Linux · SUSE Linux Enterprise · Security advisory · June 25, 2024

SUSE-SU-2024:2195-1: Security update for 29 packages

SUSE-SU-2024:2195-1, released June 25, 2024, fixes 13 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
13
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0232
83rd percentile

Priority of the 13 CVEs

Patch now 0 Urgent 2 High 6 Routine 5

Fixed package versions

ProductReleaseFixed in
hdf5_1_10_11-gnu-hpcopensuse-leap 15.61.10.11-150400.3.17.1
hdf5_1_10_11-gnu-hpcsles 15.61.10.11-150400.3.17.1
hdf5_1_10_11-gnu-mpich-hpcopensuse-leap 15.61.10.11-150400.3.17.2
hdf5_1_10_11-gnu-mpich-hpcsles 15.61.10.11-150400.3.17.2
hdf5_1_10_11-gnu-mvapich2-hpcopensuse-leap 15.61.10.11-150400.3.17.2
hdf5_1_10_11-gnu-mvapich2-hpcsles 15.61.10.11-150400.3.17.2
hdf5_1_10_11-gnu-openmpi3-hpcopensuse-leap 15.61.10.11-150400.3.17.2
hdf5_1_10_11-gnu-openmpi3-hpcsles 15.61.10.11-150400.3.17.2
hdf5_1_10_11-gnu-openmpi4-hpcopensuse-leap 15.61.10.11-150400.3.17.2
hdf5_1_10_11-gnu-openmpi4-hpcsles 15.61.10.11-150400.3.17.2
lua51-luaposixopensuse-leap 15.634.1.1-150200.3.5.1
lua51-luatermopensuse-leap 15.60.07-150000.5.5.1
lua53-luafilesystemsles 15.61.7.0-150000.3.5.1
lua53-luaposixopensuse-leap 15.634.1.1-150200.3.5.1
lua53-luaposixsles 15.634.1.1-150200.3.5.1
lua53-luatermopensuse-leap 15.60.07-150000.5.5.1
lua53-luatermsles 15.60.07-150000.5.5.1
mpichopensuse-leap 15.64.1.2-150600.3.2.1
mpichsles 15.64.1.2-150600.3.2.1
mpich-ofiopensuse-leap 15.64.1.2-150600.3.2.1
mpich-ofisles 15.64.1.2-150600.3.2.1
mpich-ofi_4_0_2-gnu-hpcopensuse-leap 15.64.0.2-150500.3.2.1
mpich-ofi_4_1_2-gnu-hpcopensuse-leap 15.64.1.2-150600.3.2.1
mpich-ofi_4_1_2-gnu-hpcsles 15.64.1.2-150600.3.2.1
mpich_4_0_2-gnu-hpcopensuse-leap 15.64.0.2-150500.3.2.1
mpich_4_1_2-gnu-hpcopensuse-leap 15.64.1.2-150600.3.2.1
mpich_4_1_2-gnu-hpcsles 15.64.1.2-150600.3.2.1
mvapich2opensuse-leap 15.62.3.7-150600.9.2.1
mvapich2sles 15.62.3.7-150600.9.2.1
mvapich2-psmopensuse-leap 15.62.3.7-150500.3.2.1
mvapich2-psm2opensuse-leap 15.62.3.7-150600.9.2.1
mvapich2-psm2sles 15.62.3.7-150600.9.2.1
mvapich2-psm2_2_3_7-gnu-hpcopensuse-leap 15.62.3.7-150600.9.2.1
mvapich2-psm2_2_3_7-gnu-hpcsles 15.62.3.7-150600.9.2.1
mvapich2-psm_2_3_7-gnu-hpcopensuse-leap 15.62.3.7-150500.3.2.1
mvapich2_2_3_7-gnu-hpcopensuse-leap 15.62.3.7-150600.9.2.1
mvapich2_2_3_7-gnu-hpcsles 15.62.3.7-150600.9.2.1
openmpi4opensuse-leap 15.64.1.6-150600.3.2.1
openmpi4sles 15.64.1.6-150600.3.2.1
openmpi4-testsuiteopensuse-leap 15.64.1.6-150600.3.2.1
openmpi_4_1_4-gnu-hpcopensuse-leap 15.64.1.4-150500.3.2.1
openmpi_4_1_4-gnu-hpc-testsuiteopensuse-leap 15.64.1.4-150500.3.2.1
openmpi_4_1_6-gnu-hpcopensuse-leap 15.64.1.6-150600.3.2.1
openmpi_4_1_6-gnu-hpcsles 15.64.1.6-150600.3.2.1
openmpi_4_1_6-gnu-hpc-testsuiteopensuse-leap 15.64.1.6-150600.3.2.1
pmixopensuse-leap 15.63.2.3-150300.3.10.1
pmixsles 15.63.2.3-150300.3.10.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2024-33874 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...9.8 0.0093 None reported
Urgent CVE-2024-32608 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...9.8 0.0067 None reported
High CVE-2024-32614 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...8.8 0.0094 None reported
High CVE-2024-33873 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...8.8 0.0091 None reported
High CVE-2024-29161 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...8.8 0.0086 None reported
High CVE-2024-32620 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...7.4 0.0025 None reported
High CVE-2024-32619 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...7.4 0.0024 None reported
High CVE-2024-29158 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...7.4 0.0022 None reported
Routine CVE-2018-11205 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...n/a 0.0232 None reported
Routine CVE-2017-17507 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...n/a 0.0115 None reported
Routine CVE-2024-32610 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...5.7 0.0023 None reported
Routine CVE-2024-33875 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...5.7 0.0023 None reported
Routine CVE-2024-29166 hdf5_1_10_11-gnu-hpc: This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, C...5.7 0.0021 None reported
Showing 1 to 13 of 13 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.