May 2022 - openSUSE Security Announce - openSUSE Mailing Lists

SUSE-SU-2022:1840-1: moderate: Security update for kernel-firmware
by opensuse-security＠opensuse.org 25 May '22

25 May '22

SUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1840-1 Rating: moderate References: #1199459 #1199470 Cross-References: CVE-2021-26312 CVE-2021-26339 CVE-2021-26342 CVE-2021-26347 CVE-2021-26348 CVE-2021-26349 CVE-2021-26350 CVE-2021-26364 CVE-2021-26372 CVE-2021-26373 CVE-2021-26375 CVE-2021-26376 CVE-2021-26378 CVE-2021-26388 CVE-2021-46744 CVSS scores: CVE-2021-26312 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-26339 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26339 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26342 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-26342 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-26347 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26348 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-26349 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-26350 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46744 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for kernel-firmware fixes the following issues: Update AMD ucode and SEV firmware - (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1840=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1840=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1840=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1840=1 Package List: - openSUSE Leap 15.3 (noarch): kernel-firmware-20210208-150300.4.10.1 kernel-firmware-all-20210208-150300.4.10.1 kernel-firmware-amdgpu-20210208-150300.4.10.1 kernel-firmware-ath10k-20210208-150300.4.10.1 kernel-firmware-ath11k-20210208-150300.4.10.1 kernel-firmware-atheros-20210208-150300.4.10.1 kernel-firmware-bluetooth-20210208-150300.4.10.1 kernel-firmware-bnx2-20210208-150300.4.10.1 kernel-firmware-brcm-20210208-150300.4.10.1 kernel-firmware-chelsio-20210208-150300.4.10.1 kernel-firmware-dpaa2-20210208-150300.4.10.1 kernel-firmware-i915-20210208-150300.4.10.1 kernel-firmware-intel-20210208-150300.4.10.1 kernel-firmware-iwlwifi-20210208-150300.4.10.1 kernel-firmware-liquidio-20210208-150300.4.10.1 kernel-firmware-marvell-20210208-150300.4.10.1 kernel-firmware-media-20210208-150300.4.10.1 kernel-firmware-mediatek-20210208-150300.4.10.1 kernel-firmware-mellanox-20210208-150300.4.10.1 kernel-firmware-mwifiex-20210208-150300.4.10.1 kernel-firmware-network-20210208-150300.4.10.1 kernel-firmware-nfp-20210208-150300.4.10.1 kernel-firmware-nvidia-20210208-150300.4.10.1 kernel-firmware-platform-20210208-150300.4.10.1 kernel-firmware-prestera-20210208-150300.4.10.1 kernel-firmware-qlogic-20210208-150300.4.10.1 kernel-firmware-radeon-20210208-150300.4.10.1 kernel-firmware-realtek-20210208-150300.4.10.1 kernel-firmware-serial-20210208-150300.4.10.1 kernel-firmware-sound-20210208-150300.4.10.1 kernel-firmware-ti-20210208-150300.4.10.1 kernel-firmware-ueagle-20210208-150300.4.10.1 kernel-firmware-usb-network-20210208-150300.4.10.1 ucode-amd-20210208-150300.4.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): kernel-firmware-20210208-150300.4.10.1 kernel-firmware-brcm-20210208-150300.4.10.1 ucode-amd-20210208-150300.4.10.1 - SUSE Linux Enterprise Micro 5.2 (noarch): kernel-firmware-all-20210208-150300.4.10.1 kernel-firmware-amdgpu-20210208-150300.4.10.1 kernel-firmware-ath10k-20210208-150300.4.10.1 kernel-firmware-ath11k-20210208-150300.4.10.1 kernel-firmware-atheros-20210208-150300.4.10.1 kernel-firmware-bluetooth-20210208-150300.4.10.1 kernel-firmware-bnx2-20210208-150300.4.10.1 kernel-firmware-brcm-20210208-150300.4.10.1 kernel-firmware-chelsio-20210208-150300.4.10.1 kernel-firmware-dpaa2-20210208-150300.4.10.1 kernel-firmware-i915-20210208-150300.4.10.1 kernel-firmware-intel-20210208-150300.4.10.1 kernel-firmware-iwlwifi-20210208-150300.4.10.1 kernel-firmware-liquidio-20210208-150300.4.10.1 kernel-firmware-marvell-20210208-150300.4.10.1 kernel-firmware-media-20210208-150300.4.10.1 kernel-firmware-mediatek-20210208-150300.4.10.1 kernel-firmware-mellanox-20210208-150300.4.10.1 kernel-firmware-mwifiex-20210208-150300.4.10.1 kernel-firmware-network-20210208-150300.4.10.1 kernel-firmware-nfp-20210208-150300.4.10.1 kernel-firmware-nvidia-20210208-150300.4.10.1 kernel-firmware-platform-20210208-150300.4.10.1 kernel-firmware-prestera-20210208-150300.4.10.1 kernel-firmware-qlogic-20210208-150300.4.10.1 kernel-firmware-radeon-20210208-150300.4.10.1 kernel-firmware-realtek-20210208-150300.4.10.1 kernel-firmware-serial-20210208-150300.4.10.1 kernel-firmware-sound-20210208-150300.4.10.1 kernel-firmware-ti-20210208-150300.4.10.1 kernel-firmware-ueagle-20210208-150300.4.10.1 kernel-firmware-usb-network-20210208-150300.4.10.1 ucode-amd-20210208-150300.4.10.1 - SUSE Linux Enterprise Micro 5.1 (noarch): kernel-firmware-all-20210208-150300.4.10.1 kernel-firmware-amdgpu-20210208-150300.4.10.1 kernel-firmware-ath10k-20210208-150300.4.10.1 kernel-firmware-ath11k-20210208-150300.4.10.1 kernel-firmware-atheros-20210208-150300.4.10.1 kernel-firmware-bluetooth-20210208-150300.4.10.1 kernel-firmware-bnx2-20210208-150300.4.10.1 kernel-firmware-brcm-20210208-150300.4.10.1 kernel-firmware-chelsio-20210208-150300.4.10.1 kernel-firmware-dpaa2-20210208-150300.4.10.1 kernel-firmware-i915-20210208-150300.4.10.1 kernel-firmware-intel-20210208-150300.4.10.1 kernel-firmware-iwlwifi-20210208-150300.4.10.1 kernel-firmware-liquidio-20210208-150300.4.10.1 kernel-firmware-marvell-20210208-150300.4.10.1 kernel-firmware-media-20210208-150300.4.10.1 kernel-firmware-mediatek-20210208-150300.4.10.1 kernel-firmware-mellanox-20210208-150300.4.10.1 kernel-firmware-mwifiex-20210208-150300.4.10.1 kernel-firmware-network-20210208-150300.4.10.1 kernel-firmware-nfp-20210208-150300.4.10.1 kernel-firmware-nvidia-20210208-150300.4.10.1 kernel-firmware-platform-20210208-150300.4.10.1 kernel-firmware-prestera-20210208-150300.4.10.1 kernel-firmware-qlogic-20210208-150300.4.10.1 kernel-firmware-radeon-20210208-150300.4.10.1 kernel-firmware-realtek-20210208-150300.4.10.1 kernel-firmware-serial-20210208-150300.4.10.1 kernel-firmware-sound-20210208-150300.4.10.1 kernel-firmware-ti-20210208-150300.4.10.1 kernel-firmware-ueagle-20210208-150300.4.10.1 kernel-firmware-usb-network-20210208-150300.4.10.1 ucode-amd-20210208-150300.4.10.1 References: https://www.suse.com/security/cve/CVE-2021-26312.html https://www.suse.com/security/cve/CVE-2021-26339.html https://www.suse.com/security/cve/CVE-2021-26342.html https://www.suse.com/security/cve/CVE-2021-26347.html https://www.suse.com/security/cve/CVE-2021-26348.html https://www.suse.com/security/cve/CVE-2021-26349.html https://www.suse.com/security/cve/CVE-2021-26350.html https://www.suse.com/security/cve/CVE-2021-26364.html https://www.suse.com/security/cve/CVE-2021-26372.html https://www.suse.com/security/cve/CVE-2021-26373.html https://www.suse.com/security/cve/CVE-2021-26375.html https://www.suse.com/security/cve/CVE-2021-26376.html https://www.suse.com/security/cve/CVE-2021-26378.html https://www.suse.com/security/cve/CVE-2021-26388.html https://www.suse.com/security/cve/CVE-2021-46744.html https://bugzilla.suse.com/1199459 https://bugzilla.suse.com/1199470

1 0

openSUSE-SU-2022:0145-1: moderate: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 24 May '22

24 May '22

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0145-1 Rating: moderate References: #1192408 #1196692 Cross-References: CVE-2022-0730 CVSS scores: CVE-2022-0730 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine was updated to 1.2.20: * Add support for newer versions of MySQL/MariaDB * When checking for uptime of device, don't assume a non-response is always fatal * Fix description and command trunctation issues * Improve spine performance when only one snmp agent port is in use cacti-spine 1.2.19: * Fix 1ssues with polling loop may skip some datasources * Fix ping no longer works due to hostname changes * Fix RRD steps are not always calculated correctly * Fix unable to build when DES no longer supported * Fix IPv6 devices are not properly parsed * Reduce a number of compiler warnings * Fix compiler warnings due to lack of return in thread_mutex_trylock * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows * Improve performance of Cacti poller on heavily loaded systems cacti-spine 1.2.20: * Add support for newer versions of MySQL/MariaDB * When checking for uptime of device, don't assume a non-response is always fatal * Fix description and command trunctation issues * Improve spine performance when only one snmp agent port is in use cacti was updated to 1.2.20: * Security fix for CVE-2022-0730, boo#1196692 Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types. * Security fix: Device, Graph, Graph Template, and Graph Items may be vulnerable to XSS issues * Security fix: Lockout policies are not properly applied to LDAP and Domain Users * Security fix: When using 'remember me' option, incorrect realm may be selected * Security fix: User and Group maintenance are vulnerable to SQL attacks * Security fix: Color Templates are vulnerable to XSS attack * Features: * When creating a Data Source Profile, allow additional choices for Heartbeat * Change select all options to use Font Awesome icons * Improve spine performance by storing the total number of system snmp_ports in use * Prevent Template User Accounts from being Removed * When managing by users, allow filtering by Realm * Allow plugins to supply template account names * When viewing logs, additional message types should be filterable * When creating a Graph Template Item, allow filtering by Data Template * Allow language handler to be selected via UI * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco * Add Advanced Ping Graph Template to initial Installable templates * Add LDAP Debug Mode option * Allow Reports to include devices not on a Tree * Allow Basic Authentication to display custom failure message * Fix: When replicating data during installation/upgrade, system may appear to hang * Fix: Graph Template Items may have duplicated entries * Fix: Unable to Save Graph Settings * Fix: Script Server may crash if an OID is missing or unavailable * Fix: When system-wide polling is disabled, remote pollers may fail to sync changed settings * Fix: When updating poller name, duplicate name protection may be over zealous * Fix: Titles may show "Missing Datasource" incorectly * Fix: Checking for MIB Cache can cause crashes * Fix: Polling cycles may not always complete as expected * Fix: When viewing graph data, non-numeric values may appear * Fix: Utilities view has calculation errors when there are no data sources * Fix: When editing Reports, drag and drop may not function as intended * Fix: When data drive is full, viewing a Graph can result in errors * Various other bug fixes cacti 1.2.19: * Further fixes for grave character security protection (boo#1192408) * Fix Over aggressive escaping causing menu visibility issues on Create Device page * Add SHA256 and AES256 security levels for SNMP polling * Import graph template(Preview Only) show color_id new value as a blank area * Fix Editing graphs errors due to missing sequence * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen * Fix 2hen RealTime is not active, console errors may appear * Fix race conditions may occur when multiple RRDtool processes are running * Fix errors creating graphs from templates * Fix errors when duplicating reports * Fix Boost may be blocked by overflowing poller_output table * Fix Template import may be blocked due to unmet dependency warnings with snmp ports * Fix Newer MySQL versions may error if committing a transaction when not in one * Fix SNMP Agent may not find a cache item * Fix Correct issues running under PHP 8.x * Fix When polling is disabled, boost may crash and creates many arch tables * Fix When poller runs, memory tables may not always be present * Fix Timezones may sometimes be incorrectly calculated * Fix Allow monitoring IPv6 with interface graphs * Fix When a data source uses a Data Input Method, those without a mapping should be flagged * Fix When RRDfile is not yet created, errors may appear when displaying the graph * Fix Cacti missing key indexes that result in Preset pages slowdowns * Fix Data Sources page shows no name when Data Source has no name cache * Fix db_update_table function can not alter table from signed to unsigned * Fix data remains in poller_output table even if it's flushed to rrd files * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places * Fix Offset is a reserved word in MariaDB 10.6 affecting Report * Fix Rendering large trees slowed due to lack of permission caching * Fix Error on interpretation of snmpUtime, when to big * Fix Applying right axis formatting creates an error-image * Fix Unable to Save Graph Settings from the Graphs pages * Fix Graph Template Cache is nullified too often when Graph Automation is running * Fix When Adding a Data Query to a Device, no Progress Spinner is shown * Fix New Browser Breaks Plugins that depend on non UTC date time data * Fix errors when testing remote poller connectivity * Fix errors when renaming poller * Fix Removing spikes by Variance does not appear to be working beyond the first RRA * Fix LDAP API lacks timeout options leading to bad login experiences * Add a normal/wrap class for general use * Limit File Types available for Template Import operations * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication * Support Stronger Encryption Available Starting in Net-SNMP v5.8 * Allow Cacti to use multiple possible LDAP servers * Add a 15 minute polling/sampling interval * Provide additional admin email notifications * Add warnings for undesired changes to plugin hook return values * When creating a Graph, make testing the Data Sources optional by Template * Update phpseclib to 2.0.33 * Update jstree.js to 3.3.12 * Improve performance of Cacti poller on heavily loaded systems * MariaDB recommendations need some tuning for recent updates Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-145=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-145=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): cacti-spine-1.2.20-bp153.2.9.1 - openSUSE Backports SLE-15-SP3 (noarch): cacti-1.2.20-bp153.2.9.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): cacti-spine-1.2.20-20.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): cacti-1.2.20-26.1 References: https://www.suse.com/security/cve/CVE-2022-0730.html https://bugzilla.suse.com/1192408 https://bugzilla.suse.com/1196692

1 0

SUSE-SU-2022:1829-1: moderate: Security update for go1.18
by opensuse-security＠opensuse.org 24 May '22

24 May '22

SUSE Security Update: Security update for go1.18 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1829-1 Rating: moderate References: #1193742 #1199413 Cross-References: CVE-2022-29526 CVSS scores: CVE-2022-29526 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.18 fixes the following issues: - CVE-2022-29526: Fixed faccessat() system call operation that checked the wrong group (bsc#1199413). - go1.18.2 (released 2022-05-10) (bsc#1193742). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1829=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1829=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1829=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1829=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): go1.18-1.18.2-150000.1.17.1 go1.18-doc-1.18.2-150000.1.17.1 - openSUSE Leap 15.4 (aarch64 x86_64): go1.18-race-1.18.2-150000.1.17.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): go1.18-1.18.2-150000.1.17.1 go1.18-doc-1.18.2-150000.1.17.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.18-race-1.18.2-150000.1.17.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): go1.18-1.18.2-150000.1.17.1 go1.18-doc-1.18.2-150000.1.17.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 x86_64): go1.18-race-1.18.2-150000.1.17.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): go1.18-1.18.2-150000.1.17.1 go1.18-doc-1.18.2-150000.1.17.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 x86_64): go1.18-race-1.18.2-150000.1.17.1 References: https://www.suse.com/security/cve/CVE-2022-29526.html https://bugzilla.suse.com/1193742 https://bugzilla.suse.com/1199413

1 0

SUSE-SU-2022:1830-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 24 May '22

24 May '22

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1830-1 Rating: important References: #1199768 Cross-References: CVE-2022-1529 CVE-2022-1802 CVSS scores: CVE-2022-1529 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1802 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.1 ESR - MFSA 2022-19 (bsc#1199768): - CVE-2022-1802: Prototype pollution in Top-Level Await implementation - CVE-2022-1529: Untrusted input used in JavaScript object indexing, leading to prototype pollution Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1830=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1830=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1830=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1830=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1830=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1830=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1830=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1830=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-1830=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1830=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1830=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1830=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1830=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-branding-upstream-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-branding-upstream-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Manager Proxy 4.1 (x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.9.1-150200.152.40.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): MozillaFirefox-91.9.1-150200.152.40.1 MozillaFirefox-debuginfo-91.9.1-150200.152.40.1 MozillaFirefox-debugsource-91.9.1-150200.152.40.1 MozillaFirefox-devel-91.9.1-150200.152.40.1 MozillaFirefox-translations-common-91.9.1-150200.152.40.1 MozillaFirefox-translations-other-91.9.1-150200.152.40.1 References: https://www.suse.com/security/cve/CVE-2022-1529.html https://www.suse.com/security/cve/CVE-2022-1802.html https://bugzilla.suse.com/1199768

1 0

SUSE-SU-2022:1831-1: important: Security update for slurm_20_11
by opensuse-security＠opensuse.org 24 May '22

24 May '22

SUSE Security Update: Security update for slurm_20_11 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1831-1 Rating: important References: #1199278 #1199279 Cross-References: CVE-2022-29500 CVE-2022-29501 CVSS scores: CVE-2022-29500 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29500 (SUSE): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2022-29501 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29501 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for slurm_20_11 fixes the following issues: - CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278). - CVE-2022-29501: Fixed a problem that an unprivileged user could have sent data to arbitrary unix socket as root (bsc#1199279). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1831=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1831=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1831=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1831=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libnss_slurm2_20_11-20.11.9-150200.6.10.1 libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.10.1 libpmi0_20_11-20.11.9-150200.6.10.1 libpmi0_20_11-debuginfo-20.11.9-150200.6.10.1 perl-slurm_20_11-20.11.9-150200.6.10.1 perl-slurm_20_11-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-auth-none-20.11.9-150200.6.10.1 slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-config-20.11.9-150200.6.10.1 slurm_20_11-config-man-20.11.9-150200.6.10.1 slurm_20_11-cray-20.11.9-150200.6.10.1 slurm_20_11-cray-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-debugsource-20.11.9-150200.6.10.1 slurm_20_11-devel-20.11.9-150200.6.10.1 slurm_20_11-doc-20.11.9-150200.6.10.1 slurm_20_11-hdf5-20.11.9-150200.6.10.1 slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-lua-20.11.9-150200.6.10.1 slurm_20_11-lua-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-munge-20.11.9-150200.6.10.1 slurm_20_11-munge-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-node-20.11.9-150200.6.10.1 slurm_20_11-node-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-openlava-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-plugins-20.11.9-150200.6.10.1 slurm_20_11-plugins-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-rest-20.11.9-150200.6.10.1 slurm_20_11-rest-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-seff-20.11.9-150200.6.10.1 slurm_20_11-sjstat-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-sql-20.11.9-150200.6.10.1 slurm_20_11-sql-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-sview-20.11.9-150200.6.10.1 slurm_20_11-sview-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-torque-20.11.9-150200.6.10.1 slurm_20_11-torque-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-webdoc-20.11.9-150200.6.10.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libnss_slurm2_20_11-20.11.9-150200.6.10.1 libnss_slurm2_20_11-debuginfo-20.11.9-150200.6.10.1 libpmi0_20_11-20.11.9-150200.6.10.1 libpmi0_20_11-debuginfo-20.11.9-150200.6.10.1 perl-slurm_20_11-20.11.9-150200.6.10.1 perl-slurm_20_11-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-auth-none-20.11.9-150200.6.10.1 slurm_20_11-auth-none-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-config-20.11.9-150200.6.10.1 slurm_20_11-config-man-20.11.9-150200.6.10.1 slurm_20_11-cray-20.11.9-150200.6.10.1 slurm_20_11-cray-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-debugsource-20.11.9-150200.6.10.1 slurm_20_11-devel-20.11.9-150200.6.10.1 slurm_20_11-doc-20.11.9-150200.6.10.1 slurm_20_11-hdf5-20.11.9-150200.6.10.1 slurm_20_11-hdf5-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-lua-20.11.9-150200.6.10.1 slurm_20_11-lua-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-munge-20.11.9-150200.6.10.1 slurm_20_11-munge-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-node-20.11.9-150200.6.10.1 slurm_20_11-node-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-openlava-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-plugins-20.11.9-150200.6.10.1 slurm_20_11-plugins-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-rest-20.11.9-150200.6.10.1 slurm_20_11-rest-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-seff-20.11.9-150200.6.10.1 slurm_20_11-sjstat-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-sql-20.11.9-150200.6.10.1 slurm_20_11-sql-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-sview-20.11.9-150200.6.10.1 slurm_20_11-sview-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-torque-20.11.9-150200.6.10.1 slurm_20_11-torque-debuginfo-20.11.9-150200.6.10.1 slurm_20_11-webdoc-20.11.9-150200.6.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libnss_slurm2_20_11-20.11.9-150200.6.10.1 libpmi0_20_11-20.11.9-150200.6.10.1 libslurm36-20.11.9-150200.6.10.1 libslurm36-debuginfo-20.11.9-150200.6.10.1 perl-slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-auth-none-20.11.9-150200.6.10.1 slurm_20_11-config-20.11.9-150200.6.10.1 slurm_20_11-config-man-20.11.9-150200.6.10.1 slurm_20_11-devel-20.11.9-150200.6.10.1 slurm_20_11-doc-20.11.9-150200.6.10.1 slurm_20_11-lua-20.11.9-150200.6.10.1 slurm_20_11-munge-20.11.9-150200.6.10.1 slurm_20_11-node-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-20.11.9-150200.6.10.1 slurm_20_11-plugins-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-20.11.9-150200.6.10.1 slurm_20_11-sql-20.11.9-150200.6.10.1 slurm_20_11-sview-20.11.9-150200.6.10.1 slurm_20_11-torque-20.11.9-150200.6.10.1 slurm_20_11-webdoc-20.11.9-150200.6.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libnss_slurm2_20_11-20.11.9-150200.6.10.1 libpmi0_20_11-20.11.9-150200.6.10.1 libslurm36-20.11.9-150200.6.10.1 libslurm36-debuginfo-20.11.9-150200.6.10.1 perl-slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-20.11.9-150200.6.10.1 slurm_20_11-auth-none-20.11.9-150200.6.10.1 slurm_20_11-config-20.11.9-150200.6.10.1 slurm_20_11-config-man-20.11.9-150200.6.10.1 slurm_20_11-devel-20.11.9-150200.6.10.1 slurm_20_11-doc-20.11.9-150200.6.10.1 slurm_20_11-lua-20.11.9-150200.6.10.1 slurm_20_11-munge-20.11.9-150200.6.10.1 slurm_20_11-node-20.11.9-150200.6.10.1 slurm_20_11-pam_slurm-20.11.9-150200.6.10.1 slurm_20_11-plugins-20.11.9-150200.6.10.1 slurm_20_11-slurmdbd-20.11.9-150200.6.10.1 slurm_20_11-sql-20.11.9-150200.6.10.1 slurm_20_11-sview-20.11.9-150200.6.10.1 slurm_20_11-torque-20.11.9-150200.6.10.1 slurm_20_11-webdoc-20.11.9-150200.6.10.1 References: https://www.suse.com/security/cve/CVE-2022-29500.html https://www.suse.com/security/cve/CVE-2022-29501.html https://bugzilla.suse.com/1199278 https://bugzilla.suse.com/1199279

1 0

openSUSE-SU-2022:0145-1: moderate: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 24 May '22

24 May '22

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0145-1 Rating: moderate References: #1192408 #1196692 Cross-References: CVE-2022-0730 CVSS scores: CVE-2022-0730 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine was updated to 1.2.20: * Add support for newer versions of MySQL/MariaDB * When checking for uptime of device, don't assume a non-response is always fatal * Fix description and command trunctation issues * Improve spine performance when only one snmp agent port is in use cacti-spine 1.2.19: * Fix 1ssues with polling loop may skip some datasources * Fix ping no longer works due to hostname changes * Fix RRD steps are not always calculated correctly * Fix unable to build when DES no longer supported * Fix IPv6 devices are not properly parsed * Reduce a number of compiler warnings * Fix compiler warnings due to lack of return in thread_mutex_trylock * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows * Improve performance of Cacti poller on heavily loaded systems cacti-spine 1.2.20: * Add support for newer versions of MySQL/MariaDB * When checking for uptime of device, don't assume a non-response is always fatal * Fix description and command trunctation issues * Improve spine performance when only one snmp agent port is in use cacti was updated to 1.2.20: * Security fix for CVE-2022-0730, boo#1196692 Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types. * Security fix: Device, Graph, Graph Template, and Graph Items may be vulnerable to XSS issues * Security fix: Lockout policies are not properly applied to LDAP and Domain Users * Security fix: When using 'remember me' option, incorrect realm may be selected * Security fix: User and Group maintenance are vulnerable to SQL attacks * Security fix: Color Templates are vulnerable to XSS attack * Features: * When creating a Data Source Profile, allow additional choices for Heartbeat * Change select all options to use Font Awesome icons * Improve spine performance by storing the total number of system snmp_ports in use * Prevent Template User Accounts from being Removed * When managing by users, allow filtering by Realm * Allow plugins to supply template account names * When viewing logs, additional message types should be filterable * When creating a Graph Template Item, allow filtering by Data Template * Allow language handler to be selected via UI * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco * Add Advanced Ping Graph Template to initial Installable templates * Add LDAP Debug Mode option * Allow Reports to include devices not on a Tree * Allow Basic Authentication to display custom failure message * Fix: When replicating data during installation/upgrade, system may appear to hang * Fix: Graph Template Items may have duplicated entries * Fix: Unable to Save Graph Settings * Fix: Script Server may crash if an OID is missing or unavailable * Fix: When system-wide polling is disabled, remote pollers may fail to sync changed settings * Fix: When updating poller name, duplicate name protection may be over zealous * Fix: Titles may show "Missing Datasource" incorectly * Fix: Checking for MIB Cache can cause crashes * Fix: Polling cycles may not always complete as expected * Fix: When viewing graph data, non-numeric values may appear * Fix: Utilities view has calculation errors when there are no data sources * Fix: When editing Reports, drag and drop may not function as intended * Fix: When data drive is full, viewing a Graph can result in errors * Various other bug fixes cacti 1.2.19: * Further fixes for grave character security protection (boo#1192408) * Fix Over aggressive escaping causing menu visibility issues on Create Device page * Add SHA256 and AES256 security levels for SNMP polling * Import graph template(Preview Only) show color_id new value as a blank area * Fix Editing graphs errors due to missing sequence * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen * Fix 2hen RealTime is not active, console errors may appear * Fix race conditions may occur when multiple RRDtool processes are running * Fix errors creating graphs from templates * Fix errors when duplicating reports * Fix Boost may be blocked by overflowing poller_output table * Fix Template import may be blocked due to unmet dependency warnings with snmp ports * Fix Newer MySQL versions may error if committing a transaction when not in one * Fix SNMP Agent may not find a cache item * Fix Correct issues running under PHP 8.x * Fix When polling is disabled, boost may crash and creates many arch tables * Fix When poller runs, memory tables may not always be present * Fix Timezones may sometimes be incorrectly calculated * Fix Allow monitoring IPv6 with interface graphs * Fix When a data source uses a Data Input Method, those without a mapping should be flagged * Fix When RRDfile is not yet created, errors may appear when displaying the graph * Fix Cacti missing key indexes that result in Preset pages slowdowns * Fix Data Sources page shows no name when Data Source has no name cache * Fix db_update_table function can not alter table from signed to unsigned * Fix data remains in poller_output table even if it's flushed to rrd files * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places * Fix Offset is a reserved word in MariaDB 10.6 affecting Report * Fix Rendering large trees slowed due to lack of permission caching * Fix Error on interpretation of snmpUtime, when to big * Fix Applying right axis formatting creates an error-image * Fix Unable to Save Graph Settings from the Graphs pages * Fix Graph Template Cache is nullified too often when Graph Automation is running * Fix When Adding a Data Query to a Device, no Progress Spinner is shown * Fix New Browser Breaks Plugins that depend on non UTC date time data * Fix errors when testing remote poller connectivity * Fix errors when renaming poller * Fix Removing spikes by Variance does not appear to be working beyond the first RRA * Fix LDAP API lacks timeout options leading to bad login experiences * Add a normal/wrap class for general use * Limit File Types available for Template Import operations * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication * Support Stronger Encryption Available Starting in Net-SNMP v5.8 * Allow Cacti to use multiple possible LDAP servers * Add a 15 minute polling/sampling interval * Provide additional admin email notifications * Add warnings for undesired changes to plugin hook return values * When creating a Graph, make testing the Data Sources optional by Template * Update phpseclib to 2.0.33 * Update jstree.js to 3.3.12 * Improve performance of Cacti poller on heavily loaded systems * MariaDB recommendations need some tuning for recent updates Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-145=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): cacti-spine-1.2.20-bp153.2.9.1 - openSUSE Backports SLE-15-SP3 (noarch): cacti-1.2.20-bp153.2.9.1 References: https://www.suse.com/security/cve/CVE-2022-0730.html https://bugzilla.suse.com/1192408 https://bugzilla.suse.com/1196692

1 0

SUSE-SU-2022:1803-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 23 May '22

23 May '22

SUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1803-1 Rating: moderate References: #1197634 Cross-References: CVE-2022-26280 CVSS scores: CVE-2022-26280 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-26280 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libarchive fixes the following issues: - CVE-2022-26280: Fixed out-of-bounds read via the component zipx_lzma_alone_init (bsc#1197634). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1803=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1803=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1803=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): bsdtar-3.4.2-150200.4.6.1 bsdtar-debuginfo-3.4.2-150200.4.6.1 libarchive-debugsource-3.4.2-150200.4.6.1 libarchive-devel-3.4.2-150200.4.6.1 libarchive13-3.4.2-150200.4.6.1 libarchive13-debuginfo-3.4.2-150200.4.6.1 - openSUSE Leap 15.3 (x86_64): libarchive13-32bit-3.4.2-150200.4.6.1 libarchive13-32bit-debuginfo-3.4.2-150200.4.6.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): bsdtar-3.4.2-150200.4.6.1 bsdtar-debuginfo-3.4.2-150200.4.6.1 libarchive-debugsource-3.4.2-150200.4.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libarchive-debugsource-3.4.2-150200.4.6.1 libarchive-devel-3.4.2-150200.4.6.1 libarchive13-3.4.2-150200.4.6.1 libarchive13-debuginfo-3.4.2-150200.4.6.1 References: https://www.suse.com/security/cve/CVE-2022-26280.html https://bugzilla.suse.com/1197634

1 0

openSUSE-SU-2022:0143-1: critical: Security update for librecad
by opensuse-security＠opensuse.org 23 May '22

23 May '22

openSUSE Security Update: Security update for librecad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0143-1 Rating: critical References: #1195105 #1195122 Cross-References: CVE-2021-45341 CVE-2021-45342 CVSS scores: CVE-2021-45341 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-45342 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for librecad fixes the following issues: - CVE-2021-45341: Fixed a buffer overflow vulnerability in LibreCAD that allowed an attacker to achieve remote code execution via a crafted JWW document [boo#1195105] - CVE-2021-45342: Fixed a buffer overflow vulnerability in jwwlib in LibreCAD allows an attacker to achieve remote code execution via a crafted JWW document [boo#1195122] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-143=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): librecad-2.2.0~rc3-bp153.2.9.1 - openSUSE Backports SLE-15-SP3 (noarch): librecad-parts-2.2.0~rc3-bp153.2.9.1 References: https://www.suse.com/security/cve/CVE-2021-45341.html https://www.suse.com/security/cve/CVE-2021-45342.html https://bugzilla.suse.com/1195105 https://bugzilla.suse.com/1195122

1 0

openSUSE-SU-2022:0142-1: moderate: Security update for libxls
by opensuse-security＠opensuse.org 21 May '22

21 May '22

openSUSE Security Update: Security update for libxls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0142-1 Rating: moderate References: #1192323 Cross-References: CVE-2021-27836 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libxls fixes the following issues: - CVE-2021-27836: Fixed possible NULL pointer dereference via crafted XLS (boo#1192323) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-142=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): libxls-devel-1.6.2-bp153.2.6.1 libxls-tools-1.6.2-bp153.2.6.1 libxlsreader8-1.6.2-bp153.2.6.1 References: https://www.suse.com/security/cve/CVE-2021-27836.html https://bugzilla.suse.com/1192323

1 0

SUSE-SU-2022:1768-1: Security update for php7
by opensuse-security＠opensuse.org 20 May '22

20 May '22

SUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1768-1 Rating: low References: #1197644 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Web Scripting 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for php7 fixes the following issues: - Fixed filter_var bypass vulnerability (bsc#1197644). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1768=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1768=1 - SUSE Linux Enterprise Module for Web Scripting 15-SP3: zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP3-2022-1768=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1768=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): php7-firebird-7.4.6-150200.3.38.2 php7-firebird-debuginfo-7.4.6-150200.3.38.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-150200.3.38.2 apache2-mod_php7-debuginfo-7.4.6-150200.3.38.2 php7-7.4.6-150200.3.38.2 php7-bcmath-7.4.6-150200.3.38.2 php7-bcmath-debuginfo-7.4.6-150200.3.38.2 php7-bz2-7.4.6-150200.3.38.2 php7-bz2-debuginfo-7.4.6-150200.3.38.2 php7-calendar-7.4.6-150200.3.38.2 php7-calendar-debuginfo-7.4.6-150200.3.38.2 php7-ctype-7.4.6-150200.3.38.2 php7-ctype-debuginfo-7.4.6-150200.3.38.2 php7-curl-7.4.6-150200.3.38.2 php7-curl-debuginfo-7.4.6-150200.3.38.2 php7-dba-7.4.6-150200.3.38.2 php7-dba-debuginfo-7.4.6-150200.3.38.2 php7-debuginfo-7.4.6-150200.3.38.2 php7-debugsource-7.4.6-150200.3.38.2 php7-devel-7.4.6-150200.3.38.2 php7-dom-7.4.6-150200.3.38.2 php7-dom-debuginfo-7.4.6-150200.3.38.2 php7-embed-7.4.6-150200.3.38.2 php7-embed-debuginfo-7.4.6-150200.3.38.2 php7-enchant-7.4.6-150200.3.38.2 php7-enchant-debuginfo-7.4.6-150200.3.38.2 php7-exif-7.4.6-150200.3.38.2 php7-exif-debuginfo-7.4.6-150200.3.38.2 php7-fastcgi-7.4.6-150200.3.38.2 php7-fastcgi-debuginfo-7.4.6-150200.3.38.2 php7-fileinfo-7.4.6-150200.3.38.2 php7-fileinfo-debuginfo-7.4.6-150200.3.38.2 php7-firebird-7.4.6-150200.3.38.2 php7-firebird-debuginfo-7.4.6-150200.3.38.2 php7-fpm-7.4.6-150200.3.38.2 php7-fpm-debuginfo-7.4.6-150200.3.38.2 php7-ftp-7.4.6-150200.3.38.2 php7-ftp-debuginfo-7.4.6-150200.3.38.2 php7-gd-7.4.6-150200.3.38.2 php7-gd-debuginfo-7.4.6-150200.3.38.2 php7-gettext-7.4.6-150200.3.38.2 php7-gettext-debuginfo-7.4.6-150200.3.38.2 php7-gmp-7.4.6-150200.3.38.2 php7-gmp-debuginfo-7.4.6-150200.3.38.2 php7-iconv-7.4.6-150200.3.38.2 php7-iconv-debuginfo-7.4.6-150200.3.38.2 php7-intl-7.4.6-150200.3.38.2 php7-intl-debuginfo-7.4.6-150200.3.38.2 php7-json-7.4.6-150200.3.38.2 php7-json-debuginfo-7.4.6-150200.3.38.2 php7-ldap-7.4.6-150200.3.38.2 php7-ldap-debuginfo-7.4.6-150200.3.38.2 php7-mbstring-7.4.6-150200.3.38.2 php7-mbstring-debuginfo-7.4.6-150200.3.38.2 php7-mysql-7.4.6-150200.3.38.2 php7-mysql-debuginfo-7.4.6-150200.3.38.2 php7-odbc-7.4.6-150200.3.38.2 php7-odbc-debuginfo-7.4.6-150200.3.38.2 php7-opcache-7.4.6-150200.3.38.2 php7-opcache-debuginfo-7.4.6-150200.3.38.2 php7-openssl-7.4.6-150200.3.38.2 php7-openssl-debuginfo-7.4.6-150200.3.38.2 php7-pcntl-7.4.6-150200.3.38.2 php7-pcntl-debuginfo-7.4.6-150200.3.38.2 php7-pdo-7.4.6-150200.3.38.2 php7-pdo-debuginfo-7.4.6-150200.3.38.2 php7-pgsql-7.4.6-150200.3.38.2 php7-pgsql-debuginfo-7.4.6-150200.3.38.2 php7-phar-7.4.6-150200.3.38.2 php7-phar-debuginfo-7.4.6-150200.3.38.2 php7-posix-7.4.6-150200.3.38.2 php7-posix-debuginfo-7.4.6-150200.3.38.2 php7-readline-7.4.6-150200.3.38.2 php7-readline-debuginfo-7.4.6-150200.3.38.2 php7-shmop-7.4.6-150200.3.38.2 php7-shmop-debuginfo-7.4.6-150200.3.38.2 php7-snmp-7.4.6-150200.3.38.2 php7-snmp-debuginfo-7.4.6-150200.3.38.2 php7-soap-7.4.6-150200.3.38.2 php7-soap-debuginfo-7.4.6-150200.3.38.2 php7-sockets-7.4.6-150200.3.38.2 php7-sockets-debuginfo-7.4.6-150200.3.38.2 php7-sodium-7.4.6-150200.3.38.2 php7-sodium-debuginfo-7.4.6-150200.3.38.2 php7-sqlite-7.4.6-150200.3.38.2 php7-sqlite-debuginfo-7.4.6-150200.3.38.2 php7-sysvmsg-7.4.6-150200.3.38.2 php7-sysvmsg-debuginfo-7.4.6-150200.3.38.2 php7-sysvsem-7.4.6-150200.3.38.2 php7-sysvsem-debuginfo-7.4.6-150200.3.38.2 php7-sysvshm-7.4.6-150200.3.38.2 php7-sysvshm-debuginfo-7.4.6-150200.3.38.2 php7-test-7.4.6-150200.3.38.2 php7-tidy-7.4.6-150200.3.38.2 php7-tidy-debuginfo-7.4.6-150200.3.38.2 php7-tokenizer-7.4.6-150200.3.38.2 php7-tokenizer-debuginfo-7.4.6-150200.3.38.2 php7-xmlreader-7.4.6-150200.3.38.2 php7-xmlreader-debuginfo-7.4.6-150200.3.38.2 php7-xmlrpc-7.4.6-150200.3.38.2 php7-xmlrpc-debuginfo-7.4.6-150200.3.38.2 php7-xmlwriter-7.4.6-150200.3.38.2 php7-xmlwriter-debuginfo-7.4.6-150200.3.38.2 php7-xsl-7.4.6-150200.3.38.2 php7-xsl-debuginfo-7.4.6-150200.3.38.2 php7-zip-7.4.6-150200.3.38.2 php7-zip-debuginfo-7.4.6-150200.3.38.2 php7-zlib-7.4.6-150200.3.38.2 php7-zlib-debuginfo-7.4.6-150200.3.38.2 - SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-150200.3.38.2 apache2-mod_php7-debuginfo-7.4.6-150200.3.38.2 php7-7.4.6-150200.3.38.2 php7-bcmath-7.4.6-150200.3.38.2 php7-bcmath-debuginfo-7.4.6-150200.3.38.2 php7-bz2-7.4.6-150200.3.38.2 php7-bz2-debuginfo-7.4.6-150200.3.38.2 php7-calendar-7.4.6-150200.3.38.2 php7-calendar-debuginfo-7.4.6-150200.3.38.2 php7-ctype-7.4.6-150200.3.38.2 php7-ctype-debuginfo-7.4.6-150200.3.38.2 php7-curl-7.4.6-150200.3.38.2 php7-curl-debuginfo-7.4.6-150200.3.38.2 php7-dba-7.4.6-150200.3.38.2 php7-dba-debuginfo-7.4.6-150200.3.38.2 php7-debuginfo-7.4.6-150200.3.38.2 php7-debugsource-7.4.6-150200.3.38.2 php7-devel-7.4.6-150200.3.38.2 php7-dom-7.4.6-150200.3.38.2 php7-dom-debuginfo-7.4.6-150200.3.38.2 php7-enchant-7.4.6-150200.3.38.2 php7-enchant-debuginfo-7.4.6-150200.3.38.2 php7-exif-7.4.6-150200.3.38.2 php7-exif-debuginfo-7.4.6-150200.3.38.2 php7-fastcgi-7.4.6-150200.3.38.2 php7-fastcgi-debuginfo-7.4.6-150200.3.38.2 php7-fileinfo-7.4.6-150200.3.38.2 php7-fileinfo-debuginfo-7.4.6-150200.3.38.2 php7-fpm-7.4.6-150200.3.38.2 php7-fpm-debuginfo-7.4.6-150200.3.38.2 php7-ftp-7.4.6-150200.3.38.2 php7-ftp-debuginfo-7.4.6-150200.3.38.2 php7-gd-7.4.6-150200.3.38.2 php7-gd-debuginfo-7.4.6-150200.3.38.2 php7-gettext-7.4.6-150200.3.38.2 php7-gettext-debuginfo-7.4.6-150200.3.38.2 php7-gmp-7.4.6-150200.3.38.2 php7-gmp-debuginfo-7.4.6-150200.3.38.2 php7-iconv-7.4.6-150200.3.38.2 php7-iconv-debuginfo-7.4.6-150200.3.38.2 php7-intl-7.4.6-150200.3.38.2 php7-intl-debuginfo-7.4.6-150200.3.38.2 php7-json-7.4.6-150200.3.38.2 php7-json-debuginfo-7.4.6-150200.3.38.2 php7-ldap-7.4.6-150200.3.38.2 php7-ldap-debuginfo-7.4.6-150200.3.38.2 php7-mbstring-7.4.6-150200.3.38.2 php7-mbstring-debuginfo-7.4.6-150200.3.38.2 php7-mysql-7.4.6-150200.3.38.2 php7-mysql-debuginfo-7.4.6-150200.3.38.2 php7-odbc-7.4.6-150200.3.38.2 php7-odbc-debuginfo-7.4.6-150200.3.38.2 php7-opcache-7.4.6-150200.3.38.2 php7-opcache-debuginfo-7.4.6-150200.3.38.2 php7-openssl-7.4.6-150200.3.38.2 php7-openssl-debuginfo-7.4.6-150200.3.38.2 php7-pcntl-7.4.6-150200.3.38.2 php7-pcntl-debuginfo-7.4.6-150200.3.38.2 php7-pdo-7.4.6-150200.3.38.2 php7-pdo-debuginfo-7.4.6-150200.3.38.2 php7-pgsql-7.4.6-150200.3.38.2 php7-pgsql-debuginfo-7.4.6-150200.3.38.2 php7-phar-7.4.6-150200.3.38.2 php7-phar-debuginfo-7.4.6-150200.3.38.2 php7-posix-7.4.6-150200.3.38.2 php7-posix-debuginfo-7.4.6-150200.3.38.2 php7-readline-7.4.6-150200.3.38.2 php7-readline-debuginfo-7.4.6-150200.3.38.2 php7-shmop-7.4.6-150200.3.38.2 php7-shmop-debuginfo-7.4.6-150200.3.38.2 php7-snmp-7.4.6-150200.3.38.2 php7-snmp-debuginfo-7.4.6-150200.3.38.2 php7-soap-7.4.6-150200.3.38.2 php7-soap-debuginfo-7.4.6-150200.3.38.2 php7-sockets-7.4.6-150200.3.38.2 php7-sockets-debuginfo-7.4.6-150200.3.38.2 php7-sodium-7.4.6-150200.3.38.2 php7-sodium-debuginfo-7.4.6-150200.3.38.2 php7-sqlite-7.4.6-150200.3.38.2 php7-sqlite-debuginfo-7.4.6-150200.3.38.2 php7-sysvmsg-7.4.6-150200.3.38.2 php7-sysvmsg-debuginfo-7.4.6-150200.3.38.2 php7-sysvsem-7.4.6-150200.3.38.2 php7-sysvsem-debuginfo-7.4.6-150200.3.38.2 php7-sysvshm-7.4.6-150200.3.38.2 php7-sysvshm-debuginfo-7.4.6-150200.3.38.2 php7-tidy-7.4.6-150200.3.38.2 php7-tidy-debuginfo-7.4.6-150200.3.38.2 php7-tokenizer-7.4.6-150200.3.38.2 php7-tokenizer-debuginfo-7.4.6-150200.3.38.2 php7-xmlreader-7.4.6-150200.3.38.2 php7-xmlreader-debuginfo-7.4.6-150200.3.38.2 php7-xmlrpc-7.4.6-150200.3.38.2 php7-xmlrpc-debuginfo-7.4.6-150200.3.38.2 php7-xmlwriter-7.4.6-150200.3.38.2 php7-xmlwriter-debuginfo-7.4.6-150200.3.38.2 php7-xsl-7.4.6-150200.3.38.2 php7-xsl-debuginfo-7.4.6-150200.3.38.2 php7-zip-7.4.6-150200.3.38.2 php7-zip-debuginfo-7.4.6-150200.3.38.2 php7-zlib-7.4.6-150200.3.38.2 php7-zlib-debuginfo-7.4.6-150200.3.38.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): php7-debuginfo-7.4.6-150200.3.38.2 php7-debugsource-7.4.6-150200.3.38.2 php7-embed-7.4.6-150200.3.38.2 php7-embed-debuginfo-7.4.6-150200.3.38.2 References: https://bugzilla.suse.com/1197644

1 0