January 2023 - openSUSE Security Announce

SUSE-SU-2023:0074-1: important: Security update for php8
by opensuse-security＠opensuse.org 11 Jan '23

11 Jan '23

SUSE Security Update: Security update for php8 ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0074-1 Rating: important References: #1206958 Cross-References: CVE-2022-31631 CVSS scores: CVE-2022-31631 (SUSE): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Web Scripting 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php8 fixes the following issues: - Updated to version 8.0.27: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string (bsc#1206958). Non-security fixes: - Fixed a NULL pointer dereference with -w/-s options. - Fixed a crash in Generator when interrupted during argument evaluation with extra named params. - Fixed a crash in Generator when memory limit was exceeded during initialization. - Fixed a memory leak in Generator when interrupted during argument evaluation. - Fixed an issue in the DateTimeZone constructor where an extra null byte could be added to the input. - Fixed a hang in SaltStack when using php-fpm 8.1.11. - Fixed mysqli_query warnings being shown despite using silenced error mode. - Fixed a NULL pointer dereference when serializing a SOAP response call. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-74=1 - SUSE Linux Enterprise Module for Web Scripting 15-SP4: zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP4-2023-74=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): apache2-mod_php8-8.0.27-150400.4.23.1 apache2-mod_php8-debuginfo-8.0.27-150400.4.23.1 apache2-mod_php8-debugsource-8.0.27-150400.4.23.1 php8-8.0.27-150400.4.23.1 php8-bcmath-8.0.27-150400.4.23.1 php8-bcmath-debuginfo-8.0.27-150400.4.23.1 php8-bz2-8.0.27-150400.4.23.1 php8-bz2-debuginfo-8.0.27-150400.4.23.1 php8-calendar-8.0.27-150400.4.23.1 php8-calendar-debuginfo-8.0.27-150400.4.23.1 php8-cli-8.0.27-150400.4.23.1 php8-cli-debuginfo-8.0.27-150400.4.23.1 php8-ctype-8.0.27-150400.4.23.1 php8-ctype-debuginfo-8.0.27-150400.4.23.1 php8-curl-8.0.27-150400.4.23.1 php8-curl-debuginfo-8.0.27-150400.4.23.1 php8-dba-8.0.27-150400.4.23.1 php8-dba-debuginfo-8.0.27-150400.4.23.1 php8-debuginfo-8.0.27-150400.4.23.1 php8-debugsource-8.0.27-150400.4.23.1 php8-devel-8.0.27-150400.4.23.1 php8-dom-8.0.27-150400.4.23.1 php8-dom-debuginfo-8.0.27-150400.4.23.1 php8-embed-8.0.27-150400.4.23.1 php8-embed-debuginfo-8.0.27-150400.4.23.1 php8-embed-debugsource-8.0.27-150400.4.23.1 php8-enchant-8.0.27-150400.4.23.1 php8-enchant-debuginfo-8.0.27-150400.4.23.1 php8-exif-8.0.27-150400.4.23.1 php8-exif-debuginfo-8.0.27-150400.4.23.1 php8-fastcgi-8.0.27-150400.4.23.1 php8-fastcgi-debuginfo-8.0.27-150400.4.23.1 php8-fastcgi-debugsource-8.0.27-150400.4.23.1 php8-fileinfo-8.0.27-150400.4.23.1 php8-fileinfo-debuginfo-8.0.27-150400.4.23.1 php8-fpm-8.0.27-150400.4.23.1 php8-fpm-debuginfo-8.0.27-150400.4.23.1 php8-fpm-debugsource-8.0.27-150400.4.23.1 php8-ftp-8.0.27-150400.4.23.1 php8-ftp-debuginfo-8.0.27-150400.4.23.1 php8-gd-8.0.27-150400.4.23.1 php8-gd-debuginfo-8.0.27-150400.4.23.1 php8-gettext-8.0.27-150400.4.23.1 php8-gettext-debuginfo-8.0.27-150400.4.23.1 php8-gmp-8.0.27-150400.4.23.1 php8-gmp-debuginfo-8.0.27-150400.4.23.1 php8-iconv-8.0.27-150400.4.23.1 php8-iconv-debuginfo-8.0.27-150400.4.23.1 php8-intl-8.0.27-150400.4.23.1 php8-intl-debuginfo-8.0.27-150400.4.23.1 php8-ldap-8.0.27-150400.4.23.1 php8-ldap-debuginfo-8.0.27-150400.4.23.1 php8-mbstring-8.0.27-150400.4.23.1 php8-mbstring-debuginfo-8.0.27-150400.4.23.1 php8-mysql-8.0.27-150400.4.23.1 php8-mysql-debuginfo-8.0.27-150400.4.23.1 php8-odbc-8.0.27-150400.4.23.1 php8-odbc-debuginfo-8.0.27-150400.4.23.1 php8-opcache-8.0.27-150400.4.23.1 php8-opcache-debuginfo-8.0.27-150400.4.23.1 php8-openssl-8.0.27-150400.4.23.1 php8-openssl-debuginfo-8.0.27-150400.4.23.1 php8-pcntl-8.0.27-150400.4.23.1 php8-pcntl-debuginfo-8.0.27-150400.4.23.1 php8-pdo-8.0.27-150400.4.23.1 php8-pdo-debuginfo-8.0.27-150400.4.23.1 php8-pgsql-8.0.27-150400.4.23.1 php8-pgsql-debuginfo-8.0.27-150400.4.23.1 php8-phar-8.0.27-150400.4.23.1 php8-phar-debuginfo-8.0.27-150400.4.23.1 php8-posix-8.0.27-150400.4.23.1 php8-posix-debuginfo-8.0.27-150400.4.23.1 php8-readline-8.0.27-150400.4.23.1 php8-readline-debuginfo-8.0.27-150400.4.23.1 php8-shmop-8.0.27-150400.4.23.1 php8-shmop-debuginfo-8.0.27-150400.4.23.1 php8-snmp-8.0.27-150400.4.23.1 php8-snmp-debuginfo-8.0.27-150400.4.23.1 php8-soap-8.0.27-150400.4.23.1 php8-soap-debuginfo-8.0.27-150400.4.23.1 php8-sockets-8.0.27-150400.4.23.1 php8-sockets-debuginfo-8.0.27-150400.4.23.1 php8-sodium-8.0.27-150400.4.23.1 php8-sodium-debuginfo-8.0.27-150400.4.23.1 php8-sqlite-8.0.27-150400.4.23.1 php8-sqlite-debuginfo-8.0.27-150400.4.23.1 php8-sysvmsg-8.0.27-150400.4.23.1 php8-sysvmsg-debuginfo-8.0.27-150400.4.23.1 php8-sysvsem-8.0.27-150400.4.23.1 php8-sysvsem-debuginfo-8.0.27-150400.4.23.1 php8-sysvshm-8.0.27-150400.4.23.1 php8-sysvshm-debuginfo-8.0.27-150400.4.23.1 php8-test-8.0.27-150400.4.23.1 php8-tidy-8.0.27-150400.4.23.1 php8-tidy-debuginfo-8.0.27-150400.4.23.1 php8-tokenizer-8.0.27-150400.4.23.1 php8-tokenizer-debuginfo-8.0.27-150400.4.23.1 php8-xmlreader-8.0.27-150400.4.23.1 php8-xmlreader-debuginfo-8.0.27-150400.4.23.1 php8-xmlwriter-8.0.27-150400.4.23.1 php8-xmlwriter-debuginfo-8.0.27-150400.4.23.1 php8-xsl-8.0.27-150400.4.23.1 php8-xsl-debuginfo-8.0.27-150400.4.23.1 php8-zip-8.0.27-150400.4.23.1 php8-zip-debuginfo-8.0.27-150400.4.23.1 php8-zlib-8.0.27-150400.4.23.1 php8-zlib-debuginfo-8.0.27-150400.4.23.1 - SUSE Linux Enterprise Module for Web Scripting 15-SP4 (aarch64 ppc64le s390x x86_64): apache2-mod_php8-8.0.27-150400.4.23.1 apache2-mod_php8-debuginfo-8.0.27-150400.4.23.1 apache2-mod_php8-debugsource-8.0.27-150400.4.23.1 php8-8.0.27-150400.4.23.1 php8-bcmath-8.0.27-150400.4.23.1 php8-bcmath-debuginfo-8.0.27-150400.4.23.1 php8-bz2-8.0.27-150400.4.23.1 php8-bz2-debuginfo-8.0.27-150400.4.23.1 php8-calendar-8.0.27-150400.4.23.1 php8-calendar-debuginfo-8.0.27-150400.4.23.1 php8-cli-8.0.27-150400.4.23.1 php8-cli-debuginfo-8.0.27-150400.4.23.1 php8-ctype-8.0.27-150400.4.23.1 php8-ctype-debuginfo-8.0.27-150400.4.23.1 php8-curl-8.0.27-150400.4.23.1 php8-curl-debuginfo-8.0.27-150400.4.23.1 php8-dba-8.0.27-150400.4.23.1 php8-dba-debuginfo-8.0.27-150400.4.23.1 php8-debuginfo-8.0.27-150400.4.23.1 php8-debugsource-8.0.27-150400.4.23.1 php8-devel-8.0.27-150400.4.23.1 php8-dom-8.0.27-150400.4.23.1 php8-dom-debuginfo-8.0.27-150400.4.23.1 php8-embed-8.0.27-150400.4.23.1 php8-embed-debuginfo-8.0.27-150400.4.23.1 php8-embed-debugsource-8.0.27-150400.4.23.1 php8-enchant-8.0.27-150400.4.23.1 php8-enchant-debuginfo-8.0.27-150400.4.23.1 php8-exif-8.0.27-150400.4.23.1 php8-exif-debuginfo-8.0.27-150400.4.23.1 php8-fastcgi-8.0.27-150400.4.23.1 php8-fastcgi-debuginfo-8.0.27-150400.4.23.1 php8-fastcgi-debugsource-8.0.27-150400.4.23.1 php8-fileinfo-8.0.27-150400.4.23.1 php8-fileinfo-debuginfo-8.0.27-150400.4.23.1 php8-fpm-8.0.27-150400.4.23.1 php8-fpm-debuginfo-8.0.27-150400.4.23.1 php8-fpm-debugsource-8.0.27-150400.4.23.1 php8-ftp-8.0.27-150400.4.23.1 php8-ftp-debuginfo-8.0.27-150400.4.23.1 php8-gd-8.0.27-150400.4.23.1 php8-gd-debuginfo-8.0.27-150400.4.23.1 php8-gettext-8.0.27-150400.4.23.1 php8-gettext-debuginfo-8.0.27-150400.4.23.1 php8-gmp-8.0.27-150400.4.23.1 php8-gmp-debuginfo-8.0.27-150400.4.23.1 php8-iconv-8.0.27-150400.4.23.1 php8-iconv-debuginfo-8.0.27-150400.4.23.1 php8-intl-8.0.27-150400.4.23.1 php8-intl-debuginfo-8.0.27-150400.4.23.1 php8-ldap-8.0.27-150400.4.23.1 php8-ldap-debuginfo-8.0.27-150400.4.23.1 php8-mbstring-8.0.27-150400.4.23.1 php8-mbstring-debuginfo-8.0.27-150400.4.23.1 php8-mysql-8.0.27-150400.4.23.1 php8-mysql-debuginfo-8.0.27-150400.4.23.1 php8-odbc-8.0.27-150400.4.23.1 php8-odbc-debuginfo-8.0.27-150400.4.23.1 php8-opcache-8.0.27-150400.4.23.1 php8-opcache-debuginfo-8.0.27-150400.4.23.1 php8-openssl-8.0.27-150400.4.23.1 php8-openssl-debuginfo-8.0.27-150400.4.23.1 php8-pcntl-8.0.27-150400.4.23.1 php8-pcntl-debuginfo-8.0.27-150400.4.23.1 php8-pdo-8.0.27-150400.4.23.1 php8-pdo-debuginfo-8.0.27-150400.4.23.1 php8-pgsql-8.0.27-150400.4.23.1 php8-pgsql-debuginfo-8.0.27-150400.4.23.1 php8-phar-8.0.27-150400.4.23.1 php8-phar-debuginfo-8.0.27-150400.4.23.1 php8-posix-8.0.27-150400.4.23.1 php8-posix-debuginfo-8.0.27-150400.4.23.1 php8-readline-8.0.27-150400.4.23.1 php8-readline-debuginfo-8.0.27-150400.4.23.1 php8-shmop-8.0.27-150400.4.23.1 php8-shmop-debuginfo-8.0.27-150400.4.23.1 php8-snmp-8.0.27-150400.4.23.1 php8-snmp-debuginfo-8.0.27-150400.4.23.1 php8-soap-8.0.27-150400.4.23.1 php8-soap-debuginfo-8.0.27-150400.4.23.1 php8-sockets-8.0.27-150400.4.23.1 php8-sockets-debuginfo-8.0.27-150400.4.23.1 php8-sodium-8.0.27-150400.4.23.1 php8-sodium-debuginfo-8.0.27-150400.4.23.1 php8-sqlite-8.0.27-150400.4.23.1 php8-sqlite-debuginfo-8.0.27-150400.4.23.1 php8-sysvmsg-8.0.27-150400.4.23.1 php8-sysvmsg-debuginfo-8.0.27-150400.4.23.1 php8-sysvsem-8.0.27-150400.4.23.1 php8-sysvsem-debuginfo-8.0.27-150400.4.23.1 php8-sysvshm-8.0.27-150400.4.23.1 php8-sysvshm-debuginfo-8.0.27-150400.4.23.1 php8-test-8.0.27-150400.4.23.1 php8-tidy-8.0.27-150400.4.23.1 php8-tidy-debuginfo-8.0.27-150400.4.23.1 php8-tokenizer-8.0.27-150400.4.23.1 php8-tokenizer-debuginfo-8.0.27-150400.4.23.1 php8-xmlreader-8.0.27-150400.4.23.1 php8-xmlreader-debuginfo-8.0.27-150400.4.23.1 php8-xmlwriter-8.0.27-150400.4.23.1 php8-xmlwriter-debuginfo-8.0.27-150400.4.23.1 php8-xsl-8.0.27-150400.4.23.1 php8-xsl-debuginfo-8.0.27-150400.4.23.1 php8-zip-8.0.27-150400.4.23.1 php8-zip-debuginfo-8.0.27-150400.4.23.1 php8-zlib-8.0.27-150400.4.23.1 php8-zlib-debuginfo-8.0.27-150400.4.23.1 References: https://www.suse.com/security/cve/CVE-2022-31631.html https://bugzilla.suse.com/1206958

1 0

SUSE-SU-2023:0065-1: moderate: Security update for w3m
by opensuse-security＠opensuse.org 11 Jan '23

11 Jan '23

SUSE Security Update: Security update for w3m ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0065-1 Rating: moderate References: #1202684 Cross-References: CVE-2022-38223 CVSS scores: CVE-2022-38223 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-38223 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for w3m fixes the following issues: - CVE-2022-38223: Fixed a memory safety issue when dumping crafted input to standard out (bsc#1202684). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-65=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-65=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-65=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): w3m-0.5.3+git20180125-150000.3.3.1 w3m-debuginfo-0.5.3+git20180125-150000.3.3.1 w3m-debugsource-0.5.3+git20180125-150000.3.3.1 w3m-inline-image-0.5.3+git20180125-150000.3.3.1 w3m-inline-image-debuginfo-0.5.3+git20180125-150000.3.3.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): w3m-0.5.3+git20180125-150000.3.3.1 w3m-debuginfo-0.5.3+git20180125-150000.3.3.1 w3m-debugsource-0.5.3+git20180125-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): w3m-0.5.3+git20180125-150000.3.3.1 w3m-debuginfo-0.5.3+git20180125-150000.3.3.1 w3m-debugsource-0.5.3+git20180125-150000.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-38223.html https://bugzilla.suse.com/1202684

1 0

SUSE-SU-2023:0069-1: moderate: Security update for SDL2
by opensuse-security＠opensuse.org 11 Jan '23

11 Jan '23

SUSE Security Update: Security update for SDL2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0069-1 Rating: moderate References: #1206727 Cross-References: CVE-2022-4743 CVSS scores: CVE-2022-4743 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for SDL2 fixes the following issues: - CVE-2022-4743: Fixed a potential memory leak when creating a texture for an OpenGL ES image (bsc#1206727). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-69=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-69=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-69=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-69=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): SDL2-debugsource-2.0.8-150200.11.9.1 libSDL2-2_0-0-2.0.8-150200.11.9.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.9.1 libSDL2-devel-2.0.8-150200.11.9.1 - openSUSE Leap 15.4 (x86_64): libSDL2-2_0-0-32bit-2.0.8-150200.11.9.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-150200.11.9.1 libSDL2-devel-32bit-2.0.8-150200.11.9.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): SDL2-debugsource-2.0.8-150200.11.9.1 libSDL2-2_0-0-2.0.8-150200.11.9.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.9.1 libSDL2-devel-2.0.8-150200.11.9.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (x86_64): SDL2-debugsource-2.0.8-150200.11.9.1 libSDL2-2_0-0-32bit-2.0.8-150200.11.9.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-150200.11.9.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): SDL2-debugsource-2.0.8-150200.11.9.1 libSDL2-2_0-0-2.0.8-150200.11.9.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.9.1 libSDL2-devel-2.0.8-150200.11.9.1 References: https://www.suse.com/security/cve/CVE-2022-4743.html https://bugzilla.suse.com/1206727

1 0

openSUSE-SU-2023:0009-1: important: Security update for rubygem-activerecord-5.2
by opensuse-security＠opensuse.org 11 Jan '23

11 Jan '23

openSUSE Security Update: Security update for rubygem-activerecord-5.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0009-1 Rating: important References: #1201465 Cross-References: CVE-2022-32224 CVSS scores: CVE-2022-32224 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-32224 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-activerecord-5.2 fixes the following issues: - CVE-2022-32224: Fixed possible remote code execution when using YAML serialized columns in Active Record (boo#1201465). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-9=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): ruby2.5-rubygem-activerecord-5.2-5.2.3-bp154.2.3.1 ruby2.5-rubygem-activerecord-doc-5.2-5.2.3-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-32224.html https://bugzilla.suse.com/1201465

1 0

SUSE-SU-2023:0056-1: moderate: Security update for libksba
by opensuse-security＠opensuse.org 09 Jan '23

09 Jan '23

SUSE Security Update: Security update for libksba ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0056-1 Rating: moderate References: #1206579 Cross-References: CVE-2022-47629 CVSS scores: CVE-2022-47629 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-47629 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libksba fixes the following issues: - CVE-2022-47629: Fixed an integer overflow vulnerability in the CRL signature parser (bsc#1206579). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2023-56=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2023-56=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-56=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-56=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-56=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2023-56=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-56=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-56=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libksba-debugsource-1.3.5-150000.4.6.1 libksba8-1.3.5-150000.4.6.1 libksba8-debuginfo-1.3.5-150000.4.6.1 - openSUSE Leap Micro 5.2 (aarch64 x86_64): libksba-debugsource-1.3.5-150000.4.6.1 libksba8-1.3.5-150000.4.6.1 libksba8-debuginfo-1.3.5-150000.4.6.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libksba-debugsource-1.3.5-150000.4.6.1 libksba-devel-1.3.5-150000.4.6.1 libksba8-1.3.5-150000.4.6.1 libksba8-debuginfo-1.3.5-150000.4.6.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): libksba-debugsource-1.3.5-150000.4.6.1 libksba-devel-1.3.5-150000.4.6.1 libksba8-1.3.5-150000.4.6.1 libksba8-debuginfo-1.3.5-150000.4.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libksba-debugsource-1.3.5-150000.4.6.1 libksba-devel-1.3.5-150000.4.6.1 libksba8-1.3.5-150000.4.6.1 libksba8-debuginfo-1.3.5-150000.4.6.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libksba-debugsource-1.3.5-150000.4.6.1 libksba8-1.3.5-150000.4.6.1 libksba8-debuginfo-1.3.5-150000.4.6.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libksba-debugsource-1.3.5-150000.4.6.1 libksba8-1.3.5-150000.4.6.1 libksba8-debuginfo-1.3.5-150000.4.6.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libksba-debugsource-1.3.5-150000.4.6.1 libksba8-1.3.5-150000.4.6.1 libksba8-debuginfo-1.3.5-150000.4.6.1 References: https://www.suse.com/security/cve/CVE-2022-47629.html https://bugzilla.suse.com/1206579

1 0

SUSE-SU-2023:0037-1: important: Security update for ca-certificates-mozilla
by opensuse-security＠opensuse.org 06 Jan '23

06 Jan '23

SUSE Security Update: Security update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0037-1 Rating: important References: #1206212 #1206622 Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: - DIGITALSIGN GLOBAL ROOT ECDSA CA - DIGITALSIGN GLOBAL ROOT RSA CA - Security Communication ECC RootCA1 - Security Communication RootCA3 Changed trust: - TrustCor certificates only trusted up to Nov 30 (bsc#1206212) - Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022" and it is not clear how many certs were issued for SSL middleware by TrustCor: - TrustCor RootCert CA-1 - TrustCor RootCert CA-2 - TrustCor ECA-1 Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2023-37=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2023-37=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-37=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-37=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2023-37=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-37=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2023-37=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-37=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2023-37=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-37=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-37=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-37=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-37=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-37=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-37=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2023-37=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-37=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2023-37=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2023-37=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-37=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-37=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-37=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-37=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-37=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-37=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2023-37=1 Package List: - openSUSE Leap Micro 5.3 (noarch): ca-certificates-mozilla-2.60-150200.27.1 - openSUSE Leap Micro 5.2 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - openSUSE Leap 15.4 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Manager Server 4.2 (noarch): ca-certificates-mozilla-2.60-150200.27.1 - SUSE Manager Server 4.1 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Manager Retail Branch Server 4.2 (noarch): ca-certificates-mozilla-2.60-150200.27.1 - SUSE Manager Retail Branch Server 4.1 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Manager Proxy 4.2 (noarch): ca-certificates-mozilla-2.60-150200.27.1 - SUSE Manager Proxy 4.1 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): ca-certificates-mozilla-2.60-150200.27.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): ca-certificates-mozilla-2.60-150200.27.1 - SUSE Linux Enterprise Micro 5.3 (noarch): ca-certificates-mozilla-2.60-150200.27.1 - SUSE Linux Enterprise Micro 5.2 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise Micro 5.1 (noarch): ca-certificates-mozilla-2.60-150200.27.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Enterprise Storage 7.1 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 - SUSE Enterprise Storage 7 (noarch): ca-certificates-mozilla-2.60-150200.27.1 ca-certificates-mozilla-prebuilt-2.60-150200.27.1 References: https://bugzilla.suse.com/1206212 https://bugzilla.suse.com/1206622

1 0

SUSE-SU-2023:0036-1: important: Security update for ovmf
by opensuse-security＠opensuse.org 06 Jan '23

06 Jan '23

SUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0036-1 Rating: important References: #1188371 Cross-References: CVE-2019-11098 CVSS scores: CVE-2019-11098 (NVD) : 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-11098 (SUSE): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ovmf fixes the following issues: - CVE-2019-11098: Fixed insufficient input validation in MdeModulePkg (bsc#1188371). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2023-36=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-36=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-36=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-36=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-36=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-36=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-36=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-36=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-36=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-36=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-36=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-36=1 Package List: - openSUSE Leap Micro 5.2 (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 qemu-uefi-aarch64-202008-150300.10.17.1 - SUSE Manager Server 4.2 (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 - SUSE Manager Server 4.2 (x86_64): ovmf-202008-150300.10.17.1 ovmf-tools-202008-150300.10.17.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): ovmf-202008-150300.10.17.1 ovmf-tools-202008-150300.10.17.1 - SUSE Manager Retail Branch Server 4.2 (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 - SUSE Manager Proxy 4.2 (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 - SUSE Manager Proxy 4.2 (x86_64): ovmf-202008-150300.10.17.1 ovmf-tools-202008-150300.10.17.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (x86_64): ovmf-202008-150300.10.17.1 ovmf-tools-202008-150300.10.17.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 x86_64): ovmf-202008-150300.10.17.1 ovmf-tools-202008-150300.10.17.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 qemu-uefi-aarch64-202008-150300.10.17.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): ovmf-202008-150300.10.17.1 ovmf-tools-202008-150300.10.17.1 - SUSE Linux Enterprise Micro 5.2 (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 qemu-uefi-aarch64-202008-150300.10.17.1 - SUSE Linux Enterprise Micro 5.1 (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 qemu-uefi-aarch64-202008-150300.10.17.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): ovmf-202008-150300.10.17.1 ovmf-tools-202008-150300.10.17.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 qemu-uefi-aarch64-202008-150300.10.17.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): ovmf-202008-150300.10.17.1 ovmf-tools-202008-150300.10.17.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 qemu-uefi-aarch64-202008-150300.10.17.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): ovmf-202008-150300.10.17.1 ovmf-tools-202008-150300.10.17.1 - SUSE Enterprise Storage 7.1 (noarch): qemu-ovmf-x86_64-202008-150300.10.17.1 qemu-uefi-aarch64-202008-150300.10.17.1 References: https://www.suse.com/security/cve/CVE-2019-11098.html https://bugzilla.suse.com/1188371

1 0

SUSE-SU-2023:0030-1: important: Security update for tcl
by opensuse-security＠opensuse.org 05 Jan '23

05 Jan '23

SUSE Security Update: Security update for tcl ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0030-1 Rating: important References: #1195773 Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for tcl fixes the following issues: - Fixed a race condition in test socket-13.1. - Removed the SQLite extension and use the packaged sqlite3 instead (bsc#1195773). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-30=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2023-30=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-30=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2023-30=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2023-30=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): tcl-8.6.12-150300.14.6.1 tcl-debuginfo-8.6.12-150300.14.6.1 tcl-debugsource-8.6.12-150300.14.6.1 tcl-devel-8.6.12-150300.14.6.1 - openSUSE Leap 15.4 (x86_64): tcl-32bit-8.6.12-150300.14.6.1 tcl-32bit-debuginfo-8.6.12-150300.14.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): tcl-8.6.12-150300.14.6.1 tcl-debuginfo-8.6.12-150300.14.6.1 tcl-debugsource-8.6.12-150300.14.6.1 tcl-devel-8.6.12-150300.14.6.1 - openSUSE Leap 15.3 (x86_64): tcl-32bit-8.6.12-150300.14.6.1 tcl-32bit-debuginfo-8.6.12-150300.14.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): tcl-8.6.12-150300.14.6.1 tcl-debuginfo-8.6.12-150300.14.6.1 tcl-debugsource-8.6.12-150300.14.6.1 tcl-devel-8.6.12-150300.14.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): tcl-32bit-8.6.12-150300.14.6.1 tcl-32bit-debuginfo-8.6.12-150300.14.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): tcl-8.6.12-150300.14.6.1 tcl-debuginfo-8.6.12-150300.14.6.1 tcl-debugsource-8.6.12-150300.14.6.1 tcl-devel-8.6.12-150300.14.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): tcl-32bit-8.6.12-150300.14.6.1 tcl-32bit-debuginfo-8.6.12-150300.14.6.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): tcl-8.6.12-150300.14.6.1 tcl-debuginfo-8.6.12-150300.14.6.1 tcl-debugsource-8.6.12-150300.14.6.1 References: https://bugzilla.suse.com/1195773

1 0

SUSE-SU-2023:0033-1: important: Security update for xrdp
by opensuse-security＠opensuse.org 05 Jan '23

05 Jan '23

SUSE Security Update: Security update for xrdp ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0033-1 Rating: important References: #1206300 #1206302 #1206303 #1206306 #1206307 #1206310 #1206311 #1206312 #1206313 Cross-References: CVE-2022-23468 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483 CVE-2022-23484 CVE-2022-23493 CVSS scores: CVE-2022-23468 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23468 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2022-23478 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23478 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-23479 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23479 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-23480 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23480 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-23481 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-23481 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-23482 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-23482 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-23483 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-23483 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-23484 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23484 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-23493 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-23493 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300). - CVE-2022-23478: Fixed an out of bound write in xrdp_mm_trans_process_drdynvc_chan() (bsc#1206302). - CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303). - CVE-2022-23480: Fixed a buffer overflow in devredir_proc_client_devlist_announce_req() (bsc#1206306). - CVE-2022-23481: Fixed an out of bound read in xrdp_caps_process_confirm_active() (bsc#1206307). - CVE-2022-23482: Fixed an out of bound read in xrdp_sec_process_mcs_data_CS_CORE() (bsc#1206310). - CVE-2022-23483: Fixed an out of bound read in libxrdp_send_to_channel() (bsc#1206311). - CVE-2022-23484: Fixed a integer overflow in xrdp_mm_process_rail_update_window_text() (bsc#1206312). - CVE-2022-23493: Fixed an out of bound read in xrdp_mm_trans_process_drdynvc_channel_close() (bsc#1206313). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-33=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-33=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2023-33=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-33=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2023-33=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-33=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2023-33=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-33=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-33=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-33=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-33=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-33=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-33=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-33=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-33=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-33=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-33=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2023-33=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Manager Proxy 4.2 (x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Manager Proxy 4.1 (x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libpainter0-0.9.13.1-150200.4.15.1 libpainter0-debuginfo-0.9.13.1-150200.4.15.1 librfxencode0-0.9.13.1-150200.4.15.1 librfxencode0-debuginfo-0.9.13.1-150200.4.15.1 xrdp-0.9.13.1-150200.4.15.1 xrdp-debuginfo-0.9.13.1-150200.4.15.1 xrdp-debugsource-0.9.13.1-150200.4.15.1 xrdp-devel-0.9.13.1-150200.4.15.1 References: https://www.suse.com/security/cve/CVE-2022-23468.html https://www.suse.com/security/cve/CVE-2022-23478.html https://www.suse.com/security/cve/CVE-2022-23479.html https://www.suse.com/security/cve/CVE-2022-23480.html https://www.suse.com/security/cve/CVE-2022-23481.html https://www.suse.com/security/cve/CVE-2022-23482.html https://www.suse.com/security/cve/CVE-2022-23483.html https://www.suse.com/security/cve/CVE-2022-23484.html https://www.suse.com/security/cve/CVE-2022-23493.html https://bugzilla.suse.com/1206300 https://bugzilla.suse.com/1206302 https://bugzilla.suse.com/1206303 https://bugzilla.suse.com/1206306 https://bugzilla.suse.com/1206307 https://bugzilla.suse.com/1206310 https://bugzilla.suse.com/1206311 https://bugzilla.suse.com/1206312 https://bugzilla.suse.com/1206313

1 0

SUSE-SU-2023:0032-1: Security update for rpmlint-mini
by opensuse-security＠opensuse.org 05 Jan '23

05 Jan '23

SUSE Security Update: Security update for rpmlint-mini ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0032-1 Rating: low References: #1206414 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for rpmlint-mini fixes the following issues: Update polkit-default-privs to version 13.2+20221216.a0c29e6: - backport usbguard actions (bsc#1206414). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-32=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-32=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): rpmlint-mini-1.10-150400.23.6.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): rpmlint-mini-1.10-150400.23.6.1 rpmlint-mini-debuginfo-1.10-150400.23.6.1 rpmlint-mini-debugsource-1.10-150400.23.6.1 References: https://bugzilla.suse.com/1206414

1 0