SUSE-SU-2024:0076-1

Опубликовано: 10 янв. 2024

Источник: suse-cvrf

Описание

Security update for hawk2

This update for hawk2 fixes the following issues:

Fixed HttpOnly secure flag by default (bsc#1216508).
Fixed CSRF in errors_controller.rb protection (bsc#1216571).

Update to version 2.6.4+git.1702030539.5fb7d91b:

Fix mime type issue in MS windows (bsc#1215438)
Parametrize CORS Access-Control-Allow-Origin header (bsc#1213454)
Tests: upgrate tests for ruby3.2 (tumbleweed) (bsc#1215976)
Upgrade for ruby3.2 (tumbleweed) (bsc#1215976)
Forbid special symbols in the category (bsc#1206217)
Fix the sass-rails version on ~5.0 (bsc#1208533)
Don't delete the private key if the public key is missing (bsc#1207930)
make-sle155-compatible.patch . No bsc, it's for backwards compatibility.

Список пакетов

Image SLES15-SP2-SAP-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP2-SAP-BYOS-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP3-SAP-BYOS-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP3-SAP-BYOS-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-BYOS-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-BYOS-EC2

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-BYOS-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Hardened

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Hardened-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Hardened-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP4-SAP-Hardened-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Azure-3P

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-BYOS-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-BYOS-EC2

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-BYOS-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Hardened-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP5-SAP-Hardened-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-BYOS-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-BYOS-EC2

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-BYOS-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Hardened

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Hardened-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Hardened-BYOS

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Hardened-EC2

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Image SLES15-SP6-SAP-Hardened-GCE

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

SUSE Linux Enterprise High Availability Extension 15 SP1

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

SUSE Linux Enterprise High Availability Extension 15 SP2

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

SUSE Linux Enterprise High Availability Extension 15 SP3

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

SUSE Linux Enterprise High Availability Extension 15 SP4

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

SUSE Linux Enterprise High Availability Extension 15 SP5

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

openSUSE Leap 15.4

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

openSUSE Leap 15.5

hawk2-2.6.4+git.1702030539.5fb7d91b-150000.3.39.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240076-1/
Link for SUSE-SU-2024:0076-1
https://lists.suse.com/pipermail/sle-security-updates/2024-January/017613.html
E-Mail link for SUSE-SU-2024:0076-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1206217
SUSE Bug 1206217
https://bugzilla.suse.com/1207930
SUSE Bug 1207930
https://bugzilla.suse.com/1208533
SUSE Bug 1208533
https://bugzilla.suse.com/1213454
SUSE Bug 1213454
https://bugzilla.suse.com/1215438
SUSE Bug 1215438
https://bugzilla.suse.com/1215976
SUSE Bug 1215976
https://bugzilla.suse.com/1216508
SUSE Bug 1216508
https://bugzilla.suse.com/1216571
SUSE Bug 1216571