openSUSE Security Announce
Threads by month
- ----- 2024 -----
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2005 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2004 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2003 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2002 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2001 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2000 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1999 -----
- December
- November
- October
- September
- August
August 2022
- 1 participants
- 110 discussions
SUSE-SU-2022:2891-1: important: Security update for freerdp
by opensuse-security@opensuse.org 25 Aug '22
by opensuse-security@opensuse.org 25 Aug '22
25 Aug '22
SUSE Security Update: Security update for freerdp
______________________________________________________________________________
Announcement ID: SUSE-SU-2022:2891-1
Rating: important
References: #1191895
Cross-References: CVE-2021-41159 CVE-2022-41160
CVSS scores:
CVE-2021-41159 (NVD) : 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
CVE-2021-41159 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
SUSE Linux Enterprise Desktop 15-SP3
SUSE Linux Enterprise High Performance Computing 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3
SUSE Linux Enterprise Server 15-SP3
SUSE Linux Enterprise Server for SAP Applications 15-SP3
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 15-SP3
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.2
openSUSE Leap 15.3
______________________________________________________________________________
An update that fixes two vulnerabilities is now available.
Description:
This update for freerdp fixes the following issues:
- CVE-2021-41159: Fixed improper validation of client input (bsc#1191895).
- CVE-2022-41160: Fixed improper region checks (bsc#1191895).
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2022-2891=1
- SUSE Linux Enterprise Workstation Extension 15-SP3:
zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-2891=1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3:
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-2891=1
Package List:
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):
freerdp-2.1.2-150200.15.18.1
freerdp-debuginfo-2.1.2-150200.15.18.1
freerdp-debugsource-2.1.2-150200.15.18.1
freerdp-devel-2.1.2-150200.15.18.1
freerdp-proxy-2.1.2-150200.15.18.1
freerdp-proxy-debuginfo-2.1.2-150200.15.18.1
freerdp-server-2.1.2-150200.15.18.1
freerdp-server-debuginfo-2.1.2-150200.15.18.1
freerdp-wayland-2.1.2-150200.15.18.1
freerdp-wayland-debuginfo-2.1.2-150200.15.18.1
libfreerdp2-2.1.2-150200.15.18.1
libfreerdp2-debuginfo-2.1.2-150200.15.18.1
libuwac0-0-2.1.2-150200.15.18.1
libuwac0-0-debuginfo-2.1.2-150200.15.18.1
libwinpr2-2.1.2-150200.15.18.1
libwinpr2-debuginfo-2.1.2-150200.15.18.1
uwac0-0-devel-2.1.2-150200.15.18.1
winpr2-devel-2.1.2-150200.15.18.1
- SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64):
freerdp-2.1.2-150200.15.18.1
freerdp-debuginfo-2.1.2-150200.15.18.1
freerdp-debugsource-2.1.2-150200.15.18.1
freerdp-devel-2.1.2-150200.15.18.1
freerdp-proxy-2.1.2-150200.15.18.1
freerdp-proxy-debuginfo-2.1.2-150200.15.18.1
libfreerdp2-2.1.2-150200.15.18.1
libfreerdp2-debuginfo-2.1.2-150200.15.18.1
libwinpr2-2.1.2-150200.15.18.1
libwinpr2-debuginfo-2.1.2-150200.15.18.1
winpr2-devel-2.1.2-150200.15.18.1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x):
freerdp-2.1.2-150200.15.18.1
freerdp-debuginfo-2.1.2-150200.15.18.1
freerdp-debugsource-2.1.2-150200.15.18.1
freerdp-devel-2.1.2-150200.15.18.1
freerdp-proxy-2.1.2-150200.15.18.1
freerdp-proxy-debuginfo-2.1.2-150200.15.18.1
libfreerdp2-2.1.2-150200.15.18.1
libfreerdp2-debuginfo-2.1.2-150200.15.18.1
libwinpr2-2.1.2-150200.15.18.1
libwinpr2-debuginfo-2.1.2-150200.15.18.1
winpr2-devel-2.1.2-150200.15.18.1
References:
https://www.suse.com/security/cve/CVE-2021-41159.html
https://www.suse.com/security/cve/CVE-2022-41160.html
https://bugzilla.suse.com/1191895
1
0
SUSE-SU-2022:2881-1: important: Security update for spice
by opensuse-security@opensuse.org 24 Aug '22
by opensuse-security@opensuse.org 24 Aug '22
24 Aug '22
SUSE Security Update: Security update for spice
______________________________________________________________________________
Announcement ID: SUSE-SU-2022:2881-1
Rating: important
References: #1181686
Cross-References: CVE-2021-20201
CVSS scores:
CVE-2021-20201 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVE-2021-20201 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected Products:
SUSE Linux Enterprise High Performance Computing 15-SP3
SUSE Linux Enterprise Micro 5.2
SUSE Linux Enterprise Module for Server Applications 15-SP3
SUSE Linux Enterprise Server 15-SP3
SUSE Linux Enterprise Server for SAP Applications 15-SP3
SUSE Linux Enterprise Storage 7.1
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.2
openSUSE Leap 15.3
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
This update for spice fixes the following issues:
- CVE-2021-20201: Fixed an issue which could allow clients to cause a
denial of service by repeatedly renegotiating a connection (bsc#1181686).
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2022-2881=1
- SUSE Linux Enterprise Module for Server Applications 15-SP3:
zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-2881=1
- SUSE Linux Enterprise Micro 5.2:
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2881=1
Package List:
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):
libspice-server-devel-0.14.3-150300.3.3.1
libspice-server1-0.14.3-150300.3.3.1
libspice-server1-debuginfo-0.14.3-150300.3.3.1
spice-debugsource-0.14.3-150300.3.3.1
- SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64):
libspice-server-devel-0.14.3-150300.3.3.1
libspice-server1-0.14.3-150300.3.3.1
libspice-server1-debuginfo-0.14.3-150300.3.3.1
spice-debugsource-0.14.3-150300.3.3.1
- SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64):
libspice-server1-0.14.3-150300.3.3.1
libspice-server1-debuginfo-0.14.3-150300.3.3.1
spice-debugsource-0.14.3-150300.3.3.1
References:
https://www.suse.com/security/cve/CVE-2021-20201.html
https://bugzilla.suse.com/1181686
1
0
SUSE-SU-2022:2883-1: important: Security update for bluez
by opensuse-security@opensuse.org 24 Aug '22
by opensuse-security@opensuse.org 24 Aug '22
24 Aug '22
SUSE Security Update: Security update for bluez
______________________________________________________________________________
Announcement ID: SUSE-SU-2022:2883-1
Rating: important
References: #1194704
Cross-References: CVE-2022-0204
CVSS scores:
CVE-2022-0204 (NVD) : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE-2022-0204 (SUSE): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Affected Products:
SUSE Linux Enterprise Desktop 15-SP3
SUSE Linux Enterprise High Performance Computing 15-SP3
SUSE Linux Enterprise Module for Basesystem 15-SP3
SUSE Linux Enterprise Module for Desktop Applications 15-SP3
SUSE Linux Enterprise Server 15-SP3
SUSE Linux Enterprise Server for SAP Applications 15-SP3
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 15-SP3
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.2
openSUSE Leap 15.3
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
This update for bluez fixes the following issues:
- CVE-2022-0204: Fixed a buffer overflow in the implementation of the gatt
protocol (bsc#1194704).
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2022-2883=1
- SUSE Linux Enterprise Workstation Extension 15-SP3:
zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-2883=1
- SUSE Linux Enterprise Module for Desktop Applications 15-SP3:
zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-2883=1
- SUSE Linux Enterprise Module for Basesystem 15-SP3:
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2883=1
Package List:
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):
bluez-5.55-150300.3.11.1
bluez-cups-5.55-150300.3.11.1
bluez-cups-debuginfo-5.55-150300.3.11.1
bluez-debuginfo-5.55-150300.3.11.1
bluez-debugsource-5.55-150300.3.11.1
bluez-deprecated-5.55-150300.3.11.1
bluez-deprecated-debuginfo-5.55-150300.3.11.1
bluez-devel-5.55-150300.3.11.1
bluez-test-5.55-150300.3.11.1
bluez-test-debuginfo-5.55-150300.3.11.1
libbluetooth3-5.55-150300.3.11.1
libbluetooth3-debuginfo-5.55-150300.3.11.1
- openSUSE Leap 15.3 (x86_64):
bluez-devel-32bit-5.55-150300.3.11.1
libbluetooth3-32bit-5.55-150300.3.11.1
libbluetooth3-32bit-debuginfo-5.55-150300.3.11.1
- openSUSE Leap 15.3 (noarch):
bluez-auto-enable-devices-5.55-150300.3.11.1
- SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64):
bluez-cups-5.55-150300.3.11.1
bluez-cups-debuginfo-5.55-150300.3.11.1
bluez-debuginfo-5.55-150300.3.11.1
bluez-debugsource-5.55-150300.3.11.1
- SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64):
bluez-debuginfo-5.55-150300.3.11.1
bluez-debugsource-5.55-150300.3.11.1
bluez-devel-5.55-150300.3.11.1
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64):
bluez-5.55-150300.3.11.1
bluez-debuginfo-5.55-150300.3.11.1
bluez-debugsource-5.55-150300.3.11.1
bluez-deprecated-5.55-150300.3.11.1
bluez-deprecated-debuginfo-5.55-150300.3.11.1
libbluetooth3-5.55-150300.3.11.1
libbluetooth3-debuginfo-5.55-150300.3.11.1
References:
https://www.suse.com/security/cve/CVE-2022-0204.html
https://bugzilla.suse.com/1194704
1
0
SUSE-SU-2022:2882-1: important: Security update for gnutls
by opensuse-security@opensuse.org 24 Aug '22
by opensuse-security@opensuse.org 24 Aug '22
24 Aug '22
SUSE Security Update: Security update for gnutls
______________________________________________________________________________
Announcement ID: SUSE-SU-2022:2882-1
Rating: important
References: #1202020
Cross-References: CVE-2022-2509
CVSS scores:
CVE-2022-2509 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2022-2509 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products:
SUSE Enterprise Storage 7
SUSE Linux Enterprise Desktop 15-SP3
SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
SUSE Linux Enterprise High Performance Computing 15-SP3
SUSE Linux Enterprise Micro 5.1
SUSE Linux Enterprise Micro 5.2
SUSE Linux Enterprise Module for Basesystem 15-SP3
SUSE Linux Enterprise Server 15-SP2-BCL
SUSE Linux Enterprise Server 15-SP2-LTSS
SUSE Linux Enterprise Server 15-SP3
SUSE Linux Enterprise Server for SAP 15-SP2
SUSE Linux Enterprise Server for SAP Applications 15-SP3
SUSE Linux Enterprise Storage 7.1
SUSE Manager Proxy 4.1
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.1
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.1
SUSE Manager Server 4.2
openSUSE Leap 15.3
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
This update for gnutls fixes the following issues:
- CVE-2022-2509: Fixed a double free issue during PKCS7 verification
(bsc#1202020).
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2022-2882=1
- SUSE Manager Server 4.1:
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2882=1
- SUSE Manager Retail Branch Server 4.1:
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2882=1
- SUSE Manager Proxy 4.1:
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2882=1
- SUSE Linux Enterprise Server for SAP 15-SP2:
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2882=1
- SUSE Linux Enterprise Server 15-SP2-LTSS:
zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2882=1
- SUSE Linux Enterprise Server 15-SP2-BCL:
zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2882=1
- SUSE Linux Enterprise Module for Basesystem 15-SP3:
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2882=1
- SUSE Linux Enterprise Micro 5.2:
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2882=1
- SUSE Linux Enterprise Micro 5.1:
zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2882=1
- SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS:
zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2882=1
- SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS:
zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2882=1
- SUSE Enterprise Storage 7:
zypper in -t patch SUSE-Storage-7-2022-2882=1
Package List:
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
gnutls-guile-3.6.7-150200.14.19.2
gnutls-guile-debuginfo-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- openSUSE Leap 15.3 (x86_64):
libgnutls-devel-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
- SUSE Manager Server 4.1 (ppc64le s390x x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Manager Server 4.1 (x86_64):
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
- SUSE Manager Retail Branch Server 4.1 (x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Manager Proxy 4.1 (x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64):
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
- SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Linux Enterprise Server 15-SP2-LTSS (x86_64):
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
- SUSE Linux Enterprise Server 15-SP2-BCL (x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64):
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
- SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
- SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64):
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
- SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (x86_64):
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
- SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (x86_64):
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
- SUSE Enterprise Storage 7 (aarch64 x86_64):
gnutls-3.6.7-150200.14.19.2
gnutls-debuginfo-3.6.7-150200.14.19.2
gnutls-debugsource-3.6.7-150200.14.19.2
libgnutls-devel-3.6.7-150200.14.19.2
libgnutls30-3.6.7-150200.14.19.2
libgnutls30-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-3.6.7-150200.14.19.2
libgnutlsxx-devel-3.6.7-150200.14.19.2
libgnutlsxx28-3.6.7-150200.14.19.2
libgnutlsxx28-debuginfo-3.6.7-150200.14.19.2
- SUSE Enterprise Storage 7 (x86_64):
libgnutls30-32bit-3.6.7-150200.14.19.2
libgnutls30-32bit-debuginfo-3.6.7-150200.14.19.2
libgnutls30-hmac-32bit-3.6.7-150200.14.19.2
References:
https://www.suse.com/security/cve/CVE-2022-2509.html
https://bugzilla.suse.com/1202020
1
0
openSUSE-SU-2022:10098-1: moderate: Security update for python-treq
by opensuse-security@opensuse.org 24 Aug '22
by opensuse-security@opensuse.org 24 Aug '22
24 Aug '22
openSUSE Security Update: Security update for python-treq
______________________________________________________________________________
Announcement ID: openSUSE-SU-2022:10098-1
Rating: moderate
References: #1195432
Cross-References: CVE-2022-23607
CVSS scores:
CVE-2022-23607 (NVD) : 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Affected Products:
openSUSE Backports SLE-15-SP3
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
This update for python-treq fixes the following issues:
- Fixed CVE-2022-23607 (boo#1195432) binding cookies to the domain.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP3:
zypper in -t patch openSUSE-2022-10098=1
Package List:
- openSUSE Backports SLE-15-SP3 (noarch):
python2-treq-20.3.0-bp153.2.3.1
python3-treq-20.3.0-bp153.2.3.1
References:
https://www.suse.com/security/cve/CVE-2022-23607.html
https://bugzilla.suse.com/1195432
1
0
openSUSE-SU-2022:10096-1: important: Security update for freeciv
by opensuse-security@opensuse.org 24 Aug '22
by opensuse-security@opensuse.org 24 Aug '22
24 Aug '22
openSUSE Security Update: Security update for freeciv
______________________________________________________________________________
Announcement ID: openSUSE-SU-2022:10096-1
Rating: important
References: #1202548
Cross-References: CVE-2022-6083
Affected Products:
openSUSE Backports SLE-15-SP3
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
This update for freeciv fixes the following issues:
- update to 3.0.3 (boo#1202548, CVE-2022-6083):
* 3.0.3 is a bugfix release
* see https://freeciv.fandom.com/wiki/NEWS-3.0.3
- update to 3.0.2:
* 3.0.2 is a generic bugfix release
* see https://freeciv.fandom.com/wiki/NEWS-3.0.2
- update to 3.0.1:
* 3.0.1 is a generic bugfix release
* see https://freeciv.fandom.com/wiki/NEWS-3.0.1
- update to 3.0.0:
* This release is a major upgrade which with some changes that can
support backward compatible rulesets
* see
https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6
- update to 2.6.6:
* https://freeciv.fandom.com/wiki/NEWS-2.6.5
* 2.6.6 is a bugfix release.
- update to 2.6.5:
* https://freeciv.fandom.com/wiki/NEWS-2.6.5
* 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4
gtk3-client that present units in city dialog had no overlays drawn at
all.
- Update to 2.6.4:
* Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4
- update to 2.6.3:
* see http://www.freeciv.org/wiki/NEWS-2.6.3
* Fixed trouble when a new city is founded to the ruins of a former
city, and that new city establish a trade route with a player who had
seen former city, and is unaware that it had been destroyed HRM#871606
* Fixed a case where shared vision did not completely update recipient's
map HRM#846106
* Fixed a bug where one could paradrop to peaceful nation's territory
after continuing game from an old savegame HRM#879084
* Fixed a bug causing game sometimes to tell wrong reason of why an
action failed HRM#879880
* Cease fire no longer runs out with an already dead player, making his
former allies to hate the alive party of the treaty HRM#879055
* Made server not to end in a infinite loop after loading savegame with
too high phase number. Such a savegame was reported to be created
after spaceship was launched but game was still continued HRM#815196
* Unified writing of the city name Washington-on-the-Brazos between
rulesets, so it doesn't appear multiple times in the same game in a
bit different form HRM#867817
* Stealth units are no longer erroneously hidden even from allies
HRM#764976
* Placing initial units is now done in shuffled player order HRM#850656
* Corrupt worker tasks are cleared. Those can originate, e.g., from
buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
* In a ruleset, such as civ2civ3, where caravans can help building
wonder in a foreign city, refresh city info of the city owner when one
does HRM#907977
* Display of success probabilities for diplomats was off when targeting
stack of units instead of individual unit HRM#859761
* Fixed pillaging of extras that are caused by something else than
player actions. For the fix to work, both server and client must be at
least version 2.6.3 HRM#861508
* Civilian unit trying to paradrop to an enemy city dies HRM#870004
* Prevented dead player from getting techs via Tech_Parasite effect.
This caused trouble in alien ruleset where Tech_Parasite is granted by
a tech HRM#873692
* Improved support of CityTile requirement type HRM#877780
* Fixed trouble preventing Small Wonders from working as impr_reqs for
units HRM#884993
* Corrected success probability shown by action dialog when it depends
on a special kind of road HRM#897490
* The included Lua engine has been upgraded from 5.3.5 to 5.3.6.
HRM#889425
- update to 2.6.2.1:
* Fixed server crash when unit with zero move_rate is transformed
* Fixed crashes when using Direction objects in lua scripts
* Fixed crash when chatline text had opening tag without closing tag
* Fixes to the Qt client
* Updated translations
* Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
* Documentation updates
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP3:
zypper in -t patch openSUSE-2022-10096=1
Package List:
- openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64):
freeciv-3.0.3-bp153.2.3.1
freeciv-gtk3-3.0.3-bp153.2.3.1
freeciv-lang-3.0.3-bp153.2.3.1
freeciv-qt-3.0.3-bp153.2.3.1
References:
https://www.suse.com/security/cve/CVE-2022-6083.html
https://bugzilla.suse.com/1202548
1
0
openSUSE-SU-2022:10095-1: important: Security update for nim
by opensuse-security@opensuse.org 24 Aug '22
by opensuse-security@opensuse.org 24 Aug '22
24 Aug '22
openSUSE Security Update: Security update for nim
______________________________________________________________________________
Announcement ID: openSUSE-SU-2022:10095-1
Rating: important
References: #1175332 #1175333 #1175334 #1181705 #1185083
#1185084 #1185085 #1185948 #1192712
Cross-References: CVE-2020-15690 CVE-2020-15692 CVE-2020-15693
CVE-2020-15694 CVE-2021-21372 CVE-2021-21373
CVE-2021-21374 CVE-2021-29495 CVE-2021-41259
CVSS scores:
CVE-2020-15690 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE-2020-15692 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE-2020-15693 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVE-2020-15694 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVE-2021-21372 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE-2021-21373 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVE-2021-21374 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE-2021-29495 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVE-2021-41259 (NVD) : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected Products:
openSUSE Backports SLE-15-SP3
______________________________________________________________________________
An update that fixes 9 vulnerabilities is now available.
Description:
This update for nim fixes the following issues:
Includes upstream security fixes for:
* (boo#1175333, CVE-2020-15693) httpClient is vulnerable to a CR-LF
injection
* (boo#1175334, CVE-2020-15692) mishandle of argument to
browsers.openDefaultBrowser
* (boo#1175332, CVE-2020-15694) httpClient.get().contentLength() fails to
properly validate the server response
* (boo#1192712, CVE-2021-41259) null byte accepted in getContent function,
leading to URI validation bypass
* (boo#1185948, CVE-2021-29495) stdlib httpClient does not validate peer
certificates by default
* (boo#1185085, CVE-2021-21374) Improper verification of the SSL/TLS
certificate
* (boo#1185084, CVE-2021-21373) "nimble refresh" falls back to a non-TLS
URL in case of error
* (boo#1185083, CVE-2021-21372) doCmd can be leveraged to execute
arbitrary commands
* (boo#1181705, CVE-2020-15690) Standard library asyncftpclient lacks a
check for newline character
Following nim tools now work as expected:
* nim_dbg is now installed.
* nim-gdb can be successfully launched as it finds and loads nim-gdb.py
correctly under gdb.
* nimble package manager stores package information per user.
* compiler package can be found and used, as it may be required by other
packages.
Update to 1.6.6
* standard library use consistent styles for variable names so it can be
used in projects which force a consistent style with
--styleCheck:usages option.
* ARC/ORC are now considerably faster at method dispatching, bringing its
performance back on the level of the refc memory management.
* Full changelog:
https://nim-lang.org/blog/2022/05/05/version-166-released.html
- Previous updates and changelogs:
* 1.6.4: https://nim-lang.org/blog/2022/02/08/version-164-released.html
* 1.6.2: https://nim-lang.org/blog/2021/12/17/version-162-released.html
* 1.6.0: https://nim-lang.org/blog/2021/10/19/version-160-released.html
* 1.4.8: https://nim-lang.org/blog/2021/05/25/version-148-released.html
* 1.4.6:
https://nim-lang.org/blog/2021/04/15/versions-146-and-1212-released.html
* 1.4.4:
https://nim-lang.org/blog/2021/02/23/versions-144-and-1210-released.html
* 1.4.2: https://nim-lang.org/blog/2020/12/01/version-142-released.html
* 1.4.0: https://nim-lang.org/blog/2020/10/16/version-140-released.html
Update to 1.2.16
* oids: switch from PRNG to random module
* nimc.rst: fix table markup
* nimRawSetjmp: support Windows
* correctly enable chronos
* bigints are not supposed to work on 1.2.x
* disable nimpy
* misc bugfixes
* fixes a 'mixin' statement handling regression [backport:1.2
Update to version 1.2.12
* Fixed GC crash resulting from inlining of the memory allocation procs
* Fixed ���incorrect raises effect for $(NimNode)��� (#17454)
- from version 1.2.10
* Fixed ���JS backend doesn���t handle float->int type conversion ���
(#8404)
* Fixed ���The ���try except��� not work when the ���OSError: Too many
open files��� error occurs!��� (#15925)
* Fixed ���Nim emits #line 0 C preprocessor directives with
���debugger:native, with ICE in gcc-10��� (#15942)
* Fixed ���tfuturevar fails when activated��� (#9695)
* Fixed ���nre.escapeRe is not gcsafe��� (#16103)
* Fixed ������Error: internal error: genRecordFieldAux��� - in the
���version-1-4��� branch��� (#16069)
* Fixed ���-d:fulldebug switch does not compile with gc:arc��� (#16214)
* Fixed ���osLastError may randomly raise defect and crash��� (#16359)
* Fixed ���generic importc proc���s don���t work (breaking lots
of vmops procs for js)��� (#16428)
* Fixed ���Concept: codegen ignores parameter passing��� (#16897)
* Fixed ���{.push exportc.} interacts with anonymous functions��� (#16967)
* Fixed ���memory allocation during {.global.} init breaks GC��� (#17085)
* Fixed "Nimble arbitrary code execution for specially crafted package
metadata"
+
https://github.com/nim-lang/security/security/advisories/GHSA-rg9f-w24h-962
p
+ (boo#1185083, CVE-2021-21372)
* Fixed "Nimble falls back to insecure http url when fetching packages"
+
https://github.com/nim-lang/security/security/advisories/GHSA-8w52-r35x-rgp
8
+ (boo#1185084, CVE-2021-21373)
* Fixed "Nimble fails to validate certificates due to insecure httpClient
defaults"
+
https://github.com/nim-lang/security/security/advisories/GHSA-c2wm-v66h-xhx
x
+ (boo#1185085, CVE-2021-21374)
- from version 1.2.8
* Fixed ���Defer and ���gc:arc��� (#15071)
* Fixed ���Issue with ���gc:arc at compile time��� (#15129)
* Fixed ���Nil check on each field fails in generic function��� (#15101)
* Fixed ���[strscans] scanf doesn���t match a single character with $+ if
it���s the end of the string��� (#15064)
* Fixed ���Crash and incorrect return values when using
readPasswordFromStdin on Windows.��� (#15207)
* Fixed ���Inconsistent unsigned -> signed RangeDefect usage across
integer sizes��� (#15210)
* Fixed ���toHex results in RangeDefect exception when used with large
uint64��� (#15257)
* Fixed ���Mixing ���return��� with expressions is allowed in 1.2���
(#15280)
* Fixed ���proc execCmdEx doesn���t work with -d:useWinAnsi��� (#14203)
* Fixed ���memory corruption in tmarshall.nim��� (#9754)
* Fixed ���Wrong number of variables��� (#15360)
* Fixed ���defer doesnt work with block, break and await��� (#15243)
* Fixed ���Sizeof of case object is incorrect. Showstopper��� (#15516)
* Fixed ���Mixing ���return��� with expressions is allowed in 1.2���
(#15280)
* Fixed ���regression(1.0.2 => 1.0.4) VM register messed up depending on
unrelated context��� (#15704)
- from version 1.2.6
* Fixed ���The pegs module doesn���t work with generics!��� (#14718)
* Fixed ���[goto exceptions] {.noReturn.} pragma is not detected in a case
expression��� (#14458)
* Fixed ���[exceptions:goto] C compiler error with dynlib pragma calling a
proc��� (#14240)
* Fixed ���Nim source archive install: ���install.sh��� fails with error:
cp: cannot stat ���bin/nim-gdb���: No such file or directory��� (#14748)
* Fixed ���Stropped identifiers don���t work as field names in tuple
literals��� (#14911)
* Fixed ���uri.decodeUrl crashes on incorrectly formatted input��� (#14082)
* Fixed ���odbcsql module has some wrong integer types��� (#9771)
* Fixed ���[ARC] Compiler crash declaring a finalizer proc directly in
���new������ (#15044)
* Fixed ���code with named arguments in proc of winim/com can not been
compiled��� (#15056)
* Fixed ���javascript backend produces javascript code with syntax error
in object syntax��� (#14534)
* Fixed ���[ARC] SIGSEGV when calling a closure as a tuple field in a
seq��� (#15038)
* Fixed ���Compiler crashes when using string as object variant selector
with else branch��� (#14189)
* Fixed ���Constructing a uint64 range on a 32-bit machine leads to
incorrect codegen��� (#14616)
Update to version 1.2.2:
* See https://nim-lang.org/blog.html for details
- Enable the full testsuite in the %check section
* Add build dependencies to run the testsuite
* Whitelists a few tests that are not passing yet
Update to version 1.0.2:
* See https://nim-lang.org/blog.html for details
- Update dependencies (based on changes by Federico Ceratto
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP3:
zypper in -t patch openSUSE-2022-10095=1
Package List:
- openSUSE Backports SLE-15-SP3 (aarch64 ppc64le x86_64):
nim-1.6.6-bp153.2.3.1
References:
https://www.suse.com/security/cve/CVE-2020-15690.html
https://www.suse.com/security/cve/CVE-2020-15692.html
https://www.suse.com/security/cve/CVE-2020-15693.html
https://www.suse.com/security/cve/CVE-2020-15694.html
https://www.suse.com/security/cve/CVE-2021-21372.html
https://www.suse.com/security/cve/CVE-2021-21373.html
https://www.suse.com/security/cve/CVE-2021-21374.html
https://www.suse.com/security/cve/CVE-2021-29495.html
https://www.suse.com/security/cve/CVE-2021-41259.html
https://bugzilla.suse.com/1175332
https://bugzilla.suse.com/1175333
https://bugzilla.suse.com/1175334
https://bugzilla.suse.com/1181705
https://bugzilla.suse.com/1185083
https://bugzilla.suse.com/1185084
https://bugzilla.suse.com/1185085
https://bugzilla.suse.com/1185948
https://bugzilla.suse.com/1192712
1
0
SUSE-SU-2022:2880-1: important: Security update for dpdk
by opensuse-security@opensuse.org 23 Aug '22
by opensuse-security@opensuse.org 23 Aug '22
23 Aug '22
SUSE Security Update: Security update for dpdk
______________________________________________________________________________
Announcement ID: SUSE-SU-2022:2880-1
Rating: important
References: #1195172 #1198581 #1198873
Affected Products:
SUSE Linux Enterprise High Performance Computing 15-SP4
SUSE Linux Enterprise Module for Server Applications 15-SP4
SUSE Linux Enterprise Server 15-SP4
SUSE Linux Enterprise Server for SAP Applications 15-SP4
SUSE Manager Proxy 4.3
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 4.3
openSUSE Leap 15.4
______________________________________________________________________________
An update that contains security fixes can now be installed.
Description:
This update of dpdk fixes the following issue:
- Fix to read PCI device name as UTF strings (bsc#1198873)
- Allow configuring thread granularity of Kernel NIC Interface
(bsc#1195172)
- Rebuild with new secure boot key due to grub2 boothole 3 issues
(bsc#1198581)
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.4:
zypper in -t patch openSUSE-SLE-15.4-2022-2880=1
- SUSE Linux Enterprise Module for Server Applications 15-SP4:
zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2880=1
Package List:
- openSUSE Leap 15.4 (aarch64 ppc64le x86_64):
dpdk-19.11.10-150400.4.4.1
dpdk-debuginfo-19.11.10-150400.4.4.1
dpdk-debugsource-19.11.10-150400.4.4.1
dpdk-devel-19.11.10-150400.4.4.1
dpdk-devel-debuginfo-19.11.10-150400.4.4.1
dpdk-examples-19.11.10-150400.4.4.1
dpdk-examples-debuginfo-19.11.10-150400.4.4.1
dpdk-kmp-default-19.11.10_k5.14.21_150400.24.11-150400.4.4.1
dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.11-150400.4.4.1
dpdk-tools-19.11.10-150400.4.4.1
dpdk-tools-debuginfo-19.11.10-150400.4.4.1
libdpdk-20_0-19.11.10-150400.4.4.1
libdpdk-20_0-debuginfo-19.11.10-150400.4.4.1
- openSUSE Leap 15.4 (aarch64):
dpdk-thunderx-19.11.10-150400.4.4.1
dpdk-thunderx-debuginfo-19.11.10-150400.4.4.1
dpdk-thunderx-debugsource-19.11.10-150400.4.4.1
dpdk-thunderx-devel-19.11.10-150400.4.4.1
dpdk-thunderx-devel-debuginfo-19.11.10-150400.4.4.1
dpdk-thunderx-examples-19.11.10-150400.4.4.1
dpdk-thunderx-examples-debuginfo-19.11.10-150400.4.4.1
dpdk-thunderx-kmp-default-19.11.10_k5.14.21_150400.24.11-150400.4.4.1
dpdk-thunderx-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.11-150400.4.4.1
dpdk-thunderx-tools-19.11.10-150400.4.4.1
dpdk-thunderx-tools-debuginfo-19.11.10-150400.4.4.1
- openSUSE Leap 15.4 (noarch):
dpdk-doc-19.11.10-150400.4.4.1
dpdk-thunderx-doc-19.11.10-150400.4.4.1
- SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le x86_64):
dpdk-19.11.10-150400.4.4.1
dpdk-debuginfo-19.11.10-150400.4.4.1
dpdk-debugsource-19.11.10-150400.4.4.1
dpdk-devel-19.11.10-150400.4.4.1
dpdk-devel-debuginfo-19.11.10-150400.4.4.1
dpdk-kmp-default-19.11.10_k5.14.21_150400.24.11-150400.4.4.1
dpdk-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.11-150400.4.4.1
dpdk-tools-19.11.10-150400.4.4.1
dpdk-tools-debuginfo-19.11.10-150400.4.4.1
libdpdk-20_0-19.11.10-150400.4.4.1
libdpdk-20_0-debuginfo-19.11.10-150400.4.4.1
- SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64):
dpdk-thunderx-19.11.10-150400.4.4.1
dpdk-thunderx-debuginfo-19.11.10-150400.4.4.1
dpdk-thunderx-debugsource-19.11.10-150400.4.4.1
dpdk-thunderx-devel-19.11.10-150400.4.4.1
dpdk-thunderx-devel-debuginfo-19.11.10-150400.4.4.1
dpdk-thunderx-kmp-default-19.11.10_k5.14.21_150400.24.11-150400.4.4.1
dpdk-thunderx-kmp-default-debuginfo-19.11.10_k5.14.21_150400.24.11-150400.4.4.1
References:
https://bugzilla.suse.com/1195172
https://bugzilla.suse.com/1198581
https://bugzilla.suse.com/1198873
1
0
SUSE-SU-2022:2875-1: important: Security update for the Linux Kernel
by opensuse-security@opensuse.org 23 Aug '22
by opensuse-security@opensuse.org 23 Aug '22
23 Aug '22
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2022:2875-1
Rating: important
References: #1178134 #1196616 #1198829 #1199364 #1199647
#1199665 #1199670 #1200015 #1200521 #1200598
#1200644 #1200651 #1200762 #1200910 #1201196
#1201206 #1201251 #1201381 #1201429 #1201442
#1201458 #1201635 #1201636 #1201644 #1201645
#1201664 #1201672 #1201673 #1201676 #1201846
#1201930 #1201940 #1201954 #1201956 #1201958
#1202154 SLE-24559
Cross-References: CVE-2020-36516 CVE-2020-36557 CVE-2020-36558
CVE-2021-33655 CVE-2021-33656 CVE-2022-1116
CVE-2022-1462 CVE-2022-20166 CVE-2022-21505
CVE-2022-2318 CVE-2022-26365 CVE-2022-2639
CVE-2022-29581 CVE-2022-32250 CVE-2022-33740
CVE-2022-33741 CVE-2022-33742 CVE-2022-36946
CVSS scores:
CVE-2020-36516 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L
CVE-2020-36516 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVE-2020-36557 (NVD) : 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2020-36557 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2020-36558 (NVD) : 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2020-36558 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2021-33655 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2021-33655 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2021-33656 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2021-33656 (SUSE): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
CVE-2022-1116 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2022-1116 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2022-1462 (NVD) : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
CVE-2022-1462 (SUSE): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
CVE-2022-20166 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVE-2022-20166 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVE-2022-21505 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVE-2022-2318 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVE-2022-2318 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVE-2022-26365 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVE-2022-26365 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVE-2022-2639 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVE-2022-29581 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2022-29581 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2022-32250 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2022-32250 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2022-33740 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVE-2022-33740 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVE-2022-33741 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVE-2022-33741 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVE-2022-33742 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVE-2022-33742 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVE-2022-36946 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2022-36946 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products:
SUSE Linux Enterprise Desktop 15-SP3
SUSE Linux Enterprise High Availability 15-SP3
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise High Performance Computing 15-SP3
SUSE Linux Enterprise Micro 5.1
SUSE Linux Enterprise Micro 5.2
SUSE Linux Enterprise Module for Basesystem 15-SP3
SUSE Linux Enterprise Module for Development Tools 15-SP3
SUSE Linux Enterprise Module for Legacy Software 15-SP3
SUSE Linux Enterprise Module for Live Patching 15-SP3
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server 15-SP3
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server for SAP Applications 15-SP3
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 15-SP3
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.2
openSUSE Leap 15.3
openSUSE Leap 15.4
______________________________________________________________________________
An update that solves 18 vulnerabilities, contains one
feature and has 18 fixes is now available.
Description:
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various
security and bugfixes.
The following security bugs were fixed:
- CVE-2020-36516: Fixed TCP session data injection vulnerability via the
mixed IPID assignment method (bnc#1196616).
- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl
and closing/opening of ttys that could lead to a use-after-free
(bnc#1201429).
- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could
lead to a NULL pointer dereference and general protection fault
(bnc#1200910).
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO
(bnc#1201635).
- CVE-2021-33656: Fixed out of bounds write with ioctl PIO_FONT
(bnc#1201636).
- CVE-2022-1116: Fixed a integer overflow vulnerability in io_uring which
allowed a local attacker to cause memory corruption and escalate
privileges to root (bnc#1199647).
- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TeleTYpe
subsystem (bnc#1198829).
- CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer
handler in net/rose/rose_timer.c that allow attackers to crash the
system without any privileges (bsc#1201251).
- CVE-2022-2639: Fixed integer underflow that could lead to out-of-bounds
write in reserve_sfa_size() (bsc#1202154).
- CVE-2022-20166: Fixed possible out of bounds write due to sprintf
unsafety that could cause local escalation of privilege (bnc#1200598)
- CVE-2022-21505: Fixed kexec lockdown bypass with IMA policy
(bsc#1201458).
- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed
multiple potential data leaks with Block and Network devices when using
untrusted backends (bsc#1200762).
- CVE-2022-29581: Fixed improper update of Reference Count in net/sched
that could cause root privilege escalation (bnc#1199665).
- CVE-2022-32250: Fixed user-after-free in net/netfilter/nf_tables_api.c
that could allow local privilege escalation (bnc#1200015).
- CVE-2022-36946: Fixed incorrect packet truncation in nfqnl_mangle() that
could lead to remote DoS (bnc#1201940).
The following non-security bugs were fixed:
- ACPI: APEI: Better fix to avoid spamming the console with old error logs
(git-fixes).
- ACPI: CPPC: Do not prevent CPPC from working in the future (git-fixes).
- ACPI: video: Shortening quirk list by identifying Clevo by board_name
only (git-fixes).
- ALSA: hda - Add fixup for Dell Latitidue E5430 (git-fixes).
- ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model
(git-fixes).
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
(git-fixes).
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221
(git-fixes).
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
(git-fixes).
- ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array
(git-fixes).
- ASoC: Intel: Skylake: Correct the ssp rate discovery in
skl_get_ssp_clks() (git-fixes).
- ASoC: Remove unused hw_write_t type (git-fixes).
- ASoC: cs47l15: Fix event generation for low power mux control
(git-fixes).
- ASoC: madera: Fix event generation for OUT1 demux (git-fixes).
- ASoC: madera: Fix event generation for rate controls (git-fixes).
- ASoC: ops: Fix off by one in range control validation (git-fixes).
- ASoC: sgtl5000: Fix noise on shutdown/remove (git-fixes).
- ASoC: wm5110: Fix DRE control (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
(git-fixes).
- Bluetooth: hci_intel: Add check for platform_driver_register (git-fixes).
- FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
(git-fixes).
- FDDI: defxx: Make MMIO the configuration default except for EISA
(git-fixes).
- Fixed a system crash related to the recent RETBLEED mitigation
(bsc#1201644, bsc#1201664, bsc#1201672, bsc#1201673, bsc#1201676).
- Fixed battery detection problem on macbooks (bnc#1201206).
- HID: cp2112: prevent a buffer overflow in cp2112_xfer() (git-fixes).
- KVM/emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).
- KVM: VMX: Add non-canonical check on writes to RTIT address MSRs
(git-fixes).
- KVM: VMX: Do not freeze guest when event delivery causes an APIC-access
exit (git-fixes).
- KVM: apic: avoid calculating pending eoi from an uninitialized val
(git-fixes).
- KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2
(bsc#1201442)
- KVM: arm64: Fix definition of PAGE_HYP_DEVICE (git-fixes)
- KVM: emulate: do not adjust size of fastop and setcc subroutines
(bsc#1201930).
- KVM: nVMX: avoid NULL pointer dereference with incorrect EVMCS GPAs
(git-fixes).
- KVM: nVMX: handle nested posted interrupts when apicv is disabled for L1
(git-fixes).
- KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in
intel_pmu_refresh() (git-fixes).
- KVM: x86: Do not let userspace set host-reserved cr4 bits (git-fixes).
- KVM: x86: Fix split-irqchip vs interrupt injection window request
(git-fixes).
- KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
(git-fixes).
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is
adjusted (git-fixes).
- KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint (git-fixes).
- NFC: nxp-nci: do not print header length mismatch on i2c error
(git-fixes).
- PCI/portdrv: Do not disable AER reporting in
get_port_device_capability() (git-fixes).
- PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu()
(git-fixes).
- PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists
(git-fixes).
- PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors (git-fixes).
- PCI: dwc: Disable outbound windows only for controllers using iATU
(git-fixes).
- PCI: dwc: Stop link on host_init errors and de-initialization
(git-fixes).
- PCI: qcom: Power on PHY before IPQ8074 DBI register accesses (git-fixes).
- PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks (git-fixes).
- PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep()
(git-fixes).
- PCI: tegra194: Fix Root Port interrupt handling (git-fixes).
- PCI: tegra194: Fix link up retry sequence (git-fixes).
- PM: runtime: Remove link state checks in rpm_get/put_supplier()
(git-fixes).
- Sort in RETbleed backport into the sorted section Now that it is
upstream..
- USB: Follow-up to SPDX identifiers addition - remove now useless
comments (git-fixes).
- USB: serial: fix tty-port initialized comments (git-fixes).
- USB: serial: ftdi_sio: add Belimo device ids (git-fixes).
- amd-xgbe: Update DMA coherency values (git-fixes).
- arm64 module: set plt* section addresses to 0x0 (git-fixes)
- arm64: Extend workaround for erratum 1024718 to all versions of
(git-fixes)
- arm64: asm: Add new-style position independent function annotations
(git-fixes)
- arm64: compat: Ensure upper 32 bits of x0 are zero on syscall return
(git-fixes)
- arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function
(git-fixes)
- arm64: dts: marvell: espressobin: Add ethernet switch aliases (git-fixes)
- arm64: dts: marvell: espressobin: add ethernet alias (git-fixes)
- arm64: dts: mcbin: support 2W SFP modules (git-fixes)
- arm64: fix compat syscall return truncation (git-fixes)
- arm64: fix inline asm in load_unaligned_zeropad() (git-fixes)
- arm64: mm: Do not invalidate FROM_DEVICE buffers at start of DMA
(git-fixes)
- arm64: module: remove (NOLOAD) from linker script (git-fixes)
- arm64: module: rework special section handling (git-fixes)
- arm64: perf: Report the PC value in REGS_ABI_32 mode (git-fixes)
- arm64: ptrace: Consistently use pseudo-singlestep exceptions (git-fixes)
- arm64: ptrace: Override SPSR.SS when single-stepping is enabled
(git-fixes)
- arm64: stackleak: fix current_top_of_stack() (git-fixes)
- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing
(git-fixes)
- arm64: vdso: Avoid ISB after reading from cntvct_el0 (git-fixes)
- ath10k: Fix error handling in ath10k_setup_msa_resources (git-fixes).
- ath10k: do not enforce interrupt trigger type (git-fixes).
- ax88179_178a: add ethtool_op_get_ts_info() (git-fixes).
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (git-fixes).
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
(git-fixes).
- block/compat_ioctl: fix range check in BLKGETSIZE (git-fixes).
- block: Fix fsync always failed if once failed (git-fixes).
- block: Fix wrong offset in bio_truncate() (git-fixes).
- block: bio-integrity: Advance seed correctly for larger interval sizes
(git-fixes).
- block: do not delete queue kobject before its children (git-fixes).
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
(git-fixes).
- bpf, cpumap: Remove rcpu pointer from cpu_map_build_skb signature
(bsc#1199364).
- bpf: Add config to allow loading modules with BTF mismatches
(jsc#SLE-24559).
- bpf: Add in-kernel split BTF support (jsc#SLE-24559).
- bpf: Assign ID to vmlinux BTF and return extra info for BTF in
GET_OBJ_INFO (jsc#SLE-24559).
- bpf: Keep module's btf_data_size intact after load (jsc#SLE-24559).
- bpf: Load and verify kernel module BTFs (jsc#SLE-24559).
- bpf: Provide function to get vmlinux BTF information (jsc#SLE-24559).
- bpf: Sanitize BTF data pointer after module is loaded (jsc#SLE-24559).
- bus: hisi_lpc: fix missing platform_device_put() in
hisi_lpc_acpi_probe() (git-fixes).
- can: Break loopback loop on loopback documentation (git-fixes).
- can: error: specify the values of data[5..7] of CAN error frames
(git-fixes).
- can: gs_usb: gs_usb_open/close(): fix memory leak (git-fixes).
- can: hi311x: do not report txerr and rxerr during bus-off (git-fixes).
- can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off
(git-fixes).
- can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off
(git-fixes).
- can: pch_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: pch_can: pch_can_error(): initialize errc before using it
(git-fixes).
- can: rcar_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: sja1000: do not report txerr and rxerr during bus-off (git-fixes).
- can: sun4i_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: usb_8dev: do not report txerr and rxerr during bus-off (git-fixes).
- clk: qcom: camcc-sdm845: Fix topology around titan_top power domain
(git-fixes).
- clk: qcom: clk-krait: unlock spin after mux completion (git-fixes).
- clk: qcom: ipq8074: SW workaround for UBI32 PLL lock (git-fixes).
- clk: qcom: ipq8074: fix NSS core PLL-s (git-fixes).
- clk: qcom: ipq8074: fix NSS port frequency tables (git-fixes).
- clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks
(git-fixes).
- clk: renesas: r9a06g032: Fix UART clkgrp bitsel (git-fixes).
- config: enable DEBUG_INFO_BTF This option allows users to access the btf
type information for vmlinux but not kernel modules.
- cpuidle: PSCI: Move the `has_lpi` check to the beginning of the
(git-fixes)
- crypto: qat - disable registration of algorithms (git-fixes).
- crypto: qat - fix memory leak in RSA (git-fixes).
- crypto: qat - remove dma_free_coherent() for DH (git-fixes).
- crypto: qat - remove dma_free_coherent() for RSA (git-fixes).
- crypto: qat - set to zero DH parameters before free (git-fixes).
- cxgb4: Fix the -Wmisleading-indentation warning (git-fixes).
- dm btree remove: assign new_root only when removal succeeds (git-fixes).
- dm btree remove: fix use after free in rebalance_children() (git-fixes).
- dm bufio: subtract the number of initial sectors in
dm_bufio_get_device_size (git-fixes).
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
(git-fixes).
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS (git-fixes).
- dm crypt: make printing of the key constant-time (git-fixes).
- dm integrity: conditionally disable "recalculate" feature (git-fixes).
- dm integrity: fix a crash if "recalculate" used without "internal_hash"
(git-fixes).
- dm integrity: fix error code in dm_integrity_ctr() (git-fixes).
- dm integrity: fix memory corruption when tag_size is less than digest
size (git-fixes).
- dm integrity: fix the maximum number of arguments (git-fixes).
- dm mirror log: round up region bitmap size to BITS_PER_LONG (git-fixes).
- dm persistent data: packed struct should have an aligned() attribute too
(git-fixes).
- dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
sequences (git-fixes).
- dm snapshot: fix crash with transient storage and zero chunk size
(git-fixes).
- dm snapshot: flush merged data before committing metadata (git-fixes).
- dm snapshot: properly fix a crash when an origin has no snapshots
(git-fixes).
- dm space map common: fix division bug in sm_ll_find_free_block()
(git-fixes).
- dm stats: add cond_resched when looping over entries (git-fixes).
- dm verity: fix FEC for RS roots unaligned to block size (git-fixes).
- dm: fix mempool NULL pointer race when completing IO (git-fixes).
- dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
(git-fixes).
- dmaengine: imx-sdma: Allow imx8m for imx7 FW revs (git-fixes).
- dmaengine: pl330: Fix lockdep warning about non-static key (git-fixes).
- dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
(git-fixes).
- dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
(git-fixes).
- do not call utsname() after ->nsproxy is NULL (bsc#1201196).
- drbd: fix potential silent data corruption (git-fixes).
- driver core: fix potential deadlock in __driver_attach (git-fixes).
- drivers/net: Fix kABI in tun.c (git-fixes).
- drivers: net: fix memory leak in atusb_probe (git-fixes).
- drivers: net: fix memory leak in peak_usb_create_dev (git-fixes).
- drm/amd/display: Enable building new display engine with KCOV enabled
(git-fixes).
- drm/bridge: tc358767: Make sure Refclk clock are enabled (git-fixes).
- drm/doc: Fix comment typo (git-fixes).
- drm/exynos/exynos7_drm_decon: free resources when clk_set_parent()
failed (git-fixes).
- drm/i915/gt: Serialize TLB invalidates with GT resets (git-fixes).
- drm/i915/selftests: fix a couple IS_ERR() vs NULL tests (git-fixes).
- drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()
(git-fixes).
- drm/mcde: Fix refcount leak in mcde_dsi_bind (git-fixes).
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
(git-fixes).
- drm/mediatek: dpi: Only enable dpi after the bridge is enabled
(git-fixes).
- drm/mediatek: dpi: Remove output format of YUV (git-fixes).
- drm/mipi-dbi: align max_chunk to 2 in spi_transfer (git-fixes).
- drm/msm/hdmi: enable core-vcc/core-vdda-supply for 8996 platform
(git-fixes).
- drm/msm/mdp5: Fix global state lock backoff (git-fixes).
- drm/nouveau: fix another off-by-one in nvbios_addr (git-fixes).
- drm/panfrost: Fix shrinker list corruption by madvise IOCTL (git-fixes).
- drm/panfrost: Put mapping instead of shmem obj on
panfrost_mmu_map_fault_addr() error (git-fixes).
- drm/radeon: fix incorrrect SPDX-License-Identifiers (git-fixes).
- drm/radeon: fix potential buffer overflow in
ni_set_mc_special_registers() (git-fixes).
- drm/rockchip: Fix an error handling path rockchip_dp_probe() (git-fixes).
- drm/rockchip: vop: Do not crash for invalid duplicate_state()
(git-fixes).
- drm/st7735r: Fix module autoloading for Okaya RH128128T (git-fixes).
- drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable
iteration (git-fixes).
- drm/vc4: dsi: Correct DSI divider calculations (git-fixes).
- drm/vc4: dsi: Correct pixel order for DSI0 (git-fixes).
- drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes
(git-fixes).
- drm/vc4: hdmi: Fix timings for interlaced modes (git-fixes).
- drm/vc4: plane: Fix margin calculations for the right/bottom edges
(git-fixes).
- drm/vc4: plane: Remove subpixel positioning check (git-fixes).
- drm: adv7511: override i2c address of cec before accessing it
(git-fixes).
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register (git-fixes).
- drm: bridge: sii8620: fix possible off-by-one (git-fixes).
- fbcon: Disallow setting font bigger than screen size (git-fixes).
- fbcon: Prevent that screen size is smaller than font size (git-fixes).
- fbdev: fbmem: Fix logo center image dx issue (git-fixes).
- fbmem: Check virtual screen sizes in fb_set_var() (git-fixes).
- fpga: altera-pr-ip: fix unsigned comparison with less than zero
(git-fixes).
- ftgmac100: Restart MAC HW once (git-fixes).
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
(git-fixes).
- gpio: pca953x: only use single read/write for No AI mode (git-fixes).
- gpio: pca953x: use the correct range when do regmap sync (git-fixes).
- gpio: pca953x: use the correct register address when regcache sync
during init (git-fixes).
- hex2bin: make the function hex_to_bin constant-time (git-fixes).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
(bsc#1199364).
- hv_netvsc: Add comment of netvsc_xdp_xmit() (bsc#1199364).
- hv_netvsc: Add support for XDP_REDIRECT (bsc#1199364).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive buffer
(bsc#1199364).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback() (bsc#1199364).
- i2c: Fix a potential use after free (git-fixes).
- i2c: cadence: Change large transfer count reset logic to be
unconditional (git-fixes).
- i2c: cadence: Support PEC for SMBus block read (git-fixes).
- i2c: cadence: Unregister the clk notifier in error path (git-fixes).
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop (git-fixes).
- ida: do not use BUG_ON() for debugging (git-fixes).
- igb: Enable RSS for Intel I211 Ethernet Controller (git-fixes).
- iio: accel: bma220: Fix alignment for DMA safety (git-fixes).
- iio: accel: sca3000: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7266: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7298: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7476: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7766: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7768-1: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7887: Fix alignment for DMA safety (git-fixes).
- iio: adc: hi8435: Fix alignment for DMA safety (git-fixes).
- iio: adc: ltc2497: Fix alignment for DMA safety (git-fixes).
- iio: adc: max1027: Fix alignment for DMA safety (git-fixes).
- iio: adc: max11100: Fix alignment for DMA safety (git-fixes).
- iio: adc: max1118: Fix alignment for DMA safety (git-fixes).
- iio: adc: mcp320x: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc0832: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc084s021: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc12138: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc128s052: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc161s626: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads124s08: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads7950: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads8344: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads8688: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-tlc4541: Fix alignment for DMA safety (git-fixes).
- iio: amplifiers: ad8366: Fix alignment for DMA safety (git-fixes).
- iio: core: Fix IIO_ALIGN and rename as it was not sufficiently large
(git-fixes).
- iio: dac: ad5064: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5360: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5421: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5449: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5504: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5755: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5761: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5764: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5791: Fix alignment for DMA saftey (git-fixes).
- iio: dac: ad7303: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad8801: Fix alignment for DMA safety (git-fixes).
- iio: dac: mcp4922: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac082s085: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac5571: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac7311: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac7612: Fix alignment for DMA safety (git-fixes).
- iio: frequency: ad9523: Fix alignment for DMA safety (git-fixes).
- iio: frequency: adf4350: Fix alignment for DMA safety (git-fixes).
- iio: frequency: adf4371: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adis16080: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adis16130: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adxrs450: Fix alignment for DMA safety (git-fixes).
- iio: gyro: fxas210002c: Fix alignment for DMA safety (git-fixes).
- iio: light: isl29028: Fix the warning in isl29028_remove() (git-fixes).
- iio: potentiometer: ad5272: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: max5481: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: mcp41010: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: mcp4131: Fix alignment for DMA safety (git-fixes).
- iio: proximity: as3935: Fix alignment for DMA safety (git-fixes).
- iio: resolver: ad2s1200: Fix alignment for DMA safety (git-fixes).
- iio: resolver: ad2s90: Fix alignment for DMA safety (git-fixes).
- ima: Fix a potential integer overflow in ima_appraise_measurement
(git-fixes).
- ima: Fix potential memory leak in ima_init_crypto() (git-fixes).
- intel_th: Fix a resource leak in an error handling path (git-fixes).
- intel_th: msu-sink: Potential dereference of null pointer (git-fixes).
- intel_th: msu: Fix vmalloced buffers (git-fixes).
- kABI workaround for rtsx_usb (git-fixes).
- kabi: create module private struct to hold btf size/data (jsc#SLE-24559).
- kbuild: Build kernel module BTFs if BTF is enabled and pahole supports
it (jsc#SLE-24559).
- kbuild: Skip module BTF generation for out-of-tree external modules
(jsc#SLE-24559).
- kbuild: add marker for build log of *.mod.o (jsc#SLE-24559).
- kbuild: drop $(wildcard $^) check in if_changed* for faster rebuild
(jsc#SLE-24559).
- kbuild: rebuild modules when module linker scripts are updated
(jsc#SLE-24559).
- kbuild: rename any-prereq to newer-prereqs (jsc#SLE-24559).
- kbuild: split final module linking out into Makefile.modfinal
(jsc#SLE-24559).
- lib/string.c: implement stpcpy (git-fixes).
- linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check
(git-fixes).
- linux/random.h: Remove arch_has_random, arch_has_random_seed (git-fixes).
- linux/random.h: Use false with bool (git-fixes).
- lkdtm: Disable return thunks in rodata.c (bsc#1178134).
- macvlan: remove redundant null check on data (git-fixes).
- md/bitmap: wait for external bitmap writes to complete during tear down
(git-fixes).
- md/raid0: Ignore RAID0 layout if the second zone has only one device
(git-fixes).
- md: Set prev_flush_start and flush_bio in an atomic way (git-fixes).
- md: bcache: check the return value of kzalloc() in
detached_dev_do_request() (git-fixes).
- media: hdpvr: fix error value returns in hdpvr_read (git-fixes).
- media: rc: increase rc-mm tolerance and add debug message (git-fixes).
- media: rtl28xxu: Add support for PROlectrix DV107669 DVB-T dongle
(git-fixes).
- media: rtl28xxu: add missing sleep before probing slave demod
(git-fixes).
- media: rtl28xxu: set keymap for Astrometa DVB-T2 (git-fixes).
- media: smipcie: fix interrupt handling and IR timeout (git-fixes).
- media: tw686x: Register the irq at the end of probe (git-fixes).
- media: usb: dvb-usb-v2: rtl28xxu: convert to use i2c_new_client_device()
(git-fixes).
- media: v4l2-mem2mem: always consider OUTPUT queue during poll
(git-fixes).
- media: v4l2-mem2mem: reorder checks in v4l2_m2m_poll() (git-fixes).
- mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()
(git-fixes).
- memregion: Fix memregion_free() fallback definition (git-fixes).
- memstick/ms_block: Fix a memory leak (git-fixes).
- memstick/ms_block: Fix some incorrect memory allocation (git-fixes).
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (git-fixes).
- misc: rtsx: Fix an error handling path in rtsx_pci_probe() (git-fixes).
- misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
(git-fixes).
- misc: rtsx_usb: set return value in rsp_buf alloc err path (git-fixes).
- misc: rtsx_usb: use separate command and response buffers (git-fixes).
- mm/slub: add missing TID updates on slab deactivation (git-fixes).
- mm: fix page reference leak in soft_offline_page() (git fixes
(mm/memory-failure)).
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop
(git-fixes).
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
(git-fixes).
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (git-fixes).
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
(git-fixes).
- mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle
(git-fixes).
- mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg
(git-fixes).
- net, xdp: Introduce __xdp_build_skb_from_frame utility routine
(bsc#1199364).
- net, xdp: Introduce xdp_build_skb_from_frame utility routine
(bsc#1199364).
- net/mlx5e: When changing XDP program without reset, take refs for XSK
RQs (git-fixes).
- net/sonic: Fix some resource leaks in error handling paths (git-fixes).
- net: ag71xx: remove unnecessary MTU reservation (git-fixes).
- net: allwinner: Fix some resources leak in the error handling path of
the probe and in the remove function (git-fixes).
- net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning
(git-fixes).
- net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP
(git-fixes).
- net: amd-xgbe: Reset link when the link never comes back (git-fixes).
- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout
(git-fixes).
- net: axienet: Handle deferred probe on clock properly (git-fixes).
- net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port (git-fixes).
- net: dsa: bcm_sf2: put device node before return (git-fixes).
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE
(git-fixes).
- net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock
(git-fixes).
- net: enetc: fix incorrect TPID when receiving 802.1ad tagged packets
(git-fixes).
- net: enetc: keep RX ring consumer index in sync with hardware
(git-fixes).
- net: evaluate net.ipv4.conf.all.proxy_arp_pvlan (git-fixes).
- net: evaluate net.ipvX.conf.all.ignore_routes_with_linkdown (git-fixes).
- net: hns3: fix error mask definition of flow director (git-fixes).
- net: hso: bail out on interrupt URB allocation failure (git-fixes).
- net: lapbether: Remove netif_start_queue / netif_stop_queue (git-fixes).
- net: ll_temac: Fix potential NULL dereference in temac_probe()
(git-fixes).
- net: ll_temac: Use devm_platform_ioremap_resource_byname() (git-fixes).
- net: macb: add function to disable all macb clocks (git-fixes).
- net: macb: restore cmp registers on resume path (git-fixes).
- net: macb: unprepare clocks in case of failure (git-fixes).
- net: mscc: Fix OF_MDIO config check (git-fixes).
- net: mvneta: Remove per-cpu queue mapping for Armada 3700 (git-fixes).
- net: rose: fix UAF bug caused by rose_t0timer_expiry (git-fixes).
- net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (git-fixes).
- net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
- net: stmmac: fix CBS idleslope and sendslope calculation (git-fixes).
- net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10
(git-fixes).
- net: stmmac: fix watchdog timeout during suspend/resume stress test
(git-fixes).
- net: stmmac: stop each tx channel independently (git-fixes).
- net: tun: set tun->dev->addr_len during TUNSETLINK processing
(git-fixes).
- net: usb: ax88179_178a: add Allied Telesis AT-UMCs (git-fixes).
- net: usb: ax88179_178a: add MCT usb 3.0 adapter (git-fixes).
- net: usb: ax88179_178a: add Toshiba usb 3.0 adapter (git-fixes).
- net: usb: ax88179_178a: remove redundant assignment to variable ret
(git-fixes).
- net: usb: ax88179_178a: write mac to hardware in get_mac_addr
(git-fixes).
- net: usb: qmi_wwan: add Telit 0x1060 composition (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1070 composition (git-fixes).
- net: usb: use eth_hw_addr_set() (git-fixes).
- nvme: consider also host_iface when checking ip options (bsc#1199670).
- octeontx2-af: fix memory leak of lmac and lmac->name (git-fixes).
- pinctrl: sunxi: a83t: Fix NAND function name for some pins (git-fixes).
- pinctrl: sunxi: sunxi_pconf_set: use correct offset (git-fixes).
- platform/olpc: Fix uninitialized data in debugfs write (git-fixes).
- platform/x86: hp-wmi: Ignore Sanitization Mode event (git-fixes).
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
(git-fixes).
- powerpc/mobility: wait for memory transfer to complete (bsc#1201846
ltc#198761).
- powerpc/pseries/mobility: set NMI watchdog factor during an LPM
(bsc#1201846 ltc#198761).
- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846
ltc#198761).
- profiling: fix shift-out-of-bounds bugs (git fixes).
- qla2xxx: drop patch which prevented nvme port discovery (bsc#1200651
bsc#1200644 bsc#1201954 bsc#1201958).
- r8169: fix accessing unset transport header (git-fixes).
- random: document add_hwgenerator_randomness() with other input functions
(git-fixes).
- random: fix typo in comments (git-fixes).
- random: remove useless header comment (git fixes).
- raw: Fix a data-race around sysctl_raw_l3mdev_accept (git-fixes).
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
(git-fixes).
- rpm/kernel-binary.spec.in: Require dwarves >= 1.22 on SLE15-SP3 or newer
Dwarves 1.22 or newer is required to build kernels with BTF information
embedded in modules.
- sched/debug: Remove mpol_get/put and task_lock/unlock from (git-fixes)
- sched/fair: Revise comment about lb decision matrix (git fixes
(sched/fair)).
- sched/membarrier: fix missing local execution of ipi_sync_rq_state()
(git fixes (sched/membarrier)).
- scripts: dummy-tools, add pahole (jsc#SLE-24559).
- scsi: core: Fix error handling of scsi_host_alloc() (git-fixes).
- scsi: core: Fix failure handling of scsi_add_host_with_dma() (git-fixes).
- scsi: core: Only put parent device if host state differs from
SHOST_CREATED (git-fixes).
- scsi: core: Put .shost_dev in failure path if host state changes to
RUNNING (git-fixes).
- scsi: core: Put LLD module refcnt after SCSI device is released
(git-fixes).
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error
(git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.5 patches (bsc#1201956).
- scsi: lpfc: Fix attempted FA-PWWN usage after feature disable
(bsc#1201956).
- scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test
(bsc#1201956 bsc#1200521).
- scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE
(bsc#1201956).
- scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb()
(bsc#1201956).
- scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed
user input (bsc#1201956).
- scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into
lpfc_sli_prep_abort_xri() (bsc#1201956).
- scsi: lpfc: Remove Menlo/Hornet related code (bsc#1201956).
- scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after
VMID (bsc#1201956).
- scsi: lpfc: Revert RSCN_MEMENTO workaround for misbehaved configuration
(bsc#1201956).
- scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb
(bsc#1201956).
- scsi: lpfc: Update lpfc version to 14.2.0.5 (bsc#1201956).
- scsi: qla2xxx: Check correct variable in qla24xx_async_gffid()
(bsc#1201958).
- scsi: qla2xxx: Fix discovery issues in FC-AL topology (bsc#1201958).
- scsi: qla2xxx: Fix imbalance vha->vref_count (bsc#1201958).
- scsi: qla2xxx: Fix incorrect display of max frame size (bsc#1201958).
- scsi: qla2xxx: Fix response queue handler reading stale packets
(bsc#1201958).
- scsi: qla2xxx: Fix sparse warning for dport_data (bsc#1201958).
- scsi: qla2xxx: Update manufacturer details (bsc#1201958).
- scsi: qla2xxx: Update version to 10.02.07.800-k (bsc#1201958).
- scsi: qla2xxx: Zero undefined mailbox IN registers (bsc#1201958).
- scsi: qla2xxx: edif: Fix dropped IKE message (bsc#1201958).
- scsi: scsi_debug: Sanity check block descriptor length in
resp_mode_select() (git-fixes).
- scsi: sd: Fix potential NULL pointer dereference (git-fixes).
- scsi: ufs: Release clock if DMA map fails (git-fixes).
- scsi: ufs: handle cleanup correctly on devm_reset_control_get error
(git-fixes).
- serial: 8250: fix return error code in serial8250_request_std_resource()
(git-fixes).
- serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle (git-fixes).
- serial: stm32: Clear prev values before setting RTS delays (git-fixes).
- soc: fsl: guts: machine variable might be unset (git-fixes).
- soc: ixp4xx/npe: Fix unused match warning (git-fixes).
- soundwire: bus_type: fix remove and shutdown support (git-fixes).
- spi: <linux/spi/spi.h>: add missing struct kernel-doc entry
(git-fixes).
- spi: amd: Limit max transfer and message size (git-fixes).
- staging: rtl8192u: Fix sleep in atomic context bug in
dm_fsync_timer_callback (git-fixes).
- sysctl: Fix data races in proc_dointvec() (git-fixes).
- sysctl: Fix data races in proc_dointvec_jiffies() (git-fixes).
- sysctl: Fix data races in proc_dointvec_minmax() (git-fixes).
- sysctl: Fix data races in proc_douintvec() (git-fixes).
- sysctl: Fix data races in proc_douintvec_minmax() (git-fixes).
- sysctl: Fix data-races in proc_dointvec_ms_jiffies() (git-fixes).
- thermal/tools/tmon: Include pthread and time headers in tmon.h
(git-fixes).
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (git fixes
(kernel/time)).
- usb: dwc3: add cancelled reasons for dwc3 requests (git-fixes).
- usb: dwc3: gadget: Fix event pending check (git-fixes).
- usb: gadget: udc: amd5536 depends on HAS_DMA (git-fixes).
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (git-fixes).
- usb: host: xhci: use snprintf() in xhci_decode_trb() (git-fixes).
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (git-fixes).
- usb: typec: add missing uevent when partner support PD (git-fixes).
- usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion
(git-fixes).
- usb: xhci: tegra: Fix error check (git-fixes).
- usbnet: fix memory leak in error case (git-fixes).
- video: of_display_timing.h: include errno.h (git-fixes).
- virtio-gpu: fix a missing check to avoid NULL dereference (git-fixes).
- virtio-net: fix the race between refill work and close (git-fixes).
- virtio_mmio: Add missing PM calls to freeze/restore (git-fixes).
- virtio_mmio: Restore guest page size on resume (git-fixes).
- watchdog: export lockup_detector_reconfigure (bsc#1201846 ltc#198761).
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in
il4965_rs_fill_link_cmd() (git-fixes).
- wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue
(git-fixes).
- wifi: libertas: Fix possible refcount leak in if_usb_probe() (git-fixes).
- wifi: mac80211: fix queue selection for mesh/OCB interfaces (git-fixes).
- wifi: p54: Fix an error handling path in p54spi_probe() (git-fixes).
- wifi: p54: add missing parentheses in p54_flush() (git-fixes).
- wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()
(git-fixes).
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
(git-fixes).
- wifi: wil6210: debugfs: fix uninitialized variable use in
`wil_write_file_wmi()` (git-fixes).
- x86/bugs: Remove apostrophe typo (bsc#1178134).
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (git-fixes).
- x86/retbleed: Add fine grained Kconfig knobs (bsc#1178134).
- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
(bsc#1201381).
- xen: detect uninitialized xenbus in xenbus_init (git-fixes).
- xen: do not continue xenstore initialization in case of errors
(git-fixes).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.4:
zypper in -t patch openSUSE-SLE-15.4-2022-2875=1
- openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2022-2875=1
- SUSE Linux Enterprise Workstation Extension 15-SP3:
zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-2875=1
- SUSE Linux Enterprise Module for Live Patching 15-SP3:
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2022-2875=1
Please note that this is the initial kernel livepatch without fixes
itself, this livepatch package is later updated by seperate standalone
livepatch updates.
- SUSE Linux Enterprise Module for Legacy Software 15-SP3:
zypper in -t patch SUSE-SLE-Module-Legacy-15-SP3-2022-2875=1
- SUSE Linux Enterprise Module for Development Tools 15-SP3:
zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-2875=1
- SUSE Linux Enterprise Module for Basesystem 15-SP3:
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2875=1
- SUSE Linux Enterprise Micro 5.2:
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2875=1
- SUSE Linux Enterprise Micro 5.1:
zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2875=1
- SUSE Linux Enterprise High Availability 15-SP3:
zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2022-2875=1
Package List:
- openSUSE Leap 15.4 (aarch64):
dtb-al-5.3.18-150300.59.90.1
dtb-zte-5.3.18-150300.59.90.1
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):
cluster-md-kmp-default-5.3.18-150300.59.90.1
cluster-md-kmp-default-debuginfo-5.3.18-150300.59.90.1
dlm-kmp-default-5.3.18-150300.59.90.1
dlm-kmp-default-debuginfo-5.3.18-150300.59.90.1
gfs2-kmp-default-5.3.18-150300.59.90.1
gfs2-kmp-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-5.3.18-150300.59.90.1
kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1
kernel-default-base-rebuild-5.3.18-150300.59.90.1.150300.18.52.1
kernel-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-debugsource-5.3.18-150300.59.90.1
kernel-default-devel-5.3.18-150300.59.90.1
kernel-default-devel-debuginfo-5.3.18-150300.59.90.1
kernel-default-extra-5.3.18-150300.59.90.1
kernel-default-extra-debuginfo-5.3.18-150300.59.90.1
kernel-default-livepatch-5.3.18-150300.59.90.1
kernel-default-livepatch-devel-5.3.18-150300.59.90.1
kernel-default-optional-5.3.18-150300.59.90.1
kernel-default-optional-debuginfo-5.3.18-150300.59.90.1
kernel-obs-build-5.3.18-150300.59.90.1
kernel-obs-build-debugsource-5.3.18-150300.59.90.1
kernel-obs-qa-5.3.18-150300.59.90.1
kernel-syms-5.3.18-150300.59.90.1
kselftests-kmp-default-5.3.18-150300.59.90.1
kselftests-kmp-default-debuginfo-5.3.18-150300.59.90.1
ocfs2-kmp-default-5.3.18-150300.59.90.1
ocfs2-kmp-default-debuginfo-5.3.18-150300.59.90.1
reiserfs-kmp-default-5.3.18-150300.59.90.1
reiserfs-kmp-default-debuginfo-5.3.18-150300.59.90.1
- openSUSE Leap 15.3 (ppc64le x86_64):
kernel-debug-5.3.18-150300.59.90.1
kernel-debug-debuginfo-5.3.18-150300.59.90.1
kernel-debug-debugsource-5.3.18-150300.59.90.1
kernel-debug-devel-5.3.18-150300.59.90.1
kernel-debug-devel-debuginfo-5.3.18-150300.59.90.1
kernel-debug-livepatch-devel-5.3.18-150300.59.90.1
kernel-kvmsmall-5.3.18-150300.59.90.1
kernel-kvmsmall-debuginfo-5.3.18-150300.59.90.1
kernel-kvmsmall-debugsource-5.3.18-150300.59.90.1
kernel-kvmsmall-devel-5.3.18-150300.59.90.1
kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.90.1
kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.90.1
- openSUSE Leap 15.3 (aarch64 x86_64):
cluster-md-kmp-preempt-5.3.18-150300.59.90.1
cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.90.1
dlm-kmp-preempt-5.3.18-150300.59.90.1
dlm-kmp-preempt-debuginfo-5.3.18-150300.59.90.1
gfs2-kmp-preempt-5.3.18-150300.59.90.1
gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.90.1
kernel-preempt-5.3.18-150300.59.90.1
kernel-preempt-debuginfo-5.3.18-150300.59.90.1
kernel-preempt-debugsource-5.3.18-150300.59.90.1
kernel-preempt-devel-5.3.18-150300.59.90.1
kernel-preempt-devel-debuginfo-5.3.18-150300.59.90.1
kernel-preempt-extra-5.3.18-150300.59.90.1
kernel-preempt-extra-debuginfo-5.3.18-150300.59.90.1
kernel-preempt-livepatch-devel-5.3.18-150300.59.90.1
kernel-preempt-optional-5.3.18-150300.59.90.1
kernel-preempt-optional-debuginfo-5.3.18-150300.59.90.1
kselftests-kmp-preempt-5.3.18-150300.59.90.1
kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.90.1
ocfs2-kmp-preempt-5.3.18-150300.59.90.1
ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.90.1
reiserfs-kmp-preempt-5.3.18-150300.59.90.1
reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.90.1
- openSUSE Leap 15.3 (aarch64):
cluster-md-kmp-64kb-5.3.18-150300.59.90.1
cluster-md-kmp-64kb-debuginfo-5.3.18-150300.59.90.1
dlm-kmp-64kb-5.3.18-150300.59.90.1
dlm-kmp-64kb-debuginfo-5.3.18-150300.59.90.1
dtb-al-5.3.18-150300.59.90.1
dtb-allwinner-5.3.18-150300.59.90.1
dtb-altera-5.3.18-150300.59.90.1
dtb-amd-5.3.18-150300.59.90.1
dtb-amlogic-5.3.18-150300.59.90.1
dtb-apm-5.3.18-150300.59.90.1
dtb-arm-5.3.18-150300.59.90.1
dtb-broadcom-5.3.18-150300.59.90.1
dtb-cavium-5.3.18-150300.59.90.1
dtb-exynos-5.3.18-150300.59.90.1
dtb-freescale-5.3.18-150300.59.90.1
dtb-hisilicon-5.3.18-150300.59.90.1
dtb-lg-5.3.18-150300.59.90.1
dtb-marvell-5.3.18-150300.59.90.1
dtb-mediatek-5.3.18-150300.59.90.1
dtb-nvidia-5.3.18-150300.59.90.1
dtb-qcom-5.3.18-150300.59.90.1
dtb-renesas-5.3.18-150300.59.90.1
dtb-rockchip-5.3.18-150300.59.90.1
dtb-socionext-5.3.18-150300.59.90.1
dtb-sprd-5.3.18-150300.59.90.1
dtb-xilinx-5.3.18-150300.59.90.1
dtb-zte-5.3.18-150300.59.90.1
gfs2-kmp-64kb-5.3.18-150300.59.90.1
gfs2-kmp-64kb-debuginfo-5.3.18-150300.59.90.1
kernel-64kb-5.3.18-150300.59.90.1
kernel-64kb-debuginfo-5.3.18-150300.59.90.1
kernel-64kb-debugsource-5.3.18-150300.59.90.1
kernel-64kb-devel-5.3.18-150300.59.90.1
kernel-64kb-devel-debuginfo-5.3.18-150300.59.90.1
kernel-64kb-extra-5.3.18-150300.59.90.1
kernel-64kb-extra-debuginfo-5.3.18-150300.59.90.1
kernel-64kb-livepatch-devel-5.3.18-150300.59.90.1
kernel-64kb-optional-5.3.18-150300.59.90.1
kernel-64kb-optional-debuginfo-5.3.18-150300.59.90.1
kselftests-kmp-64kb-5.3.18-150300.59.90.1
kselftests-kmp-64kb-debuginfo-5.3.18-150300.59.90.1
ocfs2-kmp-64kb-5.3.18-150300.59.90.1
ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.90.1
reiserfs-kmp-64kb-5.3.18-150300.59.90.1
reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.90.1
- openSUSE Leap 15.3 (noarch):
kernel-devel-5.3.18-150300.59.90.1
kernel-docs-5.3.18-150300.59.90.1
kernel-docs-html-5.3.18-150300.59.90.1
kernel-macros-5.3.18-150300.59.90.1
kernel-source-5.3.18-150300.59.90.1
kernel-source-vanilla-5.3.18-150300.59.90.1
- openSUSE Leap 15.3 (s390x):
kernel-zfcpdump-5.3.18-150300.59.90.1
kernel-zfcpdump-debuginfo-5.3.18-150300.59.90.1
kernel-zfcpdump-debugsource-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64):
kernel-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-debugsource-5.3.18-150300.59.90.1
kernel-default-extra-5.3.18-150300.59.90.1
kernel-default-extra-debuginfo-5.3.18-150300.59.90.1
kernel-preempt-debuginfo-5.3.18-150300.59.90.1
kernel-preempt-debugsource-5.3.18-150300.59.90.1
kernel-preempt-extra-5.3.18-150300.59.90.1
kernel-preempt-extra-debuginfo-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Module for Live Patching 15-SP3 (ppc64le s390x x86_64):
kernel-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-debugsource-5.3.18-150300.59.90.1
kernel-default-livepatch-5.3.18-150300.59.90.1
kernel-default-livepatch-devel-5.3.18-150300.59.90.1
kernel-livepatch-5_3_18-150300_59_90-default-1-150300.7.3.1
- SUSE Linux Enterprise Module for Legacy Software 15-SP3 (aarch64 ppc64le s390x x86_64):
kernel-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-debugsource-5.3.18-150300.59.90.1
reiserfs-kmp-default-5.3.18-150300.59.90.1
reiserfs-kmp-default-debuginfo-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64):
kernel-obs-build-5.3.18-150300.59.90.1
kernel-obs-build-debugsource-5.3.18-150300.59.90.1
kernel-syms-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 x86_64):
kernel-preempt-debuginfo-5.3.18-150300.59.90.1
kernel-preempt-debugsource-5.3.18-150300.59.90.1
kernel-preempt-devel-5.3.18-150300.59.90.1
kernel-preempt-devel-debuginfo-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch):
kernel-docs-5.3.18-150300.59.90.1
kernel-source-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64):
kernel-default-5.3.18-150300.59.90.1
kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1
kernel-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-debugsource-5.3.18-150300.59.90.1
kernel-default-devel-5.3.18-150300.59.90.1
kernel-default-devel-debuginfo-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 x86_64):
kernel-preempt-5.3.18-150300.59.90.1
kernel-preempt-debuginfo-5.3.18-150300.59.90.1
kernel-preempt-debugsource-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64):
kernel-64kb-5.3.18-150300.59.90.1
kernel-64kb-debuginfo-5.3.18-150300.59.90.1
kernel-64kb-debugsource-5.3.18-150300.59.90.1
kernel-64kb-devel-5.3.18-150300.59.90.1
kernel-64kb-devel-debuginfo-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch):
kernel-devel-5.3.18-150300.59.90.1
kernel-macros-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (s390x):
kernel-zfcpdump-5.3.18-150300.59.90.1
kernel-zfcpdump-debuginfo-5.3.18-150300.59.90.1
kernel-zfcpdump-debugsource-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64):
kernel-default-5.3.18-150300.59.90.1
kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1
kernel-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-debugsource-5.3.18-150300.59.90.1
- SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64):
kernel-default-5.3.18-150300.59.90.1
kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1
kernel-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-debugsource-5.3.18-150300.59.90.1
- SUSE Linux Enterprise High Availability 15-SP3 (aarch64 ppc64le s390x x86_64):
cluster-md-kmp-default-5.3.18-150300.59.90.1
cluster-md-kmp-default-debuginfo-5.3.18-150300.59.90.1
dlm-kmp-default-5.3.18-150300.59.90.1
dlm-kmp-default-debuginfo-5.3.18-150300.59.90.1
gfs2-kmp-default-5.3.18-150300.59.90.1
gfs2-kmp-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-debuginfo-5.3.18-150300.59.90.1
kernel-default-debugsource-5.3.18-150300.59.90.1
ocfs2-kmp-default-5.3.18-150300.59.90.1
ocfs2-kmp-default-debuginfo-5.3.18-150300.59.90.1
References:
https://www.suse.com/security/cve/CVE-2020-36516.html
https://www.suse.com/security/cve/CVE-2020-36557.html
https://www.suse.com/security/cve/CVE-2020-36558.html
https://www.suse.com/security/cve/CVE-2021-33655.html
https://www.suse.com/security/cve/CVE-2021-33656.html
https://www.suse.com/security/cve/CVE-2022-1116.html
https://www.suse.com/security/cve/CVE-2022-1462.html
https://www.suse.com/security/cve/CVE-2022-20166.html
https://www.suse.com/security/cve/CVE-2022-21505.html
https://www.suse.com/security/cve/CVE-2022-2318.html
https://www.suse.com/security/cve/CVE-2022-26365.html
https://www.suse.com/security/cve/CVE-2022-2639.html
https://www.suse.com/security/cve/CVE-2022-29581.html
https://www.suse.com/security/cve/CVE-2022-32250.html
https://www.suse.com/security/cve/CVE-2022-33740.html
https://www.suse.com/security/cve/CVE-2022-33741.html
https://www.suse.com/security/cve/CVE-2022-33742.html
https://www.suse.com/security/cve/CVE-2022-36946.html
https://bugzilla.suse.com/1178134
https://bugzilla.suse.com/1196616
https://bugzilla.suse.com/1198829
https://bugzilla.suse.com/1199364
https://bugzilla.suse.com/1199647
https://bugzilla.suse.com/1199665
https://bugzilla.suse.com/1199670
https://bugzilla.suse.com/1200015
https://bugzilla.suse.com/1200521
https://bugzilla.suse.com/1200598
https://bugzilla.suse.com/1200644
https://bugzilla.suse.com/1200651
https://bugzilla.suse.com/1200762
https://bugzilla.suse.com/1200910
https://bugzilla.suse.com/1201196
https://bugzilla.suse.com/1201206
https://bugzilla.suse.com/1201251
https://bugzilla.suse.com/1201381
https://bugzilla.suse.com/1201429
https://bugzilla.suse.com/1201442
https://bugzilla.suse.com/1201458
https://bugzilla.suse.com/1201635
https://bugzilla.suse.com/1201636
https://bugzilla.suse.com/1201644
https://bugzilla.suse.com/1201645
https://bugzilla.suse.com/1201664
https://bugzilla.suse.com/1201672
https://bugzilla.suse.com/1201673
https://bugzilla.suse.com/1201676
https://bugzilla.suse.com/1201846
https://bugzilla.suse.com/1201930
https://bugzilla.suse.com/1201940
https://bugzilla.suse.com/1201954
https://bugzilla.suse.com/1201956
https://bugzilla.suse.com/1201958
https://bugzilla.suse.com/1202154
1
0
SUSE-SU-2022:2876-1: important: Security update for gfbgraph
by opensuse-security@opensuse.org 23 Aug '22
by opensuse-security@opensuse.org 23 Aug '22
23 Aug '22
SUSE Security Update: Security update for gfbgraph
______________________________________________________________________________
Announcement ID: SUSE-SU-2022:2876-1
Rating: important
References: #1189850
Cross-References: CVE-2021-39358
CVSS scores:
CVE-2021-39358 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE-2021-39358 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products:
SUSE Linux Enterprise Desktop 15-SP3
SUSE Linux Enterprise High Performance Computing 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3
SUSE Linux Enterprise Server 15-SP3
SUSE Linux Enterprise Server for SAP Applications 15-SP3
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 15-SP3
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.2
openSUSE Leap 15.3
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
This update for gfbgraph fixes the following issues:
- CVE-2021-39358: Fixed missing TLS certificate verification (bsc#1189850).
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2022-2876=1
- SUSE Linux Enterprise Workstation Extension 15-SP3:
zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-2876=1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3:
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-2876=1
Package List:
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):
gfbgraph-debugsource-0.2.3-150000.3.5.1
gfbgraph-devel-0.2.3-150000.3.5.1
libgfbgraph-0_2-0-0.2.3-150000.3.5.1
libgfbgraph-0_2-0-debuginfo-0.2.3-150000.3.5.1
typelib-1_0-GFBGraph-0_2-0.2.3-150000.3.5.1
- SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64):
gfbgraph-debugsource-0.2.3-150000.3.5.1
gfbgraph-devel-0.2.3-150000.3.5.1
libgfbgraph-0_2-0-0.2.3-150000.3.5.1
libgfbgraph-0_2-0-debuginfo-0.2.3-150000.3.5.1
typelib-1_0-GFBGraph-0_2-0.2.3-150000.3.5.1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x):
gfbgraph-debugsource-0.2.3-150000.3.5.1
gfbgraph-devel-0.2.3-150000.3.5.1
libgfbgraph-0_2-0-0.2.3-150000.3.5.1
libgfbgraph-0_2-0-debuginfo-0.2.3-150000.3.5.1
typelib-1_0-GFBGraph-0_2-0.2.3-150000.3.5.1
References:
https://www.suse.com/security/cve/CVE-2021-39358.html
https://bugzilla.suse.com/1189850
1
0