September 2024 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2024:3080-1: moderate: Security update for curl
by OPENSUSE-UPDATES 02 Sep '24

02 Sep '24

# Security update for curl Announcement ID: SUSE-SU-2024:3080-1 Rating: moderate References: * bsc#1228535 Cross-References: * CVE-2024-7264 CVSS scores: * CVE-2024-7264 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2024-7264 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for curl fixes the following issues: * CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3080=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3080=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3080=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3080=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3080=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3080=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3080=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3080=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3080=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3080=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3080=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3080=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3080=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3080=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3080=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3080=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3080=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3080=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3080=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3080=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libcurl-devel-8.0.1-150400.5.47.1 * libcurl4-debuginfo-8.0.1-150400.5.47.1 * curl-debugsource-8.0.1-150400.5.47.1 * curl-debuginfo-8.0.1-150400.5.47.1 * libcurl4-8.0.1-150400.5.47.1 * curl-8.0.1-150400.5.47.1 * openSUSE Leap 15.4 (x86_64) * libcurl-devel-32bit-8.0.1-150400.5.47.1 * libcurl4-32bit-8.0.1-150400.5.47.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.47.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libcurl-devel-64bit-8.0.1-150400.5.47.1 * libcurl4-64bit-8.0.1-150400.5.47.1 * libcurl4-64bit-debuginfo-8.0.1-150400.5.47.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libcurl4-debuginfo-8.0.1-150400.5.47.1 * curl-debugsource-8.0.1-150400.5.47.1 * curl-debuginfo-8.0.1-150400.5.47.1 * libcurl4-8.0.1-150400.5.47.1 * curl-8.0.1-150400.5.47.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libcurl-devel-8.0.1-150400.5.47.1 * libcurl4-debuginfo-8.0.1-150400.5.47.1 * curl-debugsource-8.0.1-150400.5.47.1 * curl-debuginfo-8.0.1-150400.5.47.1 * libcurl4-8.0.1-150400.5.47.1 * curl-8.0.1-150400.5.47.1 * openSUSE Leap 15.5 (x86_64) * libcurl-devel-32bit-8.0.1-150400.5.47.1 * libcurl4-32bit-8.0.1-150400.5.47.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.47.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Manager Proxy 4.3 (x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libcurl4-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libcurl4-debuginfo-8.0.1-150400.5.47.1 * curl-debugsource-8.0.1-150400.5.47.1 * curl-debuginfo-8.0.1-150400.5.47.1 * libcurl4-8.0.1-150400.5.47.1 * curl-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libcurl4-debuginfo-8.0.1-150400.5.47.1 * curl-debugsource-8.0.1-150400.5.47.1 * curl-debuginfo-8.0.1-150400.5.47.1 * libcurl4-8.0.1-150400.5.47.1 * curl-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libcurl4-debuginfo-8.0.1-150400.5.47.1 * curl-debugsource-8.0.1-150400.5.47.1 * curl-debuginfo-8.0.1-150400.5.47.1 * libcurl4-8.0.1-150400.5.47.1 * curl-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libcurl4-debuginfo-8.0.1-150400.5.47.1 * curl-debugsource-8.0.1-150400.5.47.1 * curl-debuginfo-8.0.1-150400.5.47.1 * libcurl4-8.0.1-150400.5.47.1 * curl-8.0.1-150400.5.47.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libcurl4-debuginfo-8.0.1-150400.5.47.1 * curl-debugsource-8.0.1-150400.5.47.1 * curl-debuginfo-8.0.1-150400.5.47.1 * libcurl4-8.0.1-150400.5.47.1 * curl-8.0.1-150400.5.47.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libcurl-devel-8.0.1-150400.5.47.1 * libcurl4-debuginfo-8.0.1-150400.5.47.1 * curl-debugsource-8.0.1-150400.5.47.1 * curl-debuginfo-8.0.1-150400.5.47.1 * libcurl4-8.0.1-150400.5.47.1 * curl-8.0.1-150400.5.47.1 * Basesystem Module 15-SP5 (x86_64) * libcurl4-32bit-debuginfo-8.0.1-150400.5.47.1 * libcurl4-32bit-8.0.1-150400.5.47.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7264.html * https://bugzilla.suse.com/show_bug.cgi?id=1228535

1 0

SUSE-SU-2024:3081-1: important: Security update for kernel-firmware
by OPENSUSE-UPDATES 02 Sep '24

02 Sep '24

# Security update for kernel-firmware Announcement ID: SUSE-SU-2024:3081-1 Rating: important References: * bsc#1229069 Cross-References: * CVE-2023-31315 CVSS scores: * CVE-2023-31315 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for kernel-firmware fixes the following issues: * CVE-2023-31315: Fixed validation in a model specific register (MSR) that lead to modification of SMM configuration by malicious program with ring0 access (bsc#1229069) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3081=1 openSUSE-SLE-15.5-2024-3081=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3081=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3081=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3081=1 ## Package List: * openSUSE Leap 15.5 (noarch) * kernel-firmware-liquidio-20230724-150500.3.12.1 * kernel-firmware-nfp-20230724-150500.3.12.1 * kernel-firmware-brcm-20230724-150500.3.12.1 * kernel-firmware-mwifiex-20230724-150500.3.12.1 * kernel-firmware-chelsio-20230724-150500.3.12.1 * kernel-firmware-intel-20230724-150500.3.12.1 * kernel-firmware-ueagle-20230724-150500.3.12.1 * kernel-firmware-bluetooth-20230724-150500.3.12.1 * kernel-firmware-bnx2-20230724-150500.3.12.1 * kernel-firmware-sound-20230724-150500.3.12.1 * kernel-firmware-ath11k-20230724-150500.3.12.1 * kernel-firmware-mellanox-20230724-150500.3.12.1 * kernel-firmware-network-20230724-150500.3.12.1 * kernel-firmware-iwlwifi-20230724-150500.3.12.1 * kernel-firmware-atheros-20230724-150500.3.12.1 * kernel-firmware-mediatek-20230724-150500.3.12.1 * kernel-firmware-20230724-150500.3.12.1 * kernel-firmware-ti-20230724-150500.3.12.1 * kernel-firmware-i915-20230724-150500.3.12.1 * kernel-firmware-media-20230724-150500.3.12.1 * kernel-firmware-ath10k-20230724-150500.3.12.1 * kernel-firmware-qcom-20230724-150500.3.12.1 * kernel-firmware-marvell-20230724-150500.3.12.1 * kernel-firmware-qlogic-20230724-150500.3.12.1 * kernel-firmware-platform-20230724-150500.3.12.1 * kernel-firmware-prestera-20230724-150500.3.12.1 * kernel-firmware-dpaa2-20230724-150500.3.12.1 * kernel-firmware-realtek-20230724-150500.3.12.1 * kernel-firmware-usb-network-20230724-150500.3.12.1 * kernel-firmware-all-20230724-150500.3.12.1 * ucode-amd-20230724-150500.3.12.1 * kernel-firmware-radeon-20230724-150500.3.12.1 * kernel-firmware-serial-20230724-150500.3.12.1 * kernel-firmware-nvidia-20230724-150500.3.12.1 * kernel-firmware-amdgpu-20230724-150500.3.12.1 * openSUSE Leap Micro 5.5 (noarch) * kernel-firmware-liquidio-20230724-150500.3.12.1 * kernel-firmware-nfp-20230724-150500.3.12.1 * kernel-firmware-brcm-20230724-150500.3.12.1 * kernel-firmware-mwifiex-20230724-150500.3.12.1 * kernel-firmware-chelsio-20230724-150500.3.12.1 * kernel-firmware-intel-20230724-150500.3.12.1 * kernel-firmware-ueagle-20230724-150500.3.12.1 * kernel-firmware-bluetooth-20230724-150500.3.12.1 * kernel-firmware-bnx2-20230724-150500.3.12.1 * kernel-firmware-sound-20230724-150500.3.12.1 * kernel-firmware-ath11k-20230724-150500.3.12.1 * kernel-firmware-mellanox-20230724-150500.3.12.1 * kernel-firmware-network-20230724-150500.3.12.1 * kernel-firmware-iwlwifi-20230724-150500.3.12.1 * kernel-firmware-atheros-20230724-150500.3.12.1 * kernel-firmware-mediatek-20230724-150500.3.12.1 * kernel-firmware-ti-20230724-150500.3.12.1 * kernel-firmware-i915-20230724-150500.3.12.1 * kernel-firmware-media-20230724-150500.3.12.1 * kernel-firmware-ath10k-20230724-150500.3.12.1 * kernel-firmware-qcom-20230724-150500.3.12.1 * kernel-firmware-marvell-20230724-150500.3.12.1 * kernel-firmware-qlogic-20230724-150500.3.12.1 * kernel-firmware-platform-20230724-150500.3.12.1 * kernel-firmware-prestera-20230724-150500.3.12.1 * kernel-firmware-dpaa2-20230724-150500.3.12.1 * kernel-firmware-realtek-20230724-150500.3.12.1 * kernel-firmware-usb-network-20230724-150500.3.12.1 * kernel-firmware-all-20230724-150500.3.12.1 * ucode-amd-20230724-150500.3.12.1 * kernel-firmware-radeon-20230724-150500.3.12.1 * kernel-firmware-serial-20230724-150500.3.12.1 * kernel-firmware-nvidia-20230724-150500.3.12.1 * kernel-firmware-amdgpu-20230724-150500.3.12.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-firmware-liquidio-20230724-150500.3.12.1 * kernel-firmware-nfp-20230724-150500.3.12.1 * kernel-firmware-brcm-20230724-150500.3.12.1 * kernel-firmware-mwifiex-20230724-150500.3.12.1 * kernel-firmware-chelsio-20230724-150500.3.12.1 * kernel-firmware-intel-20230724-150500.3.12.1 * kernel-firmware-ueagle-20230724-150500.3.12.1 * kernel-firmware-bluetooth-20230724-150500.3.12.1 * kernel-firmware-bnx2-20230724-150500.3.12.1 * kernel-firmware-sound-20230724-150500.3.12.1 * kernel-firmware-ath11k-20230724-150500.3.12.1 * kernel-firmware-mellanox-20230724-150500.3.12.1 * kernel-firmware-network-20230724-150500.3.12.1 * kernel-firmware-iwlwifi-20230724-150500.3.12.1 * kernel-firmware-atheros-20230724-150500.3.12.1 * kernel-firmware-mediatek-20230724-150500.3.12.1 * kernel-firmware-ti-20230724-150500.3.12.1 * kernel-firmware-i915-20230724-150500.3.12.1 * kernel-firmware-media-20230724-150500.3.12.1 * kernel-firmware-ath10k-20230724-150500.3.12.1 * kernel-firmware-qcom-20230724-150500.3.12.1 * kernel-firmware-marvell-20230724-150500.3.12.1 * kernel-firmware-qlogic-20230724-150500.3.12.1 * kernel-firmware-platform-20230724-150500.3.12.1 * kernel-firmware-prestera-20230724-150500.3.12.1 * kernel-firmware-dpaa2-20230724-150500.3.12.1 * kernel-firmware-realtek-20230724-150500.3.12.1 * kernel-firmware-usb-network-20230724-150500.3.12.1 * kernel-firmware-all-20230724-150500.3.12.1 * ucode-amd-20230724-150500.3.12.1 * kernel-firmware-radeon-20230724-150500.3.12.1 * kernel-firmware-serial-20230724-150500.3.12.1 * kernel-firmware-nvidia-20230724-150500.3.12.1 * kernel-firmware-amdgpu-20230724-150500.3.12.1 * Basesystem Module 15-SP5 (noarch) * kernel-firmware-liquidio-20230724-150500.3.12.1 * kernel-firmware-nfp-20230724-150500.3.12.1 * kernel-firmware-brcm-20230724-150500.3.12.1 * kernel-firmware-mwifiex-20230724-150500.3.12.1 * kernel-firmware-chelsio-20230724-150500.3.12.1 * kernel-firmware-intel-20230724-150500.3.12.1 * kernel-firmware-ueagle-20230724-150500.3.12.1 * kernel-firmware-bluetooth-20230724-150500.3.12.1 * kernel-firmware-bnx2-20230724-150500.3.12.1 * kernel-firmware-sound-20230724-150500.3.12.1 * kernel-firmware-ath11k-20230724-150500.3.12.1 * kernel-firmware-mellanox-20230724-150500.3.12.1 * kernel-firmware-network-20230724-150500.3.12.1 * kernel-firmware-iwlwifi-20230724-150500.3.12.1 * kernel-firmware-atheros-20230724-150500.3.12.1 * kernel-firmware-mediatek-20230724-150500.3.12.1 * kernel-firmware-ti-20230724-150500.3.12.1 * kernel-firmware-i915-20230724-150500.3.12.1 * kernel-firmware-media-20230724-150500.3.12.1 * kernel-firmware-ath10k-20230724-150500.3.12.1 * kernel-firmware-qcom-20230724-150500.3.12.1 * kernel-firmware-marvell-20230724-150500.3.12.1 * kernel-firmware-qlogic-20230724-150500.3.12.1 * kernel-firmware-platform-20230724-150500.3.12.1 * kernel-firmware-prestera-20230724-150500.3.12.1 * kernel-firmware-dpaa2-20230724-150500.3.12.1 * kernel-firmware-realtek-20230724-150500.3.12.1 * kernel-firmware-usb-network-20230724-150500.3.12.1 * kernel-firmware-all-20230724-150500.3.12.1 * ucode-amd-20230724-150500.3.12.1 * kernel-firmware-radeon-20230724-150500.3.12.1 * kernel-firmware-serial-20230724-150500.3.12.1 * kernel-firmware-nvidia-20230724-150500.3.12.1 * kernel-firmware-amdgpu-20230724-150500.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2023-31315.html * https://bugzilla.suse.com/show_bug.cgi?id=1229069

1 0

SUSE-SU-2024:3082-1: important: Security update for 389-ds
by OPENSUSE-UPDATES 02 Sep '24

02 Sep '24

# Security update for 389-ds Announcement ID: SUSE-SU-2024:3082-1 Rating: important References: * bsc#1225507 * bsc#1225512 * bsc#1226277 * bsc#1228912 Cross-References: * CVE-2024-2199 * CVE-2024-3657 * CVE-2024-5953 CVSS scores: * CVE-2024-2199 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3657 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-5953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities and has one security fix can now be installed. ## Description: This update for 389-ds fixes the following issues: Security issues fixed: * CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512) * CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes (bsc#1226277) * CVE-2024-2199: Fixed a crash caused by malformed userPassword in do_modify() (bsc#1225507) Non-security issues fixed: * crash when user does change password using iso-8859-1 encoding (bsc#1228912) * Update to version 2.2.10~git2.345056d3: * Issue 2324 - Add a CI test (#6289) * Issue 6284 - BUG - freelist ordering causes high wtime * Update to version 2.2.10~git0.4d7218b7: * Bump version to 2.2.10 * Issue 5327 - Fix test metadata * Issue 5853 - Update Cargo.lock * Issue 5962 - Rearrange includes for 32-bit support logic * Issue 5973 - Fix fedora cop RawHide builds (#5974) * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255) * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225) * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208) * Issue 6170 - audit log buffering doesn't handle large updates * Issue 6193 - Test failure: test_tls_command_returns_error_text * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'` * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173) * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093) * Issue 6080 - ns-slapd crash in referint_get_config (#6081) * Issue 6117 - Fix the UTC offset print (#6118) * Issue 5305 - OpenLDAP version autodetection doesn't work * Issue 6112 - RFE - add new operation note for MFA authentications * Issue 5842 - Add log buffering to audit log * Issue 6103 - New connection timeout error breaks errormap (#6104) * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079) * Issue 6096 - Improve connection timeout error logging (#6097) * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088) * Issue 5487 - Fix various isses with logconv.pl (#6085) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3082=1 openSUSE-SLE-15.5-2024-3082=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-3082=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * 389-ds-2.2.10~git2.345056d3-150500.3.21.1 * 389-ds-debugsource-2.2.10~git2.345056d3-150500.3.21.1 * libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1 * 389-ds-snmp-2.2.10~git2.345056d3-150500.3.21.1 * 389-ds-snmp-debuginfo-2.2.10~git2.345056d3-150500.3.21.1 * 389-ds-debuginfo-2.2.10~git2.345056d3-150500.3.21.1 * libsvrcore0-debuginfo-2.2.10~git2.345056d3-150500.3.21.1 * 389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1 * lib389-2.2.10~git2.345056d3-150500.3.21.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * 389-ds-2.2.10~git2.345056d3-150500.3.21.1 * 389-ds-debugsource-2.2.10~git2.345056d3-150500.3.21.1 * libsvrcore0-2.2.10~git2.345056d3-150500.3.21.1 * 389-ds-debuginfo-2.2.10~git2.345056d3-150500.3.21.1 * libsvrcore0-debuginfo-2.2.10~git2.345056d3-150500.3.21.1 * 389-ds-devel-2.2.10~git2.345056d3-150500.3.21.1 * lib389-2.2.10~git2.345056d3-150500.3.21.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2199.html * https://www.suse.com/security/cve/CVE-2024-3657.html * https://www.suse.com/security/cve/CVE-2024-5953.html * https://bugzilla.suse.com/show_bug.cgi?id=1225507 * https://bugzilla.suse.com/show_bug.cgi?id=1225512 * https://bugzilla.suse.com/show_bug.cgi?id=1226277 * https://bugzilla.suse.com/show_bug.cgi?id=1228912

1 0

SUSE-SU-2024:3083-1: moderate: Security update for zziplib
by OPENSUSE-UPDATES 02 Sep '24

02 Sep '24

# Security update for zziplib Announcement ID: SUSE-SU-2024:3083-1 Rating: moderate References: * bsc#1227178 Cross-References: * CVE-2024-39134 CVSS scores: * CVE-2024-39134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for zziplib fixes the following issues: * CVE-2024-39134: Fixed a stack buffer overflow via the __zzip_fetch_disk_trailer() (bsc#1227178) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3083=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3083=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * zziplib-devel-debuginfo-0.13.69-150000.3.20.1 * zziplib-devel-0.13.69-150000.3.20.1 * libzzip-0-13-debuginfo-0.13.69-150000.3.20.1 * libzzip-0-13-0.13.69-150000.3.20.1 * zziplib-debugsource-0.13.69-150000.3.20.1 * openSUSE Leap 15.5 (x86_64) * libzzip-0-13-32bit-debuginfo-0.13.69-150000.3.20.1 * zziplib-devel-32bit-debuginfo-0.13.69-150000.3.20.1 * zziplib-devel-32bit-0.13.69-150000.3.20.1 * libzzip-0-13-32bit-0.13.69-150000.3.20.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * zziplib-devel-debuginfo-0.13.69-150000.3.20.1 * zziplib-devel-0.13.69-150000.3.20.1 * libzzip-0-13-debuginfo-0.13.69-150000.3.20.1 * libzzip-0-13-0.13.69-150000.3.20.1 * zziplib-debugsource-0.13.69-150000.3.20.1 ## References: * https://www.suse.com/security/cve/CVE-2024-39134.html * https://bugzilla.suse.com/show_bug.cgi?id=1227178

1 0

openSUSE-SU-2024:0274-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 02 Sep '24

02 Sep '24

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0274-1 Rating: important References: #1224229 #1224230 #1224231 #1224235 #1224236 #1224237 #1224238 #1224239 #1224240 #1224241 Cross-References: CVE-2024-25641 CVE-2024-27082 CVE-2024-29894 CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 CVE-2024-31458 CVE-2024-31459 CVE-2024-31460 CVE-2024-34340 Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.27: * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240) * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229) * CVE-2024-31459: RCE vulnerability when plugins include files (boo#1224238) * CVE-2024-31460: SQL Injection vulnerability when using tree rules through Automation API (boo#1224239) * CVE-2024-29894: XSS vulnerability when using JavaScript based messaging API (boo#1224231) * CVE-2024-31458: SQL Injection vulnerability when using form templates (boo#1224241) * CVE-2024-31444: XSS vulnerability when reading tree rules with Automation API (boo#1224236) * CVE-2024-31443: XSS vulnerability when managing data queries (boo#1224235) * CVE-2024-31445: SQL Injection vulnerability when retrieving graphs using Automation API (boo#1224237) * CVE-2024-27082: XSS vulnerability when managing trees (boo#1224230) * Improve PHP 8.3 support * When importing packages via command line, data source profile could not be selected * When changing password, returning to previous page does not always work * When using LDAP authentication the first time, warnings may appear in logs * When editing/viewing devices, add IPv6 info to hostname tooltip * Improve speed of polling when Boost is enabled * Improve support for Half-Hour time zones * When user session not found, device lists can be incorrectly returned * On import, legacy templates may generate warnings * Improve support for alternate locations of Ping * Improve PHP 8.1 support for Installer * Fix issues with number formatting * Improve PHP 8.1 support when SpikeKill is run first time * Improve PHP 8.1 support for SpikeKill * When using Chinese to search for graphics, garbled characters appear. * When importing templates, preview mode will not always load * When remote poller is installed, MySQL TimeZone DB checks are not performed * When Remote Poller installation completes, no finish button is shown * Unauthorized agents should be recorded into logs * Poller cache may not always update if hostname changes * When using CMD poller, Failure and Recovery dates may have incorrect values * Saving a Tree can cause the tree to become unpublished * Web Basic Authentication does not record user logins * When using Accent-based languages, translations may not work properly * Fix automation expressions for device rules * Improve PHP 8.1 Support during fresh install with boost * Add a device "enabled/disabled" indicator next to the graphs * Notify the admin periodically when a remote data collector goes into heartbeat status * Add template for Aruba Clearpass * Add fliter/sort of Device Templates by Graph Templates - cacti-spine 1.2.27: * Restore AES Support Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-274=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2024-274=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): cacti-spine-1.2.27-bp155.2.9.1 - openSUSE Backports SLE-15-SP5 (noarch): cacti-1.2.27-bp155.2.9.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.27-35.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.27-41.1 References: https://www.suse.com/security/cve/CVE-2024-25641.html https://www.suse.com/security/cve/CVE-2024-27082.html https://www.suse.com/security/cve/CVE-2024-29894.html https://www.suse.com/security/cve/CVE-2024-31443.html https://www.suse.com/security/cve/CVE-2024-31444.html https://www.suse.com/security/cve/CVE-2024-31445.html https://www.suse.com/security/cve/CVE-2024-31458.html https://www.suse.com/security/cve/CVE-2024-31459.html https://www.suse.com/security/cve/CVE-2024-31460.html https://www.suse.com/security/cve/CVE-2024-34340.html https://bugzilla.suse.com/1224229 https://bugzilla.suse.com/1224230 https://bugzilla.suse.com/1224231 https://bugzilla.suse.com/1224235 https://bugzilla.suse.com/1224236 https://bugzilla.suse.com/1224237 https://bugzilla.suse.com/1224238 https://bugzilla.suse.com/1224239 https://bugzilla.suse.com/1224240 https://bugzilla.suse.com/1224241

1 0

openSUSE-SU-2024:0274-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 02 Sep '24

02 Sep '24

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0274-1 Rating: important References: #1224229 #1224230 #1224231 #1224235 #1224236 #1224237 #1224238 #1224239 #1224240 #1224241 Cross-References: CVE-2024-25641 CVE-2024-27082 CVE-2024-29894 CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 CVE-2024-31458 CVE-2024-31459 CVE-2024-31460 CVE-2024-34340 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.27: * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240) * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229) * CVE-2024-31459: RCE vulnerability when plugins include files (boo#1224238) * CVE-2024-31460: SQL Injection vulnerability when using tree rules through Automation API (boo#1224239) * CVE-2024-29894: XSS vulnerability when using JavaScript based messaging API (boo#1224231) * CVE-2024-31458: SQL Injection vulnerability when using form templates (boo#1224241) * CVE-2024-31444: XSS vulnerability when reading tree rules with Automation API (boo#1224236) * CVE-2024-31443: XSS vulnerability when managing data queries (boo#1224235) * CVE-2024-31445: SQL Injection vulnerability when retrieving graphs using Automation API (boo#1224237) * CVE-2024-27082: XSS vulnerability when managing trees (boo#1224230) * Improve PHP 8.3 support * When importing packages via command line, data source profile could not be selected * When changing password, returning to previous page does not always work * When using LDAP authentication the first time, warnings may appear in logs * When editing/viewing devices, add IPv6 info to hostname tooltip * Improve speed of polling when Boost is enabled * Improve support for Half-Hour time zones * When user session not found, device lists can be incorrectly returned * On import, legacy templates may generate warnings * Improve support for alternate locations of Ping * Improve PHP 8.1 support for Installer * Fix issues with number formatting * Improve PHP 8.1 support when SpikeKill is run first time * Improve PHP 8.1 support for SpikeKill * When using Chinese to search for graphics, garbled characters appear. * When importing templates, preview mode will not always load * When remote poller is installed, MySQL TimeZone DB checks are not performed * When Remote Poller installation completes, no finish button is shown * Unauthorized agents should be recorded into logs * Poller cache may not always update if hostname changes * When using CMD poller, Failure and Recovery dates may have incorrect values * Saving a Tree can cause the tree to become unpublished * Web Basic Authentication does not record user logins * When using Accent-based languages, translations may not work properly * Fix automation expressions for device rules * Improve PHP 8.1 Support during fresh install with boost * Add a device "enabled/disabled" indicator next to the graphs * Notify the admin periodically when a remote data collector goes into heartbeat status * Add template for Aruba Clearpass * Add fliter/sort of Device Templates by Graph Templates - cacti-spine 1.2.27: * Restore AES Support Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-274=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): cacti-spine-1.2.27-bp155.2.9.1 - openSUSE Backports SLE-15-SP5 (noarch): cacti-1.2.27-bp155.2.9.1 References: https://www.suse.com/security/cve/CVE-2024-25641.html https://www.suse.com/security/cve/CVE-2024-27082.html https://www.suse.com/security/cve/CVE-2024-29894.html https://www.suse.com/security/cve/CVE-2024-31443.html https://www.suse.com/security/cve/CVE-2024-31444.html https://www.suse.com/security/cve/CVE-2024-31445.html https://www.suse.com/security/cve/CVE-2024-31458.html https://www.suse.com/security/cve/CVE-2024-31459.html https://www.suse.com/security/cve/CVE-2024-31460.html https://www.suse.com/security/cve/CVE-2024-34340.html https://bugzilla.suse.com/1224229 https://bugzilla.suse.com/1224230 https://bugzilla.suse.com/1224231 https://bugzilla.suse.com/1224235 https://bugzilla.suse.com/1224236 https://bugzilla.suse.com/1224237 https://bugzilla.suse.com/1224238 https://bugzilla.suse.com/1224239 https://bugzilla.suse.com/1224240 https://bugzilla.suse.com/1224241

1 0

SUSE-RU-2024:3067-1: moderate: Recommended update for kubernetes1.23
by OPENSUSE-UPDATES 02 Sep '24

02 Sep '24

# Recommended update for kubernetes1.23 Announcement ID: SUSE-RU-2024:3067-1 Rating: moderate References: * bsc#1229008 Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for kubernetes1.23 fixes the following issues: * Fix dependencies installation (bsc#1229008) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3067=1 openSUSE-SLE-15.5-2024-3067=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3067=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3067=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kubernetes1.23-kubelet-1.23.17-150500.3.18.1 * kubernetes1.23-client-1.23.17-150500.3.18.1 * kubernetes1.23-apiserver-1.23.17-150500.3.18.1 * kubernetes1.23-controller-manager-1.23.17-150500.3.18.1 * kubernetes1.23-proxy-1.23.17-150500.3.18.1 * kubernetes1.23-scheduler-1.23.17-150500.3.18.1 * kubernetes1.23-client-common-1.23.17-150500.3.18.1 * kubernetes1.23-kubeadm-1.23.17-150500.3.18.1 * kubernetes1.23-kubelet-common-1.23.17-150500.3.18.1 * openSUSE Leap 15.5 (noarch) * kubernetes1.23-client-fish-completion-1.23.17-150500.3.18.1 * kubernetes1.23-client-bash-completion-1.23.17-150500.3.18.1 * openSUSE Leap 15.5 (ppc64le) * kubernetes1.23-apiserver-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-kubelet-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-controller-manager-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-client-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-proxy-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-scheduler-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-kubeadm-debuginfo-1.23.17-150500.3.18.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kubernetes1.23-kubelet-1.23.17-150500.3.18.1 * kubernetes1.23-client-1.23.17-150500.3.18.1 * kubernetes1.23-apiserver-1.23.17-150500.3.18.1 * kubernetes1.23-controller-manager-1.23.17-150500.3.18.1 * kubernetes1.23-proxy-1.23.17-150500.3.18.1 * kubernetes1.23-scheduler-1.23.17-150500.3.18.1 * kubernetes1.23-client-common-1.23.17-150500.3.18.1 * kubernetes1.23-kubeadm-1.23.17-150500.3.18.1 * kubernetes1.23-kubelet-common-1.23.17-150500.3.18.1 * openSUSE Leap 15.6 (noarch) * kubernetes1.23-client-fish-completion-1.23.17-150500.3.18.1 * kubernetes1.23-client-bash-completion-1.23.17-150500.3.18.1 * openSUSE Leap 15.6 (ppc64le) * kubernetes1.23-apiserver-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-kubelet-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-controller-manager-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-client-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-proxy-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-scheduler-debuginfo-1.23.17-150500.3.18.1 * kubernetes1.23-kubeadm-debuginfo-1.23.17-150500.3.18.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * kubernetes1.23-client-1.23.17-150500.3.18.1 * kubernetes1.23-client-common-1.23.17-150500.3.18.1 * Containers Module 15-SP5 (ppc64le) * kubernetes1.23-client-debuginfo-1.23.17-150500.3.18.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1229008

1 0

openSUSE-RU-2024:0273-1: moderate: Security update for rust-bindgen.
by maintenance＠opensuse.org 01 Sep '24

01 Sep '24

openSUSE Recommended Update: Security update for rust-bindgen. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0273-1 Rating: moderate References: #1229375 #1229376 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: rust-bindgen was updated to fix the following issues: Update to version 0.70.1: * Revert "Only trigger the publish workflow manually" * Fix `collapsible_match` clippy warning * Add `#[clippy::allow]` attribute to `const` layout tests * Fix creduce example * Fix creduce install link * Fix create-tag.yml Update to version 0.70.0: * Fix generation of extern "C" blocks with llvm 18 * Update shlex dependency (RUSTSEC-2024-0006, boo#1229375) * Try to avoid repr(packed) for explicitly aligned types when not needed * Support Float16 * Fix alignment contribution from bitfields * Replace peeking_take_while by itertools * Add blocklist_var * Stabilize thiscall_abi * Allow older itertools * Add target mappings for riscv64imac and riscv32imafc. * Add a complex macro fallback API * Add option to use DST structs for flexible arrays * Add option to dynamically load variables * Add option in CLI to use rustified non-exhaustive enums * Remove which and lazy-static dependencies * Generate compile-time layout tests * Print bindgen-cli errors to stderr instead of stdout * Fix --formatter=prettyplease not working in bindgen-cli by adding prettyplease feature and enabling it by default for bindgen-cli * Fix --allowlist-item so anonymous enums are no longer ignored * Use clang_getFileLocation instead of clang_getSpellingLocation to fix clang-trun * Fix generated constants: f64::INFINITY, f64::NEG_ INFINITY,f64::NAN * Update tempfile and rustix due to GHSA-c827-hfw6-qwvm (boo#1229376) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-273=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-273=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): rust-bindgen-0.70.1-bp156.5.1 rust-bindgen-debuginfo-0.70.1-bp156.5.1 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): rust-bindgen-0.70.1-bp155.5.1 References: https://www.suse.com/security/cve/CVE-2024-43806.html https://bugzilla.suse.com/1229375 https://bugzilla.suse.com/1229376

1 0