SUSE-RU-2024:0433-1: Recommended update for source-highlight
This update for source-highlight fixes the following issues: Version update to 3.1.9: changed esc.style to work better with dark theme terminals updated C and C++ to more recent standards fixed zsh.lang added new Python keywords added Rust added ixpe
added vim
ships it to missing service packs like SUSE Linux Enterprise 15 SP3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/source-highlight-debugsourceto a version that resolves this vulnerability.Fixed in 3.1.9-150000.3.7.1 - Upgrade
Upgrade
suse/libsource-highlight4-debuginfoto a version that resolves this vulnerability.Fixed in 3.1.9-150000.3.7.1 - Upgrade
Upgrade
suse/libsource-highlight4to a version that resolves this vulnerability.Fixed in 3.1.9-150000.3.7.1 - Upgrade
Upgrade
suse/libsource-highlight-develto a version that resolves this vulnerability.Fixed in 3.1.9-150000.3.7.1 - Upgrade
Upgrade
suse/source-highlight-cgito a version that resolves this vulnerability.Fixed in 3.1.9-150000.3.7.1 - Upgrade
Upgrade
suse/source-highlight-cgi-debuginfoto a version that resolves this vulnerability.Fixed in 3.1.9-150000.3.7.1 - Upgrade
Upgrade
suse/source-highlightto a version that resolves this vulnerability.Fixed in 3.1.9-150000.3.7.1 - Upgrade
Upgrade
suse/source-highlight-debuginfoto a version that resolves this vulnerability.Fixed in 3.1.9-150000.3.7.1 - Upgrade
Upgrade
suse/libsource-highlight4to a version that resolves this vulnerability.Fixed in 32bit-3.1.9-150000.3.7.1 - Upgrade
Upgrade
suse/libsource-highlight4to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.1.9-150000.3.7.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2024-433=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-433=1
Event History
Frequently Asked Questions
Which systems are covered by this update?
The update applies to SUSE Linux Enterprise Server 15 SP2 LTSS, 15 SP3 LTSS, and 15 SP4 LTSS on aarch64, ppc64le, s390x, and x86_64. It includes the libsource-highlight4 runtime and development packages, debug packages, and source-highlight debug source.
Does this advisory identify a security vulnerability or exploitation scenario?
No. The provided information describes a recommended update to source-highlight version 3.1.9 with language-definition, terminal-theme, and service-pack availability improvements. It does not provide a vulnerability identifier, attack vector, exploit prerequisites, or mitigation guidance.