July 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:2547-1: important: Security update for logrotate
by opensuse-security＠opensuse.org 25 Jul '22

25 Jul '22

SUSE Security Update: Security update for logrotate ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2547-1 Rating: important References: #1192449 #1200278 #1200802 Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for logrotate fixes the following issues: Security issues fixed: - Improved coredump handing for SUID binaries (bsc#1192449). Non-security issues fixed: - Fixed "logrotate emits unintended warning: keyword size not properly separated, found 0x3d" (bsc#1200278, bsc#1200802). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2547=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2547=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2547=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2547=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2547=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2547=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-2547=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2547=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2547=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2547=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2547=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-2547=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2547=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2547=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2547=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2547=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2547=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-2547=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-2547=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-2547=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-2547=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2547=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2547=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Manager Proxy 4.1 (x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 - SUSE CaaS Platform 4.0 (x86_64): logrotate-3.13.0-150000.4.7.1 logrotate-debuginfo-3.13.0-150000.4.7.1 logrotate-debugsource-3.13.0-150000.4.7.1 References: https://bugzilla.suse.com/1192449 https://bugzilla.suse.com/1200278 https://bugzilla.suse.com/1200802

1 0

SUSE-RU-2022:2545-1: moderate: Recommended update for system-role-common-criteria
by maintenance＠opensuse.org 25 Jul '22

25 Jul '22

SUSE Recommended Update: Recommended update for system-role-common-criteria ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2545-1 Rating: moderate References: #1194279 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for system-role-common-criteria fixes the following issues: - Restore UI layout after Common Criteria confirmation (bsc#1194279) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2545=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2545=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): system-role-common-criteria-15.4.1-150400.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): system-role-common-criteria-15.4.1-150400.3.3.1 References: https://bugzilla.suse.com/1194279

1 0

SUSE-SU-2022:2546-1: important: Security update for gpg2
by opensuse-security＠opensuse.org 25 Jul '22

25 Jul '22

SUSE Security Update: Security update for gpg2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2546-1 Rating: important References: #1196125 #1201225 Cross-References: CVE-2022-34903 CVSS scores: CVE-2022-34903 (NVD) : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2022-34903 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for gpg2 fixes the following issues: - CVE-2022-34903: Fixed a status injection vulnerability (bsc#1201225). - Use AES as default cipher instead of 3DES when we are in FIPS mode. (bsc#1196125) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2546=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2546=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2546=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2546=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2546=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2546=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): dirmngr-2.2.27-150300.3.5.1 dirmngr-debuginfo-2.2.27-150300.3.5.1 gpg2-2.2.27-150300.3.5.1 gpg2-debuginfo-2.2.27-150300.3.5.1 gpg2-debugsource-2.2.27-150300.3.5.1 - openSUSE Leap 15.4 (noarch): gpg2-lang-2.2.27-150300.3.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dirmngr-2.2.27-150300.3.5.1 dirmngr-debuginfo-2.2.27-150300.3.5.1 gpg2-2.2.27-150300.3.5.1 gpg2-debuginfo-2.2.27-150300.3.5.1 gpg2-debugsource-2.2.27-150300.3.5.1 - openSUSE Leap 15.3 (noarch): gpg2-lang-2.2.27-150300.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): dirmngr-2.2.27-150300.3.5.1 dirmngr-debuginfo-2.2.27-150300.3.5.1 gpg2-2.2.27-150300.3.5.1 gpg2-debuginfo-2.2.27-150300.3.5.1 gpg2-debugsource-2.2.27-150300.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): gpg2-lang-2.2.27-150300.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): dirmngr-2.2.27-150300.3.5.1 dirmngr-debuginfo-2.2.27-150300.3.5.1 gpg2-2.2.27-150300.3.5.1 gpg2-debuginfo-2.2.27-150300.3.5.1 gpg2-debugsource-2.2.27-150300.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): gpg2-lang-2.2.27-150300.3.5.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): gpg2-2.2.27-150300.3.5.1 gpg2-debuginfo-2.2.27-150300.3.5.1 gpg2-debugsource-2.2.27-150300.3.5.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): gpg2-2.2.27-150300.3.5.1 gpg2-debuginfo-2.2.27-150300.3.5.1 gpg2-debugsource-2.2.27-150300.3.5.1 References: https://www.suse.com/security/cve/CVE-2022-34903.html https://bugzilla.suse.com/1196125 https://bugzilla.suse.com/1201225

1 0

SUSE-SU-2022:2543-1: important: Security update for s390-tools
by opensuse-security＠opensuse.org 25 Jul '22

25 Jul '22

SUSE Security Update: Security update for s390-tools ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2543-1 Rating: important References: #1198581 #1199649 #1200131 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of s390-tools fixes the following issues: - Fixed KMIP plugin failing to connection to KMIP server. When a zkey key repository is bound to the KMIP plugin, and the connection to the KMIP server is to be configired using command 'zkey kms configure --kmip-server <server>', it fails to connect to the specified KMIP server. (bsc#1199649) - rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2543=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2543=1 Package List: - openSUSE Leap 15.4 (s390x): libekmfweb1-2.19.0-150400.7.4.1 libekmfweb1-debuginfo-2.19.0-150400.7.4.1 libekmfweb1-devel-2.19.0-150400.7.4.1 libkmipclient1-2.19.0-150400.7.4.1 libkmipclient1-debuginfo-2.19.0-150400.7.4.1 libkmipclient1-devel-2.19.0-150400.7.4.1 osasnmpd-2.19.0-150400.7.4.1 osasnmpd-debuginfo-2.19.0-150400.7.4.1 s390-tools-2.19.0-150400.7.4.1 s390-tools-chreipl-fcp-mpath-2.19.0-150400.7.4.1 s390-tools-debuginfo-2.19.0-150400.7.4.1 s390-tools-debugsource-2.19.0-150400.7.4.1 s390-tools-hmcdrvfs-2.19.0-150400.7.4.1 s390-tools-hmcdrvfs-debuginfo-2.19.0-150400.7.4.1 s390-tools-zdsfs-2.19.0-150400.7.4.1 s390-tools-zdsfs-debuginfo-2.19.0-150400.7.4.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (s390x): libekmfweb1-2.19.0-150400.7.4.1 libekmfweb1-debuginfo-2.19.0-150400.7.4.1 libekmfweb1-devel-2.19.0-150400.7.4.1 libkmipclient1-2.19.0-150400.7.4.1 libkmipclient1-debuginfo-2.19.0-150400.7.4.1 osasnmpd-2.19.0-150400.7.4.1 osasnmpd-debuginfo-2.19.0-150400.7.4.1 s390-tools-2.19.0-150400.7.4.1 s390-tools-chreipl-fcp-mpath-2.19.0-150400.7.4.1 s390-tools-debuginfo-2.19.0-150400.7.4.1 s390-tools-debugsource-2.19.0-150400.7.4.1 s390-tools-hmcdrvfs-2.19.0-150400.7.4.1 s390-tools-hmcdrvfs-debuginfo-2.19.0-150400.7.4.1 s390-tools-zdsfs-2.19.0-150400.7.4.1 s390-tools-zdsfs-debuginfo-2.19.0-150400.7.4.1 References: https://bugzilla.suse.com/1198581 https://bugzilla.suse.com/1199649 https://bugzilla.suse.com/1200131

1 0

SUSE-SU-2022:2532-1: important: Security update for python-M2Crypto
by opensuse-security＠opensuse.org 22 Jul '22

22 Jul '22

SUSE Security Update: Security update for python-M2Crypto ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2532-1 Rating: important References: #1178829 Cross-References: CVE-2020-25657 CVSS scores: CVE-2020-25657 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-25657 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-M2Crypto fixes the following issues: - CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2532=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2532=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-M2Crypto-debugsource-0.38.0-150400.3.3.1 python3-M2Crypto-0.38.0-150400.3.3.1 python3-M2Crypto-debuginfo-0.38.0-150400.3.3.1 - openSUSE Leap 15.4 (noarch): python-M2Crypto-doc-0.38.0-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): python-M2Crypto-debugsource-0.38.0-150400.3.3.1 python3-M2Crypto-0.38.0-150400.3.3.1 python3-M2Crypto-debuginfo-0.38.0-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-25657.html https://bugzilla.suse.com/1178829

1 0

SUSE-SU-2022:2533-1: important: Security update for mozilla-nss
by opensuse-security＠opensuse.org 22 Jul '22

22 Jul '22

SUSE Security Update: Security update for mozilla-nss ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2533-1 Rating: important References: #1192079 #1192080 #1192086 #1192087 #1192228 #1198486 #1200027 Cross-References: CVE-2022-31741 CVSS scores: CVE-2022-31741 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for mozilla-nss fixes the following issues: Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4: - Makes the PBKDF known answer test compliant with NIST SP800-132. (bsc#1192079). - FIPS: Add on-demand integrity tests through sftk_FIPSRepeatIntegrityCheck() (bsc#1198980). - FIPS: mark algorithms as approved/non-approved according to security policy (bsc#1191546, bsc#1201298). - FIPS: remove hard disabling of unapproved algorithms. This requirement is now fulfilled by the service level indicator (bsc#1200325). - Run test suite at build time, and make it pass (bsc#1198486). - FIPS: skip algorithms that are hard disabled in FIPS mode. - Prevent expired PayPalEE cert from failing the tests. - Allow checksumming to be disabled, but only if we entered FIPS mode due to NSS_FIPS being set, not if it came from /proc. - FIPS: Make the PBKDF known answer test compliant with NIST SP800-132. - Update FIPS validation string to version-release format. - FIPS: remove XCBC MAC from list of FIPS approved algorithms. - Enable NSS_ENABLE_FIPS_INDICATORS and set NSS_FIPS_MODULE_ID for build. - FIPS: claim 3DES unapproved in FIPS mode (bsc#1192080). - FIPS: allow testing of unapproved algorithms (bsc#1192228). - FIPS: add version indicators. (bmo#1729550, bsc#1192086). - FIPS: fix some secret clearing (bmo#1697303, bsc#1192087). Version update to NSS 3.79: - Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls. - Update mercurial in clang-format docker image. - Use of uninitialized pointer in lg_init after alloc fail. - selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo. - Add SECMOD_LockedModuleHasRemovableSlots. - Fix secasn1d parsing of indefinite SEQUENCE inside indefinite GROUP. - Added RFC8422 compliant TLS <= 1.2 undefined/compressed ECPointFormat extension alerts. - TLS 1.3 Server: Send protocol_version alert on unsupported ClientHello.legacy_version. - Correct invalid record inner and outer content type alerts. - NSS does not properly import or export pkcs12 files with large passwords and pkcs5v2 encoding. - improve error handling after nssCKFWInstance_CreateObjectHandle. - Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple. - NSS 3.79 should depend on NSPR 4.34 Version update to NSS 3.78.1: - Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple Version update to NSS 3.78: - Added TLS 1.3 zero-length inner plaintext checks and tests, zero-length record/fragment handling tests. - Reworked overlong record size checks and added TLS1.3 specific boundaries. - Add ECH Grease Support to tstclnt - Add a strict variant of moz::pkix::CheckCertHostname. - Change SSL_REUSE_SERVER_ECDHE_KEY default to false. - Make SEC_PKCS12EnableCipher succeed - Update zlib in NSS to 1.2.12. Version update to NSS 3.77: - Fix link to TLS page on wireshark wiki - Add two D-TRUST 2020 root certificates. - Add Telia Root CA v2 root certificate. - Remove expired explicitly distrusted certificates from certdata.txt. - support specific RSA-PSS parameters in mozilla::pkix - Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate. - Remove token member from NSSSlot struct. - Provide secure variants of mpp_pprime and mpp_make_prime. - Support UTF-8 library path in the module spec string. - Update nssUTF8_Length to RFC 3629 and fix buffer overrun. - Update googletest to 1.11.0 - Add SetTls13GreaseEchSize to experimental API. - TLS 1.3 Illegal legacy_version handling/alerts. - Fix calculation of ECH HRR Transcript. - Allow ld path to be set as environment variable. - Ensure we don't read uninitialized memory in ssl gtests. - Fix DataBuffer Move Assignment. - internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3 - rework signature verification in mozilla::pkix Version update to NSS 3.76.1 - Remove token member from NSSSlot struct. - Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots. - Check return value of PK11Slot_GetNSSToken. - Use Wycheproof JSON for RSASSA-PSS - Add SHA256 fingerprint comments to old certdata.txt entries. - Avoid truncating files in nss-release-helper.py. - Throw illegal_parameter alert for illegal extensions in handshake message. Version update to NSS 3.75 - Make DottedOIDToCode.py compatible with python3. - Avoid undefined shift in SSL_CERT_IS while fuzzing. - Remove redundant key type check. - Update ABI expectations to match ECH changes. - Enable CKM_CHACHA20. - check return on NSS_NoDB_Init and NSS_Shutdown. - Run ECDSA test vectors from bltest as part of the CI tests. - Add ECDSA test vectors to the bltest command line tool. - Allow to build using clang's integrated assembler. - Allow to override python for the build. - test HKDF output rather than input. - Use ASSERT macros to end failed tests early. - move assignment operator for DataBuffer. - Add test cases for ECH compression and unexpected extensions in SH. - Update tests for ECH-13. - Tidy up error handling. - Add tests for ECH HRR Changes. - Server only sends GREASE HRR extension if enabled by preference. - Update generation of the Associated Data for ECH-13. - When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello. - Allow for compressed, non-contiguous, extensions. - Scramble the PSK extension in CHOuter. - Split custom extension handling for ECH. - Add ECH-13 HRR Handling. - Client side ECH padding. - Stricter ClientHelloInner Decompression. - Remove ECH_inner extension, use new enum format. - Update the version number for ECH-13 and adjust the ECHConfig size. Version update to NSS 3.74 - mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses - Ensure clients offer consistent ciphersuites after HRR - NSS does not properly restrict server keys based on policy - Set nssckbi version number to 2.54 - Replace Google Trust Services LLC (GTS) R4 root certificate - Replace Google Trust Services LLC (GTS) R3 root certificate - Replace Google Trust Services LLC (GTS) R2 root certificate - Replace Google Trust Services LLC (GTS) R1 root certificate - Replace GlobalSign ECC Root CA R4 - Remove Expired Root Certificates - DST Root CA X3 - Remove Expiring Cybertrust Global Root and GlobalSign root certificates - Add renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root certificate - Add iTrusChina ECC root certificate - Add iTrusChina RSA root certificate - Add ISRG Root X2 root certificate - Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate - Avoid a clang 13 unused variable warning in opt build - Check for missing signedData field - Ensure DER encoded signatures are within size limits - enable key logging option (boo#1195040) Version update to NSS 3.73.1: - Add SHA-2 support to mozilla::pkix's OSCP implementation Version update to NSS 3.73 - check for missing signedData field. - Ensure DER encoded signatures are within size limits. - NSS needs FiPS 140-3 version indicators. - pkix_CacheCert_Lookup doesn't return cached certs - sunset Coverity from NSS Fixed MFSA 2021-51 (bsc#1193170) CVE-2021-43527: Memory corruption via DER-encoded DSA and RSA-PSS signatures Version update to NSS 3.72 - Fix nsinstall parallel failure. - Increase KDF cache size to mitigate perf regression in about:logins Version update to NSS 3.71 - Set nssckbi version number to 2.52. - Respect server requirements of tlsfuzzer/test-tls13-signature-algorithms.py - Import of PKCS#12 files with Camellia encryption is not supported - Add HARICA Client ECC Root CA 2021. - Add HARICA Client RSA Root CA 2021. - Add HARICA TLS ECC Root CA 2021. - Add HARICA TLS RSA Root CA 2021. - Add TunTrust Root CA certificate to NSS. Version update to NSS 3.70 - Update test case to verify fix. - Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max - Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback - Avoid using a lookup table in nssb64d. - Use HW accelerated SHA2 on AArch64 Big Endian. - Change default value of enableHelloDowngradeCheck to true. - Cache additional PBE entries. - Read HPKE vectors from official JSON. Version update to NSS 3.69.1: - Disable DTLS 1.0 and 1.1 by default - integrity checks in key4.db not happening on private components with AES_CBC NSS 3.69: - Disable DTLS 1.0 and 1.1 by default (backed out again) - integrity checks in key4.db not happening on private components with AES_CBC (backed out again) - SSL handling of signature algorithms ignores environmental invalid algorithms. - sqlite 3.34 changed it's open semantics, causing nss failures. - Gtest update changed the gtest reports, losing gtest details in all.sh reports. - NSS incorrectly accepting 1536 bit DH primes in FIPS mode - SQLite calls could timeout in starvation situations. - Coverity/cpp scanner errors found in nss 3.67 - Import the NSS documentation from MDN in nss/doc. - NSS using a tempdir to measure sql performance not active Version Update to 3.68.4 (bsc#1200027) - CVE-2022-31741: Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple. (bmo#1767590) Mozilla NSPR was updated to version 4.34: * add an API that returns a preferred loopback IP on hosts that have two IP stacks available. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2533=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2533=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2533=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2533=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2533=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2533=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2533=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-2533=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2533=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2533=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2533=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2533=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-2533=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-2533=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2533=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2533=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2533=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2533=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2533=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2533=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-2533=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-2533=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-2533=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-2533=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2533=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2533=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 - openSUSE Leap 15.4 (x86_64): mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - openSUSE Leap 15.3 (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-sysinit-32bit-3.79-150000.3.74.1 mozilla-nss-sysinit-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Manager Server 4.1 (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Manager Proxy 4.1 (x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server for SAP 15 (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Enterprise Storage 7 (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 - SUSE Enterprise Storage 6 (x86_64): libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 - SUSE CaaS Platform 4.0 (x86_64): libfreebl3-3.79-150000.3.74.1 libfreebl3-32bit-3.79-150000.3.74.1 libfreebl3-32bit-debuginfo-3.79-150000.3.74.1 libfreebl3-debuginfo-3.79-150000.3.74.1 libfreebl3-hmac-3.79-150000.3.74.1 libfreebl3-hmac-32bit-3.79-150000.3.74.1 libsoftokn3-3.79-150000.3.74.1 libsoftokn3-32bit-3.79-150000.3.74.1 libsoftokn3-32bit-debuginfo-3.79-150000.3.74.1 libsoftokn3-debuginfo-3.79-150000.3.74.1 libsoftokn3-hmac-3.79-150000.3.74.1 libsoftokn3-hmac-32bit-3.79-150000.3.74.1 mozilla-nspr-32bit-4.34-150000.3.23.1 mozilla-nspr-32bit-debuginfo-4.34-150000.3.23.1 mozilla-nspr-4.34-150000.3.23.1 mozilla-nspr-debuginfo-4.34-150000.3.23.1 mozilla-nspr-debugsource-4.34-150000.3.23.1 mozilla-nspr-devel-4.34-150000.3.23.1 mozilla-nss-3.79-150000.3.74.1 mozilla-nss-32bit-3.79-150000.3.74.1 mozilla-nss-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-3.79-150000.3.74.1 mozilla-nss-certs-32bit-3.79-150000.3.74.1 mozilla-nss-certs-32bit-debuginfo-3.79-150000.3.74.1 mozilla-nss-certs-debuginfo-3.79-150000.3.74.1 mozilla-nss-debuginfo-3.79-150000.3.74.1 mozilla-nss-debugsource-3.79-150000.3.74.1 mozilla-nss-devel-3.79-150000.3.74.1 mozilla-nss-sysinit-3.79-150000.3.74.1 mozilla-nss-sysinit-debuginfo-3.79-150000.3.74.1 mozilla-nss-tools-3.79-150000.3.74.1 mozilla-nss-tools-debuginfo-3.79-150000.3.74.1 References: https://www.suse.com/security/cve/CVE-2022-31741.html https://bugzilla.suse.com/1192079 https://bugzilla.suse.com/1192080 https://bugzilla.suse.com/1192086 https://bugzilla.suse.com/1192087 https://bugzilla.suse.com/1192228 https://bugzilla.suse.com/1198486 https://bugzilla.suse.com/1200027

1 0

SUSE-SU-2022:2530-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 22 Jul '22

22 Jul '22

SUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2530-1 Rating: important References: #1198671 #1198672 #1198673 #1198674 #1198675 Cross-References: CVE-2022-21426 CVE-2022-21434 CVE-2022-21443 CVE-2022-21476 CVE-2022-21496 CVSS scores: CVE-2022-21426 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21426 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21434 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21434 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21443 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21443 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21476 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21476 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21496 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21496 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing SUSE Linux Enterprise Module for Legacy Software 15-SP3 SUSE Linux Enterprise Module for Legacy Software 15-SP4 SUSE Linux Enterprise Server SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u332 - April 2022 CPU (icedtea-3.23.0) - CVE-2022-21426: Better XPath expression handling (bsc#1198672) - CVE-2022-21443: Improved Object Identification (bsc#1198675) - CVE-2022-21434: Better invocation handler handling (bsc#1198674) - CVE-2022-21476: Improve Santuario processing (bsc#1198671) - CVE-2022-21496: Improve URL supports (bsc#1198673) And further Security fixes, Import of OpenJDK 8 u332, Backports and Bug fixes. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2530=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2530=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2530=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2530=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2530=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2530=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2530=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-2530=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2530=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2530=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2530=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-2530=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2022-2530=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP3-2022-2530=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2530=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2530=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-accessibility-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-src-1.8.0.332-150000.3.67.1 - openSUSE Leap 15.4 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.332-150000.3.67.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-accessibility-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-src-1.8.0.332-150000.3.67.1 - openSUSE Leap 15.3 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.332-150000.3.67.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Manager Proxy 4.1 (x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4 (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 - SUSE CaaS Platform 4.0 (x86_64): java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-debugsource-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.332-150000.3.67.1 References: https://www.suse.com/security/cve/CVE-2022-21426.html https://www.suse.com/security/cve/CVE-2022-21434.html https://www.suse.com/security/cve/CVE-2022-21443.html https://www.suse.com/security/cve/CVE-2022-21476.html https://www.suse.com/security/cve/CVE-2022-21496.html https://bugzilla.suse.com/1198671 https://bugzilla.suse.com/1198672 https://bugzilla.suse.com/1198673 https://bugzilla.suse.com/1198674 https://bugzilla.suse.com/1198675

1 0

SUSE-SU-2022:2535-1: important: Security update for git
by opensuse-security＠opensuse.org 22 Jul '22

22 Jul '22

SUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2535-1 Rating: important References: #1200119 #1201431 Cross-References: CVE-2022-29187 CVSS scores: CVE-2022-29187 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29187 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for git fixes the following issues: - CVE-2022-29187: Incomplete fix for CVE-2022-24765: potential command injection via git worktree (bsc#1201431). - Allow to opt-out from the check added in the security fix for CVE-2022-24765 (bsc#1200119) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2535=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2535=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2535=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2535=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2535=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2535=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2535=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-2535=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2535=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2535=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2535=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2535=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-2535=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2535=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2535=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-2535=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-2535=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-2535=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-2535=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2535=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2535=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): git-svn-debuginfo-2.26.2-150000.41.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): git-svn-debuginfo-2.26.2-150000.41.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Manager Server 4.1 (noarch): git-doc-2.26.2-150000.41.1 - SUSE Manager Retail Branch Server 4.1 (noarch): git-doc-2.26.2-150000.41.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Manager Proxy 4.1 (x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Manager Proxy 4.1 (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise Server for SAP 15 (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise Server 15-LTSS (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (noarch): git-doc-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (noarch): git-doc-2.26.2-150000.41.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Enterprise Storage 7 (noarch): git-doc-2.26.2-150000.41.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE Enterprise Storage 6 (noarch): git-doc-2.26.2-150000.41.1 - SUSE CaaS Platform 4.0 (x86_64): git-2.26.2-150000.41.1 git-arch-2.26.2-150000.41.1 git-core-2.26.2-150000.41.1 git-core-debuginfo-2.26.2-150000.41.1 git-cvs-2.26.2-150000.41.1 git-daemon-2.26.2-150000.41.1 git-daemon-debuginfo-2.26.2-150000.41.1 git-debuginfo-2.26.2-150000.41.1 git-debugsource-2.26.2-150000.41.1 git-email-2.26.2-150000.41.1 git-gui-2.26.2-150000.41.1 git-svn-2.26.2-150000.41.1 git-svn-debuginfo-2.26.2-150000.41.1 git-web-2.26.2-150000.41.1 gitk-2.26.2-150000.41.1 - SUSE CaaS Platform 4.0 (noarch): git-doc-2.26.2-150000.41.1 References: https://www.suse.com/security/cve/CVE-2022-29187.html https://bugzilla.suse.com/1200119 https://bugzilla.suse.com/1201431

1 0

SUSE-RU-2022:2528-1: Recommended update for nvme-cli
by maintenance＠opensuse.org 22 Jul '22

22 Jul '22

SUSE Recommended Update: Recommended update for nvme-cli ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2528-1 Rating: low References: #1192761 #1198158 #1199670 #1199865 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for nvme-cli fixes the following issues: - Don't print error on failed to open in nvme-topology.c (bsc#1198158) - Allow selecting the network interface for connections (bsc#1199670) - Support unique discovery subsystem NQN (bsc#1199865 bsc#1192761) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2528=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2528=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2528=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2528=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nvme-cli-1.13-150300.3.17.1 nvme-cli-debuginfo-1.13-150300.3.17.1 nvme-cli-debugsource-1.13-150300.3.17.1 nvme-cli-regress-script-1.13-150300.3.17.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): nvme-cli-1.13-150300.3.17.1 nvme-cli-debuginfo-1.13-150300.3.17.1 nvme-cli-debugsource-1.13-150300.3.17.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): nvme-cli-1.13-150300.3.17.1 nvme-cli-debuginfo-1.13-150300.3.17.1 nvme-cli-debugsource-1.13-150300.3.17.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): nvme-cli-1.13-150300.3.17.1 nvme-cli-debuginfo-1.13-150300.3.17.1 nvme-cli-debugsource-1.13-150300.3.17.1 References: https://bugzilla.suse.com/1192761 https://bugzilla.suse.com/1198158 https://bugzilla.suse.com/1199670 https://bugzilla.suse.com/1199865

1 0

SUSE-SU-2022:2523-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 22 Jul '22

22 Jul '22

SUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2523-1 Rating: important References: #1201221 Cross-References: CVE-2022-22662 CVE-2022-22677 CVE-2022-26710 CVSS scores: CVE-2022-22662 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-22662 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-22677 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-26710 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.36.4 (bsc#1201221): - CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information. - CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted. - CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2523=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-2523=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-2523=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2523=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.36.4-150400.4.6.2 libjavascriptcoregtk-4_0-18-debuginfo-2.36.4-150400.4.6.2 libjavascriptcoregtk-4_1-0-2.36.4-150400.4.6.2 libjavascriptcoregtk-4_1-0-debuginfo-2.36.4-150400.4.6.2 libjavascriptcoregtk-5_0-0-2.36.4-150400.4.6.2 libjavascriptcoregtk-5_0-0-debuginfo-2.36.4-150400.4.6.2 libwebkit2gtk-4_0-37-2.36.4-150400.4.6.2 libwebkit2gtk-4_0-37-debuginfo-2.36.4-150400.4.6.2 libwebkit2gtk-4_1-0-2.36.4-150400.4.6.2 libwebkit2gtk-4_1-0-debuginfo-2.36.4-150400.4.6.2 libwebkit2gtk-5_0-0-2.36.4-150400.4.6.2 libwebkit2gtk-5_0-0-debuginfo-2.36.4-150400.4.6.2 typelib-1_0-JavaScriptCore-4_0-2.36.4-150400.4.6.2 typelib-1_0-JavaScriptCore-4_1-2.36.4-150400.4.6.2 typelib-1_0-JavaScriptCore-5_0-2.36.4-150400.4.6.2 typelib-1_0-WebKit2-4_0-2.36.4-150400.4.6.2 typelib-1_0-WebKit2-4_1-2.36.4-150400.4.6.2 typelib-1_0-WebKit2-5_0-2.36.4-150400.4.6.2 typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150400.4.6.2 typelib-1_0-WebKit2WebExtension-4_1-2.36.4-150400.4.6.2 typelib-1_0-WebKit2WebExtension-5_0-2.36.4-150400.4.6.2 webkit-jsc-4-2.36.4-150400.4.6.2 webkit-jsc-4-debuginfo-2.36.4-150400.4.6.2 webkit-jsc-4.1-2.36.4-150400.4.6.2 webkit-jsc-4.1-debuginfo-2.36.4-150400.4.6.2 webkit-jsc-5.0-2.36.4-150400.4.6.2 webkit-jsc-5.0-debuginfo-2.36.4-150400.4.6.2 webkit2gtk-4_0-injected-bundles-2.36.4-150400.4.6.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.36.4-150400.4.6.2 webkit2gtk-4_1-injected-bundles-2.36.4-150400.4.6.2 webkit2gtk-4_1-injected-bundles-debuginfo-2.36.4-150400.4.6.2 webkit2gtk-5_0-injected-bundles-2.36.4-150400.4.6.2 webkit2gtk-5_0-injected-bundles-debuginfo-2.36.4-150400.4.6.2 webkit2gtk3-debugsource-2.36.4-150400.4.6.2 webkit2gtk3-devel-2.36.4-150400.4.6.2 webkit2gtk3-minibrowser-2.36.4-150400.4.6.2 webkit2gtk3-minibrowser-debuginfo-2.36.4-150400.4.6.2 webkit2gtk3-soup2-debugsource-2.36.4-150400.4.6.2 webkit2gtk3-soup2-devel-2.36.4-150400.4.6.2 webkit2gtk3-soup2-minibrowser-2.36.4-150400.4.6.2 webkit2gtk3-soup2-minibrowser-debuginfo-2.36.4-150400.4.6.2 webkit2gtk4-debugsource-2.36.4-150400.4.6.2 webkit2gtk4-devel-2.36.4-150400.4.6.2 webkit2gtk4-minibrowser-2.36.4-150400.4.6.2 webkit2gtk4-minibrowser-debuginfo-2.36.4-150400.4.6.2 - openSUSE Leap 15.4 (noarch): WebKit2GTK-4.0-lang-2.36.4-150400.4.6.2 WebKit2GTK-4.1-lang-2.36.4-150400.4.6.2 WebKit2GTK-5.0-lang-2.36.4-150400.4.6.2 - openSUSE Leap 15.4 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.36.4-150400.4.6.2 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.36.4-150400.4.6.2 libjavascriptcoregtk-4_1-0-32bit-2.36.4-150400.4.6.2 libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.36.4-150400.4.6.2 libwebkit2gtk-4_0-37-32bit-2.36.4-150400.4.6.2 libwebkit2gtk-4_0-37-32bit-debuginfo-2.36.4-150400.4.6.2 libwebkit2gtk-4_1-0-32bit-2.36.4-150400.4.6.2 libwebkit2gtk-4_1-0-32bit-debuginfo-2.36.4-150400.4.6.2 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-5_0-0-2.36.4-150400.4.6.2 libjavascriptcoregtk-5_0-0-debuginfo-2.36.4-150400.4.6.2 libwebkit2gtk-5_0-0-2.36.4-150400.4.6.2 libwebkit2gtk-5_0-0-debuginfo-2.36.4-150400.4.6.2 typelib-1_0-JavaScriptCore-5_0-2.36.4-150400.4.6.2 typelib-1_0-WebKit2-5_0-2.36.4-150400.4.6.2 webkit2gtk-5_0-injected-bundles-2.36.4-150400.4.6.2 webkit2gtk-5_0-injected-bundles-debuginfo-2.36.4-150400.4.6.2 webkit2gtk4-debugsource-2.36.4-150400.4.6.2 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_1-0-2.36.4-150400.4.6.2 libjavascriptcoregtk-4_1-0-debuginfo-2.36.4-150400.4.6.2 libwebkit2gtk-4_1-0-2.36.4-150400.4.6.2 libwebkit2gtk-4_1-0-debuginfo-2.36.4-150400.4.6.2 typelib-1_0-JavaScriptCore-4_1-2.36.4-150400.4.6.2 typelib-1_0-WebKit2-4_1-2.36.4-150400.4.6.2 typelib-1_0-WebKit2WebExtension-4_1-2.36.4-150400.4.6.2 webkit2gtk-4_1-injected-bundles-2.36.4-150400.4.6.2 webkit2gtk-4_1-injected-bundles-debuginfo-2.36.4-150400.4.6.2 webkit2gtk3-debugsource-2.36.4-150400.4.6.2 webkit2gtk3-devel-2.36.4-150400.4.6.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.36.4-150400.4.6.2 libjavascriptcoregtk-4_0-18-debuginfo-2.36.4-150400.4.6.2 libwebkit2gtk-4_0-37-2.36.4-150400.4.6.2 libwebkit2gtk-4_0-37-debuginfo-2.36.4-150400.4.6.2 typelib-1_0-JavaScriptCore-4_0-2.36.4-150400.4.6.2 typelib-1_0-WebKit2-4_0-2.36.4-150400.4.6.2 typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150400.4.6.2 webkit2gtk-4_0-injected-bundles-2.36.4-150400.4.6.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.36.4-150400.4.6.2 webkit2gtk3-soup2-debugsource-2.36.4-150400.4.6.2 webkit2gtk3-soup2-devel-2.36.4-150400.4.6.2 References: https://www.suse.com/security/cve/CVE-2022-22662.html https://www.suse.com/security/cve/CVE-2022-22677.html https://www.suse.com/security/cve/CVE-2022-26710.html https://bugzilla.suse.com/1201221

1 0