February 2023 - openSUSE Security Announce

openSUSE-SU-2023:0062-1: moderate: Security update for python-Django
by opensuse-security＠opensuse.org 28 Feb '23

28 Feb '23

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0062-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: python-Django was updated to fix a security issues: - CVE-2023-24580: prevent DOS in file uploads (bsc#1208082) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-62=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): python3-Django-2.2.28-bp154.2.9.1 References:

1 0

openSUSE-SU-2023:0061-1: important: Security update for chromium
by opensuse-security＠opensuse.org 27 Feb '23

27 Feb '23

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0061-1 Rating: important References: #1208589 Cross-References: CVE-2023-0927 CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932 CVE-2023-0933 CVE-2023-0941 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 110.0.5481.177 (boo#1208589) * CVE-2023-0927: Use after free in Web Payments API * CVE-2023-0928: Use after free in SwiftShader * CVE-2023-0929: Use after free in Vulkan * CVE-2023-0930: Heap buffer overflow in Video * CVE-2023-0931: Use after free in Video * CVE-2023-0932: Use after free in WebRTC * CVE-2023-0933: Integer overflow in PDF * CVE-2023-0941: Use after free in Prompts * Various fixes from internal audits, fuzzing and other initiatives Chromium 110.0.5481.100 * fix regression on SAP Business Objects web UI * fix date formatting behavior change from ICU 72 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-61=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): chromedriver-110.0.5481.177-bp154.2.70.1 chromium-110.0.5481.177-bp154.2.70.1 References: https://www.suse.com/security/cve/CVE-2023-0927.html https://www.suse.com/security/cve/CVE-2023-0928.html https://www.suse.com/security/cve/CVE-2023-0929.html https://www.suse.com/security/cve/CVE-2023-0930.html https://www.suse.com/security/cve/CVE-2023-0931.html https://www.suse.com/security/cve/CVE-2023-0932.html https://www.suse.com/security/cve/CVE-2023-0933.html https://www.suse.com/security/cve/CVE-2023-0941.html https://bugzilla.suse.com/1208589

1 0

openSUSE-SU-2023:0058-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 22 Feb '23

22 Feb '23

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0058-1 Rating: moderate References: #1208186 Cross-References: CVE-2023-25727 Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for phpMyAdmin fixes the following issues: Update to 4.9.11: * Fix an XSS attack through the drag-and-drop upload feature (PMASA-2023-01, CWE-661, boo#1208186, CVE-2023-25727) * Fix broken pagination links in the navigation sidebar * Fix syntax error for PHP 5 * Fix hide_connection_errors being undefined when a controluser is set Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2023-58=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): phpMyAdmin-4.9.11-58.1 References: https://www.suse.com/security/cve/CVE-2023-25727.html https://bugzilla.suse.com/1208186

1 0

openSUSE-SU-2023:0057-1: moderate: Security update for python-Django
by opensuse-security＠opensuse.org 21 Feb '23

21 Feb '23

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0057-1 Rating: moderate References: #1203793 #1207565 Cross-References: CVE-2022-41323 CVE-2023-23969 CVSS scores: CVE-2022-41323 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-23969 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-23969 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-Django fixes the following issues: - CVE-2023-23969: Fixed potential denial-of-service via Accept-Language headers (boo#1207565) - CVE-2022-41323: Fixed potential denial-of-service vulnerability in internationalized URLs (boo#1203793) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-57=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): python3-Django-2.2.28-bp154.2.6.1 References: https://www.suse.com/security/cve/CVE-2022-41323.html https://www.suse.com/security/cve/CVE-2023-23969.html https://bugzilla.suse.com/1203793 https://bugzilla.suse.com/1207565

1 0

SUSE-SU-2023:0465-1: important: Security update for prometheus-ha_cluster_exporter
by opensuse-security＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Security Update: Security update for prometheus-ha_cluster_exporter ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0465-1 Rating: important References: #1208046 #1208047 Cross-References: CVE-2022-46146 CVSS scores: CVE-2022-46146 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-46146 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Module for SAP Applications 15-SP2 SUSE Linux Enterprise Module for SAP Applications 15-SP3 SUSE Linux Enterprise Module for SAP Applications 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for prometheus-ha_cluster_exporter fixes the following issues: Updated to version 1.3.1: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in prometheus/exporter-toolkit (bsc#1208046, bsc#1208047). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-465=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2023-465=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2023-465=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2023-465=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-150200.3.21.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP4 (aarch64 ppc64le s390x x86_64): prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-150200.3.21.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP3 (aarch64 ppc64le s390x x86_64): prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-150200.3.21.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP2 (aarch64 ppc64le s390x x86_64): prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-150200.3.21.1 References: https://www.suse.com/security/cve/CVE-2022-46146.html https://bugzilla.suse.com/1208046 https://bugzilla.suse.com/1208047

1 0

openSUSE-SU-2023:0054-1: moderate: Security update for jhead
by opensuse-security＠opensuse.org 20 Feb '23

20 Feb '23

openSUSE Security Update: Security update for jhead ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0054-1 Rating: moderate References: #1207150 Cross-References: CVE-2022-41751 CVSS scores: CVE-2022-41751 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jhead fixes the following issues: - Fixed autorotation problem caused by CVE-2022-41751 patch. [boo#1207150] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-54=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): jhead-3.06.0.1-bp154.2.9.1 References: https://www.suse.com/security/cve/CVE-2022-41751.html https://bugzilla.suse.com/1207150

1 0

SUSE-SU-2023:0463-1: moderate: Security update for tar
by opensuse-security＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Security Update: Security update for tar ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0463-1 Rating: moderate References: #1202436 #1207753 Cross-References: CVE-2022-48303 CVSS scores: CVE-2022-48303 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-48303 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for tar fixes the following issues: - CVE-2022-48303: Fixed a one-byte out-of-bounds read that resulted in use of uninitialized memory for a conditional jump (bsc#1207753). Bug fixes: - Fix hang when unpacking test tarball (bsc#1202436). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2023-463=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2023-463=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-463=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-463=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-463=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2023-463=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-463=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-463=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 - openSUSE Leap Micro 5.2 (aarch64 x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 tar-rmt-1.34-150000.3.31.1 tar-rmt-debuginfo-1.34-150000.3.31.1 tar-tests-1.34-150000.3.31.1 tar-tests-debuginfo-1.34-150000.3.31.1 - openSUSE Leap 15.4 (noarch): tar-backup-scripts-1.34-150000.3.31.1 tar-doc-1.34-150000.3.31.1 tar-lang-1.34-150000.3.31.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): tar-lang-1.34-150000.3.31.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 tar-rmt-1.34-150000.3.31.1 tar-rmt-debuginfo-1.34-150000.3.31.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 tar-rmt-1.34-150000.3.31.1 tar-rmt-debuginfo-1.34-150000.3.31.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): tar-lang-1.34-150000.3.31.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 References: https://www.suse.com/security/cve/CVE-2022-48303.html https://bugzilla.suse.com/1202436 https://bugzilla.suse.com/1207753

1 0

SUSE-SU-2023:0461-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0461-1 Rating: important References: #1208138 #1208144 Cross-References: CVE-2023-0767 CVE-2023-25728 CVE-2023-25729 CVE-2023-25730 CVE-2023-25732 CVE-2023-25734 CVE-2023-25735 CVE-2023-25737 CVE-2023-25738 CVE-2023-25739 CVE-2023-25742 CVE-2023-25743 CVE-2023-25744 CVE-2023-25746 CVSS scores: CVE-2023-0767 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Updated to version 102.8.0 ESR (bsc#1208144): - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes. - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode. - CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus. - CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS. - CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey. - CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry. - CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers. - CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext. - CVE-2023-25729: Fixed extensions opening external schemes without user knowledge. - CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream. - CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads. - CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey. - CVE-2023-25744: Fixed Memory safety bugs. - CVE-2023-25746: Fixed Memory safety bugs. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-461=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-461=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-461=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-461=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-461=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-461=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-461=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-461=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-461=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-461=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-461=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2023-461=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-branding-upstream-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le x86_64): MozillaFirefox-devel-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le x86_64): MozillaFirefox-devel-102.8.0-150200.152.78.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 References: https://www.suse.com/security/cve/CVE-2023-0767.html https://www.suse.com/security/cve/CVE-2023-25728.html https://www.suse.com/security/cve/CVE-2023-25729.html https://www.suse.com/security/cve/CVE-2023-25730.html https://www.suse.com/security/cve/CVE-2023-25732.html https://www.suse.com/security/cve/CVE-2023-25734.html https://www.suse.com/security/cve/CVE-2023-25735.html https://www.suse.com/security/cve/CVE-2023-25737.html https://www.suse.com/security/cve/CVE-2023-25738.html https://www.suse.com/security/cve/CVE-2023-25739.html https://www.suse.com/security/cve/CVE-2023-25742.html https://www.suse.com/security/cve/CVE-2023-25743.html https://www.suse.com/security/cve/CVE-2023-25744.html https://www.suse.com/security/cve/CVE-2023-25746.html https://bugzilla.suse.com/1208138 https://bugzilla.suse.com/1208144

1 0

SUSE-SU-2023:0450-1: important: Security update for postgresql12
by opensuse-security＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Security Update: Security update for postgresql12 ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0450-1 Rating: important References: #1208102 Cross-References: CVE-2022-41862 CVSS scores: CVE-2022-41862 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for postgresql12 fixes the following issues: Update to 12.14: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-450=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-450=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-450=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-450=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-450=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-450=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-450=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-450=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-450=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2023-450=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-llvmjit-12.14-150200.8.41.1 postgresql12-llvmjit-debuginfo-12.14-150200.8.41.1 postgresql12-llvmjit-devel-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 postgresql12-test-12.14-150200.8.41.1 - openSUSE Leap 15.4 (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Enterprise Storage 7.1 (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Enterprise Storage 7 (noarch): postgresql12-docs-12.14-150200.8.41.1 References: https://www.suse.com/security/cve/CVE-2022-41862.html https://bugzilla.suse.com/1208102

1 0

openSUSE-SU-2023:0053-1: moderate: Security update for timescaledb
by opensuse-security＠opensuse.org 19 Feb '23

19 Feb '23

openSUSE Security Update: Security update for timescaledb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0053-1 Rating: moderate References: #1197063 Cross-References: CVE-2022-24128 CVSS scores: CVE-2022-24128 (NVD) : 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for timescaledb fixes the following issues: timescaledb was updated to version 2.9.3 - https://github.com/timescale/timescaledb/releases/tag/2.9.3 - enable postgresql15 build - https://github.com/timescale/timescaledb/releases/tag/2.9.2 - https://github.com/timescale/timescaledb/releases/tag/2.9.1 - https://github.com/timescale/timescaledb/releases/tag/2.9.0 - https://github.com/timescale/timescaledb/releases/tag/2.8.1 - https://github.com/timescale/timescaledb/releases/tag/2.8.0 - https://github.com/timescale/timescaledb/releases/tag/2.7.1 - https://github.com/timescale/timescaledb/releases/tag/2.7.2 - https://github.com/timescale/timescaledb/releases/tag/2.7.0 - https://github.com/timescale/timescaledb/releases/tag/2.6.1 - CVE-2022-24128: Fixed privilege escalation during extension installation (boo#1197063) - https://github.com/timescale/timescaledb/releases/tag/2.6.0 - https://github.com/timescale/timescaledb/releases/tag/2.5.2 - https://github.com/timescale/timescaledb/releases/tag/2.5.1 - switch to %{pg_name}-server-devel - https://github.com/timescale/timescaledb/releases/tag/1.7.5 - https://github.com/timescale/timescaledb/releases/tag/2.0.0 - https://github.com/timescale/timescaledb/releases/tag/2.0.1 - https://github.com/timescale/timescaledb/releases/tag/2.0.2 - https://github.com/timescale/timescaledb/releases/tag/2.1.0 - https://github.com/timescale/timescaledb/releases/tag/2.1.1 - https://github.com/timescale/timescaledb/releases/tag/2.2.0 - https://github.com/timescale/timescaledb/releases/tag/2.2.1 - https://github.com/timescale/timescaledb/releases/tag/2.3.0 - https://github.com/timescale/timescaledb/releases/tag/2.3.1 - https://github.com/timescale/timescaledb/releases/tag/2.4.0 - https://github.com/timescale/timescaledb/releases/tag/2.4.1 - https://github.com/timescale/timescaledb/releases/tag/2.4.2 - https://github.com/timescale/timescaledb/releases/tag/2.5.0 - enable postgresql14 - https://github.com/timescale/timescaledb/releases/tag/1.7.2 - https://github.com/timescale/timescaledb/releases/tag/1.7.3 - https://github.com/timescale/timescaledb/releases/tag/1.7.4 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2023-53=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): postgresql12-timescaledb-2.9.3-bp153.2.3.1 postgresql13-timescaledb-2.9.3-bp153.2.3.1 postgresql14-timescaledb-2.9.3-bp153.2.3.1 postgresql15-timescaledb-2.9.3-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-24128.html https://bugzilla.suse.com/1197063

1 0