- openSUSE Updates

openSUSE-SU-2024:0355-1: important: Security update for python-mysql-connector-python
by opensuse-security＠opensuse.org 07 Nov '24

07 Nov '24

openSUSE Security Update: Security update for python-mysql-connector-python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0355-1 Rating: important References: #1231740 Cross-References: CVE-2024-21272 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-mysql-connector-python fixes the following issues: - Update to 9.1.0 (boo#1231740, CVE-2024-21272) - WL#16452: Bundle all installable authentication plugins when building the C-extension - WL#16444: Drop build support for DEB packages - WL#16442: Upgrade gssapi version to 1.8.3 - WL#16411: Improve wheel metadata information for Classic and XDevAPI connectors - WL#16341: OpenID Connect (Oauth2 - JWT) Authentication Support - WL#16307: Remove Python 3.8 support - WL#16306: Add support for Python 3.13 - BUG#37055435: Connection fails during the TLS negotiation when specifying TLSv1.3 ciphers - BUG#37013057: mysql-connector-python Parameterized query SQL injection - BUG#36765200: python mysql connector 8.3.0 raise %-.100s:%u when input a wrong host - BUG#36577957: Update charset/collation description indicate this is 16 bits - 9.0.0: - WL#16350: Update dnspython version - WL#16318: Deprecate Cursors Prepared Raw and Named Tuple - WL#16284: Update the Python Protobuf version - WL#16283: Remove OpenTelemetry Bundled Installation - BUG#36664998: Packets out of order error is raised while changing user in aio - BUG#36611371: Update dnspython required versions to allow latest 2.6.1 - BUG#36570707: Collation set on connect using C-Extension is ignored - BUG#36476195: Incorrect escaping in pure Python mode if sql_mode includes NO_BACKSLASH_ESCAPES - BUG#36289767: MySQLCursorBufferedRaw does not skip conversion - 8.4.0 - WL#16203: GPL License Exception Update - WL#16173: Update allowed cipher and cipher-suite lists - WL#16164: Implement support for new vector data type - WL#16127: Remove the FIDO authentication mechanism - WL#16053: Support GSSAPI/Kerberos authentication on Windows using authentication_ldap_sasl_client plug-in for C-extension - BUG#36227964: Improve OpenTelemetry span coverage - BUG#36167880: Massive memory leak mysqlx native Protobuf adding to collection - 8.3.0 - WL#16015: Remove use of removed COM_ commands - WL#15985: Support GSSAPI/Kerberos authentication on Windows using authentication_ldap_sasl_client plug-in for Pure Python - WL#15983: Stop using mysql_ssl_set api - WL#15982: Remove use of mysql_shutdown - WL#15950: Support query parameters for prepared statements - WL#15942: Improve type hints and standardize byte type handling - WL#15836: Split mysql and mysqlx into different packages - WL#15523: Support Python DB API asynchronous execution - BUG#35912790: Binary strings are converted when using prepared statements - BUG#35832148: Fix Django timezone.utc deprecation warning - BUG#35710145: Bad MySQLCursor.statement and result when query text contains code comments - BUG#21390859: STATEMENTS GET OUT OF SYNCH WITH RESULT SETS Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-355=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): python3-mysql-connector-python-9.1.0-bp156.4.3.1 References: https://www.suse.com/security/cve/CVE-2024-21272.html https://bugzilla.suse.com/1231740

1 0

openSUSE-SU-2024:0353-1: moderate: Security update for kmail-account-wizard
by opensuse-security＠opensuse.org 06 Nov '24

06 Nov '24

openSUSE Security Update: Security update for kmail-account-wizard ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0353-1 Rating: moderate References: #1232454 Cross-References: CVE-2024-50624 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kmail-account-wizard fixes the following issues: - CVE-2024-50624: Fixed that plaintext HTTP was used for URLs when retrieving configuration files (boo#1232454, kde#487882) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-353=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-353=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): kmail-account-wizard-23.08.5-bp156.2.3.1 kmail-account-wizard-debuginfo-23.08.5-bp156.2.3.1 kmail-account-wizard-debugsource-23.08.5-bp156.2.3.1 - openSUSE Backports SLE-15-SP6 (noarch): kmail-account-wizard-lang-23.08.5-bp156.2.3.1 - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kmail-account-wizard-22.12.3-bp155.2.3.1 - openSUSE Backports SLE-15-SP5 (noarch): kmail-account-wizard-lang-22.12.3-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-50624.html https://bugzilla.suse.com/1232454

1 0

openSUSE-SU-2024:0351-1: important: Security update for python-mysql-connector-python
by opensuse-security＠opensuse.org 06 Nov '24

06 Nov '24

openSUSE Security Update: Security update for python-mysql-connector-python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0351-1 Rating: important References: #1231740 Cross-References: CVE-2024-21272 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-mysql-connector-python fixes the following issues: - Update to 9.1.0 (boo#1231740, CVE-2024-21272) - WL#16452: Bundle all installable authentication plugins when building the C-extension - WL#16444: Drop build support for DEB packages - WL#16442: Upgrade gssapi version to 1.8.3 - WL#16411: Improve wheel metadata information for Classic and XDevAPI connectors - WL#16341: OpenID Connect (Oauth2 - JWT) Authentication Support - WL#16307: Remove Python 3.8 support - WL#16306: Add support for Python 3.13 - BUG#37055435: Connection fails during the TLS negotiation when specifying TLSv1.3 ciphers - BUG#37013057: mysql-connector-python Parameterized query SQL injection - BUG#36765200: python mysql connector 8.3.0 raise %-.100s:%u when input a wrong host - BUG#36577957: Update charset/collation description indicate this is 16 bits - 9.0.0: - WL#16350: Update dnspython version - WL#16318: Deprecate Cursors Prepared Raw and Named Tuple - WL#16284: Update the Python Protobuf version - WL#16283: Remove OpenTelemetry Bundled Installation - BUG#36664998: Packets out of order error is raised while changing user in aio - BUG#36611371: Update dnspython required versions to allow latest 2.6.1 - BUG#36570707: Collation set on connect using C-Extension is ignored - BUG#36476195: Incorrect escaping in pure Python mode if sql_mode includes NO_BACKSLASH_ESCAPES - BUG#36289767: MySQLCursorBufferedRaw does not skip conversion - 8.4.0 - WL#16203: GPL License Exception Update - WL#16173: Update allowed cipher and cipher-suite lists - WL#16164: Implement support for new vector data type - WL#16127: Remove the FIDO authentication mechanism - WL#16053: Support GSSAPI/Kerberos authentication on Windows using authentication_ldap_sasl_client plug-in for C-extension - BUG#36227964: Improve OpenTelemetry span coverage - BUG#36167880: Massive memory leak mysqlx native Protobuf adding to collection - 8.3.0 - WL#16015: Remove use of removed COM_ commands - WL#15985: Support GSSAPI/Kerberos authentication on Windows using authentication_ldap_sasl_client plug-in for Pure Python - WL#15983: Stop using mysql_ssl_set api - WL#15982: Remove use of mysql_shutdown - WL#15950: Support query parameters for prepared statements - WL#15942: Improve type hints and standardize byte type handling - WL#15836: Split mysql and mysqlx into different packages - WL#15523: Support Python DB API asynchronous execution - BUG#35912790: Binary strings are converted when using prepared statements - BUG#35832148: Fix Django timezone.utc deprecation warning - BUG#35710145: Bad MySQLCursor.statement and result when query text contains code comments - BUG#21390859: STATEMENTS GET OUT OF SYNCH WITH RESULT SETS Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-351=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): python3-mysql-connector-python-9.1.0-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2024-21272.html https://bugzilla.suse.com/1231740

1 0

openSUSE-RU-2024:0354-1: moderate: Recommended update for orthanc-wsi
by maintenance＠opensuse.org 06 Nov '24

06 Nov '24

openSUSE Recommended Update: Recommended update for orthanc-wsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0354-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for orthanc-wsi fixes the following issues: Version 2.1 * Support of sparse encoding of tiles in OpenSlide (notably for MIRAX format) * OrthancWSIDicomizer supports plain TIFF, besides hierarchical TIFF * New option: "--force-openslide" to force the use of OpenSlide on TIFF-like files * New option: "--padding" to control deep zoom of plain PNG/JPEG/TIFF images over IIIF * Added support for DICOM tag "Recommended Absent Pixel CIELab" (0048,0015) * Force version of Mirador to 3.3.0 * In the IIIF manifest, reverse the order of the "sizes" field, which seems to fix compatibility with Mirador v4.0.0-alpha Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-354=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 ppc64le s390x x86_64): orthanc-wsi-2.1-bp156.2.3.1 References:

1 0

SUSE-SU-2024:3922-1: important: Security update for libgsf
by OPENSUSE-UPDATES 06 Nov '24

06 Nov '24

# Security update for libgsf Announcement ID: SUSE-SU-2024:3922-1 Release Date: 2024-11-06T10:12:34Z Rating: important References: * bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474 * CVE-2024-42415 CVSS scores: * CVE-2024-36474 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-36474 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-36474 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36474 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-42415 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-42415 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-42415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-42415 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for libgsf fixes the following issues: * CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282, bsc#1231283). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3922=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3922=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-3922=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3922=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3922=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3922=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3922=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3922=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-3922=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libgsf-tools-1.14.50-150400.3.6.1 * libgsf-1-114-1.14.50-150400.3.6.1 * typelib-1_0-Gsf-1-1.14.50-150400.3.6.1 * gsf-office-thumbnailer-debuginfo-1.14.50-150400.3.6.1 * libgsf-1-114-debuginfo-1.14.50-150400.3.6.1 * libgsf-tools-debuginfo-1.14.50-150400.3.6.1 * libgsf-devel-1.14.50-150400.3.6.1 * libgsf-debugsource-1.14.50-150400.3.6.1 * gsf-office-thumbnailer-1.14.50-150400.3.6.1 * openSUSE Leap 15.4 (x86_64) * libgsf-1-114-32bit-1.14.50-150400.3.6.1 * libgsf-1-114-32bit-debuginfo-1.14.50-150400.3.6.1 * openSUSE Leap 15.4 (noarch) * libgsf-lang-1.14.50-150400.3.6.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgsf-1-114-64bit-1.14.50-150400.3.6.1 * libgsf-1-114-64bit-debuginfo-1.14.50-150400.3.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libgsf-tools-1.14.50-150400.3.6.1 * libgsf-1-114-1.14.50-150400.3.6.1 * typelib-1_0-Gsf-1-1.14.50-150400.3.6.1 * gsf-office-thumbnailer-debuginfo-1.14.50-150400.3.6.1 * libgsf-1-114-debuginfo-1.14.50-150400.3.6.1 * libgsf-tools-debuginfo-1.14.50-150400.3.6.1 * libgsf-devel-1.14.50-150400.3.6.1 * libgsf-debugsource-1.14.50-150400.3.6.1 * gsf-office-thumbnailer-1.14.50-150400.3.6.1 * openSUSE Leap 15.5 (x86_64) * libgsf-1-114-32bit-1.14.50-150400.3.6.1 * libgsf-1-114-32bit-debuginfo-1.14.50-150400.3.6.1 * openSUSE Leap 15.5 (noarch) * libgsf-lang-1.14.50-150400.3.6.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgsf-1-114-1.14.50-150400.3.6.1 * libgsf-1-114-debuginfo-1.14.50-150400.3.6.1 * libgsf-debugsource-1.14.50-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libgsf-1-114-1.14.50-150400.3.6.1 * libgsf-1-114-debuginfo-1.14.50-150400.3.6.1 * libgsf-debugsource-1.14.50-150400.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libgsf-1-114-1.14.50-150400.3.6.1 * libgsf-1-114-debuginfo-1.14.50-150400.3.6.1 * libgsf-debugsource-1.14.50-150400.3.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libgsf-1-114-1.14.50-150400.3.6.1 * typelib-1_0-Gsf-1-1.14.50-150400.3.6.1 * libgsf-1-114-debuginfo-1.14.50-150400.3.6.1 * libgsf-devel-1.14.50-150400.3.6.1 * libgsf-debugsource-1.14.50-150400.3.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * libgsf-lang-1.14.50-150400.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libgsf-1-114-1.14.50-150400.3.6.1 * libgsf-1-114-debuginfo-1.14.50-150400.3.6.1 * libgsf-debugsource-1.14.50-150400.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libgsf-1-114-1.14.50-150400.3.6.1 * libgsf-1-114-debuginfo-1.14.50-150400.3.6.1 * libgsf-debugsource-1.14.50-150400.3.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * typelib-1_0-Gsf-1-1.14.50-150400.3.6.1 * libgsf-devel-1.14.50-150400.3.6.1 * libgsf-debugsource-1.14.50-150400.3.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (noarch) * libgsf-lang-1.14.50-150400.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-36474.html * https://www.suse.com/security/cve/CVE-2024-42415.html * https://bugzilla.suse.com/show_bug.cgi?id=1231282 * https://bugzilla.suse.com/show_bug.cgi?id=1231283

1 0

SUSE-SU-2024:3920-1: important: Security update for libgsf
by OPENSUSE-UPDATES 06 Nov '24

06 Nov '24

# Security update for libgsf Announcement ID: SUSE-SU-2024:3920-1 Release Date: 2024-11-06T10:11:30Z Rating: important References: * bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474 * CVE-2024-42415 CVSS scores: * CVE-2024-36474 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-36474 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-36474 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36474 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-42415 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-42415 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-42415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-42415 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for libgsf fixes the following issues: * CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282, bsc#1231283). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3920=1 openSUSE-SLE-15.6-2024-3920=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3920=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-3920=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libgsf-debuginfo-1.14.51-150600.4.3.1 * typelib-1_0-Gsf-1-1.14.51-150600.4.3.1 * libgsf-1-114-debuginfo-1.14.51-150600.4.3.1 * libgsf-tools-1.14.51-150600.4.3.1 * libgsf-debugsource-1.14.51-150600.4.3.1 * gsf-office-thumbnailer-debuginfo-1.14.51-150600.4.3.1 * libgsf-devel-1.14.51-150600.4.3.1 * gsf-office-thumbnailer-1.14.51-150600.4.3.1 * libgsf-1-114-1.14.51-150600.4.3.1 * libgsf-tools-debuginfo-1.14.51-150600.4.3.1 * openSUSE Leap 15.6 (noarch) * libgsf-lang-1.14.51-150600.4.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgsf-debuginfo-1.14.51-150600.4.3.1 * libgsf-1-114-1.14.51-150600.4.3.1 * libgsf-1-114-debuginfo-1.14.51-150600.4.3.1 * libgsf-debugsource-1.14.51-150600.4.3.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * libgsf-debuginfo-1.14.51-150600.4.3.1 * typelib-1_0-Gsf-1-1.14.51-150600.4.3.1 * libgsf-devel-1.14.51-150600.4.3.1 * libgsf-debugsource-1.14.51-150600.4.3.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (noarch) * libgsf-lang-1.14.51-150600.4.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-36474.html * https://www.suse.com/security/cve/CVE-2024-42415.html * https://bugzilla.suse.com/show_bug.cgi?id=1231282 * https://bugzilla.suse.com/show_bug.cgi?id=1231283

1 0

SUSE-SU-2024:3923-1: important: Security update for gradle
by OPENSUSE-UPDATES 06 Nov '24

06 Nov '24

# Security update for gradle Announcement ID: SUSE-SU-2024:3923-1 Release Date: 2024-11-06T10:13:52Z Rating: important References: * bsc#1212931 Cross-References: * CVE-2023-35947 CVSS scores: * CVE-2023-35947 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L * CVE-2023-35947 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for gradle fixes the following issues: * CVE-2023-35947: Fixed an issue while unpacking tar archives, where files could be created outside of the unpack location (bsc#1212931). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3923=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3923=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3923=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3923=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3923=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3923=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3923=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3923=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3923=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3923=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3923=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3923=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3923=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3923=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3923=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3923=1 ## Package List: * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * gradle-4.4.1-150200.3.27.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * gradle-4.4.1-150200.3.27.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.27.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.27.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gradle-4.4.1-150200.3.27.1 ## References: * https://www.suse.com/security/cve/CVE-2023-35947.html * https://bugzilla.suse.com/show_bug.cgi?id=1212931

1 0

SUSE-SU-2024:3924-1: moderate: Security update for python310
by OPENSUSE-UPDATES 06 Nov '24

06 Nov '24

# Security update for python310 Announcement ID: SUSE-SU-2024:3924-1 Release Date: 2024-11-06T10:14:11Z Rating: moderate References: * bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287 CVSS scores: * CVE-2024-9287 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green * CVE-2024-9287 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9287 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python310 fixes the following issues: * CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment (bsc#1232241). Bug fixes: * Drop .pyc files from docdir for reproducible builds (bsc#1230906). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3924=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3924=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3924=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python310-dbm-debuginfo-3.10.15-150400.4.60.1 * python310-base-3.10.15-150400.4.60.1 * python310-doc-3.10.15-150400.4.60.1 * python310-idle-3.10.15-150400.4.60.1 * python310-3.10.15-150400.4.60.1 * python310-curses-debuginfo-3.10.15-150400.4.60.1 * python310-devel-3.10.15-150400.4.60.1 * python310-core-debugsource-3.10.15-150400.4.60.1 * python310-tools-3.10.15-150400.4.60.1 * python310-debuginfo-3.10.15-150400.4.60.1 * python310-tk-debuginfo-3.10.15-150400.4.60.1 * python310-tk-3.10.15-150400.4.60.1 * python310-curses-3.10.15-150400.4.60.1 * python310-testsuite-debuginfo-3.10.15-150400.4.60.1 * libpython3_10-1_0-3.10.15-150400.4.60.1 * python310-testsuite-3.10.15-150400.4.60.1 * python310-doc-devhelp-3.10.15-150400.4.60.1 * python310-base-debuginfo-3.10.15-150400.4.60.1 * python310-debugsource-3.10.15-150400.4.60.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.60.1 * python310-dbm-3.10.15-150400.4.60.1 * openSUSE Leap 15.4 (x86_64) * python310-32bit-debuginfo-3.10.15-150400.4.60.1 * python310-base-32bit-3.10.15-150400.4.60.1 * libpython3_10-1_0-32bit-debuginfo-3.10.15-150400.4.60.1 * python310-base-32bit-debuginfo-3.10.15-150400.4.60.1 * libpython3_10-1_0-32bit-3.10.15-150400.4.60.1 * python310-32bit-3.10.15-150400.4.60.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_10-1_0-64bit-debuginfo-3.10.15-150400.4.60.1 * python310-64bit-3.10.15-150400.4.60.1 * libpython3_10-1_0-64bit-3.10.15-150400.4.60.1 * python310-base-64bit-3.10.15-150400.4.60.1 * python310-64bit-debuginfo-3.10.15-150400.4.60.1 * python310-base-64bit-debuginfo-3.10.15-150400.4.60.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python310-dbm-debuginfo-3.10.15-150400.4.60.1 * python310-base-3.10.15-150400.4.60.1 * python310-doc-3.10.15-150400.4.60.1 * python310-idle-3.10.15-150400.4.60.1 * python310-3.10.15-150400.4.60.1 * python310-curses-debuginfo-3.10.15-150400.4.60.1 * python310-devel-3.10.15-150400.4.60.1 * python310-core-debugsource-3.10.15-150400.4.60.1 * python310-tools-3.10.15-150400.4.60.1 * python310-debuginfo-3.10.15-150400.4.60.1 * python310-tk-debuginfo-3.10.15-150400.4.60.1 * python310-tk-3.10.15-150400.4.60.1 * python310-curses-3.10.15-150400.4.60.1 * python310-testsuite-debuginfo-3.10.15-150400.4.60.1 * libpython3_10-1_0-3.10.15-150400.4.60.1 * python310-testsuite-3.10.15-150400.4.60.1 * python310-doc-devhelp-3.10.15-150400.4.60.1 * python310-base-debuginfo-3.10.15-150400.4.60.1 * python310-debugsource-3.10.15-150400.4.60.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.60.1 * python310-dbm-3.10.15-150400.4.60.1 * openSUSE Leap 15.5 (x86_64) * python310-32bit-debuginfo-3.10.15-150400.4.60.1 * python310-base-32bit-3.10.15-150400.4.60.1 * libpython3_10-1_0-32bit-debuginfo-3.10.15-150400.4.60.1 * python310-base-32bit-debuginfo-3.10.15-150400.4.60.1 * libpython3_10-1_0-32bit-3.10.15-150400.4.60.1 * python310-32bit-3.10.15-150400.4.60.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python310-dbm-debuginfo-3.10.15-150400.4.60.1 * python310-base-3.10.15-150400.4.60.1 * python310-doc-3.10.15-150400.4.60.1 * python310-idle-3.10.15-150400.4.60.1 * python310-3.10.15-150400.4.60.1 * python310-curses-debuginfo-3.10.15-150400.4.60.1 * python310-devel-3.10.15-150400.4.60.1 * python310-core-debugsource-3.10.15-150400.4.60.1 * python310-tools-3.10.15-150400.4.60.1 * python310-debuginfo-3.10.15-150400.4.60.1 * python310-tk-debuginfo-3.10.15-150400.4.60.1 * python310-tk-3.10.15-150400.4.60.1 * python310-curses-3.10.15-150400.4.60.1 * python310-testsuite-debuginfo-3.10.15-150400.4.60.1 * libpython3_10-1_0-3.10.15-150400.4.60.1 * python310-testsuite-3.10.15-150400.4.60.1 * python310-doc-devhelp-3.10.15-150400.4.60.1 * python310-base-debuginfo-3.10.15-150400.4.60.1 * python310-debugsource-3.10.15-150400.4.60.1 * libpython3_10-1_0-debuginfo-3.10.15-150400.4.60.1 * python310-dbm-3.10.15-150400.4.60.1 * openSUSE Leap 15.6 (x86_64) * python310-32bit-debuginfo-3.10.15-150400.4.60.1 * python310-base-32bit-3.10.15-150400.4.60.1 * libpython3_10-1_0-32bit-debuginfo-3.10.15-150400.4.60.1 * python310-base-32bit-debuginfo-3.10.15-150400.4.60.1 * libpython3_10-1_0-32bit-3.10.15-150400.4.60.1 * python310-32bit-3.10.15-150400.4.60.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9287.html * https://bugzilla.suse.com/show_bug.cgi?id=1230906 * https://bugzilla.suse.com/show_bug.cgi?id=1232241

1 0

SUSE-SU-2024:3925-1: moderate: Security update for curl
by OPENSUSE-UPDATES 06 Nov '24

06 Nov '24

# Security update for curl Announcement ID: SUSE-SU-2024:3925-1 Release Date: 2024-11-06T10:14:33Z Rating: moderate References: * bsc#1232528 Cross-References: * CVE-2024-9681 CVSS scores: * CVE-2024-9681 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-9681 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for curl fixes the following issues: * CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3925=1 openSUSE-SLE-15.6-2024-3925=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3925=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libcurl4-debuginfo-8.6.0-150600.4.12.1 * curl-debugsource-8.6.0-150600.4.12.1 * libcurl4-8.6.0-150600.4.12.1 * curl-debuginfo-8.6.0-150600.4.12.1 * libcurl-devel-8.6.0-150600.4.12.1 * curl-8.6.0-150600.4.12.1 * openSUSE Leap 15.6 (x86_64) * libcurl-devel-32bit-8.6.0-150600.4.12.1 * libcurl4-32bit-debuginfo-8.6.0-150600.4.12.1 * libcurl4-32bit-8.6.0-150600.4.12.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libcurl4-64bit-debuginfo-8.6.0-150600.4.12.1 * libcurl-devel-64bit-8.6.0-150600.4.12.1 * libcurl4-64bit-8.6.0-150600.4.12.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libcurl4-debuginfo-8.6.0-150600.4.12.1 * curl-debugsource-8.6.0-150600.4.12.1 * libcurl4-8.6.0-150600.4.12.1 * curl-debuginfo-8.6.0-150600.4.12.1 * libcurl-devel-8.6.0-150600.4.12.1 * curl-8.6.0-150600.4.12.1 * Basesystem Module 15-SP6 (x86_64) * libcurl4-32bit-8.6.0-150600.4.12.1 * libcurl4-32bit-debuginfo-8.6.0-150600.4.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9681.html * https://bugzilla.suse.com/show_bug.cgi?id=1232528

1 0

SUSE-SU-2024:3926-1: moderate: Security update for curl
by OPENSUSE-UPDATES 06 Nov '24

06 Nov '24

# Security update for curl Announcement ID: SUSE-SU-2024:3926-1 Release Date: 2024-11-06T10:16:06Z Rating: moderate References: * bsc#1232528 Cross-References: * CVE-2024-9681 CVSS scores: * CVE-2024-9681 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-9681 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for curl fixes the following issues: * CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3926=1 SUSE-SLE- INSTALLER-15-SP4-2024-3926=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3926=1 SUSE- SLE-INSTALLER-15-SP4-2024-3926=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3926=1 SUSE-SLE-INSTALLER-15-SP4-2024-3926=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3926=1 SUSE- SLE-INSTALLER-15-SP4-2024-3926=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3926=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3926=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3926=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3926=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3926=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3926=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3926=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3926=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3926=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3926=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3926=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3926=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3926=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3926=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3926=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3926=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3926=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3926=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3926=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3926=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libcurl4-32bit-8.0.1-150400.5.56.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * SUSE Manager Proxy 4.3 (x86_64) * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * libcurl4-32bit-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * libcurl4-32bit-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Manager Server 4.3 (x86_64) * libcurl4-32bit-8.0.1-150400.5.56.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * openSUSE Leap 15.4 (x86_64) * libcurl4-32bit-8.0.1-150400.5.56.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-32bit-8.0.1-150400.5.56.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libcurl4-64bit-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-64bit-8.0.1-150400.5.56.1 * libcurl4-64bit-8.0.1-150400.5.56.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * openSUSE Leap 15.5 (x86_64) * libcurl4-32bit-8.0.1-150400.5.56.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-32bit-8.0.1-150400.5.56.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libcurl4-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libcurl4-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libcurl4-8.0.1-150400.5.56.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libcurl4-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libcurl4-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libcurl4-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libcurl4-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * Basesystem Module 15-SP5 (x86_64) * libcurl4-32bit-8.0.1-150400.5.56.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libcurl4-32bit-8.0.1-150400.5.56.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libcurl4-32bit-8.0.1-150400.5.56.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * libcurl4-32bit-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * curl-8.0.1-150400.5.56.1 * curl-debugsource-8.0.1-150400.5.56.1 * libcurl4-debuginfo-8.0.1-150400.5.56.1 * libcurl-devel-8.0.1-150400.5.56.1 * libcurl4-8.0.1-150400.5.56.1 * curl-debuginfo-8.0.1-150400.5.56.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libcurl4-32bit-8.0.1-150400.5.56.1 * libcurl4-32bit-debuginfo-8.0.1-150400.5.56.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9681.html * https://bugzilla.suse.com/show_bug.cgi?id=1232528

1 0

SUSE-FU-2024:3917-1: low: Feature update for php-gnupg
by OPENSUSE-UPDATES 06 Nov '24

06 Nov '24

# Feature update for php-gnupg Announcement ID: SUSE-FU-2024:3917-1 Release Date: 2024-11-05T21:42:47Z Rating: low References: * jsc#PED-7973 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that contains one feature can now be installed. ## Description: This update for php-gnupg fixes the following issues: * Ship php8-gnupg. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2024-3917=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3917=1 openSUSE-SLE-15.6-2024-3917=1 ## Package List: * Web and Scripting Module 15-SP6 (aarch64 ppc64le s390x x86_64) * php8-gnupg-debugsource-1.5.1-150600.13.3.2 * php8-gnupg-debuginfo-1.5.1-150600.13.3.2 * php8-gnupg-1.5.1-150600.13.3.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * php7-gnupg-debuginfo-1.5.1-150600.13.3.2 * php8-gnupg-1.5.1-150600.13.3.2 * php7-gnupg-1.5.1-150600.13.3.2 * php8-gnupg-debugsource-1.5.1-150600.13.3.2 * php7-gnupg-debugsource-1.5.1-150600.13.3.2 * php8-gnupg-debuginfo-1.5.1-150600.13.3.2 ## References: * https://jira.suse.com/browse/PED-7973

1 0

SUSE-RU-2024:3918-1: moderate: Recommended update for rasdaemon
by OPENSUSE-UPDATES 06 Nov '24

06 Nov '24

# Recommended update for rasdaemon Announcement ID: SUSE-RU-2024:3918-1 Release Date: 2024-11-05T21:42:56Z Rating: moderate References: * bsc#1226114 Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for rasdaemon fixes the following issues: * Error logs are not captured in rasdaemon upon error injection (bsc#1226114) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3918=1 openSUSE-SLE-15.5-2024-3918=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-3918=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * rasdaemon-debugsource-0.6.7.18.git+7ccf12f-150500.7.3.2 * rasdaemon-debuginfo-0.6.7.18.git+7ccf12f-150500.7.3.2 * rasdaemon-0.6.7.18.git+7ccf12f-150500.7.3.2 * Server Applications Module 15-SP5 (aarch64 s390x x86_64) * rasdaemon-debugsource-0.6.7.18.git+7ccf12f-150500.7.3.2 * rasdaemon-debuginfo-0.6.7.18.git+7ccf12f-150500.7.3.2 * rasdaemon-0.6.7.18.git+7ccf12f-150500.7.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226114

1 0

SUSE-RU-2024:3919-1: moderate: Recommended update for pipewire
by OPENSUSE-UPDATES 06 Nov '24

06 Nov '24

# Recommended update for pipewire Announcement ID: SUSE-RU-2024:3919-1 Release Date: 2024-11-06T05:37:39Z Rating: moderate References: * bsc#1222253 * bsc#1230613 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that has two fixes can now be installed. ## Description: This update for pipewire fixes the following issues: * Make sure the pipewire-libjack package doesn't completely replace the original jack libraries unless the pipewire-jack package which installs the ld.so.conf.d file is installed too (bsc#1222253). * Moved modules jack-tunnel and jackdbus-detect to the pipewire-spa- plugins-0_2-jack since those modules should only be used when the real jack server is running. This fixes pipewire starting jackdbus on start (bsc#1230613) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3919=1 openSUSE-SLE-15.6-2024-3919=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3919=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3919=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3919=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * pipewire-jack-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-jack-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-module-x11-0_3-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-tools-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-alsa-1.0.5+git36.60deeb2-150600.3.3.5 * gstreamer-plugin-pipewire-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-devel-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-alsa-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-jack-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-tools-1.0.5+git36.60deeb2-150600.3.3.5 * libpipewire-0_3-0-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * libpipewire-0_3-0-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-devel-1.0.5+git36.60deeb2-150600.3.3.5 * gstreamer-plugin-pipewire-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-module-x11-0_3-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-modules-0_3-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-debugsource-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-pulseaudio-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-doc-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-pulseaudio-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-modules-0_3-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-tools-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-tools-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * openSUSE Leap 15.6 (x86_64) * libpipewire-0_3-0-32bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-32bit-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-32bit-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-32bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-modules-0_3-32bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-32bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * libpipewire-0_3-0-32bit-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-alsa-32bit-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-alsa-32bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-modules-0_3-32bit-1.0.5+git36.60deeb2-150600.3.3.5 * openSUSE Leap 15.6 (noarch) * pipewire-lang-1.0.5+git36.60deeb2-150600.3.3.5 * openSUSE Leap 15.6 (aarch64_ilp32) * libpipewire-0_3-0-64bit-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-64bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-modules-0_3-64bit-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-64bit-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-modules-0_3-64bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-64bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-64bit-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-alsa-64bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * libpipewire-0_3-0-64bit-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-alsa-64bit-1.0.5+git36.60deeb2-150600.3.3.5 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libpipewire-0_3-0-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-modules-0_3-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * libpipewire-0_3-0-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-modules-0_3-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-debugsource-1.0.5+git36.60deeb2-150600.3.3.5 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gstreamer-plugin-pipewire-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * gstreamer-plugin-pipewire-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-tools-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-tools-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-tools-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-debugsource-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-tools-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-1.0.5+git36.60deeb2-150600.3.3.5 * Desktop Applications Module 15-SP6 (noarch) * pipewire-lang-1.0.5+git36.60deeb2-150600.3.3.5 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * pipewire-pulseaudio-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-doc-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-devel-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-jack-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-alsa-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-pulseaudio-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-spa-plugins-0_2-jack-debuginfo-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-libjack-0_3-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-debugsource-1.0.5+git36.60deeb2-150600.3.3.5 * pipewire-alsa-1.0.5+git36.60deeb2-150600.3.3.5 * SUSE Package Hub 15 15-SP6 (noarch) * pipewire-lang-1.0.5+git36.60deeb2-150600.3.3.5 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222253 * https://bugzilla.suse.com/show_bug.cgi?id=1230613

1 0

SUSE-RU-2024:3916-1: moderate: Recommended update for csp-billing-adapter
by OPENSUSE-UPDATES 05 Nov '24

05 Nov '24

# Recommended update for csp-billing-adapter Announcement ID: SUSE-RU-2024:3916-1 Release Date: 2024-11-05T19:47:07Z Rating: moderate References: * bsc#1227329 * jsc#PED-8482 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature and has one fix can now be installed. ## Description: This update for csp-billing-adapter fixes the following issues: * Version update 1.1.0 * Fix unit file (jsc#PED-8482, bsc#1227329). * Support daily billing interval to enable testing on Azure. * Switch build to python 3.11. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3916=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3916=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3916=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3916=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-3916=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-csp-billing-adapter-amazon-1.0.0-150400.9.10.2 * python311-csp-billing-adapter-microsoft-1.0.0-150400.9.10.2 * csp-billing-adapter-service-1.1.0-150400.9.18.2 * python311-csp-billing-adapter-local-1.0.0-150400.9.18.2 * python311-csp-billing-adapter-1.1.0-150400.9.18.2 * openSUSE Leap 15.6 (noarch) * csp-billing-adapter-service-1.1.0-150400.9.18.2 * Public Cloud Module 15-SP4 (noarch) * python311-csp-billing-adapter-microsoft-1.0.0-150400.9.10.2 * python311-csp-billing-adapter-amazon-1.0.0-150400.9.10.2 * csp-billing-adapter-service-1.1.0-150400.9.18.2 * python311-csp-billing-adapter-local-1.0.0-150400.9.18.2 * python311-csp-billing-adapter-1.1.0-150400.9.18.2 * Public Cloud Module 15-SP5 (noarch) * python311-csp-billing-adapter-microsoft-1.0.0-150400.9.10.2 * python311-csp-billing-adapter-amazon-1.0.0-150400.9.10.2 * csp-billing-adapter-service-1.1.0-150400.9.18.2 * python311-csp-billing-adapter-local-1.0.0-150400.9.18.2 * python311-csp-billing-adapter-1.1.0-150400.9.18.2 * Public Cloud Module 15-SP6 (noarch) * python311-csp-billing-adapter-microsoft-1.0.0-150400.9.10.2 * python311-csp-billing-adapter-amazon-1.0.0-150400.9.10.2 * csp-billing-adapter-service-1.1.0-150400.9.18.2 * python311-csp-billing-adapter-local-1.0.0-150400.9.18.2 * python311-csp-billing-adapter-1.1.0-150400.9.18.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1227329 * https://jira.suse.com/browse/PED-8482

1 0

SUSE-RU-2024:3914-1: moderate: Recommended update for protobuf
by OPENSUSE-UPDATES 05 Nov '24

05 Nov '24

# Recommended update for protobuf Announcement ID: SUSE-RU-2024:3914-1 Release Date: 2024-11-05T12:37:04Z Rating: moderate References: * jsc#PED-3967 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * Public Cloud Module 15-SP2 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module 4.3 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that contains one feature can now be installed. ## Description: This update for protobuf fixes the following issues: * Build the java part with maven, so that we create artifacts that correspond to upstream distributed ones. * Add maven artifact metadata to the protoc binary * Package also the bom and pom artifacts ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3914=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3914=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3914=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3914=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3914=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3914=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3914=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3914=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3914=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3914=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3914=1 * Public Cloud Module 15-SP2 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-3914=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-3914=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3914=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3914=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-3914=1 * SUSE Manager Server 4.3 Module 4.3 zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-3914=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-3914=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3914=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3914=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3914=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libprotobuf20-debuginfo-3.9.2-150200.4.24.1 * libprotobuf20-3.9.2-150200.4.24.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * libprotoc20-3.9.2-150200.4.24.1 * libprotoc20-debuginfo-3.9.2-150200.4.24.1 * python3-protobuf-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 * openSUSE Leap 15.5 (x86_64) * libprotoc20-32bit-debuginfo-3.9.2-150200.4.24.1 * libprotobuf20-32bit-3.9.2-150200.4.24.1 * libprotoc20-32bit-3.9.2-150200.4.24.1 * libprotobuf20-32bit-debuginfo-3.9.2-150200.4.24.1 * libprotobuf-lite20-32bit-3.9.2-150200.4.24.1 * libprotobuf-lite20-32bit-debuginfo-3.9.2-150200.4.24.1 * openSUSE Leap 15.5 (noarch) * protobuf-source-3.9.2-150200.4.24.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * protobuf-debugsource-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * protobuf-debugsource-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * protobuf-debugsource-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * protobuf-debugsource-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * libprotobuf20-debuginfo-3.9.2-150200.4.24.1 * libprotobuf20-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.24.1 * libprotobuf20-debuginfo-3.9.2-150200.4.24.1 * libprotobuf20-3.9.2-150200.4.24.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotoc20-debuginfo-3.9.2-150200.4.24.1 * libprotoc20-3.9.2-150200.4.24.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * python2-protobuf-3.9.2-150200.4.24.1 * python3-protobuf-3.9.2-150200.4.24.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.24.1 * python3-protobuf-3.9.2-150200.4.24.1 * Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.24.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.24.1 * python3-protobuf-3.9.2-150200.4.24.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.24.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.24.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.24.1 * python3-protobuf-3.9.2-150200.4.24.1 * SUSE Manager Server 4.3 Module 4.3 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.24.1 * SUSE Manager Server 4.3 Module 4.3 (noarch) * protobuf-java-3.9.2-150200.4.24.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.24.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * protobuf-debugsource-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * protobuf-debugsource-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.24.1 * libprotobuf-lite20-3.9.2-150200.4.24.1 ## References: * https://jira.suse.com/browse/PED-3967

1 0

openSUSE-SU-2024:0347-1: important: Security update for chromium
by opensuse-security＠opensuse.org 05 Nov '24

05 Nov '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0347-1 Rating: important References: #1232566 Cross-References: CVE-2024-10487 CVE-2024-10488 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to version 130.0.6723.91 (boo#1232566): - CVE-2024-10487: Out of bounds write in Dawn - CVE-2024-10488: Use after free in WebRTC Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-347=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): chromedriver-130.0.6723.91-bp156.2.47.1 chromium-130.0.6723.91-bp156.2.47.1 References: https://www.suse.com/security/cve/CVE-2024-10487.html https://www.suse.com/security/cve/CVE-2024-10488.html https://bugzilla.suse.com/1232566

1 0

openSUSE-SU-2024:0348-1: important: Security update for chromium
by opensuse-security＠opensuse.org 05 Nov '24

05 Nov '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0348-1 Rating: important References: #1232566 Cross-References: CVE-2024-10487 CVE-2024-10488 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to version 130.0.6723.91 (boo#1232566): - CVE-2024-10487: Out of bounds write in Dawn - CVE-2024-10488: Use after free in WebRTC Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-348=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-130.0.6723.91-bp155.2.135.1 chromium-130.0.6723.91-bp155.2.135.1 References: https://www.suse.com/security/cve/CVE-2024-10487.html https://www.suse.com/security/cve/CVE-2024-10488.html https://bugzilla.suse.com/1232566

1 0

SUSE-RU-2024:3912-1: moderate: Recommended update for openssl-ibmca
by OPENSUSE-UPDATES 05 Nov '24

05 Nov '24

# Recommended update for openssl-ibmca Announcement ID: SUSE-RU-2024:3912-1 Release Date: 2024-11-05T09:06:01Z Rating: moderate References: * jsc#PED-10292 Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature can now be installed. ## Description: This update for openssl-ibmca fixes the following issues: * Applied patches required from Jira (jsc#PED-10292) * Enable external AES-GCM IV when libica is in FIPS mode * Do not link against libica use dlopen instead * Explicitly initialize OpenSSL after setting environment variables ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3912=1 SUSE-2024-3912=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3912=1 ## Package List: * openSUSE Leap 15.6 (s390x) * openssl-ibmca-provider-2.4.1-150600.6.6.2 * openssl1_1-ibmca-2.4.1-150600.6.6.2 * openssl-ibmca-debugsource-2.4.1-150600.6.6.2 * openssl-ibmca-debuginfo-2.4.1-150600.6.6.2 * openssl-ibmca-engine-debuginfo-2.4.1-150600.6.6.2 * openssl-ibmca-engine-2.4.1-150600.6.6.2 * openssl1_1-ibmca-debugsource-2.4.1-150600.6.6.2 * openssl1_1-ibmca-debuginfo-2.4.1-150600.6.6.2 * openssl-ibmca-engine-debugsource-2.4.1-150600.6.6.2 * openssl-ibmca-2.4.1-150600.6.6.2 * openssl-ibmca-provider-debugsource-2.4.1-150600.6.6.2 * openssl-ibmca-provider-debuginfo-2.4.1-150600.6.6.2 * Server Applications Module 15-SP6 (s390x) * openssl-ibmca-provider-2.4.1-150600.6.6.2 * openssl1_1-ibmca-2.4.1-150600.6.6.2 * openssl-ibmca-debugsource-2.4.1-150600.6.6.2 * openssl-ibmca-debuginfo-2.4.1-150600.6.6.2 * openssl-ibmca-engine-debuginfo-2.4.1-150600.6.6.2 * openssl-ibmca-engine-2.4.1-150600.6.6.2 * openssl1_1-ibmca-debugsource-2.4.1-150600.6.6.2 * openssl1_1-ibmca-debuginfo-2.4.1-150600.6.6.2 * openssl-ibmca-engine-debugsource-2.4.1-150600.6.6.2 * openssl-ibmca-2.4.1-150600.6.6.2 * openssl-ibmca-provider-debugsource-2.4.1-150600.6.6.2 * openssl-ibmca-provider-debuginfo-2.4.1-150600.6.6.2 ## References: * https://jira.suse.com/browse/PED-10292

1 0

SUSE-RU-2024:3913-1: moderate: Recommended update for buildah
by OPENSUSE-UPDATES 05 Nov '24

05 Nov '24

# Recommended update for buildah Announcement ID: SUSE-RU-2024:3913-1 Release Date: 2024-11-05T09:27:13Z Rating: moderate References: * bsc#1232522 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for buildah fixes the following issue: * Using networking slirp4netns as default instead of pasta on SLE (bsc#1232522). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3913=1 openSUSE-SLE-15.5-2024-3913=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3913=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3913=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3913=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.35.4-150500.3.22.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.22.2 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.22.2 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.22.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1232522

1 0

SUSE-SU-2024:3911-1: important: Security update for govulncheck-vulndb
by OPENSUSE-UPDATES 05 Nov '24

05 Nov '24

# Security update for govulncheck-vulndb Announcement ID: SUSE-SU-2024:3911-1 Release Date: 2024-11-05T07:45:06Z Rating: important References: * jsc#PED-11136 Cross-References: * CVE-2022-45157 * CVE-2023-22644 * CVE-2023-32197 * CVE-2024-10214 * CVE-2024-10241 * CVE-2024-22030 * CVE-2024-22036 * CVE-2024-33662 * CVE-2024-36814 * CVE-2024-38365 * CVE-2024-39223 * CVE-2024-47003 * CVE-2024-47067 * CVE-2024-47182 * CVE-2024-47534 * CVE-2024-47616 * CVE-2024-47825 * CVE-2024-47827 * CVE-2024-47832 * CVE-2024-47877 * CVE-2024-48909 * CVE-2024-48921 * CVE-2024-49380 * CVE-2024-49381 * CVE-2024-49753 * CVE-2024-49757 * CVE-2024-50312 * CVE-2024-7558 * CVE-2024-7594 * CVE-2024-8037 * CVE-2024-8038 * CVE-2024-8901 * CVE-2024-8975 * CVE-2024-8996 * CVE-2024-9180 * CVE-2024-9264 * CVE-2024-9312 * CVE-2024-9313 * CVE-2024-9341 * CVE-2024-9355 * CVE-2024-9407 * CVE-2024-9486 * CVE-2024-9594 * CVE-2024-9675 CVSS scores: * CVE-2023-22644 ( NVD ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2023-22644 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-22644 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-10214 ( NVD ): 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N * CVE-2024-10241 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2024-22030 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2024-36814 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2024-38365 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2024-39223 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-47003 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-47003 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-47067 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-47182 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-47182 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-47534 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-47534 ( NVD ): 0.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N * CVE-2024-47616 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2024-47825 ( NVD ): 4.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2024-47827 ( NVD ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-47832 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-47877 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-48909 ( NVD ): 2.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N * CVE-2024-48909 ( NVD ): 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N * CVE-2024-48921 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-49380 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-49381 ( NVD ): 7.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-49753 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N * CVE-2024-49757 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-50312 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-50312 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-50312 ( NVD ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-7558 ( NVD ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H * CVE-2024-7594 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8037 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2024-8038 ( NVD ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H * CVE-2024-8901 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-8901 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N * CVE-2024-8975 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8975 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8996 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8996 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9180 ( NVD ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9180 ( NVD ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9264 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-9264 ( SUSE ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2024-9264 ( NVD ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-9264 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9264 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2024-9312 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2024-9313 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9341 ( SUSE ): 5.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-9341 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N * CVE-2024-9341 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N * CVE-2024-9355 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2024-9407 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-9407 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2024-9407 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N * CVE-2024-9486 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9594 ( NVD ): 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9675 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2024-9675 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-9675 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves 44 vulnerabilities and contains one feature can now be installed. ## Description: This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20241030T212825 2024-10-30T21:28:25Z ( jsc#PED-11136 ) * Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3230 CVE-2024-48921 GHSA-qjvc-p88j-j9rm * GO-2024-3232 CVE-2024-10241 GHSA-6mvp-gh77-7vwh * Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3226 CVE-2024-47827 GHSA-ghjw-32xw-ffwr * GO-2024-3227 CVE-2024-10214 GHSA-hm57-h27x-599c * GO-2024-3228 GHSA-wcx9-ccpj-hx3c * Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3207 GHSA-p5wf-cmr4-xrwr * GO-2024-3208 CVE-2024-47825 GHSA-3wwx-63fv-pfq6 * GO-2024-3210 CVE-2024-8901 * GO-2024-3211 CVE-2024-50312 * GO-2024-3212 GHSA-rjfv-pjvx-mjgv * GO-2024-3213 CVE-2024-49380 * GO-2024-3214 CVE-2024-49381 * GO-2024-3215 CVE-2024-9264 GHSA-q99m-qcv4-fpm7 * GO-2024-3216 CVE-2024-49753 GHSA-6cf5-w9h3-4rqv * GO-2024-3217 CVE-2024-49757 GHSA-3rmw-76m6-4gjc * GO-2024-3219 GHSA-7h65-4p22-39j6 * GO-2024-3220 CVE-2023-32197 GHSA-7h8m-pvw3-5gh4 * GO-2024-3221 CVE-2024-22036 GHSA-h99m-6755-rgwc * GO-2024-3222 GHSA-x7xj-jvwp-97rv * GO-2024-3223 CVE-2022-45157 GHSA-xj7w-r753-vj8v * GO-2024-3224 CVE-2024-39223 GHSA-8wxx-35qc-vp6r * Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3189 CVE-2024-38365 GHSA-27vh-h6mc-q6g8 * GO-2024-3203 CVE-2024-9486 * GO-2024-3204 CVE-2024-9594 * Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3189 CVE-2024-38365 GHSA-27vh-h6mc-q6g8 * GO-2024-3196 CVE-2024-47877 GHSA-8rm2-93mq-jqhc * GO-2024-3199 GHSA-vv6c-69r6-chg9 * GO-2024-3200 CVE-2024-48909 GHSA-3c32-4hq9-6wgj * GO-2024-3201 CVE-2023-22644 * Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3166 CVE-2024-47534 GHSA-4f8r-qqr9-fq8j * GO-2024-3171 CVE-2024-9341 GHSA-mc76-5925-c5p6 * Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3161 CVE-2024-22030 GHSA-h4h5-9833-v2p4 * GO-2024-3162 CVE-2024-7594 GHSA-jg74-mwgw-v6x3 * GO-2024-3163 CVE-2024-47182 * GO-2024-3164 CVE-2024-47003 GHSA-59hf-mpf8-pqjh * GO-2024-3166 CVE-2024-47534 GHSA-4f8r-qqr9-fq8j * GO-2024-3167 CVE-2024-9355 GHSA-3h3x-2hwv-hr52 * GO-2024-3168 CVE-2024-8975 GHSA-chqx-36rm-rf8h * GO-2024-3169 CVE-2024-9407 GHSA-fhqq-8f65-5xfc * GO-2024-3170 CVE-2024-8996 GHSA-m5gv-m5f9-wgv4 * GO-2024-3172 CVE-2024-33662 GHSA-9mjw-79r6-c9m8 * GO-2024-3173 CVE-2024-7558 GHSA-mh98-763h-m9v4 * GO-2024-3174 CVE-2024-8037 GHSA-8v4w-f4r9-7h6x * GO-2024-3175 CVE-2024-8038 GHSA-xwgj-vpm9-q2rq * GO-2024-3179 CVE-2024-47616 GHSA-r7rh-jww5-5fjr * GO-2024-3181 CVE-2024-9313 GHSA-x5q3-c8rm-w787 * GO-2024-3182 GHSA-wpr2-j6gr-pjw9 * GO-2024-3184 CVE-2024-36814 GHSA-9cp9-8gw2-8v7m * GO-2024-3185 CVE-2024-47832 * GO-2024-3186 CVE-2024-9675 GHSA-586p-749j-fhwp * GO-2024-3188 CVE-2024-9312 GHSA-4gfw-wf7c-w6g2 * GO-2024-3190 CVE-2024-47067 GHSA-8pph-gfhp-w226 * GO-2024-3191 CVE-2024-9180 GHSA-rr8j-7w34-xp5j ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3911=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3911=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3911=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3911=1 ## Package List: * openSUSE Leap 15.5 (noarch) * govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1 * openSUSE Leap 15.6 (noarch) * govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1 * SUSE Package Hub 15 15-SP5 (noarch) * govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1 * SUSE Package Hub 15 15-SP6 (noarch) * govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1 ## References: * https://www.suse.com/security/cve/CVE-2022-45157.html * https://www.suse.com/security/cve/CVE-2023-22644.html * https://www.suse.com/security/cve/CVE-2023-32197.html * https://www.suse.com/security/cve/CVE-2024-10214.html * https://www.suse.com/security/cve/CVE-2024-10241.html * https://www.suse.com/security/cve/CVE-2024-22030.html * https://www.suse.com/security/cve/CVE-2024-22036.html * https://www.suse.com/security/cve/CVE-2024-33662.html * https://www.suse.com/security/cve/CVE-2024-36814.html * https://www.suse.com/security/cve/CVE-2024-38365.html * https://www.suse.com/security/cve/CVE-2024-39223.html * https://www.suse.com/security/cve/CVE-2024-47003.html * https://www.suse.com/security/cve/CVE-2024-47067.html * https://www.suse.com/security/cve/CVE-2024-47182.html * https://www.suse.com/security/cve/CVE-2024-47534.html * https://www.suse.com/security/cve/CVE-2024-47616.html * https://www.suse.com/security/cve/CVE-2024-47825.html * https://www.suse.com/security/cve/CVE-2024-47827.html * https://www.suse.com/security/cve/CVE-2024-47832.html * https://www.suse.com/security/cve/CVE-2024-47877.html * https://www.suse.com/security/cve/CVE-2024-48909.html * https://www.suse.com/security/cve/CVE-2024-48921.html * https://www.suse.com/security/cve/CVE-2024-49380.html * https://www.suse.com/security/cve/CVE-2024-49381.html * https://www.suse.com/security/cve/CVE-2024-49753.html * https://www.suse.com/security/cve/CVE-2024-49757.html * https://www.suse.com/security/cve/CVE-2024-50312.html * https://www.suse.com/security/cve/CVE-2024-7558.html * https://www.suse.com/security/cve/CVE-2024-7594.html * https://www.suse.com/security/cve/CVE-2024-8037.html * https://www.suse.com/security/cve/CVE-2024-8038.html * https://www.suse.com/security/cve/CVE-2024-8901.html * https://www.suse.com/security/cve/CVE-2024-8975.html * https://www.suse.com/security/cve/CVE-2024-8996.html * https://www.suse.com/security/cve/CVE-2024-9180.html * https://www.suse.com/security/cve/CVE-2024-9264.html * https://www.suse.com/security/cve/CVE-2024-9312.html * https://www.suse.com/security/cve/CVE-2024-9313.html * https://www.suse.com/security/cve/CVE-2024-9341.html * https://www.suse.com/security/cve/CVE-2024-9355.html * https://www.suse.com/security/cve/CVE-2024-9407.html * https://www.suse.com/security/cve/CVE-2024-9486.html * https://www.suse.com/security/cve/CVE-2024-9594.html * https://www.suse.com/security/cve/CVE-2024-9675.html * https://jira.suse.com/browse/PED-11136

1 0

SUSE-RU-2024:3906-1: moderate: Recommended update for numatop
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for numatop Announcement ID: SUSE-RU-2024:3906-1 Release Date: 2024-11-04T16:30:48Z Rating: moderate References: * jsc#PED-10899 * jsc#PED-9887 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains two features can now be installed. ## Description: This update for numatop fixes the following issues: * numatop fix for building with recent gcc * Support for Power11 processors (jsc#PED-9887, jsc#PED-10899) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3906=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3906=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3906=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3906=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3906=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3906=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3906=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3906=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3906=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3906=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3906=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3906=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3906=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3906=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3906=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3906=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3906=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3906=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3906=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * openSUSE Leap 15.6 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * Basesystem Module 15-SP5 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * Basesystem Module 15-SP6 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Manager Proxy 4.3 (x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Manager Server 4.3 (ppc64le x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 * SUSE Enterprise Storage 7.1 (x86_64) * numatop-debuginfo-2.4-150100.3.12.2 * numatop-2.4-150100.3.12.2 * numatop-debugsource-2.4-150100.3.12.2 ## References: * https://jira.suse.com/browse/PED-10899 * https://jira.suse.com/browse/PED-9887

1 0

SUSE-RU-2024:3908-1: moderate: Recommended update for open-vm-tools
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for open-vm-tools Announcement ID: SUSE-RU-2024:3908-1 Release Date: 2024-11-04T18:45:30Z Rating: moderate References: * bsc#1231826 Affected Products: * Basesystem Module 15-SP6 * Containers Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for open-vm-tools fixes the following issues: * convert from scm to obs_scm * Version update 12.5.0 (bsc#1231826). There are no new features in the open- vm-tools 12.5.0 release. This is primarily a maintenance release for updating NetworkManager calls in suspend/resume scripts. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3908=1 SUSE-2024-3908=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3908=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3908=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3908=1 ## Package List: * openSUSE Leap 15.6 (aarch64 x86_64 i586) * open-vm-tools-sdmp-12.5.0-150600.3.6.1 * open-vm-tools-containerinfo-debuginfo-12.5.0-150600.3.6.1 * libvmtools0-debuginfo-12.5.0-150600.3.6.1 * libvmtools0-12.5.0-150600.3.6.1 * open-vm-tools-debugsource-12.5.0-150600.3.6.1 * open-vm-tools-containerinfo-12.5.0-150600.3.6.1 * open-vm-tools-12.5.0-150600.3.6.1 * open-vm-tools-sdmp-debuginfo-12.5.0-150600.3.6.1 * libvmtools-devel-12.5.0-150600.3.6.1 * open-vm-tools-desktop-12.5.0-150600.3.6.1 * open-vm-tools-debuginfo-12.5.0-150600.3.6.1 * open-vm-tools-desktop-debuginfo-12.5.0-150600.3.6.1 * openSUSE Leap 15.6 (x86_64) * open-vm-tools-salt-minion-12.5.0-150600.3.6.1 * Basesystem Module 15-SP6 (aarch64 x86_64) * open-vm-tools-sdmp-12.5.0-150600.3.6.1 * libvmtools0-debuginfo-12.5.0-150600.3.6.1 * libvmtools0-12.5.0-150600.3.6.1 * open-vm-tools-debugsource-12.5.0-150600.3.6.1 * open-vm-tools-12.5.0-150600.3.6.1 * open-vm-tools-sdmp-debuginfo-12.5.0-150600.3.6.1 * open-vm-tools-debuginfo-12.5.0-150600.3.6.1 * Basesystem Module 15-SP6 (x86_64) * libvmtools-devel-12.5.0-150600.3.6.1 * open-vm-tools-salt-minion-12.5.0-150600.3.6.1 * Containers Module 15-SP6 (aarch64 x86_64) * open-vm-tools-containerinfo-debuginfo-12.5.0-150600.3.6.1 * open-vm-tools-debugsource-12.5.0-150600.3.6.1 * open-vm-tools-containerinfo-12.5.0-150600.3.6.1 * open-vm-tools-debuginfo-12.5.0-150600.3.6.1 * Desktop Applications Module 15-SP6 (aarch64 x86_64) * open-vm-tools-debugsource-12.5.0-150600.3.6.1 * open-vm-tools-desktop-12.5.0-150600.3.6.1 * open-vm-tools-debuginfo-12.5.0-150600.3.6.1 * open-vm-tools-desktop-debuginfo-12.5.0-150600.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231826

1 0

SUSE-RU-2024:3909-1: moderate: Recommended update for open-vm-tools
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for open-vm-tools Announcement ID: SUSE-RU-2024:3909-1 Release Date: 2024-11-04T18:46:24Z Rating: moderate References: * bsc#1231826 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for open-vm-tools fixes the following issues: * convert to obs_scm * Version update 12.5.0 (bsc#1231826). There are no new features in the open- vm-tools 12.5.0 release. This is primarily a maintenance release for updating NetworkManager calls in suspend/resume scripts. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3909=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3909=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3909=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3909=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3909=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3909=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3909=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3909=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3909=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-3909=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3909=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3909=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3909=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3909=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3909=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3909=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3909=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3909=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3909=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3909=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3909=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3909=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-3909=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3909=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3909=1 ## Package List: * openSUSE Leap 15.3 (aarch64 x86_64 i586) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * openSUSE Leap 15.3 (x86_64) * open-vm-tools-salt-minion-12.5.0-150300.55.3 * openSUSE Leap Micro 5.5 (x86_64) * open-vm-tools-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * openSUSE Leap 15.5 (aarch64 x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * openSUSE Leap 15.5 (x86_64) * open-vm-tools-salt-minion-12.5.0-150300.55.3 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * open-vm-tools-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Micro 5.3 (x86_64) * open-vm-tools-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * open-vm-tools-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Micro 5.4 (x86_64) * open-vm-tools-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Micro 5.5 (x86_64) * open-vm-tools-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * Basesystem Module 15-SP5 (aarch64 x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * Basesystem Module 15-SP5 (x86_64) * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * Desktop Applications Module 15-SP5 (aarch64 x86_64) * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * open-vm-tools-salt-minion-12.5.0-150300.55.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * open-vm-tools-salt-minion-12.5.0-150300.55.3 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * open-vm-tools-salt-minion-12.5.0-150300.55.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Manager Proxy 4.3 (x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Manager Retail Branch Server 4.3 (x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Manager Server 4.3 (x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Enterprise Storage 7.1 (x86_64) * open-vm-tools-sdmp-debuginfo-12.5.0-150300.55.3 * open-vm-tools-12.5.0-150300.55.3 * open-vm-tools-desktop-12.5.0-150300.55.3 * open-vm-tools-containerinfo-12.5.0-150300.55.3 * open-vm-tools-containerinfo-debuginfo-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * libvmtools-devel-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * open-vm-tools-salt-minion-12.5.0-150300.55.3 * open-vm-tools-sdmp-12.5.0-150300.55.3 * open-vm-tools-desktop-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Micro 5.1 (x86_64) * open-vm-tools-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Micro 5.2 (x86_64) * open-vm-tools-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * open-vm-tools-12.5.0-150300.55.3 * libvmtools0-12.5.0-150300.55.3 * open-vm-tools-debugsource-12.5.0-150300.55.3 * open-vm-tools-debuginfo-12.5.0-150300.55.3 * libvmtools0-debuginfo-12.5.0-150300.55.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231826

1 0

SUSE-RU-2024:3900-1: moderate: Recommended update for protobuf
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for protobuf Announcement ID: SUSE-RU-2024:3900-1 Release Date: 2024-11-04T12:13:55Z Rating: moderate References: * jsc#PED-3967 Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains one feature can now be installed. ## Description: This update for protobuf fixes the following issues: * Build the java part with maven, so that we create artifacts that correspond to upstream distributed ones. * Add maven artifact metadata to the protoc binary * Package also the bom and pom artifacts ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3900=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3900=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3900=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3900=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3900=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3900=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-protobuf-4.25.1-150400.9.13.1 * libprotoc25_1_0-25.1-150400.9.13.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.13.1 * libprotobuf-lite25_1_0-25.1-150400.9.13.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.13.1 * protobuf-devel-25.1-150400.9.13.1 * protobuf-devel-debuginfo-25.1-150400.9.13.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.13.1 * protobuf-debugsource-25.1-150400.9.13.1 * libprotobuf25_1_0-25.1-150400.9.13.1 * openSUSE Leap 15.4 (x86_64) * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150400.9.13.1 * libprotoc25_1_0-32bit-25.1-150400.9.13.1 * libprotobuf25_1_0-32bit-25.1-150400.9.13.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150400.9.13.1 * libprotobuf-lite25_1_0-32bit-25.1-150400.9.13.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150400.9.13.1 * openSUSE Leap 15.4 (noarch) * protobuf-java-bom-25.1-150400.9.13.1 * protobuf-java-25.1-150400.9.13.1 * protobuf-java-parent-25.1-150400.9.13.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libprotobuf25_1_0-64bit-debuginfo-25.1-150400.9.13.1 * libprotoc25_1_0-64bit-25.1-150400.9.13.1 * libprotobuf25_1_0-64bit-25.1-150400.9.13.1 * libprotobuf-lite25_1_0-64bit-25.1-150400.9.13.1 * libprotoc25_1_0-64bit-debuginfo-25.1-150400.9.13.1 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150400.9.13.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.13.1 * libprotobuf-lite25_1_0-25.1-150400.9.13.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.13.1 * libprotobuf-lite25_1_0-25.1-150400.9.13.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.13.1 * libprotobuf-lite25_1_0-25.1-150400.9.13.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.13.1 * libprotobuf-lite25_1_0-25.1-150400.9.13.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150400.9.13.1 * python311-protobuf-4.25.1-150400.9.13.1 ## References: * https://jira.suse.com/browse/PED-3967

1 0

SUSE-RU-2024:3901-1: moderate: Recommended update for protobuf
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for protobuf Announcement ID: SUSE-RU-2024:3901-1 Release Date: 2024-11-04T12:15:05Z Rating: moderate References: * jsc#PED-3967 Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * Public Cloud Module 15-SP5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that contains one feature can now be installed. ## Description: This update for protobuf fixes the following issues: * Build the java part with maven, so that we create artifacts that correspond to upstream distributed ones. * Add maven artifact metadata to the protoc binary * Package also the bom and pom artifacts ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3901=1 openSUSE-SLE-15.5-2024-3901=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3901=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3901=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3901=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3901=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3901=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3901=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3901=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3901=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3901=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3901=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-3901=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * python311-protobuf-4.25.1-150500.12.8.1 * protobuf-devel-debuginfo-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.8.1 * libprotobuf25_1_0-25.1-150500.12.8.1 * protobuf-devel-25.1-150500.12.8.1 * libprotoc25_1_0-25.1-150500.12.8.1 * protobuf-debugsource-25.1-150500.12.8.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.8.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.8.1 * openSUSE Leap 15.5 (x86_64) * libprotoc25_1_0-32bit-debuginfo-25.1-150500.12.8.1 * libprotobuf25_1_0-32bit-25.1-150500.12.8.1 * libprotoc25_1_0-32bit-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-32bit-25.1-150500.12.8.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150500.12.8.1 * openSUSE Leap 15.5 (noarch) * protobuf-java-25.1-150500.12.8.1 * protobuf-java-parent-25.1-150500.12.8.1 * protobuf-java-bom-25.1-150500.12.8.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libprotoc25_1_0-64bit-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150500.12.8.1 * libprotobuf25_1_0-64bit-debuginfo-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-64bit-25.1-150500.12.8.1 * libprotobuf25_1_0-64bit-25.1-150500.12.8.1 * libprotoc25_1_0-64bit-debuginfo-25.1-150500.12.8.1 * openSUSE Leap Micro 5.5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-25.1-150500.12.8.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * protobuf-debugsource-25.1-150500.12.8.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.8.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.8.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-25.1-150500.12.8.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.8.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.8.1 * libprotobuf25_1_0-25.1-150500.12.8.1 * libprotoc25_1_0-25.1-150500.12.8.1 * protobuf-debugsource-25.1-150500.12.8.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.8.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.8.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotoc25_1_0-debuginfo-25.1-150500.12.8.1 * protobuf-devel-25.1-150500.12.8.1 * libprotoc25_1_0-25.1-150500.12.8.1 * protobuf-debugsource-25.1-150500.12.8.1 * protobuf-devel-debuginfo-25.1-150500.12.8.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.8.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotoc25_1_0-25.1-150500.12.8.1 * protobuf-debugsource-25.1-150500.12.8.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.8.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-protobuf-4.25.1-150500.12.8.1 ## References: * https://jira.suse.com/browse/PED-3967

1 0

SUSE-RU-2024:3902-1: moderate: Recommended update for shim
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for shim Announcement ID: SUSE-RU-2024:3902-1 Release Date: 2024-11-04T12:16:29Z Rating: moderate References: * bsc#1210382 * bsc#1230316 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for shim fixes the following issues: * Update shim-install to apply the missing fix for openSUSE Leap (bsc#1210382) * Update shim-install to use the 'removable' way for SL-Micro (bsc#1230316) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3902=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3902=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3902=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3902=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3902=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3902=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3902=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3902=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3902=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3902=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3902=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3902=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-3902=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3902=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3902=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3902=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3902=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3902=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3902=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3902=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3902=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3902=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3902=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3902=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3902=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3902=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Manager Proxy 4.3 (x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Manager Server 4.3 (x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * openSUSE Leap 15.3 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * openSUSE Leap Micro 5.5 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * openSUSE Leap 15.5 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * openSUSE Leap 15.6 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 * Basesystem Module 15-SP6 (aarch64 x86_64) * shim-debuginfo-15.8-150300.4.23.1 * shim-15.8-150300.4.23.1 * shim-debugsource-15.8-150300.4.23.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1210382 * https://bugzilla.suse.com/show_bug.cgi?id=1230316

1 0

SUSE-RU-2024:3903-1: moderate: Recommended update for rust
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for rust Announcement ID: SUSE-RU-2024:3903-1 Release Date: 2024-11-04T12:37:50Z Rating: moderate References: * jsc#SLE-18626 Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature can now be installed. ## Description: This update for rust fixes the following issues: # Version 1.82.0 (2024-10-17) ## Language * Don't make statement nonterminals match pattern nonterminals * Patterns matching empty types can now be omitted in common cases * Enforce supertrait outlives obligations when using trait impls * `addr_of(_mut)!` macros and the newly stabilized `&raw (const|mut)` are now safe to use with all static items * size_of_val_raw: for length 0 this is safe to call * Reorder trait bound modifiers _after_ `for<...>` binder in trait bounds * Stabilize opaque type precise capturing (RFC 3617) * Stabilize `&raw const` and `&raw mut` operators (RFC 2582) * Stabilize unsafe extern blocks (RFC 3484) * Stabilize nested field access in `offset_of!` * Do not require `T` to be live when dropping `[T; 0]` * Stabilize `const` operands in inline assembly * Stabilize floating-point arithmetic in `const fn` * Stabilize explicit opt-in to unsafe attributes * Document NaN bit patterns guarantees ## Compiler * Promote riscv64gc-unknown-linux-musl to tier 2 * Promote Mac Catalyst targets `aarch64-apple-ios-macabi` and `x86_64-apple- ios-macabi` to Tier 2, and ship them with rustup * Add tier 3 NuttX based targets for RISC-V and ARM * Add tier 3 powerpc-unknown-linux-muslspe target * Improved diagnostics to explain why a pattern is unreachable * The compiler now triggers the unreachable code warning properly for async functions that don't return/are `-> !` * Promote `aarch64-apple-darwin` to Tier 1 * Add Trusty OS target `aarch64-unknown-trusty` and `armv7-unknown-trusty` as tier 3 targets * Promote `wasm32-wasip2` to Tier 2. ## Libraries * Generalize `{Rc,Arc}::make_mut()` to `Path`, `OsStr`, and `CStr`. ## Stabilized APIs * `std::thread::Builder::spawn_unchecked` https://doc.rust- lang.org/stable/std/thread/struct.Builder.html#method.spawn_unchecked * `std::str::CharIndices::offset` https://doc.rust- lang.org/nightly/std/str/struct.CharIndices.html#method.offset * `std::option::Option::is_none_or` https://doc.rust- lang.org/nightly/std/option/enum.Option.html#method.is_none_or * `[T]::is_sorted` https://doc.rust- lang.org/nightly/std/primitive.slice.html#method.is_sorted * `[T]::is_sorted_by` https://doc.rust- lang.org/nightly/std/primitive.slice.html#method.is_sorted_by * `[T]::is_sorted_by_key` https://doc.rust- lang.org/nightly/std/primitive.slice.html#method.is_sorted_by_key * `Iterator::is_sorted` https://doc.rust- lang.org/nightly/std/iter/trait.Iterator.html#method.is_sorted * `Iterator::is_sorted_by` https://doc.rust- lang.org/nightly/std/iter/trait.Iterator.html#method.is_sorted_by * `Iterator::is_sorted_by_key` https://doc.rust- lang.org/nightly/std/iter/trait.Iterator.html#method.is_sorted_by_key * `std::future::Ready::into_inner` https://doc.rust- lang.org/nightly/std/future/struct.Ready.html#method.into_inner * `std::iter::repeat_n` https://doc.rust- lang.org/nightly/std/iter/fn.repeat_n.html * `impl<T: Clone> DoubleEndedIterator for Take<Repeat<T>>` https://doc.rust-lang.org/nightly/std/iter/struct.Take.html#impl- DoubleEndedIterator-for-Take%3CRepeat%3CT%3E%3E * `impl<T: Clone> ExactSizeIterator for Take<Repeat<T>>` https://doc.rust-lang.org/nightly/std/iter/struct.Take.html#impl- ExactSizeIterator-for-Take%3CRepeat%3CT%3E%3E * `impl<T: Clone> ExactSizeIterator for Take<RepeatWith<T>>` https://doc.rust-lang.org/nightly/std/iter/struct.Take.html#impl- ExactSizeIterator-for-Take%3CRepeatWith%3CF%3E%3E * `impl Default for std::collections::binary_heap::Iter` https://doc.rust- lang.org/nightly/std/collections/binary_heap/struct.Iter.html#impl-Default- for-Iter%3C'_,+T%3E * `impl Default for std::collections::btree_map::RangeMut` https://doc.rust- lang.org/nightly/std/collections/btree_map/struct.RangeMut.html#impl- Default-for-RangeMut%3C'_,+K,+V%3E * `impl Default for std::collections::btree_map::ValuesMut` https://doc.rust- lang.org/nightly/std/collections/btree_map/struct.ValuesMut.html#impl- Default-for-ValuesMut%3C'_,+K,+V%3E * `impl Default for std::collections::vec_deque::Iter` https://doc.rust- lang.org/nightly/std/collections/vec_deque/struct.Iter.html#impl-Default- for-Iter%3C'_,+T%3E * `impl Default for std::collections::vec_deque::IterMut` https://doc.rust- lang.org/nightly/std/collections/vec_deque/struct.IterMut.html#impl-Default- for-IterMut%3C'_,+T%3E * `Rc<T>::new_uninit` https://doc.rust- lang.org/nightly/std/rc/struct.Rc.html#method.new_uninit * `Rc<T>::assume_init` https://doc.rust- lang.org/nightly/std/rc/struct.Rc.html#method.assume_init * `Rc<[T]>::new_uninit_slice` https://doc.rust- lang.org/nightly/std/rc/struct.Rc.html#method.new_uninit_slice * `Rc<[MaybeUninit<T>]>::assume_init` https://doc.rust- lang.org/nightly/std/rc/struct.Rc.html#method.assume_init-1 * `Arc<T>::new_uninit` https://doc.rust- lang.org/nightly/std/sync/struct.Arc.html#method.new_uninit * `Arc<T>::assume_init` https://doc.rust- lang.org/nightly/std/sync/struct.Arc.html#method.assume_init * `Arc<[T]>::new_uninit_slice` https://doc.rust- lang.org/nightly/std/sync/struct.Arc.html#method.new_uninit_slice * `Arc<[MaybeUninit<T>]>::assume_init` https://doc.rust- lang.org/nightly/std/sync/struct.Arc.html#method.assume_init-1 * `Box<T>::new_uninit` https://doc.rust- lang.org/nightly/std/boxed/struct.Box.html#method.new_uninit * `Box<T>::assume_init` https://doc.rust- lang.org/nightly/std/boxed/struct.Box.html#method.assume_init * `Box<[T]>::new_uninit_slice` https://doc.rust- lang.org/nightly/std/boxed/struct.Box.html#method.new_uninit_slice * `Box<[MaybeUninit<T>]>::assume_init` https://doc.rust- lang.org/nightly/std/boxed/struct.Box.html#method.assume_init-1 * `core::arch::x86_64::_bextri_u64` https://doc.rust- lang.org/stable/core/arch/x86_64/fn._bextri_u64.html * `core::arch::x86_64::_bextri_u32` https://doc.rust- lang.org/stable/core/arch/x86_64/fn._bextri_u32.html * `core::arch::x86::_mm_broadcastsi128_si256` https://doc.rust- lang.org/stable/core/arch/x86/fn._mm_broadcastsi128_si256.html * `core::arch::x86::_mm256_stream_load_si256` https://doc.rust- lang.org/stable/core/arch/x86/fn._mm256_stream_load_si256.html * `core::arch::x86::_tzcnt_u16` https://doc.rust- lang.org/stable/core/arch/x86/fn._tzcnt_u16.html * `core::arch::x86::_mm_extracti_si64` https://doc.rust- lang.org/stable/core/arch/x86/fn._mm_extracti_si64.html * `core::arch::x86::_mm_inserti_si64` https://doc.rust- lang.org/stable/core/arch/x86/fn._mm_inserti_si64.html * `core::arch::x86::_mm_storeu_si16` https://doc.rust- lang.org/stable/core/arch/x86/fn._mm_storeu_si16.html * `core::arch::x86::_mm_storeu_si32` https://doc.rust- lang.org/stable/core/arch/x86/fn._mm_storeu_si32.html * `core::arch::x86::_mm_storeu_si64` https://doc.rust- lang.org/stable/core/arch/x86/fn._mm_storeu_si64.html * `core::arch::x86::_mm_loadu_si16` https://doc.rust- lang.org/stable/core/arch/x86/fn._mm_loadu_si16.html * `core::arch::x86::_mm_loadu_si32` https://doc.rust- lang.org/stable/core/arch/x86/fn._mm_loadu_si32.html * `core::arch::wasm32::u8x16_relaxed_swizzle` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u8x16_relaxed_swizzle.html * `core::arch::wasm32::i8x16_relaxed_swizzle` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i8x16_relaxed_swizzle.html * `core::arch::wasm32::i32x4_relaxed_trunc_f32x4` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i32x4_relaxed_trunc_f32x4.html * `core::arch::wasm32::u32x4_relaxed_trunc_f32x4` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u32x4_relaxed_trunc_f32x4.html * `core::arch::wasm32::i32x4_relaxed_trunc_f64x2_zero` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i32x4_relaxed_trunc_f64x2_zero.html * `core::arch::wasm32::u32x4_relaxed_trunc_f64x2_zero` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u32x4_relaxed_trunc_f64x2_zero.html * `core::arch::wasm32::f32x4_relaxed_madd` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.f32x4_relaxed_madd.html * `core::arch::wasm32::f32x4_relaxed_nmadd` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.f32x4_relaxed_nmadd.html * `core::arch::wasm32::f64x2_relaxed_madd` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.f64x2_relaxed_madd.html * `core::arch::wasm32::f64x2_relaxed_nmadd` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.f64x2_relaxed_nmadd.html * `core::arch::wasm32::i8x16_relaxed_laneselect` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i8x16_relaxed_laneselect.html * `core::arch::wasm32::u8x16_relaxed_laneselect` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u8x16_relaxed_laneselect.html * `core::arch::wasm32::i16x8_relaxed_laneselect` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i16x8_relaxed_laneselect.html * `core::arch::wasm32::u16x8_relaxed_laneselect` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u16x8_relaxed_laneselect.html * `core::arch::wasm32::i32x4_relaxed_laneselect` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i32x4_relaxed_laneselect.html * `core::arch::wasm32::u32x4_relaxed_laneselect` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u32x4_relaxed_laneselect.html * `core::arch::wasm32::i64x2_relaxed_laneselect` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i64x2_relaxed_laneselect.html * `core::arch::wasm32::u64x2_relaxed_laneselect` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u64x2_relaxed_laneselect.html * `core::arch::wasm32::f32x4_relaxed_min` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.f32x4_relaxed_min.html * `core::arch::wasm32::f32x4_relaxed_max` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.f32x4_relaxed_max.html * `core::arch::wasm32::f64x2_relaxed_min` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.f64x2_relaxed_min.html * `core::arch::wasm32::f64x2_relaxed_max` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.f64x2_relaxed_max.html * `core::arch::wasm32::i16x8_relaxed_q15mulr` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i16x8_relaxed_q15mulr.html * `core::arch::wasm32::u16x8_relaxed_q15mulr` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u16x8_relaxed_q15mulr.html * `core::arch::wasm32::i16x8_relaxed_dot_i8x16_i7x16` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i16x8_relaxed_dot_i8x16_i7x16.html * `core::arch::wasm32::u16x8_relaxed_dot_i8x16_i7x16` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u16x8_relaxed_dot_i8x16_i7x16.html * `core::arch::wasm32::i32x4_relaxed_dot_i8x16_i7x16_add` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.i32x4_relaxed_dot_i8x16_i7x16_add.html * `core::arch::wasm32::u32x4_relaxed_dot_i8x16_i7x16_add` https://doc.rust- lang.org/nightly/core/arch/wasm32/fn.u32x4_relaxed_dot_i8x16_i7x16_add.html These APIs are now stable in const contexts: * `std::task::Waker::from_raw` https://doc.rust- lang.org/nightly/std/task/struct.Waker.html#method.from_raw * `std::task::Context::from_waker` https://doc.rust- lang.org/nightly/std/task/struct.Context.html#method.from_waker * `std::task::Context::waker` https://doc.rust- lang.org/nightly/std/task/struct.Context.html#method.waker * `$integer::from_str_radix` https://doc.rust- lang.org/nightly/std/primitive.u32.html#method.from_str_radix * `std::num::ParseIntError::kind` https://doc.rust- lang.org/nightly/std/num/struct.ParseIntError.html#method.kind ## Cargo * feat: Add `info` cargo subcommand ## Compatibility Notes * We now [disallow setting some built-in cfgs via the command-line with the newly added `explicit_builtin_cfgs_in_flags` https://doc.rust- lang.org/rustc/lints/listing/deny-by-default.html#explicit-builtin-cfgs-in- flags lint in order to prevent incoherent state, eg. `windows` cfg active but target is Linux based. The appropriate `rustc` flag https://doc.rust- lang.org/rustc/command-line-arguments.html should be used instead. * The standard library has a new implementation of `binary_search` which is significantly improves performance. However when a sorted slice has multiple values which compare equal, the new implementation may select a different value among the equal ones than the old implementation. * Removes a problematic hack that always passed the --whole-archive linker flag for tests, which may cause linker errors for code accidentally relying on it. * The WebAssembly target features `multivalue` and `reference-types` are now both enabled by default. These two features both have subtle changes implied for generated WebAssembly binaries. For the `multivalue` feature, WebAssembly target support has changed when upgrading to LLVM 19. Support for generating functions with multiple returns no longer works and `-Ctarget-feature=+multivalue` has a different meaning than it did in LLVM 18 and prior. There is no longer any supported means to generate a module that has a function with multiple returns in WebAssembly from Rust source code. For the `reference-types` feature the encoding of immediates in the `call_indirect`, a commonly used instruction by the WebAssembly backend, has changed. Validators and parsers which don't understand the `reference-types` proposal will no longer accept modules produced by LLVM due to this change in encoding of immediates. Additionally these features being enabled are encoded in the `target_features` custom section and may affect downstream tooling such as `wasm-opt` consuming the module. Generating a WebAssembly module that disables default features requires `-Zbuild-std` support from Cargo and more information can be found at [rust-lang/rust#128511] * Rust now raises unsafety errors for union patterns in parameter-position ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3903=1 openSUSE-SLE-15.5-2024-3903=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3903=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3903=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3903=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * rust1.82-debuginfo-1.82.0-150500.11.3.1 * rust-1.82.0-150500.27.24.1 * cargo1.82-debuginfo-1.82.0-150500.11.3.1 * cargo-1.82.0-150500.27.24.1 * cargo1.82-1.82.0-150500.11.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586 nosrc) * rust1.82-1.82.0-150500.11.3.1 * openSUSE Leap 15.5 (noarch) * rust1.82-src-1.82.0-150500.11.3.1 * openSUSE Leap 15.5 (nosrc) * rust1.82-test-1.82.0-150500.11.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * rust1.82-debuginfo-1.82.0-150500.11.3.1 * rust-1.82.0-150500.27.24.1 * cargo1.82-1.82.0-150500.11.3.1 * cargo-1.82.0-150500.27.24.1 * cargo1.82-debuginfo-1.82.0-150500.11.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.82-1.82.0-150500.11.3.1 * openSUSE Leap 15.6 (noarch) * rust1.82-src-1.82.0-150500.11.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * rust1.82-debuginfo-1.82.0-150500.11.3.1 * rust-1.82.0-150500.27.24.1 * cargo1.82-1.82.0-150500.11.3.1 * cargo-1.82.0-150500.27.24.1 * cargo1.82-debuginfo-1.82.0-150500.11.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.82-1.82.0-150500.11.3.1 * Development Tools Module 15-SP5 (noarch) * rust1.82-src-1.82.0-150500.11.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * rust1.82-debuginfo-1.82.0-150500.11.3.1 * rust-1.82.0-150500.27.24.1 * cargo1.82-1.82.0-150500.11.3.1 * cargo-1.82.0-150500.27.24.1 * cargo1.82-debuginfo-1.82.0-150500.11.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64 nosrc) * rust1.82-1.82.0-150500.11.3.1 * Development Tools Module 15-SP6 (noarch) * rust1.82-src-1.82.0-150500.11.3.1 ## References: * https://jira.suse.com/browse/SLE-18626

1 0

SUSE-SU-2024:3905-1: moderate: Security update for openssl-1_1
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2024:3905-1 Release Date: 2024-11-04T12:39:19Z Rating: moderate References: * bsc#1220262 * bsc#1224258 * bsc#1224260 * bsc#1224264 * bsc#1224265 * bsc#1224266 * bsc#1224267 * bsc#1224268 * bsc#1224269 * bsc#1224270 * bsc#1224271 * bsc#1224272 * bsc#1224273 * bsc#1224275 * bsc#1228618 * bsc#1228619 * bsc#1228623 Cross-References: * CVE-2023-50782 CVSS scores: * CVE-2023-50782 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-50782 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-50782 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * Legacy Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has 16 security fixes can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: Security fixes: * CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262) Other fixes: * FIPS: AES GCM external IV implementation (bsc#1228618) * FIPS: Mark PBKDF2 and HKDF HMAC input keys with size >= 112 bits as approved in the SLI. (bsc#1228623) * FIPS: Enforce KDF in FIPS style (bsc#1224270) * FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI (bsc#1228619) * FIPS: The X9.31 scheme is not approved for RSA signature operations in FIPS 186-5. (bsc#1224269) * FIPS: Differentiate the PSS length requirements (bsc#1224275) * FIPS: Mark sigGen and sigVer primitives as non-approved (bsc#1224272) * FIPS: Disable PKCSv1.5 and shake in FIPS mode (bsc#1224271) * FIPS: Mark SHA1 as non-approved in the SLI (bsc#1224266) * FIPS: DH FIPS selftest and safe prime group (bsc#1224264) * FIPS: Remove not needed FIPS DRBG files (bsc#1224268) * FIPS: Add Pair-wise Consistency Test when generating DH key (bsc#1224265) * FIPS: Disallow non-approved KDF types (bsc#1224267) * FIPS: Disallow RSA sigVer with 1024 and ECDSA sigVer/keyVer P-192 (bsc#1224273) * FIPS: DRBG component chaining (bsc#1224258) * FIPS: Align CRNGT_BUFSIZ with Jitter RNG output size (bsc#1224260) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-3905=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3905=1 openSUSE-SLE-15.6-2024-3905=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3905=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3905=1 ## Package List: * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debugsource-1.1.1w-150600.5.9.1 * openssl-1_1-debuginfo-1.1.1w-150600.5.9.1 * openssl-1_1-1.1.1w-150600.5.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libopenssl-1_1-devel-1.1.1w-150600.5.9.1 * openssl-1_1-1.1.1w-150600.5.9.1 * openssl-1_1-debuginfo-1.1.1w-150600.5.9.1 * libopenssl1_1-debuginfo-1.1.1w-150600.5.9.1 * openssl-1_1-debugsource-1.1.1w-150600.5.9.1 * libopenssl1_1-1.1.1w-150600.5.9.1 * openSUSE Leap 15.6 (x86_64) * libopenssl1_1-32bit-1.1.1w-150600.5.9.1 * libopenssl-1_1-devel-32bit-1.1.1w-150600.5.9.1 * libopenssl1_1-32bit-debuginfo-1.1.1w-150600.5.9.1 * openSUSE Leap 15.6 (noarch) * openssl-1_1-doc-1.1.1w-150600.5.9.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libopenssl1_1-64bit-1.1.1w-150600.5.9.1 * libopenssl-1_1-devel-64bit-1.1.1w-150600.5.9.1 * libopenssl1_1-64bit-debuginfo-1.1.1w-150600.5.9.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debugsource-1.1.1w-150600.5.9.1 * openssl-1_1-debuginfo-1.1.1w-150600.5.9.1 * libopenssl1_1-debuginfo-1.1.1w-150600.5.9.1 * libopenssl1_1-1.1.1w-150600.5.9.1 * Basesystem Module 15-SP6 (x86_64) * libopenssl1_1-32bit-1.1.1w-150600.5.9.1 * libopenssl1_1-32bit-debuginfo-1.1.1w-150600.5.9.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debugsource-1.1.1w-150600.5.9.1 * libopenssl-1_1-devel-1.1.1w-150600.5.9.1 * openssl-1_1-debuginfo-1.1.1w-150600.5.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50782.html * https://bugzilla.suse.com/show_bug.cgi?id=1220262 * https://bugzilla.suse.com/show_bug.cgi?id=1224258 * https://bugzilla.suse.com/show_bug.cgi?id=1224260 * https://bugzilla.suse.com/show_bug.cgi?id=1224264 * https://bugzilla.suse.com/show_bug.cgi?id=1224265 * https://bugzilla.suse.com/show_bug.cgi?id=1224266 * https://bugzilla.suse.com/show_bug.cgi?id=1224267 * https://bugzilla.suse.com/show_bug.cgi?id=1224268 * https://bugzilla.suse.com/show_bug.cgi?id=1224269 * https://bugzilla.suse.com/show_bug.cgi?id=1224270 * https://bugzilla.suse.com/show_bug.cgi?id=1224271 * https://bugzilla.suse.com/show_bug.cgi?id=1224272 * https://bugzilla.suse.com/show_bug.cgi?id=1224273 * https://bugzilla.suse.com/show_bug.cgi?id=1224275 * https://bugzilla.suse.com/show_bug.cgi?id=1228618 * https://bugzilla.suse.com/show_bug.cgi?id=1228619 * https://bugzilla.suse.com/show_bug.cgi?id=1228623

1 0

SUSE-RU-2024:3237-2: moderate: Recommended update for util-linux
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for util-linux Announcement ID: SUSE-RU-2024:3237-2 Release Date: 2024-11-04T08:14:12Z Rating: moderate References: * bsc#1229476 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for util-linux fixes the following issue: * Skip aarch64 decode path for rest of the architectures (bsc#1229476). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3237=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3237=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3237=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3237=1 ## Package List: * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libuuid1-debuginfo-2.37.4-150500.9.17.2 * libblkid1-2.37.4-150500.9.17.2 * util-linux-debuginfo-2.37.4-150500.9.17.2 * util-linux-debugsource-2.37.4-150500.9.17.2 * libfdisk1-2.37.4-150500.9.17.2 * libmount1-2.37.4-150500.9.17.2 * util-linux-2.37.4-150500.9.17.2 * libfdisk1-debuginfo-2.37.4-150500.9.17.2 * util-linux-systemd-2.37.4-150500.9.17.2 * libuuid1-2.37.4-150500.9.17.2 * util-linux-systemd-debuginfo-2.37.4-150500.9.17.2 * libsmartcols1-debuginfo-2.37.4-150500.9.17.2 * libmount1-debuginfo-2.37.4-150500.9.17.2 * libblkid1-debuginfo-2.37.4-150500.9.17.2 * util-linux-systemd-debugsource-2.37.4-150500.9.17.2 * libsmartcols1-2.37.4-150500.9.17.2 * openSUSE Leap Micro 5.5 (s390x) * util-linux-extra-2.37.4-150500.9.17.2 * util-linux-extra-debuginfo-2.37.4-150500.9.17.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * util-linux-debugsource-2.37.4-150500.9.17.2 * uuidd-debuginfo-2.37.4-150500.9.17.2 * libsmartcols-devel-2.37.4-150500.9.17.2 * libfdisk1-debuginfo-2.37.4-150500.9.17.2 * python3-libmount-debuginfo-2.37.4-150500.9.17.2 * libfdisk-devel-2.37.4-150500.9.17.2 * libblkid-devel-static-2.37.4-150500.9.17.2 * libblkid1-debuginfo-2.37.4-150500.9.17.2 * libmount-devel-2.37.4-150500.9.17.2 * libmount-devel-static-2.37.4-150500.9.17.2 * libuuid1-debuginfo-2.37.4-150500.9.17.2 * util-linux-2.37.4-150500.9.17.2 * libuuid1-2.37.4-150500.9.17.2 * uuidd-2.37.4-150500.9.17.2 * libfdisk-devel-static-2.37.4-150500.9.17.2 * python3-libmount-2.37.4-150500.9.17.2 * libsmartcols1-2.37.4-150500.9.17.2 * python3-libmount-debugsource-2.37.4-150500.9.17.2 * libblkid1-2.37.4-150500.9.17.2 * util-linux-debuginfo-2.37.4-150500.9.17.2 * util-linux-systemd-2.37.4-150500.9.17.2 * libmount1-2.37.4-150500.9.17.2 * libmount1-debuginfo-2.37.4-150500.9.17.2 * libsmartcols-devel-static-2.37.4-150500.9.17.2 * util-linux-systemd-debuginfo-2.37.4-150500.9.17.2 * util-linux-systemd-debugsource-2.37.4-150500.9.17.2 * libuuid-devel-static-2.37.4-150500.9.17.2 * libfdisk1-2.37.4-150500.9.17.2 * libblkid-devel-2.37.4-150500.9.17.2 * libsmartcols1-debuginfo-2.37.4-150500.9.17.2 * libuuid-devel-2.37.4-150500.9.17.2 * openSUSE Leap 15.5 (x86_64) * libsmartcols1-32bit-debuginfo-2.37.4-150500.9.17.2 * libuuid1-32bit-2.37.4-150500.9.17.2 * libmount1-32bit-2.37.4-150500.9.17.2 * libfdisk1-32bit-2.37.4-150500.9.17.2 * libuuid1-32bit-debuginfo-2.37.4-150500.9.17.2 * libblkid-devel-32bit-2.37.4-150500.9.17.2 * libmount-devel-32bit-2.37.4-150500.9.17.2 * libmount1-32bit-debuginfo-2.37.4-150500.9.17.2 * libsmartcols-devel-32bit-2.37.4-150500.9.17.2 * libfdisk1-32bit-debuginfo-2.37.4-150500.9.17.2 * libsmartcols1-32bit-2.37.4-150500.9.17.2 * libblkid1-32bit-2.37.4-150500.9.17.2 * libuuid-devel-32bit-2.37.4-150500.9.17.2 * libblkid1-32bit-debuginfo-2.37.4-150500.9.17.2 * libfdisk-devel-32bit-2.37.4-150500.9.17.2 * openSUSE Leap 15.5 (noarch) * util-linux-lang-2.37.4-150500.9.17.2 * openSUSE Leap 15.5 (s390x) * util-linux-extra-2.37.4-150500.9.17.2 * util-linux-extra-debuginfo-2.37.4-150500.9.17.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libuuid1-debuginfo-2.37.4-150500.9.17.2 * libblkid1-2.37.4-150500.9.17.2 * util-linux-debuginfo-2.37.4-150500.9.17.2 * util-linux-debugsource-2.37.4-150500.9.17.2 * libfdisk1-2.37.4-150500.9.17.2 * libmount1-2.37.4-150500.9.17.2 * util-linux-2.37.4-150500.9.17.2 * libfdisk1-debuginfo-2.37.4-150500.9.17.2 * util-linux-systemd-2.37.4-150500.9.17.2 * libuuid1-2.37.4-150500.9.17.2 * util-linux-systemd-debuginfo-2.37.4-150500.9.17.2 * libsmartcols1-debuginfo-2.37.4-150500.9.17.2 * libmount1-debuginfo-2.37.4-150500.9.17.2 * libblkid1-debuginfo-2.37.4-150500.9.17.2 * util-linux-systemd-debugsource-2.37.4-150500.9.17.2 * libsmartcols1-2.37.4-150500.9.17.2 * SUSE Linux Enterprise Micro 5.5 (s390x) * util-linux-extra-2.37.4-150500.9.17.2 * util-linux-extra-debuginfo-2.37.4-150500.9.17.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * util-linux-debugsource-2.37.4-150500.9.17.2 * libsmartcols-devel-2.37.4-150500.9.17.2 * libfdisk1-debuginfo-2.37.4-150500.9.17.2 * libfdisk-devel-2.37.4-150500.9.17.2 * libblkid-devel-static-2.37.4-150500.9.17.2 * libblkid1-debuginfo-2.37.4-150500.9.17.2 * libmount-devel-2.37.4-150500.9.17.2 * libuuid1-debuginfo-2.37.4-150500.9.17.2 * util-linux-2.37.4-150500.9.17.2 * libuuid1-2.37.4-150500.9.17.2 * libsmartcols1-2.37.4-150500.9.17.2 * libblkid1-2.37.4-150500.9.17.2 * util-linux-debuginfo-2.37.4-150500.9.17.2 * util-linux-systemd-2.37.4-150500.9.17.2 * libmount1-2.37.4-150500.9.17.2 * libmount1-debuginfo-2.37.4-150500.9.17.2 * util-linux-systemd-debuginfo-2.37.4-150500.9.17.2 * util-linux-systemd-debugsource-2.37.4-150500.9.17.2 * libuuid-devel-static-2.37.4-150500.9.17.2 * libfdisk1-2.37.4-150500.9.17.2 * libblkid-devel-2.37.4-150500.9.17.2 * libsmartcols1-debuginfo-2.37.4-150500.9.17.2 * libuuid-devel-2.37.4-150500.9.17.2 * Basesystem Module 15-SP5 (noarch) * util-linux-lang-2.37.4-150500.9.17.2 * Basesystem Module 15-SP5 (s390x) * util-linux-extra-2.37.4-150500.9.17.2 * util-linux-extra-debuginfo-2.37.4-150500.9.17.2 * Basesystem Module 15-SP5 (x86_64) * libuuid1-32bit-2.37.4-150500.9.17.2 * libmount1-32bit-2.37.4-150500.9.17.2 * libuuid1-32bit-debuginfo-2.37.4-150500.9.17.2 * libmount1-32bit-debuginfo-2.37.4-150500.9.17.2 * libblkid1-32bit-2.37.4-150500.9.17.2 * libblkid1-32bit-debuginfo-2.37.4-150500.9.17.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1229476

1 0

SUSE-RU-2024:3886-1: moderate: Recommended update for lvm2
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for lvm2 Announcement ID: SUSE-RU-2024:3886-1 Release Date: 2024-11-04T08:16:13Z Rating: moderate References: * bsc#1231796 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for lvm2 fixes the following issue: * LVM2 mirror attached to another node couldn't be converted into linear LV (bsc#1231796). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3886=1 openSUSE-SLE-15.5-2024-3886=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3886=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3886=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3886=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-3886=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * liblvm2cmd2_03-2.03.22-150500.7.12.2 * liblvm2cmd2_03-debuginfo-2.03.22-150500.7.12.2 * libdevmapper1_03-2.03.22_1.02.196-150500.7.12.2 * libdevmapper1_03-debuginfo-2.03.22_1.02.196-150500.7.12.2 * lvm2-lvmlockd-debugsource-2.03.22-150500.7.12.2 * lvm2-lockd-debuginfo-2.03.22-150500.7.12.2 * lvm2-devel-2.03.22-150500.7.12.2 * device-mapper-2.03.22_1.02.196-150500.7.12.2 * lvm2-testsuite-debuginfo-2.03.22-150500.7.12.2 * device-mapper-debuginfo-2.03.22_1.02.196-150500.7.12.2 * lvm2-debuginfo-2.03.22-150500.7.12.2 * device-mapper-devel-2.03.22_1.02.196-150500.7.12.2 * lvm2-testsuite-2.03.22-150500.7.12.2 * lvm2-device-mapper-debugsource-2.03.22-150500.7.12.2 * libdevmapper-event1_03-2.03.22_1.02.196-150500.7.12.2 * lvm2-2.03.22-150500.7.12.2 * lvm2-debugsource-2.03.22-150500.7.12.2 * lvm2-lockd-2.03.22-150500.7.12.2 * libdevmapper-event1_03-debuginfo-2.03.22_1.02.196-150500.7.12.2 * openSUSE Leap 15.5 (x86_64) * libdevmapper1_03-32bit-2.03.22_1.02.196-150500.7.12.2 * device-mapper-devel-32bit-2.03.22_1.02.196-150500.7.12.2 * libdevmapper1_03-32bit-debuginfo-2.03.22_1.02.196-150500.7.12.2 * libdevmapper-event1_03-32bit-2.03.22_1.02.196-150500.7.12.2 * libdevmapper-event1_03-32bit-debuginfo-2.03.22_1.02.196-150500.7.12.2 * openSUSE Leap 15.5 (aarch64_ilp32) * libdevmapper-event1_03-64bit-2.03.22_1.02.196-150500.7.12.2 * libdevmapper1_03-64bit-debuginfo-2.03.22_1.02.196-150500.7.12.2 * libdevmapper1_03-64bit-2.03.22_1.02.196-150500.7.12.2 * libdevmapper-event1_03-64bit-debuginfo-2.03.22_1.02.196-150500.7.12.2 * device-mapper-devel-64bit-2.03.22_1.02.196-150500.7.12.2 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * liblvm2cmd2_03-2.03.22-150500.7.12.2 * liblvm2cmd2_03-debuginfo-2.03.22-150500.7.12.2 * libdevmapper1_03-2.03.22_1.02.196-150500.7.12.2 * libdevmapper1_03-debuginfo-2.03.22_1.02.196-150500.7.12.2 * device-mapper-2.03.22_1.02.196-150500.7.12.2 * device-mapper-debuginfo-2.03.22_1.02.196-150500.7.12.2 * lvm2-debuginfo-2.03.22-150500.7.12.2 * libdevmapper-event1_03-2.03.22_1.02.196-150500.7.12.2 * lvm2-2.03.22-150500.7.12.2 * lvm2-debugsource-2.03.22-150500.7.12.2 * libdevmapper-event1_03-debuginfo-2.03.22_1.02.196-150500.7.12.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * liblvm2cmd2_03-2.03.22-150500.7.12.2 * liblvm2cmd2_03-debuginfo-2.03.22-150500.7.12.2 * libdevmapper1_03-2.03.22_1.02.196-150500.7.12.2 * libdevmapper1_03-debuginfo-2.03.22_1.02.196-150500.7.12.2 * device-mapper-2.03.22_1.02.196-150500.7.12.2 * device-mapper-debuginfo-2.03.22_1.02.196-150500.7.12.2 * lvm2-debuginfo-2.03.22-150500.7.12.2 * libdevmapper-event1_03-2.03.22_1.02.196-150500.7.12.2 * lvm2-2.03.22-150500.7.12.2 * lvm2-debugsource-2.03.22-150500.7.12.2 * libdevmapper-event1_03-debuginfo-2.03.22_1.02.196-150500.7.12.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * liblvm2cmd2_03-2.03.22-150500.7.12.2 * liblvm2cmd2_03-debuginfo-2.03.22-150500.7.12.2 * libdevmapper1_03-2.03.22_1.02.196-150500.7.12.2 * libdevmapper1_03-debuginfo-2.03.22_1.02.196-150500.7.12.2 * device-mapper-devel-2.03.22_1.02.196-150500.7.12.2 * device-mapper-2.03.22_1.02.196-150500.7.12.2 * device-mapper-debuginfo-2.03.22_1.02.196-150500.7.12.2 * lvm2-devel-2.03.22-150500.7.12.2 * lvm2-debuginfo-2.03.22-150500.7.12.2 * libdevmapper-event1_03-2.03.22_1.02.196-150500.7.12.2 * lvm2-2.03.22-150500.7.12.2 * lvm2-debugsource-2.03.22-150500.7.12.2 * libdevmapper-event1_03-debuginfo-2.03.22_1.02.196-150500.7.12.2 * Basesystem Module 15-SP5 (x86_64) * libdevmapper1_03-32bit-debuginfo-2.03.22_1.02.196-150500.7.12.2 * libdevmapper1_03-32bit-2.03.22_1.02.196-150500.7.12.2 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * lvm2-lockd-2.03.22-150500.7.12.2 * lvm2-lvmlockd-debugsource-2.03.22-150500.7.12.2 * lvm2-lockd-debuginfo-2.03.22-150500.7.12.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231796

1 0

SUSE-RU-2024:3887-1: moderate: Recommended update for lvm2
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for lvm2 Announcement ID: SUSE-RU-2024:3887-1 Release Date: 2024-11-04T08:22:59Z Rating: moderate References: * bsc#1231796 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for lvm2 fixes the following issue: * LVM2 mirror attached to another node couldn't be converted into linear LV (bsc#1231796). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3887=1 SUSE-2024-3887=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3887=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-3887=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * device-mapper-2.03.22_1.02.196-150600.3.3.2 * lvm2-devel-2.03.22-150600.3.3.2 * device-mapper-debuginfo-2.03.22_1.02.196-150600.3.3.2 * liblvm2cmd2_03-debuginfo-2.03.22-150600.3.3.2 * lvm2-debugsource-2.03.22-150600.3.3.2 * lvm2-debuginfo-2.03.22-150600.3.3.2 * lvm2-testsuite-2.03.22-150600.3.3.2 * lvm2-testsuite-debuginfo-2.03.22-150600.3.3.2 * lvm2-lvmlockd-debugsource-2.03.22-150600.3.3.2 * device-mapper-devel-2.03.22_1.02.196-150600.3.3.2 * liblvm2cmd2_03-2.03.22-150600.3.3.2 * libdevmapper-event1_03-2.03.22_1.02.196-150600.3.3.2 * libdevmapper1_03-debuginfo-2.03.22_1.02.196-150600.3.3.2 * lvm2-2.03.22-150600.3.3.2 * lvm2-lockd-2.03.22-150600.3.3.2 * lvm2-lockd-debuginfo-2.03.22-150600.3.3.2 * lvm2-device-mapper-debugsource-2.03.22-150600.3.3.2 * libdevmapper-event1_03-debuginfo-2.03.22_1.02.196-150600.3.3.2 * libdevmapper1_03-2.03.22_1.02.196-150600.3.3.2 * openSUSE Leap 15.6 (x86_64) * device-mapper-devel-32bit-2.03.22_1.02.196-150600.3.3.2 * libdevmapper1_03-32bit-debuginfo-2.03.22_1.02.196-150600.3.3.2 * libdevmapper-event1_03-32bit-debuginfo-2.03.22_1.02.196-150600.3.3.2 * libdevmapper-event1_03-32bit-2.03.22_1.02.196-150600.3.3.2 * libdevmapper1_03-32bit-2.03.22_1.02.196-150600.3.3.2 * openSUSE Leap 15.6 (aarch64_ilp32) * device-mapper-devel-64bit-2.03.22_1.02.196-150600.3.3.2 * libdevmapper-event1_03-64bit-2.03.22_1.02.196-150600.3.3.2 * libdevmapper1_03-64bit-debuginfo-2.03.22_1.02.196-150600.3.3.2 * libdevmapper-event1_03-64bit-debuginfo-2.03.22_1.02.196-150600.3.3.2 * libdevmapper1_03-64bit-2.03.22_1.02.196-150600.3.3.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * device-mapper-2.03.22_1.02.196-150600.3.3.2 * lvm2-devel-2.03.22-150600.3.3.2 * device-mapper-debuginfo-2.03.22_1.02.196-150600.3.3.2 * liblvm2cmd2_03-debuginfo-2.03.22-150600.3.3.2 * lvm2-debugsource-2.03.22-150600.3.3.2 * lvm2-debuginfo-2.03.22-150600.3.3.2 * device-mapper-devel-2.03.22_1.02.196-150600.3.3.2 * liblvm2cmd2_03-2.03.22-150600.3.3.2 * libdevmapper-event1_03-2.03.22_1.02.196-150600.3.3.2 * libdevmapper1_03-debuginfo-2.03.22_1.02.196-150600.3.3.2 * lvm2-2.03.22-150600.3.3.2 * libdevmapper-event1_03-debuginfo-2.03.22_1.02.196-150600.3.3.2 * libdevmapper1_03-2.03.22_1.02.196-150600.3.3.2 * Basesystem Module 15-SP6 (x86_64) * libdevmapper1_03-32bit-debuginfo-2.03.22_1.02.196-150600.3.3.2 * libdevmapper1_03-32bit-2.03.22_1.02.196-150600.3.3.2 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * lvm2-lockd-2.03.22-150600.3.3.2 * lvm2-lvmlockd-debugsource-2.03.22-150600.3.3.2 * lvm2-lockd-debuginfo-2.03.22-150600.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231796

1 0

SUSE-RU-2024:3888-1: moderate: Recommended update for wget
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for wget Announcement ID: SUSE-RU-2024:3888-1 Release Date: 2024-11-04T09:00:04Z Rating: moderate References: * bsc#1204720 * bsc#1231661 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for wget fixes the following issues: * wget incorrectly truncates long filenames (bsc#1231661). * wget dies writing too long filenames (bsc#1204720). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3888=1 openSUSE-SLE-15.6-2024-3888=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3888=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * wget-1.20.3-150600.19.6.2 * wget-debuginfo-1.20.3-150600.19.6.2 * wget-debugsource-1.20.3-150600.19.6.2 * openSUSE Leap 15.6 (noarch) * wget-lang-1.20.3-150600.19.6.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * wget-1.20.3-150600.19.6.2 * wget-debuginfo-1.20.3-150600.19.6.2 * wget-debugsource-1.20.3-150600.19.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1204720 * https://bugzilla.suse.com/show_bug.cgi?id=1231661

1 0

SUSE-RU-2024:3890-1: moderate: Recommended update for wget
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for wget Announcement ID: SUSE-RU-2024:3890-1 Release Date: 2024-11-04T09:15:16Z Rating: moderate References: * bsc#1204720 * bsc#1231661 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for wget fixes the following issues: * wget incorrectly truncates long filenames (bsc#1231661). * wget dies writing too long filenames (bsc#1204720). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3890=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3890=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3890=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3890=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3890=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3890=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3890=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3890=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3890=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3890=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3890=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3890=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3890=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3890=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3890=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3890=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3890=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3890=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * openSUSE Leap 15.5 (noarch) * wget-lang-1.20.3-150000.3.23.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Manager Proxy 4.3 (x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * wget-debugsource-1.20.3-150000.3.23.2 * wget-1.20.3-150000.3.23.2 * wget-debuginfo-1.20.3-150000.3.23.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1204720 * https://bugzilla.suse.com/show_bug.cgi?id=1231661

1 0

SUSE-RU-2024:3891-1: moderate: Recommended update for libkdumpfile
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for libkdumpfile Announcement ID: SUSE-RU-2024:3891-1 Release Date: 2024-11-04T09:37:00Z Rating: moderate References: * bsc#1223399 * bsc#1231429 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for libkdumpfile fixes the following issues: * support for zstd compression (bsc#1231429). * add support for flattened dump files (bsc#1223399). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3891=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3891=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3891=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3891=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3891=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3891=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3891=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3891=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3891=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3891=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3891=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3891=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3891=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * python3-libkdumpfile-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * python3-libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * python3-libkdumpfile-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * python3-libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * python3-libkdumpfile-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * python3-libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * SUSE Manager Proxy 4.3 (x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libkdumpfile-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat-devel-0.4.1-150400.3.3.2 * libkdumpfile-debugsource-0.4.1-150400.3.3.2 * libaddrxlat2-0.4.1-150400.3.3.2 * libkdumpfile9-debuginfo-0.4.1-150400.3.3.2 * libaddrxlat2-debuginfo-0.4.1-150400.3.3.2 * libkdumpfile-devel-0.4.1-150400.3.3.2 * libkdumpfile9-0.4.1-150400.3.3.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223399 * https://bugzilla.suse.com/show_bug.cgi?id=1231429

1 0

SUSE-RU-2024:3892-1: moderate: Recommended update for python-responses
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for python-responses Announcement ID: SUSE-RU-2024:3892-1 Release Date: 2024-11-04T10:53:24Z Rating: moderate References: * bsc#1228868 Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for python-responses fixes the following issues: * Fix request count even if max_retries is exceeded (bsc#1228868) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3892=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3892=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3892=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3892=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3892=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3892=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3892=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3892=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3892=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3892=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3892=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3892=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3892=1 ## Package List: * openSUSE Leap 15.3 (noarch) * python3-responses-0.21.0-150300.3.6.1 * openSUSE Leap 15.5 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Package Hub 15 15-SP5 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Package Hub 15 15-SP6 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python3-responses-0.21.0-150300.3.6.1 * SUSE Enterprise Storage 7.1 (noarch) * python3-responses-0.21.0-150300.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1228868

1 0

SUSE-OU-2024:3893-1: low: Optional update for python-redis
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Optional update for python-redis Announcement ID: SUSE-OU-2024:3893-1 Release Date: 2024-11-04T10:53:56Z Rating: low References: * bsc#1231569 Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for python-redis fixes the following issue: * Add missing python311-redis to SLE Module Public-Cloud 15-SP6 (bsc#1231569) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3893=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3893=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3893=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3893=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3893=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2024-3893=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-redis-5.0.1-150400.12.6.2 * openSUSE Leap 15.5 (noarch) * python311-redis-5.0.1-150400.12.6.2 * openSUSE Leap 15.6 (noarch) * python311-redis-5.0.1-150400.12.6.2 * Public Cloud Module 15-SP4 (noarch) * python311-redis-5.0.1-150400.12.6.2 * Public Cloud Module 15-SP5 (noarch) * python311-redis-5.0.1-150400.12.6.2 * Public Cloud Module 15-SP6 (noarch) * python311-redis-5.0.1-150400.12.6.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231569

1 0

SUSE-RU-2024:3894-1: moderate: Recommended update for openCryptoki
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for openCryptoki Announcement ID: SUSE-RU-2024:3894-1 Release Date: 2024-11-04T10:54:12Z Rating: moderate References: * bsc#1225876 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for openCryptoki fixes the following issue: * Improve handling of user/group: use existing user/group if they exist create user/group if not (bsc#1225876) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3894=1 openSUSE-SLE-15.5-2024-3894=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3894=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3894=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-3894=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openCryptoki-devel-3.23.0-150500.3.9.1 * openCryptoki-debugsource-3.23.0-150500.3.9.1 * openCryptoki-3.23.0-150500.3.9.1 * openCryptoki-debuginfo-3.23.0-150500.3.9.1 * openCryptoki-devel-debuginfo-3.23.0-150500.3.9.1 * openSUSE Leap 15.5 (i586) * openCryptoki-32bit-3.23.0-150500.3.9.1 * openCryptoki-32bit-debuginfo-3.23.0-150500.3.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * openCryptoki-64bit-3.23.0-150500.3.9.1 * openCryptoki-64bit-debuginfo-3.23.0-150500.3.9.1 * openSUSE Leap Micro 5.5 (s390x) * openCryptoki-3.23.0-150500.3.9.1 * openCryptoki-debuginfo-3.23.0-150500.3.9.1 * openCryptoki-debugsource-3.23.0-150500.3.9.1 * SUSE Linux Enterprise Micro 5.5 (s390x) * openCryptoki-3.23.0-150500.3.9.1 * openCryptoki-debuginfo-3.23.0-150500.3.9.1 * openCryptoki-debugsource-3.23.0-150500.3.9.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openCryptoki-3.23.0-150500.3.9.1 * openCryptoki-debuginfo-3.23.0-150500.3.9.1 * openCryptoki-debugsource-3.23.0-150500.3.9.1 * Server Applications Module 15-SP5 (ppc64le s390x) * openCryptoki-64bit-3.23.0-150500.3.9.1 * openCryptoki-64bit-debuginfo-3.23.0-150500.3.9.1 * Server Applications Module 15-SP5 (ppc64le s390x x86_64) * openCryptoki-devel-3.23.0-150500.3.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1225876

1 0

SUSE-RU-2024:3895-1: moderate: Recommended update for openCryptoki
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for openCryptoki Announcement ID: SUSE-RU-2024:3895-1 Release Date: 2024-11-04T10:54:25Z Rating: moderate References: * bsc#1225876 * bsc#1227280 Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for openCryptoki fixes the following issues: * Amended for group %{pkcs_group} and user pkcsslotd (bsc#1225876) * Copying example script files from /usr/share/doc/opencryptoki to /usr/share/opencryptoki (policy-example.conf and strength-example.conf) in case that there is 'rpm.install.excludedocs=yes' set in the zypper.conf(zypp.conf) (bsc#1227280) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3895=1 openSUSE-SLE-15.6-2024-3895=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3895=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * openCryptoki-debugsource-3.23.0-150600.3.5.1 * openCryptoki-3.23.0-150600.3.5.1 * openCryptoki-devel-3.23.0-150600.3.5.1 * openCryptoki-debuginfo-3.23.0-150600.3.5.1 * openCryptoki-devel-debuginfo-3.23.0-150600.3.5.1 * openSUSE Leap 15.6 (i586) * openCryptoki-32bit-debuginfo-3.23.0-150600.3.5.1 * openCryptoki-32bit-3.23.0-150600.3.5.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * openCryptoki-64bit-3.23.0-150600.3.5.1 * openCryptoki-64bit-debuginfo-3.23.0-150600.3.5.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openCryptoki-3.23.0-150600.3.5.1 * openCryptoki-debuginfo-3.23.0-150600.3.5.1 * openCryptoki-debugsource-3.23.0-150600.3.5.1 * Server Applications Module 15-SP6 (ppc64le s390x) * openCryptoki-64bit-3.23.0-150600.3.5.1 * openCryptoki-64bit-debuginfo-3.23.0-150600.3.5.1 * Server Applications Module 15-SP6 (ppc64le s390x x86_64) * openCryptoki-devel-3.23.0-150600.3.5.1 * openCryptoki-devel-debuginfo-3.23.0-150600.3.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1225876 * https://bugzilla.suse.com/show_bug.cgi?id=1227280

1 0

SUSE-RU-2024:3896-1: moderate: Recommended update for shadow
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for shadow Announcement ID: SUSE-RU-2024:3896-1 Release Date: 2024-11-04T11:08:34Z Rating: moderate References: * bsc#1230972 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for shadow fixes the following issues: * Add useradd warnings when requested UID is outside the default range (bsc#1230972) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3896=1 openSUSE-SLE-15.6-2024-3896=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3896=1 ## Package List: * openSUSE Leap 15.6 (noarch) * login_defs-4.8.1-150600.17.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * shadow-4.8.1-150600.17.9.1 * shadow-debugsource-4.8.1-150600.17.9.1 * shadow-debuginfo-4.8.1-150600.17.9.1 * Basesystem Module 15-SP6 (noarch) * login_defs-4.8.1-150600.17.9.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * shadow-4.8.1-150600.17.9.1 * shadow-debugsource-4.8.1-150600.17.9.1 * shadow-debuginfo-4.8.1-150600.17.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230972

1 0

SUSE-RU-2024:3897-1: moderate: Recommended update for shadow
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for shadow Announcement ID: SUSE-RU-2024:3897-1 Release Date: 2024-11-04T11:09:24Z Rating: moderate References: * bsc#1228337 * bsc#1230972 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for shadow fixes the following issues: * Add useradd warnings when requested UID is outside the default range (bsc#1230972) * Chage -d date vs passwd -S output is off by one (bsc#1228337) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3897=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3897=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3897=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3897=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3897=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3897=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3897=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3897=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3897=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3897=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3897=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3897=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3897=1 ## Package List: * openSUSE Leap 15.4 (noarch) * login_defs-4.8.1-150400.10.24.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * openSUSE Leap 15.5 (noarch) * login_defs-4.8.1-150400.10.24.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * Basesystem Module 15-SP5 (noarch) * login_defs-4.8.1-150400.10.24.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Manager Proxy 4.3 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Manager Proxy 4.3 (x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 * SUSE Manager Server 4.3 (noarch) * login_defs-4.8.1-150400.10.24.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * shadow-debuginfo-4.8.1-150400.10.24.1 * shadow-4.8.1-150400.10.24.1 * shadow-debugsource-4.8.1-150400.10.24.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1228337 * https://bugzilla.suse.com/show_bug.cgi?id=1230972

1 0

SUSE-SU-2024:3898-1: important: Security update for MozillaFirefox
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Security update for MozillaFirefox Announcement ID: SUSE-SU-2024:3898-1 Release Date: 2024-11-04T11:15:08Z Rating: important References: * bsc#1231879 Cross-References: * CVE-2024-10458 * CVE-2024-10459 * CVE-2024-10460 * CVE-2024-10461 * CVE-2024-10462 * CVE-2024-10463 * CVE-2024-10464 * CVE-2024-10465 * CVE-2024-10466 * CVE-2024-10467 CVSS scores: * CVE-2024-10458 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-10458 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2024-10458 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-10458 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-10459 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-10459 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10459 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-10459 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10460 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-10460 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-10460 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-10460 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-10461 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N * CVE-2024-10461 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-10461 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-10462 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-10462 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-10462 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-10463 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-10463 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2024-10463 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-10464 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-10464 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-10464 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10465 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-10465 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2024-10465 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-10466 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-10466 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-10466 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-10467 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-10467 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-10467 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 128.4.0 ESR (bsc#1231879): * CVE-2024-10458: Permission leak via embed or object elements * CVE-2024-10459: Use-after-free in layout with accessibility * CVE-2024-10460: Confusing display of origin for external protocol handler prompt * CVE-2024-10461: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response * CVE-2024-10462: Origin of permission prompt could be spoofed by long URL * CVE-2024-10463: Cross origin video frame leak * CVE-2024-10464: History interface could have been used to cause a Denial of Service condition in the browser * CVE-2024-10465: Clipboard "paste" button persisted across tabs * CVE-2024-10466: DOM push subscription message could hang Firefox * CVE-2024-10467: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3898=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3898=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3898=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3898=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3898=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3898=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3898=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3898=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3898=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-3898=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3898=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3898=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3898=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3898=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3898=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3898=1 ## Package List: * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * MozillaFirefox-branding-upstream-128.4.0-150200.152.158.1 * openSUSE Leap 15.5 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * MozillaFirefox-branding-upstream-128.4.0-150200.152.158.1 * openSUSE Leap 15.6 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * Desktop Applications Module 15-SP5 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * Desktop Applications Module 15-SP6 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaFirefox-debuginfo-128.4.0-150200.152.158.1 * MozillaFirefox-translations-other-128.4.0-150200.152.158.1 * MozillaFirefox-128.4.0-150200.152.158.1 * MozillaFirefox-debugsource-128.4.0-150200.152.158.1 * MozillaFirefox-translations-common-128.4.0-150200.152.158.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * MozillaFirefox-devel-128.4.0-150200.152.158.1 ## References: * https://www.suse.com/security/cve/CVE-2024-10458.html * https://www.suse.com/security/cve/CVE-2024-10459.html * https://www.suse.com/security/cve/CVE-2024-10460.html * https://www.suse.com/security/cve/CVE-2024-10461.html * https://www.suse.com/security/cve/CVE-2024-10462.html * https://www.suse.com/security/cve/CVE-2024-10463.html * https://www.suse.com/security/cve/CVE-2024-10464.html * https://www.suse.com/security/cve/CVE-2024-10465.html * https://www.suse.com/security/cve/CVE-2024-10466.html * https://www.suse.com/security/cve/CVE-2024-10467.html * https://bugzilla.suse.com/show_bug.cgi?id=1231879

1 0

SUSE-RU-2024:3883-1: low: Recommended update for ghc-basement, ghc-cryptonite, ghc-memory
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Recommended update for ghc-basement, ghc-cryptonite, ghc-memory Announcement ID: SUSE-RU-2024:3883-1 Release Date: 2024-11-04T06:36:43Z Rating: low References: * bsc#1224810 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for ghc-basement, ghc-cryptonite, ghc-memory fixes the following issues: * Fix dependencies of ghc-basement, ghc-cryptonite, ghc-memory (bsc#1224810) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3883=1 openSUSE-SLE-15.5-2024-3883=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3883=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3883=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3883=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ghc-containers-debuginfo-0.6.5.1-150500.3.4.1 * ghc-unix-devel-2.7.2.2-150500.3.4.1 * ghc-debugsource-8.10.7-150500.3.4.1 * ghc-mtl-debuginfo-2.2.2-150500.3.4.1 * ghc-ghc-boot-th-devel-8.10.7-150500.3.4.1 * ghc-hpc-0.6.1.0-150500.3.4.1 * ghc-directory-debuginfo-1.3.6.0-150500.3.4.1 * ghc-xhtml-debuginfo-3000.2.2.1-150500.3.4.1 * ghc-ghc-boot-devel-8.10.7-150500.3.4.1 * ghc-base-4.14.3.0-150500.3.4.1 * ghc-8.10.7-150500.3.4.1 * ghc-binary-0.8.8.0-150500.3.4.1 * ghc-haskeline-0.8.2-150500.3.4.1 * ghc-pretty-devel-1.1.3.6-150500.3.4.1 * ghc-basement-0.0.16-150500.3.5.2 * ghc-array-0.5.4.0-150500.3.4.1 * ghc-memory-0.18.0-150500.3.5.2 * ghc-memory-devel-0.18.0-150500.3.5.2 * ghc-terminfo-devel-0.4.1.4-150500.3.4.1 * ghc-array-debuginfo-0.5.4.0-150500.3.4.1 * ghc-text-devel-1.2.4.1-150500.3.4.1 * ghc-ghc-debuginfo-8.10.7-150500.3.4.1 * ghc-stm-debuginfo-2.5.0.1-150500.3.4.1 * ghc-base-devel-4.14.3.0-150500.3.4.1 * ghc-exceptions-debuginfo-0.10.4-150500.3.4.1 * ghc-hpc-devel-0.6.1.0-150500.3.4.1 * ghc-text-1.2.4.1-150500.3.4.1 * ghc-ghc-8.10.7-150500.3.4.1 * ghc-time-devel-1.9.3-150500.3.4.1 * ghc-template-haskell-devel-2.16.0.0-150500.3.4.1 * ghc-compiler-debuginfo-8.10.7-150500.3.4.1 * ghc-ghc-boot-th-debuginfo-8.10.7-150500.3.4.1 * ghc-pretty-1.1.3.6-150500.3.4.1 * ghc-process-devel-1.6.13.2-150500.3.4.1 * ghc-deepseq-devel-1.4.4.0-150500.3.4.1 * ghc-ghci-devel-8.10.7-150500.3.4.1 * ghc-ghc-compact-devel-0.1.0.0-150500.3.4.1 * ghc-binary-debuginfo-0.8.8.0-150500.3.4.1 * ghc-parsec-3.1.14.0-150500.3.4.1 * ghc-haskeline-debuginfo-0.8.2-150500.3.4.1 * ghc-deepseq-1.4.4.0-150500.3.4.1 * ghc-filepath-devel-1.4.2.1-150500.3.4.1 * ghc-ghc-boot-th-8.10.7-150500.3.4.1 * ghc-libraries-8.10.7-150500.3.4.1 * ghc-deepseq-debuginfo-1.4.4.0-150500.3.4.1 * ghc-hpc-debuginfo-0.6.1.0-150500.3.4.1 * ghc-debuginfo-8.10.7-150500.3.4.1 * ghc-bytestring-devel-0.10.12.0-150500.3.4.1 * ghc-filepath-1.4.2.1-150500.3.4.1 * ghc-parsec-devel-3.1.14.0-150500.3.4.1 * ghc-cryptonite-devel-0.30-150500.3.2.2 * ghc-pretty-debuginfo-1.1.3.6-150500.3.4.1 * ghc-template-haskell-debuginfo-2.16.0.0-150500.3.4.1 * ghc-xhtml-devel-3000.2.2.1-150500.3.4.1 * ghc-ghc-heap-devel-8.10.7-150500.3.4.1 * ghc-libiserv-devel-8.10.7-150500.3.4.1 * ghc-basement-devel-0.0.16-150500.3.5.2 * ghc-stm-2.5.0.1-150500.3.4.1 * ghc-directory-devel-1.3.6.0-150500.3.4.1 * ghc-process-debuginfo-1.6.13.2-150500.3.4.1 * ghc-time-1.9.3-150500.3.4.1 * ghc-unix-debuginfo-2.7.2.2-150500.3.4.1 * ghc-xhtml-3000.2.2.1-150500.3.4.1 * ghc-Cabal-3.2.1.0-150500.3.4.1 * ghc-ghc-heap-8.10.7-150500.3.4.1 * ghc-containers-devel-0.6.5.1-150500.3.4.1 * ghc-Cabal-debuginfo-3.2.1.0-150500.3.4.1 * ghc-cryptonite-0.30-150500.3.2.2 * ghc-ghc-heap-debuginfo-8.10.7-150500.3.4.1 * ghc-libiserv-8.10.7-150500.3.4.1 * ghc-transformers-0.5.6.2-150500.3.4.1 * ghc-containers-0.6.5.1-150500.3.4.1 * ghc-stm-devel-2.5.0.1-150500.3.4.1 * ghc-ghci-debuginfo-8.10.7-150500.3.4.1 * ghc-ghc-compact-0.1.0.0-150500.3.4.1 * ghc-ghci-8.10.7-150500.3.4.1 * ghc-text-debuginfo-1.2.4.1-150500.3.4.1 * ghc-directory-1.3.6.0-150500.3.4.1 * ghc-ghc-compact-debuginfo-0.1.0.0-150500.3.4.1 * ghc-ghc-boot-8.10.7-150500.3.4.1 * ghc-terminfo-debuginfo-0.4.1.4-150500.3.4.1 * ghc-transformers-devel-0.5.6.2-150500.3.4.1 * ghc-libiserv-debuginfo-8.10.7-150500.3.4.1 * ghc-unix-2.7.2.2-150500.3.4.1 * ghc-time-debuginfo-1.9.3-150500.3.4.1 * ghc-filepath-debuginfo-1.4.2.1-150500.3.4.1 * ghc-exceptions-devel-0.10.4-150500.3.4.1 * ghc-compiler-8.10.7-150500.3.4.1 * ghc-array-devel-0.5.4.0-150500.3.4.1 * ghc-haskeline-devel-0.8.2-150500.3.4.1 * ghc-bytestring-0.10.12.0-150500.3.4.1 * ghc-exceptions-0.10.4-150500.3.4.1 * ghc-mtl-2.2.2-150500.3.4.1 * ghc-bytestring-debuginfo-0.10.12.0-150500.3.4.1 * ghc-ghc-devel-8.10.7-150500.3.4.1 * ghc-ghc-boot-debuginfo-8.10.7-150500.3.4.1 * ghc-Cabal-devel-3.2.1.0-150500.3.4.1 * ghc-base-debuginfo-4.14.3.0-150500.3.4.1 * ghc-terminfo-0.4.1.4-150500.3.4.1 * ghc-binary-devel-0.8.8.0-150500.3.4.1 * ghc-template-haskell-2.16.0.0-150500.3.4.1 * ghc-process-1.6.13.2-150500.3.4.1 * ghc-mtl-devel-2.2.2-150500.3.4.1 * ghc-parsec-debuginfo-3.1.14.0-150500.3.4.1 * ghc-transformers-debuginfo-0.5.6.2-150500.3.4.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ghc-containers-debuginfo-0.6.5.1-150500.3.4.1 * ghc-unix-devel-2.7.2.2-150500.3.4.1 * ghc-debugsource-8.10.7-150500.3.4.1 * ghc-mtl-debuginfo-2.2.2-150500.3.4.1 * ghc-ghc-boot-th-devel-8.10.7-150500.3.4.1 * ghc-hpc-0.6.1.0-150500.3.4.1 * ghc-directory-debuginfo-1.3.6.0-150500.3.4.1 * ghc-xhtml-debuginfo-3000.2.2.1-150500.3.4.1 * ghc-ghc-boot-devel-8.10.7-150500.3.4.1 * ghc-base-4.14.3.0-150500.3.4.1 * ghc-8.10.7-150500.3.4.1 * ghc-binary-0.8.8.0-150500.3.4.1 * ghc-haskeline-0.8.2-150500.3.4.1 * ghc-pretty-devel-1.1.3.6-150500.3.4.1 * ghc-basement-0.0.16-150500.3.5.2 * ghc-array-0.5.4.0-150500.3.4.1 * ghc-memory-0.18.0-150500.3.5.2 * ghc-memory-devel-0.18.0-150500.3.5.2 * ghc-terminfo-devel-0.4.1.4-150500.3.4.1 * ghc-array-debuginfo-0.5.4.0-150500.3.4.1 * ghc-text-devel-1.2.4.1-150500.3.4.1 * ghc-ghc-debuginfo-8.10.7-150500.3.4.1 * ghc-stm-debuginfo-2.5.0.1-150500.3.4.1 * ghc-base-devel-4.14.3.0-150500.3.4.1 * ghc-exceptions-debuginfo-0.10.4-150500.3.4.1 * ghc-hpc-devel-0.6.1.0-150500.3.4.1 * ghc-text-1.2.4.1-150500.3.4.1 * ghc-ghc-8.10.7-150500.3.4.1 * ghc-time-devel-1.9.3-150500.3.4.1 * ghc-template-haskell-devel-2.16.0.0-150500.3.4.1 * ghc-compiler-debuginfo-8.10.7-150500.3.4.1 * ghc-ghc-boot-th-debuginfo-8.10.7-150500.3.4.1 * ghc-pretty-1.1.3.6-150500.3.4.1 * ghc-process-devel-1.6.13.2-150500.3.4.1 * ghc-deepseq-devel-1.4.4.0-150500.3.4.1 * ghc-ghci-devel-8.10.7-150500.3.4.1 * ghc-ghc-compact-devel-0.1.0.0-150500.3.4.1 * ghc-binary-debuginfo-0.8.8.0-150500.3.4.1 * ghc-parsec-3.1.14.0-150500.3.4.1 * ghc-haskeline-debuginfo-0.8.2-150500.3.4.1 * ghc-deepseq-1.4.4.0-150500.3.4.1 * ghc-filepath-devel-1.4.2.1-150500.3.4.1 * ghc-ghc-boot-th-8.10.7-150500.3.4.1 * ghc-libraries-8.10.7-150500.3.4.1 * ghc-deepseq-debuginfo-1.4.4.0-150500.3.4.1 * ghc-hpc-debuginfo-0.6.1.0-150500.3.4.1 * ghc-debuginfo-8.10.7-150500.3.4.1 * ghc-bytestring-devel-0.10.12.0-150500.3.4.1 * ghc-filepath-1.4.2.1-150500.3.4.1 * ghc-parsec-devel-3.1.14.0-150500.3.4.1 * ghc-cryptonite-devel-0.30-150500.3.2.2 * ghc-pretty-debuginfo-1.1.3.6-150500.3.4.1 * ghc-template-haskell-debuginfo-2.16.0.0-150500.3.4.1 * ghc-xhtml-devel-3000.2.2.1-150500.3.4.1 * ghc-ghc-heap-devel-8.10.7-150500.3.4.1 * ghc-libiserv-devel-8.10.7-150500.3.4.1 * ghc-basement-devel-0.0.16-150500.3.5.2 * ghc-stm-2.5.0.1-150500.3.4.1 * ghc-directory-devel-1.3.6.0-150500.3.4.1 * ghc-process-debuginfo-1.6.13.2-150500.3.4.1 * ghc-time-1.9.3-150500.3.4.1 * ghc-unix-debuginfo-2.7.2.2-150500.3.4.1 * ghc-xhtml-3000.2.2.1-150500.3.4.1 * ghc-Cabal-3.2.1.0-150500.3.4.1 * ghc-ghc-heap-8.10.7-150500.3.4.1 * ghc-containers-devel-0.6.5.1-150500.3.4.1 * ghc-Cabal-debuginfo-3.2.1.0-150500.3.4.1 * ghc-cryptonite-0.30-150500.3.2.2 * ghc-ghc-heap-debuginfo-8.10.7-150500.3.4.1 * ghc-libiserv-8.10.7-150500.3.4.1 * ghc-transformers-0.5.6.2-150500.3.4.1 * ghc-containers-0.6.5.1-150500.3.4.1 * ghc-stm-devel-2.5.0.1-150500.3.4.1 * ghc-ghci-debuginfo-8.10.7-150500.3.4.1 * ghc-ghc-compact-0.1.0.0-150500.3.4.1 * ghc-ghci-8.10.7-150500.3.4.1 * ghc-text-debuginfo-1.2.4.1-150500.3.4.1 * ghc-directory-1.3.6.0-150500.3.4.1 * ghc-ghc-compact-debuginfo-0.1.0.0-150500.3.4.1 * ghc-ghc-boot-8.10.7-150500.3.4.1 * ghc-terminfo-debuginfo-0.4.1.4-150500.3.4.1 * ghc-transformers-devel-0.5.6.2-150500.3.4.1 * ghc-libiserv-debuginfo-8.10.7-150500.3.4.1 * ghc-unix-2.7.2.2-150500.3.4.1 * ghc-time-debuginfo-1.9.3-150500.3.4.1 * ghc-filepath-debuginfo-1.4.2.1-150500.3.4.1 * ghc-exceptions-devel-0.10.4-150500.3.4.1 * ghc-compiler-8.10.7-150500.3.4.1 * ghc-array-devel-0.5.4.0-150500.3.4.1 * ghc-haskeline-devel-0.8.2-150500.3.4.1 * ghc-bytestring-0.10.12.0-150500.3.4.1 * ghc-exceptions-0.10.4-150500.3.4.1 * ghc-mtl-2.2.2-150500.3.4.1 * ghc-bytestring-debuginfo-0.10.12.0-150500.3.4.1 * ghc-ghc-devel-8.10.7-150500.3.4.1 * ghc-ghc-boot-debuginfo-8.10.7-150500.3.4.1 * ghc-Cabal-devel-3.2.1.0-150500.3.4.1 * ghc-base-debuginfo-4.14.3.0-150500.3.4.1 * ghc-terminfo-0.4.1.4-150500.3.4.1 * ghc-binary-devel-0.8.8.0-150500.3.4.1 * ghc-template-haskell-2.16.0.0-150500.3.4.1 * ghc-process-1.6.13.2-150500.3.4.1 * ghc-mtl-devel-2.2.2-150500.3.4.1 * ghc-parsec-debuginfo-3.1.14.0-150500.3.4.1 * ghc-transformers-debuginfo-0.5.6.2-150500.3.4.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * ghc-containers-debuginfo-0.6.5.1-150500.3.4.1 * ghc-unix-devel-2.7.2.2-150500.3.4.1 * ghc-debugsource-8.10.7-150500.3.4.1 * ghc-mtl-debuginfo-2.2.2-150500.3.4.1 * ghc-ghc-boot-th-devel-8.10.7-150500.3.4.1 * ghc-hpc-0.6.1.0-150500.3.4.1 * ghc-directory-debuginfo-1.3.6.0-150500.3.4.1 * ghc-xhtml-debuginfo-3000.2.2.1-150500.3.4.1 * ghc-ghc-boot-devel-8.10.7-150500.3.4.1 * ghc-base-4.14.3.0-150500.3.4.1 * ghc-8.10.7-150500.3.4.1 * ghc-binary-0.8.8.0-150500.3.4.1 * ghc-haskeline-0.8.2-150500.3.4.1 * ghc-pretty-devel-1.1.3.6-150500.3.4.1 * ghc-basement-0.0.16-150500.3.5.2 * ghc-array-0.5.4.0-150500.3.4.1 * ghc-memory-0.18.0-150500.3.5.2 * ghc-memory-devel-0.18.0-150500.3.5.2 * ghc-terminfo-devel-0.4.1.4-150500.3.4.1 * ghc-array-debuginfo-0.5.4.0-150500.3.4.1 * ghc-text-devel-1.2.4.1-150500.3.4.1 * ghc-ghc-debuginfo-8.10.7-150500.3.4.1 * ghc-stm-debuginfo-2.5.0.1-150500.3.4.1 * ghc-base-devel-4.14.3.0-150500.3.4.1 * ghc-exceptions-debuginfo-0.10.4-150500.3.4.1 * ghc-hpc-devel-0.6.1.0-150500.3.4.1 * ghc-text-1.2.4.1-150500.3.4.1 * ghc-ghc-8.10.7-150500.3.4.1 * ghc-time-devel-1.9.3-150500.3.4.1 * ghc-template-haskell-devel-2.16.0.0-150500.3.4.1 * ghc-compiler-debuginfo-8.10.7-150500.3.4.1 * ghc-ghc-boot-th-debuginfo-8.10.7-150500.3.4.1 * ghc-pretty-1.1.3.6-150500.3.4.1 * ghc-process-devel-1.6.13.2-150500.3.4.1 * ghc-deepseq-devel-1.4.4.0-150500.3.4.1 * ghc-ghci-devel-8.10.7-150500.3.4.1 * ghc-ghc-compact-devel-0.1.0.0-150500.3.4.1 * ghc-binary-debuginfo-0.8.8.0-150500.3.4.1 * ghc-parsec-3.1.14.0-150500.3.4.1 * ghc-haskeline-debuginfo-0.8.2-150500.3.4.1 * ghc-deepseq-1.4.4.0-150500.3.4.1 * ghc-filepath-devel-1.4.2.1-150500.3.4.1 * ghc-ghc-boot-th-8.10.7-150500.3.4.1 * ghc-libraries-8.10.7-150500.3.4.1 * ghc-deepseq-debuginfo-1.4.4.0-150500.3.4.1 * ghc-hpc-debuginfo-0.6.1.0-150500.3.4.1 * ghc-debuginfo-8.10.7-150500.3.4.1 * ghc-bytestring-devel-0.10.12.0-150500.3.4.1 * ghc-filepath-1.4.2.1-150500.3.4.1 * ghc-parsec-devel-3.1.14.0-150500.3.4.1 * ghc-cryptonite-devel-0.30-150500.3.2.2 * ghc-pretty-debuginfo-1.1.3.6-150500.3.4.1 * ghc-template-haskell-debuginfo-2.16.0.0-150500.3.4.1 * ghc-xhtml-devel-3000.2.2.1-150500.3.4.1 * ghc-ghc-heap-devel-8.10.7-150500.3.4.1 * ghc-libiserv-devel-8.10.7-150500.3.4.1 * ghc-basement-devel-0.0.16-150500.3.5.2 * ghc-stm-2.5.0.1-150500.3.4.1 * ghc-directory-devel-1.3.6.0-150500.3.4.1 * ghc-process-debuginfo-1.6.13.2-150500.3.4.1 * ghc-time-1.9.3-150500.3.4.1 * ghc-unix-debuginfo-2.7.2.2-150500.3.4.1 * ghc-xhtml-3000.2.2.1-150500.3.4.1 * ghc-Cabal-3.2.1.0-150500.3.4.1 * ghc-ghc-heap-8.10.7-150500.3.4.1 * ghc-containers-devel-0.6.5.1-150500.3.4.1 * ghc-Cabal-debuginfo-3.2.1.0-150500.3.4.1 * ghc-cryptonite-0.30-150500.3.2.2 * ghc-ghc-heap-debuginfo-8.10.7-150500.3.4.1 * ghc-libiserv-8.10.7-150500.3.4.1 * ghc-transformers-0.5.6.2-150500.3.4.1 * ghc-containers-0.6.5.1-150500.3.4.1 * ghc-stm-devel-2.5.0.1-150500.3.4.1 * ghc-ghci-debuginfo-8.10.7-150500.3.4.1 * ghc-ghc-compact-0.1.0.0-150500.3.4.1 * ghc-ghci-8.10.7-150500.3.4.1 * ghc-text-debuginfo-1.2.4.1-150500.3.4.1 * ghc-directory-1.3.6.0-150500.3.4.1 * ghc-ghc-compact-debuginfo-0.1.0.0-150500.3.4.1 * ghc-ghc-boot-8.10.7-150500.3.4.1 * ghc-terminfo-debuginfo-0.4.1.4-150500.3.4.1 * ghc-transformers-devel-0.5.6.2-150500.3.4.1 * ghc-libiserv-debuginfo-8.10.7-150500.3.4.1 * ghc-unix-2.7.2.2-150500.3.4.1 * ghc-time-debuginfo-1.9.3-150500.3.4.1 * ghc-filepath-debuginfo-1.4.2.1-150500.3.4.1 * ghc-exceptions-devel-0.10.4-150500.3.4.1 * ghc-compiler-8.10.7-150500.3.4.1 * ghc-array-devel-0.5.4.0-150500.3.4.1 * ghc-haskeline-devel-0.8.2-150500.3.4.1 * ghc-bytestring-0.10.12.0-150500.3.4.1 * ghc-exceptions-0.10.4-150500.3.4.1 * ghc-mtl-2.2.2-150500.3.4.1 * ghc-bytestring-debuginfo-0.10.12.0-150500.3.4.1 * ghc-ghc-devel-8.10.7-150500.3.4.1 * ghc-ghc-boot-debuginfo-8.10.7-150500.3.4.1 * ghc-Cabal-devel-3.2.1.0-150500.3.4.1 * ghc-base-debuginfo-4.14.3.0-150500.3.4.1 * ghc-terminfo-0.4.1.4-150500.3.4.1 * ghc-binary-devel-0.8.8.0-150500.3.4.1 * ghc-template-haskell-2.16.0.0-150500.3.4.1 * ghc-process-1.6.13.2-150500.3.4.1 * ghc-mtl-devel-2.2.2-150500.3.4.1 * ghc-parsec-debuginfo-3.1.14.0-150500.3.4.1 * ghc-transformers-debuginfo-0.5.6.2-150500.3.4.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * ghc-containers-debuginfo-0.6.5.1-150500.3.4.1 * ghc-unix-devel-2.7.2.2-150500.3.4.1 * ghc-debugsource-8.10.7-150500.3.4.1 * ghc-mtl-debuginfo-2.2.2-150500.3.4.1 * ghc-ghc-boot-th-devel-8.10.7-150500.3.4.1 * ghc-hpc-0.6.1.0-150500.3.4.1 * ghc-directory-debuginfo-1.3.6.0-150500.3.4.1 * ghc-xhtml-debuginfo-3000.2.2.1-150500.3.4.1 * ghc-ghc-boot-devel-8.10.7-150500.3.4.1 * ghc-base-4.14.3.0-150500.3.4.1 * ghc-8.10.7-150500.3.4.1 * ghc-binary-0.8.8.0-150500.3.4.1 * ghc-haskeline-0.8.2-150500.3.4.1 * ghc-pretty-devel-1.1.3.6-150500.3.4.1 * ghc-basement-0.0.16-150500.3.5.2 * ghc-array-0.5.4.0-150500.3.4.1 * ghc-memory-0.18.0-150500.3.5.2 * ghc-memory-devel-0.18.0-150500.3.5.2 * ghc-terminfo-devel-0.4.1.4-150500.3.4.1 * ghc-array-debuginfo-0.5.4.0-150500.3.4.1 * ghc-text-devel-1.2.4.1-150500.3.4.1 * ghc-ghc-debuginfo-8.10.7-150500.3.4.1 * ghc-stm-debuginfo-2.5.0.1-150500.3.4.1 * ghc-base-devel-4.14.3.0-150500.3.4.1 * ghc-exceptions-debuginfo-0.10.4-150500.3.4.1 * ghc-hpc-devel-0.6.1.0-150500.3.4.1 * ghc-text-1.2.4.1-150500.3.4.1 * ghc-ghc-8.10.7-150500.3.4.1 * ghc-time-devel-1.9.3-150500.3.4.1 * ghc-template-haskell-devel-2.16.0.0-150500.3.4.1 * ghc-compiler-debuginfo-8.10.7-150500.3.4.1 * ghc-ghc-boot-th-debuginfo-8.10.7-150500.3.4.1 * ghc-pretty-1.1.3.6-150500.3.4.1 * ghc-process-devel-1.6.13.2-150500.3.4.1 * ghc-deepseq-devel-1.4.4.0-150500.3.4.1 * ghc-ghci-devel-8.10.7-150500.3.4.1 * ghc-ghc-compact-devel-0.1.0.0-150500.3.4.1 * ghc-binary-debuginfo-0.8.8.0-150500.3.4.1 * ghc-parsec-3.1.14.0-150500.3.4.1 * ghc-haskeline-debuginfo-0.8.2-150500.3.4.1 * ghc-deepseq-1.4.4.0-150500.3.4.1 * ghc-filepath-devel-1.4.2.1-150500.3.4.1 * ghc-ghc-boot-th-8.10.7-150500.3.4.1 * ghc-libraries-8.10.7-150500.3.4.1 * ghc-deepseq-debuginfo-1.4.4.0-150500.3.4.1 * ghc-hpc-debuginfo-0.6.1.0-150500.3.4.1 * ghc-debuginfo-8.10.7-150500.3.4.1 * ghc-bytestring-devel-0.10.12.0-150500.3.4.1 * ghc-filepath-1.4.2.1-150500.3.4.1 * ghc-parsec-devel-3.1.14.0-150500.3.4.1 * ghc-cryptonite-devel-0.30-150500.3.2.2 * ghc-pretty-debuginfo-1.1.3.6-150500.3.4.1 * ghc-template-haskell-debuginfo-2.16.0.0-150500.3.4.1 * ghc-xhtml-devel-3000.2.2.1-150500.3.4.1 * ghc-ghc-heap-devel-8.10.7-150500.3.4.1 * ghc-libiserv-devel-8.10.7-150500.3.4.1 * ghc-basement-devel-0.0.16-150500.3.5.2 * ghc-stm-2.5.0.1-150500.3.4.1 * ghc-directory-devel-1.3.6.0-150500.3.4.1 * ghc-process-debuginfo-1.6.13.2-150500.3.4.1 * ghc-time-1.9.3-150500.3.4.1 * ghc-unix-debuginfo-2.7.2.2-150500.3.4.1 * ghc-xhtml-3000.2.2.1-150500.3.4.1 * ghc-Cabal-3.2.1.0-150500.3.4.1 * ghc-ghc-heap-8.10.7-150500.3.4.1 * ghc-containers-devel-0.6.5.1-150500.3.4.1 * ghc-Cabal-debuginfo-3.2.1.0-150500.3.4.1 * ghc-cryptonite-0.30-150500.3.2.2 * ghc-ghc-heap-debuginfo-8.10.7-150500.3.4.1 * ghc-libiserv-8.10.7-150500.3.4.1 * ghc-transformers-0.5.6.2-150500.3.4.1 * ghc-containers-0.6.5.1-150500.3.4.1 * ghc-stm-devel-2.5.0.1-150500.3.4.1 * ghc-ghci-debuginfo-8.10.7-150500.3.4.1 * ghc-ghc-compact-0.1.0.0-150500.3.4.1 * ghc-ghci-8.10.7-150500.3.4.1 * ghc-text-debuginfo-1.2.4.1-150500.3.4.1 * ghc-directory-1.3.6.0-150500.3.4.1 * ghc-ghc-compact-debuginfo-0.1.0.0-150500.3.4.1 * ghc-ghc-boot-8.10.7-150500.3.4.1 * ghc-terminfo-debuginfo-0.4.1.4-150500.3.4.1 * ghc-transformers-devel-0.5.6.2-150500.3.4.1 * ghc-libiserv-debuginfo-8.10.7-150500.3.4.1 * ghc-unix-2.7.2.2-150500.3.4.1 * ghc-time-debuginfo-1.9.3-150500.3.4.1 * ghc-filepath-debuginfo-1.4.2.1-150500.3.4.1 * ghc-exceptions-devel-0.10.4-150500.3.4.1 * ghc-compiler-8.10.7-150500.3.4.1 * ghc-array-devel-0.5.4.0-150500.3.4.1 * ghc-haskeline-devel-0.8.2-150500.3.4.1 * ghc-bytestring-0.10.12.0-150500.3.4.1 * ghc-exceptions-0.10.4-150500.3.4.1 * ghc-mtl-2.2.2-150500.3.4.1 * ghc-bytestring-debuginfo-0.10.12.0-150500.3.4.1 * ghc-ghc-devel-8.10.7-150500.3.4.1 * ghc-ghc-boot-debuginfo-8.10.7-150500.3.4.1 * ghc-Cabal-devel-3.2.1.0-150500.3.4.1 * ghc-base-debuginfo-4.14.3.0-150500.3.4.1 * ghc-terminfo-0.4.1.4-150500.3.4.1 * ghc-binary-devel-0.8.8.0-150500.3.4.1 * ghc-template-haskell-2.16.0.0-150500.3.4.1 * ghc-process-1.6.13.2-150500.3.4.1 * ghc-mtl-devel-2.2.2-150500.3.4.1 * ghc-parsec-debuginfo-3.1.14.0-150500.3.4.1 * ghc-transformers-debuginfo-0.5.6.2-150500.3.4.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1224810

1 0

SUSE-SU-2024:3880-1: important: Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) Announcement ID: SUSE-SU-2024:3880-1 Release Date: 2024-11-04T06:33:25Z Rating: important References: * bsc#1225011 * bsc#1225012 * bsc#1225099 * bsc#1225309 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1228786 * bsc#1231419 Cross-References: * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-42133 CVSS scores: * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-42133 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-42133 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#1231419) * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-3880=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3880=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_21-default-6-150600.4.10.1 * kernel-livepatch-SLE15-SP6_Update_0-debugsource-6-150600.4.10.1 * kernel-livepatch-6_4_0-150600_21-default-debuginfo-6-150600.4.10.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_21-default-6-150600.4.10.1 * kernel-livepatch-SLE15-SP6_Update_0-debugsource-6-150600.4.10.1 * kernel-livepatch-6_4_0-150600_21-default-debuginfo-6-150600.4.10.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-42133.html * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231419

1 0

SUSE-SU-2024:3881-1: important: Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6) Announcement ID: SUSE-SU-2024:3881-1 Release Date: 2024-11-04T06:33:33Z Rating: important References: * bsc#1225739 * bsc#1225819 * bsc#1228786 * bsc#1231419 Cross-References: * CVE-2023-52752 * CVE-2024-36899 * CVE-2024-40954 * CVE-2024-42133 CVSS scores: * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-42133 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-42133 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: * CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#1231419) * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3881=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-3881=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_7-default-4-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_7-default-debuginfo-4-150600.13.6.1 * kernel-livepatch-SLE15-SP6_Update_1-debugsource-4-150600.13.6.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_7-default-4-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_7-default-debuginfo-4-150600.13.6.1 * kernel-livepatch-SLE15-SP6_Update_1-debugsource-4-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-42133.html * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231419

1 0

SUSE-SU-2024:3882-1: important: Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6) Announcement ID: SUSE-SU-2024:3882-1 Release Date: 2024-11-04T06:33:41Z Rating: important References: * bsc#1225819 * bsc#1228349 * bsc#1228786 * bsc#1231419 Cross-References: * CVE-2023-52752 * CVE-2024-40909 * CVE-2024-40954 * CVE-2024-42133 CVSS scores: * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-42133 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-42133 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_14 fixes several issues. The following security issues were fixed: * CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#1231419) * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1228349). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3882=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-3882=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_2-debugsource-4-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_14-default-debuginfo-4-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_14-default-4-150600.13.6.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_2-debugsource-4-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_14-default-debuginfo-4-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_14-default-4-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-40909.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-42133.html * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1228349 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231419

1 0

SUSE-SU-2024:3884-1: important: Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6) Announcement ID: SUSE-SU-2024:3884-1 Release Date: 2024-11-04T07:03:37Z Rating: important References: * bsc#1225819 * bsc#1228349 * bsc#1228786 Cross-References: * CVE-2023-52752 * CVE-2024-40909 * CVE-2024-40954 CVSS scores: * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1228349). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3884=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-3884=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_17-default-4-150600.13.6.1 * kernel-livepatch-SLE15-SP6_Update_3-debugsource-4-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_17-default-debuginfo-4-150600.13.6.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_17-default-4-150600.13.6.1 * kernel-livepatch-SLE15-SP6_Update_3-debugsource-4-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_17-default-debuginfo-4-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-40909.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1228349 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3885-1: important: Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
by OPENSUSE-UPDATES 04 Nov '24

04 Nov '24

# Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) Announcement ID: SUSE-SU-2024:3885-1 Release Date: 2024-11-04T07:03:47Z Rating: important References: * bsc#1225819 Cross-References: * CVE-2023-52752 CVSS scores: * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_22 fixes one issue. The following security issue was fixed: * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-3885=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3885=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_4-debugsource-2-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_22-default-2-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_22-default-debuginfo-2-150600.13.6.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_4-debugsource-2-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_22-default-2-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_22-default-debuginfo-2-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52752.html * https://bugzilla.suse.com/show_bug.cgi?id=1225819

1 0

openSUSE-SU-2024:0345-1: moderate: Security update for xsd
by opensuse-security＠opensuse.org 03 Nov '24

03 Nov '24

openSUSE Security Update: Security update for xsd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0345-1 Rating: moderate References: #1232580 Cross-References: CVE-2024-50602 CVSS scores: CVE-2024-50602 (SUSE): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xsd fixes the following issues: - CVE-2024-50602: Fixed libexpat DoS via XML_ResumeParser in xsd (boo#1232580) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-345=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-345=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): xsd-4.1.0-bp156.5.3.1 xsd-debuginfo-4.1.0-bp156.5.3.1 xsd-debugsource-4.1.0-bp156.5.3.1 - openSUSE Backports SLE-15-SP6 (noarch): xsd-doc-4.1.0-bp156.5.3.1 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): xsd-4.1.0-bp155.3.3.1 - openSUSE Backports SLE-15-SP5 (noarch): xsd-doc-4.1.0-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2024-50602.html https://bugzilla.suse.com/1232580

1 0

SUSE-SU-2024:3879-1: moderate: Security update for python3
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Security update for python3 Announcement ID: SUSE-SU-2024:3879-1 Release Date: 2024-11-01T16:05:07Z Rating: moderate References: * bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287 CVSS scores: * CVE-2024-9287 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green * CVE-2024-9287 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9287 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python3 fixes the following issues: Security fixes: * CVE-2024-9287: properly quote path names provided when creating a virtual environment (bsc#1232241) Other fixes: * Drop .pyc files from docdir for reproducible builds (bsc#1230906) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3879=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3879=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3879=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3879=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3879=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3879=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3879=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3879=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3879=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3879=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3879=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3879=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3879=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3879=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3879=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python3-testsuite-debuginfo-3.6.15-150300.10.75.1 * python3-dbm-debuginfo-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-tools-3.6.15-150300.10.75.1 * python3-doc-devhelp-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-tk-debuginfo-3.6.15-150300.10.75.1 * python3-curses-3.6.15-150300.10.75.1 * python3-curses-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * python3-devel-3.6.15-150300.10.75.1 * python3-testsuite-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-tk-3.6.15-150300.10.75.1 * python3-dbm-3.6.15-150300.10.75.1 * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-doc-3.6.15-150300.10.75.1 * python3-idle-3.6.15-150300.10.75.1 * python3-devel-debuginfo-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * openSUSE Leap 15.3 (x86_64) * libpython3_6m1_0-32bit-3.6.15-150300.10.75.1 * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.75.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_6m1_0-64bit-debuginfo-3.6.15-150300.10.75.1 * libpython3_6m1_0-64bit-3.6.15-150300.10.75.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-testsuite-debuginfo-3.6.15-150300.10.75.1 * python3-dbm-debuginfo-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-tools-3.6.15-150300.10.75.1 * python3-doc-devhelp-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-tk-debuginfo-3.6.15-150300.10.75.1 * python3-curses-3.6.15-150300.10.75.1 * python3-curses-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * python3-devel-3.6.15-150300.10.75.1 * python3-testsuite-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-tk-3.6.15-150300.10.75.1 * python3-dbm-3.6.15-150300.10.75.1 * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-doc-3.6.15-150300.10.75.1 * python3-idle-3.6.15-150300.10.75.1 * python3-devel-debuginfo-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * openSUSE Leap 15.5 (x86_64) * libpython3_6m1_0-32bit-3.6.15-150300.10.75.1 * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.75.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python3-testsuite-debuginfo-3.6.15-150300.10.75.1 * python3-dbm-debuginfo-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-tools-3.6.15-150300.10.75.1 * python3-doc-devhelp-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-tk-debuginfo-3.6.15-150300.10.75.1 * python3-curses-3.6.15-150300.10.75.1 * python3-curses-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * python3-devel-3.6.15-150300.10.75.1 * python3-testsuite-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-tk-3.6.15-150300.10.75.1 * python3-dbm-3.6.15-150300.10.75.1 * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-doc-3.6.15-150300.10.75.1 * python3-idle-3.6.15-150300.10.75.1 * python3-devel-debuginfo-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * openSUSE Leap 15.6 (x86_64) * libpython3_6m1_0-32bit-3.6.15-150300.10.75.1 * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.75.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-curses-3.6.15-150300.10.75.1 * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-dbm-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-curses-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * python3-devel-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-idle-3.6.15-150300.10.75.1 * python3-tk-debuginfo-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-tk-3.6.15-150300.10.75.1 * python3-devel-debuginfo-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * python3-dbm-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-curses-3.6.15-150300.10.75.1 * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-dbm-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-curses-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * python3-devel-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-idle-3.6.15-150300.10.75.1 * python3-tk-debuginfo-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-tk-3.6.15-150300.10.75.1 * python3-devel-debuginfo-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * python3-dbm-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-tools-3.6.15-150300.10.75.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-tools-3.6.15-150300.10.75.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python3-base-debuginfo-3.6.15-150300.10.75.1 * python3-debuginfo-3.6.15-150300.10.75.1 * python3-debugsource-3.6.15-150300.10.75.1 * libpython3_6m1_0-3.6.15-150300.10.75.1 * python3-base-3.6.15-150300.10.75.1 * python3-core-debugsource-3.6.15-150300.10.75.1 * python3-3.6.15-150300.10.75.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.75.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9287.html * https://bugzilla.suse.com/show_bug.cgi?id=1230906 * https://bugzilla.suse.com/show_bug.cgi?id=1232241

1 0

SUSE-RU-2024:3865-1: moderate: Recommended update for gcc14
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Recommended update for gcc14 Announcement ID: SUSE-RU-2024:3865-1 Release Date: 2024-11-01T15:12:41Z Rating: moderate References: * bsc#1231833 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap Micro 5.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for gcc14 fixes the following issues: * Fixed parsing timezone tzdata 2024b [gcc#116657 bsc#1231833] ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3865=1 * SUSE Linux Enterprise Server 15 SP2 zypper in -t patch SUSE-SLE-INSTALLER-15-SP2-2024-3865=1 * SUSE Linux Enterprise Server 15 SP3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP3-2024-3865=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3865=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3865=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3865=1 SUSE-SLE-Product-SUSE- Manager-Server-4.3-2024-3865=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3865=1 SUSE-SLE-Product- SLES_SAP-15-SP4-2024-3865=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3865=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3865=1 SUSE-SLE-INSTALLER-15-SP4-2024-3865=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3865=1 SUSE- SLE-INSTALLER-15-SP4-2024-3865=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3865=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3865=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3865=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3865=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3865=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3865=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3865=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3865=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3865=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3865=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3865=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3865=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3865=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3865=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3865=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3865=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3865=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3865=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3865=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3865=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3865=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3865=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3865=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3865=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3865=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3865=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-3865=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3865=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3865=1 ## Package List: * openSUSE Leap Micro 5.5 (aarch64 ppc64le s390x x86_64) * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 (aarch64 ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 (aarch64 ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Manager Server 4.3 (ppc64le x86_64) * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Manager Server 4.3 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Manager Proxy 4.3 (x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * Basesystem Module 15-SP5 (aarch64 x86_64) * libhwasan0-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * Basesystem Module 15-SP5 (ppc64le x86_64) * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * Basesystem Module 15-SP5 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * Basesystem Module 15-SP6 (aarch64 x86_64) * libhwasan0-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * Basesystem Module 15-SP6 (ppc64le x86_64) * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * Basesystem Module 15-SP6 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gcc14-c++-14.2.0+git10526-150000.1.6.1 * gcc14-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * cpp14-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-fortran-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-PIE-14.2.0+git10526-150000.1.6.1 * libstdc++6-devel-gcc14-14.2.0+git10526-150000.1.6.1 * gcc14-fortran-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * cpp14-14.2.0+git10526-150000.1.6.1 * gcc14-c++-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-locale-14.2.0+git10526-150000.1.6.1 * Development Tools Module 15-SP5 (noarch) * gcc14-info-14.2.0+git10526-150000.1.6.1 * Development Tools Module 15-SP5 (ppc64le x86_64) * libquadmath0-devel-gcc14-14.2.0+git10526-150000.1.6.1 * Development Tools Module 15-SP5 (x86_64) * gcc14-c++-32bit-14.2.0+git10526-150000.1.6.1 * cross-nvptx-gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-devel-gcc14-32bit-14.2.0+git10526-150000.1.6.1 * gcc14-fortran-32bit-14.2.0+git10526-150000.1.6.1 * cross-nvptx-gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libstdc++6-devel-gcc14-32bit-14.2.0+git10526-150000.1.6.1 * cross-nvptx-newlib14-devel-14.2.0+git10526-150000.1.6.1 * gcc14-32bit-14.2.0+git10526-150000.1.6.1 * cross-nvptx-gcc14-14.2.0+git10526-150000.1.6.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gcc14-c++-14.2.0+git10526-150000.1.6.1 * gcc14-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * cpp14-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-fortran-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-PIE-14.2.0+git10526-150000.1.6.1 * libstdc++6-devel-gcc14-14.2.0+git10526-150000.1.6.1 * gcc14-fortran-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * cpp14-14.2.0+git10526-150000.1.6.1 * gcc14-c++-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-locale-14.2.0+git10526-150000.1.6.1 * Development Tools Module 15-SP6 (noarch) * gcc14-info-14.2.0+git10526-150000.1.6.1 * Development Tools Module 15-SP6 (ppc64le x86_64) * libquadmath0-devel-gcc14-14.2.0+git10526-150000.1.6.1 * Development Tools Module 15-SP6 (x86_64) * gcc14-c++-32bit-14.2.0+git10526-150000.1.6.1 * cross-nvptx-gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-devel-gcc14-32bit-14.2.0+git10526-150000.1.6.1 * gcc14-fortran-32bit-14.2.0+git10526-150000.1.6.1 * cross-nvptx-gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libstdc++6-devel-gcc14-32bit-14.2.0+git10526-150000.1.6.1 * cross-nvptx-newlib14-devel-14.2.0+git10526-150000.1.6.1 * gcc14-32bit-14.2.0+git10526-150000.1.6.1 * cross-nvptx-gcc14-14.2.0+git10526-150000.1.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libm2cor19-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * gcc14-m2-14.2.0+git10526-150000.1.6.1 * libm2min19-14.2.0+git10526-150000.1.6.1 * libgo23-14.2.0+git10526-150000.1.6.1 * libm2log19-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-m2-debuginfo-14.2.0+git10526-150000.1.6.1 * libada14-14.2.0+git10526-150000.1.6.1 * gcc14-ada-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2iso19-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-obj-c++-debuginfo-14.2.0+git10526-150000.1.6.1 * libgo23-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-objc-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2min19-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-objc-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2cor19-14.2.0+git10526-150000.1.6.1 * gcc14-go-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2log19-14.2.0+git10526-150000.1.6.1 * libm2pim19-14.2.0+git10526-150000.1.6.1 * gcc14-obj-c++-14.2.0+git10526-150000.1.6.1 * libada14-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-ada-14.2.0+git10526-150000.1.6.1 * libm2iso19-14.2.0+git10526-150000.1.6.1 * gcc14-go-14.2.0+git10526-150000.1.6.1 * libm2pim19-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 s390x x86_64) * gcc14-d-debuginfo-14.2.0+git10526-150000.1.6.1 * libgphobos5-debuginfo-14.2.0+git10526-150000.1.6.1 * libgphobos5-14.2.0+git10526-150000.1.6.1 * libgdruntime5-14.2.0+git10526-150000.1.6.1 * gcc14-d-14.2.0+git10526-150000.1.6.1 * libgdruntime5-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Package Hub 15 15-SP5 (x86_64) * gcc14-d-32bit-14.2.0+git10526-150000.1.6.1 * libgo23-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2min19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libada14-32bit-14.2.0+git10526-150000.1.6.1 * gcc14-objc-32bit-14.2.0+git10526-150000.1.6.1 * libm2pim19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2cor19-32bit-14.2.0+git10526-150000.1.6.1 * libgdruntime5-32bit-14.2.0+git10526-150000.1.6.1 * libm2log19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgo23-32bit-14.2.0+git10526-150000.1.6.1 * libgphobos5-32bit-14.2.0+git10526-150000.1.6.1 * libm2iso19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-ada-32bit-14.2.0+git10526-150000.1.6.1 * libm2min19-32bit-14.2.0+git10526-150000.1.6.1 * libada14-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-go-32bit-14.2.0+git10526-150000.1.6.1 * libgdruntime5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2log19-32bit-14.2.0+git10526-150000.1.6.1 * libgphobos5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2pim19-32bit-14.2.0+git10526-150000.1.6.1 * gcc14-m2-32bit-14.2.0+git10526-150000.1.6.1 * libm2iso19-32bit-14.2.0+git10526-150000.1.6.1 * libm2cor19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-obj-c++-32bit-14.2.0+git10526-150000.1.6.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * libm2cor19-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * gcc14-m2-14.2.0+git10526-150000.1.6.1 * libm2min19-14.2.0+git10526-150000.1.6.1 * libgo23-14.2.0+git10526-150000.1.6.1 * libm2log19-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-m2-debuginfo-14.2.0+git10526-150000.1.6.1 * libada14-14.2.0+git10526-150000.1.6.1 * gcc14-ada-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2iso19-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-obj-c++-debuginfo-14.2.0+git10526-150000.1.6.1 * libgo23-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-objc-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2min19-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-objc-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2cor19-14.2.0+git10526-150000.1.6.1 * gcc14-go-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2log19-14.2.0+git10526-150000.1.6.1 * libm2pim19-14.2.0+git10526-150000.1.6.1 * gcc14-obj-c++-14.2.0+git10526-150000.1.6.1 * libada14-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-ada-14.2.0+git10526-150000.1.6.1 * libm2iso19-14.2.0+git10526-150000.1.6.1 * gcc14-go-14.2.0+git10526-150000.1.6.1 * libm2pim19-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Package Hub 15 15-SP6 (aarch64 s390x x86_64) * gcc14-d-debuginfo-14.2.0+git10526-150000.1.6.1 * libgphobos5-debuginfo-14.2.0+git10526-150000.1.6.1 * libgphobos5-14.2.0+git10526-150000.1.6.1 * libgdruntime5-14.2.0+git10526-150000.1.6.1 * gcc14-d-14.2.0+git10526-150000.1.6.1 * libgdruntime5-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Package Hub 15 15-SP6 (x86_64) * gcc14-d-32bit-14.2.0+git10526-150000.1.6.1 * libgo23-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2min19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libada14-32bit-14.2.0+git10526-150000.1.6.1 * gcc14-objc-32bit-14.2.0+git10526-150000.1.6.1 * libm2pim19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2cor19-32bit-14.2.0+git10526-150000.1.6.1 * libgdruntime5-32bit-14.2.0+git10526-150000.1.6.1 * libm2log19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgo23-32bit-14.2.0+git10526-150000.1.6.1 * libgphobos5-32bit-14.2.0+git10526-150000.1.6.1 * libm2iso19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-ada-32bit-14.2.0+git10526-150000.1.6.1 * libm2min19-32bit-14.2.0+git10526-150000.1.6.1 * libada14-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-go-32bit-14.2.0+git10526-150000.1.6.1 * libgdruntime5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2log19-32bit-14.2.0+git10526-150000.1.6.1 * libgphobos5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libm2pim19-32bit-14.2.0+git10526-150000.1.6.1 * gcc14-m2-32bit-14.2.0+git10526-150000.1.6.1 * libm2iso19-32bit-14.2.0+git10526-150000.1.6.1 * libm2cor19-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-obj-c++-32bit-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libhwasan0-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le x86_64) * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * libhwasan0-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (ppc64le x86_64) * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * libhwasan0-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (ppc64le x86_64) * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libgfortran5-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libobjc4-14.2.0+git10526-150000.1.6.1 * libgfortran5-14.2.0+git10526-150000.1.6.1 * libasan8-debuginfo-14.2.0+git10526-150000.1.6.1 * libtsan2-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * libgomp1-14.2.0+git10526-150000.1.6.1 * libatomic1-14.2.0+git10526-150000.1.6.1 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * libobjc4-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-14.2.0+git10526-150000.1.6.1 * libatomic1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-debuginfo-14.2.0+git10526-150000.1.6.1 * liblsan0-14.2.0+git10526-150000.1.6.1 * libitm1-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-14.2.0+git10526-150000.1.6.1 * libtsan2-debuginfo-14.2.0+git10526-150000.1.6.1 * libhwasan0-14.2.0+git10526-150000.1.6.1 * libubsan1-14.2.0+git10526-150000.1.6.1 * libstdc++6-locale-14.2.0+git10526-150000.1.6.1 * SUSE Enterprise Storage 7.1 (x86_64) * libobjc4-32bit-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.6.1 * libquadmath0-14.2.0+git10526-150000.1.6.1 * libquadmath0-32bit-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-32bit-14.2.0+git10526-150000.1.6.1 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-14.2.0+git10526-150000.1.6.1 * libubsan1-32bit-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgfortran5-32bit-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-14.2.0+git10526-150000.1.6.1 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libgomp1-32bit-14.2.0+git10526-150000.1.6.1 * libstdc++6-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-14.2.0+git10526-150000.1.6.1 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libstdc++6-debuginfo-14.2.0+git10526-150000.1.6.1 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.6.1 * gcc14-debugsource-14.2.0+git10526-150000.1.6.1 * libgcc_s1-14.2.0+git10526-150000.1.6.1 * gcc14-debuginfo-14.2.0+git10526-150000.1.6.1 * libstdc++6-14.2.0+git10526-150000.1.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231833

1 0

SUSE-SU-2024:3863-1: critical: Security update for cups-filters
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Security update for cups-filters Announcement ID: SUSE-SU-2024:3863-1 Release Date: 2024-11-01T15:05:23Z Rating: critical References: * bsc#1230937 * bsc#1231294 Cross-References: * CVE-2024-47076 * CVE-2024-47850 CVSS scores: * CVE-2024-47076 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H * CVE-2024-47076 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-47076 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N * CVE-2024-47850 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H * CVE-2024-47850 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2024-47850 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for cups-filters fixes the following issues: * CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets (bsc#1231294) * CVE-2024-47076: Fixed lack of input sanitization in cfGetPrinterAttributes5 (bsc#1230937). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3863=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3863=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3863=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3863=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3863=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3863=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3863=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3863=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3863=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3863=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3863=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3863=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3863=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3863=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3863=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3863=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3863=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3863=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3863=1 ## Package List: * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Manager Proxy 4.3 (x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Manager Retail Branch Server 4.3 (x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * cups-filters-devel-1.25.0-150200.3.19.2 * cups-filters-debugsource-1.25.0-150200.3.19.2 * cups-filters-debuginfo-1.25.0-150200.3.19.2 * cups-filters-1.25.0-150200.3.19.2 ## References: * https://www.suse.com/security/cve/CVE-2024-47076.html * https://www.suse.com/security/cve/CVE-2024-47850.html * https://bugzilla.suse.com/show_bug.cgi?id=1230937 * https://bugzilla.suse.com/show_bug.cgi?id=1231294

1 0

SUSE-SU-2024:3864-1: important: Security update for apache2
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Security update for apache2 Announcement ID: SUSE-SU-2024:3864-1 Release Date: 2024-11-01T15:06:52Z Rating: important References: * bsc#1228097 Cross-References: * CVE-2024-40725 CVSS scores: * CVE-2024-40725 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-40725 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for apache2 fixes the following issues: * CVE-2024-40725: Fixed source code disclosure of local content (bsc#1228097) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3864=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3864=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3864=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3864=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-3864=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3864=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3864=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3864=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3864=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3864=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3864=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3864=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3864=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3864=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-example-pages-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-event-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * apache2-event-debuginfo-2.4.51-150400.6.37.1 * openSUSE Leap 15.4 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-example-pages-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-event-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * apache2-event-debuginfo-2.4.51-150400.6.37.1 * openSUSE Leap 15.5 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-event-debuginfo-2.4.51-150400.6.37.1 * apache2-event-2.4.51-150400.6.37.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * Server Applications Module 15-SP5 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * Server Applications Module 15-SP6 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * SUSE Manager Proxy 4.3 (x86_64) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * SUSE Manager Proxy 4.3 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * apache2-doc-2.4.51-150400.6.37.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * apache2-worker-debuginfo-2.4.51-150400.6.37.1 * apache2-prefork-2.4.51-150400.6.37.1 * apache2-debugsource-2.4.51-150400.6.37.1 * apache2-devel-2.4.51-150400.6.37.1 * apache2-debuginfo-2.4.51-150400.6.37.1 * apache2-utils-debuginfo-2.4.51-150400.6.37.1 * apache2-2.4.51-150400.6.37.1 * apache2-prefork-debuginfo-2.4.51-150400.6.37.1 * apache2-worker-2.4.51-150400.6.37.1 * apache2-utils-2.4.51-150400.6.37.1 * SUSE Manager Server 4.3 (noarch) * apache2-doc-2.4.51-150400.6.37.1 ## References: * https://www.suse.com/security/cve/CVE-2024-40725.html * https://bugzilla.suse.com/show_bug.cgi?id=1228097

1 0

SUSE-SU-2024:3866-1: important: Security update for xorg-x11-server
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2024:3866-1 Release Date: 2024-11-01T15:13:09Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3866=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3866=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3866=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3866=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3866=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3866=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3866=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3866=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3866=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * xorg-x11-server-sdk-1.20.3-150400.38.51.1 * xorg-x11-server-source-1.20.3-150400.38.51.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-debugsource-1.20.3-150400.38.51.1 * xorg-x11-server-extra-1.20.3-150400.38.51.1 * xorg-x11-server-1.20.3-150400.38.51.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * xorg-x11-server-sdk-1.20.3-150400.38.51.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-debugsource-1.20.3-150400.38.51.1 * xorg-x11-server-extra-1.20.3-150400.38.51.1 * xorg-x11-server-1.20.3-150400.38.51.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * xorg-x11-server-sdk-1.20.3-150400.38.51.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-debugsource-1.20.3-150400.38.51.1 * xorg-x11-server-extra-1.20.3-150400.38.51.1 * xorg-x11-server-1.20.3-150400.38.51.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * xorg-x11-server-sdk-1.20.3-150400.38.51.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-debugsource-1.20.3-150400.38.51.1 * xorg-x11-server-extra-1.20.3-150400.38.51.1 * xorg-x11-server-1.20.3-150400.38.51.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-sdk-1.20.3-150400.38.51.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-debugsource-1.20.3-150400.38.51.1 * xorg-x11-server-extra-1.20.3-150400.38.51.1 * xorg-x11-server-1.20.3-150400.38.51.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * xorg-x11-server-sdk-1.20.3-150400.38.51.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-debugsource-1.20.3-150400.38.51.1 * xorg-x11-server-extra-1.20.3-150400.38.51.1 * xorg-x11-server-1.20.3-150400.38.51.1 * SUSE Manager Proxy 4.3 (x86_64) * xorg-x11-server-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-debugsource-1.20.3-150400.38.51.1 * xorg-x11-server-extra-1.20.3-150400.38.51.1 * xorg-x11-server-1.20.3-150400.38.51.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * xorg-x11-server-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-debugsource-1.20.3-150400.38.51.1 * xorg-x11-server-extra-1.20.3-150400.38.51.1 * xorg-x11-server-1.20.3-150400.38.51.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * xorg-x11-server-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.51.1 * xorg-x11-server-debugsource-1.20.3-150400.38.51.1 * xorg-x11-server-extra-1.20.3-150400.38.51.1 * xorg-x11-server-1.20.3-150400.38.51.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0

SUSE-RU-2024:3868-1: moderate: Recommended update for suse-build-key
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Recommended update for suse-build-key Announcement ID: SUSE-RU-2024:3868-1 Release Date: 2024-11-01T15:16:39Z Rating: moderate References: * bsc#1231829 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for suse-build-key fixes the following issues: * Also include the GPG key from the current build project to allow Staging testing without production keys, but only in staging. (bsc#1231829) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3868=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3868=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3868=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3868=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3868=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3868=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3868=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3868=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3868=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3868=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3868=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3868=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3868=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3868=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3868=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3868=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3868=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3868=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-3868=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3868=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3868=1 ## Package List: * openSUSE Leap 15.5 (noarch) * suse-build-key-12.0-150000.8.55.1 * openSUSE Leap 15.6 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * suse-build-key-12.0-150000.8.55.1 * Basesystem Module 15-SP5 (noarch) * suse-build-key-12.0-150000.8.55.1 * Basesystem Module 15-SP6 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Manager Server 4.3 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Enterprise Storage 7.1 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Micro 5.1 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * suse-build-key-12.0-150000.8.55.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * suse-build-key-12.0-150000.8.55.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231829

1 0

SUSE-SU-2024:3869-1: important: Security update for webkit2gtk3
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Security update for webkit2gtk3 Announcement ID: SUSE-SU-2024:3869-1 Release Date: 2024-11-01T15:18:16Z Rating: important References: * bsc#1231039 Cross-References: * CVE-2024-23206 * CVE-2024-23213 * CVE-2024-23222 * CVE-2024-23271 * CVE-2024-27808 * CVE-2024-27820 * CVE-2024-27833 * CVE-2024-27834 * CVE-2024-27838 * CVE-2024-27851 * CVE-2024-40866 * CVE-2024-44187 * CVE-2024-4558 CVSS scores: * CVE-2024-23206 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-23206 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-23213 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23213 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23222 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23222 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23271 ( SUSE ): 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2024-27808 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27820 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27833 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27833 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27834 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27838 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-27838 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-27851 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27851 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-40866 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-40866 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-44187 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-44187 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Retail Branch Server 4.3 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). * CVE-2024-40866 * CVE-2024-44187 Already fixed in version 2.44.3: * CVE-2024-4558 * CVE-2024-27838 * CVE-2024-27851 Already fixed in version 2.44.2: * CVE-2024-27834 * CVE-2024-27808 * CVE-2024-27820 * CVE-2024-27833 Already fixed in version 2.44.1: * CVE-2024-23222 * CVE-2024-23206 * CVE-2024-23213 * CVE-2024-23271 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3869=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3869=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-3869=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3869=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3869=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3869=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3869=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3869=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3869=1 ## Package List: * openSUSE Leap 15.4 (noarch) * WebKitGTK-4.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-6.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-4.1-lang-2.46.0-150400.4.91.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-JavaScriptCore-6_0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-2.46.0-150400.4.91.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.0-150400.4.91.1 * webkit-jsc-6.0-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkitgtk-6_0-injected-bundles-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-2.46.0-150400.4.91.1 * webkit2gtk4-debugsource-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150400.4.91.1 * webkit-jsc-4-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk3-devel-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-minibrowser-debuginfo-2.46.0-150400.4.91.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkit2gtk3-minibrowser-2.46.0-150400.4.91.1 * webkit-jsc-4.1-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150400.4.91.1 * webkit2gtk4-minibrowser-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-devel-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkit2gtk4-devel-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-minibrowser-2.46.0-150400.4.91.1 * webkit2gtk3-debugsource-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-debugsource-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-2.46.0-150400.4.91.1 * webkit2gtk4-minibrowser-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_0-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150400.4.91.1 * webkit-jsc-4-debuginfo-2.46.0-150400.4.91.1 * webkit2gtk3-minibrowser-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit-6_0-2.46.0-150400.4.91.1 * webkit-jsc-6.0-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_1-2.46.0-150400.4.91.1 * webkit-jsc-4.1-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-2.46.0-150400.4.91.1 * openSUSE Leap 15.4 (x86_64) * libwebkit2gtk-4_0-37-32bit-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-32bit-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-32bit-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-32bit-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-32bit-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.46.0-150400.4.91.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-64bit-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-64bit-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-64bit-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-64bit-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.46.0-150400.4.91.1 * Basesystem Module 15-SP5 (noarch) * WebKitGTK-4.0-lang-2.46.0-150400.4.91.1 * Basesystem Module 15-SP5 (aarch64 ppc64le) * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-devel-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-debugsource-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_0-2.46.0-150400.4.91.1 * Desktop Applications Module 15-SP5 (noarch) * WebKitGTK-4.1-lang-2.46.0-150400.4.91.1 * Desktop Applications Module 15-SP5 (ppc64le) * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk3-debugsource-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_1-2.46.0-150400.4.91.1 * webkit2gtk3-devel-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * WebKitGTK-4.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-6.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-4.1-lang-2.46.0-150400.4.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libwebkit2gtk-4_0-37-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkitgtk-6_0-injected-bundles-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-2.46.0-150400.4.91.1 * webkit2gtk4-debugsource-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk3-devel-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-devel-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkit2gtk3-debugsource-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-debugsource-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_0-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_1-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-2.46.0-150400.4.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * WebKitGTK-4.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-6.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-4.1-lang-2.46.0-150400.4.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libwebkit2gtk-4_0-37-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkitgtk-6_0-injected-bundles-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-2.46.0-150400.4.91.1 * webkit2gtk4-debugsource-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk3-devel-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-devel-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkit2gtk3-debugsource-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-debugsource-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_0-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_1-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-2.46.0-150400.4.91.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * WebKitGTK-4.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-6.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-4.1-lang-2.46.0-150400.4.91.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libwebkit2gtk-4_0-37-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkitgtk-6_0-injected-bundles-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-2.46.0-150400.4.91.1 * webkit2gtk4-debugsource-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk3-devel-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-devel-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkit2gtk3-debugsource-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-debugsource-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_0-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_1-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-2.46.0-150400.4.91.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * WebKitGTK-4.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-6.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-4.1-lang-2.46.0-150400.4.91.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64) * libwebkit2gtk-4_0-37-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkitgtk-6_0-injected-bundles-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-2.46.0-150400.4.91.1 * webkit2gtk4-debugsource-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk3-devel-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-devel-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkit2gtk3-debugsource-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-debugsource-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_0-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_1-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-2.46.0-150400.4.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * WebKitGTK-4.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-6.0-lang-2.46.0-150400.4.91.1 * WebKitGTK-4.1-lang-2.46.0-150400.4.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libwebkit2gtk-4_0-37-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkitgtk-6_0-injected-bundles-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-2.46.0-150400.4.91.1 * webkit2gtk4-debugsource-2.46.0-150400.4.91.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk3-devel-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-devel-2.46.0-150400.4.91.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * webkit2gtk3-debugsource-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-debugsource-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_0-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-2.46.0-150400.4.91.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_1-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_1-0-2.46.0-150400.4.91.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * WebKitGTK-4.0-lang-2.46.0-150400.4.91.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-devel-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150400.4.91.1 * libjavascriptcoregtk-4_0-18-2.46.0-150400.4.91.1 * webkit2gtk3-soup2-debugsource-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150400.4.91.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150400.4.91.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150400.4.91.1 * typelib-1_0-WebKit2-4_0-2.46.0-150400.4.91.1 ## References: * https://www.suse.com/security/cve/CVE-2024-23206.html * https://www.suse.com/security/cve/CVE-2024-23213.html * https://www.suse.com/security/cve/CVE-2024-23222.html * https://www.suse.com/security/cve/CVE-2024-23271.html * https://www.suse.com/security/cve/CVE-2024-27808.html * https://www.suse.com/security/cve/CVE-2024-27820.html * https://www.suse.com/security/cve/CVE-2024-27833.html * https://www.suse.com/security/cve/CVE-2024-27834.html * https://www.suse.com/security/cve/CVE-2024-27838.html * https://www.suse.com/security/cve/CVE-2024-27851.html * https://www.suse.com/security/cve/CVE-2024-40866.html * https://www.suse.com/security/cve/CVE-2024-44187.html * https://www.suse.com/security/cve/CVE-2024-4558.html * https://bugzilla.suse.com/show_bug.cgi?id=1231039

1 0

SUSE-SU-2024:3873-1: important: Security update for rubygem-bundler
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Security update for rubygem-bundler Announcement ID: SUSE-SU-2024:3873-1 Release Date: 2024-11-01T15:23:36Z Rating: important References: * bsc#1193578 Cross-References: * CVE-2021-43809 CVSS scores: * CVE-2021-43809 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2021-43809 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for rubygem-bundler fixes the following issues: * CVE-2021-43809: Fixed remote execution via Gemfile argument injection (bsc#1193578) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3873=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3873=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3873=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3873=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3873=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3873=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3873=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3873=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3873=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3873=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3873=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * ruby2.5-rubygem-bundler-doc-1.16.1-150000.3.6.1 * Basesystem Module 15-SP5 (ppc64le x86_64) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * Basesystem Module 15-SP6 (aarch64 s390x x86_64) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le x86_64) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 s390x) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 * SUSE Manager Server 4.3 (s390x x86_64) * ruby2.5-rubygem-bundler-1.16.1-150000.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-43809.html * https://bugzilla.suse.com/show_bug.cgi?id=1193578

1 0

SUSE-SU-2024:3875-1: moderate: Security update for java-11-openjdk
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Security update for java-11-openjdk Announcement ID: SUSE-SU-2024:3875-1 Release Date: 2024-11-01T15:29:10Z Rating: moderate References: * bsc#1231702 * bsc#1231711 * bsc#1231716 * bsc#1231719 Cross-References: * CVE-2024-21208 * CVE-2024-21210 * CVE-2024-21217 * CVE-2024-21235 CVSS scores: * CVE-2024-21208 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-21208 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21208 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21210 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-21210 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-21210 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-21217 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-21217 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21217 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21235 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-21235 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-21235 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP5 * Legacy Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for java-11-openjdk fixes the following issues: Updated to version 11.0.25+9 (October 2024 CPU): * CVE-2024-21208: Fixed partial DoS in component Networking (bsc#1231702) * CVE-2024-21210: Fixed unauthorized read/write access to data in component Hotspot (bsc#1231711) * CVE-2024-21217: Fixed partial DoS in component Serialization (bsc#1231716) * CVE-2024-21235: Fixed unauthorized read/write access to data in component Hotspot (bsc#1231719) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3875=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3875=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3875=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-3875=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3875=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3875=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3875=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3875=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3875=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3875=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3875=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3875=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3875=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3875=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3875=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3875=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3875=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3875=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-src-11.0.25.0-150000.3.119.1 * java-11-openjdk-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-jmods-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * openSUSE Leap 15.5 (noarch) * java-11-openjdk-javadoc-11.0.25.0-150000.3.119.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-src-11.0.25.0-150000.3.119.1 * java-11-openjdk-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-jmods-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-debuginfo-11.0.25.0-150000.3.119.1 * openSUSE Leap 15.6 (noarch) * java-11-openjdk-javadoc-11.0.25.0-150000.3.119.1 * Basesystem Module 15-SP5 (ppc64le x86_64) * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * Legacy Module 15-SP6 (ppc64le s390x) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-debuginfo-11.0.25.0-150000.3.119.1 * SUSE Package Hub 15 15-SP5 (noarch) * java-11-openjdk-javadoc-11.0.25.0-150000.3.119.1 * SUSE Package Hub 15 15-SP6 (noarch) * java-11-openjdk-javadoc-11.0.25.0-150000.3.119.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 s390x) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (s390x) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Manager Proxy 4.3 (x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Manager Server 4.3 (s390x) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * java-11-openjdk-debugsource-11.0.25.0-150000.3.119.1 * java-11-openjdk-11.0.25.0-150000.3.119.1 * java-11-openjdk-debuginfo-11.0.25.0-150000.3.119.1 * java-11-openjdk-headless-11.0.25.0-150000.3.119.1 * java-11-openjdk-devel-11.0.25.0-150000.3.119.1 * java-11-openjdk-demo-11.0.25.0-150000.3.119.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21208.html * https://www.suse.com/security/cve/CVE-2024-21210.html * https://www.suse.com/security/cve/CVE-2024-21217.html * https://www.suse.com/security/cve/CVE-2024-21235.html * https://bugzilla.suse.com/show_bug.cgi?id=1231702 * https://bugzilla.suse.com/show_bug.cgi?id=1231711 * https://bugzilla.suse.com/show_bug.cgi?id=1231716 * https://bugzilla.suse.com/show_bug.cgi?id=1231719

1 0

SUSE-SU-2024:3876-1: important: Security update for python-waitress
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Security update for python-waitress Announcement ID: SUSE-SU-2024:3876-1 Release Date: 2024-11-01T15:29:52Z Rating: important References: * bsc#1232554 * bsc#1232556 Cross-References: * CVE-2024-49768 * CVE-2024-49769 CVSS scores: * CVE-2024-49768 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-49768 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-49768 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-49769 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-49769 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-49769 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * Python 3 Module 15-SP5 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-waitress fixes the following issues: * CVE-2024-49768: Fixed request processing race condition in HTTP pipelining with invalid first request when lookahead is enabled (bsc#1232556) * CVE-2024-49769: Fixed incorrect connection clean up leads to a busy-loop and resource exhaustion (bsc#1232554) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3876=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-3876=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-3876=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3876=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3876=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3876=1 ## Package List: * openSUSE Leap 15.5 (noarch) * python311-waitress-2.1.2-150400.12.7.1 * python311-waitress-doc-2.1.2-150400.12.7.1 * Python 3 Module 15-SP5 (noarch) * python311-waitress-2.1.2-150400.12.7.1 * python311-waitress-doc-2.1.2-150400.12.7.1 * Python 3 Module 15-SP6 (noarch) * python311-waitress-2.1.2-150400.12.7.1 * python311-waitress-doc-2.1.2-150400.12.7.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-waitress-2.1.2-150400.12.7.1 * python311-waitress-doc-2.1.2-150400.12.7.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-waitress-2.1.2-150400.12.7.1 * python311-waitress-doc-2.1.2-150400.12.7.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * python311-waitress-2.1.2-150400.12.7.1 * python311-waitress-doc-2.1.2-150400.12.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-49768.html * https://www.suse.com/security/cve/CVE-2024-49769.html * https://bugzilla.suse.com/show_bug.cgi?id=1232554 * https://bugzilla.suse.com/show_bug.cgi?id=1232556

1 0

SUSE-SU-2024:3861-1: moderate: Security update for uwsgi
by OPENSUSE-UPDATES 01 Nov '24

01 Nov '24

# Security update for uwsgi Announcement ID: SUSE-SU-2024:3861-1 Release Date: 2024-11-01T06:34:07Z Rating: moderate References: * bsc#1222332 Cross-References: * CVE-2024-24795 CVSS scores: * CVE-2024-24795 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for uwsgi fixes the following issues: * CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules (bsc#1222332) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3861=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3861=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3861=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3861=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3861=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * uwsgi-xslt-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-jvm-2.0.19.1-150400.8.3.1 * uwsgi-pypy-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-debugsource-2.0.19.1-150400.8.3.1 * uwsgi-psgi-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-ldap-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-lua-2.0.19.1-150400.8.3.1 * uwsgi-gevent-2.0.19.1-150400.8.3.1 * uwsgi-xslt-2.0.19.1-150400.8.3.1 * uwsgi-jvm-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-psgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-python3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-2.0.19.1-150400.8.3.1 * uwsgi-libffi-2.0.19.1-150400.8.3.1 * uwsgi-python3-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pypy-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-libffi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-2.0.19.1-150400.8.3.1 * uwsgi-gevent-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-2.0.19.1-150400.8.3.1 * uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-2.0.19.1-150400.8.3.1 * uwsgi-ldap-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-lua-debuginfo-2.0.19.1-150400.8.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * uwsgi-xslt-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-jvm-2.0.19.1-150400.8.3.1 * uwsgi-pypy-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-debugsource-2.0.19.1-150400.8.3.1 * uwsgi-psgi-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-ldap-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-lua-2.0.19.1-150400.8.3.1 * uwsgi-gevent-2.0.19.1-150400.8.3.1 * uwsgi-xslt-2.0.19.1-150400.8.3.1 * uwsgi-jvm-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-psgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-python3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-2.0.19.1-150400.8.3.1 * uwsgi-libffi-2.0.19.1-150400.8.3.1 * uwsgi-python3-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pypy-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-libffi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-2.0.19.1-150400.8.3.1 * uwsgi-gevent-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-2.0.19.1-150400.8.3.1 * uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-2.0.19.1-150400.8.3.1 * uwsgi-ldap-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-lua-debuginfo-2.0.19.1-150400.8.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * uwsgi-xslt-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-jvm-2.0.19.1-150400.8.3.1 * uwsgi-pypy-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-debugsource-2.0.19.1-150400.8.3.1 * uwsgi-psgi-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-ldap-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-lua-2.0.19.1-150400.8.3.1 * uwsgi-gevent-2.0.19.1-150400.8.3.1 * uwsgi-xslt-2.0.19.1-150400.8.3.1 * uwsgi-jvm-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-psgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-python3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-2.0.19.1-150400.8.3.1 * uwsgi-libffi-2.0.19.1-150400.8.3.1 * uwsgi-python3-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pypy-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-libffi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-2.0.19.1-150400.8.3.1 * uwsgi-gevent-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-2.0.19.1-150400.8.3.1 * uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-2.0.19.1-150400.8.3.1 * uwsgi-ldap-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-lua-debuginfo-2.0.19.1-150400.8.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * uwsgi-xslt-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-jvm-2.0.19.1-150400.8.3.1 * uwsgi-pypy-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-debugsource-2.0.19.1-150400.8.3.1 * uwsgi-psgi-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-ldap-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-lua-2.0.19.1-150400.8.3.1 * uwsgi-gevent-2.0.19.1-150400.8.3.1 * uwsgi-xslt-2.0.19.1-150400.8.3.1 * uwsgi-jvm-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-psgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-python3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-2.0.19.1-150400.8.3.1 * uwsgi-libffi-2.0.19.1-150400.8.3.1 * uwsgi-python3-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pypy-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-libffi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-2.0.19.1-150400.8.3.1 * uwsgi-gevent-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-2.0.19.1-150400.8.3.1 * uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-2.0.19.1-150400.8.3.1 * uwsgi-ldap-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-lua-debuginfo-2.0.19.1-150400.8.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * uwsgi-xslt-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-2.0.19.1-150400.8.3.1 * uwsgi-emperor_pg-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-jvm-2.0.19.1-150400.8.3.1 * uwsgi-pypy-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-debugsource-2.0.19.1-150400.8.3.1 * uwsgi-psgi-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-ldap-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-lua-2.0.19.1-150400.8.3.1 * uwsgi-gevent-2.0.19.1-150400.8.3.1 * uwsgi-xslt-2.0.19.1-150400.8.3.1 * uwsgi-jvm-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-psgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-python3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pam-2.0.19.1-150400.8.3.1 * uwsgi-libffi-2.0.19.1-150400.8.3.1 * uwsgi-python3-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-pypy-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-2.0.19.1-150400.8.3.1 * uwsgi-greenlet-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-libffi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-emperor_zeromq-2.0.19.1-150400.8.3.1 * uwsgi-gevent-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-glusterfs-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-2.0.19.1-150400.8.3.1 * uwsgi-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-sqlite3-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-logzmq-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-debuginfo-2.0.19.1-150400.8.3.1 * uwsgi-php7-2.0.19.1-150400.8.3.1 * uwsgi-ldap-2.0.19.1-150400.8.3.1 * apache2-mod_uwsgi-2.0.19.1-150400.8.3.1 * uwsgi-lua-debuginfo-2.0.19.1-150400.8.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24795.html * https://bugzilla.suse.com/show_bug.cgi?id=1222332

1 0

SUSE-SU-2024:3860-1: important: Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3860-1 Release Date: 2024-10-31T16:33:36Z Rating: important References: * bsc#1223363 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225311 * bsc#1225312 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26828 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3860=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3860=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_62-default-6-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_62-default-debuginfo-6-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_13-debugsource-6-150500.11.6.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_62-default-6-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_62-default-debuginfo-6-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_13-debugsource-6-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3856-1: important: Security update for the Linux Kernel RT (Live Patch 17 for SLE 15 SP5)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel RT (Live Patch 17 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3856-1 Release Date: 2024-10-31T14:33:37Z Rating: important References: * bsc#1227471 * bsc#1228349 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2024-40909 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_61 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1228349). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3856=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3856=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_17-debugsource-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_61-rt-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_61-rt-debuginfo-3-150500.11.6.1 * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_17-debugsource-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_61-rt-3-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_61-rt-debuginfo-3-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2024-40909.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228349 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3857-1: important: Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3857-1 Release Date: 2024-10-31T15:04:06Z Rating: important References: * bsc#1223363 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225311 * bsc#1225312 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26828 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3857=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3857=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_65-default-debuginfo-6-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_65-default-6-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_14-debugsource-6-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_65-default-debuginfo-6-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_65-default-6-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_14-debugsource-6-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3859-1: important: Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3859-1 Release Date: 2024-10-31T15:34:40Z Rating: important References: * bsc#1225011 * bsc#1225012 * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1226327 * bsc#1227471 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3859=1 SUSE-2024-3858=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3859=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-3858=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_36-default-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_8-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_7-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-13-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_36-default-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_8-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_7-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-13-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471

1 0

SUSE-SU-2024:3843-1: important: Security update for 389-ds
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for 389-ds Announcement ID: SUSE-SU-2024:3843-1 Release Date: 2024-10-31T08:50:13Z Rating: important References: * bsc#1230852 * bsc#1231462 Cross-References: * CVE-2024-2199 * CVE-2024-3657 * CVE-2024-5953 CVSS scores: * CVE-2024-2199 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3657 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3657 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-5953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-5953 ( NVD ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for 389-ds fixes the following issues: * Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852) * Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462) * Update to version 2.2.10~git18.20ce9289: * RFE: Use previously extracted key path * Update dsidm to prioritize basedn from .dsrc over interactive input * UI: Instance fails to load when DB backup directory doesn't exist * Improve online import robustness when the server is under load * Ensure all slapi_log_err calls end format strings with newline character \n * RFE: when memberof is enabled, defer updates of members from the update of the group * Provide more information in the error message during setup_ol_tls_conn() * Wrong set of entries returned for some search filters * Schema lib389 object is not keeping custom schema data upon editing * UI: Fix audit issue with npm - micromatch * Fix long delay when setting replication agreement with dsconf * Changelog trims updates from a given RID even if a consumer has not received any of them * test_password_modify_non_utf8 should set default password storage scheme * Update Cargo.lock * Rearrange includes for 32-bit support logic * Fix fedora cop RawHide builds * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console * Enabling replication for a sub suffix crashes browser * d2entry - Could not open id2entry err 0 - at startup when having sub- suffixes * Slow ldif2db import on a newly created BDB backend * Audit log buffering doesn't handle large updates * RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) * passwordHistory is not updated with a pre-hashed password * ns-slapd crash in referint_get_config * Fix the UTC offset print * Fix OpenLDAP version autodetection * RFE: add new operation note for MFA authentications * Add log buffering to audit log * Fix connection timeout error breaking errormap * Improve dsidm CLI No Such Entry handling * Improve connection timeout error logging * Add hidden -v and -j options to each CLI subcommand * Fix various issues with logconv.pl * Fix certificate lifetime displayed as NaN * Enhance Rust and JS bundling and add SPDX licenses for both * Remove audit-ci from dependencies * Fix unused variable warning from previous commit * covscan: fix memory leak in audit log when adding entries * Add a check for tagged commits * dscreate ds-root - accepts relative path * Change replica_id from str to int * Attribute Names changed to lowercase after adding the Attributes * ns-slapd crashes at startup if a backend has no suffix * During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it * Reversion of the entry cache should be limited to BETXN plugin failures * Disable Transparent Huge Pages * Freelist ordering causes high wtime * Security fix for CVE-2024-2199 * VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512) * VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277) * 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3843=1 openSUSE-SLE-15.5-2024-3843=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-3843=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.2.10~git18.20ce9289-150500.3.24.1 * 389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1 * libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1 * libsvrcore0-debuginfo-2.2.10~git18.20ce9289-150500.3.24.1 * 389-ds-debugsource-2.2.10~git18.20ce9289-150500.3.24.1 * 389-ds-snmp-2.2.10~git18.20ce9289-150500.3.24.1 * 389-ds-snmp-debuginfo-2.2.10~git18.20ce9289-150500.3.24.1 * lib389-2.2.10~git18.20ce9289-150500.3.24.1 * 389-ds-2.2.10~git18.20ce9289-150500.3.24.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.2.10~git18.20ce9289-150500.3.24.1 * 389-ds-devel-2.2.10~git18.20ce9289-150500.3.24.1 * libsvrcore0-2.2.10~git18.20ce9289-150500.3.24.1 * libsvrcore0-debuginfo-2.2.10~git18.20ce9289-150500.3.24.1 * 389-ds-debugsource-2.2.10~git18.20ce9289-150500.3.24.1 * lib389-2.2.10~git18.20ce9289-150500.3.24.1 * 389-ds-2.2.10~git18.20ce9289-150500.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2199.html * https://www.suse.com/security/cve/CVE-2024-3657.html * https://www.suse.com/security/cve/CVE-2024-5953.html * https://bugzilla.suse.com/show_bug.cgi?id=1230852 * https://bugzilla.suse.com/show_bug.cgi?id=1231462

1 0

SUSE-SU-2024:3844-1: important: Security update for 389-ds
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for 389-ds Announcement ID: SUSE-SU-2024:3844-1 Release Date: 2024-10-31T08:50:28Z Rating: important References: * bsc#1225512 * bsc#1226277 * bsc#1228912 * bsc#1230852 * bsc#1231462 Cross-References: * CVE-2024-2199 * CVE-2024-3657 * CVE-2024-5953 CVSS scores: * CVE-2024-2199 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3657 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3657 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-5953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-5953 ( NVD ): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities and has two security fixes can now be installed. ## Description: This update for 389-ds fixes the following issues: * Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852) * Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462) * Update to version 2.2.10~git18.20ce9289: * RFE: Use previously extracted key path * Update dsidm to prioritize basedn from .dsrc over interactive input * UI: Instance fails to load when DB backup directory doesn't exist * Improve online import robustness when the server is under load * Ensure all slapi_log_err calls end format strings with newline character \n * RFE: when memberof is enabled, defer updates of members from the update of the group * Provide more information in the error message during setup_ol_tls_conn() * Wrong set of entries returned for some search filters * Schema lib389 object is not keeping custom schema data upon editing * UI: Fix audit issue with npm - micromatch * Fix long delay when setting replication agreement with dsconf * Changelog trims updates from a given RID even if a consumer has not received any of them * test_password_modify_non_utf8 should set default password storage scheme * Update Cargo.lock * Rearrange includes for 32-bit support logic * Fix fedora cop RawHide builds * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console * Enabling replication for a sub suffix crashes browser * d2entry - Could not open id2entry err 0 - at startup when having sub- suffixes * Slow ldif2db import on a newly created BDB backend * Audit log buffering doesn't handle large updates * RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) * passwordHistory is not updated with a pre-hashed password * ns-slapd crash in referint_get_config * Fix the UTC offset print * Fix OpenLDAP version autodetection * RFE: add new operation note for MFA authentications * Add log buffering to audit log * Fix connection timeout error breaking errormap * Improve dsidm CLI No Such Entry handling * Improve connection timeout error logging * Add hidden -v and -j options to each CLI subcommand * Fix various issues with logconv.pl * Fix certificate lifetime displayed as NaN * Enhance Rust and JS bundling and add SPDX licenses for both * Remove audit-ci from dependencies * Fix unused variable warning from previous commit * covscan: fix memory leak in audit log when adding entries * Add a check for tagged commits * dscreate ds-root - accepts relative path * Change replica_id from str to int * Attribute Names changed to lowercase after adding the Attributes * ns-slapd crashes at startup if a backend has no suffix * During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it * Reversion of the entry cache should be limited to BETXN plugin failures * Disable Transparent Huge Pages * Freelist ordering causes high wtime * Security fix for CVE-2024-2199 * VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512) * VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277) * 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3844=1 openSUSE-SLE-15.6-2024-3844=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3844=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libsvrcore0-debuginfo-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-debuginfo-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-debugsource-2.2.10~git18.20ce9289-150600.8.10.1 * libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-snmp-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-snmp-debuginfo-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-2.2.10~git18.20ce9289-150600.8.10.1 * lib389-2.2.10~git18.20ce9289-150600.8.10.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libsvrcore0-debuginfo-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-debuginfo-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-debugsource-2.2.10~git18.20ce9289-150600.8.10.1 * libsvrcore0-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-devel-2.2.10~git18.20ce9289-150600.8.10.1 * 389-ds-2.2.10~git18.20ce9289-150600.8.10.1 * lib389-2.2.10~git18.20ce9289-150600.8.10.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2199.html * https://www.suse.com/security/cve/CVE-2024-3657.html * https://www.suse.com/security/cve/CVE-2024-5953.html * https://bugzilla.suse.com/show_bug.cgi?id=1225512 * https://bugzilla.suse.com/show_bug.cgi?id=1226277 * https://bugzilla.suse.com/show_bug.cgi?id=1228912 * https://bugzilla.suse.com/show_bug.cgi?id=1230852 * https://bugzilla.suse.com/show_bug.cgi?id=1231462

1 0

SUSE-RU-2024:3845-1: moderate: Recommended update for sof-firmware
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Recommended update for sof-firmware Announcement ID: SUSE-RU-2024:3845-1 Release Date: 2024-10-31T09:47:23Z Rating: moderate References: * bsc#1230236 * jsc#PED-10202 * jsc#PED-9993 Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains two features and has one fix can now be installed. ## Description: This update for sof-firmware fixes the following issues: * update to v2024.09 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3845=1 SUSE-2024-3845=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3845=1 ## Package List: * openSUSE Leap 15.6 (noarch) * sof-firmware-2024.09-150600.3.3.1 * Desktop Applications Module 15-SP6 (noarch) * sof-firmware-2024.09-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230236 * https://jira.suse.com/browse/PED-10202 * https://jira.suse.com/browse/PED-9993

1 0

SUSE-RU-2024:3846-1: moderate: Recommended update for gnutls
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Recommended update for gnutls Announcement ID: SUSE-RU-2024:3846-1 Release Date: 2024-10-31T10:07:18Z Rating: moderate References: * bsc#1226724 * bsc#1226731 * bsc#1226733 * bsc#1227642 * bsc#1227669 * bsc#1227670 * bsc#1227671 * bsc#1230166 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has eight fixes can now be installed. ## Description: This update for gnutls fixes the following issues: * FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669] * FIPS: Allow to perform the integrity check with the hmac provided by each library [bsc#1226724] * FIPS: Mark gnutls_hash_fast operations as approved in SLI. [bsc#1230166] * FIPS: Run pairwise consistency test only in FIPS mode. [bsc#1226733] * FIPS: Use full hash+sign operations, not low level primitives in PCT test. [bsc#1226733] * FIPS: Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer. [bsc#1227642] * FIPS: Allow RSA signature verification with min of 2048 bit modulus. [bsc#1227670] * FIPS: Remove not needed DSA in selfchecks in FIPS mode. [bsc#1227671, bsc#1226731] ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3846=1 openSUSE-SLE-15.6-2024-3846=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3846=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libgnutlsxx30-debuginfo-3.8.3-150600.4.3.1 * libgnutlsxx30-3.8.3-150600.4.3.1 * gnutls-debugsource-3.8.3-150600.4.3.1 * gnutls-3.8.3-150600.4.3.1 * libgnutls-devel-3.8.3-150600.4.3.1 * gnutls-debuginfo-3.8.3-150600.4.3.1 * libgnutls30-debuginfo-3.8.3-150600.4.3.1 * libgnutlsxx-devel-3.8.3-150600.4.3.1 * libgnutls30-3.8.3-150600.4.3.1 * openSUSE Leap 15.6 (x86_64) * libgnutls30-32bit-3.8.3-150600.4.3.1 * libgnutls30-32bit-debuginfo-3.8.3-150600.4.3.1 * libgnutls-devel-32bit-3.8.3-150600.4.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libgnutls30-64bit-3.8.3-150600.4.3.1 * libgnutls30-64bit-debuginfo-3.8.3-150600.4.3.1 * libgnutls-devel-64bit-3.8.3-150600.4.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgnutlsxx30-debuginfo-3.8.3-150600.4.3.1 * libgnutlsxx30-3.8.3-150600.4.3.1 * gnutls-debugsource-3.8.3-150600.4.3.1 * gnutls-3.8.3-150600.4.3.1 * gnutls-debuginfo-3.8.3-150600.4.3.1 * libgnutls30-debuginfo-3.8.3-150600.4.3.1 * libgnutls30-3.8.3-150600.4.3.1 * libgnutlsxx-devel-3.8.3-150600.4.3.1 * libgnutls-devel-3.8.3-150600.4.3.1 * Basesystem Module 15-SP6 (x86_64) * libgnutls30-32bit-3.8.3-150600.4.3.1 * libgnutls30-32bit-debuginfo-3.8.3-150600.4.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1226724 * https://bugzilla.suse.com/show_bug.cgi?id=1226731 * https://bugzilla.suse.com/show_bug.cgi?id=1226733 * https://bugzilla.suse.com/show_bug.cgi?id=1227642 * https://bugzilla.suse.com/show_bug.cgi?id=1227669 * https://bugzilla.suse.com/show_bug.cgi?id=1227670 * https://bugzilla.suse.com/show_bug.cgi?id=1227671 * https://bugzilla.suse.com/show_bug.cgi?id=1230166

1 0

SUSE-RU-2024:3847-1: moderate: Recommended update for tpm2-openssl
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Recommended update for tpm2-openssl Announcement ID: SUSE-RU-2024:3847-1 Release Date: 2024-10-31T10:07:28Z Rating: moderate References: * bsc#1222899 * jsc#PED-11053 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature and has one fix can now be installed. ## Description: This update for tpm2-openssl fixes the following issues: This update ships tpm2-openssl. (bsc#1222899, jsc#PED-11053) Added: * Added support for ECDH with a KDF, which is used by ECC-based CMS (S/MIME). * Added retrieval of OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY for EC keys and retrieval of TLS-GROUP provider capabilities to enable mTLS authentication (thanks to @rshearman). * Added mTLS example to documentation (thanks to @hoinmic). * Added missing RAND parameters: 'state' and 'strength' (thanks to @mccarey). * Added ability to run tests in a container (thanks to @afreof). * Added Visual Studio properties to simplify the Windows build (thanks to @philippun1). Changed: * Symmetric operations are disabled by default. In most situations these are not needed and cause a huge performance penalty. To enable, configure with --enable-op-digest or \--enable-op-cipher. Removed: * Removed unofficial support for tpm2-tss < 3.2.0, which do not support the openssl 3.x. Fixed: * Fixed key export: the private keys are not exportable, which shall fix some TPM-based sign operations (thanks to @fhars). * Fixed handle related operations on 32b machines (thanks to @dezgeg). * Fixed OSSL_FUNC_KEYMGMT_HAS operations with NULL keys. * Fixed a heap exception on some machines (thanks to @philippun1). * Fixed build warnings when building on the Fedora Linux. * In documentation and tests applied a correct order of providers (thanks to @hoinmic). * Modified documentation: the user-space resource manager (abrmd) is almost mandatory for complex scenarios such as SSL or X.509 operations. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3847=1 openSUSE-SLE-15.6-2024-3847=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3847=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * tpm2-openssl-1.2.0-150600.13.3.1 * tpm2-openssl-debuginfo-1.2.0-150600.13.3.1 * tpm2-openssl-debugsource-1.2.0-150600.13.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * tpm2-openssl-1.2.0-150600.13.3.1 * tpm2-openssl-debuginfo-1.2.0-150600.13.3.1 * tpm2-openssl-debugsource-1.2.0-150600.13.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1222899 * https://jira.suse.com/browse/PED-11053

1 0

SUSE-SU-2024:3853-1: moderate: Security update for uwsgi
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for uwsgi Announcement ID: SUSE-SU-2024:3853-1 Release Date: 2024-10-31T11:01:18Z Rating: moderate References: * bsc#1222332 Cross-References: * CVE-2024-24795 CVSS scores: * CVE-2024-24795 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for uwsgi fixes the following issues: * CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules (bsc#1222332) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3853=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3853=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3853=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * uwsgi-sqlite3-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-ldap-2.0.19.1-150300.3.3.1 * uwsgi-pypy-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-2.0.19.1-150300.3.3.1 * uwsgi-python3-2.0.19.1-150300.3.3.1 * uwsgi-glusterfs-2.0.19.1-150300.3.3.1 * uwsgi-libffi-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-pypy-2.0.19.1-150300.3.3.1 * uwsgi-emperor_pg-2.0.19.1-150300.3.3.1 * uwsgi-logzmq-2.0.19.1-150300.3.3.1 * uwsgi-xslt-2.0.19.1-150300.3.3.1 * uwsgi-emperor_zeromq-2.0.19.1-150300.3.3.1 * uwsgi-lua-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-sqlite3-2.0.19.1-150300.3.3.1 * uwsgi-python3-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-php7-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-jvm-2.0.19.1-150300.3.3.1 * uwsgi-php7-2.0.19.1-150300.3.3.1 * uwsgi-debugsource-2.0.19.1-150300.3.3.1 * uwsgi-greenlet-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-logzmq-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-emperor_zeromq-debuginfo-2.0.19.1-150300.3.3.1 * apache2-mod_uwsgi-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-libffi-2.0.19.1-150300.3.3.1 * uwsgi-python-2.0.19.1-150300.3.3.1 * uwsgi-psgi-2.0.19.1-150300.3.3.1 * uwsgi-lua-2.0.19.1-150300.3.3.1 * uwsgi-pam-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-gevent-2.0.19.1-150300.3.3.1 * uwsgi-psgi-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-emperor_pg-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-python-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-pam-2.0.19.1-150300.3.3.1 * uwsgi-xslt-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-greenlet-2.0.19.1-150300.3.3.1 * apache2-mod_uwsgi-2.0.19.1-150300.3.3.1 * uwsgi-glusterfs-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-gevent-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-jvm-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-ldap-debuginfo-2.0.19.1-150300.3.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * uwsgi-python-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-python-2.0.19.1-150300.3.3.1 * uwsgi-debugsource-2.0.19.1-150300.3.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * uwsgi-python-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-debuginfo-2.0.19.1-150300.3.3.1 * uwsgi-python-2.0.19.1-150300.3.3.1 * uwsgi-debugsource-2.0.19.1-150300.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24795.html * https://bugzilla.suse.com/show_bug.cgi?id=1222332

1 0

SUSE-SU-2024:3850-1: important: Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3850-1 Release Date: 2024-10-31T10:33:57Z Rating: important References: * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1227471 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35864 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3850=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3850=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_147-default-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-debuginfo-13-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_40-debugsource-13-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_147-preempt-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-preempt-13-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_147-default-13-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471

1 0

SUSE-SU-2024:3851-1: important: Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3851-1 Release Date: 2024-10-31T10:34:07Z Rating: important References: * bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 25 vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3851=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3851=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-8-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-8-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_25-debugsource-8-150400.9.8.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-8-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-8-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_25-debugsource-8-150400.9.8.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3852-1: important: Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3852-1 Release Date: 2024-10-31T10:34:17Z Rating: important References: * bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52340 * CVE-2023-52502 * CVE-2023-52752 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26622 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52340 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 30 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). * CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3852=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3852=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_10-debugsource-10-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-10-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-10-150500.11.8.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_10-debugsource-10-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-10-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-10-150500.11.8.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1219296 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220828 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3854-1: important: Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3854-1 Release Date: 2024-10-31T11:03:50Z Rating: important References: * bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225202 * bsc#1225211 * bsc#1225302 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225819 * bsc#1226325 * bsc#1227471 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-47291 * CVE-2021-47378 * CVE-2021-47383 * CVE-2021-47402 * CVE-2021-47598 * CVE-2023-1829 * CVE-2023-52752 * CVE-2024-26828 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35864 * CVE-2024-35950 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301) * CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225202). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3854=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3854=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_161-default-debuginfo-7-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_161-default-7-150300.7.6.1 * kernel-livepatch-SLE15-SP3_Update_44-debugsource-7-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_161-preempt-debuginfo-7-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_161-preempt-7-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_161-default-7-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47383.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225211 * https://bugzilla.suse.com/show_bug.cgi?id=1225302 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3855-1: important: Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3855-1 Release Date: 2024-10-31T11:33:37Z Rating: important References: * bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 21 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3855=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3855=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-8-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-8-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-8-150500.11.10.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-8-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-8-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-8-150500.11.10.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3838-1: important: Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3838-1 Release Date: 2024-10-31T07:33:43Z Rating: important References: * bsc#1225011 * bsc#1225012 * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1226327 * bsc#1227471 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3839=1 SUSE-2024-3841=1 SUSE-2024-3838=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3838=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-3839=1 SUSE-SLE-Module-Live- Patching-15-SP5-2024-3841=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_31-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_6-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-14-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_31-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_6-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-14-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471

1 0

SUSE-SU-2024:3840-1: important: Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3840-1 Release Date: 2024-10-30T21:46:10Z Rating: important References: * bsc#1223683 * bsc#1225099 * bsc#1225739 * bsc#1225819 * bsc#1227471 * bsc#1228349 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26923 * CVE-2024-36899 * CVE-2024-40909 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1228349). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3840=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3840=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_68-default-5-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_15-debugsource-5-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_68-default-debuginfo-5-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_68-default-5-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_15-debugsource-5-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_68-default-debuginfo-5-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-40909.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228349 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3842-1: important: Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
by OPENSUSE-UPDATES 31 Oct '24

31 Oct '24

# Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3842-1 Release Date: 2024-10-31T07:33:51Z Rating: important References: * bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52502 * CVE-2023-52752 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 26 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3842=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3842=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_52-default-8-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_11-debugsource-8-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-8-150500.11.6.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_52-default-8-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_11-debugsource-8-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-8-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3814-1: important: Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3814-1 Release Date: 2024-10-30T17:03:47Z Rating: important References: * bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223683 * bsc#1225013 * bsc#1225202 * bsc#1225211 * bsc#1225302 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225819 * bsc#1226325 * bsc#1227471 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-46955 * CVE-2021-47291 * CVE-2021-47378 * CVE-2021-47383 * CVE-2021-47402 * CVE-2021-47598 * CVE-2022-48651 * CVE-2023-1829 * CVE-2023-52752 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35864 * CVE-2024-35950 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves 21 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301) * CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225202). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3814=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3814=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_158-default-debuginfo-8-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_158-default-8-150300.7.6.1 * kernel-livepatch-SLE15-SP3_Update_43-debugsource-8-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_158-preempt-8-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_158-preempt-debuginfo-8-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_158-default-8-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47383.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225211 * https://bugzilla.suse.com/show_bug.cgi?id=1225302 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3815-1: important: Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3815-1 Release Date: 2024-10-30T17:03:57Z Rating: important References: * bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52502 * CVE-2023-52752 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 27 vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3815=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3815=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_24-debugsource-8-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-8-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-8-150400.9.6.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_24-debugsource-8-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-8-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-8-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3824-1: important: Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP5)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3824-1 Release Date: 2024-10-30T18:33:52Z Rating: important References: * bsc#1225011 * bsc#1225012 * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1226327 * bsc#1227471 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_30 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3825=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-3826=1 SUSE-SLE-Module-Live- Patching-15-SP5-2024-3827=1 SUSE-SLE-Module-Live-Patching-15-SP5-2024-3828=1 SUSE-SLE-Module-Live-Patching-15-SP5-2024-3824=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3826=1 SUSE-2024-3827=1 SUSE-2024-3828=1 SUSE-2024-3824=1 SUSE-2024-3825=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_7-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_13_30-rt-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_13_30-rt-12-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_5-debugsource-15-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-debuginfo-15-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-14-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-14-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_9-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_13_27-rt-13-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_8-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_13_27-rt-debuginfo-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-debuginfo-14-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_6-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-15-150500.2.1 * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_7-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_13_30-rt-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_13_30-rt-12-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_5-debugsource-15-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-debuginfo-15-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-14-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-14-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_9-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_13_27-rt-13-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_8-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_13_27-rt-debuginfo-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_24-rt-debuginfo-14-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_6-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_13_18-rt-15-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471

1 0

SUSE-SU-2024:3829-1: important: Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3829-1 Release Date: 2024-10-30T18:33:58Z Rating: important References: * bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52340 * CVE-2023-52502 * CVE-2023-52752 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26622 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52340 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 30 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). * CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3829=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3829=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_35-rt-10-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_35-rt-debuginfo-10-150500.11.8.1 * kernel-livepatch-SLE15-SP5-RT_Update_10-debugsource-10-150500.11.8.1 * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_35-rt-10-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_35-rt-debuginfo-10-150500.11.8.1 * kernel-livepatch-SLE15-SP5-RT_Update_10-debugsource-10-150500.11.8.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1219296 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220828 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3830-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3830-1 Release Date: 2024-10-30T18:34:04Z Rating: important References: * bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 21 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3830=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3830=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_47-rt-8-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo-8-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource-8-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_47-rt-8-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo-8-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource-8-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3831-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP5)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3831-1 Release Date: 2024-10-30T18:34:15Z Rating: important References: * bsc#1223363 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225311 * bsc#1225312 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26828 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_55 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3831=1 SUSE-2024-3832=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3831=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-3832=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_55-rt-debuginfo-6-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_15-debugsource-6-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_52-rt-debuginfo-6-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_55-rt-6-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_14-debugsource-6-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_52-rt-6-150500.11.8.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_55-rt-debuginfo-6-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_15-debugsource-6-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_52-rt-debuginfo-6-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_55-rt-6-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_14-debugsource-6-150500.11.8.1 * kernel-livepatch-5_14_21-150500_13_52-rt-6-150500.11.8.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3833-1: important: Security update for the Linux Kernel RT (Live Patch 16 for SLE 15 SP5)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel RT (Live Patch 16 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3833-1 Release Date: 2024-10-30T18:34:21Z Rating: important References: * bsc#1223683 * bsc#1225099 * bsc#1225739 * bsc#1225819 * bsc#1227471 * bsc#1228349 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26923 * CVE-2024-36899 * CVE-2024-40909 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_58 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1228349). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3833=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3833=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_58-rt-5-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_58-rt-debuginfo-5-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_16-debugsource-5-150500.11.6.1 * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_58-rt-5-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_58-rt-debuginfo-5-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_16-debugsource-5-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-40909.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228349 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3836-1: important: Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3836-1 Release Date: 2024-10-30T19:03:45Z Rating: important References: * bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves three vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3836=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3836=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_125-default-3-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_28-debugsource-3-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_125-default-debuginfo-3-150400.9.6.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_125-default-3-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_28-debugsource-3-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_125-default-debuginfo-3-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3837-1: important: Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3837-1 Release Date: 2024-10-30T19:03:55Z Rating: important References: * bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52502 * CVE-2023-52752 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 26 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3837=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3837=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_38-rt-debuginfo-8-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_38-rt-8-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_11-debugsource-8-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_38-rt-debuginfo-8-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_38-rt-8-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_11-debugsource-8-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

openSUSE-SU-2024:0342-1: moderate: Security update for lxc
by opensuse-security＠opensuse.org 30 Oct '24

30 Oct '24

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0342-1 Rating: moderate References: #1204842 #1206779 Cross-References: CVE-2022-47952 CVSS scores: CVE-2022-47952 (SUSE): 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for lxc fixes the following issues: lxc was updated to 6.0.2: The LXC team is pleased to announce the release of LXC 6.0.2! This is the second bugfix release for LXC 6.0 which is supported until June 2029. As usual this bugfix releases focus on stability and hardening. * Some of the highlights for this release are: - Reduced log level on some common messages - Fix compilation error on aarch64 * Detailed changelog - Remove unused function - idmap: Lower logging level of newXidmap tools to INFO - Exit 0 when there's no error - doc: Fix definitions of get_config_path and set_config_path - README: Update security contact - fix possible clang compile error in AARCH Update to 6.0.1: The LXC team is pleased to announce the release of LXC 6.0.1! This is the first bugfix release for LXC 6.0 which is supported until June 2029. As usual this bugfix releases focus on stability and hardening. * Highlights - Fixed some build tooling issues - Fixed startup failures on system without IPv6 support - Updated AppArmor rules to avoid potential warnings Update to 6.0.0: The LXC team is pleased to announce the release of LXC 6.0 LTS! This is the result of two years of work since the LXC 5.0 release and is the sixth LTS release for the LXC project. This release will be supported until June 2029. * New multi-call binary¶ A new tools-multicall=true configuration option can be used to produce a single lxc binary which can then have all other lxc-XYZ commands be symlinked to. This allows for a massive disk space reduction, particularly useful for embedded platforms. * Add a set_timeout function to the library A new set_timeout function is available on the main lxc_container struct and allow for setting a global timeout for interactions with the LXC monitor. Prior to this, there was no timeout, leading to potential deadlocks as there's also no way to cancel an monitor request. As a result of adding this new symbol to the library, we have bumped the liblxc symbol version to 1.8.0. * LXC bridge now has IPV6 enabled The default lxcbr0 bridge now comes with IPv6 enabled by default, using an IPv6 ULA subnet. Support for uid/gid selection in lxc-usernsexec The lxc-usernsexec tool now has both -u and -g options to control what resulting UID and GID (respectively) the user wishes to use (defaulting to 0/0). * Improvements to lxc-checkconfig lxc-checkconfig now only shows the version if lxc-start is present (rather than failing). Additionally, it's seen a number of other cosmetic improvements as well as now listing the maximum number of allowed namespaces for every namespace type. * Support for squashfs OCI images The built-in oci container template can now handle squashfs compressed OCI images through the use of atomfs. * Switched from systemd's dbus to dbus-1 LXC now uses libdbus-1 for DBus interactions with systemd rather than using libsystemd. The reason for this change is that libdbus-1 is readily available for static builds. * Removed Upstart support Support for the Upstart init system has finally been removed from LXC. This shouldn't really affect anyone at this stage and allowed for cleaning up some logic and config files from our repository. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-342=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-342=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): liblxc-devel-6.0.2-bp156.2.3.1 liblxc1-6.0.2-bp156.2.3.1 lxc-6.0.2-bp156.2.3.1 pam_cgfs-6.0.2-bp156.2.3.1 - openSUSE Backports SLE-15-SP6 (noarch): lxc-bash-completion-6.0.2-bp156.2.3.1 lxc-ja-doc-6.0.2-bp156.2.3.1 lxc-ko-doc-6.0.2-bp156.2.3.1 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): liblxc-devel-6.0.2-bp155.4.3.1 liblxc1-6.0.2-bp155.4.3.1 liblxc1-debuginfo-6.0.2-bp155.4.3.1 lxc-6.0.2-bp155.4.3.1 lxc-debuginfo-6.0.2-bp155.4.3.1 lxc-debugsource-6.0.2-bp155.4.3.1 pam_cgfs-6.0.2-bp155.4.3.1 pam_cgfs-debuginfo-6.0.2-bp155.4.3.1 - openSUSE Backports SLE-15-SP5 (noarch): lxc-bash-completion-6.0.2-bp155.4.3.1 lxc-ja-doc-6.0.2-bp155.4.3.1 lxc-ko-doc-6.0.2-bp155.4.3.1 References: https://www.suse.com/security/cve/CVE-2022-47952.html https://bugzilla.suse.com/1204842 https://bugzilla.suse.com/1206779

1 0

openSUSE-SU-2024:0343-1: moderate: Security update for Botan
by opensuse-security＠opensuse.org 30 Oct '24

30 Oct '24

openSUSE Security Update: Security update for Botan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0343-1 Rating: moderate References: #1232296 #1232297 #1232300 #1232301 Cross-References: CVE-2024-50382 CVE-2024-50383 CVSS scores: CVE-2024-50382 (SUSE): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVE-2024-50383 (SUSE): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for Botan fixes the following issues: - Fixed CVE-2024-50382, CVE-2024-50383 - various compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-343=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-343=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): Botan-2.19.5-bp156.3.6.1 Botan-debuginfo-2.19.5-bp156.3.6.1 Botan-debugsource-2.19.5-bp156.3.6.1 libbotan-2-19-2.19.5-bp156.3.6.1 libbotan-2-19-debuginfo-2.19.5-bp156.3.6.1 libbotan-devel-2.19.5-bp156.3.6.1 python3-botan-2.19.5-bp156.3.6.1 - openSUSE Backports SLE-15-SP6 (aarch64_ilp32): libbotan-2-19-64bit-2.19.5-bp156.3.6.1 libbotan-2-19-64bit-debuginfo-2.19.5-bp156.3.6.1 libbotan-devel-64bit-2.19.5-bp156.3.6.1 - openSUSE Backports SLE-15-SP6 (x86_64): libbotan-2-19-32bit-2.19.5-bp156.3.6.1 libbotan-2-19-32bit-debuginfo-2.19.5-bp156.3.6.1 libbotan-devel-32bit-2.19.5-bp156.3.6.1 - openSUSE Backports SLE-15-SP6 (noarch): Botan-doc-2.19.5-bp156.3.6.1 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): Botan-2.19.5-bp155.2.6.1 libbotan-2-19-2.19.5-bp155.2.6.1 libbotan-devel-2.19.5-bp155.2.6.1 python3-botan-2.19.5-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): libbotan-2-19-64bit-2.19.5-bp155.2.6.1 libbotan-devel-64bit-2.19.5-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): Botan-doc-2.19.5-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (x86_64): libbotan-2-19-32bit-2.19.5-bp155.2.6.1 libbotan-devel-32bit-2.19.5-bp155.2.6.1 References: https://www.suse.com/security/cve/CVE-2024-50382.html https://www.suse.com/security/cve/CVE-2024-50383.html https://bugzilla.suse.com/1232296 https://bugzilla.suse.com/1232297 https://bugzilla.suse.com/1232300 https://bugzilla.suse.com/1232301

1 0

SUSE-SU-2024:3809-1: moderate: Security update for go1.21-openssl
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for go1.21-openssl Announcement ID: SUSE-SU-2024:3809-1 Release Date: 2024-10-30T15:08:02Z Rating: moderate References: * bsc#1230252 * bsc#1230253 * bsc#1230254 * jsc#SLE-18320 Cross-References: * CVE-2024-34155 * CVE-2024-34156 * CVE-2024-34158 CVSS scores: * CVE-2024-34155 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34156 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34156 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34158 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34158 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities and contains one feature can now be installed. ## Description: This update for go1.21-openssl fixes the following issues: * CVE-2024-34158: Fixed stack exhaustion in Parse in go/build/constraint (bsc#1230254). * CVE-2024-34156: Fixed stack exhaustion in Decoder.Decode in encoding/gob (bsc#1230253). * CVE-2024-34155: Fixed stack exhaustion in all Parse* functions (bsc#1230252). * Update to version 1.21.13.3 cut from the go1.21-fips-release (jsc#SLE-18320). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3809=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3809=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-doc-1.21.13.4-150000.1.14.1 * go1.21-openssl-1.21.13.4-150000.1.14.1 * go1.21-openssl-race-1.21.13.4-150000.1.14.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-doc-1.21.13.4-150000.1.14.1 * go1.21-openssl-1.21.13.4-150000.1.14.1 * go1.21-openssl-race-1.21.13.4-150000.1.14.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34155.html * https://www.suse.com/security/cve/CVE-2024-34156.html * https://www.suse.com/security/cve/CVE-2024-34158.html * https://bugzilla.suse.com/show_bug.cgi?id=1230252 * https://bugzilla.suse.com/show_bug.cgi?id=1230253 * https://bugzilla.suse.com/show_bug.cgi?id=1230254 * https://jira.suse.com/browse/SLE-18320

1 0

SUSE-SU-2024:3810-1: moderate: Security update for python-Werkzeug
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for python-Werkzeug Announcement ID: SUSE-SU-2024:3810-1 Release Date: 2024-10-30T15:33:55Z Rating: moderate References: * bsc#1232449 Cross-References: * CVE-2024-49767 CVSS scores: * CVE-2024-49767 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-49767 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-49767 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Python 3 Module 15-SP5 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for python-Werkzeug fixes the following issues: * CVE-2024-49767: Fixed possible resource exhaustion when parsing file data in forms (bsc#1232449). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3810=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3810=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3810=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-3810=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-3810=1 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-Werkzeug-2.3.6-150400.6.12.1 * openSUSE Leap 15.5 (noarch) * python311-Werkzeug-2.3.6-150400.6.12.1 * openSUSE Leap 15.6 (noarch) * python311-Werkzeug-2.3.6-150400.6.12.1 * Python 3 Module 15-SP5 (noarch) * python311-Werkzeug-2.3.6-150400.6.12.1 * Python 3 Module 15-SP6 (noarch) * python311-Werkzeug-2.3.6-150400.6.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-49767.html * https://bugzilla.suse.com/show_bug.cgi?id=1232449

1 0

SUSE-SU-2024:3811-1: moderate: Security update for govulncheck-vulndb
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for govulncheck-vulndb Announcement ID: SUSE-SU-2024:3811-1 Release Date: 2024-10-30T15:34:13Z Rating: moderate References: * jsc#PED-11136 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that contains one feature can now be installed. ## Description: This update for govulncheck-vulndb fixes the following issues: * Update to version 0.0.20241028T152002 2024-10-28T15:20:02Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated: * GO-2024-3207 * GO-2024-3208 * GO-2024-3210 * GO-2024-3211 * GO-2024-3212 * GO-2024-3213 * GO-2024-3214 * GO-2024-3215 * GO-2024-3216 * GO-2024-3217 * GO-2024-3219 * GO-2024-3220 * GO-2024-3221 * GO-2024-3222 * GO-2024-3223 * GO-2024-3224 * Update to version 0.0.20241017T153730 date 2024-10-17T15:37:30Z. Go CVE Numbering Authority IDs added or updated: * GO-2024-3189 * GO-2024-3203 * GO-2024-3204 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3811=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3811=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3811=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3811=1 ## Package List: * openSUSE Leap 15.5 (noarch) * govulncheck-vulndb-0.0.20241028T152002-150000.1.6.1 * openSUSE Leap 15.6 (noarch) * govulncheck-vulndb-0.0.20241028T152002-150000.1.6.1 * SUSE Package Hub 15 15-SP5 (noarch) * govulncheck-vulndb-0.0.20241028T152002-150000.1.6.1 * SUSE Package Hub 15 15-SP6 (noarch) * govulncheck-vulndb-0.0.20241028T152002-150000.1.6.1 ## References: * https://jira.suse.com/browse/PED-11136

1 0

SUSE-RU-2024:3812-1: moderate: Recommended update for protobuf
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Recommended update for protobuf Announcement ID: SUSE-RU-2024:3812-1 Release Date: 2024-10-30T15:34:51Z Rating: moderate References: * jsc#PED-3967 Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that contains one feature can now be installed. ## Description: This update for protobuf fixes the following issues: * Build the java part with maven, so that we create artifacts that correspond to upstream distributed ones. * Add maven artifact metadata to the protoc binary * Package also the bom and pom artifacts ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3812=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3812=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3812=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-3812=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3812=1 openSUSE-SLE-15.6-2024-3812=1 ## Package List: * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-25.1-150600.16.10.1 * libprotobuf25_1_0-25.1-150600.16.10.1 * libprotoc25_1_0-25.1-150600.16.10.1 * libprotobuf25_1_0-debuginfo-25.1-150600.16.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150600.16.10.1 * libprotoc25_1_0-debuginfo-25.1-150600.16.10.1 * protobuf-debugsource-25.1-150600.16.10.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-devel-25.1-150600.16.10.1 * protobuf-devel-debuginfo-25.1-150600.16.10.1 * protobuf-debugsource-25.1-150600.16.10.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150600.16.10.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-protobuf-4.25.1-150600.16.10.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * protobuf-devel-25.1-150600.16.10.1 * libprotobuf-lite25_1_0-25.1-150600.16.10.1 * libprotobuf25_1_0-25.1-150600.16.10.1 * libprotoc25_1_0-25.1-150600.16.10.1 * python311-protobuf-4.25.1-150600.16.10.1 * libprotobuf25_1_0-debuginfo-25.1-150600.16.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150600.16.10.1 * protobuf-devel-debuginfo-25.1-150600.16.10.1 * libprotoc25_1_0-debuginfo-25.1-150600.16.10.1 * protobuf-debugsource-25.1-150600.16.10.1 * openSUSE Leap 15.6 (x86_64) * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150600.16.10.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150600.16.10.1 * libprotobuf-lite25_1_0-32bit-25.1-150600.16.10.1 * libprotobuf25_1_0-32bit-25.1-150600.16.10.1 * libprotoc25_1_0-32bit-25.1-150600.16.10.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150600.16.10.1 * openSUSE Leap 15.6 (noarch) * protobuf-java-bom-25.1-150600.16.10.1 * protobuf-java-parent-25.1-150600.16.10.1 * protobuf-java-25.1-150600.16.10.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libprotobuf25_1_0-64bit-debuginfo-25.1-150600.16.10.1 * libprotobuf-lite25_1_0-64bit-25.1-150600.16.10.1 * libprotoc25_1_0-64bit-25.1-150600.16.10.1 * libprotobuf25_1_0-64bit-25.1-150600.16.10.1 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150600.16.10.1 * libprotoc25_1_0-64bit-debuginfo-25.1-150600.16.10.1 ## References: * https://jira.suse.com/browse/PED-3967

1 0

SUSE-RU-2024:3813-1: moderate: Recommended update for libnvme, nvme-cli
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Recommended update for libnvme, nvme-cli Announcement ID: SUSE-RU-2024:3813-1 Release Date: 2024-10-30T15:45:07Z Rating: moderate References: * bsc#1229193 * bsc#1229677 * bsc#1231668 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has three fixes can now be installed. ## Description: This update for libnvme, nvme-cli fixes the following issues: * Version update 1.8+50.g2b587d3: * fabrics: fix incorrect access filename check (bsc#1231668) * fabrics: check if json config is existing (bsc#1231668) * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668) * ioctl: export nvme_submit_passthru as weak symbol (bsc#1231668) * logging: Split to output ioctl latency by log info level (bsc#1231668) * logging: output ioctl debugging info (bsc#1231668) * netapp: print output for single device too (bsc#1231668) * netapp: segregate print routines (bsc#1231668) * netapp: fix uninitialized value from heap error (bsc#1231668) * netapp-smdevices: print single device output too (bsc#1231668) * netapp-smdevices: segregate print routines (bsc#1231668) * nvme: fix uninitialized value in error-log (bsc#1231668) * nvme: fix verbose logging (bsc#1231668) * nvme: track verbose level (bsc#1231668) * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668) * nvme-print: sanitize error-log output (bsc#1231668) * nvme-print: update subsys verbose outputs (bsc#1231668) * nvme-print: add subsystype to the list-subsys output (bsc#1231668) * nvme-print-stdout: refactor subsys config (bsc#1231668) * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668) * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668) * plugins/sed: add sid password change (bsc#1229677) * tree: fix segfault in nvme_free_tree() (bsc#1231668) * tree: fix tls key mem leak (bsc#1231668) * tree: fix dhchap_ctrl_key mem leak (bsc#1231668) * tree: fix dhchap_key mem leak (bsc#1231668) * tree: handle no address phy slot dirs (bsc#1229193) * types: add new fields added in TP4165 (bsc#1231668) * types: Changed the space into tap space (bsc#1231668) * types: add new field added in TP4090 (bsc#1231668) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3813=1 openSUSE-SLE-15.6-2024-3813=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3813=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libnvme-devel-1.8+50.g2b587d3-150600.3.9.2 * libnvme-mi1-1.8+50.g2b587d3-150600.3.9.2 * libnvme1-1.8+50.g2b587d3-150600.3.9.2 * python3-libnvme-debuginfo-1.8+50.g2b587d3-150600.3.9.2 * libnvme-debugsource-1.8+50.g2b587d3-150600.3.9.2 * nvme-cli-2.8+65.gae2c271-150600.3.9.2 * nvme-cli-debuginfo-2.8+65.gae2c271-150600.3.9.2 * libnvme1-debuginfo-1.8+50.g2b587d3-150600.3.9.2 * python3-libnvme-1.8+50.g2b587d3-150600.3.9.2 * nvme-cli-debugsource-2.8+65.gae2c271-150600.3.9.2 * libnvme-mi1-debuginfo-1.8+50.g2b587d3-150600.3.9.2 * libnvme-debuginfo-1.8+50.g2b587d3-150600.3.9.2 * openSUSE Leap 15.6 (noarch) * nvme-cli-zsh-completion-2.8+65.gae2c271-150600.3.9.2 * nvme-cli-regress-script-2.8+65.gae2c271-150600.3.9.2 * nvme-cli-bash-completion-2.8+65.gae2c271-150600.3.9.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libnvme-devel-1.8+50.g2b587d3-150600.3.9.2 * libnvme-mi1-1.8+50.g2b587d3-150600.3.9.2 * libnvme1-1.8+50.g2b587d3-150600.3.9.2 * nvme-cli-2.8+65.gae2c271-150600.3.9.2 * libnvme-debugsource-1.8+50.g2b587d3-150600.3.9.2 * nvme-cli-debuginfo-2.8+65.gae2c271-150600.3.9.2 * python3-libnvme-debuginfo-1.8+50.g2b587d3-150600.3.9.2 * libnvme1-debuginfo-1.8+50.g2b587d3-150600.3.9.2 * python3-libnvme-1.8+50.g2b587d3-150600.3.9.2 * nvme-cli-debugsource-2.8+65.gae2c271-150600.3.9.2 * libnvme-mi1-debuginfo-1.8+50.g2b587d3-150600.3.9.2 * libnvme-debuginfo-1.8+50.g2b587d3-150600.3.9.2 * Basesystem Module 15-SP6 (noarch) * nvme-cli-zsh-completion-2.8+65.gae2c271-150600.3.9.2 * nvme-cli-bash-completion-2.8+65.gae2c271-150600.3.9.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1229193 * https://bugzilla.suse.com/show_bug.cgi?id=1229677 * https://bugzilla.suse.com/show_bug.cgi?id=1231668

1 0

SUSE-SU-2024:3805-1: important: Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3805-1 Release Date: 2024-10-30T13:33:56Z Rating: important References: * bsc#1225011 * bsc#1225012 * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1227471 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves six vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_103 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3805=1 SUSE-2024-3801=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3805=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-3801=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-15-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_18-debugsource-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-debuginfo-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_22-debugsource-11-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-15-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_18-debugsource-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-debuginfo-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_22-debugsource-11-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3804-1: important: Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3804-1 Release Date: 2024-10-30T13:33:49Z Rating: important References: * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1227471 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35864 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3804=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3804=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_144-default-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-13-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_39-debugsource-13-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_144-preempt-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-preempt-13-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_144-default-13-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471

1 0

SUSE-SU-2024:3806-1: important: Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3806-1 Release Date: 2024-10-30T13:34:06Z Rating: important References: * bsc#1223059 * bsc#1223363 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 20 vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3806=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3806=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-7-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-7-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_26-debugsource-7-150400.9.6.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-7-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-7-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_26-debugsource-7-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3787-1: important: Security update for xorg-x11-server
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2024:3787-1 Release Date: 2024-10-30T08:18:52Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3787=1 openSUSE-SLE-15.6-2024-3787=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3787=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3787=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * xorg-x11-server-21.1.11-150600.5.3.1 * xorg-x11-server-debugsource-21.1.11-150600.5.3.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.3.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.3.1 * xorg-x11-server-extra-21.1.11-150600.5.3.1 * xorg-x11-server-source-21.1.11-150600.5.3.1 * xorg-x11-server-sdk-21.1.11-150600.5.3.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.3.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-21.1.11-150600.5.3.1 * xorg-x11-server-debugsource-21.1.11-150600.5.3.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.3.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.3.1 * xorg-x11-server-extra-21.1.11-150600.5.3.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.3.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debugsource-21.1.11-150600.5.3.1 * xorg-x11-server-sdk-21.1.11-150600.5.3.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0

SUSE-SU-2024:3788-1: important: Security update for xorg-x11-server
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2024:3788-1 Release Date: 2024-10-30T08:19:15Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3788=1 openSUSE-SLE-15.5-2024-3788=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3788=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3788=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * xorg-x11-server-sdk-21.1.4-150500.7.29.1 * xorg-x11-server-extra-21.1.4-150500.7.29.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.29.1 * xorg-x11-server-debugsource-21.1.4-150500.7.29.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-21.1.4-150500.7.29.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-source-21.1.4-150500.7.29.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-21.1.4-150500.7.29.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.29.1 * xorg-x11-server-debugsource-21.1.4-150500.7.29.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-21.1.4-150500.7.29.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.29.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debugsource-21.1.4-150500.7.29.1 * xorg-x11-server-sdk-21.1.4-150500.7.29.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.29.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0

SUSE-SU-2024:3789-1: important: Security update for xwayland
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for xwayland Announcement ID: SUSE-SU-2024:3789-1 Release Date: 2024-10-30T08:19:26Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3789=1 openSUSE-SLE-15.6-2024-3789=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-3789=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * xwayland-debugsource-24.1.1-150600.5.6.1 * xwayland-debuginfo-24.1.1-150600.5.6.1 * xwayland-24.1.1-150600.5.6.1 * xwayland-devel-24.1.1-150600.5.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * xwayland-debugsource-24.1.1-150600.5.6.1 * xwayland-debuginfo-24.1.1-150600.5.6.1 * xwayland-24.1.1-150600.5.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0

SUSE-SU-2024:3790-1: important: Security update for xwayland
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for xwayland Announcement ID: SUSE-SU-2024:3790-1 Release Date: 2024-10-30T08:19:42Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3790=1 SUSE-2024-3790=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-3790=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * xwayland-debuginfo-22.1.5-150500.7.25.1 * xwayland-devel-22.1.5-150500.7.25.1 * xwayland-22.1.5-150500.7.25.1 * xwayland-debugsource-22.1.5-150500.7.25.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * xwayland-debuginfo-22.1.5-150500.7.25.1 * xwayland-22.1.5-150500.7.25.1 * xwayland-debugsource-22.1.5-150500.7.25.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0