- openSUSE Updates

SUSE-SU-2024:3804-1: important: Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3804-1 Release Date: 2024-10-30T13:33:49Z Rating: important References: * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1227471 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35864 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3804=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3804=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_144-default-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-13-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_39-debugsource-13-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_144-preempt-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-preempt-13-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_144-default-13-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471

1 0

SUSE-SU-2024:3806-1: important: Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3806-1 Release Date: 2024-10-30T13:34:06Z Rating: important References: * bsc#1223059 * bsc#1223363 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 20 vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3806=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3806=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-7-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-7-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_26-debugsource-7-150400.9.6.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-7-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-7-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_26-debugsource-7-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3787-1: important: Security update for xorg-x11-server
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2024:3787-1 Release Date: 2024-10-30T08:18:52Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3787=1 openSUSE-SLE-15.6-2024-3787=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3787=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3787=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * xorg-x11-server-21.1.11-150600.5.3.1 * xorg-x11-server-debugsource-21.1.11-150600.5.3.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.3.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.3.1 * xorg-x11-server-extra-21.1.11-150600.5.3.1 * xorg-x11-server-source-21.1.11-150600.5.3.1 * xorg-x11-server-sdk-21.1.11-150600.5.3.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.3.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-21.1.11-150600.5.3.1 * xorg-x11-server-debugsource-21.1.11-150600.5.3.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.3.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.3.1 * xorg-x11-server-extra-21.1.11-150600.5.3.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.3.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debugsource-21.1.11-150600.5.3.1 * xorg-x11-server-sdk-21.1.11-150600.5.3.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0

SUSE-SU-2024:3788-1: important: Security update for xorg-x11-server
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for xorg-x11-server Announcement ID: SUSE-SU-2024:3788-1 Release Date: 2024-10-30T08:19:15Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3788=1 openSUSE-SLE-15.5-2024-3788=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3788=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3788=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * xorg-x11-server-sdk-21.1.4-150500.7.29.1 * xorg-x11-server-extra-21.1.4-150500.7.29.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.29.1 * xorg-x11-server-debugsource-21.1.4-150500.7.29.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-21.1.4-150500.7.29.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-source-21.1.4-150500.7.29.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-21.1.4-150500.7.29.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.29.1 * xorg-x11-server-debugsource-21.1.4-150500.7.29.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.29.1 * xorg-x11-server-21.1.4-150500.7.29.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.29.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debugsource-21.1.4-150500.7.29.1 * xorg-x11-server-sdk-21.1.4-150500.7.29.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.29.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0

SUSE-SU-2024:3789-1: important: Security update for xwayland
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for xwayland Announcement ID: SUSE-SU-2024:3789-1 Release Date: 2024-10-30T08:19:26Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3789=1 openSUSE-SLE-15.6-2024-3789=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-3789=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * xwayland-debugsource-24.1.1-150600.5.6.1 * xwayland-debuginfo-24.1.1-150600.5.6.1 * xwayland-24.1.1-150600.5.6.1 * xwayland-devel-24.1.1-150600.5.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * xwayland-debugsource-24.1.1-150600.5.6.1 * xwayland-debuginfo-24.1.1-150600.5.6.1 * xwayland-24.1.1-150600.5.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0

SUSE-SU-2024:3790-1: important: Security update for xwayland
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for xwayland Announcement ID: SUSE-SU-2024:3790-1 Release Date: 2024-10-30T08:19:42Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3790=1 SUSE-2024-3790=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-3790=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * xwayland-debuginfo-22.1.5-150500.7.25.1 * xwayland-devel-22.1.5-150500.7.25.1 * xwayland-22.1.5-150500.7.25.1 * xwayland-debugsource-22.1.5-150500.7.25.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * xwayland-debuginfo-22.1.5-150500.7.25.1 * xwayland-22.1.5-150500.7.25.1 * xwayland-debugsource-22.1.5-150500.7.25.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0

SUSE-SU-2024:3791-1: important: Security update for xwayland
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for xwayland Announcement ID: SUSE-SU-2024:3791-1 Release Date: 2024-10-30T08:19:49Z Rating: important References: * bsc#1231565 Cross-References: * CVE-2024-9632 CVSS scores: * CVE-2024-9632 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9632 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 An update that solves one vulnerability can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3791=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3791=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * xwayland-21.1.4-150400.3.39.1 * xwayland-debugsource-21.1.4-150400.3.39.1 * xwayland-debuginfo-21.1.4-150400.3.39.1 * xwayland-devel-21.1.4-150400.3.39.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * xwayland-21.1.4-150400.3.39.1 * xwayland-debugsource-21.1.4-150400.3.39.1 * xwayland-debuginfo-21.1.4-150400.3.39.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9632.html * https://bugzilla.suse.com/show_bug.cgi?id=1231565

1 0

SUSE-SU-2024:3799-1: important: Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3799-1 Release Date: 2024-10-30T11:33:51Z Rating: important References: * bsc#1225011 * bsc#1225012 * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1227471 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves six vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_97 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3799=1 SUSE-2024-3792=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3799=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-3792=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_20-debugsource-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-14-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_20-debugsource-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-14-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3793-1: important: Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3793-1 Release Date: 2024-10-30T09:04:17Z Rating: important References: * bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52340 * CVE-2023-52502 * CVE-2023-52752 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26622 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52340 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 29 vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). * CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3793=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3793=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_108-default-10-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_108-default-debuginfo-10-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_23-debugsource-10-150400.9.8.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_108-default-10-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_108-default-debuginfo-10-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_23-debugsource-10-150400.9.8.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1219296 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220828 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3797-1: important: Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3797-1 Release Date: 2024-10-30T11:04:16Z Rating: important References: * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1227471 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35864 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_141 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3797=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3797=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_38-debugsource-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-debuginfo-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-14-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_141-preempt-debuginfo-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-preempt-14-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_141-default-14-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471

1 0

SUSE-SU-2024:3798-1: important: Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3798-1 Release Date: 2024-10-30T11:33:45Z Rating: important References: * bsc#1210619 * bsc#1218487 * bsc#1220145 * bsc#1220537 * bsc#1221302 * bsc#1222685 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223683 * bsc#1225013 * bsc#1225202 * bsc#1225211 * bsc#1225302 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225819 * bsc#1226325 * bsc#1227471 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-46955 * CVE-2021-47291 * CVE-2021-47378 * CVE-2021-47383 * CVE-2021-47402 * CVE-2021-47598 * CVE-2022-48651 * CVE-2023-1829 * CVE-2023-52752 * CVE-2023-6531 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35864 * CVE-2024-35950 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves 23 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301) * CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225202). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3798=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3798=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_153-default-9-150300.7.6.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_153-default-debuginfo-9-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_153-default-9-150300.7.6.1 * kernel-livepatch-SLE15-SP3_Update_42-debugsource-9-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_153-preempt-debuginfo-9-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_153-preempt-9-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47383.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1218487 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225211 * https://bugzilla.suse.com/show_bug.cgi?id=1225302 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3785-1: important: Security update for pcp
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for pcp Announcement ID: SUSE-SU-2024:3785-1 Release Date: 2024-10-30T07:56:18Z Rating: important References: * bsc#1217826 * bsc#1222815 * bsc#1230551 * bsc#1230552 * bsc#1231345 * jsc#PED-8192 * jsc#PED-8389 Cross-References: * CVE-2023-6917 * CVE-2024-45769 * CVE-2024-45770 CVSS scores: * CVE-2023-6917 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-45769 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-45769 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45769 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45770 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2024-45770 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N * CVE-2024-45770 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities, contains two features and has two security fixes can now be installed. ## Description: This update for pcp fixes the following issues: pcp was updated from version 5.2.5 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389): * Security issues fixed: * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user (bsc#1230552) * CVE-2024-45769: Fixed a heap corruption through metric pmstore operations (bsc#1230551) * CVE-2023-6917: Fixed local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy (bsc#1217826) * Major changes: * Add version 3 PCP archive support: instance domain change-deltas, Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary timezones support, 64-bit file offsets used throughout for larger (beyond 2GB) individual volumes * Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting * Version 2 archives remain the default (for next few years) * Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR); this impacts on libpcp, PMAPI clients and PMCD use of encryption; these are now configured and used consistently with pmproxy HTTPS support and redis- server, which were both already using OpenSSL. * New nanosecond precision timestamp PMAPI calls for PCP library interfaces that make use of timestamps These are all optional, and full backward compatibility is preserved for existing tools. * For the full list of changes please consult the packaged CHANGELOG file * Other packaging changes: * Moved pmlogger_daily into the main package (bsc#1222815) * Change dependency from openssl-devel >= 1.1.1 to openssl-devel >= 1.0.2p. Required for SLE-12 * Introduce 'pmda-resctrl' package, disabled for architectures other than x86_64 * Change the architecture for various subpackages to 'noarch' as they contain no binaries * Disable 'pmda-mssql', as it fails to build ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3785=1 openSUSE-SLE-15.5-2024-3785=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3785=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * pcp-pmda-gfs2-debuginfo-6.2.0-150500.8.6.1 * pcp-system-tools-debuginfo-6.2.0-150500.8.6.1 * libpcp-devel-6.2.0-150500.8.6.1 * libpcp_trace2-6.2.0-150500.8.6.1 * perl-PCP-LogImport-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-cisco-6.2.0-150500.8.6.1 * pcp-testsuite-6.2.0-150500.8.6.1 * libpcp_import1-6.2.0-150500.8.6.1 * pcp-pmda-bash-6.2.0-150500.8.6.1 * pcp-gui-debuginfo-6.2.0-150500.8.6.1 * python3-pcp-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-bind2-6.2.0-150500.8.6.1 * pcp-pmda-logger-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-shping-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-roomtemp-6.2.0-150500.8.6.1 * pcp-pmda-shping-6.2.0-150500.8.6.1 * pcp-pmda-gfs2-6.2.0-150500.8.6.1 * pcp-pmda-apache-debuginfo-6.2.0-150500.8.6.1 * pcp-devel-6.2.0-150500.8.6.1 * pcp-pmda-zimbra-6.2.0-150500.8.6.1 * pcp-testsuite-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-mailq-debuginfo-6.2.0-150500.8.6.1 * pcp-import-collectl2pcp-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-nvidia-gpu-6.2.0-150500.8.6.1 * pcp-pmda-docker-debuginfo-6.2.0-150500.8.6.1 * libpcp3-6.2.0-150500.8.6.1 * pcp-pmda-sendmail-debuginfo-6.2.0-150500.8.6.1 * perl-PCP-MMV-6.2.0-150500.8.6.1 * python3-pcp-6.2.0-150500.8.6.1 * pcp-pmda-smart-debuginfo-6.2.0-150500.8.6.1 * pcp-devel-debuginfo-6.2.0-150500.8.6.1 * libpcp_mmv1-debuginfo-6.2.0-150500.8.6.1 * libpcp_gui2-debuginfo-6.2.0-150500.8.6.1 * pcp-debugsource-6.2.0-150500.8.6.1 * pcp-pmda-zimbra-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-trace-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-cifs-6.2.0-150500.8.6.1 * perl-PCP-PMDA-6.2.0-150500.8.6.1 * perl-PCP-MMV-debuginfo-6.2.0-150500.8.6.1 * libpcp_import1-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-cifs-debuginfo-6.2.0-150500.8.6.1 * pcp-6.2.0-150500.8.6.1 * pcp-pmda-sockets-6.2.0-150500.8.6.1 * pcp-pmda-mounts-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-bash-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-dm-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-lustrecomm-6.2.0-150500.8.6.1 * pcp-pmda-weblog-6.2.0-150500.8.6.1 * pcp-gui-6.2.0-150500.8.6.1 * pcp-pmda-sendmail-6.2.0-150500.8.6.1 * pcp-pmda-docker-6.2.0-150500.8.6.1 * pcp-pmda-hacluster-6.2.0-150500.8.6.1 * libpcp_mmv1-6.2.0-150500.8.6.1 * pcp-pmda-cisco-debuginfo-6.2.0-150500.8.6.1 * libpcp_web1-6.2.0-150500.8.6.1 * pcp-pmda-smart-6.2.0-150500.8.6.1 * pcp-pmda-trace-6.2.0-150500.8.6.1 * libpcp3-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-nvidia-gpu-debuginfo-6.2.0-150500.8.6.1 * pcp-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-hacluster-debuginfo-6.2.0-150500.8.6.1 * libpcp_gui2-6.2.0-150500.8.6.1 * pcp-pmda-mounts-6.2.0-150500.8.6.1 * pcp-pmda-weblog-debuginfo-6.2.0-150500.8.6.1 * pcp-system-tools-6.2.0-150500.8.6.1 * perl-PCP-LogSummary-6.2.0-150500.8.6.1 * pcp-pmda-logger-6.2.0-150500.8.6.1 * pcp-pmda-lustrecomm-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-summary-6.2.0-150500.8.6.1 * perl-PCP-LogImport-6.2.0-150500.8.6.1 * pcp-import-collectl2pcp-6.2.0-150500.8.6.1 * pcp-pmda-roomtemp-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-systemd-6.2.0-150500.8.6.1 * pcp-pmda-systemd-debuginfo-6.2.0-150500.8.6.1 * libpcp_trace2-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-mailq-6.2.0-150500.8.6.1 * pcp-pmda-sockets-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-dm-6.2.0-150500.8.6.1 * pcp-pmda-summary-debuginfo-6.2.0-150500.8.6.1 * perl-PCP-PMDA-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-apache-6.2.0-150500.8.6.1 * libpcp_web1-debuginfo-6.2.0-150500.8.6.1 * openSUSE Leap 15.5 (noarch) * pcp-export-pcp2influxdb-6.2.0-150500.8.6.1 * pcp-pmda-netfilter-6.2.0-150500.8.6.1 * pcp-pmda-elasticsearch-6.2.0-150500.8.6.1 * pcp-pmda-netcheck-6.2.0-150500.8.6.1 * pcp-doc-6.2.0-150500.8.6.1 * pcp-pmda-mysql-6.2.0-150500.8.6.1 * pcp-pmda-bonding-6.2.0-150500.8.6.1 * pcp-pmda-openmetrics-6.2.0-150500.8.6.1 * pcp-pmda-ds389-6.2.0-150500.8.6.1 * pcp-pmda-rsyslog-6.2.0-150500.8.6.1 * pcp-import-ganglia2pcp-6.2.0-150500.8.6.1 * pcp-pmda-news-6.2.0-150500.8.6.1 * pcp-export-pcp2graphite-6.2.0-150500.8.6.1 * pcp-export-pcp2elasticsearch-6.2.0-150500.8.6.1 * pcp-import-mrtg2pcp-6.2.0-150500.8.6.1 * pcp-import-iostat2pcp-6.2.0-150500.8.6.1 * pcp-pmda-samba-6.2.0-150500.8.6.1 * pcp-export-pcp2zabbix-6.2.0-150500.8.6.1 * pcp-pmda-nfsclient-6.2.0-150500.8.6.1 * pcp-pmda-openvswitch-6.2.0-150500.8.6.1 * pcp-pmda-snmp-6.2.0-150500.8.6.1 * pcp-export-pcp2json-6.2.0-150500.8.6.1 * pcp-pmda-dbping-6.2.0-150500.8.6.1 * pcp-pmda-slurm-6.2.0-150500.8.6.1 * pcp-conf-6.2.0-150500.8.6.1 * pcp-pmda-mic-6.2.0-150500.8.6.1 * pcp-export-pcp2xml-6.2.0-150500.8.6.1 * pcp-pmda-haproxy-6.2.0-150500.8.6.1 * pcp-pmda-lmsensors-6.2.0-150500.8.6.1 * pcp-pmda-oracle-6.2.0-150500.8.6.1 * pcp-export-pcp2spark-6.2.0-150500.8.6.1 * pcp-pmda-nginx-6.2.0-150500.8.6.1 * pcp-pmda-gpfs-6.2.0-150500.8.6.1 * pcp-pmda-named-6.2.0-150500.8.6.1 * pcp-pmda-activemq-6.2.0-150500.8.6.1 * pcp-zeroconf-6.2.0-150500.8.6.1 * pcp-pmda-gluster-6.2.0-150500.8.6.1 * pcp-pmda-nutcracker-6.2.0-150500.8.6.1 * pcp-import-sar2pcp-6.2.0-150500.8.6.1 * pcp-pmda-lustre-6.2.0-150500.8.6.1 * pcp-pmda-zswap-6.2.0-150500.8.6.1 * pcp-pmda-postfix-6.2.0-150500.8.6.1 * pcp-pmda-redis-6.2.0-150500.8.6.1 * pcp-pmda-unbound-6.2.0-150500.8.6.1 * pcp-pmda-rabbitmq-6.2.0-150500.8.6.1 * pcp-pmda-gpsd-6.2.0-150500.8.6.1 * pcp-pmda-json-6.2.0-150500.8.6.1 * pcp-pmda-ds389log-6.2.0-150500.8.6.1 * pcp-pmda-memcache-6.2.0-150500.8.6.1 * pcp-pmda-pdns-6.2.0-150500.8.6.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64 i586) * pcp-pmda-infiniband-6.2.0-150500.8.6.1 * pcp-pmda-infiniband-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-perfevent-6.2.0-150500.8.6.1 * pcp-pmda-perfevent-debuginfo-6.2.0-150500.8.6.1 * openSUSE Leap 15.5 (x86_64) * pcp-pmda-resctrl-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-resctrl-6.2.0-150500.8.6.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * pcp-system-tools-debuginfo-6.2.0-150500.8.6.1 * libpcp-devel-6.2.0-150500.8.6.1 * libpcp_trace2-6.2.0-150500.8.6.1 * perl-PCP-LogImport-debuginfo-6.2.0-150500.8.6.1 * libpcp_import1-6.2.0-150500.8.6.1 * pcp-devel-6.2.0-150500.8.6.1 * perl-PCP-MMV-6.2.0-150500.8.6.1 * libpcp3-6.2.0-150500.8.6.1 * pcp-devel-debuginfo-6.2.0-150500.8.6.1 * libpcp_mmv1-debuginfo-6.2.0-150500.8.6.1 * libpcp_gui2-debuginfo-6.2.0-150500.8.6.1 * pcp-debugsource-6.2.0-150500.8.6.1 * perl-PCP-PMDA-6.2.0-150500.8.6.1 * perl-PCP-MMV-debuginfo-6.2.0-150500.8.6.1 * libpcp_import1-debuginfo-6.2.0-150500.8.6.1 * pcp-6.2.0-150500.8.6.1 * libpcp_mmv1-6.2.0-150500.8.6.1 * libpcp_web1-6.2.0-150500.8.6.1 * libpcp3-debuginfo-6.2.0-150500.8.6.1 * pcp-debuginfo-6.2.0-150500.8.6.1 * libpcp_gui2-6.2.0-150500.8.6.1 * perl-PCP-LogSummary-6.2.0-150500.8.6.1 * pcp-system-tools-6.2.0-150500.8.6.1 * perl-PCP-LogImport-6.2.0-150500.8.6.1 * libpcp_trace2-debuginfo-6.2.0-150500.8.6.1 * python3-pcp-debuginfo-6.2.0-150500.8.6.1 * perl-PCP-PMDA-debuginfo-6.2.0-150500.8.6.1 * python3-pcp-6.2.0-150500.8.6.1 * libpcp_web1-debuginfo-6.2.0-150500.8.6.1 * Development Tools Module 15-SP5 (noarch) * pcp-doc-6.2.0-150500.8.6.1 * pcp-conf-6.2.0-150500.8.6.1 * pcp-import-iostat2pcp-6.2.0-150500.8.6.1 * pcp-import-sar2pcp-6.2.0-150500.8.6.1 * pcp-import-mrtg2pcp-6.2.0-150500.8.6.1 * Development Tools Module 15-SP5 (ppc64le) * pcp-pmda-perfevent-debuginfo-6.2.0-150500.8.6.1 * pcp-pmda-perfevent-6.2.0-150500.8.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6917.html * https://www.suse.com/security/cve/CVE-2024-45769.html * https://www.suse.com/security/cve/CVE-2024-45770.html * https://bugzilla.suse.com/show_bug.cgi?id=1217826 * https://bugzilla.suse.com/show_bug.cgi?id=1222815 * https://bugzilla.suse.com/show_bug.cgi?id=1230551 * https://bugzilla.suse.com/show_bug.cgi?id=1230552 * https://bugzilla.suse.com/show_bug.cgi?id=1231345 * https://jira.suse.com/browse/PED-8192 * https://jira.suse.com/browse/PED-8389

1 0

SUSE-SU-2024:3780-1: important: Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3780-1 Release Date: 2024-10-29T20:48:12Z Rating: important References: * bsc#1223683 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26923 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35864 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 12 vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3780=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3780=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_122-default-5-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_27-debugsource-5-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_122-default-debuginfo-5-150400.9.6.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_122-default-5-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_27-debugsource-5-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_122-default-debuginfo-5-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3783-1: important: Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
by OPENSUSE-UPDATES 30 Oct '24

30 Oct '24

# Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3783-1 Release Date: 2024-10-30T04:33:44Z Rating: important References: * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1227471 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35864 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3784=1 SUSE-2024-3783=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3784=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-3783=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_138-default-15-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-default-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-default-debuginfo-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-default-debuginfo-15-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_37-debugsource-15-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_41-debugsource-12-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_138-preempt-debuginfo-15-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-preempt-15-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-preempt-debuginfo-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-preempt-12-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_138-default-15-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-default-12-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471

1 0

SUSE-SU-2024:3777-1: important: Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)
by OPENSUSE-UPDATES 29 Oct '24

29 Oct '24

# Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3777-1 Release Date: 2024-10-29T17:03:52Z Rating: important References: * bsc#1225011 * bsc#1225012 * bsc#1225309 * bsc#1225311 * bsc#1225819 * bsc#1227471 * bsc#1231353 Cross-References: * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 CVSS scores: * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves six vulnerabilities and has one security fix can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3777=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3777=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_100-default-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-13-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_100-default-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-13-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1231353

1 0

SUSE-SU-2024:3779-1: important: Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
by OPENSUSE-UPDATES 29 Oct '24

29 Oct '24

# Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3779-1 Release Date: 2024-10-29T19:03:47Z Rating: important References: * bsc#1227471 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-47291 * CVE-2021-47598 * CVE-2024-41059 CVSS scores: * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3779=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3779=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_167-default-3-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_167-default-debuginfo-3-150300.7.6.1 * kernel-livepatch-SLE15-SP3_Update_46-debugsource-3-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_167-preempt-debuginfo-3-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_167-preempt-3-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_167-default-3-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3771-1: important: Security update for pgadmin4
by OPENSUSE-UPDATES 29 Oct '24

29 Oct '24

# Security update for pgadmin4 Announcement ID: SUSE-SU-2024:3771-1 Release Date: 2024-10-29T12:55:39Z Rating: important References: * bsc#1224295 * bsc#1224366 * bsc#1226967 * bsc#1227248 * bsc#1227252 * bsc#1229423 * bsc#1229861 * bsc#1230928 * bsc#1231564 * bsc#1231684 Cross-References: * CVE-2024-38355 * CVE-2024-38998 * CVE-2024-38999 * CVE-2024-39338 * CVE-2024-4067 * CVE-2024-4068 * CVE-2024-43788 * CVE-2024-48948 * CVE-2024-48949 * CVE-2024-9014 CVSS scores: * CVE-2024-38355 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-38998 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2024-38998 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-38998 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-38999 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2024-39338 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-39338 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-39338 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-4067 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-4068 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43788 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L * CVE-2024-43788 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L * CVE-2024-43788 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-48948 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2024-48948 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2024-48949 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-48949 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2024-48949 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2024-9014 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9014 ( SUSE ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9014 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for pgadmin4 fixes the following issues: * CVE-2024-38355: Fixed socket.io: unhandled 'error' event (bsc#1226967) * CVE-2024-38998: Fixed requirejs: prototype pollution via function config (bsc#1227248) * CVE-2024-38999: Fixed requirejs: prototype pollution via function s.contexts._.configure (bsc#1227252) * CVE-2024-39338: Fixed axios: server-side request forgery due to requests for path relative URLs being processed as protocol relative URLs in axios (bsc#1229423) * CVE-2024-4067: Fixed micromatch: vulnerable to Regular Expression Denial of Service (ReDoS) (bsc#1224366) * CVE-2024-4068: Fixed braces: fails to limit the number of characters it can handle, which could lead to Memory Exhaustion (bsc#1224295) * CVE-2024-43788: Fixed webpack: DOM clobbering gadget in AutoPublicPathRuntimeModule could lead to XSS (bsc#1229861) * CVE-2024-48948: Fixed elliptic: ECDSA signature verification error due to leading zero may reject legitimate transactions in elliptic (bsc#1231684) * CVE-2024-48949: Fixed elliptic: Missing Validation in Elliptic's EDDSA Signature Verification (bsc#1231564) * CVE-2024-9014: Fixed OAuth2 issue that could lead to information leak (bsc#1230928) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3771=1 openSUSE-SLE-15.6-2024-3771=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-3771=1 ## Package List: * openSUSE Leap 15.6 (noarch) * pgadmin4-desktop-8.5-150600.3.6.1 * system-user-pgadmin-8.5-150600.3.6.1 * pgadmin4-doc-8.5-150600.3.6.1 * pgadmin4-cloud-8.5-150600.3.6.1 * pgadmin4-8.5-150600.3.6.1 * pgadmin4-web-uwsgi-8.5-150600.3.6.1 * Python 3 Module 15-SP6 (noarch) * pgadmin4-8.5-150600.3.6.1 * system-user-pgadmin-8.5-150600.3.6.1 * pgadmin4-doc-8.5-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38355.html * https://www.suse.com/security/cve/CVE-2024-38998.html * https://www.suse.com/security/cve/CVE-2024-38999.html * https://www.suse.com/security/cve/CVE-2024-39338.html * https://www.suse.com/security/cve/CVE-2024-4067.html * https://www.suse.com/security/cve/CVE-2024-4068.html * https://www.suse.com/security/cve/CVE-2024-43788.html * https://www.suse.com/security/cve/CVE-2024-48948.html * https://www.suse.com/security/cve/CVE-2024-48949.html * https://www.suse.com/security/cve/CVE-2024-9014.html * https://bugzilla.suse.com/show_bug.cgi?id=1224295 * https://bugzilla.suse.com/show_bug.cgi?id=1224366 * https://bugzilla.suse.com/show_bug.cgi?id=1226967 * https://bugzilla.suse.com/show_bug.cgi?id=1227248 * https://bugzilla.suse.com/show_bug.cgi?id=1227252 * https://bugzilla.suse.com/show_bug.cgi?id=1229423 * https://bugzilla.suse.com/show_bug.cgi?id=1229861 * https://bugzilla.suse.com/show_bug.cgi?id=1230928 * https://bugzilla.suse.com/show_bug.cgi?id=1231564 * https://bugzilla.suse.com/show_bug.cgi?id=1231684

1 0

SUSE-SU-2024:3772-1: important: Security update for go1.22-openssl
by OPENSUSE-UPDATES 29 Oct '24

29 Oct '24

# Security update for go1.22-openssl Announcement ID: SUSE-SU-2024:3772-1 Release Date: 2024-10-29T13:54:03Z Rating: important References: * bsc#1218424 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001 * bsc#1221002 * bsc#1221003 * bsc#1221400 * bsc#1224017 * bsc#1224018 * bsc#1225973 * bsc#1225974 * bsc#1227314 * bsc#1230252 * bsc#1230253 * bsc#1230254 * jsc#PED-1962 * jsc#SLE-18320 Cross-References: * CVE-2023-45288 * CVE-2023-45289 * CVE-2023-45290 * CVE-2024-24783 * CVE-2024-24784 * CVE-2024-24785 * CVE-2024-24787 * CVE-2024-24788 * CVE-2024-24789 * CVE-2024-24790 * CVE-2024-24791 * CVE-2024-34155 * CVE-2024-34156 * CVE-2024-34158 CVSS scores: * CVE-2023-45288 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45290 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24783 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24784 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24785 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24787 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-24788 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-24789 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24789 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24790 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L * CVE-2024-24790 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-24791 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34155 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34156 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34156 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34158 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34158 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 14 vulnerabilities, contains two features and has two security fixes can now be installed. ## Description: This update for go1.22-openssl fixes the following issues: This update ships go1.22-openssl 1.22.7.1 (jsc#SLE-18320) * Update to version 1.22.7.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.7-1-openssl-fips. * Update to Go 1.22.7 (#229) * go1.22.7 (released 2024-09-05) includes security fixes to the encoding/gob, go/build/constraint, and go/parser packages, as well as bug fixes to the fix command and the runtime. CVE-2024-34155 CVE-2024-34156 CVE-2024-34158: \- go#69142 go#69138 bsc#1230252 security: fix CVE-2024-34155 go/parser: stack exhaustion in all Parse* functions (CVE-2024-34155) \- go#69144 go#69139 bsc#1230253 security: fix CVE-2024-34156 encoding/gob: stack exhaustion in Decoder.Decode (CVE-2024-34156) \- go#69148 go#69141 bsc#1230254 security: fix CVE-2024-34158 go/build/constraint: stack exhaustion in Parse (CVE-2024-34158) \- go#68811 os: TestChtimes failures \- go#68825 cmd/fix: fails to run on modules whose go directive value is in "1.n.m" format introduced in Go 1.21.0 \- go#68972 cmd/cgo: aix c-archive corrupting stack * go1.22.6 (released 2024-08-06) includes fixes to the go command, the compiler, the linker, the trace command, the covdata command, and the bytes, go/types, and os/exec packages. * go#68594 cmd/compile: internal compiler error with zero-size types * go#68546 cmd/trace/v2: pprof profiles always empty * go#68492 cmd/covdata: too many open files due to defer f.Close() in for loop * go#68475 bytes: IndexByte can return -4294967295 when memory usage is above 2^31 on js/wasm * go#68370 go/types: assertion failure in recent range statement checking logic * go#68331 os/exec: modifications to Path ignored when *Cmd is created using Command with an absolute path on Windows * go#68230 cmd/compile: inconsistent integer arithmetic result on Go 1.22+arm64 with/without -race * go#68222 cmd/go: list with -export and -covermode=atomic fails to build * go#68198 cmd/link: issues with Xcode 16 beta * Update to version 1.22.5.3 cut from the go1.22-fips-release branch at the revision tagged go1.22.5-3-openssl-fips. * Only load openssl if fips == "1" Avoid loading openssl whenever GOLANG_FIPS is not 1. Previously only an unset variable would cause the library load to be skipped, but users may also expect to be able to set eg. GOLANG_FIPS=0 in environments without openssl. * Update to version 1.22.5.2 cut from the go1.22-fips-release branch at the revision tagged go1.22.5-2-openssl-fips. * Only load OpenSSL when in FIPS mode * Update to version 1.22.5.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.5-1-openssl-fips. * Update to go1.22.5 * go1.22.5 (released 2024-07-02) includes security fixes to the net/http package, as well as bug fixes to the compiler, cgo, the go command, the linker, the runtime, and the crypto/tls, go/types, net, net/http, and os/exec packages. CVE-2024-24791: * go#68200 go#67555 bsc#1227314 security: fix CVE CVE-2024-24791 net/http: expect: 100-continue handling is broken in various ways * go#65983 cmd/compile: hash of unhashable type * go#65994 crypto/tls: segfault when calling tlsrsakex.IncNonDefault() * go#66598 os/exec: calling Cmd.Start after setting Cmd.Path manually to absolute path without ".exe" no longer implicitly adds ".exe" in Go 1.22 * go#67298 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21, stale bounds * go#67715 cmd/cgo/internal/swig,cmd/go,x/build: swig cgo tests incompatible with C++ toolchain on builders * go#67798 cmd/compile: internal compiler error: unexpected type: <nil> (<nil>) in for-range * go#67820 cmd/compile: package- level variable initialization with constant dependencies doesn't match order specified in Go spec * go#67850 go/internal/gccgoimporter: go building failing with gcc 14.1.0 * go#67934 net: go DNS resolver fails to connect to local DNS server * go#67945 cmd/link: using -fuzz with test that links with cgo on darwin causes linker failure * go#68052 cmd/go: go list -u -m all fails loading module retractions: module requires go >= 1.N+1 (running go 1.N) * go#68122 cmd/link: runtime.mach_vm_region_trampoline: unsupported dynamic relocation for symbol libc_mach_task_self_ (type=29 (R_GOTPCREL) stype=46 (SDYNIMPORT)) * Update to version 1.22.4.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.4-1-openssl-fips. * Update to go1.22.4 * go1.22.4 (released 2024-06-04) includes security fixes to the archive/zip and net/netip packages, as well as bug fixes to the compiler, the go command, the linker, the runtime, and the os package. CVE-2024-24789 CVE-2024-24790: * go#67554 go#66869 bsc#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations * go#67682 go#67680 bsc#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64 * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21' * go#67258 runtime: unexpected fault address 0 * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections * go#67460 cmd/compile: internal compiler error: panic with range over integer value * go#67527 cmd/link: panic: machorelocsect: size mismatch * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start * go#67696 os: RemoveAll susceptible to symlink race * Update to version 1.22.3.3 cut from the go1.22-fips-release branch at the revision tagged go1.22.3-3-openssl-fips. * config: update openssl backend (#201) * Update to version 1.22.3.2 cut from the go1.22-fips-release branch at the revision tagged go1.22.3-2-openssl-fips. * patches: restore signature of HashSign/HashVerify (#199) * Update to version 1.22.3.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.3-1-openssl-fips. * Update to go1.22.3 * fix: rename patch file * Backport change https://go-review.googlesource.com/c/go/+/554615 to Go1.22 (#193) runtime: crash asap and extend total sleep time for slow machine in test Running with few threads usually does not need 500ms to crash, so let it crash as soon as possible. While the test may caused more time on slow machine, try to expand the sleep time in test. * cmd/go: re-enable CGO for Go toolchain commands (#190) * crypto/ecdsa: Restore HashSign and HashVerify (#189) * go1.22.3 (released 2024-05-07) includes security fixes to the go command and the net package, as well as bug fixes to the compiler, the runtime, and the net/http package. CVE-2024-24787 CVE-2024-24788: * go#67122 go#67119 bsc#1224017 security: fix CVE-2024-24787 cmd/go: arbitrary code execution during build on darwin * go#67040 go#66754 bsc#1224018 security: fix CVE-2024-24788 net: high cpu usage in extractExtendedRCode * go#67018 cmd/compile: Go 1.22.x failed to be bootstrapped from 386 to ppc64le * go#67017 cmd/compile: changing a hot concrete method to interface method triggers a PGO ICE * go#66886 runtime: deterministic fallback hashes across process boundary * go#66698 net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net(a)v0.23.0 * Update to version 1.22.2.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.2-1-openssl-fips. * Update to go1.22.2 * go1.22.2 (released 2024-04-03) includes a security fix to the net/http package, as well as bug fixes to the compiler, the go command, the linker, and the encoding/gob, go/types, net/http, and runtime/trace packages. CVE-2023-45288: * go#66298 go#65051 bsc#1221400 security: fix CVE-2023-45288 net/http, x/net/http2: close connections when receiving too many headers * go#65858 cmd/compile: unreachable panic with GODEBUG=gotypesalias=1 * go#66060 cmd/link: RISC-V external link, failed to find text symbol for HI20 relocation * go#66076 cmd/compile: out-of-bounds panic with uint32 conversion and modulus operation in Go 1.22.0 on arm64 * go#66134 cmd/compile: go test . results in CLOSURE ... <unknown line number>: internal compiler error: assertion failed * go#66137 cmd/go: go 1.22.0: go test throws errors when processing folders not listed in coverpkg argument * go#66178 cmd/compile: ICE: panic: interface conversion: ir.Node is _ir.ConvExpr, not_ ir.IndexExpr * go#66201 runtime/trace: v2 traces contain an incorrect timestamp scaling factor on Windows * go#66255 net/http: http2 round tripper nil pointer dereference causes panic causing deadlock * go#66256 cmd/go: git shallow fetches broken at CL 556358 * go#66273 crypto/x509: Certificate no longer encodable using encoding/gob in Go1.22 * go#66412 cmd/link: bad carrier sym for symbol runtime.elf_savegpr0.args_stackmap on ppc64le * Update to version 1.22.1.2 cut from the go1.22-fips-release branch at the revision tagged go1.22.1-2-openssl-fips. * config: Update openssl v2 module (#178) * Remove subpackage go1.x-openssl-libstd for compiled shared object libstd.so. * Continue to build experimental libstd only on go1.x Tumbleweed. * Removal fixes build errors on go1.x-openssl Factory and ALP. * Use of libstd.so is experimental and not recommended for general use, Go currently has no ABI. * Feature go build -buildmode=shared is deprecated by upstream, but not yet removed. * Initial package go1.22-openssl version 1.22.1.1 cut from the go1.22-fips- release branch at the revision tagged go1.22.1-1-openssl-fips. * Go upstream merged branch dev.boringcrypto in go1.19+. * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto. * In go1.x-openssl enable FIPS mode (or boring mode as the package is named) either via an environment variable GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode. * When the operating system is operating in FIPS mode, Go applications which import crypto/tls/fipsonly limit operations to the FIPS ciphersuite. * go1.x-openssl is delivered as two large patches to go1.x applying necessary modifications from the golang-fips/go GitHub project for the Go crypto library to use OpenSSL as the external cryptographic library in a FIPS compliant way. * go1.x-openssl modifies the crypto/* packages to use OpenSSL for cryptographic operations. * go1.x-openssl uses dlopen() to call into OpenSSL. * SUSE RPM packaging introduces a fourth version digit go1.x.y.z corresponding to the golang-fips/go patchset tagged revision. * Patchset improvements can be updated independently of upstream Go maintenance releases. * go1.22.1 (released 2024-03-05) includes security fixes to the crypto/x509, html/template, net/http, net/http/cookiejar, and net/mail packages, as well as bug fixes to the compiler, the go command, the runtime, the trace command, and the go/types and net/http packages. CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785: * go#65831 go#65390 bsc#1220999 security: fix CVE-2024-24783 crypto/x509: Verify panics on certificates with an unknown public key algorithm * go#65849 go#65083 bsc#1221002 security: fix CVE-2024-24784 net/mail: comments in display names are incorrectly handled * go#65850 go#65383 bsc#1221001 security: fix CVE-2023-45290 net/http: memory exhaustion in Request.ParseMultipartForm * go#65859 go#65065 bsc#1221000 security: fix CVE-2023-45289 net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect * go#65969 go#65697 bsc#1221003 security: fix CVE-2024-24785 html/template: errors returned from MarshalJSON methods may break template escaping * go#65352 cmd/go: go generate fails silently when run on a package in a nested workspace module * go#65471 internal/testenv: TestHasGoBuild failures on the LUCI noopt builders * go#65474 internal/testenv: support LUCI mobile builders in testenv tests * go#65577 cmd/trace/v2: goroutine analysis page doesn't identify goroutines consistently * go#65618 cmd/compile: Go 1.22 build fails with 1.21 PGO profile on internal/saferio change * go#65619 cmd/compile: Go 1.22 changes support for modules that declare go 1.0 * go#65641 cmd/cgo/internal/testsanitizers,x/build: LUCI clang15 builders failing * go#65644 runtime: crash in race detector when execution tracer reads from CPU profile buffer * go#65728 go/types: nil pointer dereference in Alias.Underlying() * go#65759 net/http: context cancellation can leave HTTP client with deadlocked HTTP/1.1 connections in Go1.22 * go#65760 runtime: Go 1.22.0 fails to build from source on armv7 Alpine Linux * go#65818 runtime: go1.22.0 test with -race will SIGSEGV or SIGBUS or Bad Pointer * go#65852 cmd/go: "missing ziphash" error with go.work * go#65883 runtime: scheduler sometimes starves a runnable goroutine on wasm platforms * bsc#1219988 ensure VERSION file is present in GOROOT as required by go tool dist and go tool distpack * go1.22 (released 2024-02-06) is a major release of Go. go1.22.x minor releases will be provided through February 2024. https://github.com/golang/go/wiki/Go-Release-Cycle go1.22 arrives six months after go1.21. Most of its changes are in the implementation of the toolchain, runtime, and libraries. As always, the release maintains the Go 1 promise of compatibility. We expect almost all Go programs to continue to compile and run as before. * Language change: go1.22 makes two changes to for loops. Previously, the variables declared by a for loop were created once and updated by each iteration. In go1.22, each iteration of the loop creates new variables, to avoid accidental sharing bugs. The transition support tooling described in the proposal continues to work in the same way it did in Go 1.21. * Language change: For loops may now range over integers * Language change: go1.22 includes a preview of a language change we are considering for a future version of Go: range-over-function iterators. Building with GOEXPERIMENT=rangefunc enables this feature. * go command: Commands in workspaces can now use a vendor directory containing the dependencies of the workspace. The directory is created by go work vendor, and used by build commands when the -mod flag is set to vendor, which is the default when a workspace vendor directory is present. Note that the vendor directory's contents for a workspace are different from those of a single module: if the directory at the root of a workspace also contains one of the modules in the workspace, its vendor directory can contain the dependencies of either the workspace or of the module, but not both. * go get is no longer supported outside of a module in the legacy GOPATH mode (that is, with GO111MODULE=off). Other build commands, such as go build and go test, will continue to work indefinitely for legacy GOPATH programs. * go mod init no longer attempts to import module requirements from configuration files for other vendoring tools (such as Gopkg.lock). * go test -cover now prints coverage summaries for covered packages that do not have their own test files. Prior to Go 1.22 a go test -cover run for such a package would report: ? mymod/mypack [no test files] and now with go1.22, functions in the package are treated as uncovered: mymod/mypack coverage: 0.0% of statements Note that if a package contains no executable code at all, we can't report a meaningful coverage percentage; for such packages the go tool will continue to report that there are no test files. * trace: The trace tool's web UI has been gently refreshed as part of the work to support the new tracer, resolving several issues and improving the readability of various sub-pages. The web UI now supports exploring traces in a thread-oriented view. The trace viewer also now displays the full duration of all system calls. These improvements only apply for viewing traces produced by programs built with go1.22 or newer. A future release will bring some of these improvements to traces produced by older version of Go. * vet: References to loop variables The behavior of the vet tool has changed to match the new semantics (see above) of loop variables in go1.22. When analyzing a file that requires go1.22 or newer (due to its go.mod file or a per-file build constraint), vetcode> no longer reports references to loop variables from within a function literal that might outlive the iteration of the loop. In Go 1.22, loop variables are created anew for each iteration, so such references are no longer at risk of using a variable after it has been updated by the loop. * vet: New warnings for missing values after append The vet tool now reports calls to append that pass no values to be appended to the slice, such as slice = append(slice). Such a statement has no effect, and experience has shown that is nearly always a mistake. * vet: New warnings for deferring time.Since The vet tool now reports a non- deferred call to time.Since(t) within a defer statement. This is equivalent to calling time.Now().Sub(t) before the defer statement, not when the deferred function is called. In nearly all cases, the correct code requires deferring the time.Since call. * vet: New warnings for mismatched key-value pairs in log/slog calls The vet tool now reports invalid arguments in calls to functions and methods in the structured logging package, log/slog, that accept alternating key/value pairs. It reports calls where an argument in a key position is neither a string nor a slog.Attr, and where a final key is missing its value. * runtime: The runtime now keeps type-based garbage collection metadata nearer to each heap object, improving the CPU performance (latency or throughput) of Go programs by 1-3%. This change also reduces the memory overhead of the majority Go programs by approximately 1% by deduplicating redundant metadata. Some programs may see a smaller improvement because this change adjusts the size class boundaries of the memory allocator, so some objects may be moved up a size class. A consequence of this change is that some objects' addresses that were previously always aligned to a 16 byte (or higher) boundary will now only be aligned to an 8 byte boundary. Some programs that use assembly instructions that require memory addresses to be more than 8-byte aligned and rely on the memory allocator's previous alignment behavior may break, but we expect such programs to be rare. Such programs may be built with GOEXPERIMENT=noallocheaders to revert to the old metadata layout and restore the previous alignment behavior, but package owners should update their assembly code to avoid the alignment assumption, as this workaround will be removed in a future release. * runtime: On the windows/amd64 port, programs linking or loading Go libraries built with -buildmode=c-archive or -buildmode=c-shared can now use the SetUnhandledExceptionFilter Win32 function to catch exceptions not handled by the Go runtime. Note that this was already supported on the windows/386 port. * compiler: Profile-guided Optimization (PGO) builds can now devirtualize a higher proportion of calls than previously possible. Most programs from a representative set of Go programs now see between 2 and 14% improvement from enabling PGO. * compiler: The compiler now interleaves devirtualization and inlining, so interface method calls are better optimized. * compiler: go1.22 also includes a preview of an enhanced implementation of the compiler's inlining phase that uses heuristics to boost inlinability at call sites deemed "important" (for example, in loops) and discourage inlining at call sites deemed "unimportant" (for example, on panic paths). Building with GOEXPERIMENT=newinliner enables the new call-site heuristics; see issue #61502 for more info and to provide feedback. * linker: The linker's -s and -w flags are now behave more consistently across all platforms. The -w flag suppresses DWARF debug information generation. The -s flag suppresses symbol table generation. The -s flag also implies the -w flag, which can be negated with -w=0. That is, -s -w=0 will generate a binary with DWARF debug information generation but without the symbol table. * linker: On ELF platforms, the -B linker flag now accepts a special form: with -B gobuildid, the linker will generate a GNU build ID (the ELF NT_GNU_BUILD_ID note) derived from the Go build ID. * linker: On Windows, when building with -linkmode=internal, the linker now preserves SEH information from C object files by copying the .pdata and .xdata sections into the final binary. This helps with debugging and profiling binaries using native tools, such as WinDbg. Note that until now, C functions' SEH exception handlers were not being honored, so this change may cause some programs to behave differently. -linkmode=external is not affected by this change, as external linkers already preserve SEH information. * bootstrap: As mentioned in the Go 1.20 release notes, go1.22 now requires the final point release of Go 1.20 or later for bootstrap. We expect that Go 1.24 will require the final point release of go1.22 or later for bootstrap. * core library: New math/rand/v2 package: go1.22 includes the first “v2” package in the standard library, math/rand/v2. The changes compared to math/rand are detailed in proposal go#61716. The most important changes are: * The Read method, deprecated in math/rand, was not carried forward for math/rand/v2. (It remains available in math/rand.) The vast majority of calls to Read should use crypto/rand’s Read instead. Otherwise a custom Read can be constructed using the Uint64 method. * The global generator accessed by top-level functions is unconditionally randomly seeded. Because the API guarantees no fixed sequence of results, optimizations like per-thread random generator states are now possible. * The Source interface now has a single Uint64 method; there is no Source64 interface. * Many methods now use faster algorithms that were not possible to adopt in math/rand because they changed the output streams. * The Intn, Int31, Int31n, Int63, and Int64n top-level functions and methods from math/rand are spelled more idiomatically in math/rand/v2: IntN, Int32, Int32N, Int64, and Int64N. There are also new top-level functions and methods Uint32, Uint32N, Uint64, Uint64N, Uint, and UintN. * The new generic function N is like Int64N or Uint64N but works for any integer type. For example a random duration from 0 up to 5 minutes is rand.N(5*time.Minute). * The Mitchell & Reeds LFSR generator provided by math/rand’s Source has been replaced by two more modern pseudo-random generator sources: ChaCha8 PCG. ChaCha8 is a new, cryptographically strong random number generator roughly similar to PCG in efficiency. ChaCha8 is the algorithm used for the top-level functions in math/rand/v2. As of go1.22, math/rand's top-level functions (when not explicitly seeded) and the Go runtime also use ChaCha8 for randomness. * We plan to include an API migration tool in a future release, likely Go 1.23. * core library: New go/version package: The new go/version package implements functions for validating and comparing Go version strings. * core library: Enhanced routing patterns: HTTP routing in the standard library is now more expressive. The patterns used by net/http.ServeMux have been enhanced to accept methods and wildcards. This change breaks backwards compatibility in small ways, some obvious—patterns with "{" and "}" behave differently— and some less so—treatment of escaped paths has been improved. The change is controlled by a GODEBUG field named httpmuxgo121. Set httpmuxgo121=1 to restore the old behavior. * Minor changes to the library As always, there are various minor changes and updates to the library, made with the Go 1 promise of compatibility in mind. There are also various performance improvements, not enumerated here. * archive/tar: The new method Writer.AddFS adds all of the files from an fs.FS to the archive. * archive/zip: The new method Writer.AddFS adds all of the files from an fs.FS to the archive. * bufio: When a SplitFunc returns ErrFinalToken with a nil token, Scanner will now stop immediately. Previously, it would report a final empty token before stopping, which was usually not desired. Callers that do want to report a final empty token can do so by returning []byte{} rather than nil. * cmp: The new function Or returns the first in a sequence of values that is not the zero value. * crypto/tls: ConnectionState.ExportKeyingMaterial will now return an error unless TLS 1.3 is in use, or the extended_master_secret extension is supported by both the server and client. crypto/tls has supported this extension since Go 1.20. This can be disabled with the tlsunsafeekm=1 GODEBUG setting. * crypto/tls: By default, the minimum version offered by crypto/tls servers is now TLS 1.2 if not specified with config.MinimumVersion, matching the behavior of crypto/tls clients. This change can be reverted with the tls10server=1 GODEBUG setting. * crypto/tls: By default, cipher suites without ECDHE support are no longer offered by either clients or servers during pre-TLS 1.3 handshakes. This change can be reverted with the tlsrsakex=1 GODEBUG setting. * crypto/x509: The new CertPool.AddCertWithConstraint method can be used to add customized constraints to root certificates to be applied during chain building. * crypto/x509: On Android, root certificates will now be loaded from /data/misc/keychain/certs-added as well as /system/etc/security/cacerts. * crypto/x509: A new type, OID, supports ASN.1 Object Identifiers with individual components larger than 31 bits. A new field which uses this type, Policies, is added to the Certificate struct, and is now populated during parsing. Any OIDs which cannot be represented using a asn1.ObjectIdentifier will appear in Policies, but not in the old PolicyIdentifiers field. When calling CreateCertificate, the Policies field is ignored, and policies are taken from the PolicyIdentifiers field. Using the x509usepolicies=1 GODEBUG setting inverts this, populating certificate policies from the Policies field, and ignoring the PolicyIdentifiers field. We may change the default value of x509usepolicies in Go 1.23, making Policies the default field for marshaling. * database/sql: The new Null[T] type provide a way to scan nullable columns for any column types. * debug/elf: Constant R_MIPS_PC32 is defined for use with MIPS64 systems. Additional R_LARCH_* constants are defined for use with LoongArch systems. * encoding: The new methods AppendEncode and AppendDecode added to each of the Encoding types in the packages encoding/base32, encoding/base64, and encoding/hex simplify encoding and decoding from and to byte slices by taking care of byte slice buffer management. * encoding: The methods base32.Encoding.WithPadding and base64.Encoding.WithPadding now panic if the padding argument is a negative value other than NoPadding. * encoding/json: Marshaling and encoding functionality now escapes '\b' and '\f' characters as \b and \f instead of \u0008 and \u000c. * go/ast: The following declarations related to syntactic identifier resolution are now deprecated: Ident.Obj, Object, Scope, File.Scope, File.Unresolved, Importer, Package, NewPackage. In general, identifiers cannot be accurately resolved without type information. Consider, for example, the identifier K in T{K: ""}: it could be the name of a local variable if T is a map type, or the name of a field if T is a struct type. New programs should use the go/types package to resolve identifiers; see Object, Info.Uses, and Info.Defs for details. * go/ast: The new ast.Unparen function removes any enclosing parentheses from an expression. * go/types: The new Alias type represents type aliases. Previously, type aliases were not represented explicitly, so a reference to a type alias was equivalent to spelling out the aliased type, and the name of the alias was lost. The new representation retains the intermediate Alias. This enables improved error reporting (the name of a type alias can be reported), and allows for better handling of cyclic type declarations involving type aliases. In a future release, Alias types will also carry type parameter information. The new function Unalias returns the actual type denoted by an Alias type (or any other Type for that matter). * go/types: Because Alias types may break existing type switches that do not know to check for them, this functionality is controlled by a GODEBUG field named gotypesalias. With gotypesalias=0, everything behaves as before, and Alias types are never created. With gotypesalias=1, Alias types are created and clients must expect them. The default is gotypesalias=0. In a future release, the default will be changed to gotypesalias=1. Clients of go/types are urged to adjust their code as soon as possible to work with gotypesalias=1 to eliminate problems early. * go/types: The Info struct now exports the FileVersions map which provides per-file Go version information. * go/types: The new helper method PkgNameOf returns the local package name for the given import declaration. * go/types: The implementation of SizesFor has been adjusted to compute the same type sizes as the compiler when the compiler argument for SizesFor is "gc". The default Sizes implementation used by the type checker is now types.SizesFor("gc", "amd64"). * go/types: The start position (Pos) of the lexical environment block (Scope) that represents a function body has changed: it used to start at the opening curly brace of the function body, but now starts at the function's func token. * html/template: Javascript template literals may now contain Go template actions, and parsing a template containing one will no longer return ErrJSTemplate. Similarly the GODEBUG setting jstmpllitinterp no longer has any effect. * io: The new SectionReader.Outer method returns the ReaderAt, offset, and size passed to NewSectionReader. * log/slog: The new SetLogLoggerLevel function controls the level for the bridge between the `slog` and `log` packages. It sets the minimum level for calls to the top-level `slog` logging functions, and it sets the level for calls to `log.Logger` that go through `slog`. * math/big: The new method Rat.FloatPrec computes the number of fractional decimal digits required to represent a rational number accurately as a floating-point number, and whether accurate decimal representation is possible in the first place. * net: When io.Copy copies from a TCPConn to a UnixConn, it will now use Linux's splice(2) system call if possible, using the new method TCPConn.WriteTo. * net: The Go DNS Resolver, used when building with "-tags=netgo", now searches for a matching name in the Windows hosts file, located at %SystemRoot%\System32\drivers\etc\hosts, before making a DNS query. * net/http: The new functions ServeFileFS, FileServerFS, and NewFileTransportFS are versions of the existing ServeFile, FileServer, and NewFileTransport, operating on an fs.FS. * net/http: The HTTP server and client now reject requests and responses containing an invalid empty Content-Length header. The previous behavior may be restored by setting GODEBUG field httplaxcontentlength=1. * net/http: The new method Request.PathValue returns path wildcard values from a request and the new method Request.SetPathValue sets path wildcard values on a request. * net/http/cgi: When executing a CGI process, the PATH_INFO variable is now always set to the empty string or a value starting with a / character, as required by RFC 3875. It was previously possible for some combinations of Handler.Root and request URL to violate this requirement. * net/netip: The new AddrPort.Compare method compares two AddrPorts. * os: On Windows, the Stat function now follows all reparse points that link to another named entity in the system. It was previously only following IO_REPARSE_TAG_SYMLINK and IO_REPARSE_TAG_MOUNT_POINT reparse points. * os: On Windows, passing O_SYNC to OpenFile now causes write operations to go directly to disk, equivalent to O_SYNC on Unix platforms. * os: On Windows, the ReadDir, File.ReadDir, File.Readdir, and File.Readdirnames functions now read directory entries in batches to reduce the number of system calls, improving performance up to 30%. * os: When io.Copy copies from a File to a net.UnixConn, it will now use Linux's sendfile(2) system call if possible, using the new method File.WriteTo. * os/exec: On Windows, LookPath now ignores empty entries in %PATH%, and returns ErrNotFound (instead of ErrNotExist) if no executable file extension is found to resolve an otherwise-unambiguous name. * os/exec: On Windows, Command and Cmd.Start no longer call LookPath if the path to the executable is already absolute and has an executable file extension. In addition, Cmd.Start no longer writes the resolved extension back to the Path field, so it is now safe to call the String method concurrently with a call to Start. * reflect: The Value.IsZero method will now return true for a floating-point or complex negative zero, and will return true for a struct value if a blank field (a field named _) somehow has a non-zero value. These changes make IsZero consistent with comparing a value to zero using the language == operator. * reflect: The PtrTo function is deprecated, in favor of PointerTo. * reflect: The new function TypeFor returns the Type that represents the type argument T. Previously, to get the reflect.Type value for a type, one had to use reflect.TypeOf((*T)(nil)).Elem(). This may now be written as reflect.TypeForT. * runtime/metrics: Four new histogram metrics /sched/pauses/stopping/gc:seconds, /sched/pauses/stopping/other:seconds, /sched/pauses/total/gc:seconds, and /sched/pauses/total/other:seconds provide additional details about stop-the-world pauses. The "stopping" metrics report the time taken from deciding to stop the world until all goroutines are stopped. The "total" metrics report the time taken from deciding to stop the world until it is started again. * runtime/metrics: The /gc/pauses:seconds metric is deprecated, as it is equivalent to the new /sched/pauses/total/gc:seconds metric. * runtime/metrics: /sync/mutex/wait/total:seconds now includes contention on runtime-internal locks in addition to sync.Mutex and sync.RWMutex. * runtime/pprof: Mutex profiles now scale contention by the number of goroutines blocked on the mutex. This provides a more accurate representation of the degree to which a mutex is a bottleneck in a Go program. For instance, if 100 goroutines are blocked on a mutex for 10 milliseconds, a mutex profile will now record 1 second of delay instead of 10 milliseconds of delay. * runtime/pprof: Mutex profiles also now include contention on runtime- internal locks in addition to sync.Mutex and sync.RWMutex. Contention on runtime-internal locks is always reported at runtime._LostContendedRuntimeLock. A future release will add complete stack traces in these cases. * runtime/pprof: CPU profiles on Darwin platforms now contain the process's memory map, enabling the disassembly view in the pprof tool. * runtime/trace: The execution tracer has been completely overhauled in this release, resolving several long-standing issues and paving the way for new use-cases for execution traces. * runtime/trace: Execution traces now use the operating system's clock on most platforms (Windows excluded) so it is possible to correlate them with traces produced by lower-level components. Execution traces no longer depend on the reliability of the platform's clock to produce a correct trace. Execution traces are now partitioned regularly on-the-fly and as a result may be processed in a streamable way. Execution traces now contain complete durations for all system calls. Execution traces now contain information about the operating system threads that goroutines executed on. The latency impact of starting and stopping execution traces has been dramatically reduced. Execution traces may now begin or end during the garbage collection mark phase. * runtime/trace: To allow Go developers to take advantage of these improvements, an experimental trace reading package is available at golang.org/x/exp/trace. Note that this package only works on traces produced by programs built with go1.22 at the moment. Please try out the package and provide feedback on the corresponding proposal issue. * runtime/trace: If you experience any issues with the new execution tracer implementation, you may switch back to the old implementation by building your Go program with GOEXPERIMENT=noexectracer2. If you do, please file an issue, otherwise this option will be removed in a future release. * slices: The new function Concat concatenates multiple slices. * slices: Functions that shrink the size of a slice (Delete, DeleteFunc, Compact, CompactFunc, and Replace) now zero the elements between the new length and the old length. * slices: Insert now always panics if the argument i is out of range. Previously it did not panic in this situation if there were no elements to be inserted. * syscall: The syscall package has been frozen since Go 1.4 and was marked as deprecated in Go 1.11, causing many editors to warn about any use of the package. However, some non-deprecated functionality requires use of the syscall package, such as the os/exec.Cmd.SysProcAttr field. To avoid unnecessary complaints on such code, the syscall package is no longer marked as deprecated. The package remains frozen to most new functionality, and new code remains encouraged to use golang.org/x/sys/unix or golang.org/x/sys/windows where possible. * syscall: On Linux, the new SysProcAttr.PidFD field allows obtaining a PID FD when starting a child process via StartProcess or os/exec. * syscall: On Windows, passing O_SYNC to Open now causes write operations to go directly to disk, equivalent to O_SYNC on Unix platforms. * testing/slogtest: The new Run function uses sub-tests to run test cases, providing finer-grained control. * Ports: Darwin: On macOS on 64-bit x86 architecture (the darwin/amd64 port), the Go toolchain now generates position-independent executables (PIE) by default. Non-PIE binaries can be generated by specifying the -buildmode=exe build flag. On 64-bit ARM-based macOS (the darwin/arm64 port), the Go toolchain already generates PIE by default. go1.22 is the last release that will run on macOS 10.15 Catalina. Go 1.23 will require macOS 11 Big Sur or later. * Ports: Arm: The GOARM environment variable now allows you to select whether to use software or hardware floating point. Previously, valid GOARM values were 5, 6, or 7. Now those same values can be optionally followed by ,softfloat or ,hardfloat to select the floating-point implementation. This new option defaults to softfloat for version 5 and hardfloat for versions 6 and 7. * Ports: Loong64: The loong64 port now supports passing function arguments and results using registers. The linux/loong64 port now supports the address sanitizer, memory sanitizer, new-style linker relocations, and the plugin build mode. * OpenBSD go1.22 adds an experimental port to OpenBSD on big-endian 64-bit PowerPC (openbsd/ppc64). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3772=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3772=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.22-openssl-debuginfo-1.22.7.1-150000.1.3.1 * go1.22-openssl-race-1.22.7.1-150000.1.3.1 * go1.22-openssl-doc-1.22.7.1-150000.1.3.1 * go1.22-openssl-1.22.7.1-150000.1.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.22-openssl-debuginfo-1.22.7.1-150000.1.3.1 * go1.22-openssl-race-1.22.7.1-150000.1.3.1 * go1.22-openssl-doc-1.22.7.1-150000.1.3.1 * go1.22-openssl-1.22.7.1-150000.1.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45288.html * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2023-45290.html * https://www.suse.com/security/cve/CVE-2024-24783.html * https://www.suse.com/security/cve/CVE-2024-24784.html * https://www.suse.com/security/cve/CVE-2024-24785.html * https://www.suse.com/security/cve/CVE-2024-24787.html * https://www.suse.com/security/cve/CVE-2024-24788.html * https://www.suse.com/security/cve/CVE-2024-24789.html * https://www.suse.com/security/cve/CVE-2024-24790.html * https://www.suse.com/security/cve/CVE-2024-24791.html * https://www.suse.com/security/cve/CVE-2024-34155.html * https://www.suse.com/security/cve/CVE-2024-34156.html * https://www.suse.com/security/cve/CVE-2024-34158.html * https://bugzilla.suse.com/show_bug.cgi?id=1218424 * https://bugzilla.suse.com/show_bug.cgi?id=1219988 * https://bugzilla.suse.com/show_bug.cgi?id=1220999 * https://bugzilla.suse.com/show_bug.cgi?id=1221000 * https://bugzilla.suse.com/show_bug.cgi?id=1221001 * https://bugzilla.suse.com/show_bug.cgi?id=1221002 * https://bugzilla.suse.com/show_bug.cgi?id=1221003 * https://bugzilla.suse.com/show_bug.cgi?id=1221400 * https://bugzilla.suse.com/show_bug.cgi?id=1224017 * https://bugzilla.suse.com/show_bug.cgi?id=1224018 * https://bugzilla.suse.com/show_bug.cgi?id=1225973 * https://bugzilla.suse.com/show_bug.cgi?id=1225974 * https://bugzilla.suse.com/show_bug.cgi?id=1227314 * https://bugzilla.suse.com/show_bug.cgi?id=1230252 * https://bugzilla.suse.com/show_bug.cgi?id=1230253 * https://bugzilla.suse.com/show_bug.cgi?id=1230254 * https://jira.suse.com/browse/PED-1962 * https://jira.suse.com/browse/SLE-18320

1 0

SUSE-SU-2024:3773-1: important: Security update for go1.23-openssl
by OPENSUSE-UPDATES 29 Oct '24

29 Oct '24

# Security update for go1.23-openssl Announcement ID: SUSE-SU-2024:3773-1 Release Date: 2024-10-29T13:54:32Z Rating: important References: * bsc#1229122 * bsc#1230252 * bsc#1230253 * bsc#1230254 * jsc#SLE-18320 Cross-References: * CVE-2024-34155 * CVE-2024-34156 * CVE-2024-34158 CVSS scores: * CVE-2024-34155 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34156 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34156 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34158 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-34158 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities, contains one feature and has one security fix can now be installed. ## Description: This update for go1.23-openssl fixes the following issues: This update ships go1.23-openssl version 1.23.2.2. (jsc#SLE-18320) * go1.23.2 (released 2024-10-01) includes fixes to the compiler, cgo, the runtime, and the maps, os, os/exec, time, and unique packages. * go#69119 os: double close pidfd if caller uses pidfd updated by os.StartProcess * go#69156 maps: segmentation violation in maps.Clone * go#69219 cmd/cgo: alignment issue with int128 inside of a struct * go#69240 unique: fatal error: found pointer to free object * go#69333 runtime,time: timer.Stop returns false even when no value is read from the channel * go#69383 unique: large string still referenced, after interning only a small substring * go#69402 os/exec: resource leak on exec failure * go#69511 cmd/compile: mysterious crashes and non-determinism with range over func * Update to version 1.23.1.1 cut from the go1.23-fips-release branch at the revision tagged go1.23.1-1-openssl-fips. * Update to Go 1.23.1 (#238) * go1.23.1 (released 2024-09-05) includes security fixes to the encoding/gob, go/build/constraint, and go/parser packages, as well as bug fixes to the compiler, the go command, the runtime, and the database/sql, go/types, os, runtime/trace, and unique packages. CVE-2024-34155 CVE-2024-34156 CVE-2024-34158: * go#69143 go#69138 bsc#1230252 security: fix CVE-2024-34155 go/parser: stack exhaustion in all Parse* functions * go#69145 go#69139 bsc#1230253 security: fix CVE-2024-34156 encoding/gob: stack exhaustion in Decoder.Decode * go#69149 go#69141 bsc#1230254 security: fix CVE-2024-34158 go/build/constraint: stack exhaustion in Parse * go#68812 os: TestChtimes failures * go#68894 go/types: 'under' panics on Alias type * go#68905 cmd/compile: error in Go 1.23.0 with generics, type aliases and indexing * go#68907 os: CopyFS overwrites existing file in destination. * go#68973 cmd/cgo: aix c-archive corrupting stack * go#68992 unique: panic when calling unique.Make with string casted as any * go#68994 cmd/go: any invocation creates read-only telemetry configuration file under GOMODCACHE * go#68995 cmd/go: multi-arch build via qemu fails to exec go binary * go#69041 database/sql: panic in database/sql.(*connRequestSet).deleteIndex * go#69087 runtime/trace: crash during traceAdvance when collecting call stack for cgo-calling goroutine * go#69094 cmd/go: breaking change in 1.23rc2 with version constraints in GOPATH mode * go1.23 (released 2024-08-13) is a major release of Go. go1.23.x minor releases will be provided through August 2025. https://github.com/golang/go/wiki/Go-Release-Cycle go1.23 arrives six months after go1.22. Most of its changes are in the implementation of the toolchain, runtime, and libraries. As always, the release maintains the Go 1 promise of compatibility. We expect almost all Go programs to continue to compile and run as before. * Language change: Go 1.23 makes the (Go 1.22) "range-over-func" experiment a part of the language. The "range" clause in a "for-range" loop now accepts iterator functions of the following types: func(func() bool) func(func(K) bool) func(func(K, V) bool) as range expressions. Calls of the iterator argument function produce the iteration values for the "for-range" loop. For details see the iter package documentation and the language spec. For motivation see the 2022 "range-over-func" discussion. * Language change: Go 1.23 includes preview support for generic type aliases. Building the toolchain with GOEXPERIMENT=aliastypeparams enables this feature within a package. (Using generic alias types across package boundaries is not yet supported.) * Opt-in Telemetry: Starting in Go 1.23, the Go toolchain can collect usage and breakage statistics that help the Go team understand how the Go toolchain is used and how well it is working. We refer to these statistics as Go telemetry. Go telemetry is an opt-in system, controlled by the go telemetry command. By default, the toolchain programs collect statistics in counter files that can be inspected locally but are otherwise unused (go telemetry local). To help us keep Go working well and understand Go usage, please consider opting in to Go telemetry by running go telemetry on. In that mode, anonymous counter reports are uploaded to telemetry.go.dev weekly, where they are aggregated into graphs and also made available for download by any Go contributors or users wanting to analyze the data. See "Go Telemetry" for more details about the Go Telemetry system. * go command: Setting the GOROOT_FINAL environment variable no longer has an effect (#62047). Distributions that install the go command to a location other than $GOROOT/bin/go should install a symlink instead of relocating or copying the go binary. * go command: The new go env -changed flag causes the command to print only those settings whose effective value differs from the default value that would be obtained in an empty environment with no prior uses of the -w flag. * go command: The new go mod tidy -diff flag causes the command not to modify the files but instead print the necessary changes as a unified diff. It exits with a non-zero code if updates are needed. * go command: The go list -m -json command now includes new Sum and GoModSum fields. This is similar to the existing behavior of the go mod download -json command. * go command: The new godebug directive in go.mod and go.work declares a GODEBUG setting to apply for the work module or workspace in use. * go vet: The go vet subcommand now includes the stdversion analyzer, which flags references to symbols that are too new for the version of Go in effect in the referring file. (The effective version is determined by the go directive in the file's enclosing go.mod file, and by any //go:build constraints in the file.) For example, it will report a diagnostic for a reference to the reflect.TypeFor function (introduced in go1.22) from a file in a module whose go.mod file specifies go 1.21. * cgo: cmd/cgo supports the new -ldflags flag for passing flags to the C linker. The go command uses it automatically, avoiding "argument list too long" errors with a very large CGO_LDFLAGS. * go trace: The trace tool now better tolerates partially broken traces by attempting to recover what trace data it can. This functionality is particularly helpful when viewing a trace that was collected during a program crash, since the trace data leading up to the crash will now be recoverable under most circumstances. * Runtime: The traceback printed by the runtime after an unhandled panic or other fatal error now indents the second and subsequent lines of the error message (for example, the argument to panic) by a single tab, so that it can be unambiguously distinguished from the stack trace of the first goroutine. See go#64590 for discussion. * Compiler: The build time overhead to building with Profile Guided Optimization has been reduced significantly. Previously, large builds could see 100%+ build time increase from enabling PGO. In Go 1.23, overhead should be in the single digit percentages. * Compiler: The compiler in Go 1.23 can now overlap the stack frame slots of local variables accessed in disjoint regions of a function, which reduces stack usage for Go applications. * Compiler: For 386 and amd64, the compiler will use information from PGO to align certain hot blocks in loops. This improves performance an additional 1-1.5% at a cost of an additional 0.1% text and binary size. This is currently only implemented on 386 and amd64 because it has not shown an improvement on other platforms. Hot block alignment can be disabled with -gcflags=[<packages>=]-d=alignhot=0. * Linker: The linker now disallows using a //go:linkname directive to refer to internal symbols in the standard library (including the runtime) that are not marked with //go:linkname on their definitions. Similarly, the linker disallows references to such symbols from assembly code. For backward compatibility, existing usages of //go:linkname found in a large open-source code corpus remain supported. Any new references to standard library internal symbols will be disallowed. * Linker: A linker command line flag -checklinkname=0 can be used to disable this check, for debugging and experimenting purposes. * Linker: When building a dynamically linked ELF binary (including PIE binary), the new -bindnow flag enables immediate function binding. * Standard library changes: * timer: 1.23 makes two significant changes to the implementation of time.Timer and time.Ticker. First, Timers and Tickers that are no longer referred to by the program become eligible for garbage collection immediately, even if their Stop methods have not been called. Earlier versions of Go did not collect unstopped Timers until after they had fired and never collected unstopped Tickers. Second, the timer channel associated with a Timer or Ticker is now unbuffered, with capacity 0. The main effect of this change is that Go now guarantees that for any call to a Reset or Stop method, no stale values prepared before that call will be sent or received after the call. Earlier versions of Go used channels with a one- element buffer, making it difficult to use Reset and Stop correctly. A visible effect of this change is that len and cap of timer channels now returns 0 instead of 1, which may affect programs that poll the length to decide whether a receive on the timer channel will succeed. Such code should use a non-blocking receive instead. These new behaviors are only enabled when the main Go program is in a module with a go.mod go line using Go 1.23.0 or later. When Go 1.23 builds older programs, the old behaviors remain in effect. The new GODEBUG setting asynctimerchan=1 can be used to revert back to asynchronous channel behaviors even when a program names Go 1.23.0 or later in its go.mod file. * unique: The new unique package provides facilities for canonicalizing values (like "interning" or "hash-consing"). Any value of comparable type may be canonicalized with the new Make[T] function, which produces a reference to a canonical copy of the value in the form of a Handle[T]. Two Handle[T] are equal if and only if the values used to produce the handles are equal, allowing programs to deduplicate values and reduce their memory footprint. Comparing two Handle[T] values is efficient, reducing down to a simple pointer comparison. * iter: The new iter package provides the basic definitions for working with user-defined iterators. * slices: The slices package adds several functions that work with iterators: * All returns an iterator over slice indexes and values. * Values returns an iterator over slice elements. * Backward returns an iterator that loops over a slice backward. * Collect collects values from an iterator into a new slice. * AppendSeq appends values from an iterator to an existing slice. * Sorted collects values from an iterator into a new slice, and then sorts the slice. * SortedFunc is like Sorted but with a comparison function. * SortedStableFunc is like SortFunc but uses a stable sort algorithm. * Chunk returns an iterator over consecutive sub-slices of up to n elements of a slice. * maps: The maps package adds several functions that work with iterators: * All returns an iterator over key-value pairs from a map. * Keys returns an iterator over keys in a map. * Values returns an iterator over values in a map. * Insert adds the key-value pairs from an iterator to an existing map. * Collect collects key-value pairs from an iterator into a new map and returns it. * structs: The new structs package provides types for struct fields that modify properties of the containing struct type such as memory layout. In this release, the only such type is HostLayout which indicates that a structure with a field of that type has a layout that conforms to host platform expectations. * Minor changes to the standard library: As always, there are various minor changes and updates to the library, made with the Go 1 promise of compatibility in mind. * archive/tar: If the argument to FileInfoHeader implements the new FileInfoNames interface, then the interface methods will be used to set the Uname/Gname of the file header. This allows applications to override the system-dependent Uname/Gname lookup. * crypto/tls: The TLS client now supports the Encrypted Client Hello draft specification. This feature can be enabled by setting the Config.EncryptedClientHelloConfigList field to an encoded ECHConfigList for the host that is being connected to. * crypto/tls: The QUICConn type used by QUIC implementations includes new events reporting on the state of session resumption, and provides a way for the QUIC layer to add data to session tickets and session cache entries. * crypto/tls: 3DES cipher suites were removed from the default list used when Config.CipherSuites is nil. The default can be reverted by adding tls3des=1 to the GODEBUG environment variable. * crypto/tls: The experimental post-quantum key exchange mechanism X25519Kyber768Draft00 is now enabled by default when Config.CurvePreferences is nil. The default can be reverted by adding tlskyber=0 to the GODEBUG environment variable. * crypto/tls: Go 1.23 changed the behavior of X509KeyPair and LoadX509KeyPair to populate the Certificate.Leaf field of the returned Certificate. The new x509keypairleaf GODEBUG setting is added for this behavior. * crypto/x509: CreateCertificateRequest now correctly supports RSA-PSS signature algorithms. * crypto/x509: CreateCertificateRequest and CreateRevocationList now verify the generated signature using the signer's public key. If the signature is invalid, an error is returned. This has been the behavior of CreateCertificate since Go 1.16. * crypto/x509: The x509sha1 GODEBUG setting will be removed in the next Go major release (Go 1.24). This will mean that crypto/x509 will no longer support verifying signatures on certificates that use SHA-1 based signature algorithms. * crypto/x509: The new ParseOID function parses a dot-encoded ASN.1 Object Identifier string. The OID type now implements the encoding.BinaryMarshaler, encoding.BinaryUnmarshaler, encoding.TextMarshaler, encoding.TextUnmarshaler interfaces. database/sql * crypto/x509: Errors returned by driver.Valuer implementations are now wrapped for improved error handling during operations like DB.Query, DB.Exec, and DB.QueryRow. * debug/elf: The debug/elf package now defines PT_OPENBSD_NOBTCFI. This ProgType is used to disable Branch Tracking Control Flow Integrity (BTCFI) enforcement on OpenBSD binaries. * debug/elf: Now defines the symbol type constants STT_RELC, STT_SRELC, and STT_GNU_IFUNC. * encoding/binary The new Encode and Decode functions are byte slice equivalents to Read and Write. Append allows marshaling multiple data into the same byte slice. * go/ast: The new Preorder function returns a convenient iterator over all the nodes of a syntax tree. * go/types: The Func type, which represents a function or method symbol, now has a Func.Signature method that returns the function's type, which is always a Signature. * go/types: The Alias type now has an Rhs method that returns the type on the right-hand side of its declaration: given type A = B, the Rhs of A is B. (go#66559) * go/types: The methods Alias.Origin, Alias.SetTypeParams, Alias.TypeParams, and Alias.TypeArgs have been added. They are needed for generic alias types. * go/types: By default, go/types now produces Alias type nodes for type aliases. This behavior can be controlled by the GODEBUG gotypesalias flag. Its default has changed from 0 in Go 1.22 to 1 in Go 1.23. * math/rand/v2: The Uint function and Rand.Uint method have been added. They were inadvertently left out of Go 1.22. * math/rand/v2: The new ChaCha8.Read method implements the io.Reader interface. * net: The new type KeepAliveConfig permits fine-tuning the keep-alive options for TCP connections, via a new TCPConn.SetKeepAliveConfig method and new KeepAliveConfig fields for Dialer and ListenConfig. * net: The DNSError type now wraps errors caused by timeouts or cancellation. For example, errors.Is(someDNSErr, context.DeadlineExceedeed) will now report whether a DNS error was caused by a timeout. * net: The new GODEBUG setting netedns0=0 disables sending EDNS0 additional headers on DNS requests, as they reportedly break the DNS server on some modems. * net/http: Cookie now preserves double quotes surrounding a cookie value. The new Cookie.Quoted field indicates whether the Cookie.Value was originally quoted. * net/http: The new Request.CookiesNamed method retrieves all cookies that match the given name. * net/http: The new Cookie.Partitioned field identifies cookies with the Partitioned attribute. * net/http: The patterns used by ServeMux now allow one or more spaces or tabs after the method name. Previously, only a single space was permitted. * net/http: The new ParseCookie function parses a Cookie header value and returns all the cookies which were set in it. Since the same cookie name can appear multiple times the returned Values can contain more than one value for a given key. * net/http: The new ParseSetCookie function parses a Set-Cookie header value and returns a cookie. It returns an error on syntax error. * net/http: ServeContent, ServeFile, and ServeFileFS now remove the Cache- Control, Content-Encoding, Etag, and Last-Modified headers when serving an error. These headers usually apply to the non-error content, but not to the text of errors. * net/http: Middleware which wraps a ResponseWriter and applies on-the-fly encoding, such as Content-Encoding: gzip, will not function after this change. The previous behavior of ServeContent, ServeFile, and ServeFileFS may be restored by setting GODEBUG=httpservecontentkeepheaders=1. Note that middleware which changes the size of the served content (such as by compressing it) already does not function properly when ServeContent handles a Range request. On-the-fly compression should use the Transfer-Encoding header instead of Content-Encoding. * net/http: For inbound requests, the new Request.Pattern field contains the ServeMux pattern (if any) that matched the request. This field is not set when GODEBUG=httpmuxgo121=1 is set. * net/http/httptest: The new NewRequestWithContext method creates an incoming request with a context.Context. * net/netip: In Go 1.22 and earlier, using reflect.DeepEqual to compare an Addr holding an IPv4 address to one holding the IPv4-mapped IPv6 form of that address incorrectly returned true, even though the Addr values were different when comparing with == or Addr.Compare. This bug is now fixed and all three approaches now report the same result. * os: The Stat function now sets the ModeSocket bit for files that are Unix sockets on Windows. These files are identified by having a reparse tag set to IO_REPARSE_TAG_AF_UNIX. * os: On Windows, the mode bits reported by Lstat and Stat for reparse points changed. Mount points no longer have ModeSymlink set, and reparse points that are not symlinks, Unix sockets, or dedup files now always have ModeIrregular set. This behavior is controlled by the winsymlink setting. For Go 1.23, it defaults to winsymlink=1. Previous versions default to winsymlink=0. * os: The CopyFS function copies an io/fs.FS into the local filesystem. * os: On Windows, Readlink no longer tries to normalize volumes to drive letters, which was not always even possible. This behavior is controlled by the winreadlinkvolume setting. For Go 1.23, it defaults to winreadlinkvolume=1. Previous versions default to winreadlinkvolume=0. * os: On Linux with pidfd support (generally Linux v5.4+), Process-related functions and methods use pidfd (rather than PID) internally, eliminating potential mistargeting when a PID is reused by the OS. Pidfd support is fully transparent to a user, except for additional process file descriptors that a process may have. * path/filepath: The new Localize function safely converts a slash-separated path into an operating system path. * path/filepath: On Windows, EvalSymlinks no longer evaluates mount points, which was a source of many inconsistencies and bugs. This behavior is controlled by the winsymlink setting. For Go 1.23, it defaults to winsymlink=1. Previous versions default to winsymlink=0. * path/filepath: On Windows, EvalSymlinks no longer tries to normalize volumes to drive letters, which was not always even possible. This behavior is controlled by the winreadlinkvolume setting. For Go 1.23, it defaults to winreadlinkvolume=1. Previous versions default to winreadlinkvolume=0. * reflect: The new methods synonymous with the methods of the same name in Value are added to Type: * Type.OverflowComplex * Type.OverflowFloat * Type.OverflowInt * Type.OverflowUint * reflect: The new SliceAt function is analogous to NewAt, but for slices. * reflect: The Value.Pointer and Value.UnsafePointer methods now support values of kind String. * reflect: The new methods Value.Seq and Value.Seq2 return sequences that iterate over the value as though it were used in a for/range loop. The new methods Type.CanSeq and Type.CanSeq2 report whether calling Value.Seq and Value.Seq2, respectively, will succeed without panicking. * runtime/debug: The SetCrashOutput function allows the user to specify an alternate file to which the runtime should write its fatal crash report. It may be used to construct an automated reporting mechanism for all unexpected crashes, not just those in goroutines that explicitly use recover. * runtime/pprof: The maximum stack depth for alloc, mutex, block, threadcreate and goroutine profiles has been raised from 32 to 128 frames. * runtime/trace: The runtime now explicitly flushes trace data when a program crashes due to an uncaught panic. This means that more complete trace data will be available in a trace if the program crashes while tracing is active. * slices: The Repeat function returns a new slice that repeats the provided slice the given number of times. * sync: The Map.Clear method deletes all the entries, resulting in an empty Map. It is analogous to clear. * sync/atomic: The new And and Or operators apply a bitwise AND or OR to the given input, returning the old value. * syscall: The syscall package now defines WSAENOPROTOOPT on Windows. * syscall: The GetsockoptInt function is now supported on Windows. * testing/fstest: TestFS now returns a structured error that can be unwrapped (via method Unwrap() []error). This allows inspecting errors using errors.Is or errors.As. * text/template: Templates now support the new "else with" action, which reduces template complexity in some use cases. * time: Parse and ParseInLocation now return an error if the time zone offset is out of range. * unicode/utf16: The RuneLen function returns the number of 16-bit words in the UTF-16 encoding of the rune. It returns -1 if the rune is not a valid value to encode in UTF-16. * Port: Darwin: As announced in the Go 1.22 release notes, Go 1.23 requires macOS 11 Big Sur or later; support for previous versions has been discontinued. * Port: Linux: Go 1.23 is the last release that requires Linux kernel version 2.6.32 or later. Go 1.24 will require Linux kernel version 3.17 or later, with an exception that systems running 3.10 or later will continue to be supported if the kernel has been patched to support the getrandom system call. * Port: OpenBSD: Go 1.23 adds experimental support for OpenBSD on 64-bit RISC-V (GOOS=openbsd, GOARCH=riscv64). * Port: ARM64: Go 1.23 introduces a new GOARM64 environment variable, which specifies the minimum target version of the ARM64 architecture at compile time. Allowed values are v8.{0-9} and v9.{0-5}. This may be followed by an option specifying extensions implemented by target hardware. Valid options are ,lse and ,crypto. The GOARM64 environment variable defaults to v8.0. * Port: RISC-V: Go 1.23 introduces a new GORISCV64 environment variable, which selects the RISC-V user-mode application profile for which to compile. Allowed values are rva20u64 and rva22u64. The GORISCV64 environment variable defaults to rva20u64. * Port: Wasm: The go_wasip1_wasm_exec script in GOROOT/misc/wasm has dropped support for versions of wasmtime < 14.0.0. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3773=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3773=1 ## Package List: * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * go1.23-openssl-doc-1.23.2.2-150000.1.3.1 * go1.23-openssl-debuginfo-1.23.2.2-150000.1.3.1 * go1.23-openssl-1.23.2.2-150000.1.3.1 * go1.23-openssl-race-1.23.2.2-150000.1.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * go1.23-openssl-doc-1.23.2.2-150000.1.3.1 * go1.23-openssl-debuginfo-1.23.2.2-150000.1.3.1 * go1.23-openssl-1.23.2.2-150000.1.3.1 * go1.23-openssl-race-1.23.2.2-150000.1.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34155.html * https://www.suse.com/security/cve/CVE-2024-34156.html * https://www.suse.com/security/cve/CVE-2024-34158.html * https://bugzilla.suse.com/show_bug.cgi?id=1229122 * https://bugzilla.suse.com/show_bug.cgi?id=1230252 * https://bugzilla.suse.com/show_bug.cgi?id=1230253 * https://bugzilla.suse.com/show_bug.cgi?id=1230254 * https://jira.suse.com/browse/SLE-18320

1 0

SUSE-SU-2024:3774-1: important: Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
by OPENSUSE-UPDATES 29 Oct '24

29 Oct '24

# Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3774-1 Release Date: 2024-10-29T15:04:01Z Rating: important References: * bsc#1223683 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225819 * bsc#1226325 * bsc#1227471 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-47291 * CVE-2021-47598 * CVE-2023-52752 * CVE-2024-26923 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35864 * CVE-2024-35950 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3774=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3774=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_45-debugsource-4-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_164-default-debuginfo-4-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_164-default-4-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_164-preempt-4-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_164-preempt-debuginfo-4-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_164-default-4-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2023-52752.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3765-1: moderate: Security update for openssl-1_1
by OPENSUSE-UPDATES 29 Oct '24

29 Oct '24

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2024:3765-1 Release Date: 2024-10-29T01:34:21Z Rating: moderate References: * bsc#1220262 Cross-References: * CVE-2023-50782 CVSS scores: * CVE-2023-50782 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-50782 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-50782 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3765=1 openSUSE-SLE-15.5-2024-3765=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3765=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3765=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3765=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libopenssl1_1-debuginfo-1.1.1l-150500.17.37.1 * openssl-1_1-1.1.1l-150500.17.37.1 * libopenssl1_1-hmac-1.1.1l-150500.17.37.1 * openssl-1_1-debugsource-1.1.1l-150500.17.37.1 * libopenssl-1_1-devel-1.1.1l-150500.17.37.1 * libopenssl1_1-1.1.1l-150500.17.37.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.37.1 * openSUSE Leap 15.5 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.37.1 * libopenssl-1_1-devel-32bit-1.1.1l-150500.17.37.1 * libopenssl1_1-32bit-1.1.1l-150500.17.37.1 * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.37.1 * openSUSE Leap 15.5 (noarch) * openssl-1_1-doc-1.1.1l-150500.17.37.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl1_1-hmac-64bit-1.1.1l-150500.17.37.1 * libopenssl-1_1-devel-64bit-1.1.1l-150500.17.37.1 * libopenssl1_1-64bit-1.1.1l-150500.17.37.1 * libopenssl1_1-64bit-debuginfo-1.1.1l-150500.17.37.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150500.17.37.1 * openssl-1_1-1.1.1l-150500.17.37.1 * libopenssl1_1-hmac-1.1.1l-150500.17.37.1 * openssl-1_1-debugsource-1.1.1l-150500.17.37.1 * libopenssl-1_1-devel-1.1.1l-150500.17.37.1 * libopenssl1_1-1.1.1l-150500.17.37.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.37.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150500.17.37.1 * openssl-1_1-1.1.1l-150500.17.37.1 * libopenssl1_1-hmac-1.1.1l-150500.17.37.1 * openssl-1_1-debugsource-1.1.1l-150500.17.37.1 * libopenssl-1_1-devel-1.1.1l-150500.17.37.1 * libopenssl1_1-1.1.1l-150500.17.37.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.37.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150500.17.37.1 * openssl-1_1-1.1.1l-150500.17.37.1 * libopenssl1_1-hmac-1.1.1l-150500.17.37.1 * openssl-1_1-debugsource-1.1.1l-150500.17.37.1 * libopenssl-1_1-devel-1.1.1l-150500.17.37.1 * libopenssl1_1-1.1.1l-150500.17.37.1 * openssl-1_1-debuginfo-1.1.1l-150500.17.37.1 * Basesystem Module 15-SP5 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150500.17.37.1 * libopenssl1_1-32bit-1.1.1l-150500.17.37.1 * libopenssl1_1-hmac-32bit-1.1.1l-150500.17.37.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50782.html * https://bugzilla.suse.com/show_bug.cgi?id=1220262

1 0

SUSE-SU-2024:3766-1: important: Security update for openssl-3
by OPENSUSE-UPDATES 29 Oct '24

29 Oct '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:3766-1 Release Date: 2024-10-29T01:34:36Z Rating: important References: * bsc#1220262 * bsc#1230698 Cross-References: * CVE-2023-50782 * CVE-2024-41996 CVSS scores: * CVE-2023-50782 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-50782 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-50782 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-41996 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-41996 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262) * CVE-2024-41996: Avoid expensive public key validation for known safe-prime groups (DHEATATTACK) (bsc#1230698) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3766=1 openSUSE-SLE-15.5-2024-3766=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3766=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libopenssl-3-devel-3.0.8-150500.5.48.1 * openssl-3-debugsource-3.0.8-150500.5.48.1 * libopenssl3-debuginfo-3.0.8-150500.5.48.1 * openssl-3-3.0.8-150500.5.48.1 * libopenssl3-3.0.8-150500.5.48.1 * openssl-3-debuginfo-3.0.8-150500.5.48.1 * openSUSE Leap 15.5 (x86_64) * libopenssl-3-devel-32bit-3.0.8-150500.5.48.1 * libopenssl3-32bit-debuginfo-3.0.8-150500.5.48.1 * libopenssl3-32bit-3.0.8-150500.5.48.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.48.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl-3-devel-64bit-3.0.8-150500.5.48.1 * libopenssl3-64bit-3.0.8-150500.5.48.1 * libopenssl3-64bit-debuginfo-3.0.8-150500.5.48.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl-3-devel-3.0.8-150500.5.48.1 * openssl-3-debugsource-3.0.8-150500.5.48.1 * libopenssl3-debuginfo-3.0.8-150500.5.48.1 * openssl-3-3.0.8-150500.5.48.1 * libopenssl3-3.0.8-150500.5.48.1 * openssl-3-debuginfo-3.0.8-150500.5.48.1 ## References: * https://www.suse.com/security/cve/CVE-2023-50782.html * https://www.suse.com/security/cve/CVE-2024-41996.html * https://bugzilla.suse.com/show_bug.cgi?id=1220262 * https://bugzilla.suse.com/show_bug.cgi?id=1230698

1 0

openSUSE-SU-2024:0341-1: important: Security update for chromium
by opensuse-security＠opensuse.org 28 Oct '24

28 Oct '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0341-1 Rating: important References: #1232060 Cross-References: CVE-2024-10229 CVE-2024-10230 CVE-2024-10231 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 130.0.6723.69 (boo#1232060) * CVE-2024-10229: Inappropriate implementation in Extensions * CVE-2024-10230: Type Confusion in V8 * CVE-2024-10231: Type Confusion in V8 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-341=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-341=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): chromedriver-130.0.6723.69-bp156.2.44.1 chromedriver-debuginfo-130.0.6723.69-bp156.2.44.1 chromium-130.0.6723.69-bp156.2.44.1 chromium-debuginfo-130.0.6723.69-bp156.2.44.1 - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-130.0.6723.69-bp155.2.132.1 chromium-130.0.6723.69-bp155.2.132.1 References: https://www.suse.com/security/cve/CVE-2024-10229.html https://www.suse.com/security/cve/CVE-2024-10230.html https://www.suse.com/security/cve/CVE-2024-10231.html https://bugzilla.suse.com/1232060

1 0

SUSE-RU-2024:3763-1: moderate: Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
by OPENSUSE-UPDATES 28 Oct '24

28 Oct '24

# Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open- driver-G06-signed Announcement ID: SUSE-RU-2024:3763-1 Release Date: 2024-10-28T10:46:50Z Rating: moderate References: * bsc#1223454 * bsc#1227417 * bsc#1227419 * bsc#1227575 * bsc#1229716 * bsc#1230368 * bsc#1230779 * bsc#1232057 Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has eight fixes can now be installed. ## Description: This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Changes in kernel-firmware-nvidia-gspx-G06: * Update to version 555.42.06 for CUDA. * Update to 550.100 (bsc#1227575) * Add a second flavor to be used by the kernel module versions used by CUDA. The firmware targetting CUDA contains '-cuda' in its name to track its versions separately from the graphics firmware. (bsc#1227417) Changes in nvidia-open-driver-G06-signed: * Update to 550.127.05 (boo#1232057) * Fixed a bug which could cause applications using GBM to crash when running with nvidia-drm.modeset=0. * cuda-flavor provide also nvidia-open-driver-G06-kmp-$flavor = %version to workaround broken cuda-drivers * For CUDA update version to 560.35.03 * cuda-flavor * provide nvidia-open-driver-G06-kmp = %version to workaround broken cuda- drivers * nv-prefer-signed-open-driver * added comments for requirements * latest change hardcoded to 555.42.06; we no longer need this for 560 * nv-prefer-signed-open-driver: * added specicic versions of cuda-drivers/cuda-drivers-xxx as preconditions for requiring specific version of nvidia-compute-G06 * nv-prefer-signed-open-driver: * no longer require a specific version of nvidia-open-driver-G06-signed-cuda- kmp, so it can select the correct open driver KMP matching the cuda-runtime version * cuda-flavor: * added nvidia-compute-G06 = %version to preconditions for requiring kernel- firmware-nvidia-gspx-G06, since nvidia-compute-utils-G06 does not have a version-specific requires on nvidia-compute-G06 * cuda-flavor: * require kernel-firmware-nvidia-gspx-G06 instead of kernel-firmware-nvidia- gspx-G06-cuda (which provides also kernel-firmware-nvidia-gspx-G06) * trigger removal of driver modules also on kernel-firmware-nvidia-gspx-G06 * no longer hard-require kernel firmware package, but install it automatically once nvidia-compute-utils-G06 gets installed * trigger removal of driver modules with non-existing or wrong firmware when (new) firmware gets installed * Update to 550.120 (boo#1230779) * Fixed a bug that could cause kernel crashes upon attempting KMS operations through DRM when nvidia_drm was loaded with modeset=0. * CUDA build: removed entries from pci_ids-555.42.06 since this is doing more harm than benefit (bsc#1230368) * For CUDA (preamble file): * added: Provides: nvidia-open-driver-G06-signed-cuda-kmp-$flavor = %version which is needed for 'zypper install <package> = <version>' * added: Provides/Conflicts: nvidia-open-driver-G06-signed-kmp-$flavor = %version useful for containers * reverted CUDA update version to 560.x.y due to changes in CUDA repository with CUDA 12.6/560.x.y drivers * For CUDA update version to 560.35.03 * Update to 550.107.02 (boo#1229716) * For CUDA update version to 560.28.03 * Update to version 555.42.06 for CUDA. * Update to 550.100 (bsc#1227575) * Fixed a bug that caused OpenGL triple buffering to behave like double buffering. * To avoid issues with missing dependencies when no CUDA repo is present make the dependecy to nvidia-compute-G06 conditional. * CUDA is not available for Tumbleweed, exclude the build of the cuda flavor. * preamble: let the -cuda flavor KMP require the -cuda flavor firmware * Add a second flavor for building the kernel module versions used by CUDA. The kmp targetting CUDA contains '-cuda' in its name to track its versions separately from the graphics kmp. (bsc#1227417) * Provide the meta package nv-prefer-signed-open-driver to make sure the latest available SUSE-build open driver is installed - independent of the latest available open driver version in he CUDA repository. Rationale: The package cuda-runtime provides the link between CUDA and the kernel driver version through a Requires: cuda-drivers >= %version This implies that a CUDA version will run withany kernel driver version equal or higher than a base version. nvidia-compute-G06 provides the glue layer between CUDA and a specific version of he kernel driver both by providing a set of base libraries and by requiring a specific kernel version. 'cuda-drivers' (provided by nvidia-compute-utils-G06) requires an unversioned nvidia- compute-G06. With this, the resolver will install the latest available and applicable nvidia-compute-G06. nv-prefer-signed-open-driver then represents the latest available open driver version and restricts the nvidia- compute-G06 version to it. (bsc#1227419) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3763=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3763=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3763=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3763=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3763=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3763=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3763=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3763=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3763=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3763=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3763=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3763=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3763=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3763=1 ## Package List: * openSUSE Leap 15.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * openSUSE Leap 15.4 (x86_64) * nvidia-open-driver-G06-signed-cuda-azure-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-azure-devel-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-azure-debuginfo-560.35.03_k5.14.21_150400.12-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.127.05_k5.14.21_150400.12-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-azure-550.127.05_k5.14.21_150400.12-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-azure-560.35.03_k5.14.21_150400.12-150400.9.71.2 * openSUSE Leap 15.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-default-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-default-devel-550.127.05-150400.9.71.2 * openSUSE Leap 15.4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-64kb-devel-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-64kb-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * Public Cloud Module 15-SP4 (x86_64) * nvidia-open-driver-G06-signed-cuda-azure-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-azure-debuginfo-560.35.03_k5.14.21_150400.12-150400.9.71.2 * nvidia-open-driver-G06-signed-azure-devel-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-azure-debuginfo-550.127.05_k5.14.21_150400.12-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-azure-550.127.05_k5.14.21_150400.12-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-azure-560.35.03_k5.14.21_150400.12-150400.9.71.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-default-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-default-devel-550.127.05-150400.9.71.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-64kb-devel-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-64kb-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-default-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-default-devel-550.127.05-150400.9.71.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-64kb-devel-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-64kb-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-default-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-default-devel-550.127.05-150400.9.71.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-default-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-default-devel-550.127.05-150400.9.71.2 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64) * nvidia-open-driver-G06-signed-kmp-64kb-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-64kb-devel-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-64kb-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-64kb-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-64kb-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-default-devel-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * SUSE Manager Proxy 4.3 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Manager Proxy 4.3 (x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-default-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-default-devel-550.127.05-150400.9.71.2 * SUSE Manager Retail Branch Server 4.3 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-default-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-default-devel-550.127.05-150400.9.71.2 * SUSE Manager Server 4.3 (nosrc x86_64) * kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150400.9.40.1 * kernel-firmware-nvidia-gspx-G06-550.100-150400.9.40.1 * SUSE Manager Server 4.3 (x86_64) * nvidia-open-driver-G06-signed-cuda-kmp-default-debuginfo-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-debugsource-550.127.05-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-kmp-default-560.35.03_k5.14.21_150400.22-150400.9.71.2 * nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.127.05_k5.14.21_150400.22-150400.9.71.2 * nv-prefer-signed-open-driver-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-default-devel-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-cuda-debugsource-560.35.03-150400.9.71.2 * nvidia-open-driver-G06-signed-default-devel-550.127.05-150400.9.71.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223454 * https://bugzilla.suse.com/show_bug.cgi?id=1227417 * https://bugzilla.suse.com/show_bug.cgi?id=1227419 * https://bugzilla.suse.com/show_bug.cgi?id=1227575 * https://bugzilla.suse.com/show_bug.cgi?id=1229716 * https://bugzilla.suse.com/show_bug.cgi?id=1230368 * https://bugzilla.suse.com/show_bug.cgi?id=1230779 * https://bugzilla.suse.com/show_bug.cgi?id=1232057

1 0

openSUSE-RU-2024:0340-1: moderate: Recommended update for virtme
by maintenance＠opensuse.org 27 Oct '24

27 Oct '24

openSUSE Recommended Update: Recommended update for virtme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0340-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtme fixes the following issues: - Update to 1.31: * Fix a packaging issue, after an attempt to modernize the build system we realized that we were not installing the bash completion file anymore, so we have temporarily reverted the change to cut this new release. See gh/arighi/virtme-ng#181 * Initial support to run virtme-ng on macOS - Update to 1.30: * Initial support for NVIDIA GPUs passthrough * Possibility to use pre-compiled -rc kernels from Ubuntu mainline builds * Possibility to use virtiofs natively on arm64 * Some improvements to run virtme-ng cross-architecture and cross-distro * Bug fixes - Update to 1.29: * Minor packaging fix, addressing an issue where the requirements.txt file was missing from the source tarball published on PyPI. This won't affect anyone, unless you're trying to build virtme-ng directly from the tarball available on PyPI Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-340=1 Package List: - openSUSE Backports SLE-15-SP5 (noarch): virtme-1.31-bp155.5.31.1 References:

1 0

openSUSE-SU-2024:0338-1: moderate: Security update for hostapd
by opensuse-security＠opensuse.org 27 Oct '24

27 Oct '24

openSUSE Security Update: Security update for hostapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0338-1 Rating: moderate References: #1150934 Cross-References: CVE-2023-52424 CVSS scores: CVE-2023-52424 (SUSE): 5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hostapd fixes the following issues: hostapd was updated to 2024-07-20 / v2.11 * Wi-Fi Easy Connect - add support for DPP release 3 - allow Configurator parameters to be provided during config exchange * HE/IEEE 802.11ax/Wi-Fi 6 - various fixes * EHT/IEEE 802.11be/Wi-Fi 7 - add preliminary support * SAE: add support for fetching the password from a RADIUS server * support OpenSSL 3.0 API changes * support background radar detection and CAC with some additional drivers * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3) * EAP-SIM/AKA: support IMSI privacy * improve 4-way handshake operations - use Secure=1 in message 3 during PTK rekeying * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases to avoid interoperability issues * support new SAE AKM suites with variable length keys * support new AKM for 802.1X/EAP with SHA384 * extend PASN support for secure ranging * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP) - this is based on additional details being added in the IEEE 802.11 standard - the new implementation is not backwards compatible * improved ACS to cover additional channel types/bandwidths * extended Multiple BSSID support * fix beacon protection with FT protocol (incorrect BIGTK was provided) * support unsynchronized service discovery (USD) * add preliminary support for RADIUS/TLS * add support for explicit SSID protection in 4-way handshake (a mitigation for CVE-2023-52424; disabled by default for now, can be enabled with ssid_protection=1) * fix SAE H2E rejected groups validation to avoid downgrade attacks * use stricter validation for some RADIUS messages * a large number of other fixes, cleanup, and extensions Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-338=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): hostapd-2.11-bp156.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-52424.html https://bugzilla.suse.com/1150934

1 0

SUSE-SU-2024:3752-1: important: Security update for webkit2gtk3
by OPENSUSE-UPDATES 24 Oct '24

24 Oct '24

# Security update for webkit2gtk3 Announcement ID: SUSE-SU-2024:3752-1 Release Date: 2024-10-24T03:33:57Z Rating: important References: * bsc#1231039 Cross-References: * CVE-2024-23206 * CVE-2024-23213 * CVE-2024-23222 * CVE-2024-23271 * CVE-2024-27808 * CVE-2024-27820 * CVE-2024-27833 * CVE-2024-27834 * CVE-2024-27838 * CVE-2024-27851 * CVE-2024-40866 * CVE-2024-44187 * CVE-2024-4558 CVSS scores: * CVE-2024-23206 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-23206 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-23213 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23213 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23222 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23222 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-23271 ( SUSE ): 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2024-27808 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27820 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27833 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27833 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27834 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27838 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-27838 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-27851 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-27851 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-40866 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-40866 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2024-44187 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2024-44187 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). * CVE-2024-40866 * CVE-2024-44187 Already fixed in version 2.44.3: * CVE-2024-27838 * CVE-2024-27851 Already fixed in version 2.44.2: * CVE-2024-27834 * CVE-2024-27808 * CVE-2024-27820 * CVE-2024-27833 Already fixed in version 2.44.1: * CVE-2024-23222 * CVE-2024-23206 * CVE-2024-23213 * CVE-2024-23271 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3752=1 openSUSE-SLE-15.6-2024-3752=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3752=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3752=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3752=1 ## Package List: * openSUSE Leap 15.6 (noarch) * WebKitGTK-6.0-lang-2.46.0-150600.12.12.1 * WebKitGTK-4.1-lang-2.46.0-150600.12.12.1 * WebKitGTK-4.0-lang-2.46.0-150600.12.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * webkit-jsc-6.0-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-devel-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-minibrowser-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk4-minibrowser-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150600.12.12.1 * webkit2gtk4-debugsource-2.46.0-150600.12.12.1 * webkit-jsc-4-2.46.0-150600.12.12.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150600.12.12.1 * webkit-jsc-6.0-2.46.0-150600.12.12.1 * webkit2gtk-4_0-injected-bundles-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-2.46.0-150600.12.12.1 * webkit2gtk4-minibrowser-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-2.46.0-150600.12.12.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-6_0-1-2.46.0-150600.12.12.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-6_0-2.46.0-150600.12.12.1 * webkitgtk-6_0-injected-bundles-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150600.12.12.1 * webkit2gtk3-debugsource-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2-4_1-2.46.0-150600.12.12.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * webkit-jsc-4-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-minibrowser-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2-4_0-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150600.12.12.1 * webkit2gtk3-devel-2.46.0-150600.12.12.1 * webkit2gtk4-devel-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150600.12.12.1 * webkit2gtk3-minibrowser-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk3-minibrowser-2.46.0-150600.12.12.1 * webkit-jsc-4.1-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-debugsource-2.46.0-150600.12.12.1 * libwebkitgtk-6_0-4-2.46.0-150600.12.12.1 * typelib-1_0-WebKit-6_0-2.46.0-150600.12.12.1 * webkit-jsc-4.1-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.0-150600.12.12.1 * openSUSE Leap 15.6 (x86_64) * libwebkit2gtk-4_1-0-32bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-32bit-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-32bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-32bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.46.0-150600.12.12.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libjavascriptcoregtk-4_0-18-64bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-64bit-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-64bit-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-64bit-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.46.0-150600.12.12.1 * Basesystem Module 15-SP6 (noarch) * WebKitGTK-6.0-lang-2.46.0-150600.12.12.1 * WebKitGTK-4.0-lang-2.46.0-150600.12.12.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk-4_0-injected-bundles-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2-4_0-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2WebExtension-4_0-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-devel-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_0-18-debuginfo-2.46.0-150600.12.12.1 * libwebkitgtk-6_0-4-2.46.0-150600.12.12.1 * webkit2gtk-4_0-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * libjavascriptcoregtk-6_0-1-2.46.0-150600.12.12.1 * webkit2gtk3-soup2-debugsource-2.46.0-150600.12.12.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.46.0-150600.12.12.1 * libwebkitgtk-6_0-4-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk4-debugsource-2.46.0-150600.12.12.1 * libwebkit2gtk-4_0-37-debuginfo-2.46.0-150600.12.12.1 * webkitgtk-6_0-injected-bundles-2.46.0-150600.12.12.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-4_0-2.46.0-150600.12.12.1 * Desktop Applications Module 15-SP6 (noarch) * WebKitGTK-4.1-lang-2.46.0-150600.12.12.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-devel-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-2.46.0-150600.12.12.1 * webkit2gtk3-debugsource-2.46.0-150600.12.12.1 * libwebkit2gtk-4_1-0-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2WebExtension-4_1-2.46.0-150600.12.12.1 * typelib-1_0-WebKit2-4_1-2.46.0-150600.12.12.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.46.0-150600.12.12.1 * webkit2gtk-4_1-injected-bundles-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-4_1-2.46.0-150600.12.12.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * webkit2gtk4-devel-2.46.0-150600.12.12.1 * webkit2gtk4-debugsource-2.46.0-150600.12.12.1 * typelib-1_0-JavaScriptCore-6_0-2.46.0-150600.12.12.1 * typelib-1_0-WebKit-6_0-2.46.0-150600.12.12.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.46.0-150600.12.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-23206.html * https://www.suse.com/security/cve/CVE-2024-23213.html * https://www.suse.com/security/cve/CVE-2024-23222.html * https://www.suse.com/security/cve/CVE-2024-23271.html * https://www.suse.com/security/cve/CVE-2024-27808.html * https://www.suse.com/security/cve/CVE-2024-27820.html * https://www.suse.com/security/cve/CVE-2024-27833.html * https://www.suse.com/security/cve/CVE-2024-27834.html * https://www.suse.com/security/cve/CVE-2024-27838.html * https://www.suse.com/security/cve/CVE-2024-27851.html * https://www.suse.com/security/cve/CVE-2024-40866.html * https://www.suse.com/security/cve/CVE-2024-44187.html * https://www.suse.com/security/cve/CVE-2024-4558.html * https://bugzilla.suse.com/show_bug.cgi?id=1231039

1 0

SUSE-SU-2024:3753-1: moderate: Security update for podman
by OPENSUSE-UPDATES 24 Oct '24

24 Oct '24

# Security update for podman Announcement ID: SUSE-SU-2024:3753-1 Release Date: 2024-10-24T03:34:23Z Rating: moderate References: * bsc#1231698 Cross-References: * CVE-2024-9676 CVSS scores: * CVE-2024-9676 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-9676 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-9676 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for podman fixes the following issues: * CVE-2024-9676: Fixed symlink traversal vulnerability in the containers/storage library that could cause Denial of Service (DoS) (bsc#1231698) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3753=1 openSUSE-SLE-15.5-2024-3753=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3753=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3753=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3753=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3753=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3753=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.28.1 * openSUSE Leap Micro 5.5 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * openSUSE Leap Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.28.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * openSUSE Leap 15.6 (noarch) * podman-docker-4.9.5-150500.3.28.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.28.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * Containers Module 15-SP5 (noarch) * podman-docker-4.9.5-150500.3.28.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150500.3.28.1 * podman-4.9.5-150500.3.28.1 * podman-remote-4.9.5-150500.3.28.1 * podmansh-4.9.5-150500.3.28.1 * podman-remote-debuginfo-4.9.5-150500.3.28.1 * Containers Module 15-SP6 (noarch) * podman-docker-4.9.5-150500.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9676.html * https://bugzilla.suse.com/show_bug.cgi?id=1231698

1 0

SUSE-SU-2024:3754-1: moderate: Security update for buildah
by OPENSUSE-UPDATES 24 Oct '24

24 Oct '24

# Security update for buildah Announcement ID: SUSE-SU-2024:3754-1 Release Date: 2024-10-24T03:34:40Z Rating: moderate References: * bsc#1231698 Cross-References: * CVE-2024-9676 CVSS scores: * CVE-2024-9676 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-9676 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2024-9676 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for buildah fixes the following issues: * CVE-2024-9676: Fixed symlink traversal vulnerability in the containers/storage library that could cause Denial of Service (DoS) (bsc#1231698) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3754=1 openSUSE-SLE-15.5-2024-3754=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3754=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3754=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3754=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.35.4-150500.3.19.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.19.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.19.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.19.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9676.html * https://bugzilla.suse.com/show_bug.cgi?id=1231698

1 0

SUSE-SU-2024:3755-1: important: Security update for go1.21-openssl
by OPENSUSE-UPDATES 24 Oct '24

24 Oct '24

# Security update for go1.21-openssl Announcement ID: SUSE-SU-2024:3755-1 Release Date: 2024-10-24T07:54:09Z Rating: important References: * bsc#1212475 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001 * bsc#1221002 * bsc#1221003 * bsc#1221400 * bsc#1224017 * bsc#1225973 * bsc#1225974 * bsc#1227314 * jsc#PED-1962 * jsc#SLE-18320 Cross-References: * CVE-2023-45288 * CVE-2023-45289 * CVE-2023-45290 * CVE-2024-24783 * CVE-2024-24784 * CVE-2024-24785 * CVE-2024-24787 * CVE-2024-24789 * CVE-2024-24790 * CVE-2024-24791 CVSS scores: * CVE-2023-45288 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45290 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24783 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24784 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24785 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24787 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-24789 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24789 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2024-24790 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L * CVE-2024-24790 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-24791 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 10 vulnerabilities, contains two features and has two security fixes can now be installed. ## Description: This update for go1.21-openssl fixes the following issues: * CVE-2024-24791: Fixed denial of service due to improper 100-continue handling (bsc#1227314) * CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip (bsc#1225973) * CVE-2024-24790: Fixed unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip (bsc#1225974) * CVE-2024-24787: Fixed arbitrary code execution during build on darwin in cmd/go (bsc#1224017) * CVE-2023-45288: Fixed denial of service due to close connections when receiving too many headers in net/http and x/net/http2 (bsc#1221400) * CVE-2023-45289: Fixed incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http and net/http/cookiejar (bsc#1221000) * CVE-2023-45290: Fixed memory exhaustion in Request.ParseMultipartForm in net/http (bsc#1221001) * CVE-2024-24783: Fixed denial of service on certificates with an unknown public key algorithm in crypto/x509 (bsc#1220999) * CVE-2024-24784: Fixed comments in display names are incorrectly handled in net/mail (bsc#1221002) * CVE-2024-24785: Fixed errors returned from MarshalJSON methods may break template escaping in html/template (bsc#1221003) Other fixes: \- Update to version 1.21.13.1 cut from the go1.21-fips-release (jsc#SLE-18320) \- Update to version 1.21.13 (bsc#1212475) \- Remove subpackage go1.x-openssl-libstd for compiled shared object libstd.so. (jsc#PED-1962) \- Ensure VERSION file is present in GOROOT as required by go tool dist and go tool distpack (bsc#1219988) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3755=1 SUSE-2024-3755=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3755=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * go1.21-openssl-1.21.13.1-150600.16.3.1 * go1.21-openssl-doc-1.21.13.1-150600.16.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-race-1.21.13.1-150600.16.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * go1.21-openssl-1.21.13.1-150600.16.3.1 * go1.21-openssl-race-1.21.13.1-150600.16.3.1 * go1.21-openssl-doc-1.21.13.1-150600.16.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45288.html * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2023-45290.html * https://www.suse.com/security/cve/CVE-2024-24783.html * https://www.suse.com/security/cve/CVE-2024-24784.html * https://www.suse.com/security/cve/CVE-2024-24785.html * https://www.suse.com/security/cve/CVE-2024-24787.html * https://www.suse.com/security/cve/CVE-2024-24789.html * https://www.suse.com/security/cve/CVE-2024-24790.html * https://www.suse.com/security/cve/CVE-2024-24791.html * https://bugzilla.suse.com/show_bug.cgi?id=1212475 * https://bugzilla.suse.com/show_bug.cgi?id=1219988 * https://bugzilla.suse.com/show_bug.cgi?id=1220999 * https://bugzilla.suse.com/show_bug.cgi?id=1221000 * https://bugzilla.suse.com/show_bug.cgi?id=1221001 * https://bugzilla.suse.com/show_bug.cgi?id=1221002 * https://bugzilla.suse.com/show_bug.cgi?id=1221003 * https://bugzilla.suse.com/show_bug.cgi?id=1221400 * https://bugzilla.suse.com/show_bug.cgi?id=1224017 * https://bugzilla.suse.com/show_bug.cgi?id=1225973 * https://bugzilla.suse.com/show_bug.cgi?id=1225974 * https://bugzilla.suse.com/show_bug.cgi?id=1227314 * https://jira.suse.com/browse/PED-1962 * https://jira.suse.com/browse/SLE-18320

1 0

SUSE-SU-2024:3748-1: moderate: Security update for cargo-c
by OPENSUSE-UPDATES 23 Oct '24

23 Oct '24

# Security update for cargo-c Announcement ID: SUSE-SU-2024:3748-1 Release Date: 2024-10-23T11:33:38Z Rating: moderate References: * bsc#1230683 Cross-References: * CVE-2024-45405 CVSS scores: * CVE-2024-45405 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-45405 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for cargo-c fixes the following issues: Security fixes: * CVE-2024-45405: Fixed gix-path improper path resolution (bsc#1230683) Other fixes: * Update to version 0.10.3~git0.ee7d7ef: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3748=1 openSUSE-SLE-15.6-2024-3748=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * cargo-c-debuginfo-0.10.3~git0.ee7d7ef-150600.3.3.1 * cargo-c-0.10.3~git0.ee7d7ef-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-45405.html * https://bugzilla.suse.com/show_bug.cgi?id=1230683

1 0

SUSE-RU-2024:3743-1: moderate: Recommended update for pcp
by OPENSUSE-UPDATES 22 Oct '24

22 Oct '24

# Recommended update for pcp Announcement ID: SUSE-RU-2024:3743-1 Release Date: 2024-10-22T12:09:55Z Rating: moderate References: * bsc#1231345 Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for pcp fixes the following issues: * Reintroduce libuv support for SLE >= 15 (bsc#1231345). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3743=1 openSUSE-SLE-15.6-2024-3743=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3743=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * pcp-pmda-lustrecomm-6.2.0-150600.3.9.1 * perl-PCP-PMDA-6.2.0-150600.3.9.1 * pcp-pmda-nvidia-gpu-debuginfo-6.2.0-150600.3.9.1 * pcp-gui-6.2.0-150600.3.9.1 * pcp-pmda-cifs-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-apache-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-hacluster-debuginfo-6.2.0-150600.3.9.1 * python3-pcp-6.2.0-150600.3.9.1 * pcp-pmda-mounts-6.2.0-150600.3.9.1 * pcp-pmda-logger-6.2.0-150600.3.9.1 * pcp-6.2.0-150600.3.9.1 * libpcp_import1-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-shping-6.2.0-150600.3.9.1 * python3-pcp-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-trace-debuginfo-6.2.0-150600.3.9.1 * libpcp3-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-docker-6.2.0-150600.3.9.1 * pcp-pmda-mailq-6.2.0-150600.3.9.1 * pcp-pmda-smart-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-dm-6.2.0-150600.3.9.1 * pcp-pmda-roomtemp-6.2.0-150600.3.9.1 * libpcp_gui2-6.2.0-150600.3.9.1 * pcp-import-collectl2pcp-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-systemd-debuginfo-6.2.0-150600.3.9.1 * pcp-testsuite-debuginfo-6.2.0-150600.3.9.1 * libpcp_mmv1-6.2.0-150600.3.9.1 * libpcp_mmv1-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-weblog-6.2.0-150600.3.9.1 * perl-PCP-LogImport-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-bash-6.2.0-150600.3.9.1 * libpcp3-6.2.0-150600.3.9.1 * libpcp-devel-6.2.0-150600.3.9.1 * pcp-pmda-bash-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-cisco-6.2.0-150600.3.9.1 * pcp-pmda-smart-6.2.0-150600.3.9.1 * libpcp_web1-6.2.0-150600.3.9.1 * pcp-devel-6.2.0-150600.3.9.1 * pcp-debugsource-6.2.0-150600.3.9.1 * pcp-pmda-sendmail-6.2.0-150600.3.9.1 * pcp-pmda-trace-6.2.0-150600.3.9.1 * perl-PCP-LogImport-6.2.0-150600.3.9.1 * perl-PCP-LogSummary-6.2.0-150600.3.9.1 * perl-PCP-MMV-debuginfo-6.2.0-150600.3.9.1 * perl-PCP-MMV-6.2.0-150600.3.9.1 * pcp-pmda-gfs2-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-summary-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-roomtemp-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-lustrecomm-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-sockets-6.2.0-150600.3.9.1 * libpcp_trace2-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-bind2-6.2.0-150600.3.9.1 * pcp-pmda-docker-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-logger-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-summary-6.2.0-150600.3.9.1 * pcp-pmda-zimbra-debuginfo-6.2.0-150600.3.9.1 * pcp-gui-debuginfo-6.2.0-150600.3.9.1 * libpcp_gui2-debuginfo-6.2.0-150600.3.9.1 * pcp-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-shping-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-systemd-6.2.0-150600.3.9.1 * pcp-pmda-mounts-debuginfo-6.2.0-150600.3.9.1 * libpcp_web1-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-weblog-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-gfs2-6.2.0-150600.3.9.1 * pcp-system-tools-6.2.0-150600.3.9.1 * pcp-pmda-hacluster-6.2.0-150600.3.9.1 * pcp-pmda-sendmail-debuginfo-6.2.0-150600.3.9.1 * pcp-devel-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-mailq-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-nvidia-gpu-6.2.0-150600.3.9.1 * pcp-import-collectl2pcp-6.2.0-150600.3.9.1 * pcp-pmda-cifs-6.2.0-150600.3.9.1 * pcp-pmda-sockets-debuginfo-6.2.0-150600.3.9.1 * libpcp_import1-6.2.0-150600.3.9.1 * pcp-pmda-apache-6.2.0-150600.3.9.1 * pcp-system-tools-debuginfo-6.2.0-150600.3.9.1 * libpcp_trace2-6.2.0-150600.3.9.1 * pcp-testsuite-6.2.0-150600.3.9.1 * pcp-pmda-dm-debuginfo-6.2.0-150600.3.9.1 * perl-PCP-PMDA-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-cisco-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-zimbra-6.2.0-150600.3.9.1 * openSUSE Leap 15.6 (noarch) * pcp-pmda-mic-6.2.0-150600.3.9.1 * pcp-pmda-news-6.2.0-150600.3.9.1 * pcp-pmda-haproxy-6.2.0-150600.3.9.1 * pcp-pmda-pdns-6.2.0-150600.3.9.1 * pcp-export-pcp2spark-6.2.0-150600.3.9.1 * pcp-pmda-samba-6.2.0-150600.3.9.1 * pcp-pmda-nginx-6.2.0-150600.3.9.1 * pcp-pmda-ds389log-6.2.0-150600.3.9.1 * pcp-import-ganglia2pcp-6.2.0-150600.3.9.1 * pcp-pmda-slurm-6.2.0-150600.3.9.1 * pcp-pmda-memcache-6.2.0-150600.3.9.1 * pcp-pmda-openmetrics-6.2.0-150600.3.9.1 * pcp-pmda-lmsensors-6.2.0-150600.3.9.1 * pcp-pmda-oracle-6.2.0-150600.3.9.1 * pcp-pmda-nfsclient-6.2.0-150600.3.9.1 * pcp-pmda-gpsd-6.2.0-150600.3.9.1 * pcp-pmda-mysql-6.2.0-150600.3.9.1 * pcp-pmda-snmp-6.2.0-150600.3.9.1 * pcp-export-pcp2influxdb-6.2.0-150600.3.9.1 * pcp-zeroconf-6.2.0-150600.3.9.1 * pcp-export-pcp2zabbix-6.2.0-150600.3.9.1 * pcp-export-pcp2graphite-6.2.0-150600.3.9.1 * pcp-pmda-rabbitmq-6.2.0-150600.3.9.1 * pcp-pmda-dbping-6.2.0-150600.3.9.1 * pcp-export-pcp2json-6.2.0-150600.3.9.1 * pcp-export-pcp2elasticsearch-6.2.0-150600.3.9.1 * pcp-pmda-named-6.2.0-150600.3.9.1 * pcp-pmda-unbound-6.2.0-150600.3.9.1 * pcp-pmda-json-6.2.0-150600.3.9.1 * pcp-pmda-gpfs-6.2.0-150600.3.9.1 * pcp-pmda-openvswitch-6.2.0-150600.3.9.1 * pcp-pmda-bonding-6.2.0-150600.3.9.1 * pcp-doc-6.2.0-150600.3.9.1 * pcp-pmda-activemq-6.2.0-150600.3.9.1 * pcp-pmda-netfilter-6.2.0-150600.3.9.1 * pcp-import-iostat2pcp-6.2.0-150600.3.9.1 * pcp-pmda-zswap-6.2.0-150600.3.9.1 * pcp-import-sar2pcp-6.2.0-150600.3.9.1 * pcp-pmda-netcheck-6.2.0-150600.3.9.1 * pcp-pmda-lustre-6.2.0-150600.3.9.1 * pcp-import-mrtg2pcp-6.2.0-150600.3.9.1 * pcp-conf-6.2.0-150600.3.9.1 * pcp-pmda-gluster-6.2.0-150600.3.9.1 * pcp-export-pcp2xml-6.2.0-150600.3.9.1 * pcp-pmda-rsyslog-6.2.0-150600.3.9.1 * pcp-pmda-postfix-6.2.0-150600.3.9.1 * pcp-pmda-elasticsearch-6.2.0-150600.3.9.1 * pcp-pmda-nutcracker-6.2.0-150600.3.9.1 * pcp-pmda-ds389-6.2.0-150600.3.9.1 * pcp-pmda-redis-6.2.0-150600.3.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64 i586) * pcp-pmda-infiniband-6.2.0-150600.3.9.1 * pcp-pmda-perfevent-6.2.0-150600.3.9.1 * pcp-pmda-infiniband-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-perfevent-debuginfo-6.2.0-150600.3.9.1 * openSUSE Leap 15.6 (x86_64) * pcp-pmda-resctrl-debuginfo-6.2.0-150600.3.9.1 * pcp-pmda-resctrl-6.2.0-150600.3.9.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * perl-PCP-PMDA-6.2.0-150600.3.9.1 * python3-pcp-6.2.0-150600.3.9.1 * pcp-6.2.0-150600.3.9.1 * libpcp_import1-debuginfo-6.2.0-150600.3.9.1 * python3-pcp-debuginfo-6.2.0-150600.3.9.1 * libpcp3-debuginfo-6.2.0-150600.3.9.1 * libpcp_gui2-6.2.0-150600.3.9.1 * libpcp_mmv1-6.2.0-150600.3.9.1 * libpcp_mmv1-debuginfo-6.2.0-150600.3.9.1 * perl-PCP-LogImport-debuginfo-6.2.0-150600.3.9.1 * libpcp3-6.2.0-150600.3.9.1 * libpcp-devel-6.2.0-150600.3.9.1 * perl-PCP-LogImport-6.2.0-150600.3.9.1 * libpcp_web1-6.2.0-150600.3.9.1 * pcp-devel-6.2.0-150600.3.9.1 * pcp-debugsource-6.2.0-150600.3.9.1 * perl-PCP-LogSummary-6.2.0-150600.3.9.1 * perl-PCP-MMV-debuginfo-6.2.0-150600.3.9.1 * perl-PCP-MMV-6.2.0-150600.3.9.1 * libpcp_trace2-debuginfo-6.2.0-150600.3.9.1 * libpcp_gui2-debuginfo-6.2.0-150600.3.9.1 * pcp-debuginfo-6.2.0-150600.3.9.1 * pcp-system-tools-6.2.0-150600.3.9.1 * libpcp_web1-debuginfo-6.2.0-150600.3.9.1 * pcp-devel-debuginfo-6.2.0-150600.3.9.1 * libpcp_import1-6.2.0-150600.3.9.1 * pcp-system-tools-debuginfo-6.2.0-150600.3.9.1 * libpcp_trace2-6.2.0-150600.3.9.1 * perl-PCP-PMDA-debuginfo-6.2.0-150600.3.9.1 * Development Tools Module 15-SP6 (noarch) * pcp-import-iostat2pcp-6.2.0-150600.3.9.1 * pcp-import-sar2pcp-6.2.0-150600.3.9.1 * pcp-import-mrtg2pcp-6.2.0-150600.3.9.1 * pcp-conf-6.2.0-150600.3.9.1 * pcp-doc-6.2.0-150600.3.9.1 * Development Tools Module 15-SP6 (ppc64le) * pcp-pmda-perfevent-6.2.0-150600.3.9.1 * pcp-pmda-perfevent-debuginfo-6.2.0-150600.3.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231345

1 0

SUSE-SU-2024:3745-1: important: Security update for protobuf
by OPENSUSE-UPDATES 22 Oct '24

22 Oct '24

# Security update for protobuf Announcement ID: SUSE-SU-2024:3745-1 Release Date: 2024-10-22T13:39:53Z Rating: important References: * bsc#1230778 Cross-References: * CVE-2024-7254 CVSS scores: * CVE-2024-7254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-7254 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for protobuf fixes the following issues: * CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3745=1 SUSE-2024-3745=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3745=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3745=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3745=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-3745=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * protobuf-debugsource-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-25.1-150600.16.7.1 * libprotoc25_1_0-debuginfo-25.1-150600.16.7.1 * protobuf-devel-25.1-150600.16.7.1 * libprotobuf25_1_0-25.1-150600.16.7.1 * python311-protobuf-4.25.1-150600.16.7.1 * protobuf-java-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150600.16.7.1 * protobuf-devel-debuginfo-25.1-150600.16.7.1 * libprotoc25_1_0-25.1-150600.16.7.1 * libprotobuf25_1_0-debuginfo-25.1-150600.16.7.1 * openSUSE Leap 15.6 (x86_64) * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-32bit-25.1-150600.16.7.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150600.16.7.1 * libprotoc25_1_0-32bit-25.1-150600.16.7.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150600.16.7.1 * libprotobuf25_1_0-32bit-25.1-150600.16.7.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150600.16.7.1 * libprotobuf25_1_0-64bit-25.1-150600.16.7.1 * libprotoc25_1_0-64bit-debuginfo-25.1-150600.16.7.1 * libprotoc25_1_0-64bit-25.1-150600.16.7.1 * libprotobuf25_1_0-64bit-debuginfo-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-64bit-25.1-150600.16.7.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-25.1-150600.16.7.1 * libprotoc25_1_0-debuginfo-25.1-150600.16.7.1 * libprotobuf25_1_0-25.1-150600.16.7.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150600.16.7.1 * libprotoc25_1_0-25.1-150600.16.7.1 * libprotobuf25_1_0-debuginfo-25.1-150600.16.7.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150600.16.7.1 * protobuf-devel-debuginfo-25.1-150600.16.7.1 * protobuf-devel-25.1-150600.16.7.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150600.16.7.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python311-protobuf-4.25.1-150600.16.7.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7254.html * https://bugzilla.suse.com/show_bug.cgi?id=1230778

1 0

SUSE-SU-2024:3746-1: important: Security update for protobuf
by OPENSUSE-UPDATES 22 Oct '24

22 Oct '24

# Security update for protobuf Announcement ID: SUSE-SU-2024:3746-1 Release Date: 2024-10-22T13:40:56Z Rating: important References: * bsc#1230778 Cross-References: * CVE-2024-7254 CVSS scores: * CVE-2024-7254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-7254 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for protobuf fixes the following issues: * CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3746=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3746=1 SUSE- SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3746=1 SUSE-SLE- INSTALLER-15-SP4-2024-3746=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3746=1 SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3746=1 SUSE-SLE-Product-SUSE- Manager-Proxy-4.3-2024-3746=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3746=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3746=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3746=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3746=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3746=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3746=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3746=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3746=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3746=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * protobuf-java-25.1-150400.9.10.1 * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * python311-protobuf-4.25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * openSUSE Leap 15.4 (x86_64) * libprotobuf-lite25_1_0-32bit-25.1-150400.9.10.1 * libprotoc25_1_0-32bit-25.1-150400.9.10.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-32bit-25.1-150400.9.10.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150400.9.10.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libprotobuf25_1_0-64bit-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-64bit-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-64bit-debuginfo-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-64bit-25.1-150400.9.10.1 * libprotobuf25_1_0-64bit-25.1-150400.9.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Manager Proxy 4.3 (x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-protobuf-4.25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libprotobuf25_1_0-25.1-150400.9.10.1 * libprotoc25_1_0-debuginfo-25.1-150400.9.10.1 * libprotobuf25_1_0-debuginfo-25.1-150400.9.10.1 * libprotoc25_1_0-25.1-150400.9.10.1 * protobuf-devel-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-25.1-150400.9.10.1 * protobuf-devel-debuginfo-25.1-150400.9.10.1 * protobuf-debugsource-25.1-150400.9.10.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150400.9.10.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7254.html * https://bugzilla.suse.com/show_bug.cgi?id=1230778

1 0

SUSE-SU-2024:3747-1: important: Security update for protobuf
by OPENSUSE-UPDATES 22 Oct '24

22 Oct '24

# Security update for protobuf Announcement ID: SUSE-SU-2024:3747-1 Release Date: 2024-10-22T13:42:06Z Rating: important References: * bsc#1230778 Cross-References: * CVE-2024-7254 CVSS scores: * CVE-2024-7254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-7254 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * Public Cloud Module 15-SP5 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for protobuf fixes the following issues: * CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3747=1 openSUSE-SLE-15.5-2024-3747=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3747=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3747=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3747=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3747=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3747=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3747=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3747=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3747=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3747=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3747=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-3747=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libprotobuf25_1_0-25.1-150500.12.5.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.5.1 * python311-protobuf-4.25.1-150500.12.5.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.5.1 * protobuf-devel-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * protobuf-debugsource-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.5.1 * libprotoc25_1_0-25.1-150500.12.5.1 * protobuf-devel-25.1-150500.12.5.1 * protobuf-java-25.1-150500.12.5.1 * openSUSE Leap 15.5 (x86_64) * libprotoc25_1_0-32bit-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-32bit-debuginfo-25.1-150500.12.5.1 * libprotobuf25_1_0-32bit-25.1-150500.12.5.1 * libprotobuf25_1_0-32bit-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-32bit-25.1-150500.12.5.1 * libprotoc25_1_0-32bit-debuginfo-25.1-150500.12.5.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libprotoc25_1_0-64bit-debuginfo-25.1-150500.12.5.1 * libprotobuf25_1_0-64bit-25.1-150500.12.5.1 * libprotoc25_1_0-64bit-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-64bit-debuginfo-25.1-150500.12.5.1 * libprotobuf25_1_0-64bit-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-64bit-25.1-150500.12.5.1 * openSUSE Leap Micro 5.5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * protobuf-debugsource-25.1-150500.12.5.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotobuf25_1_0-25.1-150500.12.5.1 * libprotoc25_1_0-debuginfo-25.1-150500.12.5.1 * libprotobuf25_1_0-debuginfo-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-25.1-150500.12.5.1 * protobuf-debugsource-25.1-150500.12.5.1 * libprotobuf-lite25_1_0-debuginfo-25.1-150500.12.5.1 * libprotoc25_1_0-25.1-150500.12.5.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotoc25_1_0-debuginfo-25.1-150500.12.5.1 * protobuf-devel-debuginfo-25.1-150500.12.5.1 * protobuf-debugsource-25.1-150500.12.5.1 * libprotoc25_1_0-25.1-150500.12.5.1 * protobuf-devel-25.1-150500.12.5.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-25.1-150500.12.5.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libprotoc25_1_0-debuginfo-25.1-150500.12.5.1 * protobuf-debugsource-25.1-150500.12.5.1 * libprotoc25_1_0-25.1-150500.12.5.1 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python311-protobuf-4.25.1-150500.12.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-7254.html * https://bugzilla.suse.com/show_bug.cgi?id=1230778

1 0

SUSE-SU-2024:3741-1: moderate: Security update for podman
by OPENSUSE-UPDATES 21 Oct '24

21 Oct '24

# Security update for podman Announcement ID: SUSE-SU-2024:3741-1 Release Date: 2024-10-21T12:33:47Z Rating: moderate References: * bsc#1214612 * bsc#1231208 * bsc#1231499 Cross-References: * CVE-2024-9407 * CVE-2024-9675 CVSS scores: * CVE-2024-9407 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-9407 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2024-9407 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N * CVE-2024-9675 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2024-9675 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-9675 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for podman fixes the following issues: * CVE-2024-9675: Fixed cache arbitrary directory mount (bsc#1231499). * CVE-2024-9407: Fixed improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (bsc#1231208). The following non-security bug was fixed: * rootless ipv6 containers can't be started (bsc#1214612). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3741=1 SUSE-2024-3741=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3741=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3741=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3741=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3741=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3741=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * podmansh-4.9.5-150500.3.25.1 * podman-debuginfo-4.9.5-150500.3.25.1 * podman-4.9.5-150500.3.25.1 * podman-remote-4.9.5-150500.3.25.1 * podman-remote-debuginfo-4.9.5-150500.3.25.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.25.1 * openSUSE Leap Micro 5.5 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.25.1 * podman-debuginfo-4.9.5-150500.3.25.1 * podman-4.9.5-150500.3.25.1 * podman-remote-4.9.5-150500.3.25.1 * podman-remote-debuginfo-4.9.5-150500.3.25.1 * openSUSE Leap Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.25.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.25.1 * podman-debuginfo-4.9.5-150500.3.25.1 * podman-4.9.5-150500.3.25.1 * podman-remote-4.9.5-150500.3.25.1 * podman-remote-debuginfo-4.9.5-150500.3.25.1 * openSUSE Leap 15.6 (noarch) * podman-docker-4.9.5-150500.3.25.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.25.1 * podman-debuginfo-4.9.5-150500.3.25.1 * podman-4.9.5-150500.3.25.1 * podman-remote-4.9.5-150500.3.25.1 * podman-remote-debuginfo-4.9.5-150500.3.25.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.25.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.25.1 * podman-debuginfo-4.9.5-150500.3.25.1 * podman-4.9.5-150500.3.25.1 * podman-remote-4.9.5-150500.3.25.1 * podman-remote-debuginfo-4.9.5-150500.3.25.1 * Containers Module 15-SP5 (noarch) * podman-docker-4.9.5-150500.3.25.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * podmansh-4.9.5-150500.3.25.1 * podman-debuginfo-4.9.5-150500.3.25.1 * podman-4.9.5-150500.3.25.1 * podman-remote-4.9.5-150500.3.25.1 * podman-remote-debuginfo-4.9.5-150500.3.25.1 * Containers Module 15-SP6 (noarch) * podman-docker-4.9.5-150500.3.25.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9407.html * https://www.suse.com/security/cve/CVE-2024-9675.html * https://bugzilla.suse.com/show_bug.cgi?id=1214612 * https://bugzilla.suse.com/show_bug.cgi?id=1231208 * https://bugzilla.suse.com/show_bug.cgi?id=1231499

1 0

SUSE-SU-2024:3742-1: important: Security update for apache2
by OPENSUSE-UPDATES 21 Oct '24

21 Oct '24

# Security update for apache2 Announcement ID: SUSE-SU-2024:3742-1 Release Date: 2024-10-21T13:58:41Z Rating: important References: * bsc#1228097 Cross-References: * CVE-2024-40725 CVSS scores: * CVE-2024-40725 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-40725 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for apache2 fixes the following issues: * CVE-2024-40725: Fixed source code disclosure of local content (bsc#1228097) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3742=1 openSUSE-SLE-15.6-2024-3742=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3742=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3742=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3742=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * apache2-worker-2.4.58-150600.5.26.1 * apache2-devel-2.4.58-150600.5.26.1 * apache2-debuginfo-2.4.58-150600.5.26.1 * apache2-2.4.58-150600.5.26.1 * apache2-prefork-2.4.58-150600.5.26.1 * apache2-prefork-debugsource-2.4.58-150600.5.26.1 * apache2-utils-2.4.58-150600.5.26.1 * apache2-utils-debuginfo-2.4.58-150600.5.26.1 * apache2-utils-debugsource-2.4.58-150600.5.26.1 * apache2-worker-debuginfo-2.4.58-150600.5.26.1 * apache2-event-debugsource-2.4.58-150600.5.26.1 * apache2-debugsource-2.4.58-150600.5.26.1 * apache2-event-2.4.58-150600.5.26.1 * apache2-worker-debugsource-2.4.58-150600.5.26.1 * apache2-prefork-debuginfo-2.4.58-150600.5.26.1 * apache2-event-debuginfo-2.4.58-150600.5.26.1 * openSUSE Leap 15.6 (noarch) * apache2-manual-2.4.58-150600.5.26.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-debuginfo-2.4.58-150600.5.26.1 * apache2-2.4.58-150600.5.26.1 * apache2-prefork-2.4.58-150600.5.26.1 * apache2-prefork-debugsource-2.4.58-150600.5.26.1 * apache2-debugsource-2.4.58-150600.5.26.1 * apache2-prefork-debuginfo-2.4.58-150600.5.26.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-debuginfo-2.4.58-150600.5.26.1 * apache2-event-debugsource-2.4.58-150600.5.26.1 * apache2-debugsource-2.4.58-150600.5.26.1 * apache2-event-2.4.58-150600.5.26.1 * apache2-event-debuginfo-2.4.58-150600.5.26.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-worker-2.4.58-150600.5.26.1 * apache2-devel-2.4.58-150600.5.26.1 * apache2-utils-2.4.58-150600.5.26.1 * apache2-utils-debugsource-2.4.58-150600.5.26.1 * apache2-utils-debuginfo-2.4.58-150600.5.26.1 * apache2-worker-debuginfo-2.4.58-150600.5.26.1 * apache2-worker-debugsource-2.4.58-150600.5.26.1 ## References: * https://www.suse.com/security/cve/CVE-2024-40725.html * https://bugzilla.suse.com/show_bug.cgi?id=1228097

1 0

SUSE-RU-2024:3738-1: moderate: Recommended update for govulncheck, govulncheck-vulndb
by OPENSUSE-UPDATES 21 Oct '24

21 Oct '24

# Recommended update for govulncheck, govulncheck-vulndb Announcement ID: SUSE-RU-2024:3738-1 Release Date: 2024-10-21T10:41:23Z Rating: moderate References: Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that can now be installed. ## Description: This update for govulncheck, govulncheck-vulndb fixes the following issues: govulncheck is shipped in version 1.1.3: * internal/openvex: update handler test * LICENSE: update per Google Legal * internal/vulncheck: add warning message for ancient binaries * all: remove build restrictions requiring go1.18 * cmd/govulncheck: clarify unsafe/reflection limitations * cmd/govulncheck: update docs for old Go binaries * internal/openvex: omit vulns with no findings * cmd/govulncheck/integration: adjust k8s expectations * all: remove skipIfShort * all: remove unnecessary test lines for staticcheck * internal/vulncheck: avoid recomputing if module is known * go.mod: update golang.org/x dependencies * internal/buildinfo: add support for ancient Go binaries * internal/goversion: comment out a printing line * internal/goversion: add package as copy of rsc.io/goversion/version * cmd/govulncheck: remove line about go version requirements * internal/vulncheck: improve documentation * internal/vulncheck: use module info when looking for symbols * internal/vulncheck: handle symbols ending with . * cmd/govulncheck/integration: make expectation check more robust * all: require go1.21 Update to version 1.1.2: * internal/osv: add review status * vulncheck: update documentation for vex * cmd/govulncheck/integration/stackrox-scanner: update expectations * cmd/govulncheck/integration/k8s: update expectations * internal/govulncheck: add more comments for emitted OSVs * go.mod: update golang.org/x dependencies * internal/scan: increase telemetry counter for show flag * internal/scan: add format and scan level telemetry * internal/cmd/govulncheck: remove unnecessary binary dependency * cmd/govulncheck/integration: update go in integration tests * internal/openvex: add hash for doc ID * internal/openvex: add statements to handler * internal/openvex: add handler * all: remove test that runs govulncheck on govulncheck * internal/sarif: fix a typo * internal/scan: limit number of binary traces shown * cmd/govulncheck: record scan mode telemetry Update to version 1.1.1: * all: remove unit tests for staticcheck, unparam, and spellcheck * internal/sarif,cmd/govulncheck: publicize sarif * internal/vulncheck: load source code for scan symbol mode only * all: update golang.org/x/tools * internal/vulncheck: emit progress message instead of warning * internal/scan: improve textual output for binary traces * internal/buildinfo: avoid panic on nil symbol for elf * internal/sarif: improve GOMODCACHE relative paths * internal/sarif: add version to module info for locations * internal/sarif: remove originalURIBaseIds * go.mod: update golang.org/x dependencies * internal/gosym: preallocate inlined call slice * internal/vulncheck: improve progress message for binaries * internal/vulncheck: emit fetch db and vuln checking progress messages * internal/scan: print progress messages only in verbose mode * internal/scan: refactor flag usage in text handler * Revert "internal/scan: disallow multiple patterns in source mode" * internal/sarif: add missing required Message field * internal/scan: disallow multiple patterns in source mode * internal/vulncheck: use new improved DeleteSyntheticNodes Update to version 1.1.0: * internal/openvex: add vex types * internal/sarif: compute relative paths for findings * internal/sarif: remove unused field * go.mod: update golang.org/x dependencies * internal/sarif,internal/scan,internal/traces: clean up tests * internal/sarif: add region part of the physical location * internal/sarif: add code flows * cmd/govulncheck: clean up test * cmd/govulncheck: make test case config data * cmd/govulncheck: add comment capability to fixups * cmd/govulncheck: remove unnecessary fixups * cmd/govulncheck: make fixup part of a test case * cmd/govulncheck: extract stdlib into special test case * cmd/govulncheck: restore parallelism for tests * cmd/govulncheck: add nogomod test case * cmd/govulncheck: restructure testdata tests * cmd/govulncheck: add sarif test for binaries * internal/sarif: add stacks * internal/sarif: add result message * internal/vulncheck: get correctly package for instantiated functions * internal/sarif: add result stubs to run object * internal/govulncheck: add scan mode to config * internal/vulncheck: delete only synthetic nodes not related to generics * internal/scan: add more info to validation errors * internal/sarif: add rules * internal/scan: fix name of the error variable * internal/sarif: add handler * internal/scan: add sarif flag * internal/scan: add types for format, show, mode, and scan flags * go.mod: update golang.org/x dependencies * internal/vulncheck: use proper stdlib check when loading packages * internal/vulncheck,internal/scan: sort messages where needed * internal/scan: introduce format flag * internal/vulncheck: manipulate packages from PackageGraph * internal/vulncheck: do not have stdlibModule as global * cmd/govulncheck: make sure filepath are cross-platform * internal/govulncheck: fix up some comments * internal/vulncheck: add relative paths for vendored paths * internal/vulncheck: emit relative paths for call findings * internal/vulncheck, internal/scan: improve stdlib reporting * go.mod: update golang.org/x dependencies * all: remove bash checks * all: do go mod tidy test inside unit tests Update to version 1.0.4: * cmd/govulncheck: mask line numbers and columns * internal/scan: remove redundant new lines * internal/vulncheck: add position for sinks in findings' trace * internal/scan: put -show <option> into single quotes * internal/buildinfo: do module-level analysis with no PCLN table * internal/scan: add a newline after summary * internal/test: add more info on GoBuild failures * internal/scan: remove extra dot in a comment * cmd/govulncheck: fix vendor test * internal/vulncheck: refactor a loop with an append * cmd/govulncheck: fix stripped bin test * cmd/govulncheck: update vendor tests * cmd/govulncheck: add more tests and reorganize them * internal/vulncheck: add package and module mode for binaries * internal/scan: replace Source with Symbol in text output * internal/scan: fix error statuses for scan={package|module} * internal/scan: add -show verbose flag * internal/scan: overhaul text output * internal/scan: simplify redundant error checking * internal/scan: add scan level to testdata * cmd/govulncheck/integration: update expectations for stackrox * internal/vulncheck: support osv entries with no pkg info * internal/vulncheck: remove redundant symbol check * internal/vulncheck: simplify vulnerability detection Update to version 1.0.3: * internal/scan: add binary extract mode * internal/scan, vulncheck: use packages.load for mod info * internal/govulncheck: briefly explain streaming JSON * internal/vulncheck: remove -mod=mod flag from LoadModules Update to version 1.0.2: * cmd/govulncheck: update test data * go.mod: update golang.org/x dependencies * internal/osv: fix type name in comment * internal/scan: remove informational header for package and module mode * internal/scan: remove redundant newline for package and module mode * cmd/govulncheck/integration/stackrox: update vuln expectation * all: update tools to pick up bug fixes * internal/vulncheck: compute proper db names for generic functions * internal/vulncheck: improve error message for fetching vulns * testdata: Add more package/mod level tests * internal/scan: change text based on scan level * internal/scan: update show help message * internal/sarif: add sarif types * internal/scan: enable module scan mode * internal/scan: add scan_level to text tests * internal/scan: add scan level to textHandler * cmd/govulncheck: rearrange test files * all: add logging to TestGovulncheck * internal/scan: disallow package input in mod level * go.mod: update golang.org/x dependencies * cmd/govulncheck: fix mod level behavior * all: update to x/tools(a)v.15.0 * internal/vulncheck: define Binary over Bin * internal/vulncheck: add binary abstraction data structure * cmd/govulncheck: organize tests into subdirs * internal/scan: Improve "Informational" text output * internal/scan: properly "genericify" choose * internal/vulncheck: emit package findings all at once * internal/vulncheck: update logic for package level analysis * internal/vulncheck: remove obsolete tests and helpers * internal/scan: remove obsolete function * internal/scan: check for go mod before running * cmd/govulncheck/integration: add new expectations * cmd/govulncheck: Fix no go mod tests * internal/vulncheck: rename moduleVulnerabilities * internal/vulncheck: add documentation and propagate errors * internal/vulncheck: emit OSVs in their raw form asap * internal/scan: move emit logic for findings to internal/vulncheck * internal: properly fetch modules in source mode * internal/scan: verify scan level flag * internal/govulncheck: update Finding docstring * internal/vulncheck: remove file set computation * internal/scan: generate better message when patterns matches no packages * internal/scan, vulncheck: emit vulns as found * internal/scan: use modVersion for mod version * internal/scan: suggest earliest valid fixed version as the fix * internal/scan: communicate default value for test flag * internal/semver: rename the LatestFixedVersion function * cmd/govulncheck: fix incorrect test file name * cmd/govulncheck: remove go version for test file * internal/vulnchec: improve comments and names for imports level logic * internal/govulncheck: update description of Findings * internal/vulncheck/internal/buildinfo: support stripped darwin binaries * internal/scan: update test names * internal/scan: text output allows module level vulns * internal/client: add additional context to HTTP error message * internal/scan: add isImported function * internal/scan: fix trace count bug * internal/vulncheck: add LoadModules using go.mod * internal/govulncheck: add WantPackages scan level Update to version 1.0.1: * all: go get golang.org/x/tools@74c255b * internal/scan: change the way convert mode works * internal/scan: add -version flag * internal/vulncheck/internal/gosym: fix typo * internal/gosym: update binary mode version parsing * internal/scan: refactor to remove redundant code * vulncheck/internal/gosym: add support for go versions > 1.20 * internal/vulncheck/internal/buildinfo: skip failing tests * cmd/govulncheck: skip TestCommand in short mode Initial package version 1.0.0: * internal/scan: print the summary even when there are no findings * cmd,internal/govulncheck: change protocol version to v1.0.0 * cmd,internal: remove experimental reference * internal/govulncheck: improve documentation Changes in govulncheck-vulndb: * Update to version 0.0.20241015T183857 date 2024-10-15T18:38:57Z. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3738=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3738=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3738=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3738=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * govulncheck-1.1.3-150000.1.3.1 * govulncheck-debuginfo-1.1.3-150000.1.3.1 * openSUSE Leap 15.5 (noarch) * govulncheck-vulndb-0.0.20241015T183857-150000.1.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * govulncheck-1.1.3-150000.1.3.1 * govulncheck-debuginfo-1.1.3-150000.1.3.1 * openSUSE Leap 15.6 (noarch) * govulncheck-vulndb-0.0.20241015T183857-150000.1.3.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * govulncheck-1.1.3-150000.1.3.1 * govulncheck-debuginfo-1.1.3-150000.1.3.1 * SUSE Package Hub 15 15-SP5 (noarch) * govulncheck-vulndb-0.0.20241015T183857-150000.1.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * govulncheck-1.1.3-150000.1.3.1 * govulncheck-debuginfo-1.1.3-150000.1.3.1 * SUSE Package Hub 15 15-SP6 (noarch) * govulncheck-vulndb-0.0.20241015T183857-150000.1.3.1

1 0

SUSE-OU-2024:3739-1: moderate: Optional update for sssd, adcli
by OPENSUSE-UPDATES 21 Oct '24

21 Oct '24

# Optional update for sssd, adcli Announcement ID: SUSE-OU-2024:3739-1 Release Date: 2024-10-21T11:29:01Z Rating: moderate References: * jsc#PED-9654 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature can now be installed. ## Description: This update for sssd, adcli has the following feature: * Ship sssd-ad and adcli to SLE Micro 5.5 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3739=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3739=1 openSUSE-SLE-15.5-2024-3739=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3739=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3739=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3739=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3739=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3739=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * adcli-debuginfo-0.8.2-150400.17.8.3 * adcli-0.8.2-150400.17.8.3 * adcli-doc-0.8.2-150400.17.8.3 * adcli-debugsource-0.8.2-150400.17.8.3 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libsss_idmap-devel-2.5.2-150500.10.22.2 * libsss_simpleifp0-2.5.2-150500.10.22.2 * sssd-krb5-2.5.2-150500.10.22.2 * python3-sss-murmur-debuginfo-2.5.2-150500.10.22.2 * sssd-dbus-debuginfo-2.5.2-150500.10.22.2 * sssd-tools-debuginfo-2.5.2-150500.10.22.2 * libsss_certmap0-debuginfo-2.5.2-150500.10.22.2 * python3-sssd-config-debuginfo-2.5.2-150500.10.22.2 * sssd-dbus-2.5.2-150500.10.22.2 * libipa_hbac0-debuginfo-2.5.2-150500.10.22.2 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.22.2 * sssd-krb5-debuginfo-2.5.2-150500.10.22.2 * sssd-ldap-2.5.2-150500.10.22.2 * sssd-tools-2.5.2-150500.10.22.2 * sssd-kcm-debuginfo-2.5.2-150500.10.22.2 * python3-sss_nss_idmap-debuginfo-2.5.2-150500.10.22.2 * sssd-proxy-2.5.2-150500.10.22.2 * libsss_certmap-devel-2.5.2-150500.10.22.2 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.22.2 * libnfsidmap-sss-debuginfo-2.5.2-150500.10.22.2 * libsss_idmap0-2.5.2-150500.10.22.2 * python3-sssd-config-2.5.2-150500.10.22.2 * sssd-common-2.5.2-150500.10.22.2 * sssd-common-debuginfo-2.5.2-150500.10.22.2 * sssd-kcm-2.5.2-150500.10.22.2 * libsss_nss_idmap0-2.5.2-150500.10.22.2 * sssd-ldap-debuginfo-2.5.2-150500.10.22.2 * sssd-proxy-debuginfo-2.5.2-150500.10.22.2 * sssd-winbind-idmap-2.5.2-150500.10.22.2 * python3-ipa_hbac-2.5.2-150500.10.22.2 * sssd-debugsource-2.5.2-150500.10.22.2 * libipa_hbac-devel-2.5.2-150500.10.22.2 * sssd-ipa-debuginfo-2.5.2-150500.10.22.2 * sssd-krb5-common-debuginfo-2.5.2-150500.10.22.2 * python3-sss_nss_idmap-2.5.2-150500.10.22.2 * sssd-ad-2.5.2-150500.10.22.2 * python3-ipa_hbac-debuginfo-2.5.2-150500.10.22.2 * python3-sss-murmur-2.5.2-150500.10.22.2 * sssd-2.5.2-150500.10.22.2 * libsss_certmap0-2.5.2-150500.10.22.2 * libipa_hbac0-2.5.2-150500.10.22.2 * sssd-ipa-2.5.2-150500.10.22.2 * libsss_idmap0-debuginfo-2.5.2-150500.10.22.2 * sssd-krb5-common-2.5.2-150500.10.22.2 * sssd-ad-debuginfo-2.5.2-150500.10.22.2 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.22.2 * libnfsidmap-sss-2.5.2-150500.10.22.2 * libsss_simpleifp-devel-2.5.2-150500.10.22.2 * libsss_nss_idmap-devel-2.5.2-150500.10.22.2 * openSUSE Leap 15.5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.22.2 * sssd-common-32bit-debuginfo-2.5.2-150500.10.22.2 * openSUSE Leap 15.5 (aarch64_ilp32) * sssd-common-64bit-2.5.2-150500.10.22.2 * sssd-common-64bit-debuginfo-2.5.2-150500.10.22.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * adcli-debuginfo-0.8.2-150400.17.8.3 * adcli-0.8.2-150400.17.8.3 * adcli-doc-0.8.2-150400.17.8.3 * adcli-debugsource-0.8.2-150400.17.8.3 * openSUSE Leap Micro 5.5 (aarch64 ppc64le s390x x86_64) * adcli-debuginfo-0.8.2-150400.17.8.3 * adcli-doc-0.8.2-150400.17.8.3 * adcli-debugsource-0.8.2-150400.17.8.3 * sssd-ad-debuginfo-2.5.2-150500.10.22.2 * adcli-0.8.2-150400.17.8.3 * sssd-ad-2.5.2-150500.10.22.2 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.22.2 * libsss_nss_idmap0-2.5.2-150500.10.22.2 * sssd-ldap-debuginfo-2.5.2-150500.10.22.2 * sssd-ldap-2.5.2-150500.10.22.2 * libsss_certmap0-debuginfo-2.5.2-150500.10.22.2 * sssd-2.5.2-150500.10.22.2 * libsss_certmap0-2.5.2-150500.10.22.2 * sssd-debugsource-2.5.2-150500.10.22.2 * sssd-krb5-common-debuginfo-2.5.2-150500.10.22.2 * sssd-krb5-common-2.5.2-150500.10.22.2 * libsss_idmap0-debuginfo-2.5.2-150500.10.22.2 * libsss_idmap0-2.5.2-150500.10.22.2 * sssd-common-2.5.2-150500.10.22.2 * sssd-common-debuginfo-2.5.2-150500.10.22.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * adcli-debuginfo-0.8.2-150400.17.8.3 * adcli-0.8.2-150400.17.8.3 * adcli-doc-0.8.2-150400.17.8.3 * adcli-debugsource-0.8.2-150400.17.8.3 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.22.2 * adcli-debuginfo-0.8.2-150400.17.8.3 * libsss_nss_idmap0-2.5.2-150500.10.22.2 * sssd-common-debuginfo-2.5.2-150500.10.22.2 * adcli-doc-0.8.2-150400.17.8.3 * sssd-ad-2.5.2-150500.10.22.2 * sssd-ldap-2.5.2-150500.10.22.2 * sssd-ldap-debuginfo-2.5.2-150500.10.22.2 * libsss_certmap0-debuginfo-2.5.2-150500.10.22.2 * sssd-2.5.2-150500.10.22.2 * libsss_certmap0-2.5.2-150500.10.22.2 * sssd-debugsource-2.5.2-150500.10.22.2 * sssd-krb5-common-debuginfo-2.5.2-150500.10.22.2 * sssd-krb5-common-2.5.2-150500.10.22.2 * libsss_idmap0-debuginfo-2.5.2-150500.10.22.2 * sssd-ad-debuginfo-2.5.2-150500.10.22.2 * libsss_idmap0-2.5.2-150500.10.22.2 * sssd-common-2.5.2-150500.10.22.2 * adcli-0.8.2-150400.17.8.3 * adcli-debugsource-0.8.2-150400.17.8.3 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libsss_idmap-devel-2.5.2-150500.10.22.2 * libsss_simpleifp0-2.5.2-150500.10.22.2 * adcli-doc-0.8.2-150400.17.8.3 * sssd-krb5-2.5.2-150500.10.22.2 * sssd-dbus-debuginfo-2.5.2-150500.10.22.2 * sssd-tools-debuginfo-2.5.2-150500.10.22.2 * libsss_certmap0-debuginfo-2.5.2-150500.10.22.2 * python3-sssd-config-debuginfo-2.5.2-150500.10.22.2 * sssd-dbus-2.5.2-150500.10.22.2 * libipa_hbac0-debuginfo-2.5.2-150500.10.22.2 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.22.2 * sssd-krb5-debuginfo-2.5.2-150500.10.22.2 * sssd-ldap-2.5.2-150500.10.22.2 * sssd-tools-2.5.2-150500.10.22.2 * sssd-kcm-debuginfo-2.5.2-150500.10.22.2 * sssd-proxy-2.5.2-150500.10.22.2 * libsss_certmap-devel-2.5.2-150500.10.22.2 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.22.2 * python3-sssd-config-2.5.2-150500.10.22.2 * libsss_idmap0-2.5.2-150500.10.22.2 * sssd-common-2.5.2-150500.10.22.2 * sssd-common-debuginfo-2.5.2-150500.10.22.2 * sssd-kcm-2.5.2-150500.10.22.2 * adcli-debuginfo-0.8.2-150400.17.8.3 * libsss_nss_idmap0-2.5.2-150500.10.22.2 * sssd-ldap-debuginfo-2.5.2-150500.10.22.2 * sssd-proxy-debuginfo-2.5.2-150500.10.22.2 * sssd-winbind-idmap-2.5.2-150500.10.22.2 * sssd-debugsource-2.5.2-150500.10.22.2 * libipa_hbac-devel-2.5.2-150500.10.22.2 * sssd-ipa-debuginfo-2.5.2-150500.10.22.2 * sssd-krb5-common-debuginfo-2.5.2-150500.10.22.2 * adcli-0.8.2-150400.17.8.3 * adcli-debugsource-0.8.2-150400.17.8.3 * sssd-ad-2.5.2-150500.10.22.2 * sssd-2.5.2-150500.10.22.2 * libsss_certmap0-2.5.2-150500.10.22.2 * libipa_hbac0-2.5.2-150500.10.22.2 * sssd-ipa-2.5.2-150500.10.22.2 * libsss_idmap0-debuginfo-2.5.2-150500.10.22.2 * sssd-krb5-common-2.5.2-150500.10.22.2 * sssd-ad-debuginfo-2.5.2-150500.10.22.2 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.22.2 * libsss_simpleifp-devel-2.5.2-150500.10.22.2 * libsss_nss_idmap-devel-2.5.2-150500.10.22.2 * Basesystem Module 15-SP5 (x86_64) * sssd-common-32bit-2.5.2-150500.10.22.2 * sssd-common-32bit-debuginfo-2.5.2-150500.10.22.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * adcli-debuginfo-0.8.2-150400.17.8.3 * adcli-0.8.2-150400.17.8.3 * adcli-doc-0.8.2-150400.17.8.3 * adcli-debugsource-0.8.2-150400.17.8.3 ## References: * https://jira.suse.com/browse/PED-9654

1 0

SUSE-RU-2024:3734-1: moderate: Recommended update for crmsh
by OPENSUSE-UPDATES 21 Oct '24

21 Oct '24

# Recommended update for crmsh Announcement ID: SUSE-RU-2024:3734-1 Release Date: 2024-10-21T06:33:45Z Rating: moderate References: * bsc#1228251 * bsc#1231386 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for crmsh fixes the following issues: * Version update 4.4.2+20241014.61bee46: * Fix: cibconfig: Disable auto add advise values for operations (bsc#1231386). * Fix: bootstrap: check is_nologin more robustly (bsc#1228251). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3734=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-3734=1 ## Package List: * openSUSE Leap 15.4 (noarch) * crmsh-test-4.4.2+20241014.61bee46-150400.3.37.2 * crmsh-scripts-4.4.2+20241014.61bee46-150400.3.37.2 * crmsh-4.4.2+20241014.61bee46-150400.3.37.2 * SUSE Linux Enterprise High Availability Extension 15 SP4 (noarch) * crmsh-scripts-4.4.2+20241014.61bee46-150400.3.37.2 * crmsh-4.4.2+20241014.61bee46-150400.3.37.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1228251 * https://bugzilla.suse.com/show_bug.cgi?id=1231386

1 0

SUSE-RU-2024:3735-1: important: Recommended update for crmsh
by OPENSUSE-UPDATES 21 Oct '24

21 Oct '24

# Recommended update for crmsh Announcement ID: SUSE-RU-2024:3735-1 Release Date: 2024-10-21T06:34:53Z Rating: important References: * bsc#1228251 * bsc#1228899 * bsc#1229093 * bsc#1231386 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has four fixes can now be installed. ## Description: This update for crmsh fixes the following issues: * Version update 4.6.0+20241012.24810ae: * Fix: cibconfig: Disable auto add advise values for operations (bsc#1231386). * Fix: report: find_shell should accept hacluster user (bsc#1228899). * Fix: report: should not try interactive authentication when stdin is not a tty (bsc#1228899). * Fix: bootstrap: check is_nologin more robustly (bsc#1228251). * Fix: utils: Stop providing the detailed and precise sudoer rules to "hack" the privilege (bsc#1229093). * Dev: utils: Check node is reachable by using both ping and ssh. * Dev: report: do not capture stderr when unarchiving tarballs. * Dev: report: make error messages easier to parse for hawk2 (bsc#1228899). * Dev: healthcheck: Enhace log clarity. * Dev: ui_cluster: Change the completer for crm cluster health. * Dev: report: add a reminder to use `crm cluster health` (bsc#1228899). * Dev: ui_cluster: add a reminder to use "crm cluster init/join ssh" to initialize ssh (bsc#1228899). * Dev: scripts: add a reminder to use `crm cluster health` to fix hacluster passwordless ssh authentication (bsc#1228899). * Dev: scripts: generate readable messages when ssh authentication fails (bsc#1228899). * Dev: main: remove upgradeutil (bsc#1228899). * Dev: completers: Reuse node completer for cluster remove and health. * Dev: bootstrap: Enhance log clarity during crm cluster remove process. * Dev: utils: Catch PermissionError when reading files. * Dev: utils: Load CIB_file env before some readonly commands. * Dev: ui_node: Improve command 'clearstate -node-'. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-3735=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3735=1 openSUSE-SLE-15.6-2024-3735=1 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP6 (noarch) * crmsh-4.6.0+20241012.24810ae-150600.3.14.3 * crmsh-scripts-4.6.0+20241012.24810ae-150600.3.14.3 * openSUSE Leap 15.6 (noarch) * crmsh-test-4.6.0+20241012.24810ae-150600.3.14.3 * crmsh-4.6.0+20241012.24810ae-150600.3.14.3 * crmsh-scripts-4.6.0+20241012.24810ae-150600.3.14.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1228251 * https://bugzilla.suse.com/show_bug.cgi?id=1228899 * https://bugzilla.suse.com/show_bug.cgi?id=1229093 * https://bugzilla.suse.com/show_bug.cgi?id=1231386

1 0

SUSE-RU-2024:3736-1: moderate: Recommended update for crmsh
by OPENSUSE-UPDATES 21 Oct '24

21 Oct '24

# Recommended update for crmsh Announcement ID: SUSE-RU-2024:3736-1 Release Date: 2024-10-21T06:35:08Z Rating: moderate References: * bsc#1231386 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for crmsh fixes the following issue: * Update to version 4.5.1+20241014.3a32b36: * Fix: cibconfig: Disable auto add advise values for operations (bsc#1231386). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3736=1 openSUSE-SLE-15.5-2024-3736=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-3736=1 ## Package List: * openSUSE Leap 15.5 (noarch) * crmsh-test-4.5.1+20241014.3a32b36-150500.3.42.2 * crmsh-4.5.1+20241014.3a32b36-150500.3.42.2 * crmsh-scripts-4.5.1+20241014.3a32b36-150500.3.42.2 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * crmsh-4.5.1+20241014.3a32b36-150500.3.42.2 * crmsh-scripts-4.5.1+20241014.3a32b36-150500.3.42.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231386

1 0

openSUSE-SU-2024:0337-1: important: Security update for chromium
by opensuse-security＠opensuse.org 18 Oct '24

18 Oct '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0337-1 Rating: important References: #1231694 Cross-References: CVE-2024-9954 CVE-2024-9955 CVE-2024-9956 CVE-2024-9957 CVE-2024-9958 CVE-2024-9959 CVE-2024-9960 CVE-2024-9961 CVE-2024-9962 CVE-2024-9963 CVE-2024-9964 CVE-2024-9965 CVE-2024-9966 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 130.0.6723.58 (boo#1231694) * CVE-2024-9954: Use after free in AI * CVE-2024-9955: Use after free in Web Authentication * CVE-2024-9956: Inappropriate implementation in Web Authentication * CVE-2024-9957: Use after free in UI * CVE-2024-9958: Inappropriate implementation in PictureInPicture * CVE-2024-9959: Use after free in DevTools * CVE-2024-9960: Use after free in Dawn * CVE-2024-9961: Use after free in Parcel Tracking * CVE-2024-9962: Inappropriate implementation in Permissions * CVE-2024-9963: Insufficient data validation in Downloads * CVE-2024-9964: Inappropriate implementation in Payments * CVE-2024-9965: Insufficient data validation in DevTools * CVE-2024-9966: Inappropriate implementation in Navigations Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-337=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-337=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): chromedriver-130.0.6723.58-bp156.2.41.1 chromedriver-debuginfo-130.0.6723.58-bp156.2.41.1 chromium-130.0.6723.58-bp156.2.41.1 chromium-debuginfo-130.0.6723.58-bp156.2.41.1 - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-130.0.6723.58-bp155.2.129.1 chromium-130.0.6723.58-bp155.2.129.1 References: https://www.suse.com/security/cve/CVE-2024-9954.html https://www.suse.com/security/cve/CVE-2024-9955.html https://www.suse.com/security/cve/CVE-2024-9956.html https://www.suse.com/security/cve/CVE-2024-9957.html https://www.suse.com/security/cve/CVE-2024-9958.html https://www.suse.com/security/cve/CVE-2024-9959.html https://www.suse.com/security/cve/CVE-2024-9960.html https://www.suse.com/security/cve/CVE-2024-9961.html https://www.suse.com/security/cve/CVE-2024-9962.html https://www.suse.com/security/cve/CVE-2024-9963.html https://www.suse.com/security/cve/CVE-2024-9964.html https://www.suse.com/security/cve/CVE-2024-9965.html https://www.suse.com/security/cve/CVE-2024-9966.html https://bugzilla.suse.com/1231694

1 0

SUSE-RU-2024:3727-1: important: Recommended update for libzypp
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Recommended update for libzypp Announcement ID: SUSE-RU-2024:3727-1 Release Date: 2024-10-18T13:04:52Z Rating: important References: * bsc#1230912 * bsc#1231043 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has two fixes can now be installed. ## Description: This update for libzypp fixes the following issues: * Send unescaped colons in header values. According to the STOMP protocol, it would be correct to escape colon here but the practice broke plugin receivers that didn't expect this. The incompatiblity affected customers who were running spacewalk-repo-sync and experienced issues when accessing the cloud URL. [bsc#1231043] * Fix hang in curl code with no network connection. [bsc#1230912] ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3727=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3727=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3727=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3727=1 SUSE- SLE-INSTALLER-15-SP4-2024-3727=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3727=1 SUSE-SLE- INSTALLER-15-SP4-2024-3727=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3727=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3727=1 SUSE-SLE-Product-SUSE- Manager-Retail-Branch-Server-4.3-2024-3727=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3727=1 SUSE- SLE-INSTALLER-15-SP4-2024-3727=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3727=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3727=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3727=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3727=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3727=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3727=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3727=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3727=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * libzypp-devel-17.35.12-150400.3.93.1 * libzypp-devel-doc-17.35.12-150400.3.93.1 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libzypp-17.35.12-150400.3.93.1 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.12-150400.3.93.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-devel-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-devel-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libzypp-17.35.12-150400.3.93.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-devel-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Manager Proxy 4.3 (x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-devel-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-devel-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-devel-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-devel-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libzypp-debuginfo-17.35.12-150400.3.93.1 * libzypp-devel-17.35.12-150400.3.93.1 * libzypp-17.35.12-150400.3.93.1 * libzypp-debugsource-17.35.12-150400.3.93.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230912 * https://bugzilla.suse.com/show_bug.cgi?id=1231043

1 0

SUSE-SU-2024:3728-1: moderate: Security update for buildah
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Security update for buildah Announcement ID: SUSE-SU-2024:3728-1 Release Date: 2024-10-18T13:15:57Z Rating: moderate References: * bsc#1231499 Cross-References: * CVE-2024-9675 CVSS scores: * CVE-2024-9675 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2024-9675 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-9675 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for buildah fixes the following issues: * CVE-2024-9675: Fixed arbitrary cache directory mount (bsc#1231499) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3728=1 openSUSE-SLE-15.5-2024-3728=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3728=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-3728=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2024-3728=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.35.4-150500.3.16.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.16.1 * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.16.1 * Containers Module 15-SP6 (aarch64 ppc64le s390x x86_64) * buildah-1.35.4-150500.3.16.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9675.html * https://bugzilla.suse.com/show_bug.cgi?id=1231499

1 0

SUSE-SU-2024:3729-1: moderate: Security update for php8
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Security update for php8 Announcement ID: SUSE-SU-2024:3729-1 Release Date: 2024-10-18T13:23:01Z Rating: moderate References: * bsc#1231358 * bsc#1231360 * bsc#1231382 Cross-References: * CVE-2024-8925 * CVE-2024-8927 * CVE-2024-9026 CVSS scores: * CVE-2024-8925 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-8925 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-8925 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-8925 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-8927 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-8927 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-8927 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-8927 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-9026 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-9026 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-9026 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-9026 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: Update to php 8.2.24: * CVE-2024-8925: Fixed erroneous parsing of multipart form data in HTTP POST requests leads to legitimate data not being processed (bsc#1231360) * CVE-2024-8927: Fixed cgi.force_redirect configuration is bypassable due to an environment variable collision (bsc#1231358) * CVE-2024-9026: Fixed pollution of worker output logs in PHP-FPM (bsc#1231382) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2024-3729=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3729=1 openSUSE-SLE-15.6-2024-3729=1 ## Package List: * Web and Scripting Module 15-SP6 (aarch64 ppc64le s390x x86_64) * php8-pgsql-debuginfo-8.2.24-150600.3.6.1 * php8-opcache-8.2.24-150600.3.6.1 * php8-ldap-8.2.24-150600.3.6.1 * php8-fpm-debuginfo-8.2.24-150600.3.6.1 * php8-sysvshm-debuginfo-8.2.24-150600.3.6.1 * php8-tidy-8.2.24-150600.3.6.1 * php8-iconv-8.2.24-150600.3.6.1 * php8-fpm-debugsource-8.2.24-150600.3.6.1 * php8-tokenizer-debuginfo-8.2.24-150600.3.6.1 * php8-embed-8.2.24-150600.3.6.1 * php8-odbc-8.2.24-150600.3.6.1 * php8-readline-debuginfo-8.2.24-150600.3.6.1 * php8-dom-debuginfo-8.2.24-150600.3.6.1 * php8-zip-8.2.24-150600.3.6.1 * php8-devel-8.2.24-150600.3.6.1 * php8-sqlite-8.2.24-150600.3.6.1 * php8-embed-debuginfo-8.2.24-150600.3.6.1 * php8-gettext-debuginfo-8.2.24-150600.3.6.1 * php8-sysvsem-debuginfo-8.2.24-150600.3.6.1 * php8-fpm-8.2.24-150600.3.6.1 * php8-pdo-8.2.24-150600.3.6.1 * php8-sysvsem-8.2.24-150600.3.6.1 * php8-snmp-8.2.24-150600.3.6.1 * apache2-mod_php8-debuginfo-8.2.24-150600.3.6.1 * php8-sqlite-debuginfo-8.2.24-150600.3.6.1 * php8-cli-8.2.24-150600.3.6.1 * php8-gmp-debuginfo-8.2.24-150600.3.6.1 * php8-enchant-debuginfo-8.2.24-150600.3.6.1 * php8-sysvshm-8.2.24-150600.3.6.1 * php8-sodium-debuginfo-8.2.24-150600.3.6.1 * php8-bcmath-8.2.24-150600.3.6.1 * php8-mysql-debuginfo-8.2.24-150600.3.6.1 * php8-zlib-8.2.24-150600.3.6.1 * php8-posix-debuginfo-8.2.24-150600.3.6.1 * php8-pcntl-8.2.24-150600.3.6.1 * php8-xmlreader-debuginfo-8.2.24-150600.3.6.1 * php8-shmop-debuginfo-8.2.24-150600.3.6.1 * php8-soap-debuginfo-8.2.24-150600.3.6.1 * php8-tidy-debuginfo-8.2.24-150600.3.6.1 * php8-enchant-8.2.24-150600.3.6.1 * php8-mbstring-8.2.24-150600.3.6.1 * php8-sysvmsg-debuginfo-8.2.24-150600.3.6.1 * php8-intl-debuginfo-8.2.24-150600.3.6.1 * php8-dba-8.2.24-150600.3.6.1 * php8-curl-8.2.24-150600.3.6.1 * php8-fileinfo-8.2.24-150600.3.6.1 * php8-ctype-8.2.24-150600.3.6.1 * php8-8.2.24-150600.3.6.1 * php8-ldap-debuginfo-8.2.24-150600.3.6.1 * php8-sockets-8.2.24-150600.3.6.1 * php8-soap-8.2.24-150600.3.6.1 * php8-readline-8.2.24-150600.3.6.1 * php8-pgsql-8.2.24-150600.3.6.1 * php8-ftp-8.2.24-150600.3.6.1 * php8-sodium-8.2.24-150600.3.6.1 * php8-exif-debuginfo-8.2.24-150600.3.6.1 * php8-xmlwriter-debuginfo-8.2.24-150600.3.6.1 * php8-xmlwriter-8.2.24-150600.3.6.1 * php8-curl-debuginfo-8.2.24-150600.3.6.1 * php8-gmp-8.2.24-150600.3.6.1 * php8-zip-debuginfo-8.2.24-150600.3.6.1 * php8-calendar-debuginfo-8.2.24-150600.3.6.1 * php8-debugsource-8.2.24-150600.3.6.1 * php8-bz2-8.2.24-150600.3.6.1 * php8-shmop-8.2.24-150600.3.6.1 * php8-gd-8.2.24-150600.3.6.1 * php8-mysql-8.2.24-150600.3.6.1 * php8-opcache-debuginfo-8.2.24-150600.3.6.1 * php8-xmlreader-8.2.24-150600.3.6.1 * php8-xsl-8.2.24-150600.3.6.1 * php8-odbc-debuginfo-8.2.24-150600.3.6.1 * php8-debuginfo-8.2.24-150600.3.6.1 * php8-bz2-debuginfo-8.2.24-150600.3.6.1 * php8-fastcgi-debuginfo-8.2.24-150600.3.6.1 * php8-bcmath-debuginfo-8.2.24-150600.3.6.1 * php8-test-8.2.24-150600.3.6.1 * php8-embed-debugsource-8.2.24-150600.3.6.1 * php8-gd-debuginfo-8.2.24-150600.3.6.1 * php8-snmp-debuginfo-8.2.24-150600.3.6.1 * php8-xsl-debuginfo-8.2.24-150600.3.6.1 * php8-phar-debuginfo-8.2.24-150600.3.6.1 * apache2-mod_php8-8.2.24-150600.3.6.1 * php8-fastcgi-debugsource-8.2.24-150600.3.6.1 * php8-iconv-debuginfo-8.2.24-150600.3.6.1 * php8-cli-debuginfo-8.2.24-150600.3.6.1 * php8-ftp-debuginfo-8.2.24-150600.3.6.1 * php8-openssl-8.2.24-150600.3.6.1 * php8-fileinfo-debuginfo-8.2.24-150600.3.6.1 * php8-sockets-debuginfo-8.2.24-150600.3.6.1 * php8-dom-8.2.24-150600.3.6.1 * php8-phar-8.2.24-150600.3.6.1 * php8-pcntl-debuginfo-8.2.24-150600.3.6.1 * php8-exif-8.2.24-150600.3.6.1 * php8-ctype-debuginfo-8.2.24-150600.3.6.1 * php8-sysvmsg-8.2.24-150600.3.6.1 * php8-openssl-debuginfo-8.2.24-150600.3.6.1 * php8-mbstring-debuginfo-8.2.24-150600.3.6.1 * php8-gettext-8.2.24-150600.3.6.1 * php8-intl-8.2.24-150600.3.6.1 * php8-zlib-debuginfo-8.2.24-150600.3.6.1 * php8-dba-debuginfo-8.2.24-150600.3.6.1 * php8-tokenizer-8.2.24-150600.3.6.1 * php8-calendar-8.2.24-150600.3.6.1 * apache2-mod_php8-debugsource-8.2.24-150600.3.6.1 * php8-posix-8.2.24-150600.3.6.1 * php8-pdo-debuginfo-8.2.24-150600.3.6.1 * php8-fastcgi-8.2.24-150600.3.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * php8-pgsql-debuginfo-8.2.24-150600.3.6.1 * php8-ffi-8.2.24-150600.3.6.1 * php8-opcache-8.2.24-150600.3.6.1 * php8-ldap-8.2.24-150600.3.6.1 * php8-fpm-debuginfo-8.2.24-150600.3.6.1 * php8-sysvshm-debuginfo-8.2.24-150600.3.6.1 * php8-tidy-8.2.24-150600.3.6.1 * php8-iconv-8.2.24-150600.3.6.1 * php8-fpm-debugsource-8.2.24-150600.3.6.1 * php8-tokenizer-debuginfo-8.2.24-150600.3.6.1 * php8-odbc-8.2.24-150600.3.6.1 * php8-embed-8.2.24-150600.3.6.1 * php8-readline-debuginfo-8.2.24-150600.3.6.1 * php8-dom-debuginfo-8.2.24-150600.3.6.1 * php8-zip-8.2.24-150600.3.6.1 * php8-devel-8.2.24-150600.3.6.1 * php8-sqlite-8.2.24-150600.3.6.1 * php8-embed-debuginfo-8.2.24-150600.3.6.1 * php8-gettext-debuginfo-8.2.24-150600.3.6.1 * php8-sysvsem-debuginfo-8.2.24-150600.3.6.1 * php8-fpm-8.2.24-150600.3.6.1 * php8-pdo-8.2.24-150600.3.6.1 * php8-sysvsem-8.2.24-150600.3.6.1 * php8-snmp-8.2.24-150600.3.6.1 * apache2-mod_php8-debuginfo-8.2.24-150600.3.6.1 * php8-sqlite-debuginfo-8.2.24-150600.3.6.1 * php8-cli-8.2.24-150600.3.6.1 * php8-gmp-debuginfo-8.2.24-150600.3.6.1 * php8-enchant-debuginfo-8.2.24-150600.3.6.1 * php8-sysvshm-8.2.24-150600.3.6.1 * php8-sodium-debuginfo-8.2.24-150600.3.6.1 * php8-bcmath-8.2.24-150600.3.6.1 * php8-mysql-debuginfo-8.2.24-150600.3.6.1 * php8-zlib-8.2.24-150600.3.6.1 * php8-posix-debuginfo-8.2.24-150600.3.6.1 * php8-pcntl-8.2.24-150600.3.6.1 * php8-xmlreader-debuginfo-8.2.24-150600.3.6.1 * php8-shmop-debuginfo-8.2.24-150600.3.6.1 * php8-soap-debuginfo-8.2.24-150600.3.6.1 * php8-tidy-debuginfo-8.2.24-150600.3.6.1 * php8-enchant-8.2.24-150600.3.6.1 * php8-mbstring-8.2.24-150600.3.6.1 * php8-sysvmsg-debuginfo-8.2.24-150600.3.6.1 * php8-intl-debuginfo-8.2.24-150600.3.6.1 * php8-dba-8.2.24-150600.3.6.1 * php8-curl-8.2.24-150600.3.6.1 * php8-fileinfo-8.2.24-150600.3.6.1 * php8-ctype-8.2.24-150600.3.6.1 * php8-8.2.24-150600.3.6.1 * php8-ldap-debuginfo-8.2.24-150600.3.6.1 * php8-sockets-8.2.24-150600.3.6.1 * php8-soap-8.2.24-150600.3.6.1 * php8-readline-8.2.24-150600.3.6.1 * php8-pgsql-8.2.24-150600.3.6.1 * php8-ftp-8.2.24-150600.3.6.1 * php8-sodium-8.2.24-150600.3.6.1 * php8-exif-debuginfo-8.2.24-150600.3.6.1 * php8-xmlwriter-debuginfo-8.2.24-150600.3.6.1 * php8-xmlwriter-8.2.24-150600.3.6.1 * php8-curl-debuginfo-8.2.24-150600.3.6.1 * php8-gmp-8.2.24-150600.3.6.1 * php8-zip-debuginfo-8.2.24-150600.3.6.1 * php8-calendar-debuginfo-8.2.24-150600.3.6.1 * php8-debugsource-8.2.24-150600.3.6.1 * php8-bz2-8.2.24-150600.3.6.1 * php8-shmop-8.2.24-150600.3.6.1 * php8-gd-8.2.24-150600.3.6.1 * php8-mysql-8.2.24-150600.3.6.1 * php8-opcache-debuginfo-8.2.24-150600.3.6.1 * php8-xmlreader-8.2.24-150600.3.6.1 * php8-xsl-8.2.24-150600.3.6.1 * php8-odbc-debuginfo-8.2.24-150600.3.6.1 * php8-debuginfo-8.2.24-150600.3.6.1 * php8-bz2-debuginfo-8.2.24-150600.3.6.1 * php8-fastcgi-debuginfo-8.2.24-150600.3.6.1 * php8-bcmath-debuginfo-8.2.24-150600.3.6.1 * php8-test-8.2.24-150600.3.6.1 * php8-ffi-debuginfo-8.2.24-150600.3.6.1 * php8-embed-debugsource-8.2.24-150600.3.6.1 * php8-gd-debuginfo-8.2.24-150600.3.6.1 * php8-snmp-debuginfo-8.2.24-150600.3.6.1 * php8-xsl-debuginfo-8.2.24-150600.3.6.1 * php8-phar-debuginfo-8.2.24-150600.3.6.1 * apache2-mod_php8-8.2.24-150600.3.6.1 * php8-iconv-debuginfo-8.2.24-150600.3.6.1 * php8-fastcgi-debugsource-8.2.24-150600.3.6.1 * php8-cli-debuginfo-8.2.24-150600.3.6.1 * php8-ftp-debuginfo-8.2.24-150600.3.6.1 * php8-openssl-8.2.24-150600.3.6.1 * php8-fileinfo-debuginfo-8.2.24-150600.3.6.1 * php8-sockets-debuginfo-8.2.24-150600.3.6.1 * php8-dom-8.2.24-150600.3.6.1 * php8-phar-8.2.24-150600.3.6.1 * php8-pcntl-debuginfo-8.2.24-150600.3.6.1 * php8-exif-8.2.24-150600.3.6.1 * php8-ctype-debuginfo-8.2.24-150600.3.6.1 * php8-sysvmsg-8.2.24-150600.3.6.1 * php8-openssl-debuginfo-8.2.24-150600.3.6.1 * php8-mbstring-debuginfo-8.2.24-150600.3.6.1 * php8-gettext-8.2.24-150600.3.6.1 * php8-intl-8.2.24-150600.3.6.1 * php8-zlib-debuginfo-8.2.24-150600.3.6.1 * php8-dba-debuginfo-8.2.24-150600.3.6.1 * php8-tokenizer-8.2.24-150600.3.6.1 * php8-calendar-8.2.24-150600.3.6.1 * php8-posix-8.2.24-150600.3.6.1 * apache2-mod_php8-debugsource-8.2.24-150600.3.6.1 * php8-pdo-debuginfo-8.2.24-150600.3.6.1 * php8-fastcgi-8.2.24-150600.3.6.1 * openSUSE Leap 15.6 (noarch) * php8-fpm-apache-8.2.24-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-8925.html * https://www.suse.com/security/cve/CVE-2024-8927.html * https://www.suse.com/security/cve/CVE-2024-9026.html * https://bugzilla.suse.com/show_bug.cgi?id=1231358 * https://bugzilla.suse.com/show_bug.cgi?id=1231360 * https://bugzilla.suse.com/show_bug.cgi?id=1231382

1 0

SUSE-SU-2024:3731-1: important: Security update for MozillaThunderbird
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Security update for MozillaThunderbird Announcement ID: SUSE-SU-2024:3731-1 Release Date: 2024-10-18T14:29:54Z Rating: important References: * bsc#1231413 Cross-References: * CVE-2024-9680 CVSS scores: * CVE-2024-9680 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9680 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9680 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-9680 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP5 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.3.1 (MFSA 2024-52, bsc#1231413): * CVE-2024-9680: Fixed use-after-free in Animation timeline (bmo#1923344) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3731=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3731=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3731=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3731=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3731=1 * SUSE Linux Enterprise Workstation Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2024-3731=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-3731=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-other-128.3.1-150200.8.185.1 * MozillaThunderbird-debugsource-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-common-128.3.1-150200.8.185.1 * MozillaThunderbird-debuginfo-128.3.1-150200.8.185.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-other-128.3.1-150200.8.185.1 * MozillaThunderbird-debugsource-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-common-128.3.1-150200.8.185.1 * MozillaThunderbird-debuginfo-128.3.1-150200.8.185.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x) * MozillaThunderbird-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-other-128.3.1-150200.8.185.1 * MozillaThunderbird-debugsource-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-common-128.3.1-150200.8.185.1 * MozillaThunderbird-debuginfo-128.3.1-150200.8.185.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x) * MozillaThunderbird-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-other-128.3.1-150200.8.185.1 * MozillaThunderbird-debugsource-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-common-128.3.1-150200.8.185.1 * MozillaThunderbird-debuginfo-128.3.1-150200.8.185.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * MozillaThunderbird-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-other-128.3.1-150200.8.185.1 * MozillaThunderbird-debugsource-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-common-128.3.1-150200.8.185.1 * MozillaThunderbird-debuginfo-128.3.1-150200.8.185.1 * SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64) * MozillaThunderbird-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-other-128.3.1-150200.8.185.1 * MozillaThunderbird-debugsource-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-common-128.3.1-150200.8.185.1 * MozillaThunderbird-debuginfo-128.3.1-150200.8.185.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * MozillaThunderbird-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-other-128.3.1-150200.8.185.1 * MozillaThunderbird-debugsource-128.3.1-150200.8.185.1 * MozillaThunderbird-translations-common-128.3.1-150200.8.185.1 * MozillaThunderbird-debuginfo-128.3.1-150200.8.185.1 ## References: * https://www.suse.com/security/cve/CVE-2024-9680.html * https://bugzilla.suse.com/show_bug.cgi?id=1231413

1 0

SUSE-SU-2024:3733-1: moderate: Security update for php7
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Security update for php7 Announcement ID: SUSE-SU-2024:3733-1 Release Date: 2024-10-18T15:48:48Z Rating: moderate References: * bsc#1231358 * bsc#1231360 * bsc#1231382 Cross-References: * CVE-2024-8925 * CVE-2024-8927 * CVE-2024-9026 CVSS scores: * CVE-2024-8925 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-8925 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-8925 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-8925 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-8927 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-8927 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-8927 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-8927 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-9026 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-9026 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-9026 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-9026 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * Legacy Module 15-SP5 * Legacy Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for php7 fixes the following issues: * CVE-2024-8925: Fixed erroneous parsing of multipart form data in HTTP POST requests leads to legitimate data not being processed (bsc#1231360) * CVE-2024-8927: Fixed cgi.force_redirect configuration is bypassable due to an environment variable collision (bsc#1231358) * CVE-2024-9026: Fixed pollution of worker output logs in PHP-FPM (bsc#1231382) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3733=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3733=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3733=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2024-3733=1 * Legacy Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2024-3733=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3733=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3733=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * apache2-mod_php7-debuginfo-7.4.33-150400.4.40.1 * php7-debuginfo-7.4.33-150400.4.40.1 * php7-dom-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-7.4.33-150400.4.40.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-7.4.33-150400.4.40.1 * php7-gd-7.4.33-150400.4.40.1 * php7-pcntl-7.4.33-150400.4.40.1 * php7-pdo-7.4.33-150400.4.40.1 * php7-json-debuginfo-7.4.33-150400.4.40.1 * php7-openssl-debuginfo-7.4.33-150400.4.40.1 * php7-sysvshm-7.4.33-150400.4.40.1 * php7-sqlite-7.4.33-150400.4.40.1 * php7-exif-debuginfo-7.4.33-150400.4.40.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.40.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.40.1 * php7-dba-7.4.33-150400.4.40.1 * php7-opcache-7.4.33-150400.4.40.1 * php7-cli-7.4.33-150400.4.40.1 * php7-ctype-debuginfo-7.4.33-150400.4.40.1 * php7-xmlwriter-7.4.33-150400.4.40.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-7.4.33-150400.4.40.1 * php7-sqlite-debuginfo-7.4.33-150400.4.40.1 * php7-embed-7.4.33-150400.4.40.1 * php7-soap-7.4.33-150400.4.40.1 * php7-sodium-debuginfo-7.4.33-150400.4.40.1 * php7-fileinfo-7.4.33-150400.4.40.1 * php7-posix-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-7.4.33-150400.4.40.1 * php7-tidy-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-debuginfo-7.4.33-150400.4.40.1 * php7-soap-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-7.4.33-150400.4.40.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.40.1 * php7-opcache-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-debuginfo-7.4.33-150400.4.40.1 * php7-embed-debugsource-7.4.33-150400.4.40.1 * php7-calendar-debuginfo-7.4.33-150400.4.40.1 * php7-dba-debuginfo-7.4.33-150400.4.40.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-7.4.33-150400.4.40.1 * php7-curl-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-7.4.33-150400.4.40.1 * php7-mysql-debuginfo-7.4.33-150400.4.40.1 * php7-bz2-debuginfo-7.4.33-150400.4.40.1 * php7-7.4.33-150400.4.40.1 * php7-gmp-7.4.33-150400.4.40.1 * php7-posix-7.4.33-150400.4.40.1 * php7-ftp-7.4.33-150400.4.40.1 * php7-zip-7.4.33-150400.4.40.1 * php7-readline-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-debuginfo-7.4.33-150400.4.40.1 * php7-exif-7.4.33-150400.4.40.1 * php7-calendar-7.4.33-150400.4.40.1 * php7-sockets-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-7.4.33-150400.4.40.1 * php7-zlib-debuginfo-7.4.33-150400.4.40.1 * php7-readline-7.4.33-150400.4.40.1 * php7-sodium-7.4.33-150400.4.40.1 * php7-xsl-7.4.33-150400.4.40.1 * php7-bcmath-debuginfo-7.4.33-150400.4.40.1 * php7-gmp-debuginfo-7.4.33-150400.4.40.1 * php7-intl-debuginfo-7.4.33-150400.4.40.1 * php7-embed-debuginfo-7.4.33-150400.4.40.1 * php7-ftp-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debugsource-7.4.33-150400.4.40.1 * php7-test-7.4.33-150400.4.40.1 * php7-bz2-7.4.33-150400.4.40.1 * php7-phar-7.4.33-150400.4.40.1 * php7-pdo-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-debuginfo-7.4.33-150400.4.40.1 * php7-curl-7.4.33-150400.4.40.1 * php7-pcntl-debuginfo-7.4.33-150400.4.40.1 * php7-intl-7.4.33-150400.4.40.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.40.1 * php7-ldap-7.4.33-150400.4.40.1 * php7-xmlrpc-7.4.33-150400.4.40.1 * php7-cli-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-7.4.33-150400.4.40.1 * php7-ldap-debuginfo-7.4.33-150400.4.40.1 * php7-zip-debuginfo-7.4.33-150400.4.40.1 * php7-debugsource-7.4.33-150400.4.40.1 * php7-bcmath-7.4.33-150400.4.40.1 * php7-json-7.4.33-150400.4.40.1 * php7-openssl-7.4.33-150400.4.40.1 * php7-tidy-7.4.33-150400.4.40.1 * php7-mysql-7.4.33-150400.4.40.1 * php7-xsl-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-7.4.33-150400.4.40.1 * php7-mbstring-debuginfo-7.4.33-150400.4.40.1 * php7-zlib-7.4.33-150400.4.40.1 * php7-sysvsem-7.4.33-150400.4.40.1 * php7-devel-7.4.33-150400.4.40.1 * php7-fpm-debugsource-7.4.33-150400.4.40.1 * php7-gd-debuginfo-7.4.33-150400.4.40.1 * php7-dom-7.4.33-150400.4.40.1 * apache2-mod_php7-7.4.33-150400.4.40.1 * php7-fastcgi-7.4.33-150400.4.40.1 * php7-mbstring-7.4.33-150400.4.40.1 * php7-ctype-7.4.33-150400.4.40.1 * php7-phar-debuginfo-7.4.33-150400.4.40.1 * php7-sockets-7.4.33-150400.4.40.1 * php7-sysvmsg-7.4.33-150400.4.40.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * apache2-mod_php7-debuginfo-7.4.33-150400.4.40.1 * php7-debuginfo-7.4.33-150400.4.40.1 * php7-dom-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-7.4.33-150400.4.40.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-7.4.33-150400.4.40.1 * php7-gd-7.4.33-150400.4.40.1 * php7-pcntl-7.4.33-150400.4.40.1 * php7-pdo-7.4.33-150400.4.40.1 * php7-json-debuginfo-7.4.33-150400.4.40.1 * php7-openssl-debuginfo-7.4.33-150400.4.40.1 * php7-sysvshm-7.4.33-150400.4.40.1 * php7-sqlite-7.4.33-150400.4.40.1 * php7-exif-debuginfo-7.4.33-150400.4.40.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.40.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.40.1 * php7-dba-7.4.33-150400.4.40.1 * php7-opcache-7.4.33-150400.4.40.1 * php7-cli-7.4.33-150400.4.40.1 * php7-ctype-debuginfo-7.4.33-150400.4.40.1 * php7-xmlwriter-7.4.33-150400.4.40.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-7.4.33-150400.4.40.1 * php7-sqlite-debuginfo-7.4.33-150400.4.40.1 * php7-embed-7.4.33-150400.4.40.1 * php7-soap-7.4.33-150400.4.40.1 * php7-sodium-debuginfo-7.4.33-150400.4.40.1 * php7-fileinfo-7.4.33-150400.4.40.1 * php7-posix-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-7.4.33-150400.4.40.1 * php7-tidy-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-debuginfo-7.4.33-150400.4.40.1 * php7-soap-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-7.4.33-150400.4.40.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.40.1 * php7-opcache-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-debuginfo-7.4.33-150400.4.40.1 * php7-embed-debugsource-7.4.33-150400.4.40.1 * php7-calendar-debuginfo-7.4.33-150400.4.40.1 * php7-dba-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-7.4.33-150400.4.40.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.40.1 * php7-curl-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-7.4.33-150400.4.40.1 * php7-mysql-debuginfo-7.4.33-150400.4.40.1 * php7-bz2-debuginfo-7.4.33-150400.4.40.1 * php7-7.4.33-150400.4.40.1 * php7-gmp-7.4.33-150400.4.40.1 * php7-posix-7.4.33-150400.4.40.1 * php7-ftp-7.4.33-150400.4.40.1 * php7-zip-7.4.33-150400.4.40.1 * php7-readline-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-debuginfo-7.4.33-150400.4.40.1 * php7-exif-7.4.33-150400.4.40.1 * php7-calendar-7.4.33-150400.4.40.1 * php7-sockets-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-7.4.33-150400.4.40.1 * php7-zlib-debuginfo-7.4.33-150400.4.40.1 * php7-readline-7.4.33-150400.4.40.1 * php7-sodium-7.4.33-150400.4.40.1 * php7-xsl-7.4.33-150400.4.40.1 * php7-bcmath-debuginfo-7.4.33-150400.4.40.1 * php7-gmp-debuginfo-7.4.33-150400.4.40.1 * php7-intl-debuginfo-7.4.33-150400.4.40.1 * php7-embed-debuginfo-7.4.33-150400.4.40.1 * php7-ftp-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debugsource-7.4.33-150400.4.40.1 * php7-test-7.4.33-150400.4.40.1 * php7-bz2-7.4.33-150400.4.40.1 * php7-phar-7.4.33-150400.4.40.1 * php7-pdo-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-debuginfo-7.4.33-150400.4.40.1 * php7-curl-7.4.33-150400.4.40.1 * php7-pcntl-debuginfo-7.4.33-150400.4.40.1 * php7-intl-7.4.33-150400.4.40.1 * php7-ldap-7.4.33-150400.4.40.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.40.1 * php7-xmlrpc-7.4.33-150400.4.40.1 * php7-cli-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-7.4.33-150400.4.40.1 * php7-ldap-debuginfo-7.4.33-150400.4.40.1 * php7-zip-debuginfo-7.4.33-150400.4.40.1 * php7-debugsource-7.4.33-150400.4.40.1 * php7-bcmath-7.4.33-150400.4.40.1 * php7-json-7.4.33-150400.4.40.1 * php7-openssl-7.4.33-150400.4.40.1 * php7-tidy-7.4.33-150400.4.40.1 * php7-mysql-7.4.33-150400.4.40.1 * php7-xsl-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-7.4.33-150400.4.40.1 * php7-mbstring-debuginfo-7.4.33-150400.4.40.1 * php7-zlib-7.4.33-150400.4.40.1 * php7-sysvsem-7.4.33-150400.4.40.1 * php7-devel-7.4.33-150400.4.40.1 * php7-fpm-debugsource-7.4.33-150400.4.40.1 * php7-gd-debuginfo-7.4.33-150400.4.40.1 * php7-dom-7.4.33-150400.4.40.1 * apache2-mod_php7-7.4.33-150400.4.40.1 * php7-fastcgi-7.4.33-150400.4.40.1 * php7-mbstring-7.4.33-150400.4.40.1 * php7-ctype-7.4.33-150400.4.40.1 * php7-phar-debuginfo-7.4.33-150400.4.40.1 * php7-sockets-7.4.33-150400.4.40.1 * php7-sysvmsg-7.4.33-150400.4.40.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * apache2-mod_php7-debuginfo-7.4.33-150400.4.40.1 * php7-debuginfo-7.4.33-150400.4.40.1 * php7-dom-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-7.4.33-150400.4.40.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-7.4.33-150400.4.40.1 * php7-gd-7.4.33-150400.4.40.1 * php7-pcntl-7.4.33-150400.4.40.1 * php7-pdo-7.4.33-150400.4.40.1 * php7-json-debuginfo-7.4.33-150400.4.40.1 * php7-openssl-debuginfo-7.4.33-150400.4.40.1 * php7-sysvshm-7.4.33-150400.4.40.1 * php7-sqlite-7.4.33-150400.4.40.1 * php7-exif-debuginfo-7.4.33-150400.4.40.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.40.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.40.1 * php7-dba-7.4.33-150400.4.40.1 * php7-opcache-7.4.33-150400.4.40.1 * php7-cli-7.4.33-150400.4.40.1 * php7-ctype-debuginfo-7.4.33-150400.4.40.1 * php7-xmlwriter-7.4.33-150400.4.40.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-7.4.33-150400.4.40.1 * php7-sqlite-debuginfo-7.4.33-150400.4.40.1 * php7-embed-7.4.33-150400.4.40.1 * php7-soap-7.4.33-150400.4.40.1 * php7-sodium-debuginfo-7.4.33-150400.4.40.1 * php7-fileinfo-7.4.33-150400.4.40.1 * php7-posix-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-7.4.33-150400.4.40.1 * php7-tidy-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-debuginfo-7.4.33-150400.4.40.1 * php7-soap-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-7.4.33-150400.4.40.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.40.1 * php7-opcache-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-debuginfo-7.4.33-150400.4.40.1 * php7-embed-debugsource-7.4.33-150400.4.40.1 * php7-calendar-debuginfo-7.4.33-150400.4.40.1 * php7-dba-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-7.4.33-150400.4.40.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.40.1 * php7-curl-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-7.4.33-150400.4.40.1 * php7-mysql-debuginfo-7.4.33-150400.4.40.1 * php7-bz2-debuginfo-7.4.33-150400.4.40.1 * php7-7.4.33-150400.4.40.1 * php7-gmp-7.4.33-150400.4.40.1 * php7-posix-7.4.33-150400.4.40.1 * php7-ftp-7.4.33-150400.4.40.1 * php7-zip-7.4.33-150400.4.40.1 * php7-readline-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-debuginfo-7.4.33-150400.4.40.1 * php7-exif-7.4.33-150400.4.40.1 * php7-calendar-7.4.33-150400.4.40.1 * php7-sockets-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-7.4.33-150400.4.40.1 * php7-zlib-debuginfo-7.4.33-150400.4.40.1 * php7-readline-7.4.33-150400.4.40.1 * php7-sodium-7.4.33-150400.4.40.1 * php7-xsl-7.4.33-150400.4.40.1 * php7-bcmath-debuginfo-7.4.33-150400.4.40.1 * php7-gmp-debuginfo-7.4.33-150400.4.40.1 * php7-intl-debuginfo-7.4.33-150400.4.40.1 * php7-embed-debuginfo-7.4.33-150400.4.40.1 * php7-ftp-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debugsource-7.4.33-150400.4.40.1 * php7-test-7.4.33-150400.4.40.1 * php7-bz2-7.4.33-150400.4.40.1 * php7-phar-7.4.33-150400.4.40.1 * php7-pdo-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-debuginfo-7.4.33-150400.4.40.1 * php7-curl-7.4.33-150400.4.40.1 * php7-pcntl-debuginfo-7.4.33-150400.4.40.1 * php7-intl-7.4.33-150400.4.40.1 * php7-ldap-7.4.33-150400.4.40.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.40.1 * php7-xmlrpc-7.4.33-150400.4.40.1 * php7-cli-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-7.4.33-150400.4.40.1 * php7-ldap-debuginfo-7.4.33-150400.4.40.1 * php7-zip-debuginfo-7.4.33-150400.4.40.1 * php7-debugsource-7.4.33-150400.4.40.1 * php7-bcmath-7.4.33-150400.4.40.1 * php7-json-7.4.33-150400.4.40.1 * php7-openssl-7.4.33-150400.4.40.1 * php7-tidy-7.4.33-150400.4.40.1 * php7-mysql-7.4.33-150400.4.40.1 * php7-xsl-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-7.4.33-150400.4.40.1 * php7-mbstring-debuginfo-7.4.33-150400.4.40.1 * php7-zlib-7.4.33-150400.4.40.1 * php7-sysvsem-7.4.33-150400.4.40.1 * php7-devel-7.4.33-150400.4.40.1 * php7-fpm-debugsource-7.4.33-150400.4.40.1 * php7-gd-debuginfo-7.4.33-150400.4.40.1 * php7-dom-7.4.33-150400.4.40.1 * apache2-mod_php7-7.4.33-150400.4.40.1 * php7-fastcgi-7.4.33-150400.4.40.1 * php7-mbstring-7.4.33-150400.4.40.1 * php7-ctype-7.4.33-150400.4.40.1 * php7-phar-debuginfo-7.4.33-150400.4.40.1 * php7-sockets-7.4.33-150400.4.40.1 * php7-sysvmsg-7.4.33-150400.4.40.1 * Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64) * apache2-mod_php7-debuginfo-7.4.33-150400.4.40.1 * php7-debuginfo-7.4.33-150400.4.40.1 * php7-dom-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-7.4.33-150400.4.40.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-7.4.33-150400.4.40.1 * php7-gd-7.4.33-150400.4.40.1 * php7-pcntl-7.4.33-150400.4.40.1 * php7-pdo-7.4.33-150400.4.40.1 * php7-json-debuginfo-7.4.33-150400.4.40.1 * php7-openssl-debuginfo-7.4.33-150400.4.40.1 * php7-sysvshm-7.4.33-150400.4.40.1 * php7-sqlite-7.4.33-150400.4.40.1 * php7-exif-debuginfo-7.4.33-150400.4.40.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.40.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.40.1 * php7-dba-7.4.33-150400.4.40.1 * php7-opcache-7.4.33-150400.4.40.1 * php7-cli-7.4.33-150400.4.40.1 * php7-ctype-debuginfo-7.4.33-150400.4.40.1 * php7-xmlwriter-7.4.33-150400.4.40.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-7.4.33-150400.4.40.1 * php7-sqlite-debuginfo-7.4.33-150400.4.40.1 * php7-soap-7.4.33-150400.4.40.1 * php7-sodium-debuginfo-7.4.33-150400.4.40.1 * php7-fileinfo-7.4.33-150400.4.40.1 * php7-posix-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-7.4.33-150400.4.40.1 * php7-tidy-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-debuginfo-7.4.33-150400.4.40.1 * php7-soap-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-7.4.33-150400.4.40.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.40.1 * php7-opcache-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-debuginfo-7.4.33-150400.4.40.1 * php7-calendar-debuginfo-7.4.33-150400.4.40.1 * php7-dba-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-7.4.33-150400.4.40.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.40.1 * php7-curl-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-7.4.33-150400.4.40.1 * php7-mysql-debuginfo-7.4.33-150400.4.40.1 * php7-bz2-debuginfo-7.4.33-150400.4.40.1 * php7-7.4.33-150400.4.40.1 * php7-gmp-7.4.33-150400.4.40.1 * php7-posix-7.4.33-150400.4.40.1 * php7-ftp-7.4.33-150400.4.40.1 * php7-zip-7.4.33-150400.4.40.1 * php7-readline-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-debuginfo-7.4.33-150400.4.40.1 * php7-exif-7.4.33-150400.4.40.1 * php7-calendar-7.4.33-150400.4.40.1 * php7-sockets-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-7.4.33-150400.4.40.1 * php7-zlib-debuginfo-7.4.33-150400.4.40.1 * php7-readline-7.4.33-150400.4.40.1 * php7-sodium-7.4.33-150400.4.40.1 * php7-xsl-7.4.33-150400.4.40.1 * php7-bcmath-debuginfo-7.4.33-150400.4.40.1 * php7-gmp-debuginfo-7.4.33-150400.4.40.1 * php7-intl-debuginfo-7.4.33-150400.4.40.1 * php7-ftp-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debugsource-7.4.33-150400.4.40.1 * php7-bz2-7.4.33-150400.4.40.1 * php7-phar-7.4.33-150400.4.40.1 * php7-pdo-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-debuginfo-7.4.33-150400.4.40.1 * php7-curl-7.4.33-150400.4.40.1 * php7-pcntl-debuginfo-7.4.33-150400.4.40.1 * php7-intl-7.4.33-150400.4.40.1 * php7-ldap-7.4.33-150400.4.40.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.40.1 * php7-xmlrpc-7.4.33-150400.4.40.1 * php7-cli-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-7.4.33-150400.4.40.1 * php7-ldap-debuginfo-7.4.33-150400.4.40.1 * php7-zip-debuginfo-7.4.33-150400.4.40.1 * php7-debugsource-7.4.33-150400.4.40.1 * php7-bcmath-7.4.33-150400.4.40.1 * php7-json-7.4.33-150400.4.40.1 * php7-openssl-7.4.33-150400.4.40.1 * php7-tidy-7.4.33-150400.4.40.1 * php7-mysql-7.4.33-150400.4.40.1 * php7-xsl-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-7.4.33-150400.4.40.1 * php7-mbstring-debuginfo-7.4.33-150400.4.40.1 * php7-zlib-7.4.33-150400.4.40.1 * php7-sysvsem-7.4.33-150400.4.40.1 * php7-devel-7.4.33-150400.4.40.1 * php7-fpm-debugsource-7.4.33-150400.4.40.1 * php7-gd-debuginfo-7.4.33-150400.4.40.1 * php7-dom-7.4.33-150400.4.40.1 * apache2-mod_php7-7.4.33-150400.4.40.1 * php7-fastcgi-7.4.33-150400.4.40.1 * php7-mbstring-7.4.33-150400.4.40.1 * php7-ctype-7.4.33-150400.4.40.1 * php7-phar-debuginfo-7.4.33-150400.4.40.1 * php7-sockets-7.4.33-150400.4.40.1 * php7-sysvmsg-7.4.33-150400.4.40.1 * Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64) * apache2-mod_php7-debuginfo-7.4.33-150400.4.40.1 * php7-debuginfo-7.4.33-150400.4.40.1 * php7-dom-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-7.4.33-150400.4.40.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-7.4.33-150400.4.40.1 * php7-gd-7.4.33-150400.4.40.1 * php7-pcntl-7.4.33-150400.4.40.1 * php7-pdo-7.4.33-150400.4.40.1 * php7-json-debuginfo-7.4.33-150400.4.40.1 * php7-openssl-debuginfo-7.4.33-150400.4.40.1 * php7-sysvshm-7.4.33-150400.4.40.1 * php7-sqlite-7.4.33-150400.4.40.1 * php7-exif-debuginfo-7.4.33-150400.4.40.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.40.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.40.1 * php7-dba-7.4.33-150400.4.40.1 * php7-opcache-7.4.33-150400.4.40.1 * php7-cli-7.4.33-150400.4.40.1 * php7-ctype-debuginfo-7.4.33-150400.4.40.1 * php7-xmlwriter-7.4.33-150400.4.40.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-7.4.33-150400.4.40.1 * php7-sqlite-debuginfo-7.4.33-150400.4.40.1 * php7-soap-7.4.33-150400.4.40.1 * php7-sodium-debuginfo-7.4.33-150400.4.40.1 * php7-fileinfo-7.4.33-150400.4.40.1 * php7-posix-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-7.4.33-150400.4.40.1 * php7-tidy-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-debuginfo-7.4.33-150400.4.40.1 * php7-soap-debuginfo-7.4.33-150400.4.40.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-7.4.33-150400.4.40.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.40.1 * php7-opcache-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.40.1 * php7-gettext-debuginfo-7.4.33-150400.4.40.1 * php7-calendar-debuginfo-7.4.33-150400.4.40.1 * php7-dba-debuginfo-7.4.33-150400.4.40.1 * php7-fpm-7.4.33-150400.4.40.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.40.1 * php7-curl-debuginfo-7.4.33-150400.4.40.1 * php7-enchant-7.4.33-150400.4.40.1 * php7-mysql-debuginfo-7.4.33-150400.4.40.1 * php7-bz2-debuginfo-7.4.33-150400.4.40.1 * php7-7.4.33-150400.4.40.1 * php7-gmp-7.4.33-150400.4.40.1 * php7-posix-7.4.33-150400.4.40.1 * php7-ftp-7.4.33-150400.4.40.1 * php7-zip-7.4.33-150400.4.40.1 * php7-readline-debuginfo-7.4.33-150400.4.40.1 * php7-snmp-debuginfo-7.4.33-150400.4.40.1 * php7-exif-7.4.33-150400.4.40.1 * php7-calendar-7.4.33-150400.4.40.1 * php7-sockets-debuginfo-7.4.33-150400.4.40.1 * php7-iconv-debuginfo-7.4.33-150400.4.40.1 * php7-shmop-7.4.33-150400.4.40.1 * php7-zlib-debuginfo-7.4.33-150400.4.40.1 * php7-readline-7.4.33-150400.4.40.1 * php7-sodium-7.4.33-150400.4.40.1 * php7-xsl-7.4.33-150400.4.40.1 * php7-bcmath-debuginfo-7.4.33-150400.4.40.1 * php7-gmp-debuginfo-7.4.33-150400.4.40.1 * php7-intl-debuginfo-7.4.33-150400.4.40.1 * php7-ftp-debuginfo-7.4.33-150400.4.40.1 * php7-fastcgi-debugsource-7.4.33-150400.4.40.1 * php7-bz2-7.4.33-150400.4.40.1 * php7-phar-7.4.33-150400.4.40.1 * php7-pdo-debuginfo-7.4.33-150400.4.40.1 * php7-odbc-debuginfo-7.4.33-150400.4.40.1 * php7-curl-7.4.33-150400.4.40.1 * php7-pcntl-debuginfo-7.4.33-150400.4.40.1 * php7-intl-7.4.33-150400.4.40.1 * php7-ldap-7.4.33-150400.4.40.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.40.1 * php7-xmlrpc-7.4.33-150400.4.40.1 * php7-cli-debuginfo-7.4.33-150400.4.40.1 * php7-tokenizer-7.4.33-150400.4.40.1 * php7-ldap-debuginfo-7.4.33-150400.4.40.1 * php7-zip-debuginfo-7.4.33-150400.4.40.1 * php7-debugsource-7.4.33-150400.4.40.1 * php7-bcmath-7.4.33-150400.4.40.1 * php7-json-7.4.33-150400.4.40.1 * php7-openssl-7.4.33-150400.4.40.1 * php7-tidy-7.4.33-150400.4.40.1 * php7-mysql-7.4.33-150400.4.40.1 * php7-xsl-debuginfo-7.4.33-150400.4.40.1 * php7-pgsql-7.4.33-150400.4.40.1 * php7-mbstring-debuginfo-7.4.33-150400.4.40.1 * php7-zlib-7.4.33-150400.4.40.1 * php7-sysvsem-7.4.33-150400.4.40.1 * php7-devel-7.4.33-150400.4.40.1 * php7-fpm-debugsource-7.4.33-150400.4.40.1 * php7-gd-debuginfo-7.4.33-150400.4.40.1 * php7-dom-7.4.33-150400.4.40.1 * apache2-mod_php7-7.4.33-150400.4.40.1 * php7-fastcgi-7.4.33-150400.4.40.1 * php7-mbstring-7.4.33-150400.4.40.1 * php7-ctype-7.4.33-150400.4.40.1 * php7-phar-debuginfo-7.4.33-150400.4.40.1 * php7-sockets-7.4.33-150400.4.40.1 * php7-sysvmsg-7.4.33-150400.4.40.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * php7-embed-debuginfo-7.4.33-150400.4.40.1 * php7-embed-debugsource-7.4.33-150400.4.40.1 * php7-embed-7.4.33-150400.4.40.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * php7-embed-debuginfo-7.4.33-150400.4.40.1 * php7-embed-debugsource-7.4.33-150400.4.40.1 * php7-embed-7.4.33-150400.4.40.1 ## References: * https://www.suse.com/security/cve/CVE-2024-8925.html * https://www.suse.com/security/cve/CVE-2024-8927.html * https://www.suse.com/security/cve/CVE-2024-9026.html * https://bugzilla.suse.com/show_bug.cgi?id=1231358 * https://bugzilla.suse.com/show_bug.cgi?id=1231360 * https://bugzilla.suse.com/show_bug.cgi?id=1231382

1 0

SUSE-RU-2024:3726-1: moderate: Recommended update for glibc
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Recommended update for glibc Announcement ID: SUSE-RU-2024:3726-1 Release Date: 2024-10-18T09:56:52Z Rating: moderate References: * bsc#1231051 Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for glibc fixes the following issue: * Apply libc_nonshared.a workaround on s390x and ppc64le architectures (bsc#1231051). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3726=1 openSUSE-SLE-15.6-2024-3726=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3726=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3726=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586 i686) * libnsl1-2.38-150600.14.14.2 * glibc-devel-2.38-150600.14.14.2 * glibc-profile-2.38-150600.14.14.2 * glibc-devel-debuginfo-2.38-150600.14.14.2 * glibc-locale-base-debuginfo-2.38-150600.14.14.2 * glibc-2.38-150600.14.14.2 * glibc-devel-static-2.38-150600.14.14.2 * glibc-locale-2.38-150600.14.14.2 * glibc-locale-base-2.38-150600.14.14.2 * glibc-debugsource-2.38-150600.14.14.2 * glibc-debuginfo-2.38-150600.14.14.2 * libnsl1-debuginfo-2.38-150600.14.14.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * glibc-extra-2.38-150600.14.14.2 * glibc-utils-debuginfo-2.38-150600.14.14.2 * nscd-2.38-150600.14.14.2 * nscd-debuginfo-2.38-150600.14.14.2 * glibc-extra-debuginfo-2.38-150600.14.14.2 * glibc-utils-2.38-150600.14.14.2 * glibc-utils-src-debugsource-2.38-150600.14.14.2 * openSUSE Leap 15.6 (noarch) * glibc-info-2.38-150600.14.14.2 * glibc-i18ndata-2.38-150600.14.14.2 * glibc-html-2.38-150600.14.14.2 * glibc-lang-2.38-150600.14.14.2 * openSUSE Leap 15.6 (x86_64) * glibc-32bit-2.38-150600.14.14.2 * libnsl1-32bit-debuginfo-2.38-150600.14.14.2 * glibc-locale-base-32bit-2.38-150600.14.14.2 * glibc-profile-32bit-2.38-150600.14.14.2 * glibc-devel-static-32bit-2.38-150600.14.14.2 * glibc-utils-32bit-2.38-150600.14.14.2 * libnsl1-32bit-2.38-150600.14.14.2 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.14.2 * glibc-devel-32bit-2.38-150600.14.14.2 * glibc-utils-32bit-debuginfo-2.38-150600.14.14.2 * glibc-32bit-debuginfo-2.38-150600.14.14.2 * glibc-devel-32bit-debuginfo-2.38-150600.14.14.2 * openSUSE Leap 15.6 (aarch64_ilp32) * glibc-64bit-debuginfo-2.38-150600.14.14.2 * glibc-devel-static-64bit-2.38-150600.14.14.2 * glibc-devel-64bit-debuginfo-2.38-150600.14.14.2 * glibc-profile-64bit-2.38-150600.14.14.2 * libnsl1-64bit-2.38-150600.14.14.2 * glibc-utils-64bit-debuginfo-2.38-150600.14.14.2 * glibc-devel-64bit-2.38-150600.14.14.2 * glibc-locale-base-64bit-2.38-150600.14.14.2 * glibc-utils-64bit-2.38-150600.14.14.2 * glibc-locale-base-64bit-debuginfo-2.38-150600.14.14.2 * glibc-64bit-2.38-150600.14.14.2 * libnsl1-64bit-debuginfo-2.38-150600.14.14.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libnsl1-2.38-150600.14.14.2 * glibc-extra-2.38-150600.14.14.2 * glibc-devel-2.38-150600.14.14.2 * glibc-profile-2.38-150600.14.14.2 * glibc-devel-debuginfo-2.38-150600.14.14.2 * glibc-locale-base-debuginfo-2.38-150600.14.14.2 * glibc-2.38-150600.14.14.2 * glibc-locale-2.38-150600.14.14.2 * glibc-locale-base-2.38-150600.14.14.2 * glibc-debugsource-2.38-150600.14.14.2 * nscd-2.38-150600.14.14.2 * nscd-debuginfo-2.38-150600.14.14.2 * glibc-extra-debuginfo-2.38-150600.14.14.2 * glibc-debuginfo-2.38-150600.14.14.2 * libnsl1-debuginfo-2.38-150600.14.14.2 * Basesystem Module 15-SP6 (noarch) * glibc-info-2.38-150600.14.14.2 * glibc-i18ndata-2.38-150600.14.14.2 * glibc-lang-2.38-150600.14.14.2 * Basesystem Module 15-SP6 (x86_64) * glibc-32bit-2.38-150600.14.14.2 * libnsl1-32bit-debuginfo-2.38-150600.14.14.2 * glibc-locale-base-32bit-2.38-150600.14.14.2 * libnsl1-32bit-2.38-150600.14.14.2 * glibc-32bit-debuginfo-2.38-150600.14.14.2 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.14.2 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * glibc-utils-debuginfo-2.38-150600.14.14.2 * glibc-utils-src-debugsource-2.38-150600.14.14.2 * glibc-devel-static-2.38-150600.14.14.2 * glibc-debugsource-2.38-150600.14.14.2 * glibc-utils-2.38-150600.14.14.2 * glibc-debuginfo-2.38-150600.14.14.2 * Development Tools Module 15-SP6 (x86_64) * glibc-devel-32bit-debuginfo-2.38-150600.14.14.2 * glibc-32bit-debuginfo-2.38-150600.14.14.2 * glibc-devel-32bit-2.38-150600.14.14.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1231051

1 0

SUSE-RU-2024:3718-1: important: Recommended update for libzypp
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Recommended update for libzypp Announcement ID: SUSE-RU-2024:3718-1 Release Date: 2024-10-18T02:04:46Z Rating: important References: * bsc#1230912 * bsc#1231043 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for libzypp fixes the following issues: * Send unescaped colons in header values. According to the STOMP protocol, it would be correct to escape colon here but the practice broke plugin receivers that didn't expect this. The incompatiblity affected customers who were running spacewalk-repo-sync and experienced issues when accessing the cloud URL. [bsc#1231043] * Fix hang in curl code with no network connection. [bsc#1230912] ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3718=1 SUSE-2024-3718=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3718=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3718=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3718=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3718=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3718=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3718=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3718=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libzypp-debugsource-17.35.12-150500.6.21.1 * libzypp-devel-17.35.12-150500.6.21.1 * libzypp-17.35.12-150500.6.21.1 * libzypp-debuginfo-17.35.12-150500.6.21.1 * libzypp-devel-doc-17.35.12-150500.6.21.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libzypp-17.35.12-150500.6.21.1 * libzypp-debugsource-17.35.12-150500.6.21.1 * libzypp-debuginfo-17.35.12-150500.6.21.1 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libzypp-17.35.12-150500.6.21.1 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.12-150500.6.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libzypp-17.35.12-150500.6.21.1 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libzypp-17.35.12-150500.6.21.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.12-150500.6.21.1 * libzypp-debugsource-17.35.12-150500.6.21.1 * libzypp-debuginfo-17.35.12-150500.6.21.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.12-150500.6.21.1 * libzypp-debugsource-17.35.12-150500.6.21.1 * libzypp-debuginfo-17.35.12-150500.6.21.1 * libzypp-devel-17.35.12-150500.6.21.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230912 * https://bugzilla.suse.com/show_bug.cgi?id=1231043

1 0

SUSE-SU-2024:3719-1: important: Security update for python-starlette
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Security update for python-starlette Announcement ID: SUSE-SU-2024:3719-1 Release Date: 2024-10-18T05:54:49Z Rating: important References: * bsc#1231689 Cross-References: * CVE-2024-47874 CVSS scores: * CVE-2024-47874 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-47874 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-47874 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-47874 ( NVD ): 0.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for python-starlette fixes the following issues: * CVE-2024-47874: Fixed possible DoS via parts size in multipart/form-data requests (bsc#1231689) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3719=1 openSUSE-SLE-15.6-2024-3719=1 ## Package List: * openSUSE Leap 15.6 (noarch) * python311-starlette-0.35.1-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-47874.html * https://bugzilla.suse.com/show_bug.cgi?id=1231689

1 0

SUSE-SU-2024:3720-1: moderate: Security update for jetty-minimal
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Security update for jetty-minimal Announcement ID: SUSE-SU-2024:3720-1 Release Date: 2024-10-18T06:34:07Z Rating: moderate References: * bsc#1231651 Cross-References: * CVE-2024-8184 CVSS scores: * CVE-2024-8184 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-8184 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-8184 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for jetty-minimal fixes the following issues: * CVE-2024-8184: Fixed remote denial-of-service in ThreadLimitHandler.getRemote() (bsc#1231651). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3720=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3720=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3720=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3720=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3720=1 ## Package List: * openSUSE Leap 15.5 (noarch) * jetty-client-9.4.56-150200.3.28.1 * jetty-minimal-javadoc-9.4.56-150200.3.28.1 * jetty-annotations-9.4.56-150200.3.28.1 * jetty-io-9.4.56-150200.3.28.1 * jetty-openid-9.4.56-150200.3.28.1 * jetty-server-9.4.56-150200.3.28.1 * jetty-rewrite-9.4.56-150200.3.28.1 * jetty-start-9.4.56-150200.3.28.1 * jetty-cdi-9.4.56-150200.3.28.1 * jetty-proxy-9.4.56-150200.3.28.1 * jetty-quickstart-9.4.56-150200.3.28.1 * jetty-jsp-9.4.56-150200.3.28.1 * jetty-plus-9.4.56-150200.3.28.1 * jetty-security-9.4.56-150200.3.28.1 * jetty-servlet-9.4.56-150200.3.28.1 * jetty-jmx-9.4.56-150200.3.28.1 * jetty-util-9.4.56-150200.3.28.1 * jetty-webapp-9.4.56-150200.3.28.1 * jetty-http-spi-9.4.56-150200.3.28.1 * jetty-util-ajax-9.4.56-150200.3.28.1 * jetty-servlets-9.4.56-150200.3.28.1 * jetty-http-9.4.56-150200.3.28.1 * jetty-ant-9.4.56-150200.3.28.1 * jetty-jaas-9.4.56-150200.3.28.1 * jetty-continuation-9.4.56-150200.3.28.1 * jetty-jndi-9.4.56-150200.3.28.1 * jetty-fcgi-9.4.56-150200.3.28.1 * jetty-deploy-9.4.56-150200.3.28.1 * jetty-xml-9.4.56-150200.3.28.1 * openSUSE Leap 15.6 (noarch) * jetty-client-9.4.56-150200.3.28.1 * jetty-minimal-javadoc-9.4.56-150200.3.28.1 * jetty-annotations-9.4.56-150200.3.28.1 * jetty-io-9.4.56-150200.3.28.1 * jetty-openid-9.4.56-150200.3.28.1 * jetty-server-9.4.56-150200.3.28.1 * jetty-rewrite-9.4.56-150200.3.28.1 * jetty-start-9.4.56-150200.3.28.1 * jetty-cdi-9.4.56-150200.3.28.1 * jetty-proxy-9.4.56-150200.3.28.1 * jetty-quickstart-9.4.56-150200.3.28.1 * jetty-jsp-9.4.56-150200.3.28.1 * jetty-plus-9.4.56-150200.3.28.1 * jetty-security-9.4.56-150200.3.28.1 * jetty-servlet-9.4.56-150200.3.28.1 * jetty-jmx-9.4.56-150200.3.28.1 * jetty-util-9.4.56-150200.3.28.1 * jetty-webapp-9.4.56-150200.3.28.1 * jetty-http-spi-9.4.56-150200.3.28.1 * jetty-util-ajax-9.4.56-150200.3.28.1 * jetty-servlets-9.4.56-150200.3.28.1 * jetty-http-9.4.56-150200.3.28.1 * jetty-ant-9.4.56-150200.3.28.1 * jetty-jaas-9.4.56-150200.3.28.1 * jetty-continuation-9.4.56-150200.3.28.1 * jetty-jndi-9.4.56-150200.3.28.1 * jetty-fcgi-9.4.56-150200.3.28.1 * jetty-deploy-9.4.56-150200.3.28.1 * jetty-xml-9.4.56-150200.3.28.1 * Development Tools Module 15-SP5 (noarch) * jetty-server-9.4.56-150200.3.28.1 * jetty-servlet-9.4.56-150200.3.28.1 * jetty-security-9.4.56-150200.3.28.1 * jetty-util-9.4.56-150200.3.28.1 * jetty-util-ajax-9.4.56-150200.3.28.1 * jetty-http-9.4.56-150200.3.28.1 * jetty-io-9.4.56-150200.3.28.1 * Development Tools Module 15-SP6 (noarch) * jetty-server-9.4.56-150200.3.28.1 * jetty-servlet-9.4.56-150200.3.28.1 * jetty-security-9.4.56-150200.3.28.1 * jetty-util-9.4.56-150200.3.28.1 * jetty-util-ajax-9.4.56-150200.3.28.1 * jetty-http-9.4.56-150200.3.28.1 * jetty-io-9.4.56-150200.3.28.1 * SUSE Package Hub 15 15-SP6 (noarch) * jetty-continuation-9.4.56-150200.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2024-8184.html * https://bugzilla.suse.com/show_bug.cgi?id=1231651

1 0

SUSE-RU-2024:3721-1: moderate: Recommended update for libblockdev
by OPENSUSE-UPDATES 18 Oct '24

18 Oct '24

# Recommended update for libblockdev Announcement ID: SUSE-RU-2024:3721-1 Release Date: 2024-10-18T07:45:16Z Rating: moderate References: * bsc#1227458 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for libblockdev fixes the following issue: * added libbd_btrfs2 as dependency of udisks2 btrfs module bsc#1227458 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3721=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3721=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3721=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3721=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3721=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3721=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3721=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3721=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3721=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3721=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3721=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3721=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libbd_part2-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libbd_part2-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libbd_part2-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libbd_part2-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libbd_part2-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libbd_part2-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libbd_part2-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libbd_vdo2-debuginfo-2.26-150400.3.2.1 * libbd_part2-2.26-150400.3.2.1 * libblockdev-devel-2.26-150400.3.2.1 * libbd_lvm-dbus2-2.26-150400.3.2.1 * libbd_kbd2-debuginfo-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_dm2-debuginfo-2.26-150400.3.2.1 * libbd_lvm-dbus-devel-2.26-150400.3.2.1 * libbd_dm2-2.26-150400.3.2.1 * libbd_fs-devel-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libbd_mdraid-devel-2.26-150400.3.2.1 * libbd_lvm-devel-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * libbd_crypto-devel-2.26-150400.3.2.1 * typelib-1_0-BlockDev-2_0-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libbd_kbd2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libbd_mpath2-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_mpath-devel-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * python3-libblockdev-2.26-150400.3.2.1 * libbd_lvm-dbus2-debuginfo-2.26-150400.3.2.1 * libbd_swap-devel-2.26-150400.3.2.1 * libbd_dm-devel-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_kbd-devel-2.26-150400.3.2.1 * libbd_part-devel-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mpath2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_vdo2-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_vdo-devel-2.26-150400.3.2.1 * libbd_btrfs-devel-2.26-150400.3.2.1 * libbd_utils-devel-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libbd_loop-devel-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libbd_part2-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libbd_vdo2-debuginfo-2.26-150400.3.2.1 * libbd_part2-2.26-150400.3.2.1 * libblockdev-devel-2.26-150400.3.2.1 * libbd_lvm-dbus2-2.26-150400.3.2.1 * libbd_kbd2-debuginfo-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_dm2-debuginfo-2.26-150400.3.2.1 * libbd_lvm-dbus-devel-2.26-150400.3.2.1 * libbd_dm2-2.26-150400.3.2.1 * libbd_fs-devel-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libbd_mdraid-devel-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * typelib-1_0-BlockDev-2_0-2.26-150400.3.2.1 * libbd_crypto-devel-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_kbd2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libbd_mpath2-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_mpath-devel-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * python3-libblockdev-2.26-150400.3.2.1 * libbd_lvm-dbus2-debuginfo-2.26-150400.3.2.1 * libbd_swap-devel-2.26-150400.3.2.1 * libbd_dm-devel-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_kbd-devel-2.26-150400.3.2.1 * libbd_part-devel-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mpath2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_vdo2-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_vdo-devel-2.26-150400.3.2.1 * libbd_btrfs-devel-2.26-150400.3.2.1 * libbd_utils-devel-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libbd_loop-devel-2.26-150400.3.2.1 * libbd_lvm-devel-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libbd_vdo2-debuginfo-2.26-150400.3.2.1 * libbd_part2-2.26-150400.3.2.1 * libblockdev-devel-2.26-150400.3.2.1 * libbd_lvm-dbus2-2.26-150400.3.2.1 * libbd_kbd2-debuginfo-2.26-150400.3.2.1 * libblockdev-debuginfo-2.26-150400.3.2.1 * libbd_dm2-debuginfo-2.26-150400.3.2.1 * libbd_lvm-dbus-devel-2.26-150400.3.2.1 * libbd_dm2-2.26-150400.3.2.1 * libbd_fs-devel-2.26-150400.3.2.1 * libbd_swap2-2.26-150400.3.2.1 * libbd_mdraid-devel-2.26-150400.3.2.1 * libblockdev2-2.26-150400.3.2.1 * typelib-1_0-BlockDev-2_0-2.26-150400.3.2.1 * libbd_crypto-devel-2.26-150400.3.2.1 * libbd_fs2-2.26-150400.3.2.1 * libbd_utils2-2.26-150400.3.2.1 * libbd_mdraid2-2.26-150400.3.2.1 * libblockdev-2.26-150400.3.2.1 * libbd_kbd2-2.26-150400.3.2.1 * libbd_lvm2-2.26-150400.3.2.1 * libblockdev2-debuginfo-2.26-150400.3.2.1 * libbd_mpath2-2.26-150400.3.2.1 * libblockdev-debugsource-2.26-150400.3.2.1 * libbd_mpath-devel-2.26-150400.3.2.1 * libbd_loop2-debuginfo-2.26-150400.3.2.1 * python3-libblockdev-2.26-150400.3.2.1 * libbd_lvm-dbus2-debuginfo-2.26-150400.3.2.1 * libbd_swap-devel-2.26-150400.3.2.1 * libbd_dm-devel-2.26-150400.3.2.1 * libbd_part2-debuginfo-2.26-150400.3.2.1 * libbd_utils2-debuginfo-2.26-150400.3.2.1 * libbd_kbd-devel-2.26-150400.3.2.1 * libbd_part-devel-2.26-150400.3.2.1 * libbd_loop2-2.26-150400.3.2.1 * libbd_fs2-debuginfo-2.26-150400.3.2.1 * libbd_mpath2-debuginfo-2.26-150400.3.2.1 * libbd_btrfs2-2.26-150400.3.2.1 * libbd_mdraid2-debuginfo-2.26-150400.3.2.1 * libbd_vdo2-2.26-150400.3.2.1 * libbd_btrfs2-debuginfo-2.26-150400.3.2.1 * libbd_vdo-devel-2.26-150400.3.2.1 * libbd_btrfs-devel-2.26-150400.3.2.1 * libbd_utils-devel-2.26-150400.3.2.1 * libbd_swap2-debuginfo-2.26-150400.3.2.1 * libbd_lvm2-debuginfo-2.26-150400.3.2.1 * libbd_crypto2-2.26-150400.3.2.1 * libbd_loop-devel-2.26-150400.3.2.1 * libbd_lvm-devel-2.26-150400.3.2.1 * libbd_crypto2-debuginfo-2.26-150400.3.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1227458

1 0

SUSE-RU-2024:3712-1: moderate: Recommended update for samba
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Recommended update for samba Announcement ID: SUSE-RU-2024:3712-1 Release Date: 2024-10-17T13:01:08Z Rating: moderate References: * bsc#1229684 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for samba fixes the following issues: * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated (bsc#1229684). * Version update * Invalid client warning about command line passwords. * program version string is truncated in manpages. * \--version-* options reject tilde characters. * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious. * Unable to log on to a Windows computer when user account need to change their own password. * Fix clock skew error message and memory cache clock skew recovery. * Dynamic DNS updates with the internal DNS are not working. * "client use kerberos" and --use-kerberos is ignored for the machine account. * Regression DFS not working with widelinks=true. * ntlm_auth make logs more consistent with length check. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3712=1 openSUSE-SLE-15.6-2024-3712=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3712=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-3712=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * samba-winbind-libs-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-gpupdate-4.19.8+git.368.51d32c069f-150600.3.6.11 * ctdb-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-4.19.8+git.368.51d32c069f-150600.3.6.11 * ctdb-pcp-pmda-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-python3-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-test-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy0-python3-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-tool-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-ldb-ldap-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-python3-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-python3-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-libs-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy-devel-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * ctdb-pcp-pmda-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy0-python3-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * ctdb-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-devel-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy-python3-devel-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-python3-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-ldb-ldap-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-test-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-debugsource-4.19.8+git.368.51d32c069f-150600.3.6.11 * openSUSE Leap 15.6 (x86_64) * libsamba-policy0-python3-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-32bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-python3-32bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy0-python3-32bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-32bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-32bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-python3-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-libs-32bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-libs-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-devel-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * openSUSE Leap 15.6 (noarch) * samba-doc-4.19.8+git.368.51d32c069f-150600.3.6.11 * openSUSE Leap 15.6 (aarch64 x86_64) * samba-ceph-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-ceph-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * openSUSE Leap 15.6 (aarch64_ilp32) * samba-libs-64bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-python3-64bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-python3-64bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-64bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-64bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy0-python3-64bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-64bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy0-python3-64bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-libs-64bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-libs-64bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-64bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-devel-64bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-64bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * samba-winbind-libs-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-gpupdate-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-python3-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy0-python3-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-tool-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-python3-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-ldb-ldap-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-python3-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-libs-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy-devel-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy0-python3-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-devel-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * libsamba-policy-python3-devel-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-python3-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-ldb-ldap-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-debugsource-4.19.8+git.368.51d32c069f-150600.3.6.11 * Basesystem Module 15-SP6 (aarch64 x86_64) * samba-ceph-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-ceph-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * Basesystem Module 15-SP6 (x86_64) * samba-libs-32bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-32bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-libs-32bit-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-winbind-libs-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-client-libs-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-libs-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * ctdb-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 * samba-debugsource-4.19.8+git.368.51d32c069f-150600.3.6.11 * ctdb-debuginfo-4.19.8+git.368.51d32c069f-150600.3.6.11 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1229684

1 0

SUSE-RU-2024:3713-1: moderate: Recommended update for supportutils-plugin-ha-sap
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Recommended update for supportutils-plugin-ha-sap Announcement ID: SUSE-RU-2024:3713-1 Release Date: 2024-10-17T13:06:23Z Rating: moderate References: * bsc#1230319 Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SAP Applications Module 15-SP2 * SAP Applications Module 15-SP3 * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for supportutils-plugin-ha-sap fixes the following issues: * Version update 0.0.6+git.1727164834.7af8512: * supportutils-plugin-ha-sap does not know about recent SAPHana-angi. This was partialy solved by last commit (bsc#1230319). * switch from the deprecated scplugin.rc to supportconfig.rc adapt all function calls. This was triggered by SLE16 package submission, because of missing provides to fulfill the package requirements. But this change was long overdue as scplugin.rc is deprecated in SLE15 cdestreams as well ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2024-3713=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-3713=1 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2024-3713=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3713=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3713=1 * SAP Applications Module 15-SP2 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2024-3713=1 * SAP Applications Module 15-SP3 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2024-3713=1 ## Package List: * SAP Applications Module 15-SP4 (noarch) * supportutils-plugin-ha-sap-0.0.6+git.1727164834.7af8512-150000.1.18.2 * SAP Applications Module 15-SP5 (noarch) * supportutils-plugin-ha-sap-0.0.6+git.1727164834.7af8512-150000.1.18.2 * SAP Applications Module 15-SP6 (noarch) * supportutils-plugin-ha-sap-0.0.6+git.1727164834.7af8512-150000.1.18.2 * openSUSE Leap 15.5 (noarch) * supportutils-plugin-ha-sap-0.0.6+git.1727164834.7af8512-150000.1.18.2 * openSUSE Leap 15.6 (noarch) * supportutils-plugin-ha-sap-0.0.6+git.1727164834.7af8512-150000.1.18.2 * SAP Applications Module 15-SP2 (noarch) * supportutils-plugin-ha-sap-0.0.6+git.1727164834.7af8512-150000.1.18.2 * SAP Applications Module 15-SP3 (noarch) * supportutils-plugin-ha-sap-0.0.6+git.1727164834.7af8512-150000.1.18.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230319

1 0

SUSE-RU-2024:3714-1: moderate: Recommended update for patterns-sap
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Recommended update for patterns-sap Announcement ID: SUSE-RU-2024:3714-1 Release Date: 2024-10-17T13:10:48Z Rating: moderate References: * bsc#1230380 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP5 * SAP Business One Module 15-SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for patterns-sap fixes the following issue: * libicu60_2 is missed in SAP BusinessOne Server Base pattern (bsc#1230380). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3714=1 openSUSE-SLE-15.5-2024-3714=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-3714=1 * SAP Business One Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Business-One-15-SP5-2024-3714=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * patterns-sap-bone-15.5.1-150500.5.11.2 * patterns-sap-hana-15.5.1-150500.5.11.2 * patterns-sap-nw-15.5.1-150500.5.11.2 * patterns-sap-15.5.1-150500.5.11.2 * SAP Applications Module 15-SP5 (ppc64le x86_64) * patterns-sap-hana-15.5.1-150500.5.11.2 * patterns-sap-nw-15.5.1-150500.5.11.2 * SAP Business One Module 15-SP5 (x86_64) * patterns-sap-bone-15.5.1-150500.5.11.2 * patterns-sap-hana-15.5.1-150500.5.11.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230380

1 0

SUSE-RU-2024:3715-1: moderate: Recommended update for sap-installation-wizard
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Recommended update for sap-installation-wizard Announcement ID: SUSE-RU-2024:3715-1 Release Date: 2024-10-17T13:16:41Z Rating: moderate References: * bsc#1230165 Affected Products: * openSUSE Leap 15.6 * SAP Applications Module 15-SP6 * SAP Business One Module 15-SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for sap-installation-wizard fixes the following issues: * Version upgrade * BusinessOne installer, Set the host name instead of the IP address and instead of the default values for all occurrences (bsc#1230165). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2024-3715=1 * SAP Business One Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Business-One-15-SP6-2024-3715=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3715=1 ## Package List: * SAP Applications Module 15-SP6 (ppc64le x86_64) * sap-installation-wizard-4.6.16-150600.3.8.2 * SAP Business One Module 15-SP6 (x86_64) * bone-installation-wizard-4.6.16-150600.3.8.2 * openSUSE Leap 15.6 (ppc64le x86_64) * sap-installation-wizard-4.6.16-150600.3.8.2 * bone-installation-wizard-4.6.16-150600.3.8.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230165

1 0

SUSE-RU-2024:3716-1: moderate: Recommended update for sap-installation-wizard
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Recommended update for sap-installation-wizard Announcement ID: SUSE-RU-2024:3716-1 Release Date: 2024-10-17T13:22:48Z Rating: moderate References: * bsc#1220851 * bsc#1230165 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP5 * SAP Business One Module 15-SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has two fixes can now be installed. ## Description: This update for sap-installation-wizard fixes the following issues: * Version upgrade * openQA test fails in "autoyast_sles4sap_hana" autoyast installation reporting: Value '' is invalid. Use one of: ports, hostnames (bsc#1220851). * BusinessOne installer, Set the host name instead of the IP address and instead of the default values for all occurrences (bsc#1230165). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3716=1 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2024-3716=1 * SAP Business One Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Business-One-15-SP5-2024-3716=1 ## Package List: * openSUSE Leap 15.5 (ppc64le x86_64) * bone-installation-wizard-4.5.16-150500.5.23.5 * sap-installation-wizard-4.5.16-150500.5.23.5 * SAP Applications Module 15-SP5 (ppc64le x86_64) * sap-installation-wizard-4.5.16-150500.5.23.5 * SAP Business One Module 15-SP5 (x86_64) * bone-installation-wizard-4.5.16-150500.5.23.5 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1220851 * https://bugzilla.suse.com/show_bug.cgi?id=1230165

1 0

SUSE-SU-2024:3708-1: important: Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6) Announcement ID: SUSE-SU-2024:3708-1 Release Date: 2024-10-16T20:52:47Z Rating: important References: * bsc#1228349 * bsc#1228786 Cross-References: * CVE-2024-40909 * CVE-2024-40954 CVSS scores: * CVE-2024-40909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1228349). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3708=1 SUSE-2024-3703=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-3708=1 SUSE-SLE- Module-Live-Patching-15-SP6-2024-3703=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_2-debugsource-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_17-default-debuginfo-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_14-default-debuginfo-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_17-default-3-150600.13.6.1 * kernel-livepatch-SLE15-SP6_Update_3-debugsource-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_14-default-3-150600.13.6.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_2-debugsource-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_17-default-debuginfo-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_14-default-debuginfo-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_17-default-3-150600.13.6.1 * kernel-livepatch-SLE15-SP6_Update_3-debugsource-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_14-default-3-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-40909.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://bugzilla.suse.com/show_bug.cgi?id=1228349 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3704-1: important: Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3704-1 Release Date: 2024-10-16T20:52:19Z Rating: important References: * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-47291 * CVE-2024-41059 CVSS scores: * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues. The following security issues were fixed: * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-3704=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3705=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3705=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_197-default-debuginfo-2-150200.5.6.1 * kernel-livepatch-5_3_18-150200_24_197-default-2-150200.5.6.1 * kernel-livepatch-SLE15-SP2_Update_50-debugsource-2-150200.5.6.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_46-debugsource-2-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_167-default-debuginfo-2-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_167-default-2-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_167-preempt-2-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_167-preempt-debuginfo-2-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_167-default-2-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3706-1: important: Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3706-1 Release Date: 2024-10-16T21:17:23Z Rating: important References: * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2024-35861 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3706=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3709=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3709=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3706=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_88-default-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_18-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-14-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_36-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_7-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-12-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_36-default-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_7-debugsource-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_36-default-debuginfo-12-150500.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_88-default-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_18-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_88-default-debuginfo-14-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3707-1: important: Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3707-1 Release Date: 2024-10-16T20:52:37Z Rating: important References: * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3707=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3707=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_125-default-debuginfo-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_125-default-2-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_28-debugsource-2-150400.9.6.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_125-default-debuginfo-2-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_125-default-2-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_28-debugsource-2-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3710-1: important: Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
by OPENSUSE-UPDATES 17 Oct '24

17 Oct '24

# Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3710-1 Release Date: 2024-10-16T21:44:03Z Rating: important References: * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2023-52846 * CVE-2024-26828 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3710=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3710=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_65-default-debuginfo-5-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_65-default-5-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_14-debugsource-5-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_65-default-debuginfo-5-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_65-default-5-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_14-debugsource-5-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3675-1: important: Security update for libarchive
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for libarchive Announcement ID: SUSE-SU-2024:3675-1 Release Date: 2024-10-16T17:33:40Z Rating: important References: * bsc#1231544 Cross-References: * CVE-2024-48957 CVSS scores: * CVE-2024-48957 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-48957 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H * CVE-2024-48957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-48957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for libarchive fixes the following issues: * CVE-2024-48957: Fixed out-of-bounds access in execute_filter_audio in archive_read_support_format_rar.c (bsc#1231544). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3675=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3675=1 openSUSE-SLE-15.6-2024-3675=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3675=1 ## Package List: * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * bsdtar-debuginfo-3.7.2-150600.3.6.1 * libarchive-debugsource-3.7.2-150600.3.6.1 * bsdtar-3.7.2-150600.3.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libarchive-devel-3.7.2-150600.3.6.1 * libarchive13-debuginfo-3.7.2-150600.3.6.1 * libarchive13-3.7.2-150600.3.6.1 * libarchive-debugsource-3.7.2-150600.3.6.1 * bsdtar-debuginfo-3.7.2-150600.3.6.1 * bsdtar-3.7.2-150600.3.6.1 * openSUSE Leap 15.6 (x86_64) * libarchive13-32bit-debuginfo-3.7.2-150600.3.6.1 * libarchive13-32bit-3.7.2-150600.3.6.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libarchive13-64bit-debuginfo-3.7.2-150600.3.6.1 * libarchive13-64bit-3.7.2-150600.3.6.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libarchive13-3.7.2-150600.3.6.1 * libarchive-devel-3.7.2-150600.3.6.1 * libarchive-debugsource-3.7.2-150600.3.6.1 * libarchive13-debuginfo-3.7.2-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-48957.html * https://bugzilla.suse.com/show_bug.cgi?id=1231544

1 0

SUSE-RU-2024:3681-1: important: Recommended update for libzypp
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Recommended update for libzypp Announcement ID: SUSE-RU-2024:3681-1 Release Date: 2024-10-16T17:34:50Z Rating: important References: * bsc#1230912 * bsc#1231043 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for libzypp fixes the following issues: * Send unescaped colons in header values. According to the STOMP protocol, it would be correct to escape colon here but the practice broke plugin receivers that didn't expect this. The incompatiblity affected customers who were running spacewalk-repo-sync and experienced issues when accessing the cloud URL. [bsc#1231043] * Fix hang in curl code with no network connection. [bsc#1230912] ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3681=1 openSUSE-SLE-15.6-2024-3681=1 * SUSE Linux Enterprise High Performance Computing 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-3681=1 * SUSE Linux Enterprise Server 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-3681=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-3681=1 * SUSE Linux Enterprise Desktop 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2024-3681=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3681=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libzypp-debugsource-17.35.12-150600.3.27.1 * libzypp-debuginfo-17.35.12-150600.3.27.1 * libzypp-17.35.12-150600.3.27.1 * libzypp-devel-17.35.12-150600.3.27.1 * libzypp-devel-doc-17.35.12-150600.3.27.1 * SUSE Linux Enterprise High Performance Computing 15 SP6 (aarch64 x86_64) * libzypp-17.35.12-150600.3.27.1 * SUSE Linux Enterprise Server 15 SP6 (aarch64 ppc64le s390x x86_64) * libzypp-17.35.12-150600.3.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libzypp-17.35.12-150600.3.27.1 * SUSE Linux Enterprise Desktop 15 SP6 (x86_64) * libzypp-17.35.12-150600.3.27.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libzypp-debugsource-17.35.12-150600.3.27.1 * libzypp-debuginfo-17.35.12-150600.3.27.1 * libzypp-devel-17.35.12-150600.3.27.1 * libzypp-17.35.12-150600.3.27.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230912 * https://bugzilla.suse.com/show_bug.cgi?id=1231043

1 0

SUSE-SU-2024:3666-1: important: Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) Announcement ID: SUSE-SU-2024:3666-1 Release Date: 2024-10-16T16:03:40Z Rating: important References: * bsc#1225099 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1226325 * bsc#1228786 Cross-References: * CVE-2023-52846 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 CVSS scores: * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves six vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3666=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-3666=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_21-default-5-150600.1.1 * kernel-livepatch-6_4_0-150600_21-default-debuginfo-5-150600.1.1 * kernel-livepatch-SLE15-SP6_Update_0-debugsource-5-150600.1.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_21-default-5-150600.1.1 * kernel-livepatch-6_4_0-150600_21-default-debuginfo-5-150600.1.1 * kernel-livepatch-SLE15-SP6_Update_0-debugsource-5-150600.1.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3690-1: important: Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3690-1 Release Date: 2024-10-16T19:04:01Z Rating: important References: * bsc#1225312 * bsc#1226325 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-47291 * CVE-2024-35861 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-3684=1 SUSE-SLE- Module-Live-Patching-15-SP2-2024-3691=1 SUSE-SLE-Module-Live- Patching-15-SP2-2024-3667=1 SUSE-SLE-Module-Live-Patching-15-SP2-2024-3690=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3692=1 SUSE-2024-3668=1 SUSE-2024-3677=1 SUSE-2024-3686=1 SUSE-2024-3693=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3692=1 SUSE-SLE- Module-Live-Patching-15-SP3-2024-3668=1 SUSE-SLE-Module-Live- Patching-15-SP3-2024-3677=1 SUSE-SLE-Module-Live-Patching-15-SP3-2024-3686=1 SUSE-SLE-Module-Live-Patching-15-SP3-2024-3693=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_163-default-14-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_43-debugsource-12-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_44-debugsource-13-150200.2.1 * kernel-livepatch-5_3_18-150200_24_172-default-12-150200.2.1 * kernel-livepatch-5_3_18-150200_24_172-default-debuginfo-12-150200.2.1 * kernel-livepatch-5_3_18-150200_24_175-default-debuginfo-13-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_40-debugsource-14-150200.2.1 * kernel-livepatch-5_3_18-150200_24_163-default-debuginfo-14-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_42-debugsource-14-150200.2.1 * kernel-livepatch-5_3_18-150200_24_169-default-debuginfo-14-150200.2.1 * kernel-livepatch-5_3_18-150200_24_175-default-13-150200.2.1 * kernel-livepatch-5_3_18-150200_24_169-default-14-150200.2.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_144-default-debuginfo-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-default-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-default-debuginfo-14-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_39-debugsource-12-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_38-debugsource-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-12-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_36-debugsource-14-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_37-debugsource-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-debuginfo-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-default-debuginfo-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-debuginfo-13-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_40-debugsource-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-default-14-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_133-preempt-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-preempt-debuginfo-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-preempt-debuginfo-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-preempt-debuginfo-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-preempt-debuginfo-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-preempt-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-preempt-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-preempt-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-preempt-debuginfo-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_138-preempt-14-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_138-default-14-150300.2.1 * kernel-livepatch-5_3_18-150300_59_144-default-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_147-default-12-150300.2.1 * kernel-livepatch-5_3_18-150300_59_141-default-13-150300.2.1 * kernel-livepatch-5_3_18-150300_59_133-default-14-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3685-1: important: Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3685-1 Release Date: 2024-10-16T18:04:02Z Rating: important References: * bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225202 * bsc#1225211 * bsc#1225302 * bsc#1225310 * bsc#1225312 * bsc#1226325 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-47291 * CVE-2021-47378 * CVE-2021-47383 * CVE-2021-47402 * CVE-2023-1829 * CVE-2024-26828 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301) * CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225202). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-3685=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3669=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3669=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_191-default-6-150200.5.6.1 * kernel-livepatch-5_3_18-150200_24_191-default-debuginfo-6-150200.5.6.1 * kernel-livepatch-SLE15-SP2_Update_48-debugsource-6-150200.5.6.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_44-debugsource-6-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_161-default-debuginfo-6-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_161-default-6-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_161-preempt-6-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_161-preempt-debuginfo-6-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_161-default-6-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47383.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225211 * https://bugzilla.suse.com/show_bug.cgi?id=1225302 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3670-1: important: Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3670-1 Release Date: 2024-10-16T19:33:39Z Rating: important References: * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2024-35861 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3670=1 SUSE-2024-3699=1 SUSE-2024-3671=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3670=1 SUSE-SLE- Module-Live-Patching-15-SP4-2024-3699=1 SUSE-SLE-Module-Live- Patching-15-SP4-2024-3671=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3689=1 SUSE-2024-3673=1 SUSE-2024-3688=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3689=1 SUSE-SLE- Module-Live-Patching-15-SP5-2024-3673=1 SUSE-SLE-Module-Live- Patching-15-SP5-2024-3688=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_97-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-debuginfo-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_22-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_20-debugsource-12-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_97-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-debuginfo-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_22-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_103-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_97-default-debuginfo-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_21-debugsource-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_100-default-debuginfo-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_20-debugsource-12-150400.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_8-debugsource-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-14-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_28-default-debuginfo-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_5-debugsource-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_8-debugsource-12-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_9-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-debuginfo-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_39-default-12-150500.2.1 * kernel-livepatch-5_14_21-150500_55_44-default-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_28-default-14-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3672-1: important: Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3672-1 Release Date: 2024-10-16T16:34:16Z Rating: important References: * bsc#1223683 * bsc#1225099 * bsc#1225310 * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2023-52846 * CVE-2024-26923 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves eight vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3672=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3672=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_122-default-debuginfo-4-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_27-debugsource-4-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_122-default-4-150400.9.6.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_122-default-debuginfo-4-150400.9.6.1 * kernel-livepatch-SLE15-SP4_Update_27-debugsource-4-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_122-default-4-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3694-1: important: Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3694-1 Release Date: 2024-10-16T19:04:10Z Rating: important References: * bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225310 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52340 * CVE-2023-52502 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26585 * CVE-2024-26610 * CVE-2024-26622 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52340 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52340 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26585 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26622 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 23 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). * CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3694=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3694=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3678=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3678=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_108-default-debuginfo-9-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_23-debugsource-9-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_108-default-9-150400.9.8.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_108-default-debuginfo-9-150400.9.8.1 * kernel-livepatch-SLE15-SP4_Update_23-debugsource-9-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_108-default-9-150400.9.8.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_49-default-9-150500.11.8.1 * kernel-livepatch-SLE15-SP5_Update_10-debugsource-9-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-9-150500.11.8.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_49-default-9-150500.11.8.1 * kernel-livepatch-SLE15-SP5_Update_10-debugsource-9-150500.11.8.1 * kernel-livepatch-5_14_21-150500_55_49-default-debuginfo-9-150500.11.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52340.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26585.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26622.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1219296 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220211 * https://bugzilla.suse.com/show_bug.cgi?id=1220828 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3679-1: important: Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3679-1 Release Date: 2024-10-16T17:34:15Z Rating: important References: * bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225310 * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52846 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 14 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3679=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3679=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-7-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-7-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-7-150500.11.10.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_59-default-7-150500.11.10.1 * kernel-livepatch-5_14_21-150500_55_59-default-debuginfo-7-150500.11.10.1 * kernel-livepatch-SLE15-SP5_Update_12-debugsource-7-150500.11.10.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3680-1: important: Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6) Announcement ID: SUSE-SU-2024:3680-1 Release Date: 2024-10-16T17:34:24Z Rating: important References: * bsc#1225739 * bsc#1228786 Cross-References: * CVE-2024-36899 * CVE-2024-40954 CVSS scores: * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3680=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2024-3680=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_1-debugsource-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_7-default-debuginfo-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_7-default-3-150600.13.6.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_1-debugsource-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_7-default-debuginfo-3-150600.13.6.1 * kernel-livepatch-6_4_0-150600_23_7-default-3-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3695-1: important: Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3695-1 Release Date: 2024-10-16T19:04:20Z Rating: important References: * bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225310 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52502 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3695=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3695=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_24-debugsource-7-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-7-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-7-150400.9.6.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_24-debugsource-7-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-debuginfo-7-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_111-default-7-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3696-1: important: Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3696-1 Release Date: 2024-10-16T19:04:30Z Rating: important References: * bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225310 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52846 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26766 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26766 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3696=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3696=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_25-debugsource-7-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-7-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-7-150400.9.8.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_25-debugsource-7-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-7-150400.9.8.1 * kernel-livepatch-5_14_21-150400_24_116-default-debuginfo-7-150400.9.8.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26766.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222882 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3697-1: important: Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3697-1 Release Date: 2024-10-16T19:04:40Z Rating: important References: * bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223681 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225310 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52502 * CVE-2023-52846 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52502 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3697=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3697=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_11-debugsource-7-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-7-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-7-150500.11.6.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_11-debugsource-7-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-7-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_52-default-debuginfo-7-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52502.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220832 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3700-1: important: Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3700-1 Release Date: 2024-10-16T19:33:49Z Rating: important References: * bsc#1223059 * bsc#1223363 * bsc#1223681 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225310 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2023-52846 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-26930 * CVE-2024-27398 * CVE-2024-35817 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26930 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35817 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3700=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3700=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_26-debugsource-6-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-6-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-6-150400.9.6.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_26-debugsource-6-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-debuginfo-6-150400.9.6.1 * kernel-livepatch-5_14_21-150400_24_119-default-6-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-26930.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35817.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223681 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225313 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3701-1: important: Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3701-1 Release Date: 2024-10-16T19:34:00Z Rating: important References: * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2023-52846 * CVE-2024-26828 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3701=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3701=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_62-default-5-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_62-default-debuginfo-5-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_13-debugsource-5-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_62-default-5-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_62-default-debuginfo-5-150500.11.6.1 * kernel-livepatch-SLE15-SP5_Update_13-debugsource-5-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3702-1: important: Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3702-1 Release Date: 2024-10-16T19:34:10Z Rating: important References: * bsc#1223683 * bsc#1225099 * bsc#1225739 * bsc#1228349 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2023-52846 * CVE-2024-26923 * CVE-2024-36899 * CVE-2024-40909 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40909 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1228349). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3702=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3702=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_15-debugsource-4-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_68-default-debuginfo-4-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_68-default-4-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_15-debugsource-4-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_68-default-debuginfo-4-150500.11.6.1 * kernel-livepatch-5_14_21-150500_55_68-default-4-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-40909.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1228349 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-RU-2024:3659-1: moderate: Recommended update for gcc14
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Recommended update for gcc14 Announcement ID: SUSE-RU-2024:3659-1 Release Date: 2024-10-16T13:14:50Z Rating: moderate References: * bsc#1188441 * bsc#1210959 * bsc#1214915 * bsc#1219031 * bsc#1220724 * bsc#1221601 * jsc#PED-10474 Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP5 * SUSE Package Hub 15 15-SP6 An update that contains one feature and has six fixes can now be installed. ## Description: This update for gcc14 fixes the following issues: This update ships the GNU Compiler Collection GCC 14.2. (jsc#PED-10474) The compiler runtime libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 13 ones. The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP5 and SP6, and provided in the "Development Tools" module. The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories. To use gcc14 compilers use: * install "gcc14" or "gcc14-c++" or one of the other "gcc14-COMPILER" frontend packages. * override your Makefile to use CC=gcc14, CXX=g++14 and similar overrides for the other languages. For a full changelog with all new GCC14 features, check out https://gcc.gnu.org/gcc-14/changes.html * Add libquadmath0-devel-gcc14 sub-package to allow installing quadmath.h and SO link without installing the fortran frontend * Avoid combine spending too much compile-time and memory doing nothing on s390x. [bsc#1188441] * Remove timezone Recommends from the libstdc++6 package. [bsc#1221601] * Revert libgccjit dependency change. [bsc#1220724] * Fix libgccjit-devel dependency, a newer shared library is OK. * Fix libgccjit dependency, the corresponding compiler isn't required. * Add cross-X-newlib-devel requires to newlib cross compilers. [bsc#1219031] * Re-enable AutoReqProv for cross packages but filter files processed via __requires_exclude_from and __provides_exclude_from. [bsc#1219031] * Package m2rte.so plugin in the gcc14-m2 sub-package rather than in gcc13-devel. [bsc#1210959] * Require libstdc++6-devel-gcc14 from gcc14-m2 as m2 programs are linked against libstdc++6. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3659=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3659=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3659=1 * SUSE Linux Enterprise Server 15 SP2 zypper in -t patch SUSE-SLE-INSTALLER-15-SP2-2024-3659=1 * SUSE Linux Enterprise Server 15 SP3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP3-2024-3659=1 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3659=1 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3659=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3659=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3659=1 SUSE-SLE- INSTALLER-15-SP4-2024-3659=1 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3659=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3659=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2024-3659=1 * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3659=1 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3659=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3659=1 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2024-3659=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3659=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3659=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3659=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3659=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3659=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3659=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3659=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3659=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3659=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3659=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3659=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3659=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3659=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3659=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3659=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3659=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3659=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3659=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3659=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3659=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3659=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3659=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-3659=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3659=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3659=1 ## Package List: * openSUSE Leap Micro 5.5 (aarch64 ppc64le s390x x86_64) * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * cross-m68k-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * gcc14-objc-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-riscv64-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-hppa-gcc14-14.2.0+git10526-150000.1.3.2 * cross-sparc64-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libgo23-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-arm-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * libtsan2-14.2.0+git10526-150000.1.3.3 * cross-sparc64-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * cross-hppa-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * cross-m68k-gcc14-14.2.0+git10526-150000.1.3.2 * libada14-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * libm2cor19-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-locale-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-sparc64-gcc14-14.2.0+git10526-150000.1.3.2 * cross-avr-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * libm2iso19-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2pim19-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-arm-gcc14-14.2.0+git10526-150000.1.3.2 * cross-mips-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-rx-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-c++-14.2.0+git10526-150000.1.3.3 * cross-sparc-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libm2min19-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-hppa-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * libgomp1-14.2.0+git10526-150000.1.3.3 * cross-hppa-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-mips-gcc14-14.2.0+git10526-150000.1.3.2 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-rx-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-sparc-gcc14-14.2.0+git10526-150000.1.3.2 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-riscv64-elf-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libstdc++6-devel-gcc14-14.2.0+git10526-150000.1.3.3 * gcc14-m2-14.2.0+git10526-150000.1.3.3 * cross-arm-none-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-sparc64-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * gcc14-fortran-14.2.0+git10526-150000.1.3.3 * cross-arm-none-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-sparc-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-avr-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-hppa-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * libada14-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-pru-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * gcc14-fortran-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2cor19-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * cross-pru-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-m68k-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cpp14-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-arm-none-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-riscv64-elf-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * libgo23-14.2.0+git10526-150000.1.3.3 * cross-bpf-gcc14-debugsource-14.2.0+git10526-150000.1.3.1 * cross-hppa-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-rx-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * gcc14-PIE-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-sparcv9-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-go-14.2.0+git10526-150000.1.3.3 * cross-riscv64-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * gcc14-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-m2-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-mips-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * gcc14-ada-14.2.0+git10526-150000.1.3.3 * cross-riscv64-elf-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2log19-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-14.2.0+git10526-150000.1.3.3 * cross-pru-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-avr-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-arm-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * cross-m68k-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * gcc14-go-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2log19-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-objc-14.2.0+git10526-150000.1.3.3 * cross-bpf-gcc14-debuginfo-14.2.0+git10526-150000.1.3.1 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libm2min19-14.2.0+git10526-150000.1.3.3 * libm2iso19-14.2.0+git10526-150000.1.3.3 * gcc14-testresults-14.2.0+git10526-150000.1.3.6 * cross-riscv64-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-arm-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * gcc14-c++-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-hppa-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-mips-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * cpp14-14.2.0+git10526-150000.1.3.3 * libm2pim19-14.2.0+git10526-150000.1.3.3 * cross-bpf-gcc14-14.2.0+git10526-150000.1.3.1 * gcc14-ada-debuginfo-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * cross-aarch64-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-aarch64-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-aarch64-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * openSUSE Leap 15.5 (x86_64) * cross-nvptx-gcc14-14.2.0+git10526-150000.1.3.2 * cross-nvptx-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-nvptx-newlib14-devel-14.2.0+git10526-150000.1.3.2 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * cross-nvptx-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.5 (aarch64 s390x x86_64) * cross-ppc64-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-ppc64le-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * gcc14-d-debuginfo-14.2.0+git10526-150000.1.3.3 * libgdruntime5-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-d-14.2.0+git10526-150000.1.3.3 * cross-ppc64le-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-ppc64le-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-ppc64-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * cross-ppc64-gcc14-14.2.0+git10526-150000.1.3.2 * libgdruntime5-14.2.0+git10526-150000.1.3.3 * libgphobos5-14.2.0+git10526-150000.1.3.3 * libgphobos5-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-ppc64-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * cross-s390x-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-s390x-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-s390x-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * openSUSE Leap 15.5 (s390x x86_64) * libm2log19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-fortran-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-m2-32bit-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgdruntime5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2iso19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgo23-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-d-32bit-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-32bit-14.2.0+git10526-150000.1.3.3 * libgphobos5-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-c++-32bit-14.2.0+git10526-150000.1.3.3 * libm2log19-32bit-14.2.0+git10526-150000.1.3.3 * libm2min19-32bit-14.2.0+git10526-150000.1.3.3 * libm2cor19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-ada-32bit-14.2.0+git10526-150000.1.3.3 * libgphobos5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgo23-32bit-14.2.0+git10526-150000.1.3.3 * libm2iso19-32bit-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-32bit-14.2.0+git10526-150000.1.3.3 * libm2min19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libm2pim19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libada14-32bit-14.2.0+git10526-150000.1.3.3 * libm2pim19-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libada14-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-go-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-objc-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libgdruntime5-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2cor19-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-devel-gcc14-32bit-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.5 (noarch) * gcc14-info-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.5 (aarch64 x86_64) * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.5 (ppc64le x86_64) * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.5 (aarch64 ppc64le s390x) * cross-x86_64-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-x86_64-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-x86_64-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * cross-x86_64-gcc14-14.2.0+git10526-150000.1.3.2 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * cross-m68k-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * gcc14-objc-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-riscv64-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-hppa-gcc14-14.2.0+git10526-150000.1.3.2 * cross-sparc64-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libgo23-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-arm-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * libtsan2-14.2.0+git10526-150000.1.3.3 * cross-sparc64-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * cross-hppa-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * cross-m68k-gcc14-14.2.0+git10526-150000.1.3.2 * libada14-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * libm2cor19-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-locale-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-sparc64-gcc14-14.2.0+git10526-150000.1.3.2 * cross-avr-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * libm2iso19-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2pim19-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-arm-gcc14-14.2.0+git10526-150000.1.3.2 * cross-mips-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-rx-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-c++-14.2.0+git10526-150000.1.3.3 * cross-sparc-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libm2min19-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-hppa-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * libgomp1-14.2.0+git10526-150000.1.3.3 * cross-hppa-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-mips-gcc14-14.2.0+git10526-150000.1.3.2 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-rx-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-sparc-gcc14-14.2.0+git10526-150000.1.3.2 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-riscv64-elf-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libstdc++6-devel-gcc14-14.2.0+git10526-150000.1.3.3 * gcc14-m2-14.2.0+git10526-150000.1.3.3 * cross-arm-none-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-sparc64-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * gcc14-fortran-14.2.0+git10526-150000.1.3.3 * cross-arm-none-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-sparc-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-avr-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-hppa-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * libada14-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-pru-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * gcc14-fortran-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2cor19-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * cross-pru-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-m68k-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cpp14-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-arm-none-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-riscv64-elf-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * libgo23-14.2.0+git10526-150000.1.3.3 * cross-bpf-gcc14-debugsource-14.2.0+git10526-150000.1.3.1 * cross-hppa-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-rx-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * gcc14-PIE-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-sparcv9-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-go-14.2.0+git10526-150000.1.3.3 * cross-riscv64-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * gcc14-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-m2-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-mips-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * gcc14-ada-14.2.0+git10526-150000.1.3.3 * cross-riscv64-elf-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2log19-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-14.2.0+git10526-150000.1.3.3 * cross-pru-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-avr-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-arm-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * cross-m68k-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * gcc14-go-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2log19-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-objc-14.2.0+git10526-150000.1.3.3 * cross-bpf-gcc14-debuginfo-14.2.0+git10526-150000.1.3.1 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libm2min19-14.2.0+git10526-150000.1.3.3 * libm2iso19-14.2.0+git10526-150000.1.3.3 * gcc14-testresults-14.2.0+git10526-150000.1.3.6 * cross-riscv64-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-arm-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * gcc14-c++-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-hppa-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-mips-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * cpp14-14.2.0+git10526-150000.1.3.3 * libm2pim19-14.2.0+git10526-150000.1.3.3 * cross-bpf-gcc14-14.2.0+git10526-150000.1.3.1 * gcc14-ada-debuginfo-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * cross-aarch64-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-aarch64-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-aarch64-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * openSUSE Leap 15.6 (x86_64) * cross-nvptx-gcc14-14.2.0+git10526-150000.1.3.2 * cross-nvptx-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-nvptx-newlib14-devel-14.2.0+git10526-150000.1.3.2 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * cross-nvptx-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-devel-gcc14-32bit-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.6 (aarch64 s390x x86_64) * cross-ppc64-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-ppc64le-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * gcc14-d-debuginfo-14.2.0+git10526-150000.1.3.3 * libgdruntime5-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-d-14.2.0+git10526-150000.1.3.3 * cross-ppc64le-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * cross-ppc64le-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-ppc64-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * cross-ppc64-gcc14-14.2.0+git10526-150000.1.3.2 * libgdruntime5-14.2.0+git10526-150000.1.3.3 * libgphobos5-14.2.0+git10526-150000.1.3.3 * libgphobos5-debuginfo-14.2.0+git10526-150000.1.3.3 * cross-ppc64-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * cross-s390x-gcc14-bootstrap-14.2.0+git10526-150000.1.3.2 * cross-s390x-gcc14-bootstrap-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-s390x-gcc14-bootstrap-debugsource-14.2.0+git10526-150000.1.3.2 * openSUSE Leap 15.6 (s390x x86_64) * libm2log19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-fortran-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-m2-32bit-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgdruntime5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2iso19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgo23-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-d-32bit-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-32bit-14.2.0+git10526-150000.1.3.3 * libgphobos5-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-c++-32bit-14.2.0+git10526-150000.1.3.3 * libm2log19-32bit-14.2.0+git10526-150000.1.3.3 * libm2min19-32bit-14.2.0+git10526-150000.1.3.3 * libm2cor19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-ada-32bit-14.2.0+git10526-150000.1.3.3 * libgphobos5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgo23-32bit-14.2.0+git10526-150000.1.3.3 * libm2iso19-32bit-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-32bit-14.2.0+git10526-150000.1.3.3 * libm2min19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libm2pim19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libada14-32bit-14.2.0+git10526-150000.1.3.3 * libm2pim19-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libada14-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-go-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-objc-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libgdruntime5-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2cor19-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-devel-gcc14-32bit-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.6 (noarch) * gcc14-info-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.6 (aarch64 x86_64) * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.6 (ppc64le x86_64) * libquadmath0-devel-gcc14-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * openSUSE Leap 15.6 (aarch64 ppc64le s390x) * cross-x86_64-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * cross-x86_64-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-x86_64-gcc14-icecream-backend-14.2.0+git10526-150000.1.3.2 * cross-x86_64-gcc14-14.2.0+git10526-150000.1.3.2 * SUSE Linux Enterprise Server 15 SP2 (aarch64 ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP3 (aarch64 ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing 15 SP4 (aarch64 x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP4 (aarch64 ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Desktop 15 SP4 (x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Manager Proxy 4.3 (x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing 15 SP5 (aarch64 x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP5 (aarch64 ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Desktop 15 SP5 (x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * Basesystem Module 15-SP5 (aarch64 x86_64) * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * Basesystem Module 15-SP5 (ppc64le x86_64) * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * Basesystem Module 15-SP5 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * Basesystem Module 15-SP6 (aarch64 x86_64) * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * Basesystem Module 15-SP6 (ppc64le x86_64) * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * Basesystem Module 15-SP6 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libstdc++6-devel-gcc14-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * cpp14-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-c++-14.2.0+git10526-150000.1.3.3 * gcc14-PIE-14.2.0+git10526-150000.1.3.3 * cpp14-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-fortran-14.2.0+git10526-150000.1.3.3 * gcc14-14.2.0+git10526-150000.1.3.3 * gcc14-c++-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-fortran-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-locale-14.2.0+git10526-150000.1.3.3 * Development Tools Module 15-SP5 (noarch) * gcc14-info-14.2.0+git10526-150000.1.3.3 * Development Tools Module 15-SP5 (ppc64le x86_64) * libquadmath0-devel-gcc14-14.2.0+git10526-150000.1.3.3 * Development Tools Module 15-SP5 (x86_64) * gcc14-fortran-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-c++-32bit-14.2.0+git10526-150000.1.3.3 * cross-nvptx-gcc14-14.2.0+git10526-150000.1.3.2 * cross-nvptx-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-nvptx-newlib14-devel-14.2.0+git10526-150000.1.3.2 * cross-nvptx-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libquadmath0-devel-gcc14-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-devel-gcc14-32bit-14.2.0+git10526-150000.1.3.3 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libstdc++6-devel-gcc14-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * cpp14-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-c++-14.2.0+git10526-150000.1.3.3 * gcc14-PIE-14.2.0+git10526-150000.1.3.3 * cpp14-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-fortran-14.2.0+git10526-150000.1.3.3 * gcc14-14.2.0+git10526-150000.1.3.3 * gcc14-c++-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-fortran-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-locale-14.2.0+git10526-150000.1.3.3 * Development Tools Module 15-SP6 (noarch) * gcc14-info-14.2.0+git10526-150000.1.3.3 * Development Tools Module 15-SP6 (ppc64le x86_64) * libquadmath0-devel-gcc14-14.2.0+git10526-150000.1.3.3 * Development Tools Module 15-SP6 (x86_64) * gcc14-fortran-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-c++-32bit-14.2.0+git10526-150000.1.3.3 * cross-nvptx-gcc14-14.2.0+git10526-150000.1.3.2 * cross-nvptx-gcc14-debugsource-14.2.0+git10526-150000.1.3.2 * cross-nvptx-newlib14-devel-14.2.0+git10526-150000.1.3.2 * cross-nvptx-gcc14-debuginfo-14.2.0+git10526-150000.1.3.2 * libquadmath0-devel-gcc14-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-devel-gcc14-32bit-14.2.0+git10526-150000.1.3.3 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * gcc14-objc-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2log19-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-14.2.0+git10526-150000.1.3.3 * libgo23-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-go-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2log19-debuginfo-14.2.0+git10526-150000.1.3.3 * libgo23-14.2.0+git10526-150000.1.3.3 * gcc14-objc-14.2.0+git10526-150000.1.3.3 * libada14-14.2.0+git10526-150000.1.3.3 * libm2cor19-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libm2min19-14.2.0+git10526-150000.1.3.3 * gcc14-m2-14.2.0+git10526-150000.1.3.3 * libm2iso19-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2iso19-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2pim19-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-go-14.2.0+git10526-150000.1.3.3 * libm2pim19-14.2.0+git10526-150000.1.3.3 * libm2min19-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-m2-debuginfo-14.2.0+git10526-150000.1.3.3 * libada14-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-ada-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-ada-14.2.0+git10526-150000.1.3.3 * libm2cor19-14.2.0+git10526-150000.1.3.3 * SUSE Package Hub 15 15-SP5 (aarch64 s390x x86_64) * gcc14-d-debuginfo-14.2.0+git10526-150000.1.3.3 * libgdruntime5-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-d-14.2.0+git10526-150000.1.3.3 * libgphobos5-14.2.0+git10526-150000.1.3.3 * libgdruntime5-14.2.0+git10526-150000.1.3.3 * libgphobos5-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Package Hub 15 15-SP5 (x86_64) * libm2log19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-m2-32bit-14.2.0+git10526-150000.1.3.3 * libm2cor19-32bit-14.2.0+git10526-150000.1.3.3 * libgdruntime5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgo23-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-d-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-32bit-14.2.0+git10526-150000.1.3.3 * libgphobos5-32bit-14.2.0+git10526-150000.1.3.3 * libm2log19-32bit-14.2.0+git10526-150000.1.3.3 * libm2min19-32bit-14.2.0+git10526-150000.1.3.3 * libm2cor19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-ada-32bit-14.2.0+git10526-150000.1.3.3 * libgphobos5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2iso19-32bit-14.2.0+git10526-150000.1.3.3 * libgo23-32bit-14.2.0+git10526-150000.1.3.3 * libm2min19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2pim19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libada14-32bit-14.2.0+git10526-150000.1.3.3 * libm2pim19-32bit-14.2.0+git10526-150000.1.3.3 * libada14-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-go-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-objc-32bit-14.2.0+git10526-150000.1.3.3 * libgdruntime5-32bit-14.2.0+git10526-150000.1.3.3 * libm2iso19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * gcc14-objc-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2log19-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-14.2.0+git10526-150000.1.3.3 * libgo23-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-go-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2log19-debuginfo-14.2.0+git10526-150000.1.3.3 * libgo23-14.2.0+git10526-150000.1.3.3 * gcc14-objc-14.2.0+git10526-150000.1.3.3 * libada14-14.2.0+git10526-150000.1.3.3 * libm2cor19-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libm2min19-14.2.0+git10526-150000.1.3.3 * gcc14-m2-14.2.0+git10526-150000.1.3.3 * libm2iso19-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2iso19-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2pim19-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-go-14.2.0+git10526-150000.1.3.3 * libm2pim19-14.2.0+git10526-150000.1.3.3 * libm2min19-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-m2-debuginfo-14.2.0+git10526-150000.1.3.3 * libada14-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-ada-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-ada-14.2.0+git10526-150000.1.3.3 * libm2cor19-14.2.0+git10526-150000.1.3.3 * SUSE Package Hub 15 15-SP6 (aarch64 s390x x86_64) * gcc14-d-debuginfo-14.2.0+git10526-150000.1.3.3 * libgdruntime5-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-d-14.2.0+git10526-150000.1.3.3 * libgphobos5-14.2.0+git10526-150000.1.3.3 * libgdruntime5-14.2.0+git10526-150000.1.3.3 * libgphobos5-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Package Hub 15 15-SP6 (x86_64) * libm2log19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-m2-32bit-14.2.0+git10526-150000.1.3.3 * libm2cor19-32bit-14.2.0+git10526-150000.1.3.3 * libgdruntime5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgo23-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-d-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-obj-c++-32bit-14.2.0+git10526-150000.1.3.3 * libgphobos5-32bit-14.2.0+git10526-150000.1.3.3 * libm2log19-32bit-14.2.0+git10526-150000.1.3.3 * libm2min19-32bit-14.2.0+git10526-150000.1.3.3 * libm2cor19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-ada-32bit-14.2.0+git10526-150000.1.3.3 * libgphobos5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2iso19-32bit-14.2.0+git10526-150000.1.3.3 * libgo23-32bit-14.2.0+git10526-150000.1.3.3 * libm2min19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libm2pim19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libada14-32bit-14.2.0+git10526-150000.1.3.3 * libm2pim19-32bit-14.2.0+git10526-150000.1.3.3 * libada14-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-go-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-objc-32bit-14.2.0+git10526-150000.1.3.3 * libgdruntime5-32bit-14.2.0+git10526-150000.1.3.3 * libm2iso19-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (ppc64le x86_64) * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64) * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (ppc64le x86_64) * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 x86_64) * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (ppc64le x86_64) * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libgomp1-14.2.0+git10526-150000.1.3.3 * libgomp1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-debuginfo-14.2.0+git10526-150000.1.3.3 * libtsan2-14.2.0+git10526-150000.1.3.3 * libubsan1-14.2.0+git10526-150000.1.3.3 * libobjc4-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * libobjc4-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-14.2.0+git10526-150000.1.3.3 * libgfortran5-14.2.0+git10526-150000.1.3.3 * libitm1-14.2.0+git10526-150000.1.3.3 * libstdc++6-locale-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * libgfortran5-debuginfo-14.2.0+git10526-150000.1.3.3 * libubsan1-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libhwasan0-14.2.0+git10526-150000.1.3.3 * libasan8-14.2.0+git10526-150000.1.3.3 * libatomic1-debuginfo-14.2.0+git10526-150000.1.3.3 * liblsan0-debuginfo-14.2.0+git10526-150000.1.3.3 * libstdc++6-14.2.0+git10526-150000.1.3.3 * libasan8-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Enterprise Storage 7.1 (x86_64) * libstdc++6-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-debuginfo-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libquadmath0-14.2.0+git10526-150000.1.3.3 * libatomic1-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-pp-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-14.2.0+git10526-150000.1.3.3 * libubsan1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libitm1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgfortran5-32bit-14.2.0+git10526-150000.1.3.3 * libstdc++6-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-32bit-14.2.0+git10526-150000.1.3.3 * libasan8-32bit-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-14.2.0+git10526-150000.1.3.3 * libobjc4-32bit-14.2.0+git10526-150000.1.3.3 * libquadmath0-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * libgomp1-32bit-debuginfo-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libstdc++6-14.2.0+git10526-150000.1.3.3 * gcc14-debugsource-14.2.0+git10526-150000.1.3.3 * libstdc++6-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-debuginfo-14.2.0+git10526-150000.1.3.3 * gcc14-debuginfo-14.2.0+git10526-150000.1.3.3 * libgcc_s1-14.2.0+git10526-150000.1.3.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1188441 * https://bugzilla.suse.com/show_bug.cgi?id=1210959 * https://bugzilla.suse.com/show_bug.cgi?id=1214915 * https://bugzilla.suse.com/show_bug.cgi?id=1219031 * https://bugzilla.suse.com/show_bug.cgi?id=1220724 * https://bugzilla.suse.com/show_bug.cgi?id=1221601 * https://jira.suse.com/browse/PED-10474

1 0

SUSE-SU-2024:3664-1: moderate: Security update for php8
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for php8 Announcement ID: SUSE-SU-2024:3664-1 Release Date: 2024-10-16T14:28:54Z Rating: moderate References: * bsc#1231358 * bsc#1231360 * bsc#1231382 Cross-References: * CVE-2024-8925 * CVE-2024-8927 * CVE-2024-9026 CVSS scores: * CVE-2024-8925 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-8925 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-8925 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-8927 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-8927 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2024-8927 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2024-9026 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-9026 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-9026 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * Web and Scripting Module 15-SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2024-8925: Fixed erroneous parsing of multipart form data in HTTP POST requests leads to legitimate data not being processed (bsc#1231360) * CVE-2024-8927: Fixed cgi.force_redirect configuration is bypassable due to an environment variable collision (bsc#1231358) * CVE-2024-9026: Fixed pollution of worker output logs in PHP-FPM (bsc#1231382) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3664=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3664=1 * Web and Scripting Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-3664=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * php8-cli-debuginfo-8.0.30-150400.4.46.1 * php8-ftp-8.0.30-150400.4.46.1 * php8-tokenizer-8.0.30-150400.4.46.1 * php8-test-8.0.30-150400.4.46.1 * php8-bz2-8.0.30-150400.4.46.1 * php8-fileinfo-8.0.30-150400.4.46.1 * php8-curl-8.0.30-150400.4.46.1 * php8-gettext-debuginfo-8.0.30-150400.4.46.1 * php8-calendar-8.0.30-150400.4.46.1 * php8-fpm-debugsource-8.0.30-150400.4.46.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.46.1 * php8-bcmath-debuginfo-8.0.30-150400.4.46.1 * php8-xmlwriter-8.0.30-150400.4.46.1 * php8-sqlite-debuginfo-8.0.30-150400.4.46.1 * php8-shmop-debuginfo-8.0.30-150400.4.46.1 * php8-debuginfo-8.0.30-150400.4.46.1 * php8-odbc-debuginfo-8.0.30-150400.4.46.1 * php8-pdo-8.0.30-150400.4.46.1 * php8-zip-debuginfo-8.0.30-150400.4.46.1 * php8-sysvmsg-8.0.30-150400.4.46.1 * php8-8.0.30-150400.4.46.1 * php8-bz2-debuginfo-8.0.30-150400.4.46.1 * php8-openssl-8.0.30-150400.4.46.1 * php8-embed-debuginfo-8.0.30-150400.4.46.1 * php8-gd-8.0.30-150400.4.46.1 * php8-tidy-8.0.30-150400.4.46.1 * php8-pcntl-debuginfo-8.0.30-150400.4.46.1 * php8-sysvsem-8.0.30-150400.4.46.1 * php8-odbc-8.0.30-150400.4.46.1 * php8-ctype-debuginfo-8.0.30-150400.4.46.1 * php8-gd-debuginfo-8.0.30-150400.4.46.1 * php8-embed-debugsource-8.0.30-150400.4.46.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.46.1 * php8-zlib-8.0.30-150400.4.46.1 * php8-dom-8.0.30-150400.4.46.1 * php8-mbstring-debuginfo-8.0.30-150400.4.46.1 * php8-readline-8.0.30-150400.4.46.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.46.1 * php8-sqlite-8.0.30-150400.4.46.1 * php8-soap-8.0.30-150400.4.46.1 * php8-pdo-debuginfo-8.0.30-150400.4.46.1 * php8-iconv-debuginfo-8.0.30-150400.4.46.1 * php8-mysql-8.0.30-150400.4.46.1 * php8-cli-8.0.30-150400.4.46.1 * php8-ftp-debuginfo-8.0.30-150400.4.46.1 * php8-devel-8.0.30-150400.4.46.1 * php8-debugsource-8.0.30-150400.4.46.1 * php8-intl-debuginfo-8.0.30-150400.4.46.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.46.1 * php8-posix-8.0.30-150400.4.46.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.46.1 * php8-phar-8.0.30-150400.4.46.1 * php8-dom-debuginfo-8.0.30-150400.4.46.1 * php8-sodium-debuginfo-8.0.30-150400.4.46.1 * php8-soap-debuginfo-8.0.30-150400.4.46.1 * php8-intl-8.0.30-150400.4.46.1 * php8-pgsql-debuginfo-8.0.30-150400.4.46.1 * php8-iconv-8.0.30-150400.4.46.1 * php8-gmp-debuginfo-8.0.30-150400.4.46.1 * php8-dba-debuginfo-8.0.30-150400.4.46.1 * php8-calendar-debuginfo-8.0.30-150400.4.46.1 * php8-fastcgi-debugsource-8.0.30-150400.4.46.1 * php8-zlib-debuginfo-8.0.30-150400.4.46.1 * php8-xsl-8.0.30-150400.4.46.1 * php8-exif-debuginfo-8.0.30-150400.4.46.1 * apache2-mod_php8-8.0.30-150400.4.46.1 * php8-mysql-debuginfo-8.0.30-150400.4.46.1 * php8-opcache-8.0.30-150400.4.46.1 * php8-curl-debuginfo-8.0.30-150400.4.46.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.46.1 * php8-sockets-8.0.30-150400.4.46.1 * php8-tidy-debuginfo-8.0.30-150400.4.46.1 * php8-exif-8.0.30-150400.4.46.1 * php8-xsl-debuginfo-8.0.30-150400.4.46.1 * php8-zip-8.0.30-150400.4.46.1 * php8-enchant-8.0.30-150400.4.46.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.46.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.46.1 * php8-readline-debuginfo-8.0.30-150400.4.46.1 * php8-pcntl-8.0.30-150400.4.46.1 * php8-ctype-8.0.30-150400.4.46.1 * php8-dba-8.0.30-150400.4.46.1 * php8-ldap-8.0.30-150400.4.46.1 * php8-bcmath-8.0.30-150400.4.46.1 * php8-posix-debuginfo-8.0.30-150400.4.46.1 * php8-mbstring-8.0.30-150400.4.46.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.46.1 * php8-phar-debuginfo-8.0.30-150400.4.46.1 * php8-opcache-debuginfo-8.0.30-150400.4.46.1 * php8-gmp-8.0.30-150400.4.46.1 * php8-sysvshm-8.0.30-150400.4.46.1 * php8-fastcgi-8.0.30-150400.4.46.1 * php8-gettext-8.0.30-150400.4.46.1 * php8-sodium-8.0.30-150400.4.46.1 * php8-enchant-debuginfo-8.0.30-150400.4.46.1 * php8-shmop-8.0.30-150400.4.46.1 * php8-fpm-debuginfo-8.0.30-150400.4.46.1 * php8-snmp-debuginfo-8.0.30-150400.4.46.1 * php8-sockets-debuginfo-8.0.30-150400.4.46.1 * php8-pgsql-8.0.30-150400.4.46.1 * php8-fpm-8.0.30-150400.4.46.1 * php8-xmlreader-8.0.30-150400.4.46.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.46.1 * php8-ldap-debuginfo-8.0.30-150400.4.46.1 * php8-openssl-debuginfo-8.0.30-150400.4.46.1 * php8-snmp-8.0.30-150400.4.46.1 * php8-embed-8.0.30-150400.4.46.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * php8-cli-debuginfo-8.0.30-150400.4.46.1 * php8-ftp-8.0.30-150400.4.46.1 * php8-tokenizer-8.0.30-150400.4.46.1 * php8-test-8.0.30-150400.4.46.1 * php8-bz2-8.0.30-150400.4.46.1 * php8-fileinfo-8.0.30-150400.4.46.1 * php8-curl-8.0.30-150400.4.46.1 * php8-fpm-debugsource-8.0.30-150400.4.46.1 * php8-calendar-8.0.30-150400.4.46.1 * php8-gettext-debuginfo-8.0.30-150400.4.46.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.46.1 * php8-bcmath-debuginfo-8.0.30-150400.4.46.1 * php8-xmlwriter-8.0.30-150400.4.46.1 * php8-sqlite-debuginfo-8.0.30-150400.4.46.1 * php8-shmop-debuginfo-8.0.30-150400.4.46.1 * php8-debuginfo-8.0.30-150400.4.46.1 * php8-odbc-debuginfo-8.0.30-150400.4.46.1 * php8-pdo-8.0.30-150400.4.46.1 * php8-zip-debuginfo-8.0.30-150400.4.46.1 * php8-sysvmsg-8.0.30-150400.4.46.1 * php8-bz2-debuginfo-8.0.30-150400.4.46.1 * php8-8.0.30-150400.4.46.1 * php8-embed-debuginfo-8.0.30-150400.4.46.1 * php8-openssl-8.0.30-150400.4.46.1 * php8-gd-8.0.30-150400.4.46.1 * php8-tidy-8.0.30-150400.4.46.1 * php8-pcntl-debuginfo-8.0.30-150400.4.46.1 * php8-sysvsem-8.0.30-150400.4.46.1 * php8-odbc-8.0.30-150400.4.46.1 * php8-ctype-debuginfo-8.0.30-150400.4.46.1 * php8-embed-debugsource-8.0.30-150400.4.46.1 * php8-gd-debuginfo-8.0.30-150400.4.46.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.46.1 * php8-zlib-8.0.30-150400.4.46.1 * php8-dom-8.0.30-150400.4.46.1 * php8-mbstring-debuginfo-8.0.30-150400.4.46.1 * php8-readline-8.0.30-150400.4.46.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.46.1 * php8-sqlite-8.0.30-150400.4.46.1 * php8-soap-8.0.30-150400.4.46.1 * php8-pdo-debuginfo-8.0.30-150400.4.46.1 * php8-iconv-debuginfo-8.0.30-150400.4.46.1 * php8-mysql-8.0.30-150400.4.46.1 * php8-cli-8.0.30-150400.4.46.1 * php8-ftp-debuginfo-8.0.30-150400.4.46.1 * php8-devel-8.0.30-150400.4.46.1 * php8-debugsource-8.0.30-150400.4.46.1 * php8-intl-debuginfo-8.0.30-150400.4.46.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.46.1 * php8-posix-8.0.30-150400.4.46.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.46.1 * php8-phar-8.0.30-150400.4.46.1 * php8-dom-debuginfo-8.0.30-150400.4.46.1 * php8-sodium-debuginfo-8.0.30-150400.4.46.1 * php8-soap-debuginfo-8.0.30-150400.4.46.1 * php8-intl-8.0.30-150400.4.46.1 * php8-pgsql-debuginfo-8.0.30-150400.4.46.1 * php8-iconv-8.0.30-150400.4.46.1 * php8-gmp-debuginfo-8.0.30-150400.4.46.1 * php8-dba-debuginfo-8.0.30-150400.4.46.1 * php8-calendar-debuginfo-8.0.30-150400.4.46.1 * php8-fastcgi-debugsource-8.0.30-150400.4.46.1 * php8-zlib-debuginfo-8.0.30-150400.4.46.1 * php8-xsl-8.0.30-150400.4.46.1 * apache2-mod_php8-8.0.30-150400.4.46.1 * php8-exif-debuginfo-8.0.30-150400.4.46.1 * php8-mysql-debuginfo-8.0.30-150400.4.46.1 * php8-opcache-8.0.30-150400.4.46.1 * php8-curl-debuginfo-8.0.30-150400.4.46.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.46.1 * php8-sockets-8.0.30-150400.4.46.1 * php8-tidy-debuginfo-8.0.30-150400.4.46.1 * php8-exif-8.0.30-150400.4.46.1 * php8-xsl-debuginfo-8.0.30-150400.4.46.1 * php8-zip-8.0.30-150400.4.46.1 * php8-enchant-8.0.30-150400.4.46.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.46.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.46.1 * php8-readline-debuginfo-8.0.30-150400.4.46.1 * php8-pcntl-8.0.30-150400.4.46.1 * php8-ctype-8.0.30-150400.4.46.1 * php8-dba-8.0.30-150400.4.46.1 * php8-ldap-8.0.30-150400.4.46.1 * php8-bcmath-8.0.30-150400.4.46.1 * php8-posix-debuginfo-8.0.30-150400.4.46.1 * php8-mbstring-8.0.30-150400.4.46.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.46.1 * php8-phar-debuginfo-8.0.30-150400.4.46.1 * php8-opcache-debuginfo-8.0.30-150400.4.46.1 * php8-gmp-8.0.30-150400.4.46.1 * php8-sysvshm-8.0.30-150400.4.46.1 * php8-fastcgi-8.0.30-150400.4.46.1 * php8-gettext-8.0.30-150400.4.46.1 * php8-sodium-8.0.30-150400.4.46.1 * php8-enchant-debuginfo-8.0.30-150400.4.46.1 * php8-shmop-8.0.30-150400.4.46.1 * php8-fpm-debuginfo-8.0.30-150400.4.46.1 * php8-snmp-debuginfo-8.0.30-150400.4.46.1 * php8-sockets-debuginfo-8.0.30-150400.4.46.1 * php8-fpm-8.0.30-150400.4.46.1 * php8-pgsql-8.0.30-150400.4.46.1 * php8-xmlreader-8.0.30-150400.4.46.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.46.1 * php8-ldap-debuginfo-8.0.30-150400.4.46.1 * php8-openssl-debuginfo-8.0.30-150400.4.46.1 * php8-embed-8.0.30-150400.4.46.1 * php8-snmp-8.0.30-150400.4.46.1 * Web and Scripting Module 15-SP5 (aarch64 ppc64le s390x x86_64) * php8-cli-debuginfo-8.0.30-150400.4.46.1 * php8-ftp-8.0.30-150400.4.46.1 * php8-tokenizer-8.0.30-150400.4.46.1 * php8-test-8.0.30-150400.4.46.1 * php8-bz2-8.0.30-150400.4.46.1 * php8-fileinfo-8.0.30-150400.4.46.1 * php8-curl-8.0.30-150400.4.46.1 * php8-fpm-debugsource-8.0.30-150400.4.46.1 * php8-calendar-8.0.30-150400.4.46.1 * php8-gettext-debuginfo-8.0.30-150400.4.46.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.46.1 * php8-bcmath-debuginfo-8.0.30-150400.4.46.1 * php8-xmlwriter-8.0.30-150400.4.46.1 * php8-sqlite-debuginfo-8.0.30-150400.4.46.1 * php8-shmop-debuginfo-8.0.30-150400.4.46.1 * php8-debuginfo-8.0.30-150400.4.46.1 * php8-odbc-debuginfo-8.0.30-150400.4.46.1 * php8-pdo-8.0.30-150400.4.46.1 * php8-zip-debuginfo-8.0.30-150400.4.46.1 * php8-sysvmsg-8.0.30-150400.4.46.1 * php8-bz2-debuginfo-8.0.30-150400.4.46.1 * php8-8.0.30-150400.4.46.1 * php8-embed-debuginfo-8.0.30-150400.4.46.1 * php8-openssl-8.0.30-150400.4.46.1 * php8-gd-8.0.30-150400.4.46.1 * php8-tidy-8.0.30-150400.4.46.1 * php8-pcntl-debuginfo-8.0.30-150400.4.46.1 * php8-sysvsem-8.0.30-150400.4.46.1 * php8-odbc-8.0.30-150400.4.46.1 * php8-ctype-debuginfo-8.0.30-150400.4.46.1 * php8-embed-debugsource-8.0.30-150400.4.46.1 * php8-gd-debuginfo-8.0.30-150400.4.46.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.46.1 * php8-zlib-8.0.30-150400.4.46.1 * php8-dom-8.0.30-150400.4.46.1 * php8-mbstring-debuginfo-8.0.30-150400.4.46.1 * php8-readline-8.0.30-150400.4.46.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.46.1 * php8-sqlite-8.0.30-150400.4.46.1 * php8-soap-8.0.30-150400.4.46.1 * php8-pdo-debuginfo-8.0.30-150400.4.46.1 * php8-iconv-debuginfo-8.0.30-150400.4.46.1 * php8-mysql-8.0.30-150400.4.46.1 * php8-cli-8.0.30-150400.4.46.1 * php8-ftp-debuginfo-8.0.30-150400.4.46.1 * php8-devel-8.0.30-150400.4.46.1 * php8-debugsource-8.0.30-150400.4.46.1 * php8-intl-debuginfo-8.0.30-150400.4.46.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.46.1 * php8-posix-8.0.30-150400.4.46.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.46.1 * php8-phar-8.0.30-150400.4.46.1 * php8-dom-debuginfo-8.0.30-150400.4.46.1 * php8-sodium-debuginfo-8.0.30-150400.4.46.1 * php8-soap-debuginfo-8.0.30-150400.4.46.1 * php8-intl-8.0.30-150400.4.46.1 * php8-pgsql-debuginfo-8.0.30-150400.4.46.1 * php8-iconv-8.0.30-150400.4.46.1 * php8-gmp-debuginfo-8.0.30-150400.4.46.1 * php8-dba-debuginfo-8.0.30-150400.4.46.1 * php8-calendar-debuginfo-8.0.30-150400.4.46.1 * php8-fastcgi-debugsource-8.0.30-150400.4.46.1 * php8-zlib-debuginfo-8.0.30-150400.4.46.1 * php8-xsl-8.0.30-150400.4.46.1 * apache2-mod_php8-8.0.30-150400.4.46.1 * php8-exif-debuginfo-8.0.30-150400.4.46.1 * php8-mysql-debuginfo-8.0.30-150400.4.46.1 * php8-opcache-8.0.30-150400.4.46.1 * php8-curl-debuginfo-8.0.30-150400.4.46.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.46.1 * php8-sockets-8.0.30-150400.4.46.1 * php8-tidy-debuginfo-8.0.30-150400.4.46.1 * php8-exif-8.0.30-150400.4.46.1 * php8-xsl-debuginfo-8.0.30-150400.4.46.1 * php8-zip-8.0.30-150400.4.46.1 * php8-enchant-8.0.30-150400.4.46.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.46.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.46.1 * php8-readline-debuginfo-8.0.30-150400.4.46.1 * php8-pcntl-8.0.30-150400.4.46.1 * php8-ctype-8.0.30-150400.4.46.1 * php8-dba-8.0.30-150400.4.46.1 * php8-ldap-8.0.30-150400.4.46.1 * php8-bcmath-8.0.30-150400.4.46.1 * php8-posix-debuginfo-8.0.30-150400.4.46.1 * php8-mbstring-8.0.30-150400.4.46.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.46.1 * php8-phar-debuginfo-8.0.30-150400.4.46.1 * php8-opcache-debuginfo-8.0.30-150400.4.46.1 * php8-gmp-8.0.30-150400.4.46.1 * php8-sysvshm-8.0.30-150400.4.46.1 * php8-fastcgi-8.0.30-150400.4.46.1 * php8-gettext-8.0.30-150400.4.46.1 * php8-sodium-8.0.30-150400.4.46.1 * php8-enchant-debuginfo-8.0.30-150400.4.46.1 * php8-shmop-8.0.30-150400.4.46.1 * php8-fpm-debuginfo-8.0.30-150400.4.46.1 * php8-snmp-debuginfo-8.0.30-150400.4.46.1 * php8-sockets-debuginfo-8.0.30-150400.4.46.1 * php8-fpm-8.0.30-150400.4.46.1 * php8-pgsql-8.0.30-150400.4.46.1 * php8-xmlreader-8.0.30-150400.4.46.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.46.1 * php8-ldap-debuginfo-8.0.30-150400.4.46.1 * php8-openssl-debuginfo-8.0.30-150400.4.46.1 * php8-embed-8.0.30-150400.4.46.1 * php8-snmp-8.0.30-150400.4.46.1 ## References: * https://www.suse.com/security/cve/CVE-2024-8925.html * https://www.suse.com/security/cve/CVE-2024-8927.html * https://www.suse.com/security/cve/CVE-2024-9026.html * https://bugzilla.suse.com/show_bug.cgi?id=1231358 * https://bugzilla.suse.com/show_bug.cgi?id=1231360 * https://bugzilla.suse.com/show_bug.cgi?id=1231382

1 0

SUSE-SU-2024:3661-1: important: Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3661-1 Release Date: 2024-10-16T13:33:42Z Rating: important References: * bsc#1223683 * bsc#1225310 * bsc#1225312 * bsc#1226325 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-47291 * CVE-2024-26923 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves six vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3661=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3661=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_164-default-debuginfo-3-150300.7.6.1 * kernel-livepatch-SLE15-SP3_Update_45-debugsource-3-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_164-default-3-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_164-preempt-debuginfo-3-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_164-preempt-3-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_164-default-3-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3646-1: moderate: Security update for unbound
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for unbound Announcement ID: SUSE-SU-2024:3646-1 Release Date: 2024-10-16T09:31:58Z Rating: moderate References: * bsc#1231284 Cross-References: * CVE-2024-8508 CVSS scores: * CVE-2024-8508 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-8508 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L * CVE-2024-8508 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2024-8508: Fixed unbounded name compression that could lead to denial of service (bsc#1231284) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3646=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3646=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3646=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3646=1 ## Package List: * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * unbound-1.20.0-150100.10.19.1 * unbound-debugsource-1.20.0-150100.10.19.1 * unbound-python-1.20.0-150100.10.19.1 * unbound-python-debuginfo-1.20.0-150100.10.19.1 * unbound-debuginfo-1.20.0-150100.10.19.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * unbound-devel-1.20.0-150100.10.19.1 * unbound-1.20.0-150100.10.19.1 * unbound-debugsource-1.20.0-150100.10.19.1 * unbound-python-1.20.0-150100.10.19.1 * libunbound8-1.20.0-150100.10.19.1 * unbound-python-debuginfo-1.20.0-150100.10.19.1 * unbound-debuginfo-1.20.0-150100.10.19.1 * libunbound8-debuginfo-1.20.0-150100.10.19.1 * unbound-anchor-1.20.0-150100.10.19.1 * unbound-anchor-debuginfo-1.20.0-150100.10.19.1 * openSUSE Leap 15.5 (noarch) * unbound-munin-1.20.0-150100.10.19.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.20.0-150100.10.19.1 * libunbound8-1.20.0-150100.10.19.1 * unbound-debuginfo-1.20.0-150100.10.19.1 * libunbound8-debuginfo-1.20.0-150100.10.19.1 * unbound-anchor-1.20.0-150100.10.19.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * unbound-devel-1.20.0-150100.10.19.1 * unbound-debugsource-1.20.0-150100.10.19.1 * libunbound8-1.20.0-150100.10.19.1 * unbound-debuginfo-1.20.0-150100.10.19.1 * libunbound8-debuginfo-1.20.0-150100.10.19.1 * unbound-anchor-1.20.0-150100.10.19.1 * unbound-anchor-debuginfo-1.20.0-150100.10.19.1 ## References: * https://www.suse.com/security/cve/CVE-2024-8508.html * https://bugzilla.suse.com/show_bug.cgi?id=1231284

1 0

SUSE-SU-2024:3647-1: moderate: Security update for unbound
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for unbound Announcement ID: SUSE-SU-2024:3647-1 Release Date: 2024-10-16T09:32:21Z Rating: moderate References: * bsc#1231284 Cross-References: * CVE-2024-8508 CVSS scores: * CVE-2024-8508 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L * CVE-2024-8508 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L * CVE-2024-8508 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves one vulnerability can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2024-8508: Fixed unbounded name compression that could lead to denial of service (bsc#1231284) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3647=1 openSUSE-SLE-15.6-2024-3647=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3647=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3647=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libunbound-devel-mini-1.20.0-150600.23.9.1 * unbound-devel-1.20.0-150600.23.9.1 * libunbound-devel-mini-debuginfo-1.20.0-150600.23.9.1 * libunbound8-1.20.0-150600.23.9.1 * libunbound8-debuginfo-1.20.0-150600.23.9.1 * unbound-debugsource-1.20.0-150600.23.9.1 * unbound-debuginfo-1.20.0-150600.23.9.1 * unbound-anchor-1.20.0-150600.23.9.1 * libunbound-devel-mini-debugsource-1.20.0-150600.23.9.1 * unbound-1.20.0-150600.23.9.1 * unbound-anchor-debuginfo-1.20.0-150600.23.9.1 * unbound-python-debuginfo-1.20.0-150600.23.9.1 * unbound-python-1.20.0-150600.23.9.1 * openSUSE Leap 15.6 (noarch) * unbound-munin-1.20.0-150600.23.9.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * unbound-devel-1.20.0-150600.23.9.1 * libunbound8-1.20.0-150600.23.9.1 * libunbound8-debuginfo-1.20.0-150600.23.9.1 * unbound-debugsource-1.20.0-150600.23.9.1 * unbound-debuginfo-1.20.0-150600.23.9.1 * unbound-anchor-1.20.0-150600.23.9.1 * unbound-anchor-debuginfo-1.20.0-150600.23.9.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.20.0-150600.23.9.1 * unbound-debuginfo-1.20.0-150600.23.9.1 * unbound-1.20.0-150600.23.9.1 * unbound-python-debuginfo-1.20.0-150600.23.9.1 * unbound-python-1.20.0-150600.23.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-8508.html * https://bugzilla.suse.com/show_bug.cgi?id=1231284

1 0

SUSE-RU-2024:3653-1: low: Recommended update for gssdp
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Recommended update for gssdp Announcement ID: SUSE-RU-2024:3653-1 Release Date: 2024-10-16T10:05:43Z Rating: low References: * bsc#1224398 Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for gssdp fixes the following issues: * Add libgssdp-1_2-0 to SLE-15-SP6 Package Hub Subpackages (bsc#1224398) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3653=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3653=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-3653=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3653=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-3653=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gssdp-debugsource-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-1.4.0.1-150400.3.2.1 * typelib-1_0-GSSDP-1_0-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-debuginfo-1.4.0.1-150400.3.2.1 * libgssdp-devel-1.4.0.1-150400.3.2.1 * openSUSE Leap 15.4 (x86_64) * libgssdp-1_2-0-32bit-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-32bit-debuginfo-1.4.0.1-150400.3.2.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgssdp-1_2-0-64bit-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-64bit-debuginfo-1.4.0.1-150400.3.2.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * gssdp-debugsource-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-1.4.0.1-150400.3.2.1 * typelib-1_0-GSSDP-1_0-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-debuginfo-1.4.0.1-150400.3.2.1 * libgssdp-devel-1.4.0.1-150400.3.2.1 * openSUSE Leap 15.5 (x86_64) * libgssdp-1_2-0-32bit-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-32bit-debuginfo-1.4.0.1-150400.3.2.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gssdp-debugsource-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-1.4.0.1-150400.3.2.1 * typelib-1_0-GSSDP-1_0-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-debuginfo-1.4.0.1-150400.3.2.1 * libgssdp-devel-1.4.0.1-150400.3.2.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x) * libgssdp-1_2-0-1.4.0.1-150400.3.2.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * gssdp-debugsource-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-1.4.0.1-150400.3.2.1 * libgssdp-1_2-0-debuginfo-1.4.0.1-150400.3.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1224398

1 0

SUSE-RU-2024:3654-1: low: Recommended update for evolution-data-server
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Recommended update for evolution-data-server Announcement ID: SUSE-RU-2024:3654-1 Release Date: 2024-10-16T10:05:59Z Rating: low References: * bsc#1224399 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP6 An update that has one fix can now be installed. ## Description: This update for evolution-data-server fixes the following issues: * Add libcamel-1_2-64 binaries to SLE-15-SP6 Package Hub Subpackages (bsc#1224399) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3654=1 openSUSE-SLE-15.6-2024-3654=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3654=1 * SUSE Linux Enterprise Workstation Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2024-3654=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libedata-book-1_2-27-3.50.3-150600.3.4.1 * typelib-1_0-EBook-1_2-3.50.3-150600.3.4.1 * libebook-1_2-21-debuginfo-3.50.3-150600.3.4.1 * libebook-1_2-21-3.50.3-150600.3.4.1 * typelib-1_0-EBackend-1_2-3.50.3-150600.3.4.1 * libedata-book-1_2-27-debuginfo-3.50.3-150600.3.4.1 * libedataserverui4-1_0-0-3.50.3-150600.3.4.1 * typelib-1_0-EDataServer-1_2-3.50.3-150600.3.4.1 * typelib-1_0-EBookContacts-1_2-3.50.3-150600.3.4.1 * libebook-contacts-1_2-4-3.50.3-150600.3.4.1 * libcamel-1_2-64-debuginfo-3.50.3-150600.3.4.1 * libedataserverui-1_2-4-debuginfo-3.50.3-150600.3.4.1 * evolution-data-server-debugsource-3.50.3-150600.3.4.1 * evolution-data-server-devel-3.50.3-150600.3.4.1 * typelib-1_0-EDataBook-1_2-3.50.3-150600.3.4.1 * libebackend-1_2-11-debuginfo-3.50.3-150600.3.4.1 * evolution-data-server-3.50.3-150600.3.4.1 * typelib-1_0-EDataCal-2_0-3.50.3-150600.3.4.1 * libcamel-1_2-64-3.50.3-150600.3.4.1 * libebook-contacts-1_2-4-debuginfo-3.50.3-150600.3.4.1 * libedataserver-1_2-27-3.50.3-150600.3.4.1 * typelib-1_0-EDataServerUI-1_2-3.50.3-150600.3.4.1 * libecal-2_0-2-3.50.3-150600.3.4.1 * typelib-1_0-Camel-1_2-3.50.3-150600.3.4.1 * libedata-cal-2_0-2-debuginfo-3.50.3-150600.3.4.1 * libedataserver-1_2-27-debuginfo-3.50.3-150600.3.4.1 * libedataserverui-1_2-4-3.50.3-150600.3.4.1 * typelib-1_0-EDataServerUI4-1_0-3.50.3-150600.3.4.1 * libedataserverui4-1_0-0-debuginfo-3.50.3-150600.3.4.1 * libecal-2_0-2-debuginfo-3.50.3-150600.3.4.1 * evolution-data-server-debuginfo-3.50.3-150600.3.4.1 * libedata-cal-2_0-2-3.50.3-150600.3.4.1 * libebackend-1_2-11-3.50.3-150600.3.4.1 * typelib-1_0-ECal-2_0-3.50.3-150600.3.4.1 * openSUSE Leap 15.6 (noarch) * evolution-data-server-lang-3.50.3-150600.3.4.1 * SUSE Package Hub 15 15-SP6 (aarch64 s390x) * evolution-data-server-devel-3.50.3-150600.3.4.1 * evolution-data-server-3.50.3-150600.3.4.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x) * typelib-1_0-Camel-1_2-3.50.3-150600.3.4.1 * typelib-1_0-EBook-1_2-3.50.3-150600.3.4.1 * typelib-1_0-EDataBook-1_2-3.50.3-150600.3.4.1 * typelib-1_0-EDataServer-1_2-3.50.3-150600.3.4.1 * typelib-1_0-EDataCal-2_0-3.50.3-150600.3.4.1 * libcamel-1_2-64-3.50.3-150600.3.4.1 * typelib-1_0-EBookContacts-1_2-3.50.3-150600.3.4.1 * typelib-1_0-EBackend-1_2-3.50.3-150600.3.4.1 * evolution-data-server-debuginfo-3.50.3-150600.3.4.1 * libedataserver-1_2-27-3.50.3-150600.3.4.1 * typelib-1_0-ECal-2_0-3.50.3-150600.3.4.1 * typelib-1_0-EDataServerUI-1_2-3.50.3-150600.3.4.1 * evolution-data-server-debugsource-3.50.3-150600.3.4.1 * SUSE Package Hub 15 15-SP6 (noarch) * evolution-data-server-lang-3.50.3-150600.3.4.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64) * libedata-book-1_2-27-3.50.3-150600.3.4.1 * typelib-1_0-EBook-1_2-3.50.3-150600.3.4.1 * libebook-1_2-21-debuginfo-3.50.3-150600.3.4.1 * libebook-1_2-21-3.50.3-150600.3.4.1 * libedata-book-1_2-27-debuginfo-3.50.3-150600.3.4.1 * libedataserverui4-1_0-0-3.50.3-150600.3.4.1 * typelib-1_0-EDataServer-1_2-3.50.3-150600.3.4.1 * typelib-1_0-EBookContacts-1_2-3.50.3-150600.3.4.1 * libebook-contacts-1_2-4-3.50.3-150600.3.4.1 * libcamel-1_2-64-debuginfo-3.50.3-150600.3.4.1 * libedataserverui-1_2-4-debuginfo-3.50.3-150600.3.4.1 * evolution-data-server-debugsource-3.50.3-150600.3.4.1 * evolution-data-server-devel-3.50.3-150600.3.4.1 * libebackend-1_2-11-debuginfo-3.50.3-150600.3.4.1 * evolution-data-server-3.50.3-150600.3.4.1 * libcamel-1_2-64-3.50.3-150600.3.4.1 * libebook-contacts-1_2-4-debuginfo-3.50.3-150600.3.4.1 * libedataserver-1_2-27-3.50.3-150600.3.4.1 * typelib-1_0-EDataServerUI-1_2-3.50.3-150600.3.4.1 * libecal-2_0-2-3.50.3-150600.3.4.1 * typelib-1_0-Camel-1_2-3.50.3-150600.3.4.1 * libedata-cal-2_0-2-debuginfo-3.50.3-150600.3.4.1 * libedataserver-1_2-27-debuginfo-3.50.3-150600.3.4.1 * libedataserverui-1_2-4-3.50.3-150600.3.4.1 * typelib-1_0-EDataServerUI4-1_0-3.50.3-150600.3.4.1 * libedataserverui4-1_0-0-debuginfo-3.50.3-150600.3.4.1 * libecal-2_0-2-debuginfo-3.50.3-150600.3.4.1 * evolution-data-server-debuginfo-3.50.3-150600.3.4.1 * libedata-cal-2_0-2-3.50.3-150600.3.4.1 * libebackend-1_2-11-3.50.3-150600.3.4.1 * typelib-1_0-ECal-2_0-3.50.3-150600.3.4.1 * SUSE Linux Enterprise Workstation Extension 15 SP6 (noarch) * evolution-data-server-lang-3.50.3-150600.3.4.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1224399

1 0

SUSE-SU-2024:3656-1: moderate: Security update for etcd
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for etcd Announcement ID: SUSE-SU-2024:3656-1 Release Date: 2024-10-16T11:33:45Z Rating: moderate References: * bsc#1095184 * bsc#1118897 * bsc#1118898 * bsc#1118899 * bsc#1121850 * bsc#1174951 * bsc#1181400 * bsc#1183703 * bsc#1199031 * bsc#1208270 * bsc#1208297 * bsc#1210138 * bsc#1213229 * bsc#1217070 * bsc#1217950 * bsc#1218150 Cross-References: * CVE-2018-16873 * CVE-2018-16874 * CVE-2018-16875 * CVE-2018-16886 * CVE-2020-15106 * CVE-2020-15112 * CVE-2021-28235 * CVE-2022-41723 * CVE-2023-29406 * CVE-2023-47108 * CVE-2023-48795 CVSS scores: * CVE-2018-16873 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2018-16873 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2018-16873 ( NVD ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2018-16874 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2018-16874 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2018-16874 ( NVD ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2018-16875 ( SUSE ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2018-16875 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2018-16886 ( SUSE ): 6.8 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2018-16886 ( NVD ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2020-15106 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2020-15106 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2020-15112 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2020-15112 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-28235 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2021-28235 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-41723 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-41723 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-29406 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2023-29406 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2023-47108 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-47108 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-48795 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2023-48795 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 An update that solves 11 vulnerabilities and has five security fixes can now be installed. ## Description: This update for etcd fixes the following issues: Update to version 3.5.12: Security fixes: * CVE-2018-16873: Fixed remote command execution in cmd/go (bsc#1118897) * CVE-2018-16874: Fixed directory traversal in cmd/go (bsc#1118898) * CVE-2018-16875: Fixed CPU denial of service in crypto/x509 (bsc#1118899) * CVE-2018-16886: Fixed improper authentication issue when RBAC and client- cert-auth is enabled (bsc#1121850) * CVE-2020-15106: Fixed panic in decodeRecord method (bsc#1174951) * CVE-2020-15112: Fixed improper checks in entry index (bsc#1174951) * CVE-2021-28235: Fixed information discosure via debug function (bsc#1210138) * CVE-2022-41723: Fixed quadratic complexity in HPACK decoding in net/http (bsc#1208270, bsc#1208297) * CVE-2023-29406: Fixed insufficient sanitization of Host header in go net/http (bsc#1213229) * CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (bsc#1217070) * CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (aka Terrapin Attack) in crypto/ssh (bsc#1217950, bsc#1218150) Other changes: * Added hardening to systemd service(s) (bsc#1181400) * Fixed static /tmp file issue (bsc#1199031) * Fixed systemd service not starting (bsc#1183703) Full changelog: https://github.com/etcd-io/etcd/compare/v3.3.1...v3.5.12 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3656=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3656=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * etcdctl-3.5.12-150000.7.6.1 * etcd-3.5.12-150000.7.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * etcdctl-3.5.12-150000.7.6.1 * etcd-3.5.12-150000.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2018-16873.html * https://www.suse.com/security/cve/CVE-2018-16874.html * https://www.suse.com/security/cve/CVE-2018-16875.html * https://www.suse.com/security/cve/CVE-2018-16886.html * https://www.suse.com/security/cve/CVE-2020-15106.html * https://www.suse.com/security/cve/CVE-2020-15112.html * https://www.suse.com/security/cve/CVE-2021-28235.html * https://www.suse.com/security/cve/CVE-2022-41723.html * https://www.suse.com/security/cve/CVE-2023-29406.html * https://www.suse.com/security/cve/CVE-2023-47108.html * https://www.suse.com/security/cve/CVE-2023-48795.html * https://bugzilla.suse.com/show_bug.cgi?id=1095184 * https://bugzilla.suse.com/show_bug.cgi?id=1118897 * https://bugzilla.suse.com/show_bug.cgi?id=1118898 * https://bugzilla.suse.com/show_bug.cgi?id=1118899 * https://bugzilla.suse.com/show_bug.cgi?id=1121850 * https://bugzilla.suse.com/show_bug.cgi?id=1174951 * https://bugzilla.suse.com/show_bug.cgi?id=1181400 * https://bugzilla.suse.com/show_bug.cgi?id=1183703 * https://bugzilla.suse.com/show_bug.cgi?id=1199031 * https://bugzilla.suse.com/show_bug.cgi?id=1208270 * https://bugzilla.suse.com/show_bug.cgi?id=1208297 * https://bugzilla.suse.com/show_bug.cgi?id=1210138 * https://bugzilla.suse.com/show_bug.cgi?id=1213229 * https://bugzilla.suse.com/show_bug.cgi?id=1217070 * https://bugzilla.suse.com/show_bug.cgi?id=1217950 * https://bugzilla.suse.com/show_bug.cgi?id=1218150

1 0

SUSE-SU-2024:3648-1: important: Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3648-1 Release Date: 2024-10-16T10:03:55Z Rating: important References: * bsc#1225312 * bsc#1226325 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-47291 * CVE-2024-35861 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves four vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-3648=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3650=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3650=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150200_24_166-default-debuginfo-14-150200.2.1 * kernel-livepatch-SLE15-SP2_Update_41-debugsource-14-150200.2.1 * kernel-livepatch-5_3_18-150200_24_166-default-14-150200.2.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_150-default-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-default-debuginfo-11-150300.2.1 * kernel-livepatch-SLE15-SP3_Update_41-debugsource-11-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_150-preempt-11-150300.2.1 * kernel-livepatch-5_3_18-150300_59_150-preempt-debuginfo-11-150300.2.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_150-default-11-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3651-1: important: Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3651-1 Release Date: 2024-10-16T10:04:05Z Rating: important References: * bsc#1210619 * bsc#1218487 * bsc#1220145 * bsc#1220537 * bsc#1221302 * bsc#1222685 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223683 * bsc#1225013 * bsc#1225202 * bsc#1225211 * bsc#1225302 * bsc#1225310 * bsc#1225312 * bsc#1226325 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-46955 * CVE-2021-47291 * CVE-2021-47378 * CVE-2021-47383 * CVE-2021-47402 * CVE-2022-48651 * CVE-2023-1829 * CVE-2023-6531 * CVE-2023-6546 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6531 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6546 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301) * CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225202). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). * CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3651=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3651=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_42-debugsource-8-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_153-default-8-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_153-default-debuginfo-8-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_153-preempt-debuginfo-8-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_153-preempt-8-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_153-default-8-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47383.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2023-6531.html * https://www.suse.com/security/cve/CVE-2023-6546.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1218487 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1222685 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225211 * https://bugzilla.suse.com/show_bug.cgi?id=1225302 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3652-1: important: Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3) Announcement ID: SUSE-SU-2024:3652-1 Release Date: 2024-10-16T10:04:15Z Rating: important References: * bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223683 * bsc#1225013 * bsc#1225202 * bsc#1225211 * bsc#1225302 * bsc#1225310 * bsc#1225312 * bsc#1226325 * bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-46955 * CVE-2021-47291 * CVE-2021-47378 * CVE-2021-47383 * CVE-2021-47402 * CVE-2022-48651 * CVE-2023-1829 * CVE-2024-23307 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36964 * CVE-2024-41059 CVSS scores: * CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2021-47291 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47378 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47402 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-23307 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301) * CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225202). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). * CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3652=1 * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-3652=1 ## Package List: * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_43-debugsource-7-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_158-default-7-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_158-default-debuginfo-7-150300.7.6.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_158-preempt-7-150300.7.6.1 * kernel-livepatch-5_3_18-150300_59_158-preempt-debuginfo-7-150300.7.6.1 * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-5_3_18-150300_59_158-default-7-150300.7.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-46955.html * https://www.suse.com/security/cve/CVE-2021-47291.html * https://www.suse.com/security/cve/CVE-2021-47378.html * https://www.suse.com/security/cve/CVE-2021-47383.html * https://www.suse.com/security/cve/CVE-2021-47402.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2024-23307.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1220145 * https://bugzilla.suse.com/show_bug.cgi?id=1220537 * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225202 * https://bugzilla.suse.com/show_bug.cgi?id=1225211 * https://bugzilla.suse.com/show_bug.cgi?id=1225302 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1227651 * https://bugzilla.suse.com/show_bug.cgi?id=1228573

1 0

SUSE-SU-2024:3655-1: important: Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3655-1 Release Date: 2024-10-16T11:33:28Z Rating: important References: * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2024-35861 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_55_31 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3655=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3655=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_6-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-debuginfo-13-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_6-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_31-default-debuginfo-13-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3644-1: moderate: Security update for rubygem-puma
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for rubygem-puma Announcement ID: SUSE-SU-2024:3644-1 Release Date: 2024-10-16T06:55:19Z Rating: moderate References: * bsc#1218638 * bsc#1230848 Cross-References: * CVE-2024-21647 * CVE-2024-45614 CVSS scores: * CVE-2024-21647 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-21647 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45614 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-45614 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N * CVE-2024-45614 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N * CVE-2024-45614 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP2 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 Business Critical Linux 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.1 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.1 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.1 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for rubygem-puma fixes the following issues: * CVE-2024-45614: Prevent underscores from clobbering hyphen headers (bsc#1230848). * CVE-2024-21647: Fixed DoS when parsing chunked Transfer-Encoding bodies (bsc#1218638). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3644=1 * SUSE Linux Enterprise High Availability Extension 15 SP2 zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2024-3644=1 * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2024-3644=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2024-3644=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-3644=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * rubygem-puma-debugsource-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-doc-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-debuginfo-4.3.12-150000.3.15.1 * SUSE Linux Enterprise High Availability Extension 15 SP2 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-puma-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-debuginfo-4.3.12-150000.3.15.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * rubygem-puma-debugsource-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-debuginfo-4.3.12-150000.3.15.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * rubygem-puma-debugsource-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-debuginfo-4.3.12-150000.3.15.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * rubygem-puma-debugsource-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-4.3.12-150000.3.15.1 * ruby2.5-rubygem-puma-debuginfo-4.3.12-150000.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2024-21647.html * https://www.suse.com/security/cve/CVE-2024-45614.html * https://bugzilla.suse.com/show_bug.cgi?id=1218638 * https://bugzilla.suse.com/show_bug.cgi?id=1230848

1 0

SUSE-RU-2024:3645-1: important: Recommended update for installation-images
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Recommended update for installation-images Announcement ID: SUSE-RU-2024:3645-1 Release Date: 2024-10-16T07:01:07Z Rating: important References: * bsc#1215290 * bsc#1223982 * bsc#1227672 * bsc#1228736 * jsc#PED-8374 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature and has four fixes can now be installed. ## Description: This update for installation-images fixes the following issues: * Version upgrade (v16.59.16). * Require `libsolv-tools` explicitly (bsc#1227672). * Revert "drop unused wget (bsc#1215290)" (bsc#1228736). * make some compression settings configurable (bsc#1223982, jsc#PED-8374). * limit compression in OBS to 4 threads * ppc64: optimize for smaller compressed initrd size * fix perl issue in test case ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3645=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3645=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * installation-images-SLES-16.59.16-150600.3.7.2 * install-initrd-SLES-16.59.16-150600.3.7.2 * skelcd-installer-SLES-16.59.16-150600.3.7.2 * installation-images-debuginfodeps-SLES-16.59.16-150600.3.7.2 * skelcd-installer-net-SLES-16.59.16-150600.3.7.2 * openSUSE Leap 15.6 (noarch) * tftpboot-installation-SLE-15-SP6-x86_64-16.59.16-150600.3.7.2 * tftpboot-installation-SLE-15-SP6-ppc64le-16.59.16-150600.3.7.2 * tftpboot-installation-SLE-15-SP6-aarch64-16.59.16-150600.3.7.2 * tftpboot-installation-SLE-15-SP6-s390x-16.59.16-150600.3.7.2 * Basesystem Module 15-SP6 (noarch) * tftpboot-installation-SLE-15-SP6-x86_64-16.59.16-150600.3.7.2 * tftpboot-installation-SLE-15-SP6-ppc64le-16.59.16-150600.3.7.2 * tftpboot-installation-SLE-15-SP6-aarch64-16.59.16-150600.3.7.2 * tftpboot-installation-SLE-15-SP6-s390x-16.59.16-150600.3.7.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215290 * https://bugzilla.suse.com/show_bug.cgi?id=1223982 * https://bugzilla.suse.com/show_bug.cgi?id=1227672 * https://bugzilla.suse.com/show_bug.cgi?id=1228736 * https://jira.suse.com/browse/PED-8374

1 0

SUSE-SU-2024:3643-1: important: Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)
by OPENSUSE-UPDATES 16 Oct '24

16 Oct '24

# Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4) Announcement ID: SUSE-SU-2024:3643-1 Release Date: 2024-10-16T05:03:45Z Rating: important References: * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2024-35861 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3643=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-3643=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-13-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_92-default-debuginfo-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_19-debugsource-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_92-default-13-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

openSUSE-RU-2024:0336-1: moderate: Recommended update for libzypp-testsuite-tools
by maintenance＠opensuse.org 15 Oct '24

15 Oct '24

openSUSE Recommended Update: Recommended update for libzypp-testsuite-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0336-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update rebuilds libzypp-testsuite-tools against current libzypp. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-336=1 - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-336=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): libzypp-testsuite-tools-5.0.5-bp156.3.2.1 - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libzypp-testsuite-tools-5.0.5-bp155.2.2.1 References:

1 0

SUSE-SU-2024:3638-1: important: Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP5)
by OPENSUSE-UPDATES 15 Oct '24

15 Oct '24

# Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3638-1 Release Date: 2024-10-15T12:03:46Z Rating: important References: * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2024-35861 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_21 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3638=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3638=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_6-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-debuginfo-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-13-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_6-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-debuginfo-13-150500.2.1 * kernel-livepatch-5_14_21-150500_13_21-rt-13-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3639-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
by OPENSUSE-UPDATES 15 Oct '24

15 Oct '24

# Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:3639-1 Release Date: 2024-10-15T12:03:52Z Rating: important References: * bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225310 * bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786 Cross-References: * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52846 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 CVSS scores: * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 14 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3639=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3639=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo-7-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-7-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource-7-150500.11.6.1 * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo-7-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-7-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource-7-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786

1 0

SUSE-SU-2024:3633-1: moderate: Security update for keepalived
by OPENSUSE-UPDATES 15 Oct '24

15 Oct '24

# Security update for keepalived Announcement ID: SUSE-SU-2024:3633-1 Release Date: 2024-10-15T09:20:42Z Rating: moderate References: * bsc#1228123 Cross-References: * CVE-2024-41184 CVSS scores: * CVE-2024-41184 ( SUSE ): 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for keepalived fixes the following issues: * CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3633=1 openSUSE-SLE-15.6-2024-3633=1 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2024-3633=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * keepalived-debugsource-2.2.8-150600.3.5.1 * keepalived-2.2.8-150600.3.5.1 * keepalived-debuginfo-2.2.8-150600.3.5.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * keepalived-debugsource-2.2.8-150600.3.5.1 * keepalived-2.2.8-150600.3.5.1 * keepalived-debuginfo-2.2.8-150600.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-41184.html * https://bugzilla.suse.com/show_bug.cgi?id=1228123

1 0

SUSE-SU-2024:3634-1: moderate: Security update for keepalived
by OPENSUSE-UPDATES 15 Oct '24

15 Oct '24

# Security update for keepalived Announcement ID: SUSE-SU-2024:3634-1 Release Date: 2024-10-15T09:21:36Z Rating: moderate References: * bsc#1228123 Cross-References: * CVE-2024-41184 CVSS scores: * CVE-2024-41184 ( SUSE ): 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for keepalived fixes the following issues: * CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-3634=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3634=1 openSUSE-SLE-15.5-2024-3634=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3634=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3634=1 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * keepalived-2.2.2-150500.8.5.1 * keepalived-debuginfo-2.2.2-150500.8.5.1 * keepalived-debugsource-2.2.2-150500.8.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * keepalived-2.2.2-150500.8.5.1 * keepalived-debuginfo-2.2.2-150500.8.5.1 * keepalived-debugsource-2.2.2-150500.8.5.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * keepalived-2.2.2-150500.8.5.1 * keepalived-debuginfo-2.2.2-150500.8.5.1 * keepalived-debugsource-2.2.2-150500.8.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * keepalived-2.2.2-150500.8.5.1 * keepalived-debuginfo-2.2.2-150500.8.5.1 * keepalived-debugsource-2.2.2-150500.8.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-41184.html * https://bugzilla.suse.com/show_bug.cgi?id=1228123

1 0

SUSE-RU-2024:3637-1: moderate: Recommended update for python-maturin
by OPENSUSE-UPDATES 15 Oct '24

15 Oct '24

# Recommended update for python-maturin Announcement ID: SUSE-RU-2024:3637-1 Release Date: 2024-10-15T10:07:30Z Rating: moderate References: * bsc#1230027 Affected Products: * openSUSE Leap 15.6 An update that has one fix can now be installed. ## Description: This update for python-maturin fixes the following issues: * update vendored rust libraries including shlex to version 1.3.0 (bsc#1230027) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-3637=1 openSUSE-SLE-15.6-2024-3637=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python311-maturin-1.4.0-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1230027

1 0