE-2023-45288 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for kubernetes1.26 fixes the following issues: * CVE-2023-45288: Close connections when receiving too many headers. (bsc#1229869) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3155=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3155=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3155=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3155=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3155=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3155=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3155=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3155=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3155=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-scheduler-1.26.15-150400.9.14.1 * kubernetes1.26-apiserver-1.26.15-150400.9.14.1 * kubernetes1.26-kubelet-1.26.15-150400.9.14.1 * kubernetes1.26-kubelet-common-1.26.15-150400.9.14.1 * kubernetes1.26-kubeadm-1.26.15-150400.9.14.1 * kubernetes1.26-controller-manager-1.26.15-150400.9.14.1 * kubernetes1.26-client-common-1.26.15-150400.9.14.1 * kubernetes1.26-client-1.26.15-150400.9.14.1 * kubernetes1.26-proxy-1.26.15-150400.9.14.1 * openSUSE Leap 15.4 (noarch) * kubernetes1.26-client-fish-completion-1.26.15-150400.9.14.1 * kubernetes1.26-client-bash-completion-1.26.15-150400.9.14.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-client-common-1.26.15-150400.9.14.1 * kubernetes1.26-client-1.26.15-150400.9.14.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-scheduler-1.26.15-150400.9.14.1 * kubernetes1.26-apiserver-1.26.15-150400.9.14.1 * kubernetes1.26-kubelet-1.26.15-150400.9.14.1 * kubernetes1.26-kubelet-common-1.26.15-150400.9.14.1 * kubernetes1.26-kubeadm-1.26.15-150400.9.14.1 * kubernetes1.26-controller-manager-1.26.15-150400.9.14.1 * kubernetes1.26-client-common-1.26.15-150400.9.14.1 * kubernetes1.26-client-1.26.15-150400.9.14.1 * kubernetes1.26-proxy-1.26.15-150400.9.14.1 * openSUSE Leap 15.6 (noarch) * kubernetes1.26-client-fish-completion-1.26.15-150400.9.14.1 * kubernetes1.26-client-bash-completion-1.26.15-150400.9.14.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-client-common-1.26.15-150400.9.14.1 * kubernetes1.26-client-1.26.15-150400.9.14.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-client-common-1.26.15-150400.9.14.1 * kubernetes1.26-client-1.26.15-150400.9.14.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * kubernetes1.26-client-common-1.26.15-150400.9.14.1 * kubernetes1.26-client-1.26.15-150400.9.14.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * kubernetes1.26-client-common-1.26.15-150400.9.14.1 * kubernetes1.26-client-1.26.15-150400.9.14.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * kubernetes1.26-client-common-1.26.15-150400.9.14.1 * kubernetes1.26-client-1.26.15-150400.9.14.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * kubernetes1.26-client-common-1.26.15-150400.9.14.1 * kubernetes1.26-client-1.26.15-150400.9.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45288.html * https://bugzilla.suse.com/show_bug.cgi?id=1229869

1 0

SUSE-SU-2024:3156-1: low: Security update for python312-pip
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for python312-pip Announcement ID: SUSE-SU-2024:3156-1 Rating: low References: * bsc#1217353 Cross-References: * CVE-2023-5752 CVSS scores: * CVE-2023-5752 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2023-5752 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python312-pip fixes the following issues: * CVE-2023-5752: Avoiding injection of arbitrary configuration through Mercurial parameter. (bsc#1217353) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3156=1 openSUSE-SLE-15.6-2024-3156=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-3156=1 ## Package List: * openSUSE Leap 15.6 (noarch) * python312-pip-23.2.1-150600.3.3.1 * Python 3 Module 15-SP6 (noarch) * python312-pip-23.2.1-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-5752.html * https://bugzilla.suse.com/show_bug.cgi?id=1217353

1 0

SUSE-SU-2024:3157-1: important: Security update for MozillaFirefox
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for MozillaFirefox Announcement ID: SUSE-SU-2024:3157-1 Rating: important References: * bsc#1229821 Cross-References: * CVE-2024-8381 * CVE-2024-8382 * CVE-2024-8383 * CVE-2024-8384 * CVE-2024-8385 * CVE-2024-8386 * CVE-2024-8387 CVSS scores: * CVE-2024-8381 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2024-8381 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8382 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-8382 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8383 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2024-8383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-8384 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-8384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8385 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8385 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8386 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2024-8386 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-8387 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8387 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves seven vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: * Update to Firefox Extended Support Release 128.2.0 ESR (bsc#1229821) * CVE-2024-8381: Type confusion when looking up a property name in a 'with' block * CVE-2024-8382: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran * CVE-2024-8383: Firefox did not ask before openings news: links in an external application * CVE-2024-8384: Garbage collection could mis-color cross-compartment objects in OOM conditions * CVE-2024-8385: WASM type confusion involving ArrayTypes * CVE-2024-8386: SelectElements could be shown over another site if popups are allowed * CVE-2024-8387: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3157=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3157=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-3157=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3157=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3157=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3157=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3157=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3157=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3157=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3157=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3157=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3157=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3157=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3157=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3157=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3157=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-branding-upstream-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * openSUSE Leap 15.5 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-branding-upstream-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * openSUSE Leap 15.6 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * Desktop Applications Module 15-SP5 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * Desktop Applications Module 15-SP6 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.2.0-150200.152.149.1 * MozillaFirefox-translations-other-128.2.0-150200.152.149.1 * MozillaFirefox-128.2.0-150200.152.149.1 * MozillaFirefox-debugsource-128.2.0-150200.152.149.1 * MozillaFirefox-translations-common-128.2.0-150200.152.149.1 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-128.2.0-150200.152.149.1 ## References: * https://www.suse.com/security/cve/CVE-2024-8381.html * https://www.suse.com/security/cve/CVE-2024-8382.html * https://www.suse.com/security/cve/CVE-2024-8383.html * https://www.suse.com/security/cve/CVE-2024-8384.html * https://www.suse.com/security/cve/CVE-2024-8385.html * https://www.suse.com/security/cve/CVE-2024-8386.html * https://www.suse.com/security/cve/CVE-2024-8387.html * https://bugzilla.suse.com/show_bug.cgi?id=1229821

1 0