May 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:1838-1: moderate: Recommended update for firewalld
by maintenance＠opensuse.org 25 May '22

25 May '22

SUSE Recommended Update: Recommended update for firewalld ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1838-1 Rating: moderate References: #1198814 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for firewalld fixes the following issues: - Fix regression introduced in previous patch (an api change to a function also needed backporting) (bsc#1198814) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1838=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1838=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1838=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1838=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1838=1 Package List: - openSUSE Leap 15.3 (noarch): firewall-applet-0.9.3-150300.3.9.1 firewall-config-0.9.3-150300.3.9.1 firewall-macros-0.9.3-150300.3.9.1 firewalld-0.9.3-150300.3.9.1 firewalld-lang-0.9.3-150300.3.9.1 python3-firewall-0.9.3-150300.3.9.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (noarch): firewall-applet-0.9.3-150300.3.9.1 firewall-config-0.9.3-150300.3.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): firewall-macros-0.9.3-150300.3.9.1 firewalld-0.9.3-150300.3.9.1 firewalld-lang-0.9.3-150300.3.9.1 python3-firewall-0.9.3-150300.3.9.1 - SUSE Linux Enterprise Micro 5.2 (noarch): firewalld-0.9.3-150300.3.9.1 python3-firewall-0.9.3-150300.3.9.1 - SUSE Linux Enterprise Micro 5.1 (noarch): firewalld-0.9.3-150300.3.9.1 python3-firewall-0.9.3-150300.3.9.1 References: https://bugzilla.suse.com/1198814

1 0

SUSE-SU-2022:1840-1: moderate: Security update for kernel-firmware
by opensuse-security＠opensuse.org 25 May '22

25 May '22

SUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1840-1 Rating: moderate References: #1199459 #1199470 Cross-References: CVE-2021-26312 CVE-2021-26339 CVE-2021-26342 CVE-2021-26347 CVE-2021-26348 CVE-2021-26349 CVE-2021-26350 CVE-2021-26364 CVE-2021-26372 CVE-2021-26373 CVE-2021-26375 CVE-2021-26376 CVE-2021-26378 CVE-2021-26388 CVE-2021-46744 CVSS scores: CVE-2021-26312 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-26339 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26339 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26342 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-26342 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-26347 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26348 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-26349 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-26350 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46744 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for kernel-firmware fixes the following issues: Update AMD ucode and SEV firmware - (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1840=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1840=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1840=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1840=1 Package List: - openSUSE Leap 15.3 (noarch): kernel-firmware-20210208-150300.4.10.1 kernel-firmware-all-20210208-150300.4.10.1 kernel-firmware-amdgpu-20210208-150300.4.10.1 kernel-firmware-ath10k-20210208-150300.4.10.1 kernel-firmware-ath11k-20210208-150300.4.10.1 kernel-firmware-atheros-20210208-150300.4.10.1 kernel-firmware-bluetooth-20210208-150300.4.10.1 kernel-firmware-bnx2-20210208-150300.4.10.1 kernel-firmware-brcm-20210208-150300.4.10.1 kernel-firmware-chelsio-20210208-150300.4.10.1 kernel-firmware-dpaa2-20210208-150300.4.10.1 kernel-firmware-i915-20210208-150300.4.10.1 kernel-firmware-intel-20210208-150300.4.10.1 kernel-firmware-iwlwifi-20210208-150300.4.10.1 kernel-firmware-liquidio-20210208-150300.4.10.1 kernel-firmware-marvell-20210208-150300.4.10.1 kernel-firmware-media-20210208-150300.4.10.1 kernel-firmware-mediatek-20210208-150300.4.10.1 kernel-firmware-mellanox-20210208-150300.4.10.1 kernel-firmware-mwifiex-20210208-150300.4.10.1 kernel-firmware-network-20210208-150300.4.10.1 kernel-firmware-nfp-20210208-150300.4.10.1 kernel-firmware-nvidia-20210208-150300.4.10.1 kernel-firmware-platform-20210208-150300.4.10.1 kernel-firmware-prestera-20210208-150300.4.10.1 kernel-firmware-qlogic-20210208-150300.4.10.1 kernel-firmware-radeon-20210208-150300.4.10.1 kernel-firmware-realtek-20210208-150300.4.10.1 kernel-firmware-serial-20210208-150300.4.10.1 kernel-firmware-sound-20210208-150300.4.10.1 kernel-firmware-ti-20210208-150300.4.10.1 kernel-firmware-ueagle-20210208-150300.4.10.1 kernel-firmware-usb-network-20210208-150300.4.10.1 ucode-amd-20210208-150300.4.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): kernel-firmware-20210208-150300.4.10.1 kernel-firmware-brcm-20210208-150300.4.10.1 ucode-amd-20210208-150300.4.10.1 - SUSE Linux Enterprise Micro 5.2 (noarch): kernel-firmware-all-20210208-150300.4.10.1 kernel-firmware-amdgpu-20210208-150300.4.10.1 kernel-firmware-ath10k-20210208-150300.4.10.1 kernel-firmware-ath11k-20210208-150300.4.10.1 kernel-firmware-atheros-20210208-150300.4.10.1 kernel-firmware-bluetooth-20210208-150300.4.10.1 kernel-firmware-bnx2-20210208-150300.4.10.1 kernel-firmware-brcm-20210208-150300.4.10.1 kernel-firmware-chelsio-20210208-150300.4.10.1 kernel-firmware-dpaa2-20210208-150300.4.10.1 kernel-firmware-i915-20210208-150300.4.10.1 kernel-firmware-intel-20210208-150300.4.10.1 kernel-firmware-iwlwifi-20210208-150300.4.10.1 kernel-firmware-liquidio-20210208-150300.4.10.1 kernel-firmware-marvell-20210208-150300.4.10.1 kernel-firmware-media-20210208-150300.4.10.1 kernel-firmware-mediatek-20210208-150300.4.10.1 kernel-firmware-mellanox-20210208-150300.4.10.1 kernel-firmware-mwifiex-20210208-150300.4.10.1 kernel-firmware-network-20210208-150300.4.10.1 kernel-firmware-nfp-20210208-150300.4.10.1 kernel-firmware-nvidia-20210208-150300.4.10.1 kernel-firmware-platform-20210208-150300.4.10.1 kernel-firmware-prestera-20210208-150300.4.10.1 kernel-firmware-qlogic-20210208-150300.4.10.1 kernel-firmware-radeon-20210208-150300.4.10.1 kernel-firmware-realtek-20210208-150300.4.10.1 kernel-firmware-serial-20210208-150300.4.10.1 kernel-firmware-sound-20210208-150300.4.10.1 kernel-firmware-ti-20210208-150300.4.10.1 kernel-firmware-ueagle-20210208-150300.4.10.1 kernel-firmware-usb-network-20210208-150300.4.10.1 ucode-amd-20210208-150300.4.10.1 - SUSE Linux Enterprise Micro 5.1 (noarch): kernel-firmware-all-20210208-150300.4.10.1 kernel-firmware-amdgpu-20210208-150300.4.10.1 kernel-firmware-ath10k-20210208-150300.4.10.1 kernel-firmware-ath11k-20210208-150300.4.10.1 kernel-firmware-atheros-20210208-150300.4.10.1 kernel-firmware-bluetooth-20210208-150300.4.10.1 kernel-firmware-bnx2-20210208-150300.4.10.1 kernel-firmware-brcm-20210208-150300.4.10.1 kernel-firmware-chelsio-20210208-150300.4.10.1 kernel-firmware-dpaa2-20210208-150300.4.10.1 kernel-firmware-i915-20210208-150300.4.10.1 kernel-firmware-intel-20210208-150300.4.10.1 kernel-firmware-iwlwifi-20210208-150300.4.10.1 kernel-firmware-liquidio-20210208-150300.4.10.1 kernel-firmware-marvell-20210208-150300.4.10.1 kernel-firmware-media-20210208-150300.4.10.1 kernel-firmware-mediatek-20210208-150300.4.10.1 kernel-firmware-mellanox-20210208-150300.4.10.1 kernel-firmware-mwifiex-20210208-150300.4.10.1 kernel-firmware-network-20210208-150300.4.10.1 kernel-firmware-nfp-20210208-150300.4.10.1 kernel-firmware-nvidia-20210208-150300.4.10.1 kernel-firmware-platform-20210208-150300.4.10.1 kernel-firmware-prestera-20210208-150300.4.10.1 kernel-firmware-qlogic-20210208-150300.4.10.1 kernel-firmware-radeon-20210208-150300.4.10.1 kernel-firmware-realtek-20210208-150300.4.10.1 kernel-firmware-serial-20210208-150300.4.10.1 kernel-firmware-sound-20210208-150300.4.10.1 kernel-firmware-ti-20210208-150300.4.10.1 kernel-firmware-ueagle-20210208-150300.4.10.1 kernel-firmware-usb-network-20210208-150300.4.10.1 ucode-amd-20210208-150300.4.10.1 References: https://www.suse.com/security/cve/CVE-2021-26312.html https://www.suse.com/security/cve/CVE-2021-26339.html https://www.suse.com/security/cve/CVE-2021-26342.html https://www.suse.com/security/cve/CVE-2021-26347.html https://www.suse.com/security/cve/CVE-2021-26348.html https://www.suse.com/security/cve/CVE-2021-26349.html https://www.suse.com/security/cve/CVE-2021-26350.html https://www.suse.com/security/cve/CVE-2021-26364.html https://www.suse.com/security/cve/CVE-2021-26372.html https://www.suse.com/security/cve/CVE-2021-26373.html https://www.suse.com/security/cve/CVE-2021-26375.html https://www.suse.com/security/cve/CVE-2021-26376.html https://www.suse.com/security/cve/CVE-2021-26378.html https://www.suse.com/security/cve/CVE-2021-26388.html https://www.suse.com/security/cve/CVE-2021-46744.html https://bugzilla.suse.com/1199459 https://bugzilla.suse.com/1199470

1 0

SUSE-RU-2022:1827-1: moderate: Recommended update for xf86-video-vesa
by maintenance＠opensuse.org 24 May '22

24 May '22

SUSE Recommended Update: Recommended update for xf86-video-vesa ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1827-1 Rating: moderate References: #1193539 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-vesa fixes the following issues: - Disallow vesa driver on the system with simpledrmfb (bsc#1193539): Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1827=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1827=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1827=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1827=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): xf86-video-vesa-2.4.0-150100.5.3.1 xf86-video-vesa-debuginfo-2.4.0-150100.5.3.1 xf86-video-vesa-debugsource-2.4.0-150100.5.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): xf86-video-vesa-2.4.0-150100.5.3.1 xf86-video-vesa-debuginfo-2.4.0-150100.5.3.1 xf86-video-vesa-debugsource-2.4.0-150100.5.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): xf86-video-vesa-2.4.0-150100.5.3.1 xf86-video-vesa-debuginfo-2.4.0-150100.5.3.1 xf86-video-vesa-debugsource-2.4.0-150100.5.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): xf86-video-vesa-2.4.0-150100.5.3.1 xf86-video-vesa-debuginfo-2.4.0-150100.5.3.1 xf86-video-vesa-debugsource-2.4.0-150100.5.3.1 References: https://bugzilla.suse.com/1193539

1 0

SUSE-RU-2022:1826-1: important: Recommended update for nut
by maintenance＠opensuse.org 24 May '22

24 May '22

SUSE Recommended Update: Recommended update for nut ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1826-1 Rating: important References: #1197789 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nut fixes the following issues: - Fix package build requirements (bsc#1197789) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1826=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1826=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-1826=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-1826=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1826=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1826=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libupsclient1-2.7.4-150000.6.3.1 libupsclient1-debuginfo-2.7.4-150000.6.3.1 nut-2.7.4-150000.6.3.1 nut-cgi-2.7.4-150000.6.3.1 nut-cgi-debuginfo-2.7.4-150000.6.3.1 nut-debuginfo-2.7.4-150000.6.3.1 nut-debugsource-2.7.4-150000.6.3.1 nut-devel-2.7.4-150000.6.3.1 nut-drivers-net-2.7.4-150000.6.3.1 nut-drivers-net-debuginfo-2.7.4-150000.6.3.1 - openSUSE Leap 15.4 (noarch): nut-devel-doc-html-2.7.4-150000.6.3.1 nut-devel-doc-pdf-2.7.4-150000.6.3.1 nut-doc-asciidoc-2.7.4-150000.6.3.1 nut-doc-html-2.7.4-150000.6.3.1 nut-doc-images-2.7.4-150000.6.3.1 nut-doc-pdf-2.7.4-150000.6.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libupsclient1-2.7.4-150000.6.3.1 libupsclient1-debuginfo-2.7.4-150000.6.3.1 nut-2.7.4-150000.6.3.1 nut-cgi-2.7.4-150000.6.3.1 nut-cgi-debuginfo-2.7.4-150000.6.3.1 nut-debuginfo-2.7.4-150000.6.3.1 nut-debugsource-2.7.4-150000.6.3.1 nut-devel-2.7.4-150000.6.3.1 nut-drivers-net-2.7.4-150000.6.3.1 nut-drivers-net-debuginfo-2.7.4-150000.6.3.1 - openSUSE Leap 15.3 (noarch): nut-devel-doc-html-2.7.4-150000.6.3.1 nut-devel-doc-pdf-2.7.4-150000.6.3.1 nut-doc-asciidoc-2.7.4-150000.6.3.1 nut-doc-html-2.7.4-150000.6.3.1 nut-doc-images-2.7.4-150000.6.3.1 nut-doc-pdf-2.7.4-150000.6.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): nut-2.7.4-150000.6.3.1 nut-debuginfo-2.7.4-150000.6.3.1 nut-debugsource-2.7.4-150000.6.3.1 nut-devel-2.7.4-150000.6.3.1 nut-drivers-net-2.7.4-150000.6.3.1 nut-drivers-net-debuginfo-2.7.4-150000.6.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): nut-2.7.4-150000.6.3.1 nut-debuginfo-2.7.4-150000.6.3.1 nut-debugsource-2.7.4-150000.6.3.1 nut-devel-2.7.4-150000.6.3.1 nut-drivers-net-2.7.4-150000.6.3.1 nut-drivers-net-debuginfo-2.7.4-150000.6.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libupsclient1-2.7.4-150000.6.3.1 libupsclient1-debuginfo-2.7.4-150000.6.3.1 nut-debuginfo-2.7.4-150000.6.3.1 nut-debugsource-2.7.4-150000.6.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libupsclient1-2.7.4-150000.6.3.1 libupsclient1-debuginfo-2.7.4-150000.6.3.1 nut-debuginfo-2.7.4-150000.6.3.1 nut-debugsource-2.7.4-150000.6.3.1 References: https://bugzilla.suse.com/1197789

1 0

openSUSE-SU-2022:0145-1: moderate: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 24 May '22

24 May '22

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0145-1 Rating: moderate References: #1192408 #1196692 Cross-References: CVE-2022-0730 CVSS scores: CVE-2022-0730 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine was updated to 1.2.20: * Add support for newer versions of MySQL/MariaDB * When checking for uptime of device, don't assume a non-response is always fatal * Fix description and command trunctation issues * Improve spine performance when only one snmp agent port is in use cacti-spine 1.2.19: * Fix 1ssues with polling loop may skip some datasources * Fix ping no longer works due to hostname changes * Fix RRD steps are not always calculated correctly * Fix unable to build when DES no longer supported * Fix IPv6 devices are not properly parsed * Reduce a number of compiler warnings * Fix compiler warnings due to lack of return in thread_mutex_trylock * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows * Improve performance of Cacti poller on heavily loaded systems cacti-spine 1.2.20: * Add support for newer versions of MySQL/MariaDB * When checking for uptime of device, don't assume a non-response is always fatal * Fix description and command trunctation issues * Improve spine performance when only one snmp agent port is in use cacti was updated to 1.2.20: * Security fix for CVE-2022-0730, boo#1196692 Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types. * Security fix: Device, Graph, Graph Template, and Graph Items may be vulnerable to XSS issues * Security fix: Lockout policies are not properly applied to LDAP and Domain Users * Security fix: When using 'remember me' option, incorrect realm may be selected * Security fix: User and Group maintenance are vulnerable to SQL attacks * Security fix: Color Templates are vulnerable to XSS attack * Features: * When creating a Data Source Profile, allow additional choices for Heartbeat * Change select all options to use Font Awesome icons * Improve spine performance by storing the total number of system snmp_ports in use * Prevent Template User Accounts from being Removed * When managing by users, allow filtering by Realm * Allow plugins to supply template account names * When viewing logs, additional message types should be filterable * When creating a Graph Template Item, allow filtering by Data Template * Allow language handler to be selected via UI * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco * Add Advanced Ping Graph Template to initial Installable templates * Add LDAP Debug Mode option * Allow Reports to include devices not on a Tree * Allow Basic Authentication to display custom failure message * Fix: When replicating data during installation/upgrade, system may appear to hang * Fix: Graph Template Items may have duplicated entries * Fix: Unable to Save Graph Settings * Fix: Script Server may crash if an OID is missing or unavailable * Fix: When system-wide polling is disabled, remote pollers may fail to sync changed settings * Fix: When updating poller name, duplicate name protection may be over zealous * Fix: Titles may show "Missing Datasource" incorectly * Fix: Checking for MIB Cache can cause crashes * Fix: Polling cycles may not always complete as expected * Fix: When viewing graph data, non-numeric values may appear * Fix: Utilities view has calculation errors when there are no data sources * Fix: When editing Reports, drag and drop may not function as intended * Fix: When data drive is full, viewing a Graph can result in errors * Various other bug fixes cacti 1.2.19: * Further fixes for grave character security protection (boo#1192408) * Fix Over aggressive escaping causing menu visibility issues on Create Device page * Add SHA256 and AES256 security levels for SNMP polling * Import graph template(Preview Only) show color_id new value as a blank area * Fix Editing graphs errors due to missing sequence * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen * Fix 2hen RealTime is not active, console errors may appear * Fix race conditions may occur when multiple RRDtool processes are running * Fix errors creating graphs from templates * Fix errors when duplicating reports * Fix Boost may be blocked by overflowing poller_output table * Fix Template import may be blocked due to unmet dependency warnings with snmp ports * Fix Newer MySQL versions may error if committing a transaction when not in one * Fix SNMP Agent may not find a cache item * Fix Correct issues running under PHP 8.x * Fix When polling is disabled, boost may crash and creates many arch tables * Fix When poller runs, memory tables may not always be present * Fix Timezones may sometimes be incorrectly calculated * Fix Allow monitoring IPv6 with interface graphs * Fix When a data source uses a Data Input Method, those without a mapping should be flagged * Fix When RRDfile is not yet created, errors may appear when displaying the graph * Fix Cacti missing key indexes that result in Preset pages slowdowns * Fix Data Sources page shows no name when Data Source has no name cache * Fix db_update_table function can not alter table from signed to unsigned * Fix data remains in poller_output table even if it's flushed to rrd files * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places * Fix Offset is a reserved word in MariaDB 10.6 affecting Report * Fix Rendering large trees slowed due to lack of permission caching * Fix Error on interpretation of snmpUtime, when to big * Fix Applying right axis formatting creates an error-image * Fix Unable to Save Graph Settings from the Graphs pages * Fix Graph Template Cache is nullified too often when Graph Automation is running * Fix When Adding a Data Query to a Device, no Progress Spinner is shown * Fix New Browser Breaks Plugins that depend on non UTC date time data * Fix errors when testing remote poller connectivity * Fix errors when renaming poller * Fix Removing spikes by Variance does not appear to be working beyond the first RRA * Fix LDAP API lacks timeout options leading to bad login experiences * Add a normal/wrap class for general use * Limit File Types available for Template Import operations * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication * Support Stronger Encryption Available Starting in Net-SNMP v5.8 * Allow Cacti to use multiple possible LDAP servers * Add a 15 minute polling/sampling interval * Provide additional admin email notifications * Add warnings for undesired changes to plugin hook return values * When creating a Graph, make testing the Data Sources optional by Template * Update phpseclib to 2.0.33 * Update jstree.js to 3.3.12 * Improve performance of Cacti poller on heavily loaded systems * MariaDB recommendations need some tuning for recent updates Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-145=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-145=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): cacti-spine-1.2.20-bp153.2.9.1 - openSUSE Backports SLE-15-SP3 (noarch): cacti-1.2.20-bp153.2.9.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.20-20.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.20-26.1 References: https://www.suse.com/security/cve/CVE-2022-0730.html https://bugzilla.suse.com/1192408 https://bugzilla.suse.com/1196692

1 0

SUSE-RU-2022:1824-1: moderate: Recommended update for dhcp
by maintenance＠opensuse.org 24 May '22

24 May '22

SUSE Recommended Update: Recommended update for dhcp ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1824-1 Rating: moderate References: #1198657 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dhcp fixes the following issues: - Properly handle DHCRELAY(6)_OPTIONS (bsc#1198657) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1824=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1824=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-1824=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-1824=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1824=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1824=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): dhcp-4.3.6.P1-150000.6.14.1 dhcp-client-4.3.6.P1-150000.6.14.1 dhcp-client-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debugsource-4.3.6.P1-150000.6.14.1 dhcp-devel-4.3.6.P1-150000.6.14.1 dhcp-doc-4.3.6.P1-150000.6.14.1 dhcp-relay-4.3.6.P1-150000.6.14.1 dhcp-relay-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-server-4.3.6.P1-150000.6.14.1 dhcp-server-debuginfo-4.3.6.P1-150000.6.14.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dhcp-4.3.6.P1-150000.6.14.1 dhcp-client-4.3.6.P1-150000.6.14.1 dhcp-client-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debugsource-4.3.6.P1-150000.6.14.1 dhcp-devel-4.3.6.P1-150000.6.14.1 dhcp-doc-4.3.6.P1-150000.6.14.1 dhcp-relay-4.3.6.P1-150000.6.14.1 dhcp-relay-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-server-4.3.6.P1-150000.6.14.1 dhcp-server-debuginfo-4.3.6.P1-150000.6.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): dhcp-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debugsource-4.3.6.P1-150000.6.14.1 dhcp-relay-4.3.6.P1-150000.6.14.1 dhcp-relay-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-server-4.3.6.P1-150000.6.14.1 dhcp-server-debuginfo-4.3.6.P1-150000.6.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): dhcp-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debugsource-4.3.6.P1-150000.6.14.1 dhcp-relay-4.3.6.P1-150000.6.14.1 dhcp-relay-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-server-4.3.6.P1-150000.6.14.1 dhcp-server-debuginfo-4.3.6.P1-150000.6.14.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): dhcp-4.3.6.P1-150000.6.14.1 dhcp-client-4.3.6.P1-150000.6.14.1 dhcp-client-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debugsource-4.3.6.P1-150000.6.14.1 dhcp-devel-4.3.6.P1-150000.6.14.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): dhcp-4.3.6.P1-150000.6.14.1 dhcp-client-4.3.6.P1-150000.6.14.1 dhcp-client-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debuginfo-4.3.6.P1-150000.6.14.1 dhcp-debugsource-4.3.6.P1-150000.6.14.1 dhcp-devel-4.3.6.P1-150000.6.14.1 References: https://bugzilla.suse.com/1198657

1 0

SUSE-RU-2022:1828-1: important: Recommended update for oath-toolkit
by maintenance＠opensuse.org 24 May '22

24 May '22

SUSE Recommended Update: Recommended update for oath-toolkit ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1828-1 Rating: important References: #1197790 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for oath-toolkit fixes the following issues: - Fix build issues occurring on SUSE Linux Enterprise 15 Service Pack 4 (bsc#1197790) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1828=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1828=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-1828=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-1828=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1828=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1828=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1828=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1828=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): liboath-devel-2.6.2-150000.3.3.1 liboath0-2.6.2-150000.3.3.1 liboath0-debuginfo-2.6.2-150000.3.3.1 libpskc-devel-2.6.2-150000.3.3.1 libpskc0-2.6.2-150000.3.3.1 libpskc0-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-2.6.2-150000.3.3.1 oath-toolkit-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debugsource-2.6.2-150000.3.3.1 pam_oath-2.6.2-150000.3.3.1 pam_oath-debuginfo-2.6.2-150000.3.3.1 - openSUSE Leap 15.4 (noarch): oath-toolkit-xml-2.6.2-150000.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): liboath-devel-2.6.2-150000.3.3.1 liboath0-2.6.2-150000.3.3.1 liboath0-debuginfo-2.6.2-150000.3.3.1 libpskc-devel-2.6.2-150000.3.3.1 libpskc0-2.6.2-150000.3.3.1 libpskc0-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-2.6.2-150000.3.3.1 oath-toolkit-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debugsource-2.6.2-150000.3.3.1 pam_oath-2.6.2-150000.3.3.1 pam_oath-debuginfo-2.6.2-150000.3.3.1 - openSUSE Leap 15.3 (noarch): oath-toolkit-xml-2.6.2-150000.3.3.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): libpskc-devel-2.6.2-150000.3.3.1 libpskc0-2.6.2-150000.3.3.1 libpskc0-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debugsource-2.6.2-150000.3.3.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): libpskc-devel-2.6.2-150000.3.3.1 libpskc0-2.6.2-150000.3.3.1 libpskc0-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debugsource-2.6.2-150000.3.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x x86_64): oath-toolkit-2.6.2-150000.3.3.1 oath-toolkit-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debugsource-2.6.2-150000.3.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): oath-toolkit-2.6.2-150000.3.3.1 oath-toolkit-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debugsource-2.6.2-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): liboath-devel-2.6.2-150000.3.3.1 liboath0-2.6.2-150000.3.3.1 liboath0-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debugsource-2.6.2-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): oath-toolkit-xml-2.6.2-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): liboath-devel-2.6.2-150000.3.3.1 liboath0-2.6.2-150000.3.3.1 liboath0-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debuginfo-2.6.2-150000.3.3.1 oath-toolkit-debugsource-2.6.2-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): oath-toolkit-xml-2.6.2-150000.3.3.1 References: https://bugzilla.suse.com/1197790

1 0

SUSE-SU-2022:1829-1: moderate: Security update for go1.18
by opensuse-security＠opensuse.org 24 May '22

24 May '22

SUSE Security Update: Security update for go1.18 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1829-1 Rating: moderate References: #1193742 #1199413 Cross-References: CVE-2022-29526 CVSS scores: CVE-2022-29526 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.18 fixes the following issues: - CVE-2022-29526: Fixed faccessat() system call operation that checked the wrong group (bsc#1199413). - go1.18.2 (released 2022-05-10) (bsc#1193742). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1829=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1829=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1829=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1829=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): go1.18-1.18.2-150000.1.17.1 go1.18-doc-1.18.2-150000.1.17.1 - openSUSE Leap 15.4 (aarch64 x86_64): go1.18-race-1.18.2-150000.1.17.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): go1.18-1.18.2-150000.1.17.1 go1.18-doc-1.18.2-150000.1.17.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.18-race-1.18.2-150000.1.17.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): go1.18-1.18.2-150000.1.17.1 go1.18-doc-1.18.2-150000.1.17.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 x86_64): go1.18-race-1.18.2-150000.1.17.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): go1.18-1.18.2-150000.1.17.1 go1.18-doc-1.18.2-150000.1.17.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 x86_64): go1.18-race-1.18.2-150000.1.17.1 References: https://www.suse.com/security/cve/CVE-2022-29526.html https://bugzilla.suse.com/1193742 https://bugzilla.suse.com/1199413

1 0

SUSE-SU-2022:1830-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 24 May '22

24 May '22

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1830-1 Rating: important References: #1199768 Cross-References: CVE-2022-1529 CVE-2022-1802 CVSS scores: CVE-2022-1529 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1802 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.1 ESR - MFSA 2022-19 (bsc#1199768): - CVE-2022-1802: Prototype pollution in Top-Level Await implementation - CVE-2022-1529: Untrusted input used in JavaScript object indexing, leading to prototype pollution Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1830=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1830=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1830=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1830=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1830=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1830=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1830=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1830=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-1830=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1830=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1830=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1830=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1830=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-branding-upstream-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-branding-upstream-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Manager Proxy 4.1 (x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.9.1-150200.152.40.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 References: https://www.suse.com/security/cve/CVE-2022-1529.html https://www.suse.com/security/cve/CVE-2022-1802.html https://bugzilla.suse.com/1199768

1 0

SUSE-SU-2022:1831-1: important: Security update for slurm_20_11
by opensuse-security＠opensuse.org 24 May '22

24 May '22

SUSE Security Update: Security update for slurm_20_11 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1831-1 Rating: important References: #1199278 #1199279 Cross-References: CVE-2022-29500 CVE-2022-29501 CVSS scores: CVE-2022-29500 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29500 (SUSE): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2022-29501 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29501 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for slurm_20_11 fixes the following issues: - CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278). - CVE-2022-29501: Fixed a problem that an unprivileged user could have sent data to arbitrary unix socket as root (bsc#1199279). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1831=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1831=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1831=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1831=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libnss_slurm2_20_11-20.11.9-150200.6.10.1 libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.10.1 libpmi0_20_11-20.11.9-150200.6.10.1 libpmi0_20_11-debuginfo-20.11.9-150200.6.10.1 perl-slurm_20_11-20.11.9-150200.6.10.1 perl-slurm_20_11-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-auth-none-20.11.9-150200.6.10.1 slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-config-20.11.9-150200.6.10.1 slurm_20_11-config-man-20.11.9-150200.6.10.1 slurm_20_11-cray-20.11.9-150200.6.10.1 slurm_20_11-cray-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-debugsource-20.11.9-150200.6.10.1 slurm_20_11-devel-20.11.9-150200.6.10.1 slurm_20_11-doc-20.11.9-150200.6.10.1 slurm_20_11-hdf5-20.11.9-150200.6.10.1 slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-lua-20.11.9-150200.6.10.1 slurm_20_11-lua-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-munge-20.11.9-150200.6.10.1 slurm_20_11-munge-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-node-20.11.9-150200.6.10.1 slurm_20_11-node-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-openlava-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-plugins-20.11.9-150200.6.10.1 slurm_20_11-plugins-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-rest-20.11.9-150200.6.10.1 slurm_20_11-rest-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-seff-20.11.9-150200.6.10.1 slurm_20_11-sjstat-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-sql-20.11.9-150200.6.10.1 slurm_20_11-sql-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-sview-20.11.9-150200.6.10.1 slurm_20_11-sview-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-torque-20.11.9-150200.6.10.1 slurm_20_11-torque-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-webdoc-20.11.9-150200.6.10.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libnss_slurm2_20_11-20.11.9-150200.6.10.1 libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.10.1 libpmi0_20_11-20.11.9-150200.6.10.1 libpmi0_20_11-debuginfo-20.11.9-150200.6.10.1 perl-slurm_20_11-20.11.9-150200.6.10.1 perl-slurm_20_11-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-auth-none-20.11.9-150200.6.10.1 slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-config-20.11.9-150200.6.10.1 slurm_20_11-config-man-20.11.9-150200.6.10.1 slurm_20_11-cray-20.11.9-150200.6.10.1 slurm_20_11-cray-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-debugsource-20.11.9-150200.6.10.1 slurm_20_11-devel-20.11.9-150200.6.10.1 slurm_20_11-doc-20.11.9-150200.6.10.1 slurm_20_11-hdf5-20.11.9-150200.6.10.1 slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-lua-20.11.9-150200.6.10.1 slurm_20_11-lua-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-munge-20.11.9-150200.6.10.1 slurm_20_11-munge-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-node-20.11.9-150200.6.10.1 slurm_20_11-node-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-openlava-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-plugins-20.11.9-150200.6.10.1 slurm_20_11-plugins-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-rest-20.11.9-150200.6.10.1 slurm_20_11-rest-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-seff-20.11.9-150200.6.10.1 slurm_20_11-sjstat-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-sql-20.11.9-150200.6.10.1 slurm_20_11-sql-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-sview-20.11.9-150200.6.10.1 slurm_20_11-sview-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-torque-20.11.9-150200.6.10.1 slurm_20_11-torque-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-webdoc-20.11.9-150200.6.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libnss_slurm2_20_11-20.11.9-150200.6.10.1 libpmi0_20_11-20.11.9-150200.6.10.1 libslurm36-20.11.9-150200.6.10.1 libslurm36-debuginfo-20.11.9-150200.6.10.1 perl-slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-auth-none-20.11.9-150200.6.10.1 slurm_20_11-config-20.11.9-150200.6.10.1 slurm_20_11-config-man-20.11.9-150200.6.10.1 slurm_20_11-devel-20.11.9-150200.6.10.1 slurm_20_11-doc-20.11.9-150200.6.10.1 slurm_20_11-lua-20.11.9-150200.6.10.1 slurm_20_11-munge-20.11.9-150200.6.10.1 slurm_20_11-node-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-20.11.9-150200.6.10.1 slurm_20_11-plugins-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-20.11.9-150200.6.10.1 slurm_20_11-sql-20.11.9-150200.6.10.1 slurm_20_11-sview-20.11.9-150200.6.10.1 slurm_20_11-torque-20.11.9-150200.6.10.1 slurm_20_11-webdoc-20.11.9-150200.6.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libnss_slurm2_20_11-20.11.9-150200.6.10.1 libpmi0_20_11-20.11.9-150200.6.10.1 libslurm36-20.11.9-150200.6.10.1 libslurm36-debuginfo-20.11.9-150200.6.10.1 perl-slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-auth-none-20.11.9-150200.6.10.1 slurm_20_11-config-20.11.9-150200.6.10.1 slurm_20_11-config-man-20.11.9-150200.6.10.1 slurm_20_11-devel-20.11.9-150200.6.10.1 slurm_20_11-doc-20.11.9-150200.6.10.1 slurm_20_11-lua-20.11.9-150200.6.10.1 slurm_20_11-munge-20.11.9-150200.6.10.1 slurm_20_11-node-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-20.11.9-150200.6.10.1 slurm_20_11-plugins-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-20.11.9-150200.6.10.1 slurm_20_11-sql-20.11.9-150200.6.10.1 slurm_20_11-sview-20.11.9-150200.6.10.1 slurm_20_11-torque-20.11.9-150200.6.10.1 slurm_20_11-webdoc-20.11.9-150200.6.10.1 References: https://www.suse.com/security/cve/CVE-2022-29500.html https://www.suse.com/security/cve/CVE-2022-29501.html https://bugzilla.suse.com/1199278 https://bugzilla.suse.com/1199279

1 0