openSUSE Security Announce January 2023

security-announce@lists.opensuse.org

1 participants
81 discussions

SUSE-SU-2023:0212-1: important: Security update for nginx
by opensuse-security＠opensuse.org 30 Jan '23

30 Jan '23

SUSE Security Update: Security update for nginx ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0212-1 Rating: important References: #1204526 #1204527 Cross-References: CVE-2022-41741 CVE-2022-41742 CVSS scores: CVE-2022-41741 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-41741 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-41742 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2022-41742 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for nginx fixes the following issues: - CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204526) - CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204527) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-212=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-212=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nginx-1.21.5-150400.3.3.1 nginx-debuginfo-1.21.5-150400.3.3.1 nginx-debugsource-1.21.5-150400.3.3.1 - openSUSE Leap 15.4 (noarch): nginx-source-1.21.5-150400.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): nginx-1.21.5-150400.3.3.1 nginx-debuginfo-1.21.5-150400.3.3.1 nginx-debugsource-1.21.5-150400.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): nginx-source-1.21.5-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-41741.html https://www.suse.com/security/cve/CVE-2022-41742.html https://bugzilla.suse.com/1204526 https://bugzilla.suse.com/1204527

1 0

SUSE-SU-2023:0211-1: moderate: Security update for vim
by opensuse-security＠opensuse.org 30 Jan '23

30 Jan '23

SUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0211-1 Rating: moderate References: #1206866 #1206867 #1206868 #1207162 #1207396 Cross-References: CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVSS scores: CVE-2023-0049 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-0049 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2023-0051 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-0051 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2023-0054 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-0054 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2023-0288 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2023-0288 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2023-0433 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for vim fixes the following issues: - Updated to version 9.0.1234: - CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash (bsc#1207396). - CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash (bsc#1207162). - CVE-2023-0054: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1206868). - CVE-2023-0051: Fixed an out of bounds memory access that could cause a crash (bsc#1206867). - CVE-2023-0049: Fixed an out of bounds memory access that could cause a crash (bsc#1206866). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2023-211=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2023-211=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-211=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-211=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-211=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-211=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2023-211=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-211=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-211=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): vim-debuginfo-9.0.1234-150000.5.34.1 vim-debugsource-9.0.1234-150000.5.34.1 vim-small-9.0.1234-150000.5.34.1 vim-small-debuginfo-9.0.1234-150000.5.34.1 - openSUSE Leap Micro 5.3 (noarch): vim-data-common-9.0.1234-150000.5.34.1 - openSUSE Leap Micro 5.2 (aarch64 x86_64): vim-debuginfo-9.0.1234-150000.5.34.1 vim-debugsource-9.0.1234-150000.5.34.1 vim-small-9.0.1234-150000.5.34.1 vim-small-debuginfo-9.0.1234-150000.5.34.1 - openSUSE Leap Micro 5.2 (noarch): vim-data-common-9.0.1234-150000.5.34.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gvim-9.0.1234-150000.5.34.1 gvim-debuginfo-9.0.1234-150000.5.34.1 vim-9.0.1234-150000.5.34.1 vim-debuginfo-9.0.1234-150000.5.34.1 vim-debugsource-9.0.1234-150000.5.34.1 vim-small-9.0.1234-150000.5.34.1 vim-small-debuginfo-9.0.1234-150000.5.34.1 - openSUSE Leap 15.4 (noarch): vim-data-9.0.1234-150000.5.34.1 vim-data-common-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): vim-data-9.0.1234-150000.5.34.1 vim-data-common-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): gvim-9.0.1234-150000.5.34.1 gvim-debuginfo-9.0.1234-150000.5.34.1 vim-9.0.1234-150000.5.34.1 vim-debuginfo-9.0.1234-150000.5.34.1 vim-debugsource-9.0.1234-150000.5.34.1 vim-small-9.0.1234-150000.5.34.1 vim-small-debuginfo-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): gvim-9.0.1234-150000.5.34.1 gvim-debuginfo-9.0.1234-150000.5.34.1 vim-debuginfo-9.0.1234-150000.5.34.1 vim-debugsource-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): vim-9.0.1234-150000.5.34.1 vim-debuginfo-9.0.1234-150000.5.34.1 vim-debugsource-9.0.1234-150000.5.34.1 vim-small-9.0.1234-150000.5.34.1 vim-small-debuginfo-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): vim-data-9.0.1234-150000.5.34.1 vim-data-common-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): vim-debuginfo-9.0.1234-150000.5.34.1 vim-debugsource-9.0.1234-150000.5.34.1 vim-small-9.0.1234-150000.5.34.1 vim-small-debuginfo-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Micro 5.3 (noarch): vim-data-common-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): vim-debuginfo-9.0.1234-150000.5.34.1 vim-debugsource-9.0.1234-150000.5.34.1 vim-small-9.0.1234-150000.5.34.1 vim-small-debuginfo-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Micro 5.2 (noarch): vim-data-common-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): vim-debuginfo-9.0.1234-150000.5.34.1 vim-debugsource-9.0.1234-150000.5.34.1 vim-small-9.0.1234-150000.5.34.1 vim-small-debuginfo-9.0.1234-150000.5.34.1 - SUSE Linux Enterprise Micro 5.1 (noarch): vim-data-common-9.0.1234-150000.5.34.1 References: https://www.suse.com/security/cve/CVE-2023-0049.html https://www.suse.com/security/cve/CVE-2023-0051.html https://www.suse.com/security/cve/CVE-2023-0054.html https://www.suse.com/security/cve/CVE-2023-0288.html https://www.suse.com/security/cve/CVE-2023-0433.html https://bugzilla.suse.com/1206866 https://bugzilla.suse.com/1206867 https://bugzilla.suse.com/1206868 https://bugzilla.suse.com/1207162 https://bugzilla.suse.com/1207396

1 0

SUSE-SU-2023:0215-1: moderate: Security update for apache2-mod_auth_openidc
by opensuse-security＠opensuse.org 30 Jan '23

30 Jan '23

SUSE Security Update: Security update for apache2-mod_auth_openidc ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0215-1 Rating: moderate References: #1190223 #1199868 #1206441 Cross-References: CVE-2021-39191 CVE-2022-23527 CVSS scores: CVE-2021-39191 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-39191 (SUSE): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CVE-2022-23527 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-23527 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2022-23527: Fixed open redirect in oidc_validate_redirect_url() using tab character (bsc#1206441). - CVE-2021-39191: Fixed open redirect issue in target_link_uri parameter (bsc#1190223). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-215=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-215=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2023-215=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): apache2-mod_auth_openidc-2.3.8-150100.3.22.1 apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.22.1 apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.22.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): apache2-mod_auth_openidc-2.3.8-150100.3.22.1 apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.22.1 apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.22.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): apache2-mod_auth_openidc-2.3.8-150100.3.22.1 apache2-mod_auth_openidc-debuginfo-2.3.8-150100.3.22.1 apache2-mod_auth_openidc-debugsource-2.3.8-150100.3.22.1 References: https://www.suse.com/security/cve/CVE-2021-39191.html https://www.suse.com/security/cve/CVE-2022-23527.html https://bugzilla.suse.com/1190223 https://bugzilla.suse.com/1199868 https://bugzilla.suse.com/1206441

1 0

SUSE-SU-2023:0206-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 30 Jan '23

30 Jan '23

SUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0206-1 Rating: moderate References: #1140754 #1206778 Cross-References: CVE-2019-13390 CVE-2022-3341 CVSS scores: CVE-2019-13390 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-13390 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-3341 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-3341 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ffmpeg fixes the following issues: - CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream (bsc#1206778). - CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream (bsc#1140754). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-206=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2023-206=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-206=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-206=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-206=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): ffmpeg-3.4.2-150200.11.25.1 ffmpeg-debuginfo-3.4.2-150200.11.25.1 ffmpeg-debugsource-3.4.2-150200.11.25.1 ffmpeg-private-devel-3.4.2-150200.11.25.1 libavcodec-devel-3.4.2-150200.11.25.1 libavcodec57-3.4.2-150200.11.25.1 libavcodec57-debuginfo-3.4.2-150200.11.25.1 libavdevice-devel-3.4.2-150200.11.25.1 libavdevice57-3.4.2-150200.11.25.1 libavdevice57-debuginfo-3.4.2-150200.11.25.1 libavfilter-devel-3.4.2-150200.11.25.1 libavfilter6-3.4.2-150200.11.25.1 libavfilter6-debuginfo-3.4.2-150200.11.25.1 libavformat-devel-3.4.2-150200.11.25.1 libavformat57-3.4.2-150200.11.25.1 libavformat57-debuginfo-3.4.2-150200.11.25.1 libavresample-devel-3.4.2-150200.11.25.1 libavresample3-3.4.2-150200.11.25.1 libavresample3-debuginfo-3.4.2-150200.11.25.1 libavutil-devel-3.4.2-150200.11.25.1 libavutil55-3.4.2-150200.11.25.1 libavutil55-debuginfo-3.4.2-150200.11.25.1 libpostproc-devel-3.4.2-150200.11.25.1 libpostproc54-3.4.2-150200.11.25.1 libpostproc54-debuginfo-3.4.2-150200.11.25.1 libswresample-devel-3.4.2-150200.11.25.1 libswresample2-3.4.2-150200.11.25.1 libswresample2-debuginfo-3.4.2-150200.11.25.1 libswscale-devel-3.4.2-150200.11.25.1 libswscale4-3.4.2-150200.11.25.1 libswscale4-debuginfo-3.4.2-150200.11.25.1 - openSUSE Leap 15.4 (x86_64): libavcodec57-32bit-3.4.2-150200.11.25.1 libavcodec57-32bit-debuginfo-3.4.2-150200.11.25.1 libavdevice57-32bit-3.4.2-150200.11.25.1 libavdevice57-32bit-debuginfo-3.4.2-150200.11.25.1 libavfilter6-32bit-3.4.2-150200.11.25.1 libavfilter6-32bit-debuginfo-3.4.2-150200.11.25.1 libavformat57-32bit-3.4.2-150200.11.25.1 libavformat57-32bit-debuginfo-3.4.2-150200.11.25.1 libavresample3-32bit-3.4.2-150200.11.25.1 libavresample3-32bit-debuginfo-3.4.2-150200.11.25.1 libavutil55-32bit-3.4.2-150200.11.25.1 libavutil55-32bit-debuginfo-3.4.2-150200.11.25.1 libpostproc54-32bit-3.4.2-150200.11.25.1 libpostproc54-32bit-debuginfo-3.4.2-150200.11.25.1 libswresample2-32bit-3.4.2-150200.11.25.1 libswresample2-32bit-debuginfo-3.4.2-150200.11.25.1 libswscale4-32bit-3.4.2-150200.11.25.1 libswscale4-32bit-debuginfo-3.4.2-150200.11.25.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): ffmpeg-debuginfo-3.4.2-150200.11.25.1 ffmpeg-debugsource-3.4.2-150200.11.25.1 libavcodec-devel-3.4.2-150200.11.25.1 libavformat-devel-3.4.2-150200.11.25.1 libavformat57-3.4.2-150200.11.25.1 libavformat57-debuginfo-3.4.2-150200.11.25.1 libavresample-devel-3.4.2-150200.11.25.1 libavresample3-3.4.2-150200.11.25.1 libavresample3-debuginfo-3.4.2-150200.11.25.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): ffmpeg-debuginfo-3.4.2-150200.11.25.1 ffmpeg-debugsource-3.4.2-150200.11.25.1 libavcodec57-3.4.2-150200.11.25.1 libavcodec57-debuginfo-3.4.2-150200.11.25.1 libavformat57-3.4.2-150200.11.25.1 libavformat57-debuginfo-3.4.2-150200.11.25.1 libavresample-devel-3.4.2-150200.11.25.1 libavresample3-3.4.2-150200.11.25.1 libavresample3-debuginfo-3.4.2-150200.11.25.1 libavutil-devel-3.4.2-150200.11.25.1 libavutil55-3.4.2-150200.11.25.1 libavutil55-debuginfo-3.4.2-150200.11.25.1 libpostproc-devel-3.4.2-150200.11.25.1 libpostproc54-3.4.2-150200.11.25.1 libpostproc54-debuginfo-3.4.2-150200.11.25.1 libswresample-devel-3.4.2-150200.11.25.1 libswresample2-3.4.2-150200.11.25.1 libswresample2-debuginfo-3.4.2-150200.11.25.1 libswscale-devel-3.4.2-150200.11.25.1 libswscale4-3.4.2-150200.11.25.1 libswscale4-debuginfo-3.4.2-150200.11.25.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x x86_64): ffmpeg-3.4.2-150200.11.25.1 ffmpeg-debuginfo-3.4.2-150200.11.25.1 ffmpeg-debugsource-3.4.2-150200.11.25.1 libavdevice57-3.4.2-150200.11.25.1 libavdevice57-debuginfo-3.4.2-150200.11.25.1 libavfilter6-3.4.2-150200.11.25.1 libavfilter6-debuginfo-3.4.2-150200.11.25.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): ffmpeg-debuginfo-3.4.2-150200.11.25.1 ffmpeg-debugsource-3.4.2-150200.11.25.1 libavcodec57-3.4.2-150200.11.25.1 libavcodec57-debuginfo-3.4.2-150200.11.25.1 libavformat57-3.4.2-150200.11.25.1 libavformat57-debuginfo-3.4.2-150200.11.25.1 libavresample3-3.4.2-150200.11.25.1 libavresample3-debuginfo-3.4.2-150200.11.25.1 libavutil-devel-3.4.2-150200.11.25.1 libavutil55-3.4.2-150200.11.25.1 libavutil55-debuginfo-3.4.2-150200.11.25.1 libpostproc-devel-3.4.2-150200.11.25.1 libpostproc54-3.4.2-150200.11.25.1 libpostproc54-debuginfo-3.4.2-150200.11.25.1 libswresample-devel-3.4.2-150200.11.25.1 libswresample2-3.4.2-150200.11.25.1 libswresample2-debuginfo-3.4.2-150200.11.25.1 libswscale-devel-3.4.2-150200.11.25.1 libswscale4-3.4.2-150200.11.25.1 libswscale4-debuginfo-3.4.2-150200.11.25.1 References: https://www.suse.com/security/cve/CVE-2019-13390.html https://www.suse.com/security/cve/CVE-2022-3341.html https://bugzilla.suse.com/1140754 https://bugzilla.suse.com/1206778

1 0

openSUSE-SU-2023:0033-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 29 Jan '23

29 Jan '23

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0033-1 Rating: important References: Cross-References: CVE-2023-21884 CVE-2023-21885 CVE-2023-21886 CVE-2023-21889 CVE-2023-21898 CVE-2023-21899 CVSS scores: CVE-2023-21884 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2023-21885 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2023-21886 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2023-21889 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2023-21898 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2023-21899 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for virtualbox fixes the following issues: VirtualBox 7.0.6 (released January 17 2023) This is a maintenance release. The following items were fixed and/or added: [1] - VMM: Fixed guru running the FreeBSD loader on older Intel CPUs without unrestricted guest support (bug #21332) - GUI: Fixed virtual machines grouping when VM was created or modified in command line (bugs #11500, #20933) - GUI: Introduced generic changes in settings dialogs - VirtioNet: Fixed broken network after loading saved state (bug #21172) - Storage: Added support for increasing the size of the following VMDK image variants: monolithicFlat, monolithicSparse, twoGbMaxExtentSparse, twoGbMaxExtentFlat - VBoxManage: Added missing --directory switch for guestcontrol mktemp command - Mouse Integration: Guest was provided with extended host mouse state (bug #21139) - DnD: Introduced generic improvements - Guest Control: Fixed handling creation mode for temporary directories (bug #21394) - Linux Host and Guest: Added initial support for building UEK7 kernel on Oracle Linux 8 - Linux Host and Guest: Added initial support for RHEL 9.1 kernel - Linux Guest Additions: Added initial support for kernel 6.2 for vboxvideo - Audio: The "--audio" option in VBoxManage is now marked as deprecated; please use "--audio-driver" and "--audio-enabled" instead. This will allow more flexibility when changing the driver and/or controlling the audio functionality Additionally, it fixes 6 CVE's: CVE-2023-21886, CVE-2023-21898, CVE-2023-21899, CVE-2023-21884, CVE-2023-21885, CVE-2023-21889 Links: [1] https://www.virtualbox.org/wiki/Changelog-7.0#v6 [2] https://www.oracle.com/security-alerts/cpujan2023.html#AppendixOVIR Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2023-33=1 Package List: - openSUSE Leap 15.4 (x86_64): python3-virtualbox-7.0.6-lp154.2.26.2 python3-virtualbox-debuginfo-7.0.6-lp154.2.26.2 virtualbox-7.0.6-lp154.2.26.2 virtualbox-debuginfo-7.0.6-lp154.2.26.2 virtualbox-debugsource-7.0.6-lp154.2.26.2 virtualbox-devel-7.0.6-lp154.2.26.2 virtualbox-guest-tools-7.0.6-lp154.2.26.2 virtualbox-guest-tools-debuginfo-7.0.6-lp154.2.26.2 virtualbox-kmp-debugsource-7.0.6-lp154.2.26.2 virtualbox-kmp-default-7.0.6_k5.14.21_150400.24.41-lp154.2.26.2 virtualbox-kmp-default-debuginfo-7.0.6_k5.14.21_150400.24.41-lp154.2.26.2 virtualbox-qt-7.0.6-lp154.2.26.2 virtualbox-qt-debuginfo-7.0.6-lp154.2.26.2 virtualbox-vnc-7.0.6-lp154.2.26.2 virtualbox-websrv-7.0.6-lp154.2.26.2 virtualbox-websrv-debuginfo-7.0.6-lp154.2.26.2 - openSUSE Leap 15.4 (noarch): virtualbox-guest-desktop-icons-7.0.6-lp154.2.26.2 virtualbox-guest-source-7.0.6-lp154.2.26.2 virtualbox-host-source-7.0.6-lp154.2.26.2 References: https://www.suse.com/security/cve/CVE-2023-21884.html https://www.suse.com/security/cve/CVE-2023-21885.html https://www.suse.com/security/cve/CVE-2023-21886.html https://www.suse.com/security/cve/CVE-2023-21889.html https://www.suse.com/security/cve/CVE-2023-21898.html https://www.suse.com/security/cve/CVE-2023-21899.html

1 0

SUSE-SU-2023:0205-1: important: Security update for nginx
by opensuse-security＠opensuse.org 27 Jan '23

27 Jan '23

SUSE Security Update: Security update for nginx ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0205-1 Rating: important References: #1204526 #1204527 Cross-References: CVE-2022-41741 CVE-2022-41742 CVSS scores: CVE-2022-41741 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-41741 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-41742 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2022-41742 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for nginx fixes the following issues: - CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204526) - CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204527) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-205=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-205=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-205=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-205=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-205=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-205=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-205=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-205=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-205=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-205=1 Package List: - openSUSE Leap 15.4 (noarch): vim-plugin-nginx-1.19.8-150300.3.12.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): nginx-1.19.8-150300.3.12.1 nginx-debuginfo-1.19.8-150300.3.12.1 nginx-debugsource-1.19.8-150300.3.12.1 - SUSE Manager Server 4.2 (noarch): nginx-source-1.19.8-150300.3.12.1 - SUSE Manager Retail Branch Server 4.2 (noarch): nginx-source-1.19.8-150300.3.12.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): nginx-1.19.8-150300.3.12.1 nginx-debuginfo-1.19.8-150300.3.12.1 nginx-debugsource-1.19.8-150300.3.12.1 - SUSE Manager Proxy 4.2 (noarch): nginx-source-1.19.8-150300.3.12.1 - SUSE Manager Proxy 4.2 (x86_64): nginx-1.19.8-150300.3.12.1 nginx-debuginfo-1.19.8-150300.3.12.1 nginx-debugsource-1.19.8-150300.3.12.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): nginx-1.19.8-150300.3.12.1 nginx-debuginfo-1.19.8-150300.3.12.1 nginx-debugsource-1.19.8-150300.3.12.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): nginx-source-1.19.8-150300.3.12.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): nginx-1.19.8-150300.3.12.1 nginx-debuginfo-1.19.8-150300.3.12.1 nginx-debugsource-1.19.8-150300.3.12.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): nginx-source-1.19.8-150300.3.12.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): nginx-source-1.19.8-150300.3.12.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): nginx-1.19.8-150300.3.12.1 nginx-debuginfo-1.19.8-150300.3.12.1 nginx-debugsource-1.19.8-150300.3.12.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): nginx-1.19.8-150300.3.12.1 nginx-debuginfo-1.19.8-150300.3.12.1 nginx-debugsource-1.19.8-150300.3.12.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): nginx-source-1.19.8-150300.3.12.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): nginx-1.19.8-150300.3.12.1 nginx-debuginfo-1.19.8-150300.3.12.1 nginx-debugsource-1.19.8-150300.3.12.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): nginx-source-1.19.8-150300.3.12.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): nginx-1.19.8-150300.3.12.1 nginx-debuginfo-1.19.8-150300.3.12.1 nginx-debugsource-1.19.8-150300.3.12.1 - SUSE Enterprise Storage 7.1 (noarch): nginx-source-1.19.8-150300.3.12.1 References: https://www.suse.com/security/cve/CVE-2022-41741.html https://www.suse.com/security/cve/CVE-2022-41742.html https://bugzilla.suse.com/1204526 https://bugzilla.suse.com/1204527

1 0

SUSE-SU-2023:0204-1: important: Security update for sssd
by opensuse-security＠opensuse.org 27 Jan '23

27 Jan '23

SUSE Security Update: Security update for sssd ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0204-1 Rating: important References: #1207474 Cross-References: CVE-2022-4254 CVSS scores: CVE-2022-4254 (SUSE): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sssd fixes the following issues: - CVE-2022-4254: Fixed a bug in libsss_certmap which could allow an attacker to gain control of the admin account and perform a full domain takeover. (bsc#1207474) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2023-204=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-204=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-204=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-204=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-204=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-204=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-204=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-204=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-204=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-204=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-204=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-204=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): libipa_hbac-devel-1.16.1-150300.23.37.1 libipa_hbac0-1.16.1-150300.23.37.1 libipa_hbac0-debuginfo-1.16.1-150300.23.37.1 libsss_certmap-devel-1.16.1-150300.23.37.1 libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap-devel-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap-devel-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_simpleifp-devel-1.16.1-150300.23.37.1 libsss_simpleifp0-1.16.1-150300.23.37.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.37.1 python3-sssd-config-1.16.1-150300.23.37.1 python3-sssd-config-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-ad-1.16.1-150300.23.37.1 sssd-ad-debuginfo-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-dbus-1.16.1-150300.23.37.1 sssd-dbus-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-ipa-1.16.1-150300.23.37.1 sssd-ipa-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 sssd-proxy-1.16.1-150300.23.37.1 sssd-proxy-debuginfo-1.16.1-150300.23.37.1 sssd-tools-1.16.1-150300.23.37.1 sssd-tools-debuginfo-1.16.1-150300.23.37.1 sssd-winbind-idmap-1.16.1-150300.23.37.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.37.1 - SUSE Manager Server 4.2 (x86_64): sssd-common-32bit-1.16.1-150300.23.37.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.37.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): libipa_hbac-devel-1.16.1-150300.23.37.1 libipa_hbac0-1.16.1-150300.23.37.1 libipa_hbac0-debuginfo-1.16.1-150300.23.37.1 libsss_certmap-devel-1.16.1-150300.23.37.1 libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap-devel-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap-devel-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_simpleifp-devel-1.16.1-150300.23.37.1 libsss_simpleifp0-1.16.1-150300.23.37.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.37.1 python3-sssd-config-1.16.1-150300.23.37.1 python3-sssd-config-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-ad-1.16.1-150300.23.37.1 sssd-ad-debuginfo-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-32bit-1.16.1-150300.23.37.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-dbus-1.16.1-150300.23.37.1 sssd-dbus-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-ipa-1.16.1-150300.23.37.1 sssd-ipa-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 sssd-proxy-1.16.1-150300.23.37.1 sssd-proxy-debuginfo-1.16.1-150300.23.37.1 sssd-tools-1.16.1-150300.23.37.1 sssd-tools-debuginfo-1.16.1-150300.23.37.1 sssd-winbind-idmap-1.16.1-150300.23.37.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.37.1 - SUSE Manager Proxy 4.2 (x86_64): libipa_hbac-devel-1.16.1-150300.23.37.1 libipa_hbac0-1.16.1-150300.23.37.1 libipa_hbac0-debuginfo-1.16.1-150300.23.37.1 libsss_certmap-devel-1.16.1-150300.23.37.1 libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap-devel-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap-devel-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_simpleifp-devel-1.16.1-150300.23.37.1 libsss_simpleifp0-1.16.1-150300.23.37.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.37.1 python3-sssd-config-1.16.1-150300.23.37.1 python3-sssd-config-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-ad-1.16.1-150300.23.37.1 sssd-ad-debuginfo-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-32bit-1.16.1-150300.23.37.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-dbus-1.16.1-150300.23.37.1 sssd-dbus-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-ipa-1.16.1-150300.23.37.1 sssd-ipa-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 sssd-proxy-1.16.1-150300.23.37.1 sssd-proxy-debuginfo-1.16.1-150300.23.37.1 sssd-tools-1.16.1-150300.23.37.1 sssd-tools-debuginfo-1.16.1-150300.23.37.1 sssd-winbind-idmap-1.16.1-150300.23.37.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): libipa_hbac-devel-1.16.1-150300.23.37.1 libipa_hbac0-1.16.1-150300.23.37.1 libipa_hbac0-debuginfo-1.16.1-150300.23.37.1 libsss_certmap-devel-1.16.1-150300.23.37.1 libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap-devel-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap-devel-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_simpleifp-devel-1.16.1-150300.23.37.1 libsss_simpleifp0-1.16.1-150300.23.37.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.37.1 python3-sssd-config-1.16.1-150300.23.37.1 python3-sssd-config-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-ad-1.16.1-150300.23.37.1 sssd-ad-debuginfo-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-dbus-1.16.1-150300.23.37.1 sssd-dbus-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-ipa-1.16.1-150300.23.37.1 sssd-ipa-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 sssd-proxy-1.16.1-150300.23.37.1 sssd-proxy-debuginfo-1.16.1-150300.23.37.1 sssd-tools-1.16.1-150300.23.37.1 sssd-tools-debuginfo-1.16.1-150300.23.37.1 sssd-winbind-idmap-1.16.1-150300.23.37.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (x86_64): sssd-common-32bit-1.16.1-150300.23.37.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): libipa_hbac-devel-1.16.1-150300.23.37.1 libipa_hbac0-1.16.1-150300.23.37.1 libipa_hbac0-debuginfo-1.16.1-150300.23.37.1 libsss_certmap-devel-1.16.1-150300.23.37.1 libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap-devel-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap-devel-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_simpleifp-devel-1.16.1-150300.23.37.1 libsss_simpleifp0-1.16.1-150300.23.37.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.37.1 python3-sssd-config-1.16.1-150300.23.37.1 python3-sssd-config-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-ad-1.16.1-150300.23.37.1 sssd-ad-debuginfo-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-dbus-1.16.1-150300.23.37.1 sssd-dbus-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-ipa-1.16.1-150300.23.37.1 sssd-ipa-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 sssd-proxy-1.16.1-150300.23.37.1 sssd-proxy-debuginfo-1.16.1-150300.23.37.1 sssd-tools-1.16.1-150300.23.37.1 sssd-tools-debuginfo-1.16.1-150300.23.37.1 sssd-winbind-idmap-1.16.1-150300.23.37.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (x86_64): sssd-common-32bit-1.16.1-150300.23.37.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): libipa_hbac-devel-1.16.1-150300.23.37.1 libipa_hbac0-1.16.1-150300.23.37.1 libipa_hbac0-debuginfo-1.16.1-150300.23.37.1 libsss_certmap-devel-1.16.1-150300.23.37.1 libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap-devel-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap-devel-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_simpleifp-devel-1.16.1-150300.23.37.1 libsss_simpleifp0-1.16.1-150300.23.37.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.37.1 python3-sssd-config-1.16.1-150300.23.37.1 python3-sssd-config-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-ad-1.16.1-150300.23.37.1 sssd-ad-debuginfo-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-32bit-1.16.1-150300.23.37.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-dbus-1.16.1-150300.23.37.1 sssd-dbus-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-ipa-1.16.1-150300.23.37.1 sssd-ipa-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 sssd-proxy-1.16.1-150300.23.37.1 sssd-proxy-debuginfo-1.16.1-150300.23.37.1 sssd-tools-1.16.1-150300.23.37.1 sssd-tools-debuginfo-1.16.1-150300.23.37.1 sssd-winbind-idmap-1.16.1-150300.23.37.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): libipa_hbac-devel-1.16.1-150300.23.37.1 libipa_hbac0-1.16.1-150300.23.37.1 libipa_hbac0-debuginfo-1.16.1-150300.23.37.1 libsss_certmap-devel-1.16.1-150300.23.37.1 libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap-devel-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap-devel-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_simpleifp-devel-1.16.1-150300.23.37.1 libsss_simpleifp0-1.16.1-150300.23.37.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.37.1 python3-sssd-config-1.16.1-150300.23.37.1 python3-sssd-config-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-ad-1.16.1-150300.23.37.1 sssd-ad-debuginfo-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-dbus-1.16.1-150300.23.37.1 sssd-dbus-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-ipa-1.16.1-150300.23.37.1 sssd-ipa-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 sssd-proxy-1.16.1-150300.23.37.1 sssd-proxy-debuginfo-1.16.1-150300.23.37.1 sssd-tools-1.16.1-150300.23.37.1 sssd-tools-debuginfo-1.16.1-150300.23.37.1 sssd-winbind-idmap-1.16.1-150300.23.37.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (x86_64): sssd-common-32bit-1.16.1-150300.23.37.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): libipa_hbac-devel-1.16.1-150300.23.37.1 libipa_hbac0-1.16.1-150300.23.37.1 libipa_hbac0-debuginfo-1.16.1-150300.23.37.1 libsss_certmap-devel-1.16.1-150300.23.37.1 libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap-devel-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap-devel-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_simpleifp-devel-1.16.1-150300.23.37.1 libsss_simpleifp0-1.16.1-150300.23.37.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.37.1 python3-sssd-config-1.16.1-150300.23.37.1 python3-sssd-config-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-ad-1.16.1-150300.23.37.1 sssd-ad-debuginfo-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-dbus-1.16.1-150300.23.37.1 sssd-dbus-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-ipa-1.16.1-150300.23.37.1 sssd-ipa-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 sssd-proxy-1.16.1-150300.23.37.1 sssd-proxy-debuginfo-1.16.1-150300.23.37.1 sssd-tools-1.16.1-150300.23.37.1 sssd-tools-debuginfo-1.16.1-150300.23.37.1 sssd-winbind-idmap-1.16.1-150300.23.37.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.37.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (x86_64): sssd-common-32bit-1.16.1-150300.23.37.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.37.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): libipa_hbac-devel-1.16.1-150300.23.37.1 libipa_hbac0-1.16.1-150300.23.37.1 libipa_hbac0-debuginfo-1.16.1-150300.23.37.1 libsss_certmap-devel-1.16.1-150300.23.37.1 libsss_certmap0-1.16.1-150300.23.37.1 libsss_certmap0-debuginfo-1.16.1-150300.23.37.1 libsss_idmap-devel-1.16.1-150300.23.37.1 libsss_idmap0-1.16.1-150300.23.37.1 libsss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_nss_idmap-devel-1.16.1-150300.23.37.1 libsss_nss_idmap0-1.16.1-150300.23.37.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.37.1 libsss_simpleifp-devel-1.16.1-150300.23.37.1 libsss_simpleifp0-1.16.1-150300.23.37.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.37.1 python3-sssd-config-1.16.1-150300.23.37.1 python3-sssd-config-debuginfo-1.16.1-150300.23.37.1 sssd-1.16.1-150300.23.37.1 sssd-ad-1.16.1-150300.23.37.1 sssd-ad-debuginfo-1.16.1-150300.23.37.1 sssd-common-1.16.1-150300.23.37.1 sssd-common-debuginfo-1.16.1-150300.23.37.1 sssd-dbus-1.16.1-150300.23.37.1 sssd-dbus-debuginfo-1.16.1-150300.23.37.1 sssd-debugsource-1.16.1-150300.23.37.1 sssd-ipa-1.16.1-150300.23.37.1 sssd-ipa-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-1.16.1-150300.23.37.1 sssd-krb5-common-1.16.1-150300.23.37.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.37.1 sssd-krb5-debuginfo-1.16.1-150300.23.37.1 sssd-ldap-1.16.1-150300.23.37.1 sssd-ldap-debuginfo-1.16.1-150300.23.37.1 sssd-proxy-1.16.1-150300.23.37.1 sssd-proxy-debuginfo-1.16.1-150300.23.37.1 sssd-tools-1.16.1-150300.23.37.1 sssd-tools-debuginfo-1.16.1-150300.23.37.1 sssd-winbind-idmap-1.16.1-150300.23.37.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.37.1 - SUSE Enterprise Storage 7.1 (x86_64): sssd-common-32bit-1.16.1-150300.23.37.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.37.1 References: https://www.suse.com/security/cve/CVE-2022-4254.html https://bugzilla.suse.com/1207474

1 0

SUSE-SU-2023:0202-1: moderate: Security update for python39-setuptools
by opensuse-security＠opensuse.org 27 Jan '23

27 Jan '23

SUSE Security Update: Security update for python39-setuptools ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0202-1 Rating: moderate References: #1206667 Cross-References: CVE-2022-40897 CVSS scores: CVE-2022-40897 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-40897 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: SUSE Linux Enterprise Realtime Extension 15-SP3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python39-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-202=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-202=1 Package List: - openSUSE Leap 15.4 (noarch): python39-setuptools-44.1.1-150300.7.6.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): python39-setuptools-44.1.1-150300.7.6.1 References: https://www.suse.com/security/cve/CVE-2022-40897.html https://bugzilla.suse.com/1206667

1 0

SUSE-SU-2023:0201-1: moderate: Security update for systemd
by opensuse-security＠opensuse.org 27 Jan '23

27 Jan '23

SUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0201-1 Rating: moderate References: #1204944 #1205000 #1207264 PED-2663 Cross-References: CVE-2022-4415 CVSS scores: CVE-2022-4415 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-4415 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that solves one vulnerability, contains one feature and has two fixes is now available. Description: This update for systemd fixes the following issues: - CVE-2022-4415: Fixed an issue where users could access coredumps with changed uid, gid or capabilities (bsc#1205000). Non-security fixes: - Enabled the pstore service (jsc#PED-2663). - Fixed an issue accessing TPM when secure boot is enabled (bsc#1204944). - Fixed an issue where a pamd file could get accidentally overwritten after an update (bsc#1207264). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2023-201=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-201=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-201=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2023-201=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libsystemd0-249.14-150400.8.19.1 libsystemd0-debuginfo-249.14-150400.8.19.1 libudev1-249.14-150400.8.19.1 libudev1-debuginfo-249.14-150400.8.19.1 systemd-249.14-150400.8.19.1 systemd-container-249.14-150400.8.19.1 systemd-container-debuginfo-249.14-150400.8.19.1 systemd-debuginfo-249.14-150400.8.19.1 systemd-debugsource-249.14-150400.8.19.1 systemd-journal-remote-249.14-150400.8.19.1 systemd-journal-remote-debuginfo-249.14-150400.8.19.1 systemd-sysvinit-249.14-150400.8.19.1 udev-249.14-150400.8.19.1 udev-debuginfo-249.14-150400.8.19.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.14-150400.8.19.1 libsystemd0-debuginfo-249.14-150400.8.19.1 libudev1-249.14-150400.8.19.1 libudev1-debuginfo-249.14-150400.8.19.1 nss-myhostname-249.14-150400.8.19.1 nss-myhostname-debuginfo-249.14-150400.8.19.1 nss-systemd-249.14-150400.8.19.1 nss-systemd-debuginfo-249.14-150400.8.19.1 systemd-249.14-150400.8.19.1 systemd-container-249.14-150400.8.19.1 systemd-container-debuginfo-249.14-150400.8.19.1 systemd-coredump-249.14-150400.8.19.1 systemd-coredump-debuginfo-249.14-150400.8.19.1 systemd-debuginfo-249.14-150400.8.19.1 systemd-debugsource-249.14-150400.8.19.1 systemd-devel-249.14-150400.8.19.1 systemd-doc-249.14-150400.8.19.1 systemd-experimental-249.14-150400.8.19.1 systemd-experimental-debuginfo-249.14-150400.8.19.1 systemd-journal-remote-249.14-150400.8.19.1 systemd-journal-remote-debuginfo-249.14-150400.8.19.1 systemd-network-249.14-150400.8.19.1 systemd-network-debuginfo-249.14-150400.8.19.1 systemd-portable-249.14-150400.8.19.1 systemd-portable-debuginfo-249.14-150400.8.19.1 systemd-sysvinit-249.14-150400.8.19.1 systemd-testsuite-249.14-150400.8.19.1 systemd-testsuite-debuginfo-249.14-150400.8.19.1 udev-249.14-150400.8.19.1 udev-debuginfo-249.14-150400.8.19.1 - openSUSE Leap 15.4 (noarch): systemd-lang-249.14-150400.8.19.1 - openSUSE Leap 15.4 (x86_64): libsystemd0-32bit-249.14-150400.8.19.1 libsystemd0-32bit-debuginfo-249.14-150400.8.19.1 libudev1-32bit-249.14-150400.8.19.1 libudev1-32bit-debuginfo-249.14-150400.8.19.1 nss-myhostname-32bit-249.14-150400.8.19.1 nss-myhostname-32bit-debuginfo-249.14-150400.8.19.1 systemd-32bit-249.14-150400.8.19.1 systemd-32bit-debuginfo-249.14-150400.8.19.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.14-150400.8.19.1 libsystemd0-debuginfo-249.14-150400.8.19.1 libudev1-249.14-150400.8.19.1 libudev1-debuginfo-249.14-150400.8.19.1 systemd-249.14-150400.8.19.1 systemd-container-249.14-150400.8.19.1 systemd-container-debuginfo-249.14-150400.8.19.1 systemd-coredump-249.14-150400.8.19.1 systemd-coredump-debuginfo-249.14-150400.8.19.1 systemd-debuginfo-249.14-150400.8.19.1 systemd-debugsource-249.14-150400.8.19.1 systemd-devel-249.14-150400.8.19.1 systemd-doc-249.14-150400.8.19.1 systemd-sysvinit-249.14-150400.8.19.1 udev-249.14-150400.8.19.1 udev-debuginfo-249.14-150400.8.19.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libsystemd0-32bit-249.14-150400.8.19.1 libsystemd0-32bit-debuginfo-249.14-150400.8.19.1 libudev1-32bit-249.14-150400.8.19.1 libudev1-32bit-debuginfo-249.14-150400.8.19.1 systemd-32bit-249.14-150400.8.19.1 systemd-32bit-debuginfo-249.14-150400.8.19.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): systemd-lang-249.14-150400.8.19.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libsystemd0-249.14-150400.8.19.1 libsystemd0-debuginfo-249.14-150400.8.19.1 libudev1-249.14-150400.8.19.1 libudev1-debuginfo-249.14-150400.8.19.1 systemd-249.14-150400.8.19.1 systemd-container-249.14-150400.8.19.1 systemd-container-debuginfo-249.14-150400.8.19.1 systemd-debuginfo-249.14-150400.8.19.1 systemd-debugsource-249.14-150400.8.19.1 systemd-journal-remote-249.14-150400.8.19.1 systemd-journal-remote-debuginfo-249.14-150400.8.19.1 systemd-sysvinit-249.14-150400.8.19.1 udev-249.14-150400.8.19.1 udev-debuginfo-249.14-150400.8.19.1 References: https://www.suse.com/security/cve/CVE-2022-4415.html https://bugzilla.suse.com/1204944 https://bugzilla.suse.com/1205000 https://bugzilla.suse.com/1207264

1 0

SUSE-SU-2023:0198-1: important: Security update for krb5
by opensuse-security＠opensuse.org 27 Jan '23

27 Jan '23

SUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0198-1 Rating: important References: #1205126 Cross-References: CVE-2022-42898 CVSS scores: CVE-2022-42898 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-42898 (SUSE): 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for krb5 fixes the following issues: - CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2023-198=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-198=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-198=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-198=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-198=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-198=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-198=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-198=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-198=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-198=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-198=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-198=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): krb5-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): krb5-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-client-debuginfo-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-server-debuginfo-1.19.2-150300.10.1 - SUSE Manager Server 4.2 (x86_64): krb5-32bit-1.19.2-150300.10.1 krb5-32bit-debuginfo-1.19.2-150300.10.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): krb5-1.19.2-150300.10.1 krb5-32bit-1.19.2-150300.10.1 krb5-32bit-debuginfo-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-client-debuginfo-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-server-debuginfo-1.19.2-150300.10.1 - SUSE Manager Proxy 4.2 (x86_64): krb5-1.19.2-150300.10.1 krb5-32bit-1.19.2-150300.10.1 krb5-32bit-debuginfo-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-client-debuginfo-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-server-debuginfo-1.19.2-150300.10.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): krb5-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-client-debuginfo-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-server-debuginfo-1.19.2-150300.10.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (x86_64): krb5-32bit-1.19.2-150300.10.1 krb5-32bit-debuginfo-1.19.2-150300.10.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): krb5-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-client-debuginfo-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-server-debuginfo-1.19.2-150300.10.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (x86_64): krb5-32bit-1.19.2-150300.10.1 krb5-32bit-debuginfo-1.19.2-150300.10.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): krb5-1.19.2-150300.10.1 krb5-32bit-1.19.2-150300.10.1 krb5-32bit-debuginfo-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-client-debuginfo-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-server-debuginfo-1.19.2-150300.10.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): krb5-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): krb5-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): krb5-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-client-debuginfo-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-server-debuginfo-1.19.2-150300.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (x86_64): krb5-32bit-1.19.2-150300.10.1 krb5-32bit-debuginfo-1.19.2-150300.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): krb5-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-client-debuginfo-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-server-debuginfo-1.19.2-150300.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (x86_64): krb5-32bit-1.19.2-150300.10.1 krb5-32bit-debuginfo-1.19.2-150300.10.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): krb5-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-client-debuginfo-1.19.2-150300.10.1 krb5-debuginfo-1.19.2-150300.10.1 krb5-debugsource-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-kdb-ldap-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-otp-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-plugin-preauth-spake-debuginfo-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-server-debuginfo-1.19.2-150300.10.1 - SUSE Enterprise Storage 7.1 (x86_64): krb5-32bit-1.19.2-150300.10.1 krb5-32bit-debuginfo-1.19.2-150300.10.1 References: https://www.suse.com/security/cve/CVE-2022-42898.html https://bugzilla.suse.com/1205126

1 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

openSUSE Security Announce January 2023