- openSUSE Updates

openSUSE-SU-2025:0111-1: important: Security update for opera
by opensuse-security＠opensuse.org 01 Apr '25

01 Apr '25

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0111-1 Rating: important References: Cross-References: CVE-2025-2783 Affected Products: openSUSE Leap 15.6:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update … [View More]for opera fixes the following issues: - Update to 117.0.5408.163 * DNA-120683 [Issue back] Sometimes onboarding is blank and useless * DNA-121682 Backport fix for CVE-2025-2783 to O132, O133, GX132 and Air132 - Changes in 117.0.5408.154 * DNA-121210 After enabling tab scrolling, the tab bar narrows on both the left and right sides * DNA-121560 Extension updates which requires manual confirmation do not work - Changes in 117.0.5408.142 * DNA-121314 Use the extra palette color to paint the frame * DNA-121321 Refactor ColorSet struct * DNA-121444 Crash at opera::VibesServiceImpl::VibesServiceImpl * DNA-121477 Add unit tests for ColorSet * DNA-121488 [ASAN] ColorSetTest.DefaultConstructor fails - Changes in 117.0.5408.93 * DNA-118548 After pressing Ctrl+F / Cmd+F on the Start Page (SP), the focus should be on the search bar * DNA-121183 Add 'transparent UI' parameter to Vibe logic * DNA-121184 Allow to specify extra palette for window background in Vibe logic * DNA-121232 Enable Slack, Discord and Bluesky flag on all streams * DNA-121237 Crash at opera::SidebarExpandViewEmbedder::Position * DNA-121322 [Opera Translate] [Redesign] Expired #translator flag * DNA-121385 Remove "passkey" string - Update to 117.0.5408.53 * DNA-120848 Add 'x' button to close/dismiss translate popup * DNA-120849 Dismissing popup adds language to never translate from list * DNA-120951 Optimize MFSVE output handling * DNA-120972 Crash at TabDesktopMediaList::Refresh * CHR-9964 Update Chromium on desktop-stable-132-5408 to 132.0.6834.210 Changes in 117.0.5408.47 * CHR-9961 Update Chromium on desktop-stable-132-5408 to 132.0.6834.209 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6:NonFree: zypper in -t patch openSUSE-2025-111=1 Package List: - openSUSE Leap 15.6:NonFree (x86_64): opera-117.0.5408.163-lp156.2.32.1 References: https://www.suse.com/security/cve/CVE-2025-2783.html [View Less]

1 0

SUSE-OU-2025:1080-1: low: Optional update for libaom, libyuv
by OPENSUSE-UPDATES 31 Mar '25

31 Mar '25

# Optional update for libaom, libyuv Announcement ID: SUSE-OU-2025:1080-1 Release Date: 2025-03-31T17:40:55Z Rating: low References: * bsc#1237519 Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description:… [View More] This update for libaom, libyuv fixes the following issues * Add libaom-devel to SLE Module Desktop Applications(bsc#1237519) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1080=1 SUSE-2025-1080=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-1080=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libaom3-3.7.1-150600.3.5.1 * libyuv0-20230517+a377993-150600.3.2.1 * libaom-debugsource-3.7.1-150600.3.5.1 * libyuv-devel-20230517+a377993-150600.3.2.1 * libyuv-debugsource-20230517+a377993-150600.3.2.1 * libyuv-tools-debuginfo-20230517+a377993-150600.3.2.1 * libyuv-tools-20230517+a377993-150600.3.2.1 * aom-tools-3.7.1-150600.3.5.1 * libaom-devel-3.7.1-150600.3.5.1 * aom-tools-debuginfo-3.7.1-150600.3.5.1 * libaom3-debuginfo-3.7.1-150600.3.5.1 * libyuv0-debuginfo-20230517+a377993-150600.3.2.1 * openSUSE Leap 15.6 (noarch) * libaom-devel-doc-3.7.1-150600.3.5.2 * openSUSE Leap 15.6 (x86_64) * libyuv0-32bit-debuginfo-20230517+a377993-150600.3.2.1 * libaom3-32bit-3.7.1-150600.3.5.1 * libyuv0-32bit-20230517+a377993-150600.3.2.1 * libaom3-32bit-debuginfo-3.7.1-150600.3.5.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libaom3-64bit-3.7.1-150600.3.5.1 * libyuv0-64bit-debuginfo-20230517+a377993-150600.3.2.1 * libyuv0-64bit-20230517+a377993-150600.3.2.1 * libaom3-64bit-debuginfo-3.7.1-150600.3.5.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libaom3-3.7.1-150600.3.5.1 * libyuv0-20230517+a377993-150600.3.2.1 * libaom-debugsource-3.7.1-150600.3.5.1 * libyuv-devel-20230517+a377993-150600.3.2.1 * libyuv-debugsource-20230517+a377993-150600.3.2.1 * libyuv-tools-debuginfo-20230517+a377993-150600.3.2.1 * libyuv-tools-20230517+a377993-150600.3.2.1 * aom-tools-3.7.1-150600.3.5.1 * libaom-devel-3.7.1-150600.3.5.1 * aom-tools-debuginfo-3.7.1-150600.3.5.1 * libaom3-debuginfo-3.7.1-150600.3.5.1 * libyuv0-debuginfo-20230517+a377993-150600.3.2.1 * Desktop Applications Module 15-SP6 (noarch) * libaom-devel-doc-3.7.1-150600.3.5.2 * Desktop Applications Module 15-SP6 (x86_64) * libyuv0-32bit-debuginfo-20230517+a377993-150600.3.2.1 * libaom3-32bit-3.7.1-150600.3.5.1 * libyuv0-32bit-20230517+a377993-150600.3.2.1 * libaom3-32bit-debuginfo-3.7.1-150600.3.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1237519 [View Less]

1 0

SUSE-SU-2025:1072-1: important: Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)
by OPENSUSE-UPDATES 31 Mar '25

31 Mar '25

# Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6) Announcement ID: SUSE-SU-2025:1072-1 Release Date: 2025-03-31T16:04:28Z Rating: important References: * bsc#1228578 * bsc#1235916 Cross-References: * CVE-2024-41062 * CVE-2024-57882 CVSS scores: * CVE-2024-41062 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41062 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-57882 ( SUSE ): … [View More] 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-57882 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-57882 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: * CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916). * CVE-2024-41062: Sync sock recv cb and release (bsc#1228578). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1075=1 SUSE-2025-1072=1 SUSE-2025-1073=1 SUSE-2025-1074=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-1075=1 SUSE-SLE- Module-Live-Patching-15-SP6-2025-1072=1 SUSE-SLE-Module-Live- Patching-15-SP6-2025-1073=1 SUSE-SLE-Module-Live-Patching-15-SP6-2025-1074=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_2-debugsource-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_0-debugsource-13-150600.4.31.1 * kernel-livepatch-6_4_0-150600_23_17-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_21-default-debuginfo-13-150600.4.31.1 * kernel-livepatch-6_4_0-150600_23_14-default-debuginfo-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_17-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_3-debugsource-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_14-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_7-default-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_1-debugsource-11-150600.2.1 * kernel-livepatch-6_4_0-150600_21-default-13-150600.4.31.1 * kernel-livepatch-6_4_0-150600_23_7-default-debuginfo-11-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_2-debugsource-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_0-debugsource-13-150600.4.31.1 * kernel-livepatch-6_4_0-150600_23_17-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_21-default-debuginfo-13-150600.4.31.1 * kernel-livepatch-6_4_0-150600_23_14-default-debuginfo-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_17-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_3-debugsource-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_14-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_7-default-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_1-debugsource-11-150600.2.1 * kernel-livepatch-6_4_0-150600_21-default-13-150600.4.31.1 * kernel-livepatch-6_4_0-150600_23_7-default-debuginfo-11-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-41062.html * https://www.suse.com/security/cve/CVE-2024-57882.html * https://bugzilla.suse.com/show_bug.cgi?id=1228578 * https://bugzilla.suse.com/show_bug.cgi?id=1235916 [View Less]

1 0

SUSE-SU-2025:1076-1: important: Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)
by OPENSUSE-UPDATES 31 Mar '25

31 Mar '25

# Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6) Announcement ID: SUSE-SU-2025:1076-1 Release Date: 2025-03-31T16:05:04Z Rating: important References: * bsc#1235916 Cross-References: * CVE-2024-57882 CVSS scores: * CVE-2024-57882 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-57882 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-57882 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:… [View More]U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_33 fixes one issue. The following security issue was fixed: * CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1079=1 SUSE-2025-1076=1 SUSE-2025-1077=1 SUSE-2025-1078=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-1079=1 SUSE-SLE- Module-Live-Patching-15-SP6-2025-1076=1 SUSE-SLE-Module-Live- Patching-15-SP6-2025-1077=1 SUSE-SLE-Module-Live-Patching-15-SP6-2025-1078=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_22-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_7-debugsource-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_30-default-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_30-default-debuginfo-3-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_4-debugsource-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_6-debugsource-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_33-default-debuginfo-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_33-default-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_25-default-debuginfo-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_5-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_22-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_25-default-6-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_22-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_7-debugsource-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_30-default-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_30-default-debuginfo-3-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_4-debugsource-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_6-debugsource-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_33-default-debuginfo-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_33-default-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_25-default-debuginfo-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_5-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_22-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_25-default-6-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-57882.html * https://bugzilla.suse.com/show_bug.cgi?id=1235916 [View Less]

1 0

SUSE-RU-2025:1068-1: moderate: Recommended update for crash
by OPENSUSE-UPDATES 31 Mar '25

31 Mar '25

# Recommended update for crash Announcement ID: SUSE-RU-2025:1068-1 Release Date: 2025-03-31T14:32:02Z Rating: moderate References: * bsc#1237501 Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: … [View More]This update for crash fixes the following issue: * In some kernel modules such as libie.ko, the mem size may be zero, currently crash will only check its value to determine if the module is valid, otherwise it fails to load kernel module. Count the module size to check if the module is valid, that will avoid the current failure (bsc#1237501). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1068=1 SUSE-2025-1068=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-1068=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * crash-devel-8.0.4-150600.4.3.2 * crash-doc-8.0.4-150600.4.3.2 * crash-debugsource-8.0.4-150600.4.3.2 * crash-debuginfo-8.0.4-150600.4.3.2 * crash-8.0.4-150600.4.3.2 * openSUSE Leap 15.6 (x86_64 i586) * crash-gcore-debuginfo-8.0.4-150600.4.3.2 * crash-gcore-8.0.4-150600.4.3.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * crash-kmp-default-8.0.4_k6.4.0_150600.23.38-150600.4.3.2 * crash-kmp-default-debuginfo-8.0.4_k6.4.0_150600.23.38-150600.4.3.2 * openSUSE Leap 15.6 (x86_64) * crash-kmp-rt-debuginfo-8.0.4_k6.4.0_150600.6-150600.4.3.2 * crash-kmp-rt-8.0.4_k6.4.0_150600.6-150600.4.3.2 * openSUSE Leap 15.6 (aarch64) * crash-kmp-64kb-8.0.4_k6.4.0_150600.23.38-150600.4.3.2 * crash-kmp-64kb-debuginfo-8.0.4_k6.4.0_150600.23.38-150600.4.3.2 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * crash-devel-8.0.4-150600.4.3.2 * crash-debugsource-8.0.4-150600.4.3.2 * crash-8.0.4-150600.4.3.2 * crash-debuginfo-8.0.4-150600.4.3.2 * Development Tools Module 15-SP6 (aarch64) * crash-kmp-64kb-8.0.4_k6.4.0_150600.23.38-150600.4.3.2 * crash-kmp-64kb-debuginfo-8.0.4_k6.4.0_150600.23.38-150600.4.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1237501 [View Less]

1 0

SUSE-RU-2025:1069-1: moderate: Recommended update for oracleasm
by OPENSUSE-UPDATES 31 Mar '25

31 Mar '25

# Recommended update for oracleasm Announcement ID: SUSE-RU-2025:1069-1 Release Date: 2025-03-31T14:35:50Z Rating: moderate References: Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for oracleasm fixes the following issues: * Fix PI … [View More]

1 0

SUSE-RU-2025:1070-1: moderate: Recommended update for maven-archiver
by OPENSUSE-UPDATES 31 Mar '25

31 Mar '25

# Recommended update for maven-archiver Announcement ID: SUSE-RU-2025:1070-1 Release Date: 2025-03-31T14:36:25Z Rating: moderate References: Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for maven-… [View More]

1 0

SUSE-RU-2025:1071-1: moderate: Recommended update for dracut
by OPENSUSE-UPDATES 31 Mar '25

31 Mar '25

# Recommended update for dracut Announcement ID: SUSE-RU-2025:1071-1 Release Date: 2025-03-31T14:42:40Z Rating: moderate References: * bsc#1236982 * bsc#1237695 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 … [View More] An update that has two fixes can now be installed. ## Description: This update for dracut fixes the following issue: * Version update 059+suse.557.gccd6ab94 * fix(iscsi) make sure services are shut down when switching root (bsc#1237695). * fix(iscsi) don't require network setup for qedi. * fix(network-legacy) do not require pgrep when using wicked (bsc#1236982). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1071=1 SUSE-2025-1071=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1071=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2025-1071=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * dracut-extra-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-ima-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-tools-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-debugsource-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-debuginfo-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-mkinitrd-deprecated-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-fips-059+suse.557.gccd6ab94-150600.3.20.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * dracut-ima-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-debugsource-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-debuginfo-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-fips-059+suse.557.gccd6ab94-150600.3.20.2 * SUSE Linux Enterprise High Availability Extension 15 SP6 (ppc64le x86_64) * dracut-debuginfo-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-debugsource-059+suse.557.gccd6ab94-150600.3.20.2 * dracut-mkinitrd-deprecated-059+suse.557.gccd6ab94-150600.3.20.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1236982 * https://bugzilla.suse.com/show_bug.cgi?id=1237695 [View Less]

1 0

SUSE-SU-2025:1062-1: important: Security update for docker, docker-stable
by OPENSUSE-UPDATES 31 Mar '25

31 Mar '25

# Security update for docker, docker-stable Announcement ID: SUSE-SU-2025:1062-1 Release Date: 2025-03-31T08:46:03Z Rating: important References: * bsc#1237367 * bsc#1239185 * bsc#1239322 Cross-References: * CVE-2024-2365 * CVE-2024-29018 * CVE-2024-41110 * CVE-2025-22868 * CVE-2025-22869 CVSS scores: * CVE-2024-29018 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-29018 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:… [View More]N/S:U/C:H/I:N/A:N * CVE-2024-41110 ( SUSE ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2025-22868 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for docker, docker-stable fixes the following issues: * CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185). * CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322). Other fixes: \- Make container-selinux requirement conditional on selinux-policy (bsc#1237367) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1062=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1062=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1062=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2025-1062=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1062=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1062=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1062=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1062=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1062=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1062=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1062=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1062=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1062=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1062=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1062=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-1062=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-1062=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1062=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1062=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1062=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1062=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1062=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * Containers Module 15-SP6 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-fish-completion-27.5.1_ce-150000.218.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-fish-completion-27.5.1_ce-150000.218.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-fish-completion-27.5.1_ce-150000.218.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * SUSE Enterprise Storage 7.1 (noarch) * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-fish-completion-27.5.1_ce-150000.218.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * docker-stable-24.0.9_ce-150000.1.15.1 * docker-stable-debuginfo-24.0.9_ce-150000.1.15.1 * openSUSE Leap 15.6 (noarch) * docker-bash-completion-27.5.1_ce-150000.218.1 * docker-stable-fish-completion-24.0.9_ce-150000.1.15.1 * docker-rootless-extras-27.5.1_ce-150000.218.1 * docker-stable-zsh-completion-24.0.9_ce-150000.1.15.1 * docker-zsh-completion-27.5.1_ce-150000.218.1 * docker-stable-rootless-extras-24.0.9_ce-150000.1.15.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.15.1 * docker-fish-completion-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * docker-debuginfo-27.5.1_ce-150000.218.1 * docker-27.5.1_ce-150000.218.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2365.html * https://www.suse.com/security/cve/CVE-2024-29018.html * https://www.suse.com/security/cve/CVE-2024-41110.html * https://www.suse.com/security/cve/CVE-2025-22868.html * https://www.suse.com/security/cve/CVE-2025-22869.html * https://bugzilla.suse.com/show_bug.cgi?id=1237367 * https://bugzilla.suse.com/show_bug.cgi?id=1239185 * https://bugzilla.suse.com/show_bug.cgi?id=1239322 [View Less]

1 0

SUSE-SU-2025:1063-1: moderate: Security update for apparmor
by OPENSUSE-UPDATES 31 Mar '25

31 Mar '25

# Security update for apparmor Announcement ID: SUSE-SU-2025:1063-1 Release Date: 2025-03-31T09:04:56Z Rating: moderate References: * bsc#1234452 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise … [View More]Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one security fix can now be installed. ## Description: This update for apparmor fixes the following issues: * Allow dovecot-auth to execute unix check password from /sbin, not only from /usr/bin (bsc#1234452). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-1063=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1063=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1063=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1063=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1063=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1063=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * apparmor-parser-3.0.4-150500.11.12.2 * apache2-mod_apparmor-3.0.4-150500.11.12.2 * pam_apparmor-debuginfo-3.0.4-150500.11.12.2 * ruby-apparmor-debuginfo-3.0.4-150500.11.12.2 * apache2-mod_apparmor-debuginfo-3.0.4-150500.11.12.2 * python3-apparmor-debuginfo-3.0.4-150500.11.12.2 * python3-apparmor-3.0.4-150500.11.12.2 * apparmor-debugsource-3.0.4-150500.11.12.2 * pam_apparmor-3.0.4-150500.11.12.2 * ruby-apparmor-3.0.4-150500.11.12.2 * libapparmor-debugsource-3.0.4-150500.11.12.2 * libapparmor-devel-3.0.4-150500.11.12.2 * perl-apparmor-debuginfo-3.0.4-150500.11.12.2 * perl-apparmor-3.0.4-150500.11.12.2 * libapparmor1-3.0.4-150500.11.12.2 * libapparmor1-debuginfo-3.0.4-150500.11.12.2 * apparmor-parser-debuginfo-3.0.4-150500.11.12.2 * openSUSE Leap 15.5 (noarch) * apparmor-utils-3.0.4-150500.11.12.2 * apparmor-docs-3.0.4-150500.11.12.2 * apparmor-parser-lang-3.0.4-150500.11.12.2 * apparmor-utils-lang-3.0.4-150500.11.12.2 * apparmor-abstractions-3.0.4-150500.11.12.2 * apparmor-profiles-3.0.4-150500.11.12.2 * openSUSE Leap 15.5 (x86_64) * pam_apparmor-32bit-debuginfo-3.0.4-150500.11.12.2 * libapparmor1-32bit-3.0.4-150500.11.12.2 * pam_apparmor-32bit-3.0.4-150500.11.12.2 * libapparmor1-32bit-debuginfo-3.0.4-150500.11.12.2 * openSUSE Leap 15.5 (aarch64_ilp32) * pam_apparmor-64bit-debuginfo-3.0.4-150500.11.12.2 * pam_apparmor-64bit-3.0.4-150500.11.12.2 * libapparmor1-64bit-debuginfo-3.0.4-150500.11.12.2 * libapparmor1-64bit-3.0.4-150500.11.12.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * apparmor-parser-3.0.4-150500.11.12.2 * pam_apparmor-debuginfo-3.0.4-150500.11.12.2 * libapparmor-debugsource-3.0.4-150500.11.12.2 * apparmor-debugsource-3.0.4-150500.11.12.2 * pam_apparmor-3.0.4-150500.11.12.2 * libapparmor1-3.0.4-150500.11.12.2 * libapparmor1-debuginfo-3.0.4-150500.11.12.2 * apparmor-parser-debuginfo-3.0.4-150500.11.12.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * apparmor-parser-3.0.4-150500.11.12.2 * apache2-mod_apparmor-3.0.4-150500.11.12.2 * pam_apparmor-debuginfo-3.0.4-150500.11.12.2 * apache2-mod_apparmor-debuginfo-3.0.4-150500.11.12.2 * python3-apparmor-debuginfo-3.0.4-150500.11.12.2 * libapparmor-debugsource-3.0.4-150500.11.12.2 * apparmor-debugsource-3.0.4-150500.11.12.2 * libapparmor-devel-3.0.4-150500.11.12.2 * pam_apparmor-3.0.4-150500.11.12.2 * python3-apparmor-3.0.4-150500.11.12.2 * perl-apparmor-debuginfo-3.0.4-150500.11.12.2 * perl-apparmor-3.0.4-150500.11.12.2 * libapparmor1-3.0.4-150500.11.12.2 * libapparmor1-debuginfo-3.0.4-150500.11.12.2 * apparmor-parser-debuginfo-3.0.4-150500.11.12.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * apparmor-utils-3.0.4-150500.11.12.2 * apparmor-docs-3.0.4-150500.11.12.2 * apparmor-parser-lang-3.0.4-150500.11.12.2 * apparmor-utils-lang-3.0.4-150500.11.12.2 * apparmor-abstractions-3.0.4-150500.11.12.2 * apparmor-profiles-3.0.4-150500.11.12.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * pam_apparmor-32bit-debuginfo-3.0.4-150500.11.12.2 * libapparmor1-32bit-3.0.4-150500.11.12.2 * pam_apparmor-32bit-3.0.4-150500.11.12.2 * libapparmor1-32bit-debuginfo-3.0.4-150500.11.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * apparmor-parser-3.0.4-150500.11.12.2 * apache2-mod_apparmor-3.0.4-150500.11.12.2 * pam_apparmor-debuginfo-3.0.4-150500.11.12.2 * apache2-mod_apparmor-debuginfo-3.0.4-150500.11.12.2 * python3-apparmor-debuginfo-3.0.4-150500.11.12.2 * libapparmor-debugsource-3.0.4-150500.11.12.2 * apparmor-debugsource-3.0.4-150500.11.12.2 * libapparmor-devel-3.0.4-150500.11.12.2 * pam_apparmor-3.0.4-150500.11.12.2 * python3-apparmor-3.0.4-150500.11.12.2 * perl-apparmor-debuginfo-3.0.4-150500.11.12.2 * perl-apparmor-3.0.4-150500.11.12.2 * libapparmor1-3.0.4-150500.11.12.2 * libapparmor1-debuginfo-3.0.4-150500.11.12.2 * apparmor-parser-debuginfo-3.0.4-150500.11.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * apparmor-utils-3.0.4-150500.11.12.2 * apparmor-docs-3.0.4-150500.11.12.2 * apparmor-parser-lang-3.0.4-150500.11.12.2 * apparmor-utils-lang-3.0.4-150500.11.12.2 * apparmor-abstractions-3.0.4-150500.11.12.2 * apparmor-profiles-3.0.4-150500.11.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * pam_apparmor-32bit-debuginfo-3.0.4-150500.11.12.2 * libapparmor1-32bit-3.0.4-150500.11.12.2 * pam_apparmor-32bit-3.0.4-150500.11.12.2 * libapparmor1-32bit-debuginfo-3.0.4-150500.11.12.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * apparmor-parser-3.0.4-150500.11.12.2 * apache2-mod_apparmor-3.0.4-150500.11.12.2 * pam_apparmor-debuginfo-3.0.4-150500.11.12.2 * apache2-mod_apparmor-debuginfo-3.0.4-150500.11.12.2 * python3-apparmor-debuginfo-3.0.4-150500.11.12.2 * libapparmor-debugsource-3.0.4-150500.11.12.2 * apparmor-debugsource-3.0.4-150500.11.12.2 * libapparmor-devel-3.0.4-150500.11.12.2 * pam_apparmor-3.0.4-150500.11.12.2 * python3-apparmor-3.0.4-150500.11.12.2 * perl-apparmor-debuginfo-3.0.4-150500.11.12.2 * perl-apparmor-3.0.4-150500.11.12.2 * libapparmor1-3.0.4-150500.11.12.2 * libapparmor1-debuginfo-3.0.4-150500.11.12.2 * apparmor-parser-debuginfo-3.0.4-150500.11.12.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * apparmor-utils-3.0.4-150500.11.12.2 * apparmor-docs-3.0.4-150500.11.12.2 * apparmor-parser-lang-3.0.4-150500.11.12.2 * apparmor-utils-lang-3.0.4-150500.11.12.2 * apparmor-abstractions-3.0.4-150500.11.12.2 * apparmor-profiles-3.0.4-150500.11.12.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * pam_apparmor-32bit-debuginfo-3.0.4-150500.11.12.2 * libapparmor1-32bit-3.0.4-150500.11.12.2 * pam_apparmor-32bit-3.0.4-150500.11.12.2 * libapparmor1-32bit-debuginfo-3.0.4-150500.11.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * apparmor-parser-3.0.4-150500.11.12.2 * apache2-mod_apparmor-3.0.4-150500.11.12.2 * pam_apparmor-debuginfo-3.0.4-150500.11.12.2 * apache2-mod_apparmor-debuginfo-3.0.4-150500.11.12.2 * python3-apparmor-debuginfo-3.0.4-150500.11.12.2 * libapparmor-debugsource-3.0.4-150500.11.12.2 * apparmor-debugsource-3.0.4-150500.11.12.2 * libapparmor-devel-3.0.4-150500.11.12.2 * pam_apparmor-3.0.4-150500.11.12.2 * python3-apparmor-3.0.4-150500.11.12.2 * perl-apparmor-debuginfo-3.0.4-150500.11.12.2 * perl-apparmor-3.0.4-150500.11.12.2 * libapparmor1-3.0.4-150500.11.12.2 * libapparmor1-debuginfo-3.0.4-150500.11.12.2 * apparmor-parser-debuginfo-3.0.4-150500.11.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * apparmor-utils-3.0.4-150500.11.12.2 * apparmor-docs-3.0.4-150500.11.12.2 * apparmor-parser-lang-3.0.4-150500.11.12.2 * apparmor-utils-lang-3.0.4-150500.11.12.2 * apparmor-abstractions-3.0.4-150500.11.12.2 * apparmor-profiles-3.0.4-150500.11.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * pam_apparmor-32bit-debuginfo-3.0.4-150500.11.12.2 * libapparmor1-32bit-3.0.4-150500.11.12.2 * pam_apparmor-32bit-3.0.4-150500.11.12.2 * libapparmor1-32bit-debuginfo-3.0.4-150500.11.12.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1234452 [View Less]

1 0

openSUSE-RU-2025:0108-1: moderate: Recommended update for chromium
by maintenance＠opensuse.org 30 Mar '25

30 Mar '25

openSUSE Recommended Update: Recommended update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2025:0108-1 Rating: moderate References: #1239780 #1240022 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This … [View More]

1 0

SUSE-SU-2025:1054-1: important: Security update for mercurial
by OPENSUSE-UPDATES 28 Mar '25

28 Mar '25

# Security update for mercurial Announcement ID: SUSE-SU-2025:1054-1 Release Date: 2025-03-28T16:55:02Z Rating: important References: * bsc#1239685 Cross-References: * CVE-2025-2361 CVSS scores: * CVE-2025-2361 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L * CVE-2025-2361 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2025-2361 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/… [View More]CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2361 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for mercurial fixes the following issues: * CVE-2025-2361: Fixed improper sanitization of user-controlled input passed via the cmd parameter in the Mercurial SCM Web Interface (bsc#1239685) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1054=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1054=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1054=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1054=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1054=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1054=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1054=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1054=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1054=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1054=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1054=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-1054=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-1054=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1054=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * mercurial-5.9.1-150400.3.6.1 * mercurial-tests-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * openSUSE Leap 15.4 (noarch) * mercurial-lang-5.9.1-150400.3.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-tests-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * openSUSE Leap 15.6 (noarch) * mercurial-lang-5.9.1-150400.3.6.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Manager Proxy 4.3 (x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * mercurial-5.9.1-150400.3.6.1 * mercurial-debuginfo-5.9.1-150400.3.6.1 * mercurial-debugsource-5.9.1-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2361.html * https://bugzilla.suse.com/show_bug.cgi?id=1239685 [View Less]

1 0

SUSE-SU-2025:1055-1: moderate: Security update for skopeo
by OPENSUSE-UPDATES 28 Mar '25

28 Mar '25

# Security update for skopeo Announcement ID: SUSE-SU-2025:1055-1 Release Date: 2025-03-28T16:55:59Z Rating: moderate References: * bsc#1238685 Cross-References: * CVE-2025-22870 CVSS scores: * CVE-2025-22870 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-22870 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2025-22870 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: *… [View More] Basesystem Module 15-SP6 * openSUSE Leap 15.3 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for skopeo fixes the following issues: * CVE-2025-22870: Fixed proxy bypass using IPv6 zone IDs (bsc#1238685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1055=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1055=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-1055=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1055=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * skopeo-1.14.4-150300.11.22.1 * skopeo-debuginfo-1.14.4-150300.11.22.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * skopeo-1.14.4-150300.11.22.1 * skopeo-debuginfo-1.14.4-150300.11.22.1 * Basesystem Module 15-SP6 (noarch) * skopeo-zsh-completion-1.14.4-150300.11.22.1 * skopeo-bash-completion-1.14.4-150300.11.22.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * skopeo-1.14.4-150300.11.22.1 * skopeo-debuginfo-1.14.4-150300.11.22.1 * openSUSE Leap 15.3 (noarch) * skopeo-fish-completion-1.14.4-150300.11.22.1 * skopeo-zsh-completion-1.14.4-150300.11.22.1 * skopeo-bash-completion-1.14.4-150300.11.22.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * skopeo-1.14.4-150300.11.22.1 * skopeo-debuginfo-1.14.4-150300.11.22.1 * openSUSE Leap 15.6 (noarch) * skopeo-fish-completion-1.14.4-150300.11.22.1 * skopeo-zsh-completion-1.14.4-150300.11.22.1 * skopeo-bash-completion-1.14.4-150300.11.22.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22870.html * https://bugzilla.suse.com/show_bug.cgi?id=1238685 [View Less]

1 0

SUSE-SU-2025:1056-1: low: Security update for python3
by OPENSUSE-UPDATES 28 Mar '25

28 Mar '25

# Security update for python3 Announcement ID: SUSE-SU-2025:1056-1 Release Date: 2025-03-28T17:06:49Z Rating: low References: * bsc#1233307 Cross-References: * CVE-2024-11168 CVSS scores: * CVE-2024-11168 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X * CVE-2024-11168 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:… [View More]N * CVE-2024-11168 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X * CVE-2024-11168 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.3 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python3 fixes the following issues: * CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-1056=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1056=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1056=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1056=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1056=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1056=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1056=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1056=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-1056=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1056=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1056=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python3-tk-debuginfo-3.6.15-150300.10.84.1 * python3-idle-3.6.15-150300.10.84.1 * python3-tk-3.6.15-150300.10.84.1 * python3-dbm-debuginfo-3.6.15-150300.10.84.1 * python3-curses-3.6.15-150300.10.84.1 * python3-devel-3.6.15-150300.10.84.1 * python3-tools-3.6.15-150300.10.84.1 * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-doc-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * python3-testsuite-debuginfo-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-curses-debuginfo-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-devel-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 * python3-doc-devhelp-3.6.15-150300.10.84.1 * python3-dbm-3.6.15-150300.10.84.1 * python3-testsuite-3.6.15-150300.10.84.1 * openSUSE Leap 15.3 (x86_64) * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.84.1 * libpython3_6m1_0-32bit-3.6.15-150300.10.84.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_6m1_0-64bit-debuginfo-3.6.15-150300.10.84.1 * libpython3_6m1_0-64bit-3.6.15-150300.10.84.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python3-tk-debuginfo-3.6.15-150300.10.84.1 * python3-idle-3.6.15-150300.10.84.1 * python3-tk-3.6.15-150300.10.84.1 * python3-dbm-debuginfo-3.6.15-150300.10.84.1 * python3-curses-3.6.15-150300.10.84.1 * python3-devel-3.6.15-150300.10.84.1 * python3-tools-3.6.15-150300.10.84.1 * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-doc-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * python3-testsuite-debuginfo-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-curses-debuginfo-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-devel-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 * python3-doc-devhelp-3.6.15-150300.10.84.1 * python3-dbm-3.6.15-150300.10.84.1 * python3-testsuite-3.6.15-150300.10.84.1 * openSUSE Leap 15.6 (x86_64) * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.84.1 * libpython3_6m1_0-32bit-3.6.15-150300.10.84.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-tk-debuginfo-3.6.15-150300.10.84.1 * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-dbm-3.6.15-150300.10.84.1 * python3-idle-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-curses-debuginfo-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * python3-dbm-debuginfo-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-curses-3.6.15-150300.10.84.1 * python3-devel-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 * python3-devel-3.6.15-150300.10.84.1 * python3-tk-3.6.15-150300.10.84.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.84.1 * python3-tools-3.6.15-150300.10.84.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python3-base-3.6.15-150300.10.84.1 * python3-base-debuginfo-3.6.15-150300.10.84.1 * python3-debugsource-3.6.15-150300.10.84.1 * python3-core-debugsource-3.6.15-150300.10.84.1 * libpython3_6m1_0-3.6.15-150300.10.84.1 * python3-3.6.15-150300.10.84.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.84.1 * python3-debuginfo-3.6.15-150300.10.84.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11168.html * https://bugzilla.suse.com/show_bug.cgi?id=1233307 [View Less]

1 0

openSUSE-RU-2025:0107-1: moderate: Recommended update for gvisor-tap-vsock
by maintenance＠opensuse.org 28 Mar '25

28 Mar '25

openSUSE Recommended Update: Recommended update for gvisor-tap-vsock ______________________________________________________________________________ Announcement ID: openSUSE-RU-2025:0107-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gvisor-… [View More]

1 0

SUSE-RU-2025:1048-1: moderate: Recommended update for cpupower
by OPENSUSE-UPDATES 28 Mar '25

28 Mar '25

# Recommended update for cpupower Announcement ID: SUSE-RU-2025:1048-1 Release Date: 2025-03-28T13:04:24Z Rating: moderate References: Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for cpupower fixes the … [View More]

1 0

SUSE-RU-2025:1049-1: moderate: Recommended update for NetworkManager-openvpn
by OPENSUSE-UPDATES 28 Mar '25

28 Mar '25

# Recommended update for NetworkManager-openvpn Announcement ID: SUSE-RU-2025:1049-1 Release Date: 2025-03-28T13:04:41Z Rating: moderate References: * bsc#1237570 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP6 … [View More]An update that has one fix can now be installed. ## Description: This update for NetworkManager-openvpn fixes the following issues: * fix a crash when empty password is provided (bsc#1237570). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1049=1 openSUSE-SLE-15.6-2025-1049=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-1049=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2025-1049=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * NetworkManager-applet-openvpn-1.10.2-150600.4.3.1 * NetworkManager-openvpn-debugsource-1.10.2-150600.4.3.1 * NetworkManager-openvpn-1.10.2-150600.4.3.1 * NetworkManager-applet-openvpn-debuginfo-1.10.2-150600.4.3.1 * NetworkManager-openvpn-debuginfo-1.10.2-150600.4.3.1 * openSUSE Leap 15.6 (noarch) * NetworkManager-openvpn-lang-1.10.2-150600.4.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x) * NetworkManager-openvpn-1.10.2-150600.4.3.1 * NetworkManager-openvpn-debuginfo-1.10.2-150600.4.3.1 * NetworkManager-openvpn-debugsource-1.10.2-150600.4.3.1 * SUSE Package Hub 15 15-SP6 (noarch) * NetworkManager-openvpn-lang-1.10.2-150600.4.3.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * NetworkManager-applet-openvpn-1.10.2-150600.4.3.1 * NetworkManager-openvpn-debugsource-1.10.2-150600.4.3.1 * NetworkManager-openvpn-1.10.2-150600.4.3.1 * NetworkManager-applet-openvpn-debuginfo-1.10.2-150600.4.3.1 * NetworkManager-openvpn-debuginfo-1.10.2-150600.4.3.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (noarch) * NetworkManager-openvpn-lang-1.10.2-150600.4.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1237570 [View Less]

1 0

SUSE-RU-2025:1050-1: moderate: Recommended update for csp-billing-adapter-amazon
by OPENSUSE-UPDATES 28 Mar '25

28 Mar '25

# Recommended update for csp-billing-adapter-amazon Announcement ID: SUSE-RU-2025:1050-1 Release Date: 2025-03-28T13:26:15Z Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux … [View More]

1 0

SUSE-SU-2025:1051-1: important: Security update for erlang26
by OPENSUSE-UPDATES 28 Mar '25

28 Mar '25

# Security update for erlang26 Announcement ID: SUSE-SU-2025:1051-1 Release Date: 2025-03-28T14:50:28Z Rating: important References: * bsc#1237467 Cross-References: * CVE-2025-26618 CVSS scores: * CVE-2025-26618 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-26618 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-26618 ( NVD ): 7.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/… [View More]E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for erlang26 fixes the following issues: * CVE-2025-26618: Fixed incorrect verification of SSH SFTP packet size in Erlang OTP (bsc#1237467) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-1051=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1051=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-1051=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * erlang26-debugsource-26.2.1-150300.7.8.1 * erlang26-26.2.1-150300.7.8.1 * erlang26-debugger-26.2.1-150300.7.8.1 * erlang26-dialyzer-debuginfo-26.2.1-150300.7.8.1 * erlang26-epmd-26.2.1-150300.7.8.1 * erlang26-et-src-26.2.1-150300.7.8.1 * erlang26-et-26.2.1-150300.7.8.1 * erlang26-doc-26.2.1-150300.7.8.1 * erlang26-src-26.2.1-150300.7.8.1 * erlang26-observer-26.2.1-150300.7.8.1 * erlang26-wx-debuginfo-26.2.1-150300.7.8.1 * erlang26-dialyzer-src-26.2.1-150300.7.8.1 * erlang26-diameter-26.2.1-150300.7.8.1 * erlang26-diameter-src-26.2.1-150300.7.8.1 * erlang26-dialyzer-26.2.1-150300.7.8.1 * erlang26-observer-src-26.2.1-150300.7.8.1 * erlang26-reltool-src-26.2.1-150300.7.8.1 * erlang26-jinterface-26.2.1-150300.7.8.1 * erlang26-wx-src-26.2.1-150300.7.8.1 * erlang26-epmd-debuginfo-26.2.1-150300.7.8.1 * erlang26-jinterface-src-26.2.1-150300.7.8.1 * erlang26-debuginfo-26.2.1-150300.7.8.1 * erlang26-wx-26.2.1-150300.7.8.1 * erlang26-debugger-src-26.2.1-150300.7.8.1 * erlang26-reltool-26.2.1-150300.7.8.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * erlang26-debugsource-26.2.1-150300.7.8.1 * erlang26-26.2.1-150300.7.8.1 * erlang26-debugger-26.2.1-150300.7.8.1 * erlang26-dialyzer-debuginfo-26.2.1-150300.7.8.1 * erlang26-epmd-26.2.1-150300.7.8.1 * erlang26-et-src-26.2.1-150300.7.8.1 * erlang26-et-26.2.1-150300.7.8.1 * erlang26-doc-26.2.1-150300.7.8.1 * erlang26-src-26.2.1-150300.7.8.1 * erlang26-observer-26.2.1-150300.7.8.1 * erlang26-wx-debuginfo-26.2.1-150300.7.8.1 * erlang26-dialyzer-src-26.2.1-150300.7.8.1 * erlang26-diameter-26.2.1-150300.7.8.1 * erlang26-diameter-src-26.2.1-150300.7.8.1 * erlang26-dialyzer-26.2.1-150300.7.8.1 * erlang26-observer-src-26.2.1-150300.7.8.1 * erlang26-reltool-src-26.2.1-150300.7.8.1 * erlang26-jinterface-26.2.1-150300.7.8.1 * erlang26-wx-src-26.2.1-150300.7.8.1 * erlang26-epmd-debuginfo-26.2.1-150300.7.8.1 * erlang26-jinterface-src-26.2.1-150300.7.8.1 * erlang26-debuginfo-26.2.1-150300.7.8.1 * erlang26-wx-26.2.1-150300.7.8.1 * erlang26-debugger-src-26.2.1-150300.7.8.1 * erlang26-reltool-26.2.1-150300.7.8.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * erlang26-epmd-debuginfo-26.2.1-150300.7.8.1 * erlang26-debugsource-26.2.1-150300.7.8.1 * erlang26-26.2.1-150300.7.8.1 * erlang26-epmd-26.2.1-150300.7.8.1 * erlang26-debuginfo-26.2.1-150300.7.8.1 ## References: * https://www.suse.com/security/cve/CVE-2025-26618.html * https://bugzilla.suse.com/show_bug.cgi?id=1237467 [View Less]

1 0

SUSE-SU-2025:1052-1: moderate: Security update for govulncheck-vulndb
by OPENSUSE-UPDATES 28 Mar '25

28 Mar '25

# Security update for govulncheck-vulndb Announcement ID: SUSE-SU-2025:1052-1 Release Date: 2025-03-28T15:49:36Z Rating: moderate References: * jsc#PED-11136 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that contains one feature can now be installed. ## … [View More]

1 0

SUSE-RU-2025:1042-1: moderate: Recommended update for hawk2
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Recommended update for hawk2 Announcement ID: SUSE-RU-2025:1042-1 Release Date: 2025-03-27T16:27:28Z Rating: moderate References: * bsc#1182162 * bsc#1182164 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise High … [View More]Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for hawk2 fixes the following issues: * Update to version 2.6.6+git.1742310530.bfcd0e2c: * Dev: proof code from injections (bsc#1182162,bsc#1182164) * Fix: enable colocation linking * Dev: make sprockets-4.2 compatible * Dev: enable rails-8.0 * Test: test_check_cluster_configuration: relax required resource options ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2025-1042=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1042=1 * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2025-1042=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2025-1042=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2025-1042=1 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * hawk2-debugsource-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-debuginfo-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * hawk2-debugsource-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-debuginfo-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * hawk2-debugsource-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-debuginfo-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * hawk2-debugsource-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-debuginfo-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * hawk2-debugsource-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 * hawk2-debuginfo-2.6.6+git.1742310530.bfcd0e2c-150000.3.59.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1182162 * https://bugzilla.suse.com/show_bug.cgi?id=1182164 [View Less]

1 0

SUSE-RU-2025:1044-1: moderate: Recommended update for SAPHanaSR-angi
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Recommended update for SAPHanaSR-angi Announcement ID: SUSE-RU-2025:1044-1 Release Date: 2025-03-27T17:38:58Z Rating: moderate References: * bsc#1233972 * bsc#1237473 Affected Products: * openSUSE Leap 15.4 * SAP Applications Module 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that has two fixes can now be installed. ## Description: This update for SAPHanaSR-angi fixes the following issues: * Version update v1.2.10 * enhance … [View More]

1 0

SUSE-RU-2025:1045-1: moderate: Recommended update for SAPHanaSR-angi
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Recommended update for SAPHanaSR-angi Announcement ID: SUSE-RU-2025:1045-1 Release Date: 2025-03-27T17:45:43Z Rating: moderate References: * bsc#1233972 * bsc#1237473 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SAP Applications Module 15-SP5 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed.… [View More]

1 0

SUSE-RU-2025:1046-1: moderate: Recommended update for gettext-runtime
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Recommended update for gettext-runtime Announcement ID: SUSE-RU-2025:1046-1 Release Date: 2025-03-27T17:51:35Z Rating: moderate References: * bsc#1227316 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: … [View More] This update for gettext-runtime fixes the following issue: * Fix crash while handling po files with malformed header and process them properly (bsc#1227316). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1046=1 openSUSE-SLE-15.6-2025-1046=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1046=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * gettext-runtime-debuginfo-0.21.1-150600.3.3.2 * libtextstyle0-debuginfo-0.21.1-150600.3.3.2 * gettext-runtime-mini-0.21.1-150600.3.3.2 * gettext-tools-mini-0.21.1-150600.3.3.2 * gettext-runtime-mini-debuginfo-0.21.1-150600.3.3.2 * gettext-tools-0.21.1-150600.3.3.2 * gettext-runtime-mini-debugsource-0.21.1-150600.3.3.2 * gettext-tools-mini-debuginfo-0.21.1-150600.3.3.2 * gettext-java-0.21.1-150600.3.3.2 * gettext-runtime-0.21.1-150600.3.3.2 * libtextstyle-devel-0.21.1-150600.3.3.2 * gettext-runtime-debugsource-0.21.1-150600.3.3.2 * gettext-csharp-0.21.1-150600.3.3.2 * gettext-tools-debuginfo-0.21.1-150600.3.3.2 * libtextstyle0-0.21.1-150600.3.3.2 * openSUSE Leap 15.6 (x86_64) * libtextstyle0-32bit-0.21.1-150600.3.3.2 * gettext-runtime-32bit-0.21.1-150600.3.3.2 * gettext-runtime-32bit-debuginfo-0.21.1-150600.3.3.2 * libtextstyle0-32bit-debuginfo-0.21.1-150600.3.3.2 * openSUSE Leap 15.6 (noarch) * gettext-runtime-mini-tools-doc-0.21.1-150600.3.3.2 * gettext-runtime-tools-doc-0.21.1-150600.3.3.2 * openSUSE Leap 15.6 (aarch64_ilp32) * gettext-runtime-64bit-debuginfo-0.21.1-150600.3.3.2 * libtextstyle0-64bit-debuginfo-0.21.1-150600.3.3.2 * libtextstyle0-64bit-0.21.1-150600.3.3.2 * gettext-runtime-64bit-0.21.1-150600.3.3.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gettext-runtime-debuginfo-0.21.1-150600.3.3.2 * libtextstyle0-debuginfo-0.21.1-150600.3.3.2 * gettext-tools-0.21.1-150600.3.3.2 * gettext-runtime-0.21.1-150600.3.3.2 * gettext-runtime-debugsource-0.21.1-150600.3.3.2 * gettext-tools-debuginfo-0.21.1-150600.3.3.2 * libtextstyle0-0.21.1-150600.3.3.2 * Basesystem Module 15-SP6 (x86_64) * libtextstyle0-32bit-0.21.1-150600.3.3.2 * gettext-runtime-32bit-0.21.1-150600.3.3.2 * gettext-runtime-32bit-debuginfo-0.21.1-150600.3.3.2 * libtextstyle0-32bit-debuginfo-0.21.1-150600.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1227316 [View Less]

1 0

SUSE-RU-2025:1047-1: moderate: Recommended update for branding-SLE
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Recommended update for branding-SLE Announcement ID: SUSE-RU-2025:1047-1 Release Date: 2025-03-27T17:56:45Z Rating: moderate References: * bsc#1236818 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix … [View More]

1 0

SUSE-RU-2025:1035-1: moderate: Recommended update for suse-build-key
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Recommended update for suse-build-key Announcement ID: SUSE-RU-2025:1035-1 Release Date: 2025-03-27T09:35:02Z Rating: moderate References: * bsc#1236779 * bsc#1237294 * jsc#PED-12321 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High … [View More]Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has two fixes can now be installed. ## Description: This update for suse-build-key fixes the following issues: * Changed and extented the SUSE Linux Enterprise 15 and 16 signing keys to use SHA256 GPG UIDs instead of SHA1. (bsc#1237294 bsc#1236779 jsc#PED-12321) * gpg-pubkey-3fa1d6ce-67c856ee.asc to gpg-pubkey-09d9ea69-67c857f3.asc * gpg-pubkey-09d9ea69-645b99ce.asc to gpg-pubkey-3fa1d6ce-63c9481c.asc * suse_ptf_key_2023.asc, suse_ptf_key.asc: adjusted ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1035=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1035=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1035=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1035=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1035=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1035=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1035=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1035=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1035=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1035=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1035=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1035=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1035=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1035=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1035=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1035=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1035=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1035=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-1035=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-1035=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1035=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-1035=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-1035=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1035=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1035=1 ## Package List: * openSUSE Leap 15.6 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * suse-build-key-12.0-150000.8.58.1 * Basesystem Module 15-SP6 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Manager Proxy 4.3 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Manager Server 4.3 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Enterprise Storage 7.1 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * suse-build-key-12.0-150000.8.58.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * suse-build-key-12.0-150000.8.58.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1236779 * https://bugzilla.suse.com/show_bug.cgi?id=1237294 * https://jira.suse.com/browse/PED-12321 [View Less]

1 0

SUSE-SU-2025:1036-1: important: Security update for podman
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Security update for podman Announcement ID: SUSE-SU-2025:1036-1 Release Date: 2025-03-27T09:43:51Z Rating: important References: * bsc#1239330 Cross-References: * CVE-2024-6104 * CVE-2025-22869 * CVE-2025-27144 CVSS scores: * CVE-2024-6104 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2024-6104 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/… [View More]SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-27144 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-1036=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1036=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1036=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1036=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-1036=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-1036=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1036=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1036=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * podman-remote-debuginfo-4.9.5-150300.9.46.1 * podman-remote-4.9.5-150300.9.46.1 * podman-4.9.5-150300.9.46.1 * podmansh-4.9.5-150300.9.46.1 * podman-debuginfo-4.9.5-150300.9.46.1 * openSUSE Leap 15.3 (noarch) * podman-docker-4.9.5-150300.9.46.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * podman-remote-debuginfo-4.9.5-150300.9.46.1 * podman-4.9.5-150300.9.46.1 * podman-remote-4.9.5-150300.9.46.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * podman-remote-debuginfo-4.9.5-150300.9.46.1 * podman-4.9.5-150300.9.46.1 * podman-remote-4.9.5-150300.9.46.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * podman-remote-debuginfo-4.9.5-150300.9.46.1 * podman-4.9.5-150300.9.46.1 * podman-remote-4.9.5-150300.9.46.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * podman-remote-debuginfo-4.9.5-150300.9.46.1 * podman-4.9.5-150300.9.46.1 * podman-debuginfo-4.9.5-150300.9.46.1 * podman-remote-4.9.5-150300.9.46.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * podman-remote-debuginfo-4.9.5-150300.9.46.1 * podman-4.9.5-150300.9.46.1 * podman-remote-4.9.5-150300.9.46.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * podman-remote-4.9.5-150300.9.46.1 * podman-4.9.5-150300.9.46.1 * podman-debuginfo-4.9.5-150300.9.46.1 * podman-remote-debuginfo-4.9.5-150300.9.46.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * podman-remote-4.9.5-150300.9.46.1 * podman-4.9.5-150300.9.46.1 * podman-debuginfo-4.9.5-150300.9.46.1 * podman-remote-debuginfo-4.9.5-150300.9.46.1 ## References: * https://www.suse.com/security/cve/CVE-2024-6104.html * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-27144.html * https://bugzilla.suse.com/show_bug.cgi?id=1239330 [View Less]

1 0

SUSE-SU-2025:1037-1: important: Security update for podman
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Security update for podman Announcement ID: SUSE-SU-2025:1037-1 Release Date: 2025-03-27T09:44:18Z Rating: important References: * bsc#1239330 Cross-References: * CVE-2024-6104 * CVE-2025-22869 * CVE-2025-27144 CVSS scores: * CVE-2024-6104 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2024-6104 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/… [View More]SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-27144 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves three vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1037=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1037=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1037=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1037=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1037=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1037=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1037=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1037=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1037=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.44.1 * podman-4.9.5-150400.4.44.1 * podman-remote-debuginfo-4.9.5-150400.4.44.1 * podman-remote-4.9.5-150400.4.44.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.44.1 * podman-4.9.5-150400.4.44.1 * podman-remote-debuginfo-4.9.5-150400.4.44.1 * podman-remote-4.9.5-150400.4.44.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * podman-debuginfo-4.9.5-150400.4.44.1 * podman-4.9.5-150400.4.44.1 * podman-remote-debuginfo-4.9.5-150400.4.44.1 * podman-remote-4.9.5-150400.4.44.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.44.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * podman-debuginfo-4.9.5-150400.4.44.1 * podman-4.9.5-150400.4.44.1 * podman-remote-debuginfo-4.9.5-150400.4.44.1 * podman-remote-4.9.5-150400.4.44.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.44.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150400.4.44.1 * podman-4.9.5-150400.4.44.1 * podman-remote-debuginfo-4.9.5-150400.4.44.1 * podman-remote-4.9.5-150400.4.44.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * podman-docker-4.9.5-150400.4.44.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * podman-debuginfo-4.9.5-150400.4.44.1 * podman-4.9.5-150400.4.44.1 * podman-remote-debuginfo-4.9.5-150400.4.44.1 * podman-remote-4.9.5-150400.4.44.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.44.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * podman-4.9.5-150400.4.44.1 * podman-remote-debuginfo-4.9.5-150400.4.44.1 * podmansh-4.9.5-150400.4.44.1 * podman-debuginfo-4.9.5-150400.4.44.1 * podman-remote-4.9.5-150400.4.44.1 * openSUSE Leap 15.4 (noarch) * podman-docker-4.9.5-150400.4.44.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.44.1 * podman-4.9.5-150400.4.44.1 * podman-remote-debuginfo-4.9.5-150400.4.44.1 * podman-remote-4.9.5-150400.4.44.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.44.1 * podman-4.9.5-150400.4.44.1 * podman-remote-debuginfo-4.9.5-150400.4.44.1 * podman-remote-4.9.5-150400.4.44.1 ## References: * https://www.suse.com/security/cve/CVE-2024-6104.html * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-27144.html * https://bugzilla.suse.com/show_bug.cgi?id=1239330 [View Less]

1 0

SUSE-SU-2025:1038-1: important: Security update for podman
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Security update for podman Announcement ID: SUSE-SU-2025:1038-1 Release Date: 2025-03-27T09:44:52Z Rating: important References: * bsc#1239330 Cross-References: * CVE-2024-6104 * CVE-2025-22869 * CVE-2025-27144 CVSS scores: * CVE-2024-6104 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2024-6104 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/… [View More]SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-27144 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-1038=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1038=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1038=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2025-1038=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1038=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1038=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1038=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1038=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * podman-debuginfo-4.9.5-150500.3.40.1 * podman-4.9.5-150500.3.40.1 * podman-remote-4.9.5-150500.3.40.1 * podman-remote-debuginfo-4.9.5-150500.3.40.1 * podmansh-4.9.5-150500.3.40.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.40.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.40.1 * podman-4.9.5-150500.3.40.1 * podman-remote-4.9.5-150500.3.40.1 * podman-remote-debuginfo-4.9.5-150500.3.40.1 * podmansh-4.9.5-150500.3.40.1 * openSUSE Leap 15.6 (noarch) * podman-docker-4.9.5-150500.3.40.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.40.1 * podman-4.9.5-150500.3.40.1 * podman-remote-4.9.5-150500.3.40.1 * podman-remote-debuginfo-4.9.5-150500.3.40.1 * podmansh-4.9.5-150500.3.40.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.40.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.40.1 * podman-4.9.5-150500.3.40.1 * podman-remote-4.9.5-150500.3.40.1 * podman-remote-debuginfo-4.9.5-150500.3.40.1 * podmansh-4.9.5-150500.3.40.1 * Containers Module 15-SP6 (noarch) * podman-docker-4.9.5-150500.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * podman-debuginfo-4.9.5-150500.3.40.1 * podman-4.9.5-150500.3.40.1 * podman-remote-4.9.5-150500.3.40.1 * podman-remote-debuginfo-4.9.5-150500.3.40.1 * podmansh-4.9.5-150500.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * podman-debuginfo-4.9.5-150500.3.40.1 * podman-4.9.5-150500.3.40.1 * podman-remote-4.9.5-150500.3.40.1 * podman-remote-debuginfo-4.9.5-150500.3.40.1 * podmansh-4.9.5-150500.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.40.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.40.1 * podman-4.9.5-150500.3.40.1 * podman-remote-4.9.5-150500.3.40.1 * podman-remote-debuginfo-4.9.5-150500.3.40.1 * podmansh-4.9.5-150500.3.40.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * podman-docker-4.9.5-150500.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * podman-debuginfo-4.9.5-150500.3.40.1 * podman-4.9.5-150500.3.40.1 * podman-remote-4.9.5-150500.3.40.1 * podman-remote-debuginfo-4.9.5-150500.3.40.1 * podmansh-4.9.5-150500.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.40.1 ## References: * https://www.suse.com/security/cve/CVE-2024-6104.html * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-27144.html * https://bugzilla.suse.com/show_bug.cgi?id=1239330 [View Less]

1 0

SUSE-RU-2025:1039-1: moderate: Recommended update for csp-billing-adapter
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Recommended update for csp-billing-adapter Announcement ID: SUSE-RU-2025:1039-1 Release Date: 2025-03-27T09:54:25Z Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 … [View More]SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that can now be installed. ## Description: This update for csp-billing-adapter, python311-pluggy fixes the following issues * Update to vrsion 1.3.0 * Add batch metering workflow for SaaS billing * Also ships python311-pluggy without source change. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1039=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1039=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-1039=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2025-1039=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-1039=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2025-1039=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1039=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1039=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1039=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1039=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1039=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1039=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1039=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1039=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * python311-csp-billing-adapter-1.3.0-150400.9.31.1 * csp-billing-adapter-service-1.3.0-150400.9.31.1 * openSUSE Leap 15.6 (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * python311-csp-billing-adapter-1.3.0-150400.9.31.1 * csp-billing-adapter-service-1.3.0-150400.9.31.1 * Public Cloud Module 15-SP4 (noarch) * python311-csp-billing-adapter-1.3.0-150400.9.31.1 * csp-billing-adapter-service-1.3.0-150400.9.31.1 * Public Cloud Module 15-SP5 (noarch) * python311-csp-billing-adapter-1.3.0-150400.9.31.1 * csp-billing-adapter-service-1.3.0-150400.9.31.1 * Public Cloud Module 15-SP6 (noarch) * python311-csp-billing-adapter-1.3.0-150400.9.31.1 * csp-billing-adapter-service-1.3.0-150400.9.31.1 * Python 3 Module 15-SP6 (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-pluggy-1.0.0-150400.14.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-pluggy-1.0.0-150400.14.5.1 [View Less]

1 0

SUSE-RU-2025:1034-1: moderate: Recommended update for python-azure-agent
by OPENSUSE-UPDATES 27 Mar '25

27 Mar '25

# Recommended update for python-azure-agent Announcement ID: SUSE-RU-2025:1034-1 Release Date: 2025-03-27T06:51:23Z Rating: moderate References: * bsc#1235140 Affected Products: * openSUSE Leap 15.6 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High … [View More]Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for python-azure-agent fixes the following issues: * Update to version 2.12.04 (bsc#1235140) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1034=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1034=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1034=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1034=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2025-1034=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-1034=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2025-1034=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-1034=1 ## Package List: * SUSE Linux Enterprise Micro 5.2 (noarch) * python-azure-agent-2.12.0.4-150100.3.47.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * python-azure-agent-2.12.0.4-150100.3.47.1 * openSUSE Leap 15.6 (noarch) * python-azure-agent-config-default-2.12.0.4-150100.3.47.1 * python-azure-agent-config-server-2.12.0.4-150100.3.47.1 * python-azure-agent-config-micro-2.12.0.4-150100.3.47.1 * python-azure-agent-test-2.12.0.4-150100.3.47.1 * python-azure-agent-config-hpc-2.12.0.4-150100.3.47.1 * python-azure-agent-2.12.0.4-150100.3.47.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python-azure-agent-2.12.0.4-150100.3.47.1 * Public Cloud Module 15-SP3 (noarch) * python-azure-agent-config-default-2.12.0.4-150100.3.47.1 * python-azure-agent-config-server-2.12.0.4-150100.3.47.1 * python-azure-agent-config-micro-2.12.0.4-150100.3.47.1 * python-azure-agent-config-hpc-2.12.0.4-150100.3.47.1 * python-azure-agent-2.12.0.4-150100.3.47.1 * Public Cloud Module 15-SP4 (noarch) * python-azure-agent-config-default-2.12.0.4-150100.3.47.1 * python-azure-agent-config-server-2.12.0.4-150100.3.47.1 * python-azure-agent-config-micro-2.12.0.4-150100.3.47.1 * python-azure-agent-config-hpc-2.12.0.4-150100.3.47.1 * python-azure-agent-2.12.0.4-150100.3.47.1 * Public Cloud Module 15-SP5 (noarch) * python-azure-agent-config-default-2.12.0.4-150100.3.47.1 * python-azure-agent-config-server-2.12.0.4-150100.3.47.1 * python-azure-agent-config-micro-2.12.0.4-150100.3.47.1 * python-azure-agent-config-hpc-2.12.0.4-150100.3.47.1 * python-azure-agent-2.12.0.4-150100.3.47.1 * Public Cloud Module 15-SP6 (noarch) * python-azure-agent-config-default-2.12.0.4-150100.3.47.1 * python-azure-agent-config-server-2.12.0.4-150100.3.47.1 * python-azure-agent-config-micro-2.12.0.4-150100.3.47.1 * python-azure-agent-config-hpc-2.12.0.4-150100.3.47.1 * python-azure-agent-2.12.0.4-150100.3.47.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1235140 [View Less]

1 0

SUSE-SU-2025:1028-1: important: Security update for proftpd
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Security update for proftpd Announcement ID: SUSE-SU-2025:1028-1 Release Date: 2025-03-26T12:50:12Z Rating: important References: * bsc#1238141 * bsc#1238143 Cross-References: * CVE-2024-48651 * CVE-2024-57392 CVSS scores: * CVE-2024-48651 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-48651 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-48651 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:… [View More]H/I:N/A:N * CVE-2024-57392 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-57392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-57392 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for proftpd fixes the following issues: * CVE-2024-57392: Fixed null pointer dereference vulnerability by sending a maliciously crafted message (bsc#1238143). * CVE-2024-48651: Fixed supplemental group inheritance granting unintended access to GID 0 (bsc#1238141). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1028=1 openSUSE-SLE-15.6-2025-1028=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-1028=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * proftpd-sqlite-1.3.8b-150600.13.6.1 * proftpd-devel-1.3.8b-150600.13.6.1 * proftpd-radius-debuginfo-1.3.8b-150600.13.6.1 * proftpd-doc-1.3.8b-150600.13.6.1 * proftpd-sqlite-debuginfo-1.3.8b-150600.13.6.1 * proftpd-pgsql-debuginfo-1.3.8b-150600.13.6.1 * proftpd-pgsql-1.3.8b-150600.13.6.1 * proftpd-debugsource-1.3.8b-150600.13.6.1 * proftpd-ldap-debuginfo-1.3.8b-150600.13.6.1 * proftpd-mysql-1.3.8b-150600.13.6.1 * proftpd-mysql-debuginfo-1.3.8b-150600.13.6.1 * proftpd-ldap-1.3.8b-150600.13.6.1 * proftpd-1.3.8b-150600.13.6.1 * proftpd-radius-1.3.8b-150600.13.6.1 * proftpd-debuginfo-1.3.8b-150600.13.6.1 * openSUSE Leap 15.6 (noarch) * proftpd-lang-1.3.8b-150600.13.6.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * proftpd-sqlite-1.3.8b-150600.13.6.1 * proftpd-devel-1.3.8b-150600.13.6.1 * proftpd-radius-debuginfo-1.3.8b-150600.13.6.1 * proftpd-doc-1.3.8b-150600.13.6.1 * proftpd-sqlite-debuginfo-1.3.8b-150600.13.6.1 * proftpd-pgsql-debuginfo-1.3.8b-150600.13.6.1 * proftpd-pgsql-1.3.8b-150600.13.6.1 * proftpd-debugsource-1.3.8b-150600.13.6.1 * proftpd-ldap-debuginfo-1.3.8b-150600.13.6.1 * proftpd-mysql-1.3.8b-150600.13.6.1 * proftpd-mysql-debuginfo-1.3.8b-150600.13.6.1 * proftpd-ldap-1.3.8b-150600.13.6.1 * proftpd-1.3.8b-150600.13.6.1 * proftpd-radius-1.3.8b-150600.13.6.1 * proftpd-debuginfo-1.3.8b-150600.13.6.1 * Server Applications Module 15-SP6 (noarch) * proftpd-lang-1.3.8b-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-48651.html * https://www.suse.com/security/cve/CVE-2024-57392.html * https://bugzilla.suse.com/show_bug.cgi?id=1238141 * https://bugzilla.suse.com/show_bug.cgi?id=1238143 [View Less]

1 0

SUSE-SU-2025:1029-1: important: Security update for ed25519-java
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Security update for ed25519-java Announcement ID: SUSE-SU-2025:1029-1 Release Date: 2025-03-26T13:11:52Z Rating: important References: * bsc#1239551 Cross-References: * CVE-2020-36843 CVSS scores: * CVE-2020-36843 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2020-36843 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2020-36843 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Affected … [View More]Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for ed25519-java fixes the following issues: * CVE-2020-36843: Fixed no check performed on scalar to avoid signature malleability (bsc#1239551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1029=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-1029=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1029=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1029=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1029=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1029=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1029=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1029=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1029=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1029=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1029=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1029=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1029=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-1029=1 ## Package List: * openSUSE Leap 15.6 (noarch) * ed25519-java-javadoc-0.3.0-150200.5.9.1 * ed25519-java-0.3.0-150200.5.9.1 * Development Tools Module 15-SP6 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Enterprise Storage 7.1 (noarch) * ed25519-java-0.3.0-150200.5.9.1 ## References: * https://www.suse.com/security/cve/CVE-2020-36843.html * https://bugzilla.suse.com/show_bug.cgi?id=1239551 [View Less]

1 0

SUSE-RU-2025:1030-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Recommended update for lifecycle-data-sle-module-live-patching Announcement ID: SUSE-RU-2025:1030-1 Release Date: 2025-03-26T13:24:15Z Rating: moderate References: * bsc#1020320 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Live … [View More]Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for lifecycle-data-sle-module-live-patching fixes the following issues: * Added data for 5_14_21-150400_24_147, 5_14_21-150400_24_150, 5_14_21-150500_55_91, 5_14_21-150500_55_94, 5_3_18-150300_59_188, 5_3_18-150300_59_191, 5_3_18-150300_59_195, 6_4_0-150600_23_33, 6_4_0-150600_23_38, 6_4_0-19, 6_4_0-20, +kernel- livepatch-5_14_21-150500_13_79-rt, +kernel-livepatch-6_4_0-10-rt, +kernel- livepatch-6_4_0-11-rt, +kernel-livepatch-6_4_0-150600_10_20-rt, +kernel- livepatch-6_4_0-150600_10_23-rt, +kernel-livepatch-6_4_0-150600_10_26-rt (bsc#1020320) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1030=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2025-1030=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-1030=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2025-1030=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-1030=1 ## Package List: * openSUSE Leap 15.6 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.123.1 * SUSE Linux Enterprise Live Patching 15-SP3 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.123.1 * SUSE Linux Enterprise Live Patching 15-SP4 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.123.1 * SUSE Linux Enterprise Live Patching 15-SP5 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.123.1 * SUSE Linux Enterprise Live Patching 15-SP6 (noarch) * lifecycle-data-sle-module-live-patching-15-150000.4.123.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1020320 [View Less]

1 0

SUSE-SU-2025:1033-1: moderate: Security update for webkit2gtk3
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Security update for webkit2gtk3 Announcement ID: SUSE-SU-2025:1033-1 Release Date: 2025-03-26T15:44:39Z Rating: moderate References: * bsc#1239863 * bsc#1239864 * bsc#1239950 Cross-References: * CVE-2024-44192 * CVE-2024-54467 * CVE-2025-24201 CVSS scores: * CVE-2024-44192 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-44192 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-44192 ( NVD ): … [View More]5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-44192 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-54467 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-54467 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-54467 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-54467 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2025-24201 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2025-24201 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2025-24201 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 An update that solves three vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: * CVE-2024-44192: Fixed unexpected process crash due to processing maliciously crafted web content (bsc#1239863) * CVE-2024-54467: Fixed data exilfration cross-origin due to a cookie management issue via a malicious website (bsc#1239864) Other fixes: \- Update to version 2.48.0 \+ Move tiles rendering to worker threads when rendering with the GPU. \+ Fix preserve-3D intersection rendering. \+ Added new function for creating Promise objects to JavaScripotCore GLib API. \+ The MediaRecorder backend gained WebM support (requires at least GStreamer 1.24.9) and audio bitrate configuration support. \+ Fix invalid DPI-aware font size conversion. \+ Bring back support for OpenType-SVG fonts using Skia SVG module. \+ Add metadata (title and creation/modification date) to the PDF document generated for printing. \+ Propagate the font’s computed locale to HarfBuzz. \+ The GPU process build is now enabled for WebGL, but the web process is still used by default. The runtime flag UseGPUProcessForWebGL can be used to use the GPU process for WebGL. \- Add gcc13-PIE to BuildRequires (bsc#1239950). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1033=1 ## Package List: * openSUSE Leap 15.4 (noarch) * WebKitGTK-6.0-lang-2.48.0-150400.4.112.1 * WebKitGTK-4.0-lang-2.48.0-150400.4.112.1 * WebKitGTK-4.1-lang-2.48.0-150400.4.112.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-WebKit2-4_1-2.48.0-150400.4.112.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.48.0-150400.4.112.1 * typelib-1_0-WebKit-6_0-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_1-0-2.48.0-150400.4.112.1 * typelib-1_0-JavaScriptCore-6_0-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.48.0-150400.4.112.1 * webkit2gtk4-minibrowser-2.48.0-150400.4.112.1 * libjavascriptcoregtk-6_0-1-2.48.0-150400.4.112.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.48.0-150400.4.112.1 * libwebkit2gtk-4_0-37-debuginfo-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.48.0-150400.4.112.1 * webkit2gtk3-soup2-debugsource-2.48.0-150400.4.112.1 * webkit2gtk3-soup2-devel-2.48.0-150400.4.112.1 * typelib-1_0-JavaScriptCore-4_1-2.48.0-150400.4.112.1 * webkit-jsc-6.0-2.48.0-150400.4.112.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.48.0-150400.4.112.1 * webkit2gtk3-minibrowser-2.48.0-150400.4.112.1 * webkit-jsc-4-debuginfo-2.48.0-150400.4.112.1 * webkit-jsc-4-2.48.0-150400.4.112.1 * webkit-jsc-4.1-debuginfo-2.48.0-150400.4.112.1 * webkit-jsc-6.0-debuginfo-2.48.0-150400.4.112.1 * typelib-1_0-JavaScriptCore-4_0-2.48.0-150400.4.112.1 * webkit2gtk-4_0-injected-bundles-2.48.0-150400.4.112.1 * webkit2gtk3-soup2-minibrowser-2.48.0-150400.4.112.1 * libwebkitgtk-6_0-4-debuginfo-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_0-18-2.48.0-150400.4.112.1 * webkit2gtk4-debugsource-2.48.0-150400.4.112.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.48.0-150400.4.112.1 * webkit2gtk4-minibrowser-debuginfo-2.48.0-150400.4.112.1 * typelib-1_0-WebKit2WebExtension-4_1-2.48.0-150400.4.112.1 * webkit2gtk3-debugsource-2.48.0-150400.4.112.1 * webkit-jsc-4.1-2.48.0-150400.4.112.1 * webkit2gtk3-soup2-minibrowser-debuginfo-2.48.0-150400.4.112.1 * webkit2gtk3-devel-2.48.0-150400.4.112.1 * webkitgtk-6_0-injected-bundles-2.48.0-150400.4.112.1 * libwebkit2gtk-4_1-0-debuginfo-2.48.0-150400.4.112.1 * webkit2gtk-4_1-injected-bundles-2.48.0-150400.4.112.1 * webkit2gtk3-minibrowser-debuginfo-2.48.0-150400.4.112.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.48.0-150400.4.112.1 * typelib-1_0-WebKit2WebExtension-4_0-2.48.0-150400.4.112.1 * webkit2gtk4-devel-2.48.0-150400.4.112.1 * libwebkit2gtk-4_1-0-2.48.0-150400.4.112.1 * libwebkit2gtk-4_0-37-2.48.0-150400.4.112.1 * typelib-1_0-WebKit2-4_0-2.48.0-150400.4.112.1 * libwebkitgtk-6_0-4-2.48.0-150400.4.112.1 * openSUSE Leap 15.4 (x86_64) * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.48.0-150400.4.112.1 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.48.0-150400.4.112.1 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.48.0-150400.4.112.1 * libwebkit2gtk-4_1-0-32bit-2.48.0-150400.4.112.1 * libwebkit2gtk-4_0-37-32bit-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_0-18-32bit-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_1-0-32bit-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.48.0-150400.4.112.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libwebkit2gtk-4_1-0-64bit-2.48.0-150400.4.112.1 * libwebkit2gtk-4_0-37-64bit-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.48.0-150400.4.112.1 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_1-0-64bit-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.48.0-150400.4.112.1 * libjavascriptcoregtk-4_0-18-64bit-2.48.0-150400.4.112.1 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.48.0-150400.4.112.1 ## References: * https://www.suse.com/security/cve/CVE-2024-44192.html * https://www.suse.com/security/cve/CVE-2024-54467.html * https://www.suse.com/security/cve/CVE-2025-24201.html * https://bugzilla.suse.com/show_bug.cgi?id=1239863 * https://bugzilla.suse.com/show_bug.cgi?id=1239864 * https://bugzilla.suse.com/show_bug.cgi?id=1239950 [View Less]

1 0

SUSE-SU-2025:1017-1: important: Security update for buildah
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Security update for buildah Announcement ID: SUSE-SU-2025:1017-1 Release Date: 2025-03-26T09:02:56Z Rating: important References: * bsc#1239339 Cross-References: * CVE-2025-22869 * CVE-2025-27144 CVSS scores: * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/… [View More]VA:H/SC:N/SI:N/SA:N * CVE-2025-27144 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for buildah fixes the following issues: * CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239339). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-1017=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1017=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1017=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1017=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-1017=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.35.5-150300.8.39.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * buildah-1.35.5-150300.8.39.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150300.8.39.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * buildah-1.35.5-150300.8.39.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * buildah-1.35.5-150300.8.39.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-27144.html * https://bugzilla.suse.com/show_bug.cgi?id=1239339 [View Less]

1 0

SUSE-SU-2025:1018-1: important: Security update for buildah
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Security update for buildah Announcement ID: SUSE-SU-2025:1018-1 Release Date: 2025-03-26T09:03:18Z Rating: important References: * bsc#1239339 Cross-References: * CVE-2025-22869 * CVE-2025-27144 CVSS scores: * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/… [View More]VA:H/SC:N/SI:N/SA:N * CVE-2025-27144 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for buildah fixes the following issues: * CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239339). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-1018=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1018=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2025-1018=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1018=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1018=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1018=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1018=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.35.5-150500.3.34.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.34.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * buildah-1.35.5-150500.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * buildah-1.35.5-150500.3.34.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * buildah-1.35.5-150500.3.34.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-27144.html * https://bugzilla.suse.com/show_bug.cgi?id=1239339 [View Less]

1 0

SUSE-SU-2025:1019-1: important: Security update for azure-cli-core
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Security update for azure-cli-core Announcement ID: SUSE-SU-2025:1019-1 Release Date: 2025-03-26T10:27:44Z Rating: important References: * bsc#1239460 Cross-References: * CVE-2025-24049 CVSS scores: * CVE-2025-24049 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-24049 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-24049 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected … [View More]Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for azure-cli-core fixes the following issues: * CVE-2025-24049: Fixed improper neutralization of special elements used in a command allows an unauthorized attacker to elevate privileges locally (bsc#1239460). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1019=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1019=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-1019=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2025-1019=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-1019=1 ## Package List: * openSUSE Leap 15.4 (noarch) * azure-cli-core-2.58.0-150400.14.6.1 * openSUSE Leap 15.6 (noarch) * azure-cli-core-2.58.0-150400.14.6.1 * Public Cloud Module 15-SP4 (noarch) * azure-cli-core-2.58.0-150400.14.6.1 * Public Cloud Module 15-SP5 (noarch) * azure-cli-core-2.58.0-150400.14.6.1 * Public Cloud Module 15-SP6 (noarch) * azure-cli-core-2.58.0-150400.14.6.1 ## References: * https://www.suse.com/security/cve/CVE-2025-24049.html * https://bugzilla.suse.com/show_bug.cgi?id=1239460 [View Less]

1 0

SUSE-RU-2025:1021-1: moderate: Recommended update for HANA-Firewall
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Recommended update for HANA-Firewall Announcement ID: SUSE-RU-2025:1021-1 Release Date: 2025-03-26T10:57:57Z Rating: moderate References: * bsc#1239943 Affected Products: * openSUSE Leap 15.6 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 … [View More]

1 0

SUSE-SU-2025:1022-1: important: Security update for apache-commons-vfs2
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Security update for apache-commons-vfs2 Announcement ID: SUSE-SU-2025:1022-1 Release Date: 2025-03-26T11:28:38Z Rating: important References: * bsc#1239973 * bsc#1239974 Cross-References: * CVE-2025-27553 * CVE-2025-30474 CVSS scores: * CVE-2025-27553 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-27553 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2025-30474 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N … [View More]

1 0

SUSE-SU-2025:1024-1: important: Security update for tomcat10
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Security update for tomcat10 Announcement ID: SUSE-SU-2025:1024-1 Release Date: 2025-03-26T11:29:29Z Rating: important References: * bsc#1239302 * bsc#1239676 Cross-References: * CVE-2024-56337 * CVE-2025-24813 CVSS scores: * CVE-2024-56337 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56337 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-24813 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:… [View More]N/SI:N/SA:N * CVE-2025-24813 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-24813 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-24813 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for tomcat10 fixes the following issues: * CVE-2025-24813: Fixed potential RCE and/or information disclosure/corruption with partial PUT (bsc#1239302) Other fixes: * Update to Tomcat 10.1.39 * Fixes: * launch with java 17 (bsc#1239676) * Catalina * Fix: 69602: Fix regression in releases from 12-2024 that were too strict and rejected weak etags in the If-Range header with a 400 response. Instead will consider it as a failed match since strong etags are required for If-Range. (remm) * Fix: When looking up class loader resources by resource name, the resource name should not start with '/'. If the resource name does start with '/', Tomcat is lenient and looks it up as if the '/' was not present. When the web application class loader was configured with external repositories and names starting with '/' were used for lookups, it was possible that cached 'not found' results could effectively hide lookup results using the correct resource name. (markt) * Fix: Enable the JNDIRealm to validate credentials provided to HttpServletRequest.login(String username, String password) when the realm is configured to use GSSAPI authentication. (markt) * Fix: Fix a bug in the JRE compatibility detection that incorrectly identified Java 19 and Java 20 as supporting Java 21 features. (markt) * Fix: Improve the checks for exposure to and protection against CVE-2024-56337 so that reflection is not used unless required. The checks for whether the file system is case sensitive or not have been removed. (markt) * Add: Add support for logging the connection ID (as returned by ServletRequest.getServletConnection().getConnectionId()) with the AccessLogValve and ExtendedAccessLogValve. Based on pull request #814 by Dmole. (markt) * Fix: Avoid scenarios where temporary files used for partial PUT would not be deleted. (remm) * Fix: 69576: Avoid possible failure initializing JreCompat due to uncaught exception introduced for the check for CVE-2024-56337. (remm) * Cluster * Add: 69598: Add detection of service account token changes to the KubernetesMembershipProvider implementation and reload the token if it changes. Based on a patch by Miroslav Jezbera. (markt) * Coyote * Fix: 69575: Avoid using compression if a response is already compressed using compress, deflate or zstd. (remm) * Update: Use Transfer-Encoding for compression rather than Content-Encoding if the client submits a TE header containing gzip. (remm) * Fix: Fix a race condition in the handling of HTTP/2 stream reset that could cause unexpected 500 responses. (markt) * Other * Add: Add makensis as an option for building the Installer for Windows on non-Windows platforms. (rjung/markt) * Update: Update Byte Buddy to 1.17.1. (markt) * Update: Update Checkstyle to 10.21.3. (markt) * Update: Update SpotBugs to 4.9.1. (markt) * Update: Update JSign to 7.1. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations by tak7iji. (markt) * Add: Add org.apache.juli.JsonFormatter to format log as one line JSON documents. (remm) * Update to Tomcat 10.1.35 * Catalina * Update: Add tableName configuration on the DataSourcePropertyStore that may be used by the WebDAV Servlet. (remm) * Update: Improve HTTP If headers processing according to RFC 9110. Based on pull request #796 by Chenjp. (remm/markt) * Update: Allow readOnly attribute configuration on the Resources element and allow configure the readOnly attribute value of the main resources. The attribute value will also be used by the default and WebDAV Servlets. (remm) * Fix: 69285: Optimise the creation of the parameter map for included requests. Based on sample code and test cases provided by John Engebretson. (markt) * Fix: 69527: Avoid rare cases where a cached resource could be set with 0 content length, or could be evicted immediately. (remm) * Fix: Fix possible edge cases (such as HTTP/1.0) with trying to detect requests without body for WebDAV LOCK and PROPFIND. (remm) * Fix: 69528: Add multi-release JAR support for the bloom archiveIndexStrategy of the Resources. (remm) * Fix: Improve checks for WEB-INF and META-INF in the WebDAV servlet. Based on a patch submitted by Chenjp. (remm) * Fix: Remove unused session to client map from CrawlerSessionManagerValve. Submitted by Brian Matzon. (remm) * Add: Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337, the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not. Where one or more web applications are potentially vulnerable to CVE-2024-56337 and the JVM cannot be correctly configured or it cannot be confirmed that the JVM has been correctly configured, prevent the impacted web applications from starting. (markt) * Fix: When using the WebDAV servlet with serveSubpathOnly set to true, ensure that the destination for any requested WebDAV operation is also restricted to the sub-path. (markt) * Fix: Generate an appropriate Allow HTTP header when the Default servlet returns a 405 (method not allowed) response in response to a DELETE request because the target resource cannot be deleted. Pull request #802 provided by Chenjp. (markt) * Code: Refactor creation of RequestDispatcher instances so that the processing of the provided path is consistent with normal request processing. (markt) * Add: Add encodedReverseSolidusHandling and encodedSolidusHandling attributes to Context to provide control over the handling of the path used to created a RequestDispatcher. (markt) * Fix: Handle a potential NullPointerException after an IOException occurs on a non-container thread during asynchronous processing. (markt) * Fix: Enhance lifecycle of temporary files used by partial PUT. (remm) * Coyote * Fix: Don't log warnings for registered HTTP/2 settings that Tomcat does not support. These settings are now silently ignored. (markt) * Fix: Avoid a rare NullPointerException when recycling the Http11InputBuffer. (markt) * Fix: Lower the log level to debug for logging an invalid socket channel when processing poller events for the NIO Connector as this may occur in normal usage. (markt) * Code: Clean-up references to the HTTP/2 stream once request processing has completed to aid GC and reduce the size of the HTTP/2 recycled request and response cache. (markt) * Add: Add a new Connector configuration attribute, encodedReverseSolidusHandling, to control how %5c sequences in URLs are handled. The default behaviour is unchanged (decode) keeping in mind that the allowBackslash attribute determines how the decoded URI is processed. (markt) * Fix: 69545: Improve CRLF skipping for the available method of the ChunkedInputFilter. (remm) * Fix: Improve the performance of repeated calls to getHeader(). Pull request #813 provided by Adwait Kumar Singh. (markt) * Fix: 69559: Ensure that the Java 24 warning regarding the use of sun.misc.Unsafe::invokeCleaner is only reported by the JRE when the code will be used. (markt) * Jasper * Fix: 69508: Correct a regression in the fix for 69382 that broke JSP include actions if both the page attribute and the body contained parameters. Pull request #803 provided by Chenjp. (markt) * Fix: Update the identifier validation in the Expression Language parser to reflect that, as of Java 9, _ is also a Java keyword and may not be used as an identifier. (markt) * Fix: 69521: Update the EL Parser to allow the full range of valid characters in an EL identifier as defined by the Java Language Specification. (markt) * Fix: 69532: Optimise the creation of ExpressionFactory instances. Patch provided by John Engebretson. (markt) * Web applications * Add: Documentation. Expand the description of the security implications of setting mapperContextRootRedirectEnabled and/or mapperDirectoryRedirectEnabled to true. (markt) * Fix: Documentation. Better document the default for the truststoreProvider attribute of a SSLHostConfig element. (markt) * Other * Update: Update to Commons Daemon 1.4.1. (markt) * Update: Update the packaged version of the Tomcat Migration Tool for Jakarta EE to 1.0.9. (markt) * Update: Update the internal fork of Commons Pool to 2.12.1. (markt) * Update: Update Byte Buddy to 1.16.1. (markt) * Update: Update UnboundID to 7.0.2. (markt) * Update: Update Checkstyle to 10.21.2. (markt) * Update: Update SpotBugs to 4.9.0. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Chinese translations by leeyazhou. (markt) * Add: Improvements to Japanese translations by tak7iji. (markt) * Add: Improvements to Japanese translations by tak7iji. (markt) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1024=1 * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2025-1024=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1024=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1024=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1024=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1024=1 ## Package List: * openSUSE Leap 15.6 (noarch) * tomcat10-el-5_0-api-10.1.39-150200.5.36.1 * tomcat10-admin-webapps-10.1.39-150200.5.36.1 * tomcat10-jsp-3_1-api-10.1.39-150200.5.36.1 * tomcat10-jsvc-10.1.39-150200.5.36.1 * tomcat10-servlet-6_0-api-10.1.39-150200.5.36.1 * tomcat10-lib-10.1.39-150200.5.36.1 * tomcat10-embed-10.1.39-150200.5.36.1 * tomcat10-docs-webapp-10.1.39-150200.5.36.1 * tomcat10-10.1.39-150200.5.36.1 * tomcat10-doc-10.1.39-150200.5.36.1 * tomcat10-webapps-10.1.39-150200.5.36.1 * Web and Scripting Module 15-SP6 (noarch) * tomcat10-el-5_0-api-10.1.39-150200.5.36.1 * tomcat10-admin-webapps-10.1.39-150200.5.36.1 * tomcat10-jsp-3_1-api-10.1.39-150200.5.36.1 * tomcat10-servlet-6_0-api-10.1.39-150200.5.36.1 * tomcat10-lib-10.1.39-150200.5.36.1 * tomcat10-10.1.39-150200.5.36.1 * tomcat10-webapps-10.1.39-150200.5.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * tomcat10-el-5_0-api-10.1.39-150200.5.36.1 * tomcat10-admin-webapps-10.1.39-150200.5.36.1 * tomcat10-jsp-3_1-api-10.1.39-150200.5.36.1 * tomcat10-servlet-6_0-api-10.1.39-150200.5.36.1 * tomcat10-lib-10.1.39-150200.5.36.1 * tomcat10-10.1.39-150200.5.36.1 * tomcat10-webapps-10.1.39-150200.5.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * tomcat10-el-5_0-api-10.1.39-150200.5.36.1 * tomcat10-admin-webapps-10.1.39-150200.5.36.1 * tomcat10-jsp-3_1-api-10.1.39-150200.5.36.1 * tomcat10-servlet-6_0-api-10.1.39-150200.5.36.1 * tomcat10-lib-10.1.39-150200.5.36.1 * tomcat10-10.1.39-150200.5.36.1 * tomcat10-webapps-10.1.39-150200.5.36.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * tomcat10-el-5_0-api-10.1.39-150200.5.36.1 * tomcat10-admin-webapps-10.1.39-150200.5.36.1 * tomcat10-jsp-3_1-api-10.1.39-150200.5.36.1 * tomcat10-servlet-6_0-api-10.1.39-150200.5.36.1 * tomcat10-lib-10.1.39-150200.5.36.1 * tomcat10-10.1.39-150200.5.36.1 * tomcat10-webapps-10.1.39-150200.5.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * tomcat10-el-5_0-api-10.1.39-150200.5.36.1 * tomcat10-admin-webapps-10.1.39-150200.5.36.1 * tomcat10-jsp-3_1-api-10.1.39-150200.5.36.1 * tomcat10-servlet-6_0-api-10.1.39-150200.5.36.1 * tomcat10-lib-10.1.39-150200.5.36.1 * tomcat10-10.1.39-150200.5.36.1 * tomcat10-webapps-10.1.39-150200.5.36.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56337.html * https://www.suse.com/security/cve/CVE-2025-24813.html * https://bugzilla.suse.com/show_bug.cgi?id=1239302 * https://bugzilla.suse.com/show_bug.cgi?id=1239676 [View Less]

1 0

SUSE-SU-2025:1025-1: important: Security update for php7
by OPENSUSE-UPDATES 26 Mar '25

26 Mar '25

# Security update for php7 Announcement ID: SUSE-SU-2025:1025-1 Release Date: 2025-03-26T11:30:25Z Rating: important References: * bsc#1239664 * bsc#1239666 * bsc#1239667 * bsc#1239668 * bsc#1239669 * bsc#1239670 Cross-References: * CVE-2024-11235 * CVE-2025-1217 * CVE-2025-1219 * CVE-2025-1734 * CVE-2025-1736 * CVE-2025-1861 CVSS scores: * CVE-2024-11235 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-1217 ( SUSE ): 7.3 CVSS:… [View More]3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-1219 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-1734 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-1736 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-1861 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * Legacy Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves six vulnerabilities can now be installed. ## Description: This update for php7 fixes the following issues: * CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666) * CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664) * CVE-2025-1219: Fixed libxml streams using wrong content-type header when requesting a redirected resource (bsc#1239667) * CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon (bsc#1239668) * CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670) * CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1025=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1025=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2025-1025=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-1025=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1025=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1025=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1025=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1025=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1025=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1025=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * php7-snmp-7.4.33-150400.4.48.1 * php7-zlib-7.4.33-150400.4.48.1 * php7-iconv-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-7.4.33-150400.4.48.1 * php7-opcache-7.4.33-150400.4.48.1 * php7-iconv-7.4.33-150400.4.48.1 * php7-odbc-7.4.33-150400.4.48.1 * php7-mbstring-7.4.33-150400.4.48.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-7.4.33-150400.4.48.1 * php7-readline-debuginfo-7.4.33-150400.4.48.1 * php7-dom-7.4.33-150400.4.48.1 * php7-fpm-7.4.33-150400.4.48.1 * php7-pcntl-debuginfo-7.4.33-150400.4.48.1 * php7-mbstring-debuginfo-7.4.33-150400.4.48.1 * php7-shmop-7.4.33-150400.4.48.1 * php7-tidy-7.4.33-150400.4.48.1 * php7-embed-debuginfo-7.4.33-150400.4.48.1 * php7-pcntl-7.4.33-150400.4.48.1 * php7-bcmath-debuginfo-7.4.33-150400.4.48.1 * php7-calendar-7.4.33-150400.4.48.1 * php7-phar-7.4.33-150400.4.48.1 * php7-posix-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-debugsource-7.4.33-150400.4.48.1 * php7-gmp-7.4.33-150400.4.48.1 * php7-odbc-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debugsource-7.4.33-150400.4.48.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.48.1 * php7-dba-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-7.4.33-150400.4.48.1 * php7-ctype-debuginfo-7.4.33-150400.4.48.1 * php7-sysvsem-7.4.33-150400.4.48.1 * php7-embed-debugsource-7.4.33-150400.4.48.1 * php7-dba-7.4.33-150400.4.48.1 * php7-calendar-debuginfo-7.4.33-150400.4.48.1 * php7-json-7.4.33-150400.4.48.1 * php7-sysvmsg-7.4.33-150400.4.48.1 * php7-bcmath-7.4.33-150400.4.48.1 * php7-dom-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-7.4.33-150400.4.48.1 * php7-mysql-debuginfo-7.4.33-150400.4.48.1 * php7-enchant-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-debuginfo-7.4.33-150400.4.48.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.48.1 * php7-posix-7.4.33-150400.4.48.1 * php7-sqlite-debuginfo-7.4.33-150400.4.48.1 * php7-xmlreader-7.4.33-150400.4.48.1 * php7-enchant-7.4.33-150400.4.48.1 * php7-sockets-7.4.33-150400.4.48.1 * php7-sockets-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.48.1 * php7-debugsource-7.4.33-150400.4.48.1 * php7-zip-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-7.4.33-150400.4.48.1 * php7-pgsql-7.4.33-150400.4.48.1 * php7-sodium-7.4.33-150400.4.48.1 * php7-bz2-7.4.33-150400.4.48.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.48.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.48.1 * apache2-mod_php7-7.4.33-150400.4.48.1 * php7-curl-debuginfo-7.4.33-150400.4.48.1 * php7-json-debuginfo-7.4.33-150400.4.48.1 * php7-ctype-7.4.33-150400.4.48.1 * php7-intl-7.4.33-150400.4.48.1 * php7-xsl-7.4.33-150400.4.48.1 * php7-pgsql-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-7.4.33-150400.4.48.1 * php7-opcache-debuginfo-7.4.33-150400.4.48.1 * php7-7.4.33-150400.4.48.1 * php7-curl-7.4.33-150400.4.48.1 * php7-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.48.1 * php7-intl-debuginfo-7.4.33-150400.4.48.1 * php7-snmp-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-7.4.33-150400.4.48.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.48.1 * php7-test-7.4.33-150400.4.48.1 * php7-soap-debuginfo-7.4.33-150400.4.48.1 * php7-devel-7.4.33-150400.4.48.1 * php7-exif-debuginfo-7.4.33-150400.4.48.1 * php7-sqlite-7.4.33-150400.4.48.1 * php7-phar-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-debuginfo-7.4.33-150400.4.48.1 * php7-embed-7.4.33-150400.4.48.1 * php7-readline-7.4.33-150400.4.48.1 * php7-cli-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-debuginfo-7.4.33-150400.4.48.1 * php7-gd-7.4.33-150400.4.48.1 * php7-xsl-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.48.1 * php7-mysql-7.4.33-150400.4.48.1 * php7-tokenizer-7.4.33-150400.4.48.1 * php7-exif-7.4.33-150400.4.48.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-7.4.33-150400.4.48.1 * php7-cli-7.4.33-150400.4.48.1 * php7-zip-7.4.33-150400.4.48.1 * php7-bz2-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-7.4.33-150400.4.48.1 * php7-gd-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-7.4.33-150400.4.48.1 * php7-shmop-debuginfo-7.4.33-150400.4.48.1 * php7-sodium-debuginfo-7.4.33-150400.4.48.1 * php7-tidy-debuginfo-7.4.33-150400.4.48.1 * php7-soap-7.4.33-150400.4.48.1 * php7-zlib-debuginfo-7.4.33-150400.4.48.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * php7-snmp-7.4.33-150400.4.48.1 * php7-zlib-7.4.33-150400.4.48.1 * php7-iconv-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-7.4.33-150400.4.48.1 * php7-opcache-7.4.33-150400.4.48.1 * php7-iconv-7.4.33-150400.4.48.1 * php7-odbc-7.4.33-150400.4.48.1 * php7-mbstring-7.4.33-150400.4.48.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-7.4.33-150400.4.48.1 * php7-readline-debuginfo-7.4.33-150400.4.48.1 * php7-dom-7.4.33-150400.4.48.1 * php7-fpm-7.4.33-150400.4.48.1 * php7-pcntl-debuginfo-7.4.33-150400.4.48.1 * php7-mbstring-debuginfo-7.4.33-150400.4.48.1 * php7-embed-debuginfo-7.4.33-150400.4.48.1 * php7-shmop-7.4.33-150400.4.48.1 * php7-tidy-7.4.33-150400.4.48.1 * php7-pcntl-7.4.33-150400.4.48.1 * php7-bcmath-debuginfo-7.4.33-150400.4.48.1 * php7-calendar-7.4.33-150400.4.48.1 * php7-phar-7.4.33-150400.4.48.1 * php7-fastcgi-debugsource-7.4.33-150400.4.48.1 * php7-posix-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-7.4.33-150400.4.48.1 * php7-odbc-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debugsource-7.4.33-150400.4.48.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.48.1 * php7-dba-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-7.4.33-150400.4.48.1 * php7-ctype-debuginfo-7.4.33-150400.4.48.1 * php7-sysvsem-7.4.33-150400.4.48.1 * php7-embed-debugsource-7.4.33-150400.4.48.1 * php7-dba-7.4.33-150400.4.48.1 * php7-calendar-debuginfo-7.4.33-150400.4.48.1 * php7-json-7.4.33-150400.4.48.1 * php7-sysvmsg-7.4.33-150400.4.48.1 * php7-bcmath-7.4.33-150400.4.48.1 * php7-dom-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-7.4.33-150400.4.48.1 * php7-mysql-debuginfo-7.4.33-150400.4.48.1 * php7-enchant-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-debuginfo-7.4.33-150400.4.48.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.48.1 * php7-posix-7.4.33-150400.4.48.1 * php7-sqlite-debuginfo-7.4.33-150400.4.48.1 * php7-xmlreader-7.4.33-150400.4.48.1 * php7-enchant-7.4.33-150400.4.48.1 * php7-sockets-7.4.33-150400.4.48.1 * php7-sockets-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.48.1 * php7-debugsource-7.4.33-150400.4.48.1 * php7-zip-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-7.4.33-150400.4.48.1 * php7-pgsql-7.4.33-150400.4.48.1 * php7-sodium-7.4.33-150400.4.48.1 * php7-bz2-7.4.33-150400.4.48.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.48.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.48.1 * apache2-mod_php7-7.4.33-150400.4.48.1 * php7-curl-debuginfo-7.4.33-150400.4.48.1 * php7-json-debuginfo-7.4.33-150400.4.48.1 * php7-ctype-7.4.33-150400.4.48.1 * php7-intl-7.4.33-150400.4.48.1 * php7-xsl-7.4.33-150400.4.48.1 * php7-pgsql-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-7.4.33-150400.4.48.1 * php7-opcache-debuginfo-7.4.33-150400.4.48.1 * php7-7.4.33-150400.4.48.1 * php7-curl-7.4.33-150400.4.48.1 * php7-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.48.1 * php7-intl-debuginfo-7.4.33-150400.4.48.1 * php7-snmp-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-7.4.33-150400.4.48.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.48.1 * php7-test-7.4.33-150400.4.48.1 * php7-soap-debuginfo-7.4.33-150400.4.48.1 * php7-devel-7.4.33-150400.4.48.1 * php7-exif-debuginfo-7.4.33-150400.4.48.1 * php7-sqlite-7.4.33-150400.4.48.1 * php7-phar-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-debuginfo-7.4.33-150400.4.48.1 * php7-embed-7.4.33-150400.4.48.1 * php7-readline-7.4.33-150400.4.48.1 * php7-cli-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-debuginfo-7.4.33-150400.4.48.1 * php7-gd-7.4.33-150400.4.48.1 * php7-xsl-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.48.1 * php7-mysql-7.4.33-150400.4.48.1 * php7-tokenizer-7.4.33-150400.4.48.1 * php7-exif-7.4.33-150400.4.48.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-7.4.33-150400.4.48.1 * php7-cli-7.4.33-150400.4.48.1 * php7-zip-7.4.33-150400.4.48.1 * php7-bz2-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-7.4.33-150400.4.48.1 * php7-gd-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-7.4.33-150400.4.48.1 * php7-shmop-debuginfo-7.4.33-150400.4.48.1 * php7-sodium-debuginfo-7.4.33-150400.4.48.1 * php7-tidy-debuginfo-7.4.33-150400.4.48.1 * php7-soap-7.4.33-150400.4.48.1 * php7-zlib-debuginfo-7.4.33-150400.4.48.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * php7-snmp-7.4.33-150400.4.48.1 * php7-zlib-7.4.33-150400.4.48.1 * php7-iconv-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-7.4.33-150400.4.48.1 * php7-opcache-7.4.33-150400.4.48.1 * php7-iconv-7.4.33-150400.4.48.1 * php7-odbc-7.4.33-150400.4.48.1 * php7-mbstring-7.4.33-150400.4.48.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-7.4.33-150400.4.48.1 * php7-readline-debuginfo-7.4.33-150400.4.48.1 * php7-dom-7.4.33-150400.4.48.1 * php7-fpm-7.4.33-150400.4.48.1 * php7-pcntl-debuginfo-7.4.33-150400.4.48.1 * php7-mbstring-debuginfo-7.4.33-150400.4.48.1 * php7-shmop-7.4.33-150400.4.48.1 * php7-tidy-7.4.33-150400.4.48.1 * php7-pcntl-7.4.33-150400.4.48.1 * php7-bcmath-debuginfo-7.4.33-150400.4.48.1 * php7-calendar-7.4.33-150400.4.48.1 * php7-phar-7.4.33-150400.4.48.1 * php7-fastcgi-debugsource-7.4.33-150400.4.48.1 * php7-posix-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-7.4.33-150400.4.48.1 * php7-odbc-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debugsource-7.4.33-150400.4.48.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.48.1 * php7-dba-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-7.4.33-150400.4.48.1 * php7-ctype-debuginfo-7.4.33-150400.4.48.1 * php7-sysvsem-7.4.33-150400.4.48.1 * php7-dba-7.4.33-150400.4.48.1 * php7-calendar-debuginfo-7.4.33-150400.4.48.1 * php7-json-7.4.33-150400.4.48.1 * php7-sysvmsg-7.4.33-150400.4.48.1 * php7-bcmath-7.4.33-150400.4.48.1 * php7-dom-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-7.4.33-150400.4.48.1 * php7-mysql-debuginfo-7.4.33-150400.4.48.1 * php7-enchant-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-debuginfo-7.4.33-150400.4.48.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.48.1 * php7-posix-7.4.33-150400.4.48.1 * php7-sqlite-debuginfo-7.4.33-150400.4.48.1 * php7-xmlreader-7.4.33-150400.4.48.1 * php7-enchant-7.4.33-150400.4.48.1 * php7-sockets-7.4.33-150400.4.48.1 * php7-sockets-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.48.1 * php7-debugsource-7.4.33-150400.4.48.1 * php7-zip-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-7.4.33-150400.4.48.1 * php7-pgsql-7.4.33-150400.4.48.1 * php7-sodium-7.4.33-150400.4.48.1 * php7-bz2-7.4.33-150400.4.48.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.48.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.48.1 * apache2-mod_php7-7.4.33-150400.4.48.1 * php7-curl-debuginfo-7.4.33-150400.4.48.1 * php7-json-debuginfo-7.4.33-150400.4.48.1 * php7-ctype-7.4.33-150400.4.48.1 * php7-intl-7.4.33-150400.4.48.1 * php7-xsl-7.4.33-150400.4.48.1 * php7-pgsql-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-7.4.33-150400.4.48.1 * php7-opcache-debuginfo-7.4.33-150400.4.48.1 * php7-7.4.33-150400.4.48.1 * php7-curl-7.4.33-150400.4.48.1 * php7-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.48.1 * php7-intl-debuginfo-7.4.33-150400.4.48.1 * php7-snmp-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-7.4.33-150400.4.48.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.48.1 * php7-soap-debuginfo-7.4.33-150400.4.48.1 * php7-devel-7.4.33-150400.4.48.1 * php7-exif-debuginfo-7.4.33-150400.4.48.1 * php7-sqlite-7.4.33-150400.4.48.1 * php7-phar-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-debuginfo-7.4.33-150400.4.48.1 * php7-readline-7.4.33-150400.4.48.1 * php7-cli-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-debuginfo-7.4.33-150400.4.48.1 * php7-gd-7.4.33-150400.4.48.1 * php7-xsl-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.48.1 * php7-mysql-7.4.33-150400.4.48.1 * php7-tokenizer-7.4.33-150400.4.48.1 * php7-exif-7.4.33-150400.4.48.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-7.4.33-150400.4.48.1 * php7-cli-7.4.33-150400.4.48.1 * php7-zip-7.4.33-150400.4.48.1 * php7-bz2-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-7.4.33-150400.4.48.1 * php7-gd-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-7.4.33-150400.4.48.1 * php7-shmop-debuginfo-7.4.33-150400.4.48.1 * php7-sodium-debuginfo-7.4.33-150400.4.48.1 * php7-tidy-debuginfo-7.4.33-150400.4.48.1 * php7-soap-7.4.33-150400.4.48.1 * php7-zlib-debuginfo-7.4.33-150400.4.48.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * php7-embed-debuginfo-7.4.33-150400.4.48.1 * php7-embed-7.4.33-150400.4.48.1 * php7-embed-debugsource-7.4.33-150400.4.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php7-snmp-7.4.33-150400.4.48.1 * php7-zlib-7.4.33-150400.4.48.1 * php7-iconv-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-7.4.33-150400.4.48.1 * php7-opcache-7.4.33-150400.4.48.1 * php7-iconv-7.4.33-150400.4.48.1 * php7-odbc-7.4.33-150400.4.48.1 * php7-mbstring-7.4.33-150400.4.48.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-7.4.33-150400.4.48.1 * php7-readline-debuginfo-7.4.33-150400.4.48.1 * php7-dom-7.4.33-150400.4.48.1 * php7-fpm-7.4.33-150400.4.48.1 * php7-pcntl-debuginfo-7.4.33-150400.4.48.1 * php7-mbstring-debuginfo-7.4.33-150400.4.48.1 * php7-shmop-7.4.33-150400.4.48.1 * php7-tidy-7.4.33-150400.4.48.1 * php7-pcntl-7.4.33-150400.4.48.1 * php7-bcmath-debuginfo-7.4.33-150400.4.48.1 * php7-calendar-7.4.33-150400.4.48.1 * php7-phar-7.4.33-150400.4.48.1 * php7-fastcgi-debugsource-7.4.33-150400.4.48.1 * php7-posix-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-7.4.33-150400.4.48.1 * php7-odbc-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debugsource-7.4.33-150400.4.48.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.48.1 * php7-dba-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-7.4.33-150400.4.48.1 * php7-ctype-debuginfo-7.4.33-150400.4.48.1 * php7-sysvsem-7.4.33-150400.4.48.1 * php7-dba-7.4.33-150400.4.48.1 * php7-calendar-debuginfo-7.4.33-150400.4.48.1 * php7-json-7.4.33-150400.4.48.1 * php7-sysvmsg-7.4.33-150400.4.48.1 * php7-bcmath-7.4.33-150400.4.48.1 * php7-dom-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-7.4.33-150400.4.48.1 * php7-mysql-debuginfo-7.4.33-150400.4.48.1 * php7-enchant-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-debuginfo-7.4.33-150400.4.48.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.48.1 * php7-posix-7.4.33-150400.4.48.1 * php7-sqlite-debuginfo-7.4.33-150400.4.48.1 * php7-xmlreader-7.4.33-150400.4.48.1 * php7-enchant-7.4.33-150400.4.48.1 * php7-sockets-7.4.33-150400.4.48.1 * php7-sockets-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.48.1 * php7-debugsource-7.4.33-150400.4.48.1 * php7-zip-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-7.4.33-150400.4.48.1 * php7-pgsql-7.4.33-150400.4.48.1 * php7-sodium-7.4.33-150400.4.48.1 * php7-bz2-7.4.33-150400.4.48.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.48.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.48.1 * apache2-mod_php7-7.4.33-150400.4.48.1 * php7-curl-debuginfo-7.4.33-150400.4.48.1 * php7-json-debuginfo-7.4.33-150400.4.48.1 * php7-ctype-7.4.33-150400.4.48.1 * php7-intl-7.4.33-150400.4.48.1 * php7-xsl-7.4.33-150400.4.48.1 * php7-pgsql-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-7.4.33-150400.4.48.1 * php7-opcache-debuginfo-7.4.33-150400.4.48.1 * php7-7.4.33-150400.4.48.1 * php7-curl-7.4.33-150400.4.48.1 * php7-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.48.1 * php7-intl-debuginfo-7.4.33-150400.4.48.1 * php7-snmp-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-7.4.33-150400.4.48.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.48.1 * php7-soap-debuginfo-7.4.33-150400.4.48.1 * php7-devel-7.4.33-150400.4.48.1 * php7-exif-debuginfo-7.4.33-150400.4.48.1 * php7-sqlite-7.4.33-150400.4.48.1 * php7-phar-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-debuginfo-7.4.33-150400.4.48.1 * php7-readline-7.4.33-150400.4.48.1 * php7-cli-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-debuginfo-7.4.33-150400.4.48.1 * php7-gd-7.4.33-150400.4.48.1 * php7-xsl-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.48.1 * php7-mysql-7.4.33-150400.4.48.1 * php7-tokenizer-7.4.33-150400.4.48.1 * php7-exif-7.4.33-150400.4.48.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-7.4.33-150400.4.48.1 * php7-cli-7.4.33-150400.4.48.1 * php7-zip-7.4.33-150400.4.48.1 * php7-bz2-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-7.4.33-150400.4.48.1 * php7-gd-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-7.4.33-150400.4.48.1 * php7-shmop-debuginfo-7.4.33-150400.4.48.1 * php7-sodium-debuginfo-7.4.33-150400.4.48.1 * php7-tidy-debuginfo-7.4.33-150400.4.48.1 * php7-soap-7.4.33-150400.4.48.1 * php7-zlib-debuginfo-7.4.33-150400.4.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php7-snmp-7.4.33-150400.4.48.1 * php7-zlib-7.4.33-150400.4.48.1 * php7-iconv-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-7.4.33-150400.4.48.1 * php7-opcache-7.4.33-150400.4.48.1 * php7-iconv-7.4.33-150400.4.48.1 * php7-odbc-7.4.33-150400.4.48.1 * php7-mbstring-7.4.33-150400.4.48.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-7.4.33-150400.4.48.1 * php7-readline-debuginfo-7.4.33-150400.4.48.1 * php7-dom-7.4.33-150400.4.48.1 * php7-fpm-7.4.33-150400.4.48.1 * php7-pcntl-debuginfo-7.4.33-150400.4.48.1 * php7-mbstring-debuginfo-7.4.33-150400.4.48.1 * php7-shmop-7.4.33-150400.4.48.1 * php7-tidy-7.4.33-150400.4.48.1 * php7-pcntl-7.4.33-150400.4.48.1 * php7-bcmath-debuginfo-7.4.33-150400.4.48.1 * php7-calendar-7.4.33-150400.4.48.1 * php7-phar-7.4.33-150400.4.48.1 * php7-fastcgi-debugsource-7.4.33-150400.4.48.1 * php7-posix-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-7.4.33-150400.4.48.1 * php7-odbc-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debugsource-7.4.33-150400.4.48.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.48.1 * php7-dba-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-7.4.33-150400.4.48.1 * php7-ctype-debuginfo-7.4.33-150400.4.48.1 * php7-sysvsem-7.4.33-150400.4.48.1 * php7-dba-7.4.33-150400.4.48.1 * php7-calendar-debuginfo-7.4.33-150400.4.48.1 * php7-json-7.4.33-150400.4.48.1 * php7-sysvmsg-7.4.33-150400.4.48.1 * php7-bcmath-7.4.33-150400.4.48.1 * php7-dom-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-7.4.33-150400.4.48.1 * php7-mysql-debuginfo-7.4.33-150400.4.48.1 * php7-enchant-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-debuginfo-7.4.33-150400.4.48.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.48.1 * php7-posix-7.4.33-150400.4.48.1 * php7-sqlite-debuginfo-7.4.33-150400.4.48.1 * php7-xmlreader-7.4.33-150400.4.48.1 * php7-enchant-7.4.33-150400.4.48.1 * php7-sockets-7.4.33-150400.4.48.1 * php7-sockets-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.48.1 * php7-debugsource-7.4.33-150400.4.48.1 * php7-zip-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-7.4.33-150400.4.48.1 * php7-pgsql-7.4.33-150400.4.48.1 * php7-sodium-7.4.33-150400.4.48.1 * php7-bz2-7.4.33-150400.4.48.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.48.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.48.1 * apache2-mod_php7-7.4.33-150400.4.48.1 * php7-curl-debuginfo-7.4.33-150400.4.48.1 * php7-json-debuginfo-7.4.33-150400.4.48.1 * php7-ctype-7.4.33-150400.4.48.1 * php7-intl-7.4.33-150400.4.48.1 * php7-xsl-7.4.33-150400.4.48.1 * php7-pgsql-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-7.4.33-150400.4.48.1 * php7-opcache-debuginfo-7.4.33-150400.4.48.1 * php7-7.4.33-150400.4.48.1 * php7-curl-7.4.33-150400.4.48.1 * php7-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.48.1 * php7-intl-debuginfo-7.4.33-150400.4.48.1 * php7-snmp-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-7.4.33-150400.4.48.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.48.1 * php7-soap-debuginfo-7.4.33-150400.4.48.1 * php7-devel-7.4.33-150400.4.48.1 * php7-exif-debuginfo-7.4.33-150400.4.48.1 * php7-sqlite-7.4.33-150400.4.48.1 * php7-phar-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-debuginfo-7.4.33-150400.4.48.1 * php7-readline-7.4.33-150400.4.48.1 * php7-cli-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-debuginfo-7.4.33-150400.4.48.1 * php7-gd-7.4.33-150400.4.48.1 * php7-xsl-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.48.1 * php7-mysql-7.4.33-150400.4.48.1 * php7-tokenizer-7.4.33-150400.4.48.1 * php7-exif-7.4.33-150400.4.48.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-7.4.33-150400.4.48.1 * php7-cli-7.4.33-150400.4.48.1 * php7-zip-7.4.33-150400.4.48.1 * php7-bz2-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-7.4.33-150400.4.48.1 * php7-gd-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-7.4.33-150400.4.48.1 * php7-shmop-debuginfo-7.4.33-150400.4.48.1 * php7-sodium-debuginfo-7.4.33-150400.4.48.1 * php7-tidy-debuginfo-7.4.33-150400.4.48.1 * php7-soap-7.4.33-150400.4.48.1 * php7-zlib-debuginfo-7.4.33-150400.4.48.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * php7-snmp-7.4.33-150400.4.48.1 * php7-zlib-7.4.33-150400.4.48.1 * php7-iconv-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-7.4.33-150400.4.48.1 * php7-opcache-7.4.33-150400.4.48.1 * php7-iconv-7.4.33-150400.4.48.1 * php7-odbc-7.4.33-150400.4.48.1 * php7-mbstring-7.4.33-150400.4.48.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-7.4.33-150400.4.48.1 * php7-readline-debuginfo-7.4.33-150400.4.48.1 * php7-dom-7.4.33-150400.4.48.1 * php7-fpm-7.4.33-150400.4.48.1 * php7-pcntl-debuginfo-7.4.33-150400.4.48.1 * php7-mbstring-debuginfo-7.4.33-150400.4.48.1 * php7-shmop-7.4.33-150400.4.48.1 * php7-tidy-7.4.33-150400.4.48.1 * php7-pcntl-7.4.33-150400.4.48.1 * php7-bcmath-debuginfo-7.4.33-150400.4.48.1 * php7-calendar-7.4.33-150400.4.48.1 * php7-phar-7.4.33-150400.4.48.1 * php7-fastcgi-debugsource-7.4.33-150400.4.48.1 * php7-posix-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-7.4.33-150400.4.48.1 * php7-odbc-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debugsource-7.4.33-150400.4.48.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.48.1 * php7-dba-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-7.4.33-150400.4.48.1 * php7-ctype-debuginfo-7.4.33-150400.4.48.1 * php7-sysvsem-7.4.33-150400.4.48.1 * php7-dba-7.4.33-150400.4.48.1 * php7-calendar-debuginfo-7.4.33-150400.4.48.1 * php7-json-7.4.33-150400.4.48.1 * php7-sysvmsg-7.4.33-150400.4.48.1 * php7-bcmath-7.4.33-150400.4.48.1 * php7-dom-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-7.4.33-150400.4.48.1 * php7-mysql-debuginfo-7.4.33-150400.4.48.1 * php7-enchant-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-debuginfo-7.4.33-150400.4.48.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.48.1 * php7-posix-7.4.33-150400.4.48.1 * php7-sqlite-debuginfo-7.4.33-150400.4.48.1 * php7-xmlreader-7.4.33-150400.4.48.1 * php7-enchant-7.4.33-150400.4.48.1 * php7-sockets-7.4.33-150400.4.48.1 * php7-sockets-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.48.1 * php7-debugsource-7.4.33-150400.4.48.1 * php7-zip-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-7.4.33-150400.4.48.1 * php7-pgsql-7.4.33-150400.4.48.1 * php7-sodium-7.4.33-150400.4.48.1 * php7-bz2-7.4.33-150400.4.48.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.48.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.48.1 * apache2-mod_php7-7.4.33-150400.4.48.1 * php7-curl-debuginfo-7.4.33-150400.4.48.1 * php7-json-debuginfo-7.4.33-150400.4.48.1 * php7-ctype-7.4.33-150400.4.48.1 * php7-intl-7.4.33-150400.4.48.1 * php7-xsl-7.4.33-150400.4.48.1 * php7-pgsql-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-7.4.33-150400.4.48.1 * php7-opcache-debuginfo-7.4.33-150400.4.48.1 * php7-7.4.33-150400.4.48.1 * php7-curl-7.4.33-150400.4.48.1 * php7-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.48.1 * php7-intl-debuginfo-7.4.33-150400.4.48.1 * php7-snmp-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-7.4.33-150400.4.48.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.48.1 * php7-soap-debuginfo-7.4.33-150400.4.48.1 * php7-devel-7.4.33-150400.4.48.1 * php7-exif-debuginfo-7.4.33-150400.4.48.1 * php7-sqlite-7.4.33-150400.4.48.1 * php7-phar-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-debuginfo-7.4.33-150400.4.48.1 * php7-readline-7.4.33-150400.4.48.1 * php7-cli-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-debuginfo-7.4.33-150400.4.48.1 * php7-gd-7.4.33-150400.4.48.1 * php7-xsl-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.48.1 * php7-mysql-7.4.33-150400.4.48.1 * php7-tokenizer-7.4.33-150400.4.48.1 * php7-exif-7.4.33-150400.4.48.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-7.4.33-150400.4.48.1 * php7-cli-7.4.33-150400.4.48.1 * php7-zip-7.4.33-150400.4.48.1 * php7-bz2-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-7.4.33-150400.4.48.1 * php7-gd-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-7.4.33-150400.4.48.1 * php7-shmop-debuginfo-7.4.33-150400.4.48.1 * php7-sodium-debuginfo-7.4.33-150400.4.48.1 * php7-tidy-debuginfo-7.4.33-150400.4.48.1 * php7-soap-7.4.33-150400.4.48.1 * php7-zlib-debuginfo-7.4.33-150400.4.48.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * php7-snmp-7.4.33-150400.4.48.1 * php7-zlib-7.4.33-150400.4.48.1 * php7-iconv-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-7.4.33-150400.4.48.1 * php7-opcache-7.4.33-150400.4.48.1 * php7-iconv-7.4.33-150400.4.48.1 * php7-odbc-7.4.33-150400.4.48.1 * php7-mbstring-7.4.33-150400.4.48.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-7.4.33-150400.4.48.1 * php7-readline-debuginfo-7.4.33-150400.4.48.1 * php7-dom-7.4.33-150400.4.48.1 * php7-fpm-7.4.33-150400.4.48.1 * php7-pcntl-debuginfo-7.4.33-150400.4.48.1 * php7-mbstring-debuginfo-7.4.33-150400.4.48.1 * php7-shmop-7.4.33-150400.4.48.1 * php7-tidy-7.4.33-150400.4.48.1 * php7-pcntl-7.4.33-150400.4.48.1 * php7-bcmath-debuginfo-7.4.33-150400.4.48.1 * php7-calendar-7.4.33-150400.4.48.1 * php7-phar-7.4.33-150400.4.48.1 * php7-fastcgi-debugsource-7.4.33-150400.4.48.1 * php7-posix-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-7.4.33-150400.4.48.1 * php7-odbc-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debugsource-7.4.33-150400.4.48.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.48.1 * php7-dba-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-7.4.33-150400.4.48.1 * php7-ctype-debuginfo-7.4.33-150400.4.48.1 * php7-sysvsem-7.4.33-150400.4.48.1 * php7-dba-7.4.33-150400.4.48.1 * php7-calendar-debuginfo-7.4.33-150400.4.48.1 * php7-json-7.4.33-150400.4.48.1 * php7-sysvmsg-7.4.33-150400.4.48.1 * php7-bcmath-7.4.33-150400.4.48.1 * php7-dom-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-7.4.33-150400.4.48.1 * php7-mysql-debuginfo-7.4.33-150400.4.48.1 * php7-enchant-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-debuginfo-7.4.33-150400.4.48.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.48.1 * php7-posix-7.4.33-150400.4.48.1 * php7-sqlite-debuginfo-7.4.33-150400.4.48.1 * php7-xmlreader-7.4.33-150400.4.48.1 * php7-enchant-7.4.33-150400.4.48.1 * php7-sockets-7.4.33-150400.4.48.1 * php7-sockets-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.48.1 * php7-debugsource-7.4.33-150400.4.48.1 * php7-zip-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-7.4.33-150400.4.48.1 * php7-pgsql-7.4.33-150400.4.48.1 * php7-sodium-7.4.33-150400.4.48.1 * php7-bz2-7.4.33-150400.4.48.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.48.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.48.1 * apache2-mod_php7-7.4.33-150400.4.48.1 * php7-curl-debuginfo-7.4.33-150400.4.48.1 * php7-json-debuginfo-7.4.33-150400.4.48.1 * php7-ctype-7.4.33-150400.4.48.1 * php7-intl-7.4.33-150400.4.48.1 * php7-xsl-7.4.33-150400.4.48.1 * php7-pgsql-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-7.4.33-150400.4.48.1 * php7-opcache-debuginfo-7.4.33-150400.4.48.1 * php7-7.4.33-150400.4.48.1 * php7-curl-7.4.33-150400.4.48.1 * php7-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.48.1 * php7-intl-debuginfo-7.4.33-150400.4.48.1 * php7-snmp-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-7.4.33-150400.4.48.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.48.1 * php7-soap-debuginfo-7.4.33-150400.4.48.1 * php7-devel-7.4.33-150400.4.48.1 * php7-exif-debuginfo-7.4.33-150400.4.48.1 * php7-sqlite-7.4.33-150400.4.48.1 * php7-phar-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-debuginfo-7.4.33-150400.4.48.1 * php7-readline-7.4.33-150400.4.48.1 * php7-cli-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-debuginfo-7.4.33-150400.4.48.1 * php7-gd-7.4.33-150400.4.48.1 * php7-xsl-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.48.1 * php7-mysql-7.4.33-150400.4.48.1 * php7-tokenizer-7.4.33-150400.4.48.1 * php7-exif-7.4.33-150400.4.48.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-7.4.33-150400.4.48.1 * php7-cli-7.4.33-150400.4.48.1 * php7-zip-7.4.33-150400.4.48.1 * php7-bz2-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-7.4.33-150400.4.48.1 * php7-gd-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-7.4.33-150400.4.48.1 * php7-shmop-debuginfo-7.4.33-150400.4.48.1 * php7-sodium-debuginfo-7.4.33-150400.4.48.1 * php7-tidy-debuginfo-7.4.33-150400.4.48.1 * php7-soap-7.4.33-150400.4.48.1 * php7-zlib-debuginfo-7.4.33-150400.4.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php7-snmp-7.4.33-150400.4.48.1 * php7-zlib-7.4.33-150400.4.48.1 * php7-iconv-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-7.4.33-150400.4.48.1 * php7-opcache-7.4.33-150400.4.48.1 * php7-iconv-7.4.33-150400.4.48.1 * php7-odbc-7.4.33-150400.4.48.1 * php7-mbstring-7.4.33-150400.4.48.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-7.4.33-150400.4.48.1 * php7-readline-debuginfo-7.4.33-150400.4.48.1 * php7-dom-7.4.33-150400.4.48.1 * php7-fpm-7.4.33-150400.4.48.1 * php7-pcntl-debuginfo-7.4.33-150400.4.48.1 * php7-mbstring-debuginfo-7.4.33-150400.4.48.1 * php7-shmop-7.4.33-150400.4.48.1 * php7-tidy-7.4.33-150400.4.48.1 * php7-pcntl-7.4.33-150400.4.48.1 * php7-bcmath-debuginfo-7.4.33-150400.4.48.1 * php7-calendar-7.4.33-150400.4.48.1 * php7-phar-7.4.33-150400.4.48.1 * php7-fastcgi-debugsource-7.4.33-150400.4.48.1 * php7-posix-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-7.4.33-150400.4.48.1 * php7-odbc-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debugsource-7.4.33-150400.4.48.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.48.1 * php7-dba-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-7.4.33-150400.4.48.1 * php7-ctype-debuginfo-7.4.33-150400.4.48.1 * php7-sysvsem-7.4.33-150400.4.48.1 * php7-dba-7.4.33-150400.4.48.1 * php7-calendar-debuginfo-7.4.33-150400.4.48.1 * php7-json-7.4.33-150400.4.48.1 * php7-sysvmsg-7.4.33-150400.4.48.1 * php7-bcmath-7.4.33-150400.4.48.1 * php7-dom-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-7.4.33-150400.4.48.1 * php7-mysql-debuginfo-7.4.33-150400.4.48.1 * php7-enchant-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-debuginfo-7.4.33-150400.4.48.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.48.1 * php7-posix-7.4.33-150400.4.48.1 * php7-sqlite-debuginfo-7.4.33-150400.4.48.1 * php7-xmlreader-7.4.33-150400.4.48.1 * php7-enchant-7.4.33-150400.4.48.1 * php7-sockets-7.4.33-150400.4.48.1 * php7-sockets-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.48.1 * php7-debugsource-7.4.33-150400.4.48.1 * php7-zip-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-7.4.33-150400.4.48.1 * php7-pgsql-7.4.33-150400.4.48.1 * php7-sodium-7.4.33-150400.4.48.1 * php7-bz2-7.4.33-150400.4.48.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.48.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.48.1 * apache2-mod_php7-7.4.33-150400.4.48.1 * php7-curl-debuginfo-7.4.33-150400.4.48.1 * php7-json-debuginfo-7.4.33-150400.4.48.1 * php7-ctype-7.4.33-150400.4.48.1 * php7-intl-7.4.33-150400.4.48.1 * php7-xsl-7.4.33-150400.4.48.1 * php7-pgsql-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-7.4.33-150400.4.48.1 * php7-opcache-debuginfo-7.4.33-150400.4.48.1 * php7-7.4.33-150400.4.48.1 * php7-curl-7.4.33-150400.4.48.1 * php7-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.48.1 * php7-intl-debuginfo-7.4.33-150400.4.48.1 * php7-snmp-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-7.4.33-150400.4.48.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.48.1 * php7-soap-debuginfo-7.4.33-150400.4.48.1 * php7-devel-7.4.33-150400.4.48.1 * php7-exif-debuginfo-7.4.33-150400.4.48.1 * php7-sqlite-7.4.33-150400.4.48.1 * php7-phar-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-debuginfo-7.4.33-150400.4.48.1 * php7-readline-7.4.33-150400.4.48.1 * php7-cli-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-debuginfo-7.4.33-150400.4.48.1 * php7-gd-7.4.33-150400.4.48.1 * php7-xsl-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.48.1 * php7-mysql-7.4.33-150400.4.48.1 * php7-tokenizer-7.4.33-150400.4.48.1 * php7-exif-7.4.33-150400.4.48.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-7.4.33-150400.4.48.1 * php7-cli-7.4.33-150400.4.48.1 * php7-zip-7.4.33-150400.4.48.1 * php7-bz2-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-7.4.33-150400.4.48.1 * php7-gd-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-7.4.33-150400.4.48.1 * php7-shmop-debuginfo-7.4.33-150400.4.48.1 * php7-sodium-debuginfo-7.4.33-150400.4.48.1 * php7-tidy-debuginfo-7.4.33-150400.4.48.1 * php7-soap-7.4.33-150400.4.48.1 * php7-zlib-debuginfo-7.4.33-150400.4.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * php7-snmp-7.4.33-150400.4.48.1 * php7-zlib-7.4.33-150400.4.48.1 * php7-iconv-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-7.4.33-150400.4.48.1 * php7-opcache-7.4.33-150400.4.48.1 * php7-iconv-7.4.33-150400.4.48.1 * php7-odbc-7.4.33-150400.4.48.1 * php7-mbstring-7.4.33-150400.4.48.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-7.4.33-150400.4.48.1 * php7-readline-debuginfo-7.4.33-150400.4.48.1 * php7-dom-7.4.33-150400.4.48.1 * php7-fpm-7.4.33-150400.4.48.1 * php7-pcntl-debuginfo-7.4.33-150400.4.48.1 * php7-mbstring-debuginfo-7.4.33-150400.4.48.1 * php7-shmop-7.4.33-150400.4.48.1 * php7-tidy-7.4.33-150400.4.48.1 * php7-pcntl-7.4.33-150400.4.48.1 * php7-bcmath-debuginfo-7.4.33-150400.4.48.1 * php7-calendar-7.4.33-150400.4.48.1 * php7-phar-7.4.33-150400.4.48.1 * php7-fastcgi-debugsource-7.4.33-150400.4.48.1 * php7-posix-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-7.4.33-150400.4.48.1 * php7-odbc-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debugsource-7.4.33-150400.4.48.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.48.1 * php7-dba-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-7.4.33-150400.4.48.1 * php7-ctype-debuginfo-7.4.33-150400.4.48.1 * php7-sysvsem-7.4.33-150400.4.48.1 * php7-dba-7.4.33-150400.4.48.1 * php7-calendar-debuginfo-7.4.33-150400.4.48.1 * php7-json-7.4.33-150400.4.48.1 * php7-sysvmsg-7.4.33-150400.4.48.1 * php7-bcmath-7.4.33-150400.4.48.1 * php7-dom-debuginfo-7.4.33-150400.4.48.1 * php7-fastcgi-7.4.33-150400.4.48.1 * php7-mysql-debuginfo-7.4.33-150400.4.48.1 * php7-enchant-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-debuginfo-7.4.33-150400.4.48.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.48.1 * php7-posix-7.4.33-150400.4.48.1 * php7-sqlite-debuginfo-7.4.33-150400.4.48.1 * php7-xmlreader-7.4.33-150400.4.48.1 * php7-enchant-7.4.33-150400.4.48.1 * php7-sockets-7.4.33-150400.4.48.1 * php7-sockets-debuginfo-7.4.33-150400.4.48.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.48.1 * php7-debugsource-7.4.33-150400.4.48.1 * php7-zip-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-7.4.33-150400.4.48.1 * php7-pgsql-7.4.33-150400.4.48.1 * php7-sodium-7.4.33-150400.4.48.1 * php7-bz2-7.4.33-150400.4.48.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.48.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.48.1 * apache2-mod_php7-7.4.33-150400.4.48.1 * php7-curl-debuginfo-7.4.33-150400.4.48.1 * php7-json-debuginfo-7.4.33-150400.4.48.1 * php7-ctype-7.4.33-150400.4.48.1 * php7-intl-7.4.33-150400.4.48.1 * php7-xsl-7.4.33-150400.4.48.1 * php7-pgsql-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-debuginfo-7.4.33-150400.4.48.1 * php7-openssl-7.4.33-150400.4.48.1 * php7-opcache-debuginfo-7.4.33-150400.4.48.1 * php7-7.4.33-150400.4.48.1 * php7-curl-7.4.33-150400.4.48.1 * php7-debuginfo-7.4.33-150400.4.48.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.48.1 * php7-intl-debuginfo-7.4.33-150400.4.48.1 * php7-snmp-debuginfo-7.4.33-150400.4.48.1 * php7-gmp-debuginfo-7.4.33-150400.4.48.1 * php7-xmlrpc-7.4.33-150400.4.48.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.48.1 * php7-soap-debuginfo-7.4.33-150400.4.48.1 * php7-devel-7.4.33-150400.4.48.1 * php7-exif-debuginfo-7.4.33-150400.4.48.1 * php7-sqlite-7.4.33-150400.4.48.1 * php7-phar-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-debuginfo-7.4.33-150400.4.48.1 * php7-readline-7.4.33-150400.4.48.1 * php7-cli-debuginfo-7.4.33-150400.4.48.1 * php7-ldap-debuginfo-7.4.33-150400.4.48.1 * php7-gd-7.4.33-150400.4.48.1 * php7-xsl-debuginfo-7.4.33-150400.4.48.1 * php7-fpm-debuginfo-7.4.33-150400.4.48.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.48.1 * php7-mysql-7.4.33-150400.4.48.1 * php7-tokenizer-7.4.33-150400.4.48.1 * php7-exif-7.4.33-150400.4.48.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-7.4.33-150400.4.48.1 * php7-cli-7.4.33-150400.4.48.1 * php7-zip-7.4.33-150400.4.48.1 * php7-bz2-debuginfo-7.4.33-150400.4.48.1 * php7-gettext-debuginfo-7.4.33-150400.4.48.1 * php7-pdo-7.4.33-150400.4.48.1 * php7-gd-debuginfo-7.4.33-150400.4.48.1 * php7-ftp-7.4.33-150400.4.48.1 * php7-shmop-debuginfo-7.4.33-150400.4.48.1 * php7-sodium-debuginfo-7.4.33-150400.4.48.1 * php7-tidy-debuginfo-7.4.33-150400.4.48.1 * php7-soap-7.4.33-150400.4.48.1 * php7-zlib-debuginfo-7.4.33-150400.4.48.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11235.html * https://www.suse.com/security/cve/CVE-2025-1217.html * https://www.suse.com/security/cve/CVE-2025-1219.html * https://www.suse.com/security/cve/CVE-2025-1734.html * https://www.suse.com/security/cve/CVE-2025-1736.html * https://www.suse.com/security/cve/CVE-2025-1861.html * https://bugzilla.suse.com/show_bug.cgi?id=1239664 * https://bugzilla.suse.com/show_bug.cgi?id=1239666 * https://bugzilla.suse.com/show_bug.cgi?id=1239667 * https://bugzilla.suse.com/show_bug.cgi?id=1239668 * https://bugzilla.suse.com/show_bug.cgi?id=1239669 * https://bugzilla.suse.com/show_bug.cgi?id=1239670 [View Less]

1 0

SUSE-SU-2025:1012-1: important: Security update for php8
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for php8 Announcement ID: SUSE-SU-2025:1012-1 Release Date: 2025-03-25T12:47:38Z Rating: important References: * bsc#1239664 * bsc#1239666 * bsc#1239667 * bsc#1239668 * bsc#1239669 * bsc#1239670 Cross-References: * CVE-2024-11235 * CVE-2025-1217 * CVE-2025-1219 * CVE-2025-1734 * CVE-2025-1736 * CVE-2025-1861 CVSS scores: * CVE-2024-11235 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-1217 ( SUSE ): 7.3 CVSS:… [View More]3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-1219 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-1734 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-1736 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-1861 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that solves six vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2025-1217: Fixed header parser of `http` stream wrapper not handling folded headers (bsc#1239664) * CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666) * CVE-2025-1219: Fixed libxml streams using wrong `content-type` header when requesting a redirected resource (bsc#1239667) * CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon (bsc#1239668) * CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669) * CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670) Version update to 8.2.28: Core: Fixed bug GH-17211 (observer segfault on function loaded with dl()). LibXML: Fixed GHSA-wg4p-4hqh-c3g9. Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). Streams: Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). Fixed GHSA-52jp- hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). Version update version 8.2.27 Calendar: Fixed jdtogregorian overflow. Fixed cal_to_jd julian_days argument overflow. COM: Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults). Core: Fail early in *nix configuration build script. Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)). Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469). Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs). Fix is_zend_ptr() huge block comparison. Fixed potential OOB read in zend_dirname() on Windows. Curl: Fix various memory leaks in curl mime handling. FPM: Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status). GD: Fixed GH-16776 (imagecreatefromstring overflow). GMP: Revert gmp_pow() overly restrictive overflow checks. Hash: Fixed GH-16711: Segfault in mhash(). Opcache: Fixed bug GH-16770 (Tracing JIT type mismatch when returning UNDEF). Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads). Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64). OpenSSL: Prevent unexpected array entry conversion when reading key. Fix various memory leaks related to openssl exports. Fix memory leak in php_openssl_pkey_from_zval(). PDO: Fixed memory leak of `setFetchMode()`. Phar: Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks). PHPDBG: Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()). SAPI: Fixed bug GH-16998 (UBSAN warning in rfc1867). SimpleXML: Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element input). SNMP: Fixed bug GH-16959 (snmget modifies the object_id array). Standard: Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties). Streams: Fixed network connect poll interuption handling. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1012=1 openSUSE-SLE-15.6-2025-1012=1 * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2025-1012=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * php8-bz2-8.2.28-150600.3.16.1 * php8-readline-8.2.28-150600.3.16.1 * php8-fastcgi-debuginfo-8.2.28-150600.3.16.1 * php8-fastcgi-debugsource-8.2.28-150600.3.16.1 * php8-tokenizer-debuginfo-8.2.28-150600.3.16.1 * php8-embed-8.2.28-150600.3.16.1 * php8-embed-debugsource-8.2.28-150600.3.16.1 * php8-shmop-debuginfo-8.2.28-150600.3.16.1 * php8-sodium-debuginfo-8.2.28-150600.3.16.1 * php8-ctype-8.2.28-150600.3.16.1 * php8-calendar-debuginfo-8.2.28-150600.3.16.1 * php8-tidy-8.2.28-150600.3.16.1 * php8-xmlreader-8.2.28-150600.3.16.1 * php8-zlib-debuginfo-8.2.28-150600.3.16.1 * php8-bz2-debuginfo-8.2.28-150600.3.16.1 * php8-bcmath-8.2.28-150600.3.16.1 * apache2-mod_php8-8.2.28-150600.3.16.1 * php8-snmp-debuginfo-8.2.28-150600.3.16.1 * php8-ldap-debuginfo-8.2.28-150600.3.16.1 * php8-ftp-8.2.28-150600.3.16.1 * php8-readline-debuginfo-8.2.28-150600.3.16.1 * php8-mysql-8.2.28-150600.3.16.1 * php8-sysvsem-debuginfo-8.2.28-150600.3.16.1 * php8-fileinfo-debuginfo-8.2.28-150600.3.16.1 * php8-odbc-debuginfo-8.2.28-150600.3.16.1 * php8-debugsource-8.2.28-150600.3.16.1 * php8-posix-8.2.28-150600.3.16.1 * php8-fpm-debugsource-8.2.28-150600.3.16.1 * php8-phar-debuginfo-8.2.28-150600.3.16.1 * php8-gd-8.2.28-150600.3.16.1 * php8-zip-8.2.28-150600.3.16.1 * php8-curl-debuginfo-8.2.28-150600.3.16.1 * php8-tokenizer-8.2.28-150600.3.16.1 * php8-cli-8.2.28-150600.3.16.1 * php8-shmop-8.2.28-150600.3.16.1 * php8-openssl-debuginfo-8.2.28-150600.3.16.1 * php8-pdo-8.2.28-150600.3.16.1 * php8-devel-8.2.28-150600.3.16.1 * php8-pcntl-8.2.28-150600.3.16.1 * php8-sysvshm-8.2.28-150600.3.16.1 * php8-sqlite-debuginfo-8.2.28-150600.3.16.1 * php8-sqlite-8.2.28-150600.3.16.1 * php8-fpm-8.2.28-150600.3.16.1 * php8-opcache-debuginfo-8.2.28-150600.3.16.1 * php8-ldap-8.2.28-150600.3.16.1 * php8-iconv-8.2.28-150600.3.16.1 * php8-tidy-debuginfo-8.2.28-150600.3.16.1 * php8-curl-8.2.28-150600.3.16.1 * apache2-mod_php8-debuginfo-8.2.28-150600.3.16.1 * php8-xsl-8.2.28-150600.3.16.1 * php8-cli-debuginfo-8.2.28-150600.3.16.1 * php8-phar-8.2.28-150600.3.16.1 * php8-dom-debuginfo-8.2.28-150600.3.16.1 * php8-debuginfo-8.2.28-150600.3.16.1 * php8-fileinfo-8.2.28-150600.3.16.1 * php8-intl-8.2.28-150600.3.16.1 * php8-embed-debuginfo-8.2.28-150600.3.16.1 * php8-gettext-debuginfo-8.2.28-150600.3.16.1 * php8-mysql-debuginfo-8.2.28-150600.3.16.1 * php8-test-8.2.28-150600.3.16.1 * php8-iconv-debuginfo-8.2.28-150600.3.16.1 * php8-gmp-debuginfo-8.2.28-150600.3.16.1 * php8-fastcgi-8.2.28-150600.3.16.1 * php8-dom-8.2.28-150600.3.16.1 * php8-sysvmsg-debuginfo-8.2.28-150600.3.16.1 * php8-ctype-debuginfo-8.2.28-150600.3.16.1 * php8-sysvshm-debuginfo-8.2.28-150600.3.16.1 * php8-sysvsem-8.2.28-150600.3.16.1 * php8-calendar-8.2.28-150600.3.16.1 * php8-posix-debuginfo-8.2.28-150600.3.16.1 * php8-pgsql-debuginfo-8.2.28-150600.3.16.1 * php8-sysvmsg-8.2.28-150600.3.16.1 * php8-zlib-8.2.28-150600.3.16.1 * php8-mbstring-8.2.28-150600.3.16.1 * php8-openssl-8.2.28-150600.3.16.1 * php8-sockets-8.2.28-150600.3.16.1 * php8-sockets-debuginfo-8.2.28-150600.3.16.1 * php8-bcmath-debuginfo-8.2.28-150600.3.16.1 * apache2-mod_php8-debugsource-8.2.28-150600.3.16.1 * php8-pcntl-debuginfo-8.2.28-150600.3.16.1 * php8-enchant-8.2.28-150600.3.16.1 * php8-enchant-debuginfo-8.2.28-150600.3.16.1 * php8-odbc-8.2.28-150600.3.16.1 * php8-xmlwriter-debuginfo-8.2.28-150600.3.16.1 * php8-fpm-debuginfo-8.2.28-150600.3.16.1 * php8-snmp-8.2.28-150600.3.16.1 * php8-soap-8.2.28-150600.3.16.1 * php8-dba-debuginfo-8.2.28-150600.3.16.1 * php8-zip-debuginfo-8.2.28-150600.3.16.1 * php8-exif-8.2.28-150600.3.16.1 * php8-ffi-8.2.28-150600.3.16.1 * php8-gettext-8.2.28-150600.3.16.1 * php8-xsl-debuginfo-8.2.28-150600.3.16.1 * php8-xmlwriter-8.2.28-150600.3.16.1 * php8-xmlreader-debuginfo-8.2.28-150600.3.16.1 * php8-soap-debuginfo-8.2.28-150600.3.16.1 * php8-mbstring-debuginfo-8.2.28-150600.3.16.1 * php8-8.2.28-150600.3.16.1 * php8-pgsql-8.2.28-150600.3.16.1 * php8-sodium-8.2.28-150600.3.16.1 * php8-opcache-8.2.28-150600.3.16.1 * php8-dba-8.2.28-150600.3.16.1 * php8-gd-debuginfo-8.2.28-150600.3.16.1 * php8-exif-debuginfo-8.2.28-150600.3.16.1 * php8-gmp-8.2.28-150600.3.16.1 * php8-pdo-debuginfo-8.2.28-150600.3.16.1 * php8-ftp-debuginfo-8.2.28-150600.3.16.1 * php8-intl-debuginfo-8.2.28-150600.3.16.1 * php8-ffi-debuginfo-8.2.28-150600.3.16.1 * openSUSE Leap 15.6 (noarch) * php8-fpm-apache-8.2.28-150600.3.16.1 * Web and Scripting Module 15-SP6 (aarch64 ppc64le s390x x86_64) * php8-bz2-8.2.28-150600.3.16.1 * php8-readline-8.2.28-150600.3.16.1 * php8-fastcgi-debuginfo-8.2.28-150600.3.16.1 * php8-fastcgi-debugsource-8.2.28-150600.3.16.1 * php8-tokenizer-debuginfo-8.2.28-150600.3.16.1 * php8-embed-8.2.28-150600.3.16.1 * php8-embed-debugsource-8.2.28-150600.3.16.1 * php8-shmop-debuginfo-8.2.28-150600.3.16.1 * php8-sodium-debuginfo-8.2.28-150600.3.16.1 * php8-ctype-8.2.28-150600.3.16.1 * php8-calendar-debuginfo-8.2.28-150600.3.16.1 * php8-tidy-8.2.28-150600.3.16.1 * php8-xmlreader-8.2.28-150600.3.16.1 * php8-zlib-debuginfo-8.2.28-150600.3.16.1 * php8-bz2-debuginfo-8.2.28-150600.3.16.1 * php8-bcmath-8.2.28-150600.3.16.1 * apache2-mod_php8-8.2.28-150600.3.16.1 * php8-snmp-debuginfo-8.2.28-150600.3.16.1 * php8-ldap-debuginfo-8.2.28-150600.3.16.1 * php8-ftp-8.2.28-150600.3.16.1 * php8-readline-debuginfo-8.2.28-150600.3.16.1 * php8-mysql-8.2.28-150600.3.16.1 * php8-sysvsem-debuginfo-8.2.28-150600.3.16.1 * php8-fileinfo-debuginfo-8.2.28-150600.3.16.1 * php8-odbc-debuginfo-8.2.28-150600.3.16.1 * php8-debugsource-8.2.28-150600.3.16.1 * php8-posix-8.2.28-150600.3.16.1 * php8-fpm-debugsource-8.2.28-150600.3.16.1 * php8-phar-debuginfo-8.2.28-150600.3.16.1 * php8-gd-8.2.28-150600.3.16.1 * php8-zip-8.2.28-150600.3.16.1 * php8-curl-debuginfo-8.2.28-150600.3.16.1 * php8-cli-8.2.28-150600.3.16.1 * php8-shmop-8.2.28-150600.3.16.1 * php8-tokenizer-8.2.28-150600.3.16.1 * php8-openssl-debuginfo-8.2.28-150600.3.16.1 * php8-pdo-8.2.28-150600.3.16.1 * php8-devel-8.2.28-150600.3.16.1 * php8-pcntl-8.2.28-150600.3.16.1 * php8-sysvshm-8.2.28-150600.3.16.1 * php8-sqlite-debuginfo-8.2.28-150600.3.16.1 * php8-sqlite-8.2.28-150600.3.16.1 * php8-fpm-8.2.28-150600.3.16.1 * php8-opcache-debuginfo-8.2.28-150600.3.16.1 * php8-ldap-8.2.28-150600.3.16.1 * php8-iconv-8.2.28-150600.3.16.1 * php8-tidy-debuginfo-8.2.28-150600.3.16.1 * php8-curl-8.2.28-150600.3.16.1 * apache2-mod_php8-debuginfo-8.2.28-150600.3.16.1 * php8-xsl-8.2.28-150600.3.16.1 * php8-cli-debuginfo-8.2.28-150600.3.16.1 * php8-phar-8.2.28-150600.3.16.1 * php8-dom-debuginfo-8.2.28-150600.3.16.1 * php8-debuginfo-8.2.28-150600.3.16.1 * php8-fileinfo-8.2.28-150600.3.16.1 * php8-intl-8.2.28-150600.3.16.1 * php8-embed-debuginfo-8.2.28-150600.3.16.1 * php8-gettext-debuginfo-8.2.28-150600.3.16.1 * php8-mysql-debuginfo-8.2.28-150600.3.16.1 * php8-test-8.2.28-150600.3.16.1 * php8-iconv-debuginfo-8.2.28-150600.3.16.1 * php8-gmp-debuginfo-8.2.28-150600.3.16.1 * php8-fastcgi-8.2.28-150600.3.16.1 * php8-dom-8.2.28-150600.3.16.1 * php8-sysvmsg-debuginfo-8.2.28-150600.3.16.1 * php8-ctype-debuginfo-8.2.28-150600.3.16.1 * php8-sysvshm-debuginfo-8.2.28-150600.3.16.1 * php8-sysvsem-8.2.28-150600.3.16.1 * php8-calendar-8.2.28-150600.3.16.1 * php8-posix-debuginfo-8.2.28-150600.3.16.1 * php8-pgsql-debuginfo-8.2.28-150600.3.16.1 * php8-sysvmsg-8.2.28-150600.3.16.1 * php8-zlib-8.2.28-150600.3.16.1 * php8-mbstring-8.2.28-150600.3.16.1 * php8-openssl-8.2.28-150600.3.16.1 * php8-sockets-8.2.28-150600.3.16.1 * php8-sockets-debuginfo-8.2.28-150600.3.16.1 * php8-bcmath-debuginfo-8.2.28-150600.3.16.1 * apache2-mod_php8-debugsource-8.2.28-150600.3.16.1 * php8-pcntl-debuginfo-8.2.28-150600.3.16.1 * php8-enchant-8.2.28-150600.3.16.1 * php8-enchant-debuginfo-8.2.28-150600.3.16.1 * php8-odbc-8.2.28-150600.3.16.1 * php8-xmlwriter-debuginfo-8.2.28-150600.3.16.1 * php8-fpm-debuginfo-8.2.28-150600.3.16.1 * php8-snmp-8.2.28-150600.3.16.1 * php8-soap-8.2.28-150600.3.16.1 * php8-dba-debuginfo-8.2.28-150600.3.16.1 * php8-zip-debuginfo-8.2.28-150600.3.16.1 * php8-exif-8.2.28-150600.3.16.1 * php8-gettext-8.2.28-150600.3.16.1 * php8-xsl-debuginfo-8.2.28-150600.3.16.1 * php8-xmlwriter-8.2.28-150600.3.16.1 * php8-xmlreader-debuginfo-8.2.28-150600.3.16.1 * php8-soap-debuginfo-8.2.28-150600.3.16.1 * php8-mbstring-debuginfo-8.2.28-150600.3.16.1 * php8-8.2.28-150600.3.16.1 * php8-pgsql-8.2.28-150600.3.16.1 * php8-sodium-8.2.28-150600.3.16.1 * php8-opcache-8.2.28-150600.3.16.1 * php8-dba-8.2.28-150600.3.16.1 * php8-gd-debuginfo-8.2.28-150600.3.16.1 * php8-exif-debuginfo-8.2.28-150600.3.16.1 * php8-gmp-8.2.28-150600.3.16.1 * php8-pdo-debuginfo-8.2.28-150600.3.16.1 * php8-ftp-debuginfo-8.2.28-150600.3.16.1 * php8-intl-debuginfo-8.2.28-150600.3.16.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11235.html * https://www.suse.com/security/cve/CVE-2025-1217.html * https://www.suse.com/security/cve/CVE-2025-1219.html * https://www.suse.com/security/cve/CVE-2025-1734.html * https://www.suse.com/security/cve/CVE-2025-1736.html * https://www.suse.com/security/cve/CVE-2025-1861.html * https://bugzilla.suse.com/show_bug.cgi?id=1239664 * https://bugzilla.suse.com/show_bug.cgi?id=1239666 * https://bugzilla.suse.com/show_bug.cgi?id=1239667 * https://bugzilla.suse.com/show_bug.cgi?id=1239668 * https://bugzilla.suse.com/show_bug.cgi?id=1239669 * https://bugzilla.suse.com/show_bug.cgi?id=1239670 [View Less]

1 0

SUSE-SU-2025:1013-1: moderate: Security update for govulncheck-vulndb
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for govulncheck-vulndb Announcement ID: SUSE-SU-2025:1013-1 Release Date: 2025-03-25T12:47:51Z Rating: moderate References: * jsc#PED-11136 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that contains one feature can now be installed. ## … [View More]

1 0

SUSE-SU-2025:1014-1: important: Security update for buildah
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for buildah Announcement ID: SUSE-SU-2025:1014-1 Release Date: 2025-03-25T13:05:56Z Rating: important References: * bsc#1239339 Cross-References: * CVE-2025-22869 * CVE-2025-27144 CVSS scores: * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/… [View More]VA:H/SC:N/SI:N/SA:N * CVE-2025-27144 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for buildah fixes the following issues: * CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239339). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1014=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1014=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1014=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1014=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1014=1 ## Package List: * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * buildah-1.35.5-150400.3.45.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * buildah-1.35.5-150400.3.45.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150400.3.45.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * buildah-1.35.5-150400.3.45.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.35.5-150400.3.45.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-27144.html * https://bugzilla.suse.com/show_bug.cgi?id=1239339 [View Less]

1 0

SUSE-RU-2025:1016-1: important: Recommended update for systemd
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Recommended update for systemd Announcement ID: SUSE-RU-2025:1016-1 Release Date: 2025-03-25T14:59:19Z Rating: important References: * bsc#1234015 * bsc#1236643 * bsc#1236886 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update … [View More]that has three fixes can now be installed. ## Description: This update for systemd fixes the following issues: * udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015) * journald: close runtime journals before their parent directory removed * journald: reset runtime seqnum data when flushing to system journal (bsc#1236886) * Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643) It is likely an oversight from when systemd-userdb was migrated from the experimental package to the main one. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1016=1 openSUSE-SLE-15.6-2025-1016=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1016=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-1016=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * systemd-sysvcompat-254.24-150600.4.28.1 * libudev1-debuginfo-254.24-150600.4.28.1 * systemd-debuginfo-254.24-150600.4.28.1 * libsystemd0-254.24-150600.4.28.1 * udev-mini-254.24-150600.4.28.1 * systemd-journal-remote-254.24-150600.4.28.1 * systemd-container-254.24-150600.4.28.1 * udev-debuginfo-254.24-150600.4.28.1 * systemd-homed-254.24-150600.4.28.1 * libudev-mini1-254.24-150600.4.28.1 * systemd-experimental-254.24-150600.4.28.1 * systemd-portable-debuginfo-254.24-150600.4.28.1 * systemd-mini-container-debuginfo-254.24-150600.4.28.1 * udev-mini-debuginfo-254.24-150600.4.28.1 * systemd-container-debuginfo-254.24-150600.4.28.1 * systemd-experimental-debuginfo-254.24-150600.4.28.1 * systemd-sysvcompat-debuginfo-254.24-150600.4.28.1 * libudev1-254.24-150600.4.28.1 * systemd-devel-254.24-150600.4.28.1 * libsystemd0-mini-debuginfo-254.24-150600.4.28.1 * systemd-mini-254.24-150600.4.28.1 * udev-254.24-150600.4.28.1 * systemd-testsuite-254.24-150600.4.28.1 * systemd-254.24-150600.4.28.1 * systemd-mini-devel-254.24-150600.4.28.1 * systemd-network-254.24-150600.4.28.1 * systemd-homed-debuginfo-254.24-150600.4.28.1 * systemd-doc-254.24-150600.4.28.1 * libsystemd0-debuginfo-254.24-150600.4.28.1 * systemd-mini-debugsource-254.24-150600.4.28.1 * systemd-network-debuginfo-254.24-150600.4.28.1 * libsystemd0-mini-254.24-150600.4.28.1 * libudev-mini1-debuginfo-254.24-150600.4.28.1 * systemd-coredump-debuginfo-254.24-150600.4.28.1 * systemd-mini-debuginfo-254.24-150600.4.28.1 * systemd-mini-container-254.24-150600.4.28.1 * systemd-coredump-254.24-150600.4.28.1 * systemd-debugsource-254.24-150600.4.28.1 * systemd-testsuite-debuginfo-254.24-150600.4.28.1 * systemd-portable-254.24-150600.4.28.1 * systemd-journal-remote-debuginfo-254.24-150600.4.28.1 * openSUSE Leap 15.6 (x86_64) * libsystemd0-32bit-254.24-150600.4.28.1 * systemd-32bit-254.24-150600.4.28.1 * systemd-devel-32bit-254.24-150600.4.28.1 * systemd-32bit-debuginfo-254.24-150600.4.28.1 * libudev1-32bit-debuginfo-254.24-150600.4.28.1 * libsystemd0-32bit-debuginfo-254.24-150600.4.28.1 * libudev1-32bit-254.24-150600.4.28.1 * openSUSE Leap 15.6 (aarch64 x86_64 i586) * systemd-boot-debuginfo-254.24-150600.4.28.1 * systemd-boot-254.24-150600.4.28.1 * openSUSE Leap 15.6 (noarch) * systemd-lang-254.24-150600.4.28.1 * openSUSE Leap 15.6 (aarch64_ilp32) * systemd-devel-64bit-254.24-150600.4.28.1 * libsystemd0-64bit-254.24-150600.4.28.1 * libsystemd0-64bit-debuginfo-254.24-150600.4.28.1 * systemd-64bit-254.24-150600.4.28.1 * libudev1-64bit-debuginfo-254.24-150600.4.28.1 * libudev1-64bit-254.24-150600.4.28.1 * systemd-64bit-debuginfo-254.24-150600.4.28.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * systemd-sysvcompat-debuginfo-254.24-150600.4.28.1 * libudev1-254.24-150600.4.28.1 * systemd-sysvcompat-254.24-150600.4.28.1 * systemd-devel-254.24-150600.4.28.1 * udev-254.24-150600.4.28.1 * systemd-coredump-debuginfo-254.24-150600.4.28.1 * systemd-254.24-150600.4.28.1 * libudev1-debuginfo-254.24-150600.4.28.1 * systemd-debuginfo-254.24-150600.4.28.1 * libsystemd0-254.24-150600.4.28.1 * systemd-container-debuginfo-254.24-150600.4.28.1 * systemd-coredump-254.24-150600.4.28.1 * systemd-debugsource-254.24-150600.4.28.1 * systemd-journal-remote-254.24-150600.4.28.1 * systemd-doc-254.24-150600.4.28.1 * systemd-container-254.24-150600.4.28.1 * udev-debuginfo-254.24-150600.4.28.1 * libsystemd0-debuginfo-254.24-150600.4.28.1 * Basesystem Module 15-SP6 (noarch) * systemd-lang-254.24-150600.4.28.1 * Basesystem Module 15-SP6 (x86_64) * libsystemd0-32bit-254.24-150600.4.28.1 * systemd-32bit-254.24-150600.4.28.1 * systemd-32bit-debuginfo-254.24-150600.4.28.1 * libudev1-32bit-debuginfo-254.24-150600.4.28.1 * libsystemd0-32bit-debuginfo-254.24-150600.4.28.1 * libudev1-32bit-254.24-150600.4.28.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * systemd-network-254.24-150600.4.28.1 * systemd-debugsource-254.24-150600.4.28.1 * systemd-network-debuginfo-254.24-150600.4.28.1 * systemd-debuginfo-254.24-150600.4.28.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1234015 * https://bugzilla.suse.com/show_bug.cgi?id=1236643 * https://bugzilla.suse.com/show_bug.cgi?id=1236886 [View Less]

1 0

SUSE-RU-2025:0999-1: moderate: Recommended update for rsync
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Recommended update for rsync Announcement ID: SUSE-RU-2025:0999-1 Release Date: 2025-03-25T08:31:16Z Rating: moderate References: * bsc#1237187 Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux … [View More]Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for rsync fixes the following issues: * Broken rsyncd after protocol bump, regression reported (bsc#1237187). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-999=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-999=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-999=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-999=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-999=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-999=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-999=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-999=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-999=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-999=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-999=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-999=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-999=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-999=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-999=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-999=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-999=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-999=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-999=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-999=1 ## Package List: * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * rsync-debugsource-3.2.3-150000.4.36.3 * rsync-3.2.3-150000.4.36.3 * rsync-debuginfo-3.2.3-150000.4.36.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Manager Proxy 4.3 (x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Manager Retail Branch Server 4.3 (x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * rsync-debugsource-3.2.3-150000.4.36.3 * rsync-3.2.3-150000.4.36.3 * rsync-debuginfo-3.2.3-150000.4.36.3 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * rsync-debugsource-3.2.3-150000.4.36.3 * rsync-3.2.3-150000.4.36.3 * rsync-debuginfo-3.2.3-150000.4.36.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rsync-3.2.3-150400.3.23.3 * rsync-debugsource-3.2.3-150400.3.23.3 * rsync-debuginfo-3.2.3-150400.3.23.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1237187 [View Less]

1 0

SUSE-SU-2025:1003-1: important: Security update for libxslt
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for libxslt Announcement ID: SUSE-SU-2025:1003-1 Release Date: 2025-03-25T08:42:21Z Rating: important References: * bsc#1238591 * bsc#1239625 * bsc#1239637 Cross-References: * CVE-2023-40403 * CVE-2024-55549 * CVE-2025-24855 CVSS scores: * CVE-2023-40403 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2023-40403 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-55549 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:… [View More]N/UI:N/S:C/C:N/I:H/A:H * CVE-2024-55549 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H * CVE-2025-24855 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H * CVE-2025-24855 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for libxslt fixes the following issues: * CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591) * CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637) * CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1003=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1003=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1003=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1003=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-1003=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-1003=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1003=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1003=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libxslt-python-1.1.32-150000.3.17.1 * libxslt-python-debugsource-1.1.32-150000.3.17.1 * libxslt-python-debuginfo-1.1.32-150000.3.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libxslt-debugsource-1.1.32-150000.3.17.1 * libxslt-tools-debuginfo-1.1.32-150000.3.17.1 * libxslt1-1.1.32-150000.3.17.1 * libxslt1-debuginfo-1.1.32-150000.3.17.1 * libxslt-tools-1.1.32-150000.3.17.1 * libxslt-devel-1.1.32-150000.3.17.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * libxslt-debugsource-1.1.32-150000.3.17.1 * libxslt-tools-debuginfo-1.1.32-150000.3.17.1 * libxslt1-1.1.32-150000.3.17.1 * libxslt1-debuginfo-1.1.32-150000.3.17.1 * libxslt-tools-1.1.32-150000.3.17.1 * libxslt-devel-1.1.32-150000.3.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libxslt-debugsource-1.1.32-150000.3.17.1 * libxslt-tools-debuginfo-1.1.32-150000.3.17.1 * libxslt1-1.1.32-150000.3.17.1 * libxslt1-debuginfo-1.1.32-150000.3.17.1 * libxslt-tools-1.1.32-150000.3.17.1 * libxslt-devel-1.1.32-150000.3.17.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libxslt-debugsource-1.1.32-150000.3.17.1 * libxslt-tools-debuginfo-1.1.32-150000.3.17.1 * libxslt1-1.1.32-150000.3.17.1 * libxslt1-debuginfo-1.1.32-150000.3.17.1 * libxslt-tools-1.1.32-150000.3.17.1 * libxslt-devel-1.1.32-150000.3.17.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libxslt1-debuginfo-1.1.32-150000.3.17.1 * libxslt-debugsource-1.1.32-150000.3.17.1 * libxslt1-1.1.32-150000.3.17.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libxslt1-debuginfo-1.1.32-150000.3.17.1 * libxslt-debugsource-1.1.32-150000.3.17.1 * libxslt1-1.1.32-150000.3.17.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libxslt1-debuginfo-1.1.32-150000.3.17.1 * libxslt-debugsource-1.1.32-150000.3.17.1 * libxslt1-1.1.32-150000.3.17.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40403.html * https://www.suse.com/security/cve/CVE-2024-55549.html * https://www.suse.com/security/cve/CVE-2025-24855.html * https://bugzilla.suse.com/show_bug.cgi?id=1238591 * https://bugzilla.suse.com/show_bug.cgi?id=1239625 * https://bugzilla.suse.com/show_bug.cgi?id=1239637 [View Less]

1 0

SUSE-SU-2025:1005-1: important: Security update for google-guest-agent
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for google-guest-agent Announcement ID: SUSE-SU-2025:1005-1 Release Date: 2025-03-25T08:43:38Z Rating: important References: * bsc#1239197 Cross-References: * CVE-2025-22868 CVSS scores: * CVE-2025-22868 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Public Cloud Module 15-SP3 * Public … [View More]Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for google-guest-agent fixes the following issues: * CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239197) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-1005=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1005=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1005=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2025-1005=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-1005=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2025-1005=1 ## Package List: * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * google-guest-agent-20250116.00-150000.1.57.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * google-guest-agent-20250116.00-150000.1.57.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * google-guest-agent-20250116.00-150000.1.57.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * google-guest-agent-20250116.00-150000.1.57.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * google-guest-agent-20250116.00-150000.1.57.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * google-guest-agent-20250116.00-150000.1.57.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22868.html * https://bugzilla.suse.com/show_bug.cgi?id=1239197 [View Less]

1 0

SUSE-SU-2025:1006-1: important: Security update for google-osconfig-agent
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for google-osconfig-agent Announcement ID: SUSE-SU-2025:1006-1 Release Date: 2025-03-25T08:44:14Z Rating: important References: * bsc#1239197 Cross-References: * CVE-2025-22868 CVSS scores: * CVE-2025-22868 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Public Cloud Module 15-SP3 * Public … [View More]Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issues: * CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239197) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1006=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1006=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2025-1006=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-1006=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2025-1006=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-1006=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20250115.01-150000.1.47.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20250115.01-150000.1.47.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20250115.01-150000.1.47.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20250115.01-150000.1.47.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20250115.01-150000.1.47.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20250115.01-150000.1.47.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22868.html * https://bugzilla.suse.com/show_bug.cgi?id=1239197 [View Less]

1 0

SUSE-SU-2025:1007-1: moderate: Security update for helm
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for helm Announcement ID: SUSE-SU-2025:1007-1 Release Date: 2025-03-25T08:44:57Z Rating: moderate References: * bsc#1238688 Cross-References: * CVE-2025-22870 CVSS scores: * CVE-2025-22870 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-22870 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2025-22870 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * … [View More]Containers Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2025-22870: Fixed proxy bypass using IPv6 zone IDs (bsc#1238688). Other fixes: \- Updated to version 3.17.2 \- Updated to 0.37.0 for x/net ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-1007=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2025-1007=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-1007=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1007=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.17.2-150000.1.44.1 * helm-3.17.2-150000.1.44.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * helm-bash-completion-3.17.2-150000.1.44.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.17.2-150000.1.44.1 * helm-3.17.2-150000.1.44.1 * Containers Module 15-SP6 (noarch) * helm-bash-completion-3.17.2-150000.1.44.1 * helm-zsh-completion-3.17.2-150000.1.44.1 * SUSE Package Hub 15 15-SP6 (noarch) * helm-fish-completion-3.17.2-150000.1.44.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.17.2-150000.1.44.1 * helm-3.17.2-150000.1.44.1 * openSUSE Leap 15.6 (noarch) * helm-bash-completion-3.17.2-150000.1.44.1 * helm-zsh-completion-3.17.2-150000.1.44.1 * helm-fish-completion-3.17.2-150000.1.44.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22870.html * https://bugzilla.suse.com/show_bug.cgi?id=1238688 [View Less]

1 0

SUSE-SU-2025:1008-1: important: Security update for python-gunicorn
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for python-gunicorn Announcement ID: SUSE-SU-2025:1008-1 Release Date: 2025-03-25T11:09:27Z Rating: important References: * bsc#1239830 Cross-References: * CVE-2024-6827 CVSS scores: * CVE-2024-6827 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-6827 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-6827 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected … [View More]Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python-gunicorn fixes the following issues: * CVE-2024-6827: Fixed improper validation of the 'Transfer-Encoding' header value can allow for HTTP request smuggling attacks (bsc#1239830) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1008=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1008=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2025-1008=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1008=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1008=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1008=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1008=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1008=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1008=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1008=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1008=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * openSUSE Leap 15.6 (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * Python 3 Module 15-SP6 (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-gunicorn-20.1.0-150400.12.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-6827.html * https://bugzilla.suse.com/show_bug.cgi?id=1239830 [View Less]

1 0

SUSE-SU-2025:1011-1: important: Security update for grafana
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for grafana Announcement ID: SUSE-SU-2025:1011-1 Release Date: 2025-03-25T11:44:37Z Rating: important References: * bsc#1237671 * jsc#MSQA-935 Cross-References: * CVE-2025-27144 CVSS scores: * CVE-2025-27144 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-27144 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/… [View More]

1 0

SUSE-SU-2025:0998-1: important: Security update for freetype2
by OPENSUSE-UPDATES 25 Mar '25

25 Mar '25

# Security update for freetype2 Announcement ID: SUSE-SU-2025:0998-1 Release Date: 2025-03-25T02:08:14Z Rating: important References: * bsc#1239465 Cross-References: * CVE-2025-27363 CVSS scores: * CVE-2025-27363 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-27363 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-27363 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: … [View More] * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for freetype2 fixes the following issues: * CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font subglyph structures related to TrueType GX and variable font files (bsc#1239465). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-998=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-998=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-998=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-998=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-998=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-998=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-998=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-998=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-998=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-998=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-998=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-998=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-998=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-998=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-998=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-998=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-998=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-998=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-998=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-998=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-998=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-998=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-998=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-998=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-998=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-998=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ftinspect-2.10.4-150000.4.18.1 * ftstring-2.10.4-150000.4.18.1 * ftgamma-2.10.4-150000.4.18.1 * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * ftdiff-2.10.4-150000.4.18.1 * ftmulti-2.10.4-150000.4.18.1 * ftvalid-2.10.4-150000.4.18.1 * ftview-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * ftbench-2.10.4-150000.4.18.1 * ftlint-2.10.4-150000.4.18.1 * ftgrid-2.10.4-150000.4.18.1 * openSUSE Leap 15.6 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * freetype2-devel-32bit-2.10.4-150000.4.18.1 * openSUSE Leap 15.6 (noarch) * freetype2-profile-tti35-2.10.4-150000.4.18.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * Basesystem Module 15-SP6 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * Desktop Applications Module 15-SP6 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Manager Proxy 4.3 (x86_64) * libfreetype6-32bit-2.10.4-150000.4.18.1 * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libfreetype6-32bit-2.10.4-150000.4.18.1 * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * SUSE Manager Server 4.3 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * freetype2-devel-2.10.4-150000.4.18.1 * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * ftdump-2.10.4-150000.4.18.1 * SUSE Enterprise Storage 7.1 (nosrc) * ft2demos-2.10.4-150000.4.18.1 * SUSE Enterprise Storage 7.1 (x86_64) * libfreetype6-32bit-debuginfo-2.10.4-150000.4.18.1 * libfreetype6-32bit-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libfreetype6-2.10.4-150000.4.18.1 * libfreetype6-debuginfo-2.10.4-150000.4.18.1 * freetype2-debugsource-2.10.4-150000.4.18.1 ## References: * https://www.suse.com/security/cve/CVE-2025-27363.html * https://bugzilla.suse.com/show_bug.cgi?id=1239465 [View Less]

1 0

SUSE-RU-2025:0995-1: moderate: Recommended update for glassfish-servlet-api
by OPENSUSE-UPDATES 24 Mar '25

24 Mar '25

# Recommended update for glassfish-servlet-api Announcement ID: SUSE-RU-2025:0995-1 Release Date: 2025-03-24T16:11:10Z Rating: moderate References: Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update … [View More]

1 0

SUSE-OU-2025:0996-1: moderate: Feature update for kubernetes-client
by OPENSUSE-UPDATES 24 Mar '25

24 Mar '25

# Feature update for kubernetes-client Announcement ID: SUSE-OU-2025:0996-1 Release Date: 2025-03-24T17:07:00Z Rating: moderate References: * jsc#PED-11106 Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature can now be installed. ## Description: This update for the kubernetes … [View More]

1 0

SUSE-RU-2025:0997-1: moderate: Recommended update for openssh
by OPENSUSE-UPDATES 24 Mar '25

24 Mar '25

# Recommended update for openssh Announcement ID: SUSE-RU-2025:0997-1 Release Date: 2025-03-24T17:52:16Z Rating: moderate References: * bsc#1236826 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now … [View More]be installed. ## Description: This update for openssh fixes the following issue: * Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2 due to gssapi proposal not being correctly initialized (bsc#1236826). The problem was introduced in the rebase of the patch for 9.6p1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-997=1 openSUSE-SLE-15.6-2025-997=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-997=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-997=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * openssh-debuginfo-9.6p1-150600.6.18.4 * openssh-common-debuginfo-9.6p1-150600.6.18.4 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.18.4 * openssh-common-9.6p1-150600.6.18.4 * openssh-fips-9.6p1-150600.6.18.4 * openssh-askpass-gnome-9.6p1-150600.6.18.3 * openssh-helpers-9.6p1-150600.6.18.4 * openssh-helpers-debuginfo-9.6p1-150600.6.18.4 * openssh-server-9.6p1-150600.6.18.4 * openssh-9.6p1-150600.6.18.4 * openssh-clients-debuginfo-9.6p1-150600.6.18.4 * openssh-debugsource-9.6p1-150600.6.18.4 * openssh-cavs-debuginfo-9.6p1-150600.6.18.4 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.18.3 * openssh-server-debuginfo-9.6p1-150600.6.18.4 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.18.3 * openssh-cavs-9.6p1-150600.6.18.4 * openssh-clients-9.6p1-150600.6.18.4 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssh-debuginfo-9.6p1-150600.6.18.4 * openssh-common-debuginfo-9.6p1-150600.6.18.4 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.18.4 * openssh-common-9.6p1-150600.6.18.4 * openssh-fips-9.6p1-150600.6.18.4 * openssh-helpers-9.6p1-150600.6.18.4 * openssh-helpers-debuginfo-9.6p1-150600.6.18.4 * openssh-server-9.6p1-150600.6.18.4 * openssh-9.6p1-150600.6.18.4 * openssh-clients-debuginfo-9.6p1-150600.6.18.4 * openssh-debugsource-9.6p1-150600.6.18.4 * openssh-server-debuginfo-9.6p1-150600.6.18.4 * openssh-clients-9.6p1-150600.6.18.4 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-9.6p1-150600.6.18.3 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.18.3 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.18.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1236826 [View Less]

1 0

openSUSE-SU-2025:0102-1: moderate: Security update for git-bug
by opensuse-security＠opensuse.org 24 Mar '25

24 Mar '25

openSUSE Security Update: Security update for git-bug ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0102-1 Rating: moderate References: #1234565 #1239494 Cross-References: CVE-2024-45337 CVE-2025-22869 CVSS scores: CVE-2024-45337 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-22869 (SUSE): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:… [View More]

1 0

openSUSE-RU-2025:0105-1: moderate: Recommended update for caddy
by maintenance＠opensuse.org 24 Mar '25

24 Mar '25

openSUSE Recommended Update: Recommended update for caddy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2025:0105-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for caddy fixes the … [View More]following issues: - Update to version 2.9.1: * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance) * header: `match` subdirective for response matching (#6765) * log: Only chmod if permission bits differ; make log dir (#6761) * fix: disable h3 for unix domain socket (#6769) * reverseproxy: buffer requests for fastcgi by default (#6759) * core: Only initiate exit once (should fix #6707) - Update to version 2.9.0: * go.mod: Upgrade CertMagic to v0.21.5 * testing: sort force-automated hosts (#6756) * httpcaddyfile: Implement experimental `force_automate` option (#6712) * encode: try to use sendfile when compression is not used (#6749) * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629) * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic * cmd: Disable go1.23 tlskyber=1 experiment * Update SECURITY.md * fastcgi: check for CONTENT_LENGTH when sending requests (#6661) * reverseproxy: Set Content-Length when body is fully buffered (#6638) * core: Change ListenerFunc signature (#6651) * reverseproxy: Only handle websocket protocol (#6740) * encode: write status immediate for success response for CONNECT requests (#6738) * encode: good defaults (#6737) * fileserver: add a test for precompressed defaults (#6743) * fileserver: good default for precompressed (#6736) * chore: fix some typo in HTTPLoader comment (#6735) * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567) * chore: bump golang.org/x/net to v0.32.0 (#6728) * fileserver: Fix policy `Validate()` oversight (#6727) * cmd: Reject multiple configs for fmt command (#6717) * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699) * caddyhttp: Add `{?query}` placeholder (#6714) * ci: prevent jobs running on PRs from forks (#6720) * go.mod: Upgrade quic-go to 0.48.2 * metrics: add `go` and `process` collectors (#6704) * requestbody: Type-based error handling for `MaxBytesError` (#6701) * fastcgi: remove dir redirection when useless in php_fastcgi (#6698) * caddyhttp: Set default ReadHeaderTimeout (1 min) * cmd: ignore missing keys during storage export (#6697) * chore: make FastAbs comment more easy to understand (#6692) * chore: Add `provides` to `.deb` releases (#6691) * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687) * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode * httpcaddyfile: Implement log `sampling` config (#6682) * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681) * ci: use commit sha in goreleaser-check (#6677) * go.mod: Update certmagic * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593) * rewrite: Don't add / in Caddyfile, do it after replacer (#6662) * fileserver: Add `file_limit` option for browse (to be experimental) (#6648) * go.mod: upgrade only some otel deps (#6676) * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596) * Fix tests * forwardauth: Skip copying missing response headers (#6608) * go.mod: Update dependencies * events: Use `WithLazy` to prevent eager serialization of the event data (#6671) * fileserver: Fix Caddyfile parsing * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636) * cmd: Allow `add-package` to select version of package (#6665) * chore: compile without nosql's support for Postgres and MySQL (#6655) * chore: Bump quic-go to 0.48.1, fixing a panic (#6654) * reverseproxy: Sync changes from stdlib for 1xx handling (#6656) * reverseproxy: Fix log message * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646) * core: addresses.go funcs renames (#6622) * chore: fix some function names in comment (#6650) * fileserver: fix try_policy when instantiating file matcher from CEL (#6624) * sigtrap: always ignore SIGPIPE (#6645) * metrics: move `metrics` up, outside `servers` (#6606) * caddyhttp: Close http3 server gracefully (#6213) * chore: update quic-go to v0.48.0 (#6627) * reverseproxy: Use correct cases for websocket related headers (#6621) * caddyfile: Fix comma edgecase in address parsing (#6616) * docs: expand proxy protocol docs (#6620) * tests: fix caddyfile adapt warnings (#6619) * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611) * caddyhttp: Use internal issuer for IPs when no APs configured * go.mod: Upgrade some dependencies * ci: install xcaddy to fix release flow (#6602) * metrics: scope metrics to active config, add optional per-host metrics (#6531) * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146) * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594) * cmd: Better error handling when reloading (#6601) * caddytls: Support new tls.context module (#6369) * http: ReponseWriter prefer ReadFrom if available (#6565) * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598) * caddyhttp: Fix listener wrapper regression from #6573 (#6599) * core: Implement socket activation listeners (#6573) * doc: remove docs of deprecated directives (#6566) * caddyhttp: Optimize logs using zap's WithLazy() (#6590) * chore: Use slices package where possible (#6585) * caddytls: Give a better error message when given encrypted private keys (#6591) * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581) * update quic-go to v0.47.0 (#6582) * ci: update the linter action version (#6575) * perf: use zap's Check() to prevent useless allocs (#6560) * rewrite: Avoid panic on bad arg count for `uri` (#6571) * caddytls: Add sni_regexp matcher (#6569) * caddyhttp: Make route provisioning idempotent (#6558) * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553) * fileserver: browse: Configurable default sort (#6502) * rewrite: Only serialize request if necessary (#6541) * ci: prepare syso files for windows embedding in release (#6406) * tls: use Go default kex for the moment that include PQC (#6542) * ci: build and test with Go 1.23 (#6526) * reverseproxy: allow user to define source address (#6504) * caddyhttp: run `error` (msg) through replacer (#6536) * chore: Fix a typo (#6534) * cmd: Use a factory to create the caddy root command (#6533) * reverseproxy: Change errors writing the response to warning. (#6532) * reverseproxy: Active health checks request body option (#6520) * ci: don't exit early on error in remote CI machine (#6519) * cmd: ignore exec.ErrDot when starting caddy in background (#6512) * Move PrivateRangesCIDR() back: add a pass-through function (#6514) * matchers: fix a regression in #6480 (#6510) * reverseproxy: Disable keep alive for h2c requests (#6343) * go.mod: update update golang/x/net (#6500) * replacer: `{file.*}` global placeholder strips trailing newline (#6411) * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480) * go.mod: update quic-go package (#6498) * browse: Customizable default sort options (#6468) * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485) * encode: flush already compressed data from the encoder (#6471) * chore: update golangci config (#6479) * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462) * caddytls: Caddyfile support for TLS handshake matchers (#6461) * ci: correct `-tags nobadger` on binary build (#6470) * reverseproxy: Fix panic when using header-related flags (fix #6464) * reverseproxy: add health_upstream subdirective (#6451) * reverseproxy: Caddyfile support for health_method (#6454) * reverseproxy: Configurable method for active health checks (#6453) * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450) * fixed bug in resolving ip version in dynamic upstreams (#6448) * browse: Exclude symlink target size from total, show arrow on size (#6412) * browse: fix Content-Security-Policy warnings in Firefox (#6443) * browse: add Content-Security-Policy w/ nonce (#6425) * reverseproxy: Add placeholder for host in active health check headers (#6440) * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427) * encode: Don't compress already-compressed fonts (#6432) * reverseproxy: Only log host is up status on change (fixes #6415) (#6419) * intercept: fix http.intercept.header.* placeholder (#6429) * reverseproxy: Wire up TLS options for H3 transport * fileserver: Remove newline characters from precomputed etags (#6394) * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher * reverseproxy: add Max-Age option to sticky cookie (#6398) * caddyfile: Pass blocks to `import` for snippets (#6130) * logging: set file mode when the file already exist (#6391) * logging: Customizable zap cores (#6381) * go.mod: update tscert package (#6384) * logging: fix file mode configuration parsing (#6383) * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380) * core: Split `run` into a public `ProvisionContext` and a private method (#6378) * logging: Customize log file permissions (#6314) * events: Getters for event info (close #6377) * ci: add version key for .goreleaser.yml (#6376) * cmd: remove zealous check of Caddyfile auto-detection (#6370) * caddyhttp: Add test cases to corpus (#6374) * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2025-105=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): caddy-2.9.1-bp156.3.6.1 - openSUSE Backports SLE-15-SP6 (noarch): caddy-bash-completion-2.9.1-bp156.3.6.1 caddy-fish-completion-2.9.1-bp156.3.6.1 caddy-zsh-completion-2.9.1-bp156.3.6.1 References: [View Less]

1 0

openSUSE-RU-2025:0104-1: moderate: Recommended update for gh
by maintenance＠opensuse.org 24 Mar '25

24 Mar '25

openSUSE Recommended Update: Recommended update for gh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2025:0104-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gh fixes the following … [View More]issues: - Update to version 2.68.1: * Fix secret command panic when base repo from cwd * Fix(ci): base64 decode GPG passphrase * Update pkg/cmd/attestation/verification/attestation.go * Update pkg/cmd/attestation/verification/attestation.go * Fix acceptance test descriptions * Fix gh secret disambiguity test * Expand gh secret acceptance tests * Expand gh secret base repo tests * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation * Deep Dive Document Release Process (#10503) * Fix unhandled panic in FindWorkflow and add tests * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2 * Fix checkout when URL arg is from fork and cwd is upstream * Update `project` help text; fix `unlink` usage * Inconsistent format of examples in help text * Inconsistent format of description of flags (starting with lowercase letter) (#10507) * Update Go version to 1.23 in CONTRIBUTING.md * Fix minor auth login help typo * Add docs; rename function name * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 * docs: OAuth doc link moves to newline * fix expected test output * undo regex changes * remove signer-ref option * chore: update go version in devcontainer * docs: warn about process revoking all tokens * docs: document how to revoke `gh` OAuth tokens * refactor: use a more straightforward return value * Test pr checkout force on different branch * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic * Allow injection of TUFMetadataDir in tests * Refactor remote resolver caching tests * Fix `remoteResolver` caching issue * Address pr comments * Add test for item-edit --number 0 * Support setting project item number to 0 * Wrap error * Rename flag to `--fail-on-no-commits` * Update tests * Fix non-TTY case * Suggestions to enhance upstream default handling * Use API REST Client * Use subtests in attestation verification integration tests * update default upstream when forking repo * Update usage to lower-kebab-case * Fix typo in README * Add missing <> in gh auth login docs * Add mutex to fix race in attestation test client * Update tests * Remove trailing whitespace * Standardize URLs * [gh issue/pr comment] Create a comment if no comment already * Update tests * Address review comments * Align no default repo message with other uses * [gh release create] Fail when there are no new commits since the most recent release * Use API without shorthand flag * Update tests * [gh api] Escape package name (URL encoding) for packages endpoint * remove custom transport * var naming * dedup local bundle err handling * Update tests * Add test cases for succeed on no cache and api errors for --all (#1) * Remove short (abbreviated) flag support * Address PR review comments * add checks to cert extensions func * fix option ordering * fix issues causing tests to fail * add signer and source ref, commit options * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 * [gh repo view] Improve error message for forked repo * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0 * set new options in enforcement criteria * reorder fields * add new signing options - Update to version 2.67.0: * Exit with error if no matching predicate type exists * Fix logic error in contributing docs * Improve http error test cases * Handle non-TTY behavior * Do not try to parse bodies for HEAD requests * Update pkg/cmd/pr/status/status.go * Collapse related instructions * Remove redundant instructions * Update language * [gh pr status] Mention `gh pr checks` in the `Long` section * Update release doc content * Doc: Clarify guidelines for `help wanted` issues and prs * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 * Update tests * [gh project item-edit] Fix number type * Address review comments * Address review comments * Revert breaking change * Revert "[gh repo edit] Allow setting commit message defaults" * Use HTML numeric code instead of escaping with slash * [gh config] Escape pipe symbol in Long desc for website manual * Ensure item iteration field is populated in tests * Drop accidental help text change * Error when `gh repo rename` is used with a new repo name that contains an owner * [gh repo edit] Allow setting commit title defaults * Rename staggler * Formatting * AuoLink -> Autolink * Use http constants * refac and some spacing in output * More consistency * whitespace * clean up * Autolink delete http tests * Revert change to deps * Autolink delete tests * Initial working implementation * remove duplicated Prompter type * revert isEqualSet to private * Revert color changes * [docs/releasing.md] Add basic info for homebrew update flow * consolidate tests around getBundle func when possible * change permanent backoff error condition * Remove unused env var, PRID * dont retry when parsing fails * Update test * [gh issue/pr list] Improve help text * [gh extensions install] Improve help text and error message * [gh api] Fix mutual exclusion messages of `--slurp` flag * Remove v1 project 'add to board' automation from prauto workflow * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue * [gh workflow run] Improve error handling for `--ref` flag * update tests * add missing return statement * method update * update no attestations found err * remove old tests * drop unneeded methods * deduplicate get attestation code * fix tests * update testing * chore: remove unused file * feat: integrate new PRLister into pr list command * issue #2329: create shared PRLister * fix: tab format may break checkout prompts * issue #2329: handle empty list of PR * issue #2329: include PR status in the prompt's options * issue #2329: fix prompt header getting duplicated * issue #2329: simplify the UI of the prompt * issue #2329: update the prompt's format * issue #2329: fix unit tests * issue cli#2329: Fix linter * issue cli#2329: fix unsufficent properties required for PR checkout * issue #2329: move Interactive check to RunE * fix: update the copy * issue #2329: return error when not running interactively * issue #2329: fix missing stub * issue #2329: improve UI/UX * issue #2329: add happy path unit test * issue #2329: fix the linting issue * issue #2329: fix the unit tests issue - ensure its backward compatible * feat: let user select pr to checkout Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2025-104=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): gh-2.68.1-bp156.2.23.1 - openSUSE Backports SLE-15-SP6 (noarch): gh-bash-completion-2.68.1-bp156.2.23.1 gh-fish-completion-2.68.1-bp156.2.23.1 gh-zsh-completion-2.68.1-bp156.2.23.1 References: [View Less]

1 0

openSUSE-SU-2025:0103-1: moderate: Security update for cadvisor
by opensuse-security＠opensuse.org 24 Mar '25

24 Mar '25

openSUSE Security Update: Security update for cadvisor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0103-1 Rating: moderate References: #1222192 #1239291 Cross-References: CVE-2022-27664 CVE-2025-22868 CVSS scores: CVE-2022-27664 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22868 (SUSE): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/… [View More]SC:N/SI:N/SA:N Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for cadvisor fixes the following issues: - update to 0.52.1: * Make resctrl optional/pluggable - update to 0.52.0: * bump containerd related deps: api v1.8.0; errdefs v1.0.0; ttrpc v1.2.6 * chore: Update Prometheus libraries * bump runc to v1.2.4 * Add Pressure Stall Information Metrics * Switch to opencontainers/cgroups repository (includes update from golang 1.22 to 1.24) * Bump to newer opencontainers/image-spec @ v1.1.1 - update to 0.49.2: * Cp fix test * Revert "reduce_logs_for_kubelet_use_crio" - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (boo#1239291) - Update to version 0.49.1: * build docker - add --provenance=false flag * Remove s390x support * Disable libipmctl in build * Ugrade base image to 1.22 and alpine 3.18 * fix type of C.malloc in cgo * Bump runc to v1.1.12 * Bump to bullseye * Remove section about canary image * Add note about WebUI auth * Remove mentions of accelerator from the docs * reduce_logs_for_kubelet_use_crio * upgrade actions/checkout and actions/setup-go and actions/upload-artifact * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd * add cadvisor and crio upstream changes * Avoid using container/podman in manager.go * container: skip checking for files in non-existent directories. * Adjust the log level of Initialize Plugins * add ignored device * fix: variable naming * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd * manager: require higher verbosity level for container info misses * Information should be logged on increased verbosity only * Running do mod tidy * Running go mod tidy * Running go mod tidy * container/libcontainer: Improve limits file parsing perf * container/libcontainer: Add limit parsing benchmark * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd * build(deps): bump github.com/cyphar/filepath-securejoin * Set verbosity after flag definition * fix: error message typo * vendor: bump runc to 1.1.9 * Switch to use busybox from registry.k8s.io * Bump golang ci lint to v1.54.1 * Bump github.com/docker/docker in /cmd * Bump github.com/docker/docker * Bump github.com/docker/distribution in /cmd * Bump github.com/docker/distribution * Update genproto dependency to isolated submodule * remove the check for the existence of NFS files, which will cause unnecessary requests. * reduce inotify watch * fix performance degradation of NFS * fix: fix type issue * fix: fix cgo memory leak * ft: export memory kernel usage * sysinfo: Ignore "hidden" sysfs device entries * Increasing required verbosity level * Patch to fix issue 2341 * podman support: Enable Podman support. * podman support: Create Podman handler. * podman support: Changes in Docker handler. * unit test: machine_swap_bytes * Add documentation for machine_swap_bytes metric * Add a machine_swap_bytes metric * fix: add space trimming for label allowlist * Upgrade to blang/semver/v4 v4.0.0 * docs(deploy/k8s): remote build for kustomize * Update dependencies * Change filepaths to detect online CPUs * Update actions/checkout to v3 * Fix flags typo * Updating location of kubernetes/pause image * Using t.TempDir() in tests * Unit test: MachineInfo Clone() method * Bugfix: MachineInfo Clone() - clone SwapCapacity * Optimize network metrics collection * Removing calls to deprecates io/ioutil package * Updating minimum Go version to 1.19 * Request the pid of another container if current pid is not longer valid * Restructure * Add CRI-O client timeout setting * Set containerd grpc.MaxCallRecvMsgSize to 16MB * Fix asset build * feat(logging): add verbosity to non-NUMA node warning * add nerdctl to ignoredDevices * nvm: Change the "no NVM devices" log. * nvm: Fix typo. * Fix CVE-2022-27664 (#3248) * resctrl: Reduce size and mode files check (#3264) * readme: Update Creatone contributor info. (#3265) * Fix comment to refer to correct client * build: bump golang to 1.20 * ci: Update golang ci-lint to v1.51.2 * build: Update shebang to python3 * Revert "dockerfile: Fix typo in go build tags." * Decreasing verbosity level for "Cannot read vendor id correctly, set empty" * dockerfile: Fix typo in go build tags. * deps: Move from cloud.google.com/go/compute -> cloud.google.com/go * use memory.min for reservation memory instead of high * Mark GOPATH as git safe.directory to fix CI build * switch to gomodule/redigo from garyburd/redigo * update go.mod/sum both in root and cmd/ * Drop accelerator metrics and nvidia integration * Add s390x support for docker image * typo in MachineInfo spec for SwapCapacity * add support for swap in machine/info Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2025-103=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): cadvisor-0.52.1-bp156.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-27664.html https://www.suse.com/security/cve/CVE-2025-22868.html https://bugzilla.suse.com/1222192 https://bugzilla.suse.com/1239291 [View Less]

1 0

SUSE-SU-2025:0994-1: important: Security update for php8
by OPENSUSE-UPDATES 24 Mar '25

24 Mar '25

# Security update for php8 Announcement ID: SUSE-SU-2025:0994-1 Release Date: 2025-03-24T15:11:08Z Rating: important References: * bsc#1239664 * bsc#1239666 * bsc#1239667 * bsc#1239668 * bsc#1239669 * bsc#1239670 Cross-References: * CVE-2024-11235 * CVE-2025-1217 * CVE-2025-1219 * CVE-2025-1734 * CVE-2025-1736 * CVE-2025-1861 CVSS scores: * CVE-2024-11235 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-1217 ( SUSE ): 7.3 CVSS:… [View More]3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-1219 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-1734 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-1736 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-1861 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Server 4.3 An update that solves six vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666) * CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664) * CVE-2025-1219: Fixed libxml streams using wrong content-type header when requesting a redirected resource (bsc#1239667) * CVE-2025-1734: Fixed streams HTTP wrapper not failing for headers with invalid name and no colon (bsc#1239668) * CVE-2025-1736: Fixed stream HTTP wrapper header check might omitting basic auth header (bsc#1239670) * CVE-2025-1861: Fixed stream HTTP wrapper truncate redirect location to 1024 bytes (bsc#1239669) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-994=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-994=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-994=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-994=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-994=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-994=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-994=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-994=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-994=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-994=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * php8-ldap-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debugsource-8.0.30-150400.4.54.1 * php8-enchant-debuginfo-8.0.30-150400.4.54.1 * php8-mysql-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-8.0.30-150400.4.54.1 * php8-pdo-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-debuginfo-8.0.30-150400.4.54.1 * php8-pgsql-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-8.0.30-150400.4.54.1 * php8-soap-debuginfo-8.0.30-150400.4.54.1 * php8-tokenizer-8.0.30-150400.4.54.1 * php8-openssl-8.0.30-150400.4.54.1 * php8-fpm-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-8.0.30-150400.4.54.1 * php8-readline-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-8.0.30-150400.4.54.1 * php8-openssl-debuginfo-8.0.30-150400.4.54.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.54.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.54.1 * php8-exif-8.0.30-150400.4.54.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.54.1 * php8-phar-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-8.0.30-150400.4.54.1 * php8-enchant-8.0.30-150400.4.54.1 * php8-sysvmsg-8.0.30-150400.4.54.1 * php8-gmp-8.0.30-150400.4.54.1 * php8-pcntl-debuginfo-8.0.30-150400.4.54.1 * php8-cli-debuginfo-8.0.30-150400.4.54.1 * php8-ldap-8.0.30-150400.4.54.1 * php8-zip-8.0.30-150400.4.54.1 * php8-opcache-debuginfo-8.0.30-150400.4.54.1 * php8-snmp-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-debuginfo-8.0.30-150400.4.54.1 * php8-xmlwriter-8.0.30-150400.4.54.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-8.0.30-150400.4.54.1 * php8-debugsource-8.0.30-150400.4.54.1 * php8-iconv-debuginfo-8.0.30-150400.4.54.1 * php8-sqlite-8.0.30-150400.4.54.1 * php8-intl-debuginfo-8.0.30-150400.4.54.1 * php8-posix-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-8.0.30-150400.4.54.1 * php8-readline-8.0.30-150400.4.54.1 * php8-iconv-8.0.30-150400.4.54.1 * php8-test-8.0.30-150400.4.54.1 * php8-mysql-8.0.30-150400.4.54.1 * php8-opcache-8.0.30-150400.4.54.1 * php8-curl-debuginfo-8.0.30-150400.4.54.1 * php8-exif-debuginfo-8.0.30-150400.4.54.1 * php8-zip-debuginfo-8.0.30-150400.4.54.1 * php8-8.0.30-150400.4.54.1 * php8-soap-8.0.30-150400.4.54.1 * php8-tidy-8.0.30-150400.4.54.1 * php8-devel-8.0.30-150400.4.54.1 * php8-bcmath-debuginfo-8.0.30-150400.4.54.1 * php8-ctype-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-debuginfo-8.0.30-150400.4.54.1 * php8-sysvshm-8.0.30-150400.4.54.1 * php8-pcntl-8.0.30-150400.4.54.1 * php8-debuginfo-8.0.30-150400.4.54.1 * php8-gmp-debuginfo-8.0.30-150400.4.54.1 * php8-ftp-debuginfo-8.0.30-150400.4.54.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.54.1 * php8-mbstring-8.0.30-150400.4.54.1 * php8-intl-8.0.30-150400.4.54.1 * php8-sodium-8.0.30-150400.4.54.1 * php8-zlib-debuginfo-8.0.30-150400.4.54.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.54.1 * php8-embed-debuginfo-8.0.30-150400.4.54.1 * php8-calendar-8.0.30-150400.4.54.1 * php8-sockets-debuginfo-8.0.30-150400.4.54.1 * php8-xsl-debuginfo-8.0.30-150400.4.54.1 * php8-gd-debuginfo-8.0.30-150400.4.54.1 * php8-shmop-debuginfo-8.0.30-150400.4.54.1 * php8-bz2-8.0.30-150400.4.54.1 * php8-dba-debuginfo-8.0.30-150400.4.54.1 * php8-posix-8.0.30-150400.4.54.1 * php8-bcmath-8.0.30-150400.4.54.1 * php8-pgsql-8.0.30-150400.4.54.1 * php8-tidy-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-debuginfo-8.0.30-150400.4.54.1 * php8-dom-8.0.30-150400.4.54.1 * php8-cli-8.0.30-150400.4.54.1 * php8-sysvsem-8.0.30-150400.4.54.1 * php8-fastcgi-8.0.30-150400.4.54.1 * php8-odbc-debuginfo-8.0.30-150400.4.54.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.54.1 * php8-curl-8.0.30-150400.4.54.1 * php8-bz2-debuginfo-8.0.30-150400.4.54.1 * php8-dba-8.0.30-150400.4.54.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.54.1 * php8-gettext-8.0.30-150400.4.54.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.54.1 * php8-dom-debuginfo-8.0.30-150400.4.54.1 * php8-zlib-8.0.30-150400.4.54.1 * php8-fpm-debugsource-8.0.30-150400.4.54.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.54.1 * php8-odbc-8.0.30-150400.4.54.1 * php8-sodium-debuginfo-8.0.30-150400.4.54.1 * php8-sockets-8.0.30-150400.4.54.1 * php8-fpm-8.0.30-150400.4.54.1 * php8-embed-8.0.30-150400.4.54.1 * php8-embed-debugsource-8.0.30-150400.4.54.1 * php8-pdo-8.0.30-150400.4.54.1 * php8-gd-8.0.30-150400.4.54.1 * php8-shmop-8.0.30-150400.4.54.1 * php8-phar-8.0.30-150400.4.54.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11235.html * https://www.suse.com/security/cve/CVE-2025-1217.html * https://www.suse.com/security/cve/CVE-2025-1219.html * https://www.suse.com/security/cve/CVE-2025-1734.html * https://www.suse.com/security/cve/CVE-2025-1736.html * https://www.suse.com/security/cve/CVE-2025-1861.html * https://bugzilla.suse.com/show_bug.cgi?id=1239664 * https://bugzilla.suse.com/show_bug.cgi?id=1239666 * https://bugzilla.suse.com/show_bug.cgi?id=1239667 * https://bugzilla.suse.com/show_bug.cgi?id=1239668 * https://bugzilla.suse.com/show_bug.cgi?id=1239669 * https://bugzilla.suse.com/show_bug.cgi?id=1239670 [View Less]

1 0

SUSE-SU-2025:0989-1: moderate: Security update for u-boot
by OPENSUSE-UPDATES 24 Mar '25

24 Mar '25

# Security update for u-boot Announcement ID: SUSE-SU-2025:0989-1 Release Date: 2025-03-24T09:32:47Z Rating: moderate References: * bsc#1237284 * bsc#1237287 Cross-References: * CVE-2024-57256 * CVE-2024-57258 CVSS scores: * CVE-2024-57256 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57256 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57256 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/… [View More]I:H/A:H * CVE-2024-57258 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57258 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for u-boot fixes the following issues: * CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284). * CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator (bsc#1237287). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-989=1 openSUSE-SLE-15.6-2025-989=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-989=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * u-boot-tools-debuginfo-2021.10-150600.11.3.1 * u-boot-tools-2021.10-150600.11.3.1 * openSUSE Leap 15.6 (aarch64) * u-boot-pine64plus-2021.10-150600.11.3.1 * u-boot-dragonboard820c-doc-2021.10-150600.11.3.1 * u-boot-rock960-rk3399-doc-2021.10-150600.11.3.1 * u-boot-evb-rk3399-2021.10-150600.11.3.1 * u-boot-mvebudb-88f3720-2021.10-150600.11.3.1 * u-boot-pineh64-2021.10-150600.11.3.1 * u-boot-p2771-0000-500-doc-2021.10-150600.11.3.1 * u-boot-odroid-n2-2021.10-150600.11.3.1 * u-boot-libretech-ac-doc-2021.10-150600.11.3.1 * u-boot-poplar-doc-2021.10-150600.11.3.1 * u-boot-p3450-0000-doc-2021.10-150600.11.3.1 * u-boot-p3450-0000-2021.10-150600.11.3.1 * u-boot-xilinxzynqmpvirt-2021.10-150600.11.3.1 * u-boot-nanopia64-2021.10-150600.11.3.1 * u-boot-geekbox-2021.10-150600.11.3.1 * u-boot-odroid-c2-2021.10-150600.11.3.1 * u-boot-xilinxzynqmpzcu102rev10-2021.10-150600.11.3.1 * u-boot-khadas-vim-2021.10-150600.11.3.1 * u-boot-pine64plus-doc-2021.10-150600.11.3.1 * u-boot-mvebuespressobin-88f3720-2021.10-150600.11.3.1 * u-boot-khadas-vim2-doc-2021.10-150600.11.3.1 * u-boot-bananapim64-doc-2021.10-150600.11.3.1 * u-boot-mvebuespressobin-88f3720-doc-2021.10-150600.11.3.1 * u-boot-p2371-2180-doc-2021.10-150600.11.3.1 * u-boot-p2771-0000-500-2021.10-150600.11.3.1 * u-boot-rpi3-2021.10-150600.11.3.1 * u-boot-xilinxzynqmpzcu102rev10-doc-2021.10-150600.11.3.1 * u-boot-orangepipc2-2021.10-150600.11.3.1 * u-boot-rpi4-doc-2021.10-150600.11.3.1 * u-boot-pineh64-doc-2021.10-150600.11.3.1 * u-boot-rock64-rk3328-doc-2021.10-150600.11.3.1 * u-boot-mvebumcbin-88f8040-2021.10-150600.11.3.1 * u-boot-rock-pi-n10-rk3399pro-2021.10-150600.11.3.1 * u-boot-evb-rk3399-doc-2021.10-150600.11.3.1 * u-boot-mvebudbarmada8k-2021.10-150600.11.3.1 * u-boot-ls1012afrdmqspi-2021.10-150600.11.3.1 * u-boot-libretech-cc-doc-2021.10-150600.11.3.1 * u-boot-p2371-2180-2021.10-150600.11.3.1 * u-boot-pinebook-pro-rk3399-2021.10-150600.11.3.1 * u-boot-orangepipc2-doc-2021.10-150600.11.3.1 * u-boot-poplar-2021.10-150600.11.3.1 * u-boot-rock64-rk3328-2021.10-150600.11.3.1 * u-boot-libretech-cc-2021.10-150600.11.3.1 * u-boot-rpi4-2021.10-150600.11.3.1 * u-boot-dragonboard820c-2021.10-150600.11.3.1 * u-boot-mvebudbarmada8k-doc-2021.10-150600.11.3.1 * u-boot-firefly-rk3399-2021.10-150600.11.3.1 * u-boot-firefly-rk3399-doc-2021.10-150600.11.3.1 * u-boot-libretech-ac-2021.10-150600.11.3.1 * u-boot-odroid-n2-doc-2021.10-150600.11.3.1 * u-boot-pinebook-doc-2021.10-150600.11.3.1 * u-boot-pinephone-2021.10-150600.11.3.1 * u-boot-geekbox-doc-2021.10-150600.11.3.1 * u-boot-pinephone-doc-2021.10-150600.11.3.1 * u-boot-xilinxzynqmpvirt-doc-2021.10-150600.11.3.1 * u-boot-bananapim64-2021.10-150600.11.3.1 * u-boot-rpiarm64-2021.10-150600.11.3.1 * u-boot-avnetultra96rev1-2021.10-150600.11.3.1 * u-boot-hikey-doc-2021.10-150600.11.3.1 * u-boot-mvebumcbin-88f8040-doc-2021.10-150600.11.3.1 * u-boot-odroid-c2-doc-2021.10-150600.11.3.1 * u-boot-pinebook-pro-rk3399-doc-2021.10-150600.11.3.1 * u-boot-rpiarm64-doc-2021.10-150600.11.3.1 * u-boot-ls1012afrdmqspi-doc-2021.10-150600.11.3.1 * u-boot-rpi3-doc-2021.10-150600.11.3.1 * u-boot-khadas-vim-doc-2021.10-150600.11.3.1 * u-boot-dragonboard410c-2021.10-150600.11.3.1 * u-boot-hikey-2021.10-150600.11.3.1 * u-boot-rock-pi-4-rk3399-doc-2021.10-150600.11.3.1 * u-boot-rock-pi-4-rk3399-2021.10-150600.11.3.1 * u-boot-nanopia64-doc-2021.10-150600.11.3.1 * u-boot-avnetultra96rev1-doc-2021.10-150600.11.3.1 * u-boot-pinebook-2021.10-150600.11.3.1 * u-boot-rockpro64-rk3399-doc-2021.10-150600.11.3.1 * u-boot-rock-pi-n10-rk3399pro-doc-2021.10-150600.11.3.1 * u-boot-khadas-vim2-2021.10-150600.11.3.1 * u-boot-odroid-c4-2021.10-150600.11.3.1 * u-boot-odroid-c4-doc-2021.10-150600.11.3.1 * u-boot-rockpro64-rk3399-2021.10-150600.11.3.1 * u-boot-rock960-rk3399-2021.10-150600.11.3.1 * u-boot-mvebudb-88f3720-doc-2021.10-150600.11.3.1 * u-boot-dragonboard410c-doc-2021.10-150600.11.3.1 * Basesystem Module 15-SP6 (aarch64) * u-boot-rpiarm64-doc-2021.10-150600.11.3.1 * u-boot-rpiarm64-2021.10-150600.11.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * u-boot-tools-debuginfo-2021.10-150600.11.3.1 * u-boot-tools-2021.10-150600.11.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-57256.html * https://www.suse.com/security/cve/CVE-2024-57258.html * https://bugzilla.suse.com/show_bug.cgi?id=1237284 * https://bugzilla.suse.com/show_bug.cgi?id=1237287 [View Less]

1 0

SUSE-RU-2025:0990-1: moderate: Recommended update for junitperf, saxon8, xmlbeans, xmldb-api
by OPENSUSE-UPDATES 24 Mar '25

24 Mar '25

# Recommended update for junitperf, saxon8, xmlbeans, xmldb-api Announcement ID: SUSE-RU-2025:0990-1 Release Date: 2025-03-24T11:06:05Z Rating: moderate References: Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description:… [View More]

1 0

openSUSE-SU-2025:0101-1: moderate: Security update for radare2
by opensuse-security＠opensuse.org 23 Mar '25

23 Mar '25

openSUSE Security Update: Security update for radare2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0101-1 Rating: moderate References: #1238075 #1238451 Cross-References: CVE-2025-1744 CVE-2025-1864 CVSS scores: CVE-2025-1744 (SUSE): 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP6 … [View More]

1 0

openSUSE-RU-2025:0100-1: moderate: Recommended update for gthumb
by maintenance＠opensuse.org 22 Mar '25

22 Mar '25

openSUSE Recommended Update: Recommended update for gthumb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2025:0100-1 Rating: moderate References: #1237098 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gthumb … [View More]

1 0

openSUSE-SU-2025:0098-1: important: Security update for chromium
by opensuse-security＠opensuse.org 22 Mar '25

22 Mar '25

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0098-1 Rating: important References: #1239819 Cross-References: CVE-2025-2476 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: … [View More]

1 0

SUSE-SU-2025:0984-1: moderate: Security update for xorg-x11-server
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2025:0984-1 Release Date: 2025-03-21T17:44:55Z Rating: moderate References: * bsc#1239750 Cross-References: * CVE-2022-49737 CVSS scores: * CVE-2022-49737 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2022-49737 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-49737 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H Affected … [View More]Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2022-49737: Fixed Xorg crashing when client applications use easystroke for mouse gestures (bsc#1239750) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-984=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-984=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-984=1 openSUSE-SLE-15.6-2025-984=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-21.1.11-150600.5.9.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.9.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.9.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.9.1 * xorg-x11-server-debugsource-21.1.11-150600.5.9.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.9.1 * xorg-x11-server-21.1.11-150600.5.9.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debuginfo-21.1.11-150600.5.9.1 * xorg-x11-server-sdk-21.1.11-150600.5.9.1 * xorg-x11-server-debugsource-21.1.11-150600.5.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * xorg-x11-server-extra-21.1.11-150600.5.9.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.9.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.9.1 * xorg-x11-server-sdk-21.1.11-150600.5.9.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.9.1 * xorg-x11-server-debugsource-21.1.11-150600.5.9.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.9.1 * xorg-x11-server-source-21.1.11-150600.5.9.1 * xorg-x11-server-21.1.11-150600.5.9.1 ## References: * https://www.suse.com/security/cve/CVE-2022-49737.html * https://bugzilla.suse.com/show_bug.cgi?id=1239750 [View Less]

1 0

SUSE-SU-2025:0985-1: moderate: Security update for libarchive
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for libarchive Announcement ID: SUSE-SU-2025:0985-1 Release Date: 2025-03-21T17:45:26Z Rating: moderate References: * bsc#1237606 * bsc#1238610 Cross-References: * CVE-2025-1632 * CVE-2025-25724 CVSS scores: * CVE-2025-1632 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-1632 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-1632 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:… [View More]N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-1632 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-25724 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-25724 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-25724 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for libarchive fixes the following issues: * CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c (bsc#1237606) * CVE-2025-25724: Fixed buffer overflow vulnerability in function list_item_verbose() in tar/util.c (bsc#1238610) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-985=1 openSUSE-SLE-15.6-2025-985=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-985=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-985=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libarchive-devel-3.7.2-150600.3.12.1 * libarchive13-3.7.2-150600.3.12.1 * bsdtar-debuginfo-3.7.2-150600.3.12.1 * libarchive13-debuginfo-3.7.2-150600.3.12.1 * bsdtar-3.7.2-150600.3.12.1 * libarchive-debugsource-3.7.2-150600.3.12.1 * openSUSE Leap 15.6 (x86_64) * libarchive13-32bit-debuginfo-3.7.2-150600.3.12.1 * libarchive13-32bit-3.7.2-150600.3.12.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libarchive13-64bit-debuginfo-3.7.2-150600.3.12.1 * libarchive13-64bit-3.7.2-150600.3.12.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libarchive-devel-3.7.2-150600.3.12.1 * libarchive13-3.7.2-150600.3.12.1 * libarchive-debugsource-3.7.2-150600.3.12.1 * libarchive13-debuginfo-3.7.2-150600.3.12.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * bsdtar-3.7.2-150600.3.12.1 * libarchive-debugsource-3.7.2-150600.3.12.1 * bsdtar-debuginfo-3.7.2-150600.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1632.html * https://www.suse.com/security/cve/CVE-2025-25724.html * https://bugzilla.suse.com/show_bug.cgi?id=1237606 * https://bugzilla.suse.com/show_bug.cgi?id=1238610 [View Less]

1 0

SUSE-SU-2025:0986-1: moderate: Security update for libarchive
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for libarchive Announcement ID: SUSE-SU-2025:0986-1 Release Date: 2025-03-21T17:49:34Z Rating: moderate References: * bsc#1238610 Cross-References: * CVE-2025-25724 CVSS scores: * CVE-2025-25724 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-25724 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-25724 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: … [View More] * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for libarchive fixes the following issues: * CVE-2025-25724: Fixed buffer overflow vulnerability in function list_item_verbose() in tar/util.c (bsc#1238610). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-986=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-986=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-986=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-986=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-986=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-986=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libarchive13-3.5.1-150400.3.18.1 * libarchive13-debuginfo-3.5.1-150400.3.18.1 * libarchive-debugsource-3.5.1-150400.3.18.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libarchive13-3.5.1-150400.3.18.1 * libarchive13-debuginfo-3.5.1-150400.3.18.1 * libarchive-debugsource-3.5.1-150400.3.18.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libarchive13-3.5.1-150400.3.18.1 * libarchive13-debuginfo-3.5.1-150400.3.18.1 * libarchive-debugsource-3.5.1-150400.3.18.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libarchive13-debuginfo-3.5.1-150400.3.18.1 * libarchive13-3.5.1-150400.3.18.1 * bsdtar-debuginfo-3.5.1-150400.3.18.1 * libarchive-devel-3.5.1-150400.3.18.1 * bsdtar-3.5.1-150400.3.18.1 * libarchive-debugsource-3.5.1-150400.3.18.1 * openSUSE Leap 15.4 (x86_64) * libarchive13-32bit-3.5.1-150400.3.18.1 * libarchive13-32bit-debuginfo-3.5.1-150400.3.18.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libarchive13-64bit-3.5.1-150400.3.18.1 * libarchive13-64bit-debuginfo-3.5.1-150400.3.18.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libarchive13-3.5.1-150400.3.18.1 * libarchive13-debuginfo-3.5.1-150400.3.18.1 * libarchive-debugsource-3.5.1-150400.3.18.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libarchive13-3.5.1-150400.3.18.1 * libarchive13-debuginfo-3.5.1-150400.3.18.1 * libarchive-debugsource-3.5.1-150400.3.18.1 ## References: * https://www.suse.com/security/cve/CVE-2025-25724.html * https://bugzilla.suse.com/show_bug.cgi?id=1238610 [View Less]

1 0

SUSE-SU-2025:0979-1: important: Security update for zvbi
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for zvbi Announcement ID: SUSE-SU-2025:0979-1 Release Date: 2025-03-21T12:54:45Z Rating: important References: * bsc#1239222 * bsc#1239299 * bsc#1239312 * bsc#1239319 * bsc#1239320 Cross-References: * CVE-2025-2173 * CVE-2025-2174 * CVE-2025-2175 * CVE-2025-2176 * CVE-2025-2177 CVSS scores: * CVE-2025-2173 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-2173 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:… [View More]L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-2173 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2173 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-2174 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2174 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2174 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2174 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2175 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2175 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2025-2175 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2175 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2025-2176 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-2176 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-2176 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2176 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-2177 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-2177 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-2177 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2177 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for zvbi fixes the following issues: * CVE-2025-2173: Fixed check on src_length to avoid an unitinialized heap read (bsc#1239222). * CVE-2025-2174: Fixed integer overflow leading to heap overflow in src/conv.c, src/io-sim.c, src/search.c (bsc#1239299). * CVE-2025-2175: Fixed integer overflow in _vbi_strndup_iconv (bsc#1239312). * CVE-2025-2176: Fixed integer overflow in function vbi_capture_sim_load_caption in src/io-sim.c (bsc#1239319). * CVE-2025-2177: Fixed integer overflow in function vbi_search_new in src/search.c (bsc#1239320). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-979=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-979=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-979=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-979=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-979=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-979=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-979=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-979=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-979=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-979=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-979=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * zvbi-debugsource-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * zvbi-debugsource-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * zvbi-debugsource-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * zvbi-debugsource-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * zvbi-0.2.35-150000.4.3.1 * zvbi-devel-0.2.35-150000.4.3.1 * zvbi-debugsource-0.2.35-150000.4.3.1 * libzvbi-chains0-debuginfo-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 * libzvbi-chains0-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * openSUSE Leap 15.6 (x86_64) * libzvbi-chains0-32bit-0.2.35-150000.4.3.1 * libzvbi-chains0-32bit-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-32bit-debuginfo-0.2.35-150000.4.3.1 * zvbi-devel-32bit-0.2.35-150000.4.3.1 * libzvbi0-32bit-0.2.35-150000.4.3.1 * openSUSE Leap 15.6 (noarch) * zvbi-lang-0.2.35-150000.4.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * zvbi-debugsource-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * zvbi-0.2.35-150000.4.3.1 * zvbi-devel-0.2.35-150000.4.3.1 * zvbi-debugsource-0.2.35-150000.4.3.1 * libzvbi-chains0-debuginfo-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi-chains0-0.2.35-150000.4.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * zvbi-debugsource-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * zvbi-debugsource-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * zvbi-debugsource-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * zvbi-debugsource-0.2.35-150000.4.3.1 * zvbi-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-debuginfo-0.2.35-150000.4.3.1 * libzvbi0-0.2.35-150000.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2173.html * https://www.suse.com/security/cve/CVE-2025-2174.html * https://www.suse.com/security/cve/CVE-2025-2175.html * https://www.suse.com/security/cve/CVE-2025-2176.html * https://www.suse.com/security/cve/CVE-2025-2177.html * https://bugzilla.suse.com/show_bug.cgi?id=1239222 * https://bugzilla.suse.com/show_bug.cgi?id=1239299 * https://bugzilla.suse.com/show_bug.cgi?id=1239312 * https://bugzilla.suse.com/show_bug.cgi?id=1239319 * https://bugzilla.suse.com/show_bug.cgi?id=1239320 [View Less]

1 0

SUSE-SU-2025:0980-1: critical: Security update for apptainer
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for apptainer Announcement ID: SUSE-SU-2025:0980-1 Release Date: 2025-03-21T14:15:24Z Rating: critical References: * bsc#1228324 * bsc#1234595 * bsc#1234794 * bsc#1237679 * bsc#1238611 * bsc#1239341 Cross-References: * CVE-2024-41110 * CVE-2024-45337 * CVE-2024-45338 * CVE-2025-22869 * CVE-2025-22870 * CVE-2025-27144 CVSS scores: * CVE-2024-41110 ( SUSE ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2024-45337 ( SUSE ): … [View More] 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-45337 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-45338 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-45338 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45338 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-22870 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-22870 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2025-22870 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2025-27144 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-27144 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-27144 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * HPC Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 An update that solves six vulnerabilities can now be installed. ## Description: This update for apptainer fixes the following issues: * CVE-2025-27144: Fixed Denial of Service in Go JOSE's Parsing (bsc#1237679). * CVE-2024-45338: Fixed denial of service due to non-linear parsing of case- insensitive content (bsc#1234794). * CVE-2024-45337: Fixed Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (bsc#1234595). * CVE-2025-22870: Fixed proxy bypass using IPv6 zone IDs (bsc#1238611). * CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239341). * CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-980=1 openSUSE-SLE-15.6-2025-980=1 * HPC Module 15-SP6 zypper in -t patch SUSE-SLE-Module-HPC-15-SP6-2025-980=1 ## Package List: * openSUSE Leap 15.6 (aarch64 x86_64) * apptainer-debuginfo-1.3.6-150600.4.9.1 * apptainer-1.3.6-150600.4.9.1 * openSUSE Leap 15.6 (noarch) * apptainer-sle15_5-1.3.6-150600.4.9.1 * apptainer-sle15_6-1.3.6-150600.4.9.1 * apptainer-leap-1.3.6-150600.4.9.1 * apptainer-sle15_7-1.3.6-150600.4.9.1 * HPC Module 15-SP6 (aarch64 x86_64) * apptainer-debuginfo-1.3.6-150600.4.9.1 * apptainer-1.3.6-150600.4.9.1 * HPC Module 15-SP6 (noarch) * apptainer-sle15_6-1.3.6-150600.4.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-41110.html * https://www.suse.com/security/cve/CVE-2024-45337.html * https://www.suse.com/security/cve/CVE-2024-45338.html * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-22870.html * https://www.suse.com/security/cve/CVE-2025-27144.html * https://bugzilla.suse.com/show_bug.cgi?id=1228324 * https://bugzilla.suse.com/show_bug.cgi?id=1234595 * https://bugzilla.suse.com/show_bug.cgi?id=1234794 * https://bugzilla.suse.com/show_bug.cgi?id=1237679 * https://bugzilla.suse.com/show_bug.cgi?id=1238611 * https://bugzilla.suse.com/show_bug.cgi?id=1239341 [View Less]

1 0

SUSE-SU-2025:0981-1: low: Security update for python311
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for python311 Announcement ID: SUSE-SU-2025:0981-1 Release Date: 2025-03-21T14:16:50Z Rating: low References: * bsc#1238450 * bsc#1239210 Cross-References: * CVE-2025-1795 CVSS scores: * CVE-2025-1795 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-1795 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:… [View More]N/S:U/C:L/I:N/A:N * CVE-2025-1795 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2025-1795: Fixed mishandling of comma during folding and unicode- encoding of email headers (bsc#1238450). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-981=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-981=1 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-3.11.11-150400.9.49.1 * libpython3_11-1_0-3.11.11-150400.9.49.1 * python311-base-3.11.11-150400.9.49.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-tk-3.11.11-150400.9.49.1 * python311-doc-3.11.11-150400.9.49.1 * python311-debuginfo-3.11.11-150400.9.49.1 * python311-idle-3.11.11-150400.9.49.1 * python311-testsuite-3.11.11-150400.9.49.1 * python311-curses-3.11.11-150400.9.49.1 * python311-tk-debuginfo-3.11.11-150400.9.49.1 * python311-3.11.11-150400.9.49.1 * libpython3_11-1_0-debuginfo-3.11.11-150400.9.49.1 * python311-base-debuginfo-3.11.11-150400.9.49.1 * python311-base-3.11.11-150400.9.49.1 * python311-testsuite-debuginfo-3.11.11-150400.9.49.1 * python311-core-debugsource-3.11.11-150400.9.49.1 * python311-doc-devhelp-3.11.11-150400.9.49.1 * python311-tools-3.11.11-150400.9.49.1 * python311-curses-debuginfo-3.11.11-150400.9.49.1 * python311-debugsource-3.11.11-150400.9.49.1 * python311-dbm-debuginfo-3.11.11-150400.9.49.1 * python311-dbm-3.11.11-150400.9.49.1 * python311-devel-3.11.11-150400.9.49.1 * libpython3_11-1_0-3.11.11-150400.9.49.1 * openSUSE Leap 15.4 (x86_64) * libpython3_11-1_0-32bit-debuginfo-3.11.11-150400.9.49.1 * python311-base-32bit-3.11.11-150400.9.49.1 * libpython3_11-1_0-32bit-3.11.11-150400.9.49.1 * python311-base-32bit-debuginfo-3.11.11-150400.9.49.1 * python311-32bit-debuginfo-3.11.11-150400.9.49.1 * python311-32bit-3.11.11-150400.9.49.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-debuginfo-3.11.11-150400.9.49.1 * python311-64bit-3.11.11-150400.9.49.1 * python311-64bit-debuginfo-3.11.11-150400.9.49.1 * libpython3_11-1_0-64bit-3.11.11-150400.9.49.1 * python311-base-64bit-debuginfo-3.11.11-150400.9.49.1 * python311-base-64bit-3.11.11-150400.9.49.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1795.html * https://bugzilla.suse.com/show_bug.cgi?id=1238450 * https://bugzilla.suse.com/show_bug.cgi?id=1239210 [View Less]

1 0

SUSE-SU-2025:0982-1: low: Security update for python311
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for python311 Announcement ID: SUSE-SU-2025:0982-1 Release Date: 2025-03-21T14:17:21Z Rating: low References: * bsc#1238450 * bsc#1239210 Cross-References: * CVE-2025-1795 CVSS scores: * CVE-2025-1795 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-1795 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:… [View More]N/S:U/C:L/I:N/A:N * CVE-2025-1795 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2025-1795: Fixed mishandling of comma during folding and unicode- encoding of email headers (bsc#1238450). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-982=1 openSUSE-SLE-15.6-2025-982=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-982=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2025-982=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python311-debuginfo-3.11.11-150600.3.21.1 * python311-tk-debuginfo-3.11.11-150600.3.21.1 * python311-base-debuginfo-3.11.11-150600.3.21.1 * python311-core-debugsource-3.11.11-150600.3.21.1 * python311-tools-3.11.11-150600.3.21.1 * python311-testsuite-3.11.11-150600.3.21.1 * libpython3_11-1_0-debuginfo-3.11.11-150600.3.21.1 * python311-debugsource-3.11.11-150600.3.21.1 * python311-tk-3.11.11-150600.3.21.1 * python311-curses-debuginfo-3.11.11-150600.3.21.1 * python311-base-3.11.11-150600.3.21.1 * python311-testsuite-debuginfo-3.11.11-150600.3.21.1 * python311-curses-3.11.11-150600.3.21.1 * libpython3_11-1_0-3.11.11-150600.3.21.1 * python311-doc-devhelp-3.11.11-150600.3.21.1 * python311-dbm-debuginfo-3.11.11-150600.3.21.1 * python311-devel-3.11.11-150600.3.21.1 * python311-doc-3.11.11-150600.3.21.1 * python311-dbm-3.11.11-150600.3.21.1 * python311-idle-3.11.11-150600.3.21.1 * python311-3.11.11-150600.3.21.1 * openSUSE Leap 15.6 (x86_64) * python311-base-32bit-debuginfo-3.11.11-150600.3.21.1 * python311-32bit-3.11.11-150600.3.21.1 * libpython3_11-1_0-32bit-debuginfo-3.11.11-150600.3.21.1 * libpython3_11-1_0-32bit-3.11.11-150600.3.21.1 * python311-32bit-debuginfo-3.11.11-150600.3.21.1 * python311-base-32bit-3.11.11-150600.3.21.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python311-64bit-debuginfo-3.11.11-150600.3.21.1 * libpython3_11-1_0-64bit-debuginfo-3.11.11-150600.3.21.1 * python311-base-64bit-debuginfo-3.11.11-150600.3.21.1 * python311-base-64bit-3.11.11-150600.3.21.1 * libpython3_11-1_0-64bit-3.11.11-150600.3.21.1 * python311-64bit-3.11.11-150600.3.21.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-base-3.11.11-150600.3.21.1 * libpython3_11-1_0-debuginfo-3.11.11-150600.3.21.1 * python311-base-debuginfo-3.11.11-150600.3.21.1 * python311-core-debugsource-3.11.11-150600.3.21.1 * libpython3_11-1_0-3.11.11-150600.3.21.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-debuginfo-3.11.11-150600.3.21.1 * python311-tk-debuginfo-3.11.11-150600.3.21.1 * python311-curses-debuginfo-3.11.11-150600.3.21.1 * python311-core-debugsource-3.11.11-150600.3.21.1 * python311-curses-3.11.11-150600.3.21.1 * python311-debugsource-3.11.11-150600.3.21.1 * python311-dbm-3.11.11-150600.3.21.1 * python311-idle-3.11.11-150600.3.21.1 * python311-tk-3.11.11-150600.3.21.1 * python311-3.11.11-150600.3.21.1 * python311-tools-3.11.11-150600.3.21.1 * python311-dbm-debuginfo-3.11.11-150600.3.21.1 * python311-devel-3.11.11-150600.3.21.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1795.html * https://bugzilla.suse.com/show_bug.cgi?id=1238450 * https://bugzilla.suse.com/show_bug.cgi?id=1239210 [View Less]

1 0

openSUSE-RU-2025:0097-1: moderate: Recommended update for awf-gtk2, awf-gtk3, awf-gtk4
by maintenance＠opensuse.org 21 Mar '25

21 Mar '25

openSUSE Recommended Update: Recommended update for awf-gtk2, awf-gtk3, awf-gtk4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2025:0097-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update … [View More]

1 0

SUSE-SU-2025:0974-1: important: Security update for webkit2gtk3
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for webkit2gtk3 Announcement ID: SUSE-SU-2025:0974-1 Release Date: 2025-03-21T08:23:25Z Rating: important References: * bsc#1239547 Cross-References: * CVE-2025-24201 CVSS scores: * CVE-2025-24201 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2025-24201 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2025-24201 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem … [View More]Module 15-SP6 * Desktop Applications Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: * CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process (bsc#1239547). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-974=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-974=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-974=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-974=1 openSUSE-SLE-15.6-2025-974=1 ## Package List: * Basesystem Module 15-SP6 (noarch) * WebKitGTK-4.0-lang-2.46.6-150600.12.30.2 * WebKitGTK-6.0-lang-2.46.6-150600.12.30.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-6_0-1-2.46.6-150600.12.30.2 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.6-150600.12.30.2 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150600.12.30.2 * webkitgtk-6_0-injected-bundles-2.46.6-150600.12.30.2 * webkit2gtk3-soup2-devel-2.46.6-150600.12.30.2 * webkit2gtk4-debugsource-2.46.6-150600.12.30.2 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150600.12.30.2 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk-4_0-injected-bundles-2.46.6-150600.12.30.2 * libwebkitgtk-6_0-4-2.46.6-150600.12.30.2 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150600.12.30.2 * typelib-1_0-WebKit2-4_0-2.46.6-150600.12.30.2 * webkit2gtk3-soup2-debugsource-2.46.6-150600.12.30.2 * libwebkit2gtk-4_0-37-2.46.6-150600.12.30.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_0-18-2.46.6-150600.12.30.2 * Desktop Applications Module 15-SP6 (noarch) * WebKitGTK-4.1-lang-2.46.6-150600.12.30.2 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-devel-2.46.6-150600.12.30.2 * webkit2gtk3-debugsource-2.46.6-150600.12.30.2 * libwebkit2gtk-4_1-0-2.46.6-150600.12.30.2 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150600.12.30.2 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk-4_1-injected-bundles-2.46.6-150600.12.30.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150600.12.30.2 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150600.12.30.2 * typelib-1_0-WebKit2-4_1-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_1-0-2.46.6-150600.12.30.2 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.6-150600.12.30.2 * webkit2gtk4-debugsource-2.46.6-150600.12.30.2 * typelib-1_0-WebKit-6_0-2.46.6-150600.12.30.2 * webkit2gtk4-devel-2.46.6-150600.12.30.2 * typelib-1_0-JavaScriptCore-6_0-2.46.6-150600.12.30.2 * openSUSE Leap 15.6 (noarch) * WebKitGTK-4.0-lang-2.46.6-150600.12.30.2 * WebKitGTK-6.0-lang-2.46.6-150600.12.30.2 * WebKitGTK-4.1-lang-2.46.6-150600.12.30.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libjavascriptcoregtk-6_0-1-2.46.6-150600.12.30.2 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk4-debugsource-2.46.6-150600.12.30.2 * webkit2gtk3-soup2-minibrowser-debuginfo-2.46.6-150600.12.30.2 * webkit-jsc-4.1-2.46.6-150600.12.30.2 * webkit2gtk-4_0-injected-bundles-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk3-minibrowser-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk3-soup2-minibrowser-2.46.6-150600.12.30.2 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150600.12.30.2 * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.6-150600.12.30.2 * webkit2gtk4-minibrowser-debuginfo-2.46.6-150600.12.30.2 * webkitgtk-6_0-injected-bundles-2.46.6-150600.12.30.2 * typelib-1_0-WebKit-6_0-2.46.6-150600.12.30.2 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150600.12.30.2 * typelib-1_0-WebKit2-4_0-2.46.6-150600.12.30.2 * webkit2gtk3-minibrowser-2.46.6-150600.12.30.2 * typelib-1_0-WebKit2-4_1-2.46.6-150600.12.30.2 * webkit2gtk3-soup2-debugsource-2.46.6-150600.12.30.2 * libwebkit2gtk-4_0-37-2.46.6-150600.12.30.2 * webkit2gtk4-minibrowser-2.46.6-150600.12.30.2 * webkit-jsc-4-debuginfo-2.46.6-150600.12.30.2 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk3-debugsource-2.46.6-150600.12.30.2 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150600.12.30.2 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150600.12.30.2 * webkit-jsc-4.1-debuginfo-2.46.6-150600.12.30.2 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150600.12.30.2 * libwebkitgtk-6_0-4-2.46.6-150600.12.30.2 * typelib-1_0-JavaScriptCore-6_0-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_1-0-2.46.6-150600.12.30.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150600.12.30.2 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk3-soup2-devel-2.46.6-150600.12.30.2 * webkit2gtk3-devel-2.46.6-150600.12.30.2 * libwebkit2gtk-4_1-0-2.46.6-150600.12.30.2 * webkit-jsc-4-2.46.6-150600.12.30.2 * webkit2gtk4-devel-2.46.6-150600.12.30.2 * webkit-jsc-6.0-2.46.6-150600.12.30.2 * webkit-jsc-6.0-debuginfo-2.46.6-150600.12.30.2 * webkit2gtk-4_1-injected-bundles-2.46.6-150600.12.30.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_0-18-2.46.6-150600.12.30.2 * openSUSE Leap 15.6 (x86_64) * libwebkit2gtk-4_0-37-32bit-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_0-18-32bit-2.46.6-150600.12.30.2 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.46.6-150600.12.30.2 * libwebkit2gtk-4_1-0-32bit-2.46.6-150600.12.30.2 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_1-0-32bit-2.46.6-150600.12.30.2 * openSUSE Leap 15.6 (aarch64_ilp32) * libwebkit2gtk-4_1-0-64bit-debuginfo-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_0-18-64bit-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_1-0-64bit-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.46.6-150600.12.30.2 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.46.6-150600.12.30.2 * libwebkit2gtk-4_0-37-64bit-2.46.6-150600.12.30.2 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.46.6-150600.12.30.2 * libwebkit2gtk-4_1-0-64bit-2.46.6-150600.12.30.2 ## References: * https://www.suse.com/security/cve/CVE-2025-24201.html * https://bugzilla.suse.com/show_bug.cgi?id=1239547 [View Less]

1 0

SUSE-SU-2025:0975-1: important: Security update for webkit2gtk3
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for webkit2gtk3 Announcement ID: SUSE-SU-2025:0975-1 Release Date: 2025-03-21T08:24:37Z Rating: important References: * bsc#1239547 Cross-References: * CVE-2025-24201 CVSS scores: * CVE-2025-24201 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2025-24201 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2025-24201 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.… [View More]4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: * CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process (bsc#1239547). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-975=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-975=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-975=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-975=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-975=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-975=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-975=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-975=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-975=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-975=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-975=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-975=1 ## Package List: * openSUSE Leap 15.4 (noarch) * WebKitGTK-6.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.1-lang-2.46.6-150400.4.109.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk3-minibrowser-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk3-minibrowser-debuginfo-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-6_0-2.46.6-150400.4.109.1 * webkit-jsc-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk4-minibrowser-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-minibrowser-2.46.6-150400.4.109.1 * webkit2gtk3-debugsource-2.46.6-150400.4.109.1 * typelib-1_0-WebKit-6_0-2.46.6-150400.4.109.1 * webkit-jsc-4.1-2.46.6-150400.4.109.1 * webkit-jsc-4.1-debuginfo-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * webkit-jsc-4-2.46.6-150400.4.109.1 * webkit-jsc-6.0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-2.46.6-150400.4.109.1 * webkit2gtk4-minibrowser-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-devel-2.46.6-150400.4.109.1 * webkit2gtk4-debugsource-2.46.6-150400.4.109.1 * webkit2gtk4-devel-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-minibrowser-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_1-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit-jsc-6.0-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.6-150400.4.109.1 * openSUSE Leap 15.4 (x86_64) * libjavascriptcoregtk-4_0-18-32bit-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-32bit-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-32bit-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-32bit-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.46.6-150400.4.109.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libjavascriptcoregtk-4_1-0-64bit-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-64bit-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-64bit-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-64bit-2.46.6-150400.4.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * WebKitGTK-6.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.1-lang-2.46.6-150400.4.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-debugsource-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-devel-2.46.6-150400.4.109.1 * webkit2gtk4-debugsource-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_1-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * WebKitGTK-6.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.1-lang-2.46.6-150400.4.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-debugsource-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-devel-2.46.6-150400.4.109.1 * webkit2gtk4-debugsource-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_1-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * WebKitGTK-6.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.1-lang-2.46.6-150400.4.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-debugsource-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-devel-2.46.6-150400.4.109.1 * webkit2gtk4-debugsource-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_1-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * WebKitGTK-6.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.1-lang-2.46.6-150400.4.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-debugsource-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-devel-2.46.6-150400.4.109.1 * webkit2gtk4-debugsource-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_1-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * WebKitGTK-6.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.1-lang-2.46.6-150400.4.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-debugsource-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-devel-2.46.6-150400.4.109.1 * webkit2gtk4-debugsource-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_1-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * WebKitGTK-6.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.1-lang-2.46.6-150400.4.109.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-debugsource-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-devel-2.46.6-150400.4.109.1 * webkit2gtk4-debugsource-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_1-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * WebKitGTK-6.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.1-lang-2.46.6-150400.4.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-debugsource-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-devel-2.46.6-150400.4.109.1 * webkit2gtk4-debugsource-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_1-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * WebKitGTK-6.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * WebKitGTK-4.1-lang-2.46.6-150400.4.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-debugsource-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * webkitgtk-6_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-devel-2.46.6-150400.4.109.1 * webkit2gtk4-debugsource-2.46.6-150400.4.109.1 * libwebkitgtk-6_0-4-2.46.6-150400.4.109.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2-4_1-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * SUSE Manager Proxy 4.3 (noarch) * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * SUSE Manager Proxy 4.3 (x86_64) * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 * SUSE Manager Server 4.3 (noarch) * WebKitGTK-4.0-lang-2.46.6-150400.4.109.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * typelib-1_0-WebKit2-4_0-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-devel-2.46.6-150400.4.109.1 * libjavascriptcoregtk-4_0-18-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.6-150400.4.109.1 * typelib-1_0-JavaScriptCore-4_0-2.46.6-150400.4.109.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.6-150400.4.109.1 * libwebkit2gtk-4_0-37-2.46.6-150400.4.109.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.6-150400.4.109.1 * webkit2gtk3-soup2-debugsource-2.46.6-150400.4.109.1 ## References: * https://www.suse.com/security/cve/CVE-2025-24201.html * https://bugzilla.suse.com/show_bug.cgi?id=1239547 [View Less]

1 0

SUSE-SU-2025:0976-1: important: Security update for libxml2
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for libxml2 Announcement ID: SUSE-SU-2025:0976-1 Release Date: 2025-03-21T08:25:31Z Rating: important References: * bsc#1237363 * bsc#1237370 * bsc#1237418 Cross-References: * CVE-2024-56171 * CVE-2025-24928 * CVE-2025-27113 CVSS scores: * CVE-2024-56171 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56171 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-56171 ( NVD ): 7.8 … [View More]CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2025-24928 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2025-24928 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L * CVE-2025-24928 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2025-27113 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-27113 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-27113 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-27113 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363). * CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370). * CVE-2025-27113: Fixed NULL Pointer Dereference in libxml2 xmlPatMatch (bsc#1237418). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-976=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-976=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-976=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-976=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-976=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-976=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-976=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-976=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python-libxml2-python-debugsource-2.9.7-150000.3.76.1 * python3-libxml2-python-2.9.7-150000.3.76.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.76.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libxml2-tools-debuginfo-2.9.7-150000.3.76.1 * libxml2-2-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-2.9.7-150000.3.76.1 * libxml2-tools-2.9.7-150000.3.76.1 * libxml2-devel-2.9.7-150000.3.76.1 * libxml2-debugsource-2.9.7-150000.3.76.1 * python-libxml2-python-debugsource-2.9.7-150000.3.76.1 * libxml2-2-2.9.7-150000.3.76.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libxml2-2-32bit-debuginfo-2.9.7-150000.3.76.1 * libxml2-2-32bit-2.9.7-150000.3.76.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * libxml2-tools-debuginfo-2.9.7-150000.3.76.1 * libxml2-2-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-2.9.7-150000.3.76.1 * libxml2-tools-2.9.7-150000.3.76.1 * libxml2-devel-2.9.7-150000.3.76.1 * libxml2-debugsource-2.9.7-150000.3.76.1 * python-libxml2-python-debugsource-2.9.7-150000.3.76.1 * libxml2-2-2.9.7-150000.3.76.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (x86_64) * libxml2-2-32bit-debuginfo-2.9.7-150000.3.76.1 * libxml2-2-32bit-2.9.7-150000.3.76.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libxml2-tools-debuginfo-2.9.7-150000.3.76.1 * libxml2-2-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-2.9.7-150000.3.76.1 * libxml2-tools-2.9.7-150000.3.76.1 * libxml2-devel-2.9.7-150000.3.76.1 * libxml2-debugsource-2.9.7-150000.3.76.1 * python-libxml2-python-debugsource-2.9.7-150000.3.76.1 * libxml2-2-2.9.7-150000.3.76.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libxml2-2-32bit-debuginfo-2.9.7-150000.3.76.1 * libxml2-2-32bit-2.9.7-150000.3.76.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libxml2-tools-debuginfo-2.9.7-150000.3.76.1 * libxml2-2-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-2.9.7-150000.3.76.1 * libxml2-tools-2.9.7-150000.3.76.1 * libxml2-devel-2.9.7-150000.3.76.1 * libxml2-debugsource-2.9.7-150000.3.76.1 * python-libxml2-python-debugsource-2.9.7-150000.3.76.1 * libxml2-2-2.9.7-150000.3.76.1 * SUSE Enterprise Storage 7.1 (x86_64) * libxml2-2-32bit-debuginfo-2.9.7-150000.3.76.1 * libxml2-2-32bit-2.9.7-150000.3.76.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libxml2-2-debuginfo-2.9.7-150000.3.76.1 * libxml2-2-2.9.7-150000.3.76.1 * libxml2-tools-2.9.7-150000.3.76.1 * libxml2-debugsource-2.9.7-150000.3.76.1 * libxml2-tools-debuginfo-2.9.7-150000.3.76.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libxml2-2-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-2.9.7-150000.3.76.1 * libxml2-2-2.9.7-150000.3.76.1 * libxml2-tools-2.9.7-150000.3.76.1 * libxml2-debugsource-2.9.7-150000.3.76.1 * python-libxml2-python-debugsource-2.9.7-150000.3.76.1 * libxml2-tools-debuginfo-2.9.7-150000.3.76.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libxml2-2-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-debuginfo-2.9.7-150000.3.76.1 * python3-libxml2-python-2.9.7-150000.3.76.1 * libxml2-2-2.9.7-150000.3.76.1 * libxml2-tools-2.9.7-150000.3.76.1 * libxml2-debugsource-2.9.7-150000.3.76.1 * python-libxml2-python-debugsource-2.9.7-150000.3.76.1 * libxml2-tools-debuginfo-2.9.7-150000.3.76.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56171.html * https://www.suse.com/security/cve/CVE-2025-24928.html * https://www.suse.com/security/cve/CVE-2025-27113.html * https://bugzilla.suse.com/show_bug.cgi?id=1237363 * https://bugzilla.suse.com/show_bug.cgi?id=1237370 * https://bugzilla.suse.com/show_bug.cgi?id=1237418 [View Less]

1 0

SUSE-SU-2025:0977-1: moderate: Security update for wpa_supplicant
by OPENSUSE-UPDATES 21 Mar '25

21 Mar '25

# Security update for wpa_supplicant Announcement ID: SUSE-SU-2025:0977-1 Release Date: 2025-03-21T08:26:03Z Rating: moderate References: * bsc#1239461 Cross-References: * CVE-2025-24912 CVSS scores: * CVE-2025-24912 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-24912 ( NVD ): 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * … [View More]

1 0

SUSE-RU-2025:0970-1: moderate: Recommended update for post-build-checks-malwarescan
by OPENSUSE-UPDATES 20 Mar '25

20 Mar '25

# Recommended update for post-build-checks-malwarescan Announcement ID: SUSE-RU-2025:0970-1 Release Date: 2025-03-20T16:04:23Z Rating: moderate References: * bsc#1239696 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 An update that has one fix can now be installed. ## Description: This update for post-build-checks-malwarescan fixes the following issues: * exclude pdfium-6425.tar.bz2 false positive. bsc#1239696 ## Patch Instructions: To install this … [View More]

1 0

SUSE-RU-2025:0971-1: moderate: Recommended update for nvidia-open-driver-G06-signed
by OPENSUSE-UPDATES 20 Mar '25

20 Mar '25

# Recommended update for nvidia-open-driver-G06-signed Announcement ID: SUSE-RU-2025:0971-1 Release Date: 2025-03-20T16:26:52Z Rating: moderate References: * bsc#1239139 * bsc#1239653 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An … [View More]update that has two fixes can now be installed. ## Description: This update for nvidia-open-driver-G06-signed fixes the following issues: * update non-CUDA variant to 570.133.07 (bsc#1239653) * removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware has moved to nvidia-common-G06 and kernel-firmware-nvidia-gspx-G06 is no longer available either (bsc#1239139) * update CUDA variant to 570.124.06 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-971=1 SUSE-2025-971=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-971=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-971=1 ## Package List: * openSUSE Leap 15.6 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-debugsource-570.124.06-150600.3.43.2 * nv-prefer-signed-open-driver-570.124.06-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-default-570.133.07_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-570.124.06_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-default-devel-570.133.07-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-default-devel-570.124.06-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-570.124.06_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-570.133.07_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-debugsource-570.133.07-150600.3.43.2 * openSUSE Leap 15.6 (x86_64) * nvidia-open-driver-G06-signed-azure-devel-570.133.07-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-azure-570.133.07_k6.4.0_150600.6-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-azure-devel-570.124.06-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-azure-debuginfo-570.124.06_k6.4.0_150600.6-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-azure-570.124.06_k6.4.0_150600.6-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-570.133.07_k6.4.0_150600.6-150600.3.43.2 * openSUSE Leap 15.6 (aarch64) * nvidia-open-driver-G06-signed-cuda-kmp-64kb-570.124.06_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-64kb-devel-570.133.07-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-64kb-570.133.07_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-570.133.07_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-64kb-devel-570.124.06-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-570.124.06_k6.4.0_150600.21-150600.3.43.2 * Basesystem Module 15-SP6 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-debugsource-570.124.06-150600.3.43.2 * nv-prefer-signed-open-driver-570.124.06-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-default-570.133.07_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-570.124.06_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-default-devel-570.133.07-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-default-devel-570.124.06-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-570.124.06_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-570.133.07_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-debugsource-570.133.07-150600.3.43.2 * Basesystem Module 15-SP6 (aarch64) * nvidia-open-driver-G06-signed-cuda-kmp-64kb-570.124.06_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-64kb-devel-570.133.07-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-64kb-570.133.07_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-570.133.07_k6.4.0_150600.21-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-64kb-devel-570.124.06-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-570.124.06_k6.4.0_150600.21-150600.3.43.2 * Public Cloud Module 15-SP6 (x86_64) * nvidia-open-driver-G06-signed-azure-devel-570.133.07-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-azure-570.133.07_k6.4.0_150600.6-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-azure-devel-570.124.06-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-azure-debuginfo-570.124.06_k6.4.0_150600.6-150600.3.43.2 * nvidia-open-driver-G06-signed-cuda-kmp-azure-570.124.06_k6.4.0_150600.6-150600.3.43.2 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-570.133.07_k6.4.0_150600.6-150600.3.43.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1239139 * https://bugzilla.suse.com/show_bug.cgi?id=1239653 [View Less]

1 0

SUSE-OU-2025:0972-1: moderate: Feature update for kubernetes-old client
by OPENSUSE-UPDATES 20 Mar '25

20 Mar '25

# Feature update for kubernetes-old client Announcement ID: SUSE-OU-2025:0972-1 Release Date: 2025-03-20T18:19:41Z Rating: moderate References: * jsc#PED-11106 Affected Products: * Containers Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature can now be installed. ## Description: This update for kubernetes-… [View More]

1 0

openSUSE-SU-2025:0095-1: moderate: Security update for dcmtk
by opensuse-security＠opensuse.org 20 Mar '25

20 Mar '25

openSUSE Security Update: Security update for dcmtk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0095-1 Rating: moderate References: #1239679 Cross-References: CVE-2025-2357 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: … [View More]

1 0

openSUSE-SU-2025:0094-1: moderate: Security update for gitea-tea
by opensuse-security＠opensuse.org 20 Mar '25

20 Mar '25

openSUSE Security Update: Security update for gitea-tea ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0094-1 Rating: moderate References: #1234598 #1235367 #1239493 Cross-References: CVE-2024-45337 CVE-2024-45338 CVE-2025-22869 CVSS scores: CVE-2024-45337 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-45338 (SUSE): 8.2 CVSS:… [View More]

1 0

SUSE-RU-2025:0969-1: moderate: Recommended update for crypto-policies
by OPENSUSE-UPDATES 20 Mar '25

20 Mar '25

# Recommended update for crypto-policies Announcement ID: SUSE-RU-2025:0969-1 Release Date: 2025-03-20T13:28:52Z Rating: moderate References: * bsc#1227637 * bsc#1236165 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed.… [View More]

1 0

SUSE-RU-2025:0967-1: moderate: Recommended update for nfs-utils
by OPENSUSE-UPDATES 20 Mar '25

20 Mar '25

# Recommended update for nfs-utils Announcement ID: SUSE-RU-2025:0967-1 Release Date: 2025-03-20T08:31:45Z Rating: moderate References: * bsc#1226533 * bsc#1239165 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## … [View More]

1 0

SUSE-RU-2025:0968-1: moderate: Recommended update for csp-billing-adapter-microsoft
by OPENSUSE-UPDATES 20 Mar '25

20 Mar '25

# Recommended update for csp-billing-adapter-microsoft Announcement ID: SUSE-RU-2025:0968-1 Release Date: 2025-03-20T11:44:54Z Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE … [View More]

1 0

SUSE-RU-2025:0964-1: moderate: Recommended update for python-requests-mock
by OPENSUSE-UPDATES 20 Mar '25

20 Mar '25

# Recommended update for python-requests-mock Announcement ID: SUSE-RU-2025:0964-1 Release Date: 2025-03-20T07:04:34Z Rating: moderate References: Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that can now be installed. ## Description: This update for python-requests-mock fixes … [View More]

1 0

SUSE-RU-2025:0965-1: moderate: Recommended update for yast2-sap-ha
by OPENSUSE-UPDATES 20 Mar '25

20 Mar '25

# Recommended update for yast2-sap-ha Announcement ID: SUSE-RU-2025:0965-1 Release Date: 2025-03-20T07:46:39Z Rating: moderate References: * bsc#1235773 Affected Products: * openSUSE Leap 15.3 * SAP Applications Module 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that has one fix can now be installed. ## Description: This update for yast2-sap-ha fixes the following issue: * Fix use of uninitialized variable (bsc#1235773). ## Patch … [View More]

1 0

SUSE-RU-2025:0966-1: important: Recommended update for multipath-tools
by OPENSUSE-UPDATES 20 Mar '25

20 Mar '25

# Recommended update for multipath-tools Announcement ID: SUSE-RU-2025:0966-1 Release Date: 2025-03-20T07:53:42Z Rating: important References: * bsc#1228926 * bsc#1229898 * bsc#1232063 * bsc#1232227 * bsc#1236321 * bsc#1236390 * bsc#1236392 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for … [View More]SAP Applications 15 SP6 An update that has seven fixes can now be installed. ## Description: This update for multipath-tools fixes the following issues: * Version update 0.9.8+111+suse.b7ee850 Backported bug fixes from upstream 0.9.9 - 0.10.2 * Fixed bug leading to the error message "configured reservation key doesn't match: 0x0" (bsc#1228926). * Fixed bug that caused queueing to be always disabled if flushing a map failed (bsc#1229898). * Fixed output of `multipath -t` and `multipath -T` (bsc#1229898). * Fixed bug: don't print error message if WATCHDOG_USEC is 0 (bsc#1232227). * Fix map failure count for no_path_retry greater than 0 (bsc#1229898). * Fix reboot hang if uevent is processed for suspended device (bsc#1232063). * Don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL (bsc#1229898). * Fixed a memory leak in the nvme foreign library (bsc#1229898). * Fixed a problem in path detection algorithm that could cause I/O error failures (bsc#1236390). * Fix multipathd crash because of invalid path group index value, for example if an invalid path device was removed from a map (bsc#1236392). * Fix the problem that `group_by_tpg` might be disabled if one or more paths were offline during initial configuration (bsc#1236392). * Make sure udev and systemd notice changes in multipath path state when devices are added to or removed from multipath maps (bsc#1236321). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-966=1 SUSE-2025-966=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-966=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libmpath0-debuginfo-0.9.8+111+suse.b7ee850-150600.3.3.3 * libdmmp0_2_0-0.9.8+111+suse.b7ee850-150600.3.3.3 * multipath-tools-0.9.8+111+suse.b7ee850-150600.3.3.3 * kpartx-debuginfo-0.9.8+111+suse.b7ee850-150600.3.3.3 * kpartx-0.9.8+111+suse.b7ee850-150600.3.3.3 * multipath-tools-debuginfo-0.9.8+111+suse.b7ee850-150600.3.3.3 * multipath-tools-debugsource-0.9.8+111+suse.b7ee850-150600.3.3.3 * libdmmp0_2_0-debuginfo-0.9.8+111+suse.b7ee850-150600.3.3.3 * libmpath0-0.9.8+111+suse.b7ee850-150600.3.3.3 * libdmmp-devel-0.9.8+111+suse.b7ee850-150600.3.3.3 * multipath-tools-devel-0.9.8+111+suse.b7ee850-150600.3.3.3 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libmpath0-debuginfo-0.9.8+111+suse.b7ee850-150600.3.3.3 * libdmmp0_2_0-0.9.8+111+suse.b7ee850-150600.3.3.3 * multipath-tools-0.9.8+111+suse.b7ee850-150600.3.3.3 * kpartx-debuginfo-0.9.8+111+suse.b7ee850-150600.3.3.3 * kpartx-0.9.8+111+suse.b7ee850-150600.3.3.3 * multipath-tools-debuginfo-0.9.8+111+suse.b7ee850-150600.3.3.3 * multipath-tools-debugsource-0.9.8+111+suse.b7ee850-150600.3.3.3 * libdmmp0_2_0-debuginfo-0.9.8+111+suse.b7ee850-150600.3.3.3 * libmpath0-0.9.8+111+suse.b7ee850-150600.3.3.3 * libdmmp-devel-0.9.8+111+suse.b7ee850-150600.3.3.3 * multipath-tools-devel-0.9.8+111+suse.b7ee850-150600.3.3.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1228926 * https://bugzilla.suse.com/show_bug.cgi?id=1229898 * https://bugzilla.suse.com/show_bug.cgi?id=1232063 * https://bugzilla.suse.com/show_bug.cgi?id=1232227 * https://bugzilla.suse.com/show_bug.cgi?id=1236321 * https://bugzilla.suse.com/show_bug.cgi?id=1236390 * https://bugzilla.suse.com/show_bug.cgi?id=1236392 [View Less]

1 0

SUSE-SU-2025:0956-1: moderate: Security update for python-Jinja2
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Security update for python-Jinja2 Announcement ID: SUSE-SU-2025:0956-1 Release Date: 2025-03-19T16:12:35Z Rating: moderate References: * bsc#1238879 Cross-References: * CVE-2025-27516 CVSS scores: * CVE-2025-27516 ( SUSE ): 5.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-27516 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:… [View More]U/C:H/I:H/A:H * CVE-2025-27516 ( NVD ): 5.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-Jinja2 fixes the following issues: * CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method (bsc#1238879) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-956=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-956=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-956=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2025-956=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-Jinja2-3.1.2-150400.12.14.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python311-Jinja2-3.1.2-150400.12.14.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-Jinja2-3.1.2-150400.12.14.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-Jinja2-3.1.2-150400.12.14.1 ## References: * https://www.suse.com/security/cve/CVE-2025-27516.html * https://bugzilla.suse.com/show_bug.cgi?id=1238879 [View Less]

1 0

SUSE-RU-2025:0957-1: moderate: Recommended update for linuxrc
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Recommended update for linuxrc Announcement ID: SUSE-RU-2025:0957-1 Release Date: 2025-03-19T16:32:46Z Rating: moderate References: * bsc#1237524 Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: … [View More]

1 0

SUSE-SU-2025:0958-1: important: Security update for ffmpeg-4
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Security update for ffmpeg-4 Announcement ID: SUSE-SU-2025:0958-1 Release Date: 2025-03-19T16:56:05Z Rating: important References: * bsc#1186586 * bsc#1209934 * bsc#1215309 Cross-References: * CVE-2020-22021 * CVE-2020-22046 * CVE-2022-48434 CVSS scores: * CVE-2020-22021 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2020-22021 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2020-22046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:… [View More]N/UI:N/S:U/C:N/I:N/A:H * CVE-2020-22046 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2022-48434 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-48434 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48434 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for ffmpeg-4 fixes the following issues: * CVE-2022-48434: Fixed use after free in libavcodec/pthread_frame.c (bsc#1209934) * CVE-2020-22021: Fixed Buffer Overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-958=1 openSUSE-SLE-15.6-2025-958=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-958=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2025-958=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * ffmpeg-4-libswresample-devel-4.4.5-150600.13.19.1 * ffmpeg-4-libavdevice-devel-4.4.5-150600.13.19.1 * libavformat58_76-debuginfo-4.4.5-150600.13.19.1 * libavcodec58_134-debuginfo-4.4.5-150600.13.19.1 * libavresample4_0-debuginfo-4.4.5-150600.13.19.1 * ffmpeg-4-libavresample-devel-4.4.5-150600.13.19.1 * libswscale5_9-4.4.5-150600.13.19.1 * ffmpeg-4-libavcodec-devel-4.4.5-150600.13.19.1 * libavresample4_0-4.4.5-150600.13.19.1 * libavdevice58_13-4.4.5-150600.13.19.1 * libavcodec58_134-4.4.5-150600.13.19.1 * ffmpeg-4-libavfilter-devel-4.4.5-150600.13.19.1 * libpostproc55_9-debuginfo-4.4.5-150600.13.19.1 * libswresample3_9-4.4.5-150600.13.19.1 * libswresample3_9-debuginfo-4.4.5-150600.13.19.1 * ffmpeg-4-libavutil-devel-4.4.5-150600.13.19.1 * libavfilter7_110-debuginfo-4.4.5-150600.13.19.1 * libavfilter7_110-4.4.5-150600.13.19.1 * ffmpeg-4-libavformat-devel-4.4.5-150600.13.19.1 * ffmpeg-4-debuginfo-4.4.5-150600.13.19.1 * ffmpeg-4-private-devel-4.4.5-150600.13.19.1 * ffmpeg-4-debugsource-4.4.5-150600.13.19.1 * ffmpeg-4-libpostproc-devel-4.4.5-150600.13.19.1 * libavutil56_70-4.4.5-150600.13.19.1 * libavutil56_70-debuginfo-4.4.5-150600.13.19.1 * ffmpeg-4-4.4.5-150600.13.19.1 * ffmpeg-4-libswscale-devel-4.4.5-150600.13.19.1 * libpostproc55_9-4.4.5-150600.13.19.1 * libavformat58_76-4.4.5-150600.13.19.1 * libswscale5_9-debuginfo-4.4.5-150600.13.19.1 * libavdevice58_13-debuginfo-4.4.5-150600.13.19.1 * openSUSE Leap 15.6 (x86_64) * libavfilter7_110-32bit-4.4.5-150600.13.19.1 * libavutil56_70-32bit-4.4.5-150600.13.19.1 * libswscale5_9-32bit-debuginfo-4.4.5-150600.13.19.1 * libavresample4_0-32bit-4.4.5-150600.13.19.1 * libavformat58_76-32bit-4.4.5-150600.13.19.1 * libavcodec58_134-32bit-debuginfo-4.4.5-150600.13.19.1 * libavdevice58_13-32bit-debuginfo-4.4.5-150600.13.19.1 * libavfilter7_110-32bit-debuginfo-4.4.5-150600.13.19.1 * libswresample3_9-32bit-debuginfo-4.4.5-150600.13.19.1 * libavdevice58_13-32bit-4.4.5-150600.13.19.1 * libavformat58_76-32bit-debuginfo-4.4.5-150600.13.19.1 * libavresample4_0-32bit-debuginfo-4.4.5-150600.13.19.1 * libswresample3_9-32bit-4.4.5-150600.13.19.1 * libpostproc55_9-32bit-debuginfo-4.4.5-150600.13.19.1 * libavutil56_70-32bit-debuginfo-4.4.5-150600.13.19.1 * libpostproc55_9-32bit-4.4.5-150600.13.19.1 * libswscale5_9-32bit-4.4.5-150600.13.19.1 * libavcodec58_134-32bit-4.4.5-150600.13.19.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libavformat58_76-64bit-4.4.5-150600.13.19.1 * libavutil56_70-64bit-4.4.5-150600.13.19.1 * libavresample4_0-64bit-4.4.5-150600.13.19.1 * libswresample3_9-64bit-debuginfo-4.4.5-150600.13.19.1 * libswresample3_9-64bit-4.4.5-150600.13.19.1 * libavformat58_76-64bit-debuginfo-4.4.5-150600.13.19.1 * libavcodec58_134-64bit-debuginfo-4.4.5-150600.13.19.1 * libavdevice58_13-64bit-4.4.5-150600.13.19.1 * libpostproc55_9-64bit-4.4.5-150600.13.19.1 * libswscale5_9-64bit-4.4.5-150600.13.19.1 * libpostproc55_9-64bit-debuginfo-4.4.5-150600.13.19.1 * libavresample4_0-64bit-debuginfo-4.4.5-150600.13.19.1 * libavutil56_70-64bit-debuginfo-4.4.5-150600.13.19.1 * libavdevice58_13-64bit-debuginfo-4.4.5-150600.13.19.1 * libswscale5_9-64bit-debuginfo-4.4.5-150600.13.19.1 * libavcodec58_134-64bit-4.4.5-150600.13.19.1 * libavfilter7_110-64bit-4.4.5-150600.13.19.1 * libavfilter7_110-64bit-debuginfo-4.4.5-150600.13.19.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * ffmpeg-4-libswresample-devel-4.4.5-150600.13.19.1 * ffmpeg-4-libavdevice-devel-4.4.5-150600.13.19.1 * libavformat58_76-debuginfo-4.4.5-150600.13.19.1 * libavcodec58_134-debuginfo-4.4.5-150600.13.19.1 * libavresample4_0-debuginfo-4.4.5-150600.13.19.1 * ffmpeg-4-libavresample-devel-4.4.5-150600.13.19.1 * libswscale5_9-4.4.5-150600.13.19.1 * ffmpeg-4-libavcodec-devel-4.4.5-150600.13.19.1 * libavresample4_0-4.4.5-150600.13.19.1 * libavdevice58_13-4.4.5-150600.13.19.1 * libavcodec58_134-4.4.5-150600.13.19.1 * ffmpeg-4-libavfilter-devel-4.4.5-150600.13.19.1 * libpostproc55_9-debuginfo-4.4.5-150600.13.19.1 * libswresample3_9-4.4.5-150600.13.19.1 * libswresample3_9-debuginfo-4.4.5-150600.13.19.1 * ffmpeg-4-libavutil-devel-4.4.5-150600.13.19.1 * libavfilter7_110-debuginfo-4.4.5-150600.13.19.1 * libavfilter7_110-4.4.5-150600.13.19.1 * ffmpeg-4-libavformat-devel-4.4.5-150600.13.19.1 * ffmpeg-4-debuginfo-4.4.5-150600.13.19.1 * ffmpeg-4-private-devel-4.4.5-150600.13.19.1 * ffmpeg-4-debugsource-4.4.5-150600.13.19.1 * ffmpeg-4-libpostproc-devel-4.4.5-150600.13.19.1 * libavutil56_70-4.4.5-150600.13.19.1 * libavutil56_70-debuginfo-4.4.5-150600.13.19.1 * ffmpeg-4-4.4.5-150600.13.19.1 * ffmpeg-4-libswscale-devel-4.4.5-150600.13.19.1 * libpostproc55_9-4.4.5-150600.13.19.1 * libavformat58_76-4.4.5-150600.13.19.1 * libswscale5_9-debuginfo-4.4.5-150600.13.19.1 * libavdevice58_13-debuginfo-4.4.5-150600.13.19.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * libswresample3_9-4.4.5-150600.13.19.1 * libswresample3_9-debuginfo-4.4.5-150600.13.19.1 * libavutil56_70-4.4.5-150600.13.19.1 * libavformat58_76-debuginfo-4.4.5-150600.13.19.1 * libavcodec58_134-debuginfo-4.4.5-150600.13.19.1 * libavformat58_76-4.4.5-150600.13.19.1 * libswscale5_9-4.4.5-150600.13.19.1 * ffmpeg-4-debuginfo-4.4.5-150600.13.19.1 * libswscale5_9-debuginfo-4.4.5-150600.13.19.1 * libavutil56_70-debuginfo-4.4.5-150600.13.19.1 * libavcodec58_134-4.4.5-150600.13.19.1 * ffmpeg-4-debugsource-4.4.5-150600.13.19.1 ## References: * https://www.suse.com/security/cve/CVE-2020-22021.html * https://www.suse.com/security/cve/CVE-2020-22046.html * https://www.suse.com/security/cve/CVE-2022-48434.html * https://bugzilla.suse.com/show_bug.cgi?id=1186586 * https://bugzilla.suse.com/show_bug.cgi?id=1209934 * https://bugzilla.suse.com/show_bug.cgi?id=1215309 [View Less]

1 0

SUSE-SU-2025:0959-1: moderate: Security update for python-Django
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Security update for python-Django Announcement ID: SUSE-SU-2025:0959-1 Release Date: 2025-03-19T16:56:48Z Rating: moderate References: * bsc#1239052 Cross-References: * CVE-2025-26699 CVSS scores: * CVE-2025-26699 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-26699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-26699 ( NVD ): 5.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L Affected … [View More]

1 0

SUSE-SU-2025:0955-1: important: Security update for the Linux Kernel
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Security update for the Linux Kernel Announcement ID: SUSE-SU-2025:0955-1 Release Date: 2025-03-19T16:11:26Z Rating: important References: * bsc#1012628 * bsc#1215199 * bsc#1219367 * bsc#1222672 * bsc#1222803 * bsc#1225606 * bsc#1225742 * bsc#1225981 * bsc#1227937 * bsc#1228521 * bsc#1230235 * bsc#1230438 * bsc#1230439 * bsc#1230497 * bsc#1231432 * bsc#1231912 * bsc#1231920 * bsc#1231949 * bsc#1232159 * bsc#1232198 * bsc#1232201 * bsc#… [View More]

1 0

SUSE-SU-2025:0961-1: important: Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) Announcement ID: SUSE-SU-2025:0961-1 Release Date: 2025-03-19T19:04:10Z Rating: important References: * bsc#1231204 * bsc#1233679 Cross-References: * CVE-2024-46818 * CVE-2024-50302 CVSS scores: * CVE-2024-46818 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46818 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46818 ( NVD ): … [View More] 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-50302 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: * CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). * CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-961=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2025-961=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_179-default-debuginfo-5-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_49-debugsource-5-150300.2.1 * kernel-livepatch-5_3_18-150300_59_179-default-5-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_179-preempt-debuginfo-5-150300.2.1 * kernel-livepatch-5_3_18-150300_59_179-preempt-5-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_179-default-debuginfo-5-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_49-debugsource-5-150300.2.1 * kernel-livepatch-5_3_18-150300_59_179-default-5-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46818.html * https://www.suse.com/security/cve/CVE-2024-50302.html * https://bugzilla.suse.com/show_bug.cgi?id=1231204 * https://bugzilla.suse.com/show_bug.cgi?id=1233679 [View Less]

1 0

SUSE-SU-2025:0962-1: important: Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) Announcement ID: SUSE-SU-2025:0962-1 Release Date: 2025-03-19T19:04:26Z Rating: important References: * bsc#1233679 * bsc#1235452 Cross-References: * CVE-2024-50302 * CVE-2024-56648 CVSS scores: * CVE-2024-50302 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-50302 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( NVD ): … [View More]7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56648 ( SUSE ): 8.6 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56648 ( SUSE ): 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56648 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_25 fixes several issues. The following security issues were fixed: * CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). * CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-963=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-963=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-962=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2025-962=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_25-default-5-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_5-debugsource-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_25-default-debuginfo-5-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_25-default-5-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_5-debugsource-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_25-default-debuginfo-5-150600.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_83-default-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_20-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_83-default-debuginfo-5-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_83-default-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_20-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_83-default-debuginfo-5-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-50302.html * https://www.suse.com/security/cve/CVE-2024-56648.html * https://bugzilla.suse.com/show_bug.cgi?id=1233679 * https://bugzilla.suse.com/show_bug.cgi?id=1235452 [View Less]

1 0

SUSE-SU-2025:0944-1: important: Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3) Announcement ID: SUSE-SU-2025:0944-1 Release Date: 2025-03-19T13:04:12Z Rating: important References: * bsc#1228017 * bsc#1229640 * bsc#1231204 * bsc#1233679 Cross-References: * CVE-2022-48792 * CVE-2022-48911 * CVE-2024-46818 * CVE-2024-50302 CVSS scores: * CVE-2022-48792 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48792 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:… [View More]N/S:U/C:H/I:H/A:H * CVE-2022-48911 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48911 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46818 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46818 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46818 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-50302 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues. The following security issues were fixed: * CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). * CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). * CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228017). * CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-944=1 SUSE-2025-948=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2025-944=1 SUSE-SLE- Module-Live-Patching-15-SP3-2025-948=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_164-default-debuginfo-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_164-default-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_167-default-debuginfo-9-150300.2.1 * kernel-livepatch-5_3_18-150300_59_167-default-9-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_46-debugsource-9-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_45-debugsource-10-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_167-preempt-debuginfo-9-150300.2.1 * kernel-livepatch-5_3_18-150300_59_164-preempt-10-150300.2.1 * kernel-livepatch-5_3_18-150300_59_167-preempt-9-150300.2.1 * kernel-livepatch-5_3_18-150300_59_164-preempt-debuginfo-10-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_167-default-9-150300.2.1 * kernel-livepatch-5_3_18-150300_59_164-default-10-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48792.html * https://www.suse.com/security/cve/CVE-2022-48911.html * https://www.suse.com/security/cve/CVE-2024-46818.html * https://www.suse.com/security/cve/CVE-2024-50302.html * https://bugzilla.suse.com/show_bug.cgi?id=1228017 * https://bugzilla.suse.com/show_bug.cgi?id=1229640 * https://bugzilla.suse.com/show_bug.cgi?id=1231204 * https://bugzilla.suse.com/show_bug.cgi?id=1233679 [View Less]

1 0

SUSE-SU-2025:0946-1: important: Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4)
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4) Announcement ID: SUSE-SU-2025:0946-1 Release Date: 2025-03-19T12:35:10Z Rating: important References: * bsc#1231196 * bsc#1231204 * bsc#1233679 * bsc#1235452 Cross-References: * CVE-2024-46815 * CVE-2024-46818 * CVE-2024-50302 * CVE-2024-56648 CVSS scores: * CVE-2024-46815 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46815 ( SUSE ): 7.8 … [View More]CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46815 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46818 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46818 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46818 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-50302 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56648 ( SUSE ): 8.6 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56648 ( SUSE ): 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56648 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_136 fixes several issues. The following security issues were fixed: * CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). * CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231196). * CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). * CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-946=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-946=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_136-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_136-default-5-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_32-debugsource-5-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_136-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_136-default-5-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_32-debugsource-5-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46815.html * https://www.suse.com/security/cve/CVE-2024-46818.html * https://www.suse.com/security/cve/CVE-2024-50302.html * https://www.suse.com/security/cve/CVE-2024-56648.html * https://bugzilla.suse.com/show_bug.cgi?id=1231196 * https://bugzilla.suse.com/show_bug.cgi?id=1231204 * https://bugzilla.suse.com/show_bug.cgi?id=1233679 * https://bugzilla.suse.com/show_bug.cgi?id=1235452 [View Less]

1 0

SUSE-SU-2025:0950-1: important: Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)
by OPENSUSE-UPDATES 19 Mar '25

19 Mar '25

# Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) Announcement ID: SUSE-SU-2025:0950-1 Release Date: 2025-03-19T13:34:04Z Rating: important References: * bsc#1229640 * bsc#1231196 * bsc#1231204 * bsc#1233679 * bsc#1235452 Cross-References: * CVE-2022-48911 * CVE-2024-46815 * CVE-2024-46818 * CVE-2024-50302 * CVE-2024-56648 CVSS scores: * CVE-2022-48911 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48911 ( NVD … [View More]): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46815 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46815 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46815 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46818 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46818 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46818 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-50302 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50302 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56648 ( SUSE ): 8.6 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56648 ( SUSE ): 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56648 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_73 fixes several issues. The following security issues were fixed: * CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). * CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231196). * CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). * CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). * CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-950=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-951=1 SUSE-2025-947=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2025-951=1 SUSE-SLE- Module-Live-Patching-15-SP5-2025-947=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-950=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_24-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_111-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-14-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_73-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_49-default-16-150500.2.1 * kernel-livepatch-5_14_21-150500_55_73-default-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-16-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_10-debugsource-16-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_17-debugsource-6-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_73-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_49-default-16-150500.2.1 * kernel-livepatch-5_14_21-150500_55_73-default-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-16-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_10-debugsource-16-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le x86_64) * kernel-livepatch-SLE15-SP5_Update_17-debugsource-6-150500.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_24-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_111-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-14-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48911.html * https://www.suse.com/security/cve/CVE-2024-46815.html * https://www.suse.com/security/cve/CVE-2024-46818.html * https://www.suse.com/security/cve/CVE-2024-50302.html * https://www.suse.com/security/cve/CVE-2024-56648.html * https://bugzilla.suse.com/show_bug.cgi?id=1229640 * https://bugzilla.suse.com/show_bug.cgi?id=1231196 * https://bugzilla.suse.com/show_bug.cgi?id=1231204 * https://bugzilla.suse.com/show_bug.cgi?id=1233679 * https://bugzilla.suse.com/show_bug.cgi?id=1235452 [View Less]

1 0

Main

Development

Information

Community

Social Media

Other

openSUSE Updates