September 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:3158-1: important: Security update for postgresql16
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for postgresql16 Announcement ID: SUSE-SU-2024:3158-1 Rating: important References: * bsc#1229013 Cross-References: * CVE-2024-7348 CVSS scores: * CVE-2024-7348 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7348 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7348 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Legacy Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql16 fixes the following issues: * Upgrade to 15.8 (bsc#1229013) * CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3158=1 openSUSE-SLE-15.6-2024-3158=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-3158=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * postgresql15-llvmjit-15.8-150600.16.6.1 * postgresql15-plperl-debuginfo-15.8-150600.16.6.1 * postgresql15-test-15.8-150600.16.6.1 * postgresql15-devel-debuginfo-15.8-150600.16.6.1 * postgresql15-contrib-15.8-150600.16.6.1 * postgresql15-debuginfo-15.8-150600.16.6.1 * postgresql15-15.8-150600.16.6.1 * postgresql15-llvmjit-devel-15.8-150600.16.6.1 * postgresql15-debugsource-15.8-150600.16.6.1 * postgresql15-plpython-15.8-150600.16.6.1 * postgresql15-server-devel-15.8-150600.16.6.1 * postgresql15-llvmjit-debuginfo-15.8-150600.16.6.1 * postgresql15-server-debuginfo-15.8-150600.16.6.1 * postgresql15-server-devel-debuginfo-15.8-150600.16.6.1 * postgresql15-devel-15.8-150600.16.6.1 * postgresql15-server-15.8-150600.16.6.1 * postgresql15-pltcl-15.8-150600.16.6.1 * postgresql15-contrib-debuginfo-15.8-150600.16.6.1 * postgresql15-pltcl-debuginfo-15.8-150600.16.6.1 * postgresql15-plpython-debuginfo-15.8-150600.16.6.1 * postgresql15-plperl-15.8-150600.16.6.1 * openSUSE Leap 15.6 (noarch) * postgresql15-docs-15.8-150600.16.6.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql15-debuginfo-15.8-150600.16.6.1 * postgresql15-contrib-debuginfo-15.8-150600.16.6.1 * postgresql15-server-debuginfo-15.8-150600.16.6.1 * postgresql15-15.8-150600.16.6.1 * postgresql15-debugsource-15.8-150600.16.6.1 * postgresql15-server-15.8-150600.16.6.1 * postgresql15-contrib-15.8-150600.16.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7348.html * https://bugzilla.suse.com/show_bug.cgi?id=1229013

1 0

SUSE-SU-2024:3159-1: important: Security update for postgresql16
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for postgresql16 Announcement ID: SUSE-SU-2024:3159-1 Rating: important References: * bsc#1224038 * bsc#1224051 * bsc#1229013 Cross-References: * CVE-2024-4317 * CVE-2024-7348 CVSS scores: * CVE-2024-4317 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-7348 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7348 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7348 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for postgresql16 fixes the following issues: * Upgrade to 16.4 (bsc#1229013) * CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013) * CVE-2024-4317: Restrict visibility of pg_stats_ext and pg_stats_ext_exprs entries to the table owner. See the release notes for the steps that have to be taken to fix existing PostgreSQL instances. (bsc#1224038) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3159=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3159=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3159=1 openSUSE-SLE-15.6-2024-3159=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql16-16.4-150600.16.5.1 * libpq5-debuginfo-16.4-150600.16.5.1 * postgresql16-debugsource-16.4-150600.16.5.1 * postgresql16-debuginfo-16.4-150600.16.5.1 * libpq5-16.4-150600.16.5.1 * Basesystem Module 15-SP6 (x86_64) * libpq5-32bit-debuginfo-16.4-150600.16.5.1 * libpq5-32bit-16.4-150600.16.5.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql16-devel-16.4-150600.16.5.1 * postgresql16-server-16.4-150600.16.5.1 * postgresql16-server-devel-debuginfo-16.4-150600.16.5.1 * libecpg6-16.4-150600.16.5.1 * postgresql16-plperl-debuginfo-16.4-150600.16.5.1 * postgresql16-server-debuginfo-16.4-150600.16.5.1 * postgresql16-plpython-16.4-150600.16.5.1 * postgresql16-plpython-debuginfo-16.4-150600.16.5.1 * postgresql16-contrib-debuginfo-16.4-150600.16.5.1 * postgresql16-pltcl-debuginfo-16.4-150600.16.5.1 * postgresql16-debugsource-16.4-150600.16.5.1 * postgresql16-debuginfo-16.4-150600.16.5.1 * postgresql16-server-devel-16.4-150600.16.5.1 * libecpg6-debuginfo-16.4-150600.16.5.1 * postgresql16-devel-debuginfo-16.4-150600.16.5.1 * postgresql16-contrib-16.4-150600.16.5.1 * postgresql16-plperl-16.4-150600.16.5.1 * postgresql16-pltcl-16.4-150600.16.5.1 * Server Applications Module 15-SP6 (noarch) * postgresql16-docs-16.4-150600.16.5.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * postgresql16-16.4-150600.16.5.1 * postgresql16-test-16.4-150600.16.5.1 * libpq5-debuginfo-16.4-150600.16.5.1 * postgresql16-plpython-debuginfo-16.4-150600.16.5.1 * postgresql16-llvmjit-devel-16.4-150600.16.5.1 * postgresql16-debugsource-16.4-150600.16.5.1 * postgresql16-debuginfo-16.4-150600.16.5.1 * postgresql16-plperl-16.4-150600.16.5.1 * postgresql16-devel-debuginfo-16.4-150600.16.5.1 * postgresql16-llvmjit-16.4-150600.16.5.1 * postgresql16-server-16.4-150600.16.5.1 * postgresql16-server-debuginfo-16.4-150600.16.5.1 * postgresql16-contrib-debuginfo-16.4-150600.16.5.1 * postgresql16-devel-mini-16.4-150600.16.5.1 * libecpg6-debuginfo-16.4-150600.16.5.1 * libpq5-16.4-150600.16.5.1 * postgresql16-contrib-16.4-150600.16.5.1 * postgresql16-mini-debugsource-16.4-150600.16.5.1 * postgresql16-plperl-debuginfo-16.4-150600.16.5.1 * postgresql16-plpython-16.4-150600.16.5.1 * postgresql16-llvmjit-debuginfo-16.4-150600.16.5.1 * postgresql16-server-devel-16.4-150600.16.5.1 * postgresql16-server-devel-debuginfo-16.4-150600.16.5.1 * postgresql16-pltcl-debuginfo-16.4-150600.16.5.1 * postgresql16-pltcl-16.4-150600.16.5.1 * postgresql16-devel-16.4-150600.16.5.1 * libecpg6-16.4-150600.16.5.1 * postgresql16-devel-mini-debuginfo-16.4-150600.16.5.1 * openSUSE Leap 15.6 (x86_64) * libpq5-32bit-debuginfo-16.4-150600.16.5.1 * libecpg6-32bit-16.4-150600.16.5.1 * libpq5-32bit-16.4-150600.16.5.1 * libecpg6-32bit-debuginfo-16.4-150600.16.5.1 * openSUSE Leap 15.6 (noarch) * postgresql16-docs-16.4-150600.16.5.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libecpg6-64bit-debuginfo-16.4-150600.16.5.1 * libpq5-64bit-16.4-150600.16.5.1 * libpq5-64bit-debuginfo-16.4-150600.16.5.1 * libecpg6-64bit-16.4-150600.16.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4317.html * https://www.suse.com/security/cve/CVE-2024-7348.html * https://bugzilla.suse.com/show_bug.cgi?id=1224038 * https://bugzilla.suse.com/show_bug.cgi?id=1224051 * https://bugzilla.suse.com/show_bug.cgi?id=1229013

1 0

SUSE-SU-2024:3160-1: important: Security update for postgresql16
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for postgresql16 Announcement ID: SUSE-SU-2024:3160-1 Rating: important References: * bsc#1229013 Cross-References: * CVE-2024-7348 CVSS scores: * CVE-2024-7348 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7348 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7348 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Legacy Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for postgresql16 fixes the following issues: * Upgrade to 14.13 (bsc#1229013) * CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3160=1 openSUSE-SLE-15.6-2024-3160=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-3160=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3160=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * postgresql14-devel-debuginfo-14.13-150600.16.6.1 * postgresql14-plpython-14.13-150600.16.6.1 * postgresql14-plperl-debuginfo-14.13-150600.16.6.1 * postgresql14-14.13-150600.16.6.1 * postgresql14-pltcl-14.13-150600.16.6.1 * postgresql14-contrib-14.13-150600.16.6.1 * postgresql14-llvmjit-14.13-150600.16.6.1 * postgresql14-pltcl-debuginfo-14.13-150600.16.6.1 * postgresql14-server-devel-14.13-150600.16.6.1 * postgresql14-server-devel-debuginfo-14.13-150600.16.6.1 * postgresql14-plpython-debuginfo-14.13-150600.16.6.1 * postgresql14-test-14.13-150600.16.6.1 * postgresql14-llvmjit-devel-14.13-150600.16.6.1 * postgresql14-devel-14.13-150600.16.6.1 * postgresql14-server-14.13-150600.16.6.1 * postgresql14-debuginfo-14.13-150600.16.6.1 * postgresql14-debugsource-14.13-150600.16.6.1 * postgresql14-server-debuginfo-14.13-150600.16.6.1 * postgresql14-plperl-14.13-150600.16.6.1 * postgresql14-contrib-debuginfo-14.13-150600.16.6.1 * postgresql14-llvmjit-debuginfo-14.13-150600.16.6.1 * openSUSE Leap 15.6 (noarch) * postgresql14-docs-14.13-150600.16.6.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql14-devel-debuginfo-14.13-150600.16.6.1 * postgresql14-devel-14.13-150600.16.6.1 * postgresql14-plpython-14.13-150600.16.6.1 * postgresql14-pltcl-14.13-150600.16.6.1 * postgresql14-server-14.13-150600.16.6.1 * postgresql14-debuginfo-14.13-150600.16.6.1 * postgresql14-contrib-14.13-150600.16.6.1 * postgresql14-debugsource-14.13-150600.16.6.1 * postgresql14-pltcl-debuginfo-14.13-150600.16.6.1 * postgresql14-plpython-debuginfo-14.13-150600.16.6.1 * postgresql14-server-devel-14.13-150600.16.6.1 * postgresql14-server-devel-debuginfo-14.13-150600.16.6.1 * postgresql14-server-debuginfo-14.13-150600.16.6.1 * postgresql14-plperl-debuginfo-14.13-150600.16.6.1 * postgresql14-plperl-14.13-150600.16.6.1 * postgresql14-contrib-debuginfo-14.13-150600.16.6.1 * postgresql14-14.13-150600.16.6.1 * Legacy Module 15-SP6 (noarch) * postgresql14-docs-14.13-150600.16.6.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * postgresql14-debuginfo-14.13-150600.16.6.1 * postgresql14-llvmjit-14.13-150600.16.6.1 * postgresql14-debugsource-14.13-150600.16.6.1 * postgresql14-llvmjit-debuginfo-14.13-150600.16.6.1 * postgresql14-test-14.13-150600.16.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7348.html * https://bugzilla.suse.com/show_bug.cgi?id=1229013

1 0

SUSE-SU-2024:3161-1: important: Security update for python-Django
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for python-Django Announcement ID: SUSE-SU-2024:3161-1 Rating: important References: * bsc#1229823 * bsc#1229824 Cross-References: * CVE-2024-45230 * CVE-2024-45231 CVSS scores: * CVE-2024-45230 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45231 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-Django fixes the following issues: * CVE-2024-45230: Fixed potential denial-of-service vulnerability in django.utils.html.urlize(). (bsc#1229823) * CVE-2024-45231: Fixed potential user email enumeration via response status on password reset. (bsc#1229824) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3161=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3161=1 openSUSE-SLE-15.6-2024-3161=1 ## Package List: * SUSE Package Hub 15 15-SP6 (noarch) * python311-Django-4.2.11-150600.3.9.1 * openSUSE Leap 15.6 (noarch) * python311-Django-4.2.11-150600.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-45230.html * https://www.suse.com/security/cve/CVE-2024-45231.html * https://bugzilla.suse.com/show_bug.cgi?id=1229823 * https://bugzilla.suse.com/show_bug.cgi?id=1229824

1 0

SUSE-SU-2024:3162-1: important: Security update for java-1_8_0-ibm
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for java-1_8_0-ibm Announcement ID: SUSE-SU-2024:3162-1 Rating: important References: * bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228050 * bsc#1228051 * bsc#1228052 * bsc#1228346 * bsc#1229224 Cross-References: * CVE-2024-21131 * CVE-2024-21138 * CVE-2024-21140 * CVE-2024-21144 * CVE-2024-21145 * CVE-2024-21147 * CVE-2024-27267 CVSS scores: * CVE-2024-21131 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-21138 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21140 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-21144 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21145 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-21147 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-27267 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Legacy Module 15-SP5 * Legacy Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves seven vulnerabilities and has one security fix can now be installed. ## Description: This update for java-1_8_0-ibm fixes the following issues: * Update to Java 8.0 Service Refresh 8 Fix Pack 30 (bsc#1228346) * CVE-2024-21147: Fixed an array index overflow in RangeCheckElimination. (bsc#1228052) * CVE-2024-21145: Fixed an out-of-bounds access in 2D image handling. (bsc#1228051) * CVE-2024-21140: Fixed a range check elimination pre-loop limit overflow. (bsc#1228048) * CVE-2024-21144: Pack200 increase loading time due to improper header validation. (bsc#1228050) * CVE-2024-21138: Fixed an issue where excessive symbol length can lead to infinite loop. (bsc#1228047) * CVE-2024-21131: Fixed a potential UTF8 size overflow. (bsc#1228046) * CVE-2024-27267: Fixed an Object Request Broker (ORB) remote denial of service. (bsc#1229224) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3162=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3162=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-3162=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-3162=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3162=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3162=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3162=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3162=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3162=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3162=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3162=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3162=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3162=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3162=1 ## Package List: * openSUSE Leap 15.5 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * openSUSE Leap 15.5 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-32bit-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-devel-32bit-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * java-1_8_0-ibm-demo-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-src-1.8.0_sr8.30-150000.3.92.1 * openSUSE Leap 15.6 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * openSUSE Leap 15.6 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-32bit-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-devel-32bit-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * java-1_8_0-ibm-demo-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-src-1.8.0_sr8.30-150000.3.92.1 * Legacy Module 15-SP5 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * Legacy Module 15-SP5 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * Legacy Module 15-SP5 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * Legacy Module 15-SP6 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * Legacy Module 15-SP6 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * Legacy Module 15-SP6 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (nosrc ppc64le s390x x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (ppc64le s390x x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 * SUSE Enterprise Storage 7.1 (nosrc x86_64) * java-1_8_0-ibm-1.8.0_sr8.30-150000.3.92.1 * SUSE Enterprise Storage 7.1 (x86_64) * java-1_8_0-ibm-plugin-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-devel-1.8.0_sr8.30-150000.3.92.1 * java-1_8_0-ibm-alsa-1.8.0_sr8.30-150000.3.92.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21131.html * https://www.suse.com/security/cve/CVE-2024-21138.html * https://www.suse.com/security/cve/CVE-2024-21140.html * https://www.suse.com/security/cve/CVE-2024-21144.html * https://www.suse.com/security/cve/CVE-2024-21145.html * https://www.suse.com/security/cve/CVE-2024-21147.html * https://www.suse.com/security/cve/CVE-2024-27267.html * https://bugzilla.suse.com/show_bug.cgi?id=1228046 * https://bugzilla.suse.com/show_bug.cgi?id=1228047 * https://bugzilla.suse.com/show_bug.cgi?id=1228048 * https://bugzilla.suse.com/show_bug.cgi?id=1228050 * https://bugzilla.suse.com/show_bug.cgi?id=1228051 * https://bugzilla.suse.com/show_bug.cgi?id=1228052 * https://bugzilla.suse.com/show_bug.cgi?id=1228346 * https://bugzilla.suse.com/show_bug.cgi?id=1229224

1 0

SUSE-SU-2024:3163-1: moderate: Security update for gradle
by OPENSUSE-UPDATES 06 Sep '24

06 Sep '24

# Security update for gradle Announcement ID: SUSE-SU-2024:3163-1 Rating: moderate References: * bsc#1212930 Cross-References: * CVE-2023-35946 CVSS scores: * CVE-2023-35946 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L * CVE-2023-35946 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for gradle fixes the following issues: * CVE-2023-35946: Fixed a dependency issue leading the cache to write files into an unintended location. (bsc#1212930) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3163=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3163=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3163=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3163=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.24.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.24.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.24.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2023-35946.html * https://bugzilla.suse.com/show_bug.cgi?id=1212930

1 0

openSUSE-SU-2024:0282-1: important: Security update for python-Django
by opensuse-security＠opensuse.org 06 Sep '24

06 Sep '24

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0282-1 Rating: important References: #1229823 #1229824 Cross-References: CVE-2024-45230 CVE-2024-45231 CVSS scores: CVE-2024-45230 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-45231 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-Django fixes the following issues: * CVE-2024-45230: Fixed Potential denial-of-service vulnerability in django.utils.html.urlize() (boo#1229823) * CVE-2024-45231: Potential user email enumeration via response status on password reset (boo#1229824) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-282=1 Package List: References: https://www.suse.com/security/cve/CVE-2024-45230.html https://www.suse.com/security/cve/CVE-2024-45231.html https://bugzilla.suse.com/1229823 https://bugzilla.suse.com/1229824

1 0

openSUSE-SU-2024:0281-1: important: Security update for opera
by opensuse-security＠opensuse.org 05 Sep '24

05 Sep '24

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0281-1 Rating: important References: Cross-References: CVE-2024-7971 CVSS scores: CVE-2024-7971 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opera fixes the following issues: - Update to 113.0.5230.32 * DNA-118250 Backport fix for CVE-2024-7971 from Chrome to Opera 113 - Changes in 113.0.5230.31 * CHR-9819 Update Chromium on desktop-stable-127-5230 to 127.0.6533.120 * DNA-116113 Print window boxes have frames and text is not vertically centered * DNA-117467 Crash at static void views::Combobox:: PaintIconAndText(class gfx::Canvas*) * DNA-117557 Fix detected dangling ptr in WorkspacesTabCycler ControllerIndexInCycleOrderTest.IndexInCyclingOrder * DNA-117721 [Lin] When I drag a tab out of the tab strip and drop it, it is not possible to do so without creating a new window. * DNA-117854 Pinned tab takes whole tab strip * DNA-117857 [Sync][Lost password] After profile error can’t add passwords and sync can’t display synced passwords * DNA-118215 Promote 113 to stable - Complete Opera 113 changelog at: https://blogs.opera.com/desktop/changelog-for-113 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5:NonFree: zypper in -t patch openSUSE-2024-281=1 Package List: - openSUSE Leap 15.5:NonFree (x86_64): opera-113.0.5230.32-lp155.3.60.1 References: https://www.suse.com/security/cve/CVE-2024-7971.html

1 0

SUSE-RU-2024:3150-1: moderate: Recommended update for python3-PyNaCl, python3-paramiko
by OPENSUSE-UPDATES 05 Sep '24

05 Sep '24

# Recommended update for python3-PyNaCl, python3-paramiko Announcement ID: SUSE-RU-2024:3150-1 Rating: moderate References: * bsc#1161557 * bsc#1199282 * jsc#PED-68 * jsc#PM-3243 * jsc#SLE-24629 * jsc#SLE-7686 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains four features and has two fixes can now be installed. ## Description: This update for python3-PyNaCl, python3-paramiko fixes the following issues: * Upgrade python3-PyNaCl from 1.4.0 to 1.5.0 * upgrade python3-paramiko from 2.4.3 to 3.4.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3150=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3150=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3150=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3150=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3150=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3150=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3150=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3150=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3150=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3150=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3150=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3150=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * SUSE Manager Proxy 4.3 (x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * SUSE Manager Proxy 4.3 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * SUSE Manager Retail Branch Server 4.3 (x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * SUSE Manager Retail Branch Server 4.3 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * SUSE Manager Server 4.3 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * openSUSE Leap 15.4 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * openSUSE Leap 15.5 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * Basesystem Module 15-SP5 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * Basesystem Module 15-SP6 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * python3-PyNaCl-1.5.0-150400.9.3.17 * python3-PyNaCl-debuginfo-1.5.0-150400.9.3.17 * python3-PyNaCl-debugsource-1.5.0-150400.9.3.17 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * python3-paramiko-3.4.0-150400.9.3.3 * python3-paramiko-doc-3.4.0-150400.9.3.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1161557 * https://bugzilla.suse.com/show_bug.cgi?id=1199282 * https://jira.suse.com/browse/PED-68 * https://jira.suse.com/browse/PM-3243 * https://jira.suse.com/browse/SLE-24629 * https://jira.suse.com/browse/SLE-7686

1 0

openSUSE-RU-2024:0279-1: moderate: Recommended update for python-Paste
by maintenance＠opensuse.org 05 Sep '24

05 Sep '24

openSUSE Recommended Update: Recommended update for python-Paste ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0279-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-Paste fixes the following issues: Update to 3.10.1: * Correct packaging and testing when not in a clean virtualenv version 3.10.0: * Move development to https://github.com/pasteorg/paste * Vendor cgi.FieldStorage and cgitb.Hook * More cleaning of Python 2 style code. update to 3.9.0: * misc bugs + please pyflakes * Remove unused format_environ method in watchthreads APP update to 3.8.0: * remove most python2 compatibility update to 3.7.1: * The main change for 3.7.0 and beyond is dropping support for Python 2. In the past it was possible to get Paste to work in Python 2 with some effort. That's now no longer possible. If Python 2 is required for some reason, use an older version of Paste. update to 3.6.1: * Turn on github action for tests on pull requests * Add a Makefile for simple automation Update to 3.5.3: * Use importlib instead of imp with Python 3. update to 3.5.2: * Fix py3 compatibility in paste.wsgilib.catch_errors (#70) * A Python 3 application might only define `__next__`, not `next`. Use `six.next` instead. * This is very similar to https://github.com/cdent/paste/pull/53, and was apparently missed there. update to 3.5.1: * Replace deprecated threading.currentThread, getName and setDaemon with threading.current_thread, name and daemon. update to 3.5.0: * Python 3 fixes to auth and wsgi.errors handling; notably making wsgi.errors text. Update to 3.4.6: * Explicit pkg_resource dependency to easy packaging. * Remove deprecated dependencies paste/fixture.py. * Update setup.py to work with setuptools 50.1.0+ update to 3.4.3: * Patch auth ticket to be python3 compatible. update to 3.4.2: * Correct sorting of items() in EvalHTMLFormatter. * Fix next in iterators in wsgilib.py. update to 3.4.0 * Python 3 updates for use of StringIO and auth_tkt.py. * Use six.BytesIO when reading wsgi.input. * Allow binding IPv6 address when starting a server. update to 3.2.6 * Correctly handle HEAD requests (to send empty body) when gzip encoding requested. * Use is_alive instead of isAlive for Python 3.9 compatibility. * Use encodebytes instead of deprecated encodestring. * Fix Python 2 and 3 compatibility for base64. update to 3.2.3: * Correct ``100 Continue`` in Python 3 * Avoid some reference cycles through tracebacks in httpserver.py Update to 3.2.0: * Ensure unicode URLs work in TestApp. * Make LimitedLengthFile file return empty bytes. * Protect against accidental close in FieldStorage. version update to 3.1.0 * Allow anything that can read() for a file-like response, not just a ``file`` instance. Update to v3.0.8: * Fix quoting of bytestrings Update to 3.0.7: * Write bytestrings when calling wsgi_write_chunk * Revert "Remove use of OpenSSL.tsafe, which links to OpenSSL.SSL update to 3.0.5: * Use correct variable when building message for exception * Remove use of OpenSSL.tsafe, which links to OpenSSL.SSL anyways. (#16) * Fix error on httpserver shutdown * Add support for limited testing with travis-ci * Merged in hroncok/paste/py37 (pull request #41) * Don't raise StopIteration from generator, return instead * Fix up testing after switch to pytest * Make iterators Python3-compatible * Don't raise StopIteration inside a generator * add link to read the docs to README * Prepare docs for publishing to RTFD * py3 fixes for form handling in paste.fixture (#8) * paste.fixture: fix form offset handling (#12) * Don't delete dict item while iterating over same dict (#14) * Enable coverage reporting via codecov (#10) - update to 2.0.3: * Add tests/test_httpserver.py * Fix improper commas in request headers in wsgi_environ * tests/test_httpserver.py: Use `email` module instead of `mimetools` * tests/test_httpserver.py: Add test_environ_with_multiple_values * Make get all values of a header work on both Python 2 and 3 * Make get_headers default to Python 3; fallback to Python 2 * Make utility function private: _get_headers * Fix Python 3 issue in paste/fixture.py * test_wsgirequest_charset: Use UTF-8 instead of iso-8859-1 * Replace cgi.parse_qsl w/ six.moves.urllib.parse.parse_sql * replace ``has_key`` method to ``in`` operator #9 * Don't display invalid error message when socket in use * Update docs/news.txt for 2.0.2 * Added tag 2.0.2 for changeset 53f5c2cd7f50 * Python 3: App must always return binary type. * Python 3: Always encode params if passed as text types * Python 3: Don't mangle strangely encoded input * Python 3: Use the same python interpreter for CGI scripts. * Python 3: add workarounds for cgi.FieldStorage * Python 3: avoid spurious warnings * Python 3: dict.items() doesn't return a list anymore * Python 3: ignore exception details in doctests * Python 3: let html_quote() and url() always return the same type * Python 3: use compatible print syntax in example text * Change six requirement to >=1.4.0 * tox.ini: Add py35 to envlist * Enable testing with pypy * tox.ini: Measure test coverage * paste.wsgilib.add_close: Add __next__ method * Add tests for `add_close` class * Uncomment/cleanup paste.wsgilib.app_close.__next__ * Check paste.wsgilib.add_close._closed * Make add_close.next() leverage add_close.__next__() update to version 2.0.1: * Fix setup.py for six dependency: move the six dependency from extras_require to install_requires * Port paste.proxy to Python 3 * Fix paste.exceptions.serial_number_generator.hash_identifier() on Python 3 * Fix paste.util.threadedprint.uninstall() * Add README.rst file - additional changes from version 2.0: * Experimental Python 3 support * paste now requires the six module * Drop support of Python 2.5 and older * Fixed egg:Paste#cgi * In paste.httpserver: give a 100 Continue response even when the server has been configured as an HTTP/1.0 server * Fixed parsing of paths beginning with multiple forward slashes * Add tox.ini to run tests with tox on Python 2.6, 2.7 and 3.4 - Initial version, obsoletes 'python-paste' Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-279=1 Package List: - openSUSE Backports SLE-15-SP6 (noarch): python311-Paste-3.10.1-bp156.2.1 References:

1 0