SUSE Image Update Advisory: suse-sles-15-sp5-chost-byos-v20240809-x86_64-gen2 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2024:839-1 Image Tags : suse-sles-15-sp5-chost-byos-v20240809-x86_64-gen2:20240809 Image Release : Severity : important Type : security References : 1208690 1226412 1226529 1228256 1228257 1228258 CVE-2024-1737 CVE-2024-1975 CVE-2024-4076 ----------------------------------------------------------------- The container suse-sles-15-sp5-chost-byos-v20240809-x86_64-gen2 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:2696-1 Released: Thu Aug 1 15:20:51 2024 Summary: Recommended update for dracut Type: recommended Severity: moderate References: 1208690,1226412,1226529 This update for dracut fixes the following issues: - Version update: * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529) * fix(mdraid): try to assemble the missing raid device (bsc#1226412) * fix(dracut-install): continue parsing if ldd prints 'cannot be preloaded' (bsc#1208690) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:2862-1 Released: Fri Aug 9 09:20:34 2024 Summary: Security update for bind Type: security Severity: important References: 1228256,1228257,1228258,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076 This update for bind fixes the following issues: Update to 9.16.50: - Bug Fixes: * A regression in cache-cleaning code enabled memory use to grow significantly more quickly than before, until the configured max-cache-size limit was reached. This has been fixed. * Using rndc flush inadvertently caused cache cleaning to become less effective. This could ultimately lead to the configured max-cache-size limit being exceeded and has now been fixed. * The logic for cleaning up expired cached DNS records was tweaked to be more aggressive. This change helps with enforcing max-cache-ttl and max-ncache-ttl in a timely manner. * It was possible to trigger a use-after-free assertion when the overmem cache cleaning was initiated. This has been fixed. New Features: * Added RESOLVER.ARPA to the built in empty zones. - Security Fixes: * It is possible to craft excessively large numbers of resource record types for a given owner name, which has the effect of slowing down database processing. This has been addressed by adding a configurable limit to the number of records that can be stored per name and type in a cache or zone database. The default is 100, which can be tuned with the new max-types-per-name option. (CVE-2024-1737, bsc#1228256) * Validating DNS messages signed using the SIG(0) protocol (RFC 2931) could cause excessive CPU load, leading to a denial-of-service condition. Support for SIG(0) message validation was removed from this version of named. (CVE-2024-1975, bsc#1228257) * When looking up the NS records of parent zones as part of looking up DS records, it was possible for named to trigger an assertion failure if serve-stale was enabled. This has been fixed. (CVE-2024-4076, bsc#1228258) The following package changes have been done: - bind-utils-9.16.50-150500.8.21.1 updated - docker-25.0.6_ce-150000.203.1 updated - dracut-055+suse.388.g70c21afa-150500.3.21.2 updated - gettext-runtime-0.20.2-1.43 removed - glibc-2.31-150300.83.1 removed - glibc-locale-2.31-150300.83.1 removed - glibc-locale-base-2.31-150300.83.1 removed - gpg2-2.2.27-150300.3.8.1 removed - gptfdisk-1.0.8-150400.1.7 removed - grep-3.1-150000.4.6.1 removed - growpart-0.31-5.9.3 removed - grub2-2.06-150500.29.25.12 removed - grub2-i386-pc-2.06-150500.29.25.12 removed - grub2-x86_64-efi-2.06-150500.29.25.12 removed - gzip-1.10-150200.10.1 removed - haveged-1.9.14-150400.3.3.1 removed - hostname-3.16-2.22 removed - hwdata-0.380-150000.3.68.1 removed - hwinfo-21.85-150500.3.3.1 removed - hyper-v-8-150200.14.8.1 removed - info-6.5-4.17 removed - iproute2-5.14-150400.1.8 removed - iptables-1.8.7-1.1 removed - iputils-20221126-150500.3.8.2 removed - jq-1.6-3.3.1 removed - kbd-2.4.0-150400.5.6.1 removed - kbd-legacy-2.4.0-150400.5.6.1 removed - kdump-1.0.2+git47.g28549ab-150500.3.6.1 removed - kernel-default-5.14.21-150500.55.68.1 removed - kexec-tools-2.0.20-150500.18.3 removed - keyutils-1.6.3-5.6.1 removed - kmod-29-4.15.1 removed - krb5-1.20.1-150500.3.9.1 removed - less-590-150400.3.9.1 removed - libabsl2401_0_0-20240116.1-150500.13.7.8 removed - libacl1-2.2.52-4.3.1 removed - libapparmor1-3.0.4-150500.11.9.1 removed - libargon2-1-0.0+git20171227.670229c-2.14 removed - libasm1-0.185-150400.5.3.1 removed - libassuan0-2.5.5-150000.4.5.2 removed - libattr1-2.4.47-2.19 removed - libaudit1-3.0.6-150400.4.16.1 removed - libaugeas0-1.12.0-150400.3.3.6 removed - libauparse0-3.0.6-150400.4.16.1 removed - libavahi-client3-0.8-150400.7.16.1 removed - libavahi-common3-0.8-150400.7.16.1 removed - libblkid1-2.37.4-150500.9.11.1 removed - libblogger2-2.26-150300.4.6.1 removed - libboost_system1_66_0-1.66.0-12.3.1 removed - libboost_thread1_66_0-1.66.0-12.3.1 removed - libbrotlicommon1-1.0.7-3.3.1 removed - libbrotlidec1-1.0.7-3.3.1 removed - libbz2-1-1.0.8-150400.1.122 removed - libcap-ng0-0.7.9-4.37 removed - libcap2-2.63-150400.3.3.1 removed - libcares2-1.19.1-150000.3.26.1 removed - libcbor0-0.5.0-150100.4.6.1 removed - libcom_err2-1.46.4-150400.3.6.2 removed - libcpupower0-5.14-150500.9.3.1 removed - libcrack2-2.9.7-11.6.1 removed - libcrypt1-4.4.15-150300.4.7.1 removed - libcryptsetup12-2.4.3-150400.3.3.1 removed - libcurl4-8.0.1-150400.5.44.1 removed - libdbus-1-3-1.12.2-150400.18.8.1 removed - libdevmapper1_03-2.03.22_1.02.196-150500.7.9.1 removed - libdw1-0.185-150400.5.3.1 removed - libeconf0-0.5.2-150400.3.6.1 removed - libedit0-3.1.snap20150325-2.12 removed - libefivar1-37-6.12.1 removed - libelf1-0.185-150400.5.3.1 removed - libesmtp-1.0.6-150.4.1 removed - libestr0-0.1.10-1.25 removed - libevent-2_1-8-2.1.8-2.23 removed - libexpat1-2.4.4-150400.3.17.1 removed - libext2fs2-1.46.4-150400.3.6.2 removed - libfastjson4-0.99.9-150400.3.3.1 removed - libfdisk1-2.37.4-150500.9.11.1 removed - libffi7-3.2.1.git259-10.8 removed - libfido2-1-1.13.0-150400.5.6.1 removed - libfipscheck1-1.4.1-3.3.1 removed - libfreetype6-2.10.4-150000.4.15.1 removed - libfstrm0-0.6.1-150300.9.5.1 removed - libfuse2-2.9.7-3.3.1 removed - libgcc_s1-13.3.0+git8781-150000.1.12.1 removed - libgcrypt20-1.9.4-150500.10.19 removed - libgdbm4-1.12-1.418 removed - libglib-2_0-0-2.70.5-150400.3.11.1 removed - libgmp10-6.1.2-4.9.1 removed - libgnutls30-3.7.3-150400.4.44.1 removed - libgpg-error0-1.42-150400.1.101 removed - libgpgme11-1.16.0-150400.1.80 removed - libhavege2-1.9.14-150400.3.3.1 removed - libhidapi-hidraw0-0.10.1-150300.3.2.1 removed - libhogweed6-3.8.1-150500.2.25 removed - libidn2-0-2.2.0-3.6.1 removed - libinih0-53-150400.1.7 removed - libip4tc2-1.8.7-1.1 removed - libip6tc2-1.8.7-1.1 removed - libjitterentropy3-3.4.1-150000.1.12.1 removed - libjq1-1.6-3.3.1 removed - libjson-c3-0.13-3.3.1 removed - libkeyutils1-1.6.3-5.6.1 removed - libkmod2-29-4.15.1 removed - libksba8-1.3.5-150000.4.6.1 removed - libldap-2_4-2-2.4.46-150200.14.17.1 removed - libldap-data-2.4.46-150200.14.17.1 removed - libldb2-2.6.2-150500.1.1 removed - liblmdb-0_9_30-0.9.30-150500.1.1 removed - liblogging0-1.0.6-3.21 removed - liblognorm5-2.0.6-150000.3.3.1 removed - liblua5_3-5-5.3.6-3.6.1 removed - liblz4-1-1.9.3-150400.1.7 removed - liblzma5-5.2.3-150000.4.7.1 removed - liblzo2-2-2.10-2.22 removed - libmagic1-5.32-7.14.1 removed - libmaxminddb0-1.4.3-150000.1.8.1 removed - libmetalink3-0.1.3-150000.3.2.1 removed - libmnl0-1.0.4-1.25 removed - libmount1-2.37.4-150500.9.11.1 removed - libncurses6-6.1-150000.5.24.1 removed - libnetfilter_conntrack3-1.0.7-1.38 removed - libnetfilter_cthelper0-1.0.0-1.21 removed - libnetfilter_cttimeout1-1.0.0-1.22 removed - libnettle8-3.8.1-150500.2.25 removed - libnfnetlink0-1.0.1-2.11 removed - libnftnl11-1.2.0-150400.1.6 removed - libnghttp2-14-1.40.0-150200.17.1 removed - libnl-config-3.3.0-1.29 removed - libnl3-200-3.3.0-1.29 removed - libnpth0-1.5-2.11 removed - libnscd1-2.0.2-3.21 removed - libnsl2-1.2.0-2.44 removed - libnss_usrfiles2-2.25-2.12 removed - libonig4-6.7.0-150000.3.6.1 removed - libopeniscsiusr0-0.2.0-150500.46.3.1 removed - libopenssl1_1-1.1.1l-150500.17.31.1 removed - libp11-kit0-0.23.22-150500.8.3.1 removed - libparted0-3.2-150300.21.3.1 removed - libpcap1-1.10.1-150400.1.7 removed - libpci3-3.5.6-150300.13.6.1 removed - libpcre1-8.45-150000.20.13.1 removed - libpcre2-8-0-10.39-150400.4.9.1 removed - libpng16-16-1.6.34-3.9.1 removed - libpopt0-1.16-3.22 removed - libprocps8-3.3.17-150000.7.39.1 removed - libprotobuf-c1-1.3.2-150200.3.9.1 removed - libprotobuf-lite25_1_0-25.1-150500.12.2.2 removed - libproxy1-0.4.17-150400.1.8 removed - libpsl5-0.20.1-150000.3.3.1 removed - libpython3_6m1_0-3.6.15-150300.10.65.1 removed - librdkafka1-0.11.6-1.8.1 removed - libreadline7-7.0-150400.25.22 removed - librelp0-1.11.0-150000.3.3.1 removed - libsasl2-3-2.1.28-150500.1.1 removed - libseccomp2-2.5.3-150400.2.4 removed - libselinux1-3.1-150400.1.69 removed - libsemanage1-3.1-150400.3.4.2 removed - libsepol1-3.1-150400.1.70 removed - libsigc-2_0-0-2.10.7-150400.3.3.1 removed - libsmartcols1-2.37.4-150500.9.11.1 removed - libsmi-0.4.8-1.29 removed - libsmi2-0.4.8-1.29 removed - libsnappy1-1.1.8-3.3.1 removed - libsolv-tools-0.7.29-150400.3.22.4 removed - libsolv-tools-base-0.7.29-150400.3.22.4 removed - libsqlite3-0-3.44.0-150000.3.23.1 removed - libssh-config-0.9.8-150400.3.6.1 removed - libssh4-0.9.8-150400.3.6.1 removed - libstdc++6-13.3.0+git8781-150000.1.12.1 removed - libsystemd0-249.17-150400.8.40.1 removed - libtalloc2-2.3.4-150500.1.1 removed - libtasn1-4.13-150000.4.8.1 removed - libtasn1-6-4.13-150000.4.8.1 removed - libtdb1-1.4.7-150500.1.1 removed - libtevent0-0.13.0-150500.1.1 removed - libtextstyle0-0.20.2-1.43 removed - libtirpc-netconfig-1.3.4-150300.3.23.1 removed - libtirpc3-1.3.4-150300.3.23.1 removed - libtss2-esys0-3.1.0-150400.3.6.1 removed - libtss2-fapi1-3.1.0-150400.3.6.1 removed - libtss2-mu0-3.1.0-150400.3.6.1 removed - libtss2-rc0-3.1.0-150400.3.6.1 removed - libtss2-sys1-3.1.0-150400.3.6.1 removed - libtss2-tctildr0-3.1.0-150400.3.6.1 removed - libudev1-249.17-150400.8.40.1 removed - libunistring2-0.9.10-1.1 removed - libusb-1_0-0-1.0.24-150400.3.3.1 removed - libutempter0-1.1.6-3.42 removed - libuuid1-2.37.4-150500.9.11.1 removed - libuv1-1.44.2-150500.3.2.1 removed - libverto1-0.2.6-3.20 removed - libwrap0-7.6-1.433 removed - libx86emu3-3.1-1.23 removed - libxml2-2-2.10.3-150500.5.17.1 removed - libxslt1-1.1.34-150400.3.3.1 removed - libxtables12-1.8.7-1.1 removed - libyajl2-2.1.0-150000.4.6.1 removed - libyaml-cpp0_6-0.6.3-150400.4.3.1 removed - libz1-1.2.13-150500.4.3.1 removed - libzck1-1.1.16-150400.3.7.1 removed - libzio1-1.06-2.20 removed - libzstd1-1.5.0-150400.3.3.1 removed - libzypp-17.34.1-150500.6.2.1 removed - login_defs-4.8.1-150400.10.15.1 removed - logrotate-3.18.1-150400.3.7.1 removed - makedumpfile-1.7.0-150400.4.3.1 removed - mokutil-0.5.0-150400.3.3.1 removed - ncurses-utils-6.1-150000.5.24.1 removed - net-tools-2.0+git20170221.479bb4a-3.11 removed - netcfg-11.6-150000.3.6.1 removed - nfs-client-2.1.1-150500.22.3.1 removed - nfsidmap-0.26-150000.3.7.1 removed - open-iscsi-2.1.9-150500.46.3.1 removed - openssh-8.4p1-150300.3.37.1 removed - openssh-clients-8.4p1-150300.3.37.1 removed - openssh-common-8.4p1-150300.3.37.1 removed - openssh-server-8.4p1-150300.3.37.1 removed - openssl-1.1.1l-150400.1.5 removed - openssl-1_1-1.1.1l-150500.17.31.1 removed - p11-kit-0.23.22-150500.8.3.1 removed - p11-kit-tools-0.23.22-150500.8.3.1 removed - pam-1.3.0-150000.6.66.1 removed - pam-config-1.1-150200.3.6.1 removed - parted-3.2-150300.21.3.1 removed - pciutils-3.5.6-150300.13.6.1 removed - perl-5.26.1-150300.17.17.1 removed - perl-Bootloader-0.947-150400.3.12.1 removed - perl-base-5.26.1-150300.17.17.1 removed - permissions-20201225-150400.5.16.1 removed - pigz-2.3.3-1.28 removed - pinentry-1.1.0-4.3.1 removed - pkg-config-0.29.2-1.436 removed - procps-3.3.17-150000.7.39.1 removed - python-azure-agent-2.9.1.1-150100.3.37.3 removed - python-azure-agent-config-server-2.9.1.1-150100.3.37.3 removed - python-instance-billing-flavor-check-0.0.6-150000.1.9.1 removed - python3-3.6.15-150300.10.65.2 removed - python3-Babel-2.8.0-3.3.1 removed - python3-Jinja2-2.10.1-150000.3.13.1 removed - python3-MarkupSafe-1.0-1.29 removed - python3-PyJWT-2.4.0-150200.3.8.1 removed - python3-PyYAML-5.4.1-1.1 removed - python3-apipkg-2.1.0-150500.1.1 removed - python3-appdirs-1.4.3-1.21 removed - python3-asn1crypto-0.24.0-3.2.1 removed - python3-attrs-19.3.0-150200.3.6.1 removed - python3-base-3.6.15-150300.10.65.1 removed - python3-bind-9.16.48-150500.8.16.1 removed - python3-blinker-1.4-150000.3.6.1 removed - python3-certifi-2018.1.18-150000.3.3.1 removed - python3-cffi-1.13.2-3.2.5 removed - python3-chardet-3.0.4-150000.5.3.1 removed - python3-configobj-5.0.6-150000.3.3.1 removed - python3-cryptography-3.3.2-150400.23.1 removed - python3-cssselect-1.0.3-150000.3.5.1 removed - python3-distro-1.5.0-3.5.1 removed - python3-idna-2.6-150000.3.3.1 removed - python3-importlib-metadata-1.5.0-150100.3.5.1 removed - python3-iniconfig-1.1.1-150000.1.11.1 removed - python3-jsonpatch-1.23-150100.3.5.1 removed - python3-jsonpointer-1.14-150000.3.2.1 removed - python3-jsonschema-3.2.0-150200.9.5.1 removed - python3-lxml-4.9.1-150500.1.2 removed - python3-more-itertools-8.10.0-150400.7.1 removed - python3-netifaces-0.10.6-150000.3.2.1 removed - python3-oauthlib-2.0.6-150000.3.6.1 removed - python3-ordered-set-4.0.2-150400.8.34 removed - python3-packaging-21.3-150200.3.3.1 removed - python3-passlib-1.7.4-150300.3.2.1 removed - python3-ply-3.10-150000.3.5.1 removed - python3-py-1.10.0-150100.5.12.1 removed - python3-pyOpenSSL-21.0.0-150400.7.62 removed - python3-pyasn1-0.4.2-150000.3.5.1 removed - python3-pycparser-2.17-3.2.1 removed - python3-pyparsing-2.4.7-1.24 removed - python3-pyrsistent-0.14.4-150100.3.4.1 removed - python3-pyserial-3.4-150000.3.4.1 removed - python3-pytz-2022.1-150300.3.6.1 removed - python3-requests-2.25.1-150300.3.12.2 removed - python3-setuptools-44.1.1-150400.9.6.1 removed - python3-six-1.14.0-12.1 removed - python3-urllib3-1.25.10-150300.4.9.1 removed - python3-zipp-0.6.0-150100.3.5.1 removed - rpcbind-0.2.3-5.9.2 removed - rpm-config-SUSE-1-150400.14.3.1 removed - rpm-ndb-4.14.3-150400.59.16.1 removed - rsyslog-8.2306.0-150400.5.27.1 removed - rsyslog-module-relp-8.2306.0-150400.5.27.1 removed - runc-1.1.12-150000.64.1 removed - samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7 removed - sed-4.4-150300.13.3.1 removed - shadow-4.8.1-150400.10.15.1 removed - shim-15.8-150300.4.20.2 removed - sle-module-basesystem-release-15.5-150500.43.2 removed - sle-module-containers-release-15.5-150500.43.2 removed - sle-module-public-cloud-release-15.5-150500.43.2 removed - sle-module-server-applications-release-15.5-150500.43.2 removed - sles-release-15.5-150500.43.4 removed - socat-1.8.0.0-150400.14.3.1 removed - sudo-1.9.12p1-150500.7.10.1 removed - supportutils-3.1.30-150300.7.35.30.1 removed - supportutils-plugin-suse-public-cloud-1.0.9-150000.3.20.1 removed - suse-build-key-12.0-150000.8.49.2 removed - suse-module-tools-15.5.5-150500.3.12.2 removed - suseconnect-ng-1.9.0-150500.3.21.2 removed - sysconfig-0.85.9-150200.12.1 removed - sysconfig-netconfig-0.85.9-150200.12.1 removed - syslog-service-2.0-11.2 removed - system-group-audit-3.0.6-150400.4.16.1 removed - system-group-hardware-20170617-150400.24.2.1 removed - system-group-kvm-20170617-150400.24.2.1 removed - system-group-wheel-20170617-150400.24.2.1 removed - system-user-nobody-20170617-150400.24.2.1 removed - system-user-root-20190513-3.3.1 removed - systemd-249.17-150400.8.40.1 removed - systemd-default-settings-0.10-150300.3.7.1 removed - systemd-default-settings-branding-SLE-0.10-150300.3.7.1 removed - systemd-presets-branding-SLE-15.1-150100.20.14.1 removed - systemd-presets-common-SUSE-15-150500.20.6.1 removed - systemd-rpm-macros-15-150000.7.39.1 removed - systemd-sysvinit-249.17-150400.8.40.1 removed - sysuser-shadow-3.2-150400.3.5.3 removed - sysvinit-tools-2.99-1.1 removed - tar-1.34-150000.3.34.1 removed - tcpdump-4.99.1-150400.1.8 removed - terminfo-6.1-150000.5.24.1 removed - terminfo-base-6.1-150000.5.24.1 removed - timezone-2024a-150000.75.28.1 removed - tpm2.0-tools-5.2-150400.6.3.1 removed - udev-249.17-150400.8.40.1 removed - update-alternatives-1.19.0.4-150000.4.4.1 removed - util-linux-2.37.4-150500.9.11.1 removed - util-linux-systemd-2.37.4-150500.9.11.1 removed - vim-9.1.0330-150500.20.12.1 removed - vim-data-common-9.1.0330-150500.20.12.1 removed - wget-1.20.3-150000.3.20.1 removed - which-2.21-2.20 removed - wicked-0.6.75-150500.3.29.1 removed - wicked-service-0.6.75-150500.3.29.1 removed - xen-libs-4.17.4_02-150500.3.30.1 removed - xfsprogs-5.13.0-150400.3.10.2 removed - xtables-plugins-1.8.7-1.1 removed - xz-5.2.3-150000.4.7.1 removed - zstd-1.5.0-150400.3.3.1 removed - zypper-1.14.73-150500.6.2.1 removed