September 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1190244] VUL-0: CVE-2021-40529: Botan,MozillaThunderbird: ElGamal implementation allows plaintext recovery
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1190244 https://bugzilla.suse.com/show_bug.cgi?id=1190244#c7 Jason Sikes <jsikes(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|jsikes(a)suse.com |security-team(a)suse.de --- Comment #7 from Jason Sikes <jsikes(a)suse.com> --- There is nothing to do here for SLE-12. The version of Botan that we have in SLE-12: 1.10.9 already uses a large exponent. In a later version, the author changed to using a shorter exponent. The fix for this CVE is effectively to go back to using a large exponent. Sending back to security-team. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201082] [Build 20220630] Unable to connect to the salt master publisher at /var/run/salt/master
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201082 https://bugzilla.suse.com/show_bug.cgi?id=1201082#c21 --- Comment #21 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2022:3180-1: An update that solves one vulnerability and has 6 fixes is now available. Category: security (moderate) Bug References: 1195895,1197288,1198489,1198744,1199372,1200566,1201082 CVE References: CVE-2022-22967 JIRA References: Sources used: NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198744] salt incompatible with python-Jinja2 3.1
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1198744 https://bugzilla.suse.com/show_bug.cgi?id=1198744#c18 --- Comment #18 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2022:3180-1: An update that solves one vulnerability and has 6 fixes is now available. Category: security (moderate) Bug References: 1195895,1197288,1198489,1198744,1199372,1200566,1201082 CVE References: CVE-2022-22967 JIRA References: Sources used: NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198166] PostgreSQL 11-14 don't build with LLVM 14
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1198166 https://bugzilla.suse.com/show_bug.cgi?id=1198166#c17 --- Comment #17 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2022:3193-1: An update that solves one vulnerability and has one errata is now available. Category: security (important) Bug References: 1198166,1202368 CVE References: CVE-2022-2625 JIRA References: Sources used: SUSE OpenStack Cloud Crowbar 9 (src): postgresql-14-4.17.2 SUSE OpenStack Cloud 9 (src): postgresql-14-4.17.2 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): postgresql-14-4.17.2, postgresql12-12.12-3.30.2 SUSE Linux Enterprise Server for SAP 12-SP4 (src): postgresql-14-4.17.2 SUSE Linux Enterprise Server 12-SP5 (src): postgresql-14-4.17.2, postgresql12-12.12-3.30.2 SUSE Linux Enterprise Server 12-SP4-LTSS (src): postgresql-14-4.17.2 SUSE Linux Enterprise Server 12-SP3-BCL (src): postgresql-14-4.17.2 SUSE Linux Enterprise Server 12-SP2-BCL (src): postgresql-14-4.17.2 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201082] [Build 20220630] Unable to connect to the salt master publisher at /var/run/salt/master
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201082 https://bugzilla.suse.com/show_bug.cgi?id=1201082#c20 --- Comment #20 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:3166-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1195895,1197288,1198489,1198744,1199372,1201082 CVE References: JIRA References: Sources used: openSUSE Leap 15.4 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 openSUSE Leap 15.3 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Manager Tools 15 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Manager Server 4.1 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Manager Retail Branch Server 4.1 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Manager Proxy 4.1 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server for SAP 15-SP2 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server for SAP 15 (src): salt-3004-150000.8.41.43.1 SUSE Linux Enterprise Server 15-SP2-LTSS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server 15-SP2-BCL (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server 15-LTSS (src): salt-3004-150000.8.41.43.1 SUSE Linux Enterprise Module for Basesystem 15-SP4 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): salt-3004-150000.8.41.43.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): salt-3004-150000.8.41.43.1 SUSE Enterprise Storage 7 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Enterprise Storage 6 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE CaaS Platform 4.0 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198744] salt incompatible with python-Jinja2 3.1
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1198744 https://bugzilla.suse.com/show_bug.cgi?id=1198744#c17 --- Comment #17 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:3166-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1195895,1197288,1198489,1198744,1199372,1201082 CVE References: JIRA References: Sources used: openSUSE Leap 15.4 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 openSUSE Leap 15.3 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Manager Tools 15 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Manager Server 4.1 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Manager Retail Branch Server 4.1 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Manager Proxy 4.1 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server for SAP 15-SP2 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server for SAP 15 (src): salt-3004-150000.8.41.43.1 SUSE Linux Enterprise Server 15-SP2-LTSS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server 15-SP2-BCL (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Server 15-LTSS (src): salt-3004-150000.8.41.43.1 SUSE Linux Enterprise Module for Basesystem 15-SP4 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): salt-3004-150000.8.41.43.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): salt-3004-150000.8.41.43.1 SUSE Enterprise Storage 7 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE Enterprise Storage 6 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 SUSE CaaS Platform 4.0 (src): supportutils-plugin-salt-1.2.1-150000.3.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201082] [Build 20220630] Unable to connect to the salt master publisher at /var/run/salt/master
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201082 https://bugzilla.suse.com/show_bug.cgi?id=1201082#c19 --- Comment #19 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:3173-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1195895,1197288,1198489,1198744,1199372,1201082 CVE References: JIRA References: Sources used: SUSE Manager Server 4.1 (src): salt-3004-150200.75.1 SUSE Manager Retail Branch Server 4.1 (src): salt-3004-150200.75.1 SUSE Manager Proxy 4.1 (src): salt-3004-150200.75.1 SUSE Linux Enterprise Server for SAP 15-SP2 (src): salt-3004-150200.75.1 SUSE Linux Enterprise Server 15-SP2-LTSS (src): salt-3004-150200.75.1 SUSE Linux Enterprise Server 15-SP2-BCL (src): salt-3004-150200.75.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (src): salt-3004-150200.75.1 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (src): salt-3004-150200.75.1 SUSE Enterprise Storage 7 (src): salt-3004-150200.75.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198744] salt incompatible with python-Jinja2 3.1
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1198744 https://bugzilla.suse.com/show_bug.cgi?id=1198744#c16 --- Comment #16 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:3173-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1195895,1197288,1198489,1198744,1199372,1201082 CVE References: JIRA References: Sources used: SUSE Manager Server 4.1 (src): salt-3004-150200.75.1 SUSE Manager Retail Branch Server 4.1 (src): salt-3004-150200.75.1 SUSE Manager Proxy 4.1 (src): salt-3004-150200.75.1 SUSE Linux Enterprise Server for SAP 15-SP2 (src): salt-3004-150200.75.1 SUSE Linux Enterprise Server 15-SP2-LTSS (src): salt-3004-150200.75.1 SUSE Linux Enterprise Server 15-SP2-BCL (src): salt-3004-150200.75.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (src): salt-3004-150200.75.1 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (src): salt-3004-150200.75.1 SUSE Enterprise Storage 7 (src): salt-3004-150200.75.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201082] [Build 20220630] Unable to connect to the salt master publisher at /var/run/salt/master
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201082 https://bugzilla.suse.com/show_bug.cgi?id=1201082#c18 --- Comment #18 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:3188-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1195895,1197288,1198489,1198744,1199372,1201082 CVE References: JIRA References: Sources used: openSUSE Leap 15.4 (src): salt-3004-150400.8.11.1 SUSE Linux Enterprise Module for Transactional Server 15-SP4 (src): salt-3004-150400.8.11.1 SUSE Linux Enterprise Module for Server Applications 15-SP4 (src): salt-3004-150400.8.11.1 SUSE Linux Enterprise Module for Basesystem 15-SP4 (src): salt-3004-150400.8.11.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198744] salt incompatible with python-Jinja2 3.1
by bugzilla_noreply＠suse.com 08 Sep '22

08 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1198744 https://bugzilla.suse.com/show_bug.cgi?id=1198744#c15 --- Comment #15 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:3188-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1195895,1197288,1198489,1198744,1199372,1201082 CVE References: JIRA References: Sources used: openSUSE Leap 15.4 (src): salt-3004-150400.8.11.1 SUSE Linux Enterprise Module for Transactional Server 15-SP4 (src): salt-3004-150400.8.11.1 SUSE Linux Enterprise Module for Server Applications 15-SP4 (src): salt-3004-150400.8.11.1 SUSE Linux Enterprise Module for Basesystem 15-SP4 (src): salt-3004-150400.8.11.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0