June 2024 - openSUSE Security Announce

SUSE-SU-2024:2090-1: important: Security update for podman
by OPENSUSE-SECURITY-UPDATES 19 Jun '24

19 Jun '24

# Security update for podman Announcement ID: SUSE-SU-2024:2090-1 Rating: important References: * bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786 * CVE-2024-3727 CVSS scores: * CVE-2024-24786 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-3727 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * Update to version 4.9.5 * CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) * CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2090=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2090=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2090=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2090=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2090=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2090=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2090=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2090=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2090=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2090=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2090=1 ## Package List: * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * podman-remote-4.9.5-150400.4.27.1 * podman-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * podman-remote-4.9.5-150400.4.27.1 * podman-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150400.4.27.1 * podman-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * podman-remote-4.9.5-150400.4.27.1 * podman-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 * podman-remote-4.9.5-150400.4.27.1 * podman-remote-debuginfo-4.9.5-150400.4.27.1 * podmansh-4.9.5-150400.4.27.1 * openSUSE Leap 15.4 (noarch) * podman-docker-4.9.5-150400.4.27.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * podman-4.9.5-150400.4.27.1 * podman-debuginfo-4.9.5-150400.4.27.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24786.html * https://www.suse.com/security/cve/CVE-2024-3727.html * https://bugzilla.suse.com/show_bug.cgi?id=1224122 * https://bugzilla.suse.com/show_bug.cgi?id=1226136

1 0

SUSE-SU-2024:2089-1: important: Security update for openssl-1_1
by OPENSUSE-SECURITY-UPDATES 19 Jun '24

19 Jun '24

# Security update for openssl-1_1 Announcement ID: SUSE-SU-2024:2089-1 Rating: important References: * bsc#1225551 Cross-References: * CVE-2024-4741 CVSS scores: * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2089=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2089=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2089=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2089=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2089=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2089=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2089=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2089=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2089=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2089=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2089=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2089=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2089=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2089=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2089=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * openSUSE Leap 15.4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * openSUSE Leap 15.4 (noarch) * openssl-1_1-doc-1.1.1l-150400.7.69.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl-1_1-devel-64bit-1.1.1l-150400.7.69.1 * libopenssl1_1-64bit-1.1.1l-150400.7.69.1 * libopenssl1_1-64bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-64bit-1.1.1l-150400.7.69.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Manager Proxy 4.3 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libopenssl1_1-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-1.1.1l-150400.7.69.1 * openssl-1_1-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-1.1.1l-150400.7.69.1 * openssl-1_1-debugsource-1.1.1l-150400.7.69.1 * openssl-1_1-debuginfo-1.1.1l-150400.7.69.1 * SUSE Manager Server 4.3 (x86_64) * libopenssl1_1-32bit-debuginfo-1.1.1l-150400.7.69.1 * libopenssl1_1-hmac-32bit-1.1.1l-150400.7.69.1 * libopenssl-1_1-devel-32bit-1.1.1l-150400.7.69.1 * libopenssl1_1-32bit-1.1.1l-150400.7.69.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4741.html * https://bugzilla.suse.com/show_bug.cgi?id=1225551

1 0

openSUSE-SU-2024:0052-1: moderate: Security update for bitcoin
by opensuse-security＠opensuse.org 19 Jun '24

19 Jun '24

openSUSE Security Update: Security update for bitcoin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0052-1 Rating: moderate References: Cross-References: CVE-2018-17144 CVSS scores: CVE-2018-17144 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-17144 (SUSE): 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bitcoin fixes the following issues: Update to version 26.0, including the following changes: - Enable LTO and test package for Leap - Enable sqlite3 support for wallet - Enable asm optimizations unconditionally Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-52=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): bitcoin-qt5-26.0-bp155.2.3.1 bitcoin-test-26.0-bp155.2.3.1 bitcoin-utils-26.0-bp155.2.3.1 bitcoind-26.0-bp155.2.3.1 libbitcoinconsensus-devel-26.0-bp155.2.3.1 libbitcoinconsensus0-26.0-bp155.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-17144.html

2 1

SUSE-SU-2024:2077-1: important: Security update for gdk-pixbuf
by OPENSUSE-SECURITY-UPDATES 19 Jun '24

19 Jun '24

# Security update for gdk-pixbuf Announcement ID: SUSE-SU-2024:2077-1 Rating: important References: * bsc#1195391 * bsc#1219276 * bsc#1223903 Cross-References: * CVE-2022-48622 CVSS scores: * CVE-2022-48622 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2022-48622 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for gdk-pixbuf fixes the following issues: gdk-pixbuf was updated to version 2.42.12: * Security issues fixed: * CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf (bsc#1219276) * Changes in version 2.42.12: * ani: Reject files with multiple INA or IART chunks, * ani: validate chunk size, * Updated translations. * Enable other image loaders such as xpm and xbm (bsc#1223903) * Changes in version 2.42.11: * Disable fringe loaders by default. * Introspection fixes. * Updated translations. * Changes in version 2.42.10: * Search for rst2man.py. * Update the memory size limit for JPEG images. * Updated translations. * Fixed loading of larger images * Avoid Bash specific syntax in baselibs postscript (bsc#1195391) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2077=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2077=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2077=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-2077=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2077=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-2077=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-2077=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-2077=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-2077=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2077=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-2077=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2077=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-2077=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2077=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-2077=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2077=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2077=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-2077=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Manager Proxy 4.3 (x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Manager Proxy 4.3 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Manager Server 4.3 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Manager Server 4.3 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap 15.4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-32bit-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * openSUSE Leap 15.4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * openSUSE Leap 15.4 (aarch64_ilp32) * gdk-pixbuf-query-loaders-64bit-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-64bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-64bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-64bit-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-64bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-64bit-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * openSUSE Leap 15.5 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-32bit-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * openSUSE Leap 15.5 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * Basesystem Module 15-SP5 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * Basesystem Module 15-SP5 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * gdk-pixbuf-devel-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-debugsource-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150400.5.9.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150400.5.9.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150400.5.9.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150400.5.9.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * gdk-pixbuf-lang-2.42.12-150400.5.9.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48622.html * https://bugzilla.suse.com/show_bug.cgi?id=1195391 * https://bugzilla.suse.com/show_bug.cgi?id=1219276 * https://bugzilla.suse.com/show_bug.cgi?id=1223903

1 0

SUSE-SU-2024:2083-1: important: Security update for libarchive
by OPENSUSE-SECURITY-UPDATES 19 Jun '24

19 Jun '24

# Security update for libarchive Announcement ID: SUSE-SU-2024:2083-1 Rating: important References: * bsc#1225971 * bsc#1225972 Cross-References: * CVE-2024-20696 * CVE-2024-20697 CVSS scores: * CVE-2024-20696 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2024-20697 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for libarchive fixes the following issues: * CVE-2024-20697: Fixed Out of bounds Remote Code Execution Vulnerability (bsc#1225972). * CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2083=1 openSUSE-SLE-15.6-2024-2083=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2083=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-2083=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * bsdtar-debuginfo-3.7.2-150600.3.3.1 * libarchive13-debuginfo-3.7.2-150600.3.3.1 * libarchive-devel-3.7.2-150600.3.3.1 * libarchive-debugsource-3.7.2-150600.3.3.1 * libarchive13-3.7.2-150600.3.3.1 * bsdtar-3.7.2-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * libarchive13-32bit-3.7.2-150600.3.3.1 * libarchive13-32bit-debuginfo-3.7.2-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libarchive13-64bit-3.7.2-150600.3.3.1 * libarchive13-64bit-debuginfo-3.7.2-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libarchive-devel-3.7.2-150600.3.3.1 * libarchive13-debuginfo-3.7.2-150600.3.3.1 * libarchive-debugsource-3.7.2-150600.3.3.1 * libarchive13-3.7.2-150600.3.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * bsdtar-debuginfo-3.7.2-150600.3.3.1 * libarchive-debugsource-3.7.2-150600.3.3.1 * bsdtar-3.7.2-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-20696.html * https://www.suse.com/security/cve/CVE-2024-20697.html * https://bugzilla.suse.com/show_bug.cgi?id=1225971 * https://bugzilla.suse.com/show_bug.cgi?id=1225972

1 0

SUSE-SU-2024:2076-1: important: Security update for gdk-pixbuf
by OPENSUSE-SECURITY-UPDATES 19 Jun '24

19 Jun '24

# Security update for gdk-pixbuf Announcement ID: SUSE-SU-2024:2076-1 Rating: important References: * bsc#1195391 * bsc#1219276 * bsc#1223903 Cross-References: * CVE-2022-48622 CVSS scores: * CVE-2022-48622 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2022-48622 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for gdk-pixbuf fixes the following issues: gdk-pixbuf was updated to version 2.42.12: * Security issues fixed: * CVE-2022-48622: Fixed vulnerability where a crafted .ani file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack to a denial of service or code execution attack (bsc#1219276) * Changes in version 2.42.12: * ani: Reject files with multiple INA or IART chunks, * ani: validate chunk size, * Updated translations. * Enable other image loaders such as xpm and xbm (bsc#1223903) * Changes in version 2.42.11: * Disable fringe loaders by default. * Introspection fixes. * Updated translations. * Changes in version 2.42.10: * Search for rst2man.py. * Update the memory size limit for JPEG images. * Updated translations. * Fixed loading of larger images * Avoid Bash specific syntax in baselibs postscript (bsc#1195391) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2076=1 openSUSE-SLE-15.6-2024-2076=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2076=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * gdk-pixbuf-devel-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150600.3.3.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150600.3.3.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-thumbnailer-2.42.12-150600.3.3.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-2.42.12-150600.3.3.1 * gdk-pixbuf-debugsource-2.42.12-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * gdk-pixbuf-devel-32bit-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150600.3.3.1 * gdk-pixbuf-devel-32bit-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * gdk-pixbuf-lang-2.42.12-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * gdk-pixbuf-devel-64bit-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-64bit-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-64bit-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-64bit-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-64bit-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-devel-64bit-debuginfo-2.42.12-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-devel-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-debuginfo-2.42.12-150600.3.3.1 * typelib-1_0-GdkPixbuf-2_0-2.42.12-150600.3.3.1 * gdk-pixbuf-devel-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-thumbnailer-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-thumbnailer-2.42.12-150600.3.3.1 * typelib-1_0-GdkPixdata-2_0-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-2.42.12-150600.3.3.1 * gdk-pixbuf-debugsource-2.42.12-150600.3.3.1 * Basesystem Module 15-SP6 (noarch) * gdk-pixbuf-lang-2.42.12-150600.3.3.1 * Basesystem Module 15-SP6 (x86_64) * libgdk_pixbuf-2_0-0-32bit-debuginfo-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-32bit-debuginfo-2.42.12-150600.3.3.1 * libgdk_pixbuf-2_0-0-32bit-2.42.12-150600.3.3.1 * gdk-pixbuf-query-loaders-32bit-2.42.12-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48622.html * https://bugzilla.suse.com/show_bug.cgi?id=1195391 * https://bugzilla.suse.com/show_bug.cgi?id=1219276 * https://bugzilla.suse.com/show_bug.cgi?id=1223903

1 0

openSUSE-SU-2024:0167-1: important: Security update for gdcm
by opensuse-security＠opensuse.org 18 Jun '24

18 Jun '24

openSUSE Security Update: Security update for gdcm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0167-1 Rating: important References: #1223398 Cross-References: CVE-2024-22373 CVSS scores: CVE-2024-22373 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gdcm fixes the following issues: - CVE-2024-22373: Fixed out-of-bounds write vulnerability in JPEG2000Codec::DecodeByStreamsCommon (boo#1223398). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-167=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 ppc64le s390x x86_64): gdcm-3.0.24-bp155.2.4.1 gdcm-applications-3.0.24-bp155.2.4.1 gdcm-devel-3.0.24-bp155.2.4.1 gdcm-examples-3.0.24-bp155.2.4.1 libgdcm3_0-3.0.24-bp155.2.4.1 libsocketxx1_2-3.0.24-bp155.2.4.1 python3-gdcm-3.0.24-bp155.2.4.1 References: https://www.suse.com/security/cve/CVE-2024-22373.html https://bugzilla.suse.com/1223398

1 0

SUSE-SU-2024:1539-2: moderate: Security update for bouncycastle
by OPENSUSE-SECURITY-UPDATES 18 Jun '24

18 Jun '24

# Security update for bouncycastle Announcement ID: SUSE-SU-2024:1539-2 Rating: moderate References: * bsc#1223252 Cross-References: * CVE-2024-30171 CVSS scores: * CVE-2024-30171 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for bouncycastle fixes the following issues: Update to version 1.78.1, including fixes for: * CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-1539=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1539=1 ## Package List: * Development Tools Module 15-SP6 (noarch) * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * openSUSE Leap 15.6 (noarch) * bouncycastle-javadoc-1.78.1-150200.3.29.1 * bouncycastle-jmail-1.78.1-150200.3.29.1 * bouncycastle-tls-1.78.1-150200.3.29.1 * bouncycastle-pg-1.78.1-150200.3.29.1 * bouncycastle-1.78.1-150200.3.29.1 * bouncycastle-mail-1.78.1-150200.3.29.1 * bouncycastle-util-1.78.1-150200.3.29.1 * bouncycastle-pkix-1.78.1-150200.3.29.1 ## References: * https://www.suse.com/security/cve/CVE-2024-30171.html * https://bugzilla.suse.com/show_bug.cgi?id=1223252

1 0

SUSE-SU-2024:1590-2: moderate: Security update for ghostscript
by OPENSUSE-SECURITY-UPDATES 18 Jun '24

18 Jun '24

# Security update for ghostscript Announcement ID: SUSE-SU-2024:1590-2 Rating: moderate References: * bsc#1223852 Cross-References: * CVE-2023-52722 CVSS scores: * CVE-2023-52722 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issues: * CVE-2023-52722: Do not allow eexec seeds other than the Type 1 standard while using SAFER mode (bsc#1223852). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1590=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-1590=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ghostscript-debuginfo-9.52-150000.188.1 * ghostscript-x11-debuginfo-9.52-150000.188.1 * ghostscript-devel-9.52-150000.188.1 * ghostscript-9.52-150000.188.1 * ghostscript-debugsource-9.52-150000.188.1 * ghostscript-x11-9.52-150000.188.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * ghostscript-debuginfo-9.52-150000.188.1 * ghostscript-x11-debuginfo-9.52-150000.188.1 * ghostscript-devel-9.52-150000.188.1 * ghostscript-9.52-150000.188.1 * ghostscript-debugsource-9.52-150000.188.1 * ghostscript-x11-9.52-150000.188.1 ## References: * https://www.suse.com/security/cve/CVE-2023-52722.html * https://bugzilla.suse.com/show_bug.cgi?id=1223852

1 0

SUSE-SU-2024:2056-1: important: Security update for libaom
by OPENSUSE-SECURITY-UPDATES 18 Jun '24

18 Jun '24

# Security update for libaom Announcement ID: SUSE-SU-2024:2056-1 Rating: important References: * bsc#1226020 Cross-References: * CVE-2024-5171 CVSS scores: * CVE-2024-5171 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for libaom fixes the following issues: * CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow (bsc#1226020). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-2056=1 openSUSE-SLE-15.6-2024-2056=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-2056=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libaom3-debuginfo-3.7.1-150600.3.3.1 * libaom3-3.7.1-150600.3.3.1 * aom-tools-debuginfo-3.7.1-150600.3.3.1 * libaom-debugsource-3.7.1-150600.3.3.1 * libaom-devel-3.7.1-150600.3.3.1 * aom-tools-3.7.1-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * libaom3-32bit-debuginfo-3.7.1-150600.3.3.1 * libaom3-32bit-3.7.1-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * libaom-devel-doc-3.7.1-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libaom3-64bit-3.7.1-150600.3.3.1 * libaom3-64bit-debuginfo-3.7.1-150600.3.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libaom3-debuginfo-3.7.1-150600.3.3.1 * libaom-debugsource-3.7.1-150600.3.3.1 * libaom3-3.7.1-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-5171.html * https://bugzilla.suse.com/show_bug.cgi?id=1226020

1 0