October 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2022:10183-1: moderate: Security update for pyenv
by opensuse-security＠opensuse.org 31 Oct '22

31 Oct '22

openSUSE Security Update: Security update for pyenv ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10183-1 Rating: moderate References: #1201582 Cross-References: CVE-2022-35861 CVSS scores: CVE-2022-35861 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pyenv fixes the following issues: Update to 2.3.5 - Add CPython 3.10.7 by @edgarrmondragon in #2454 - Docs: update Fish PATH update by @gregorias in #2449 - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in #2456 - Update miniconda3-3.9-4.12.0 by @Tsuki in #2460 - Add CPython 3.11.0rc2 by @ViktorHaag in #2459 - Add patches for 3.7.14 to support Apple Silicon by @samdoran in #2463 - Add ability to easily skip all use of Homebrew by @samdoran in #2464 - Drop Travis integration by @sobolevn in #2468 - Build CPython 3.12+ with --with-dsymutil in MacOS by @native-api in #2471 - Add Pyston 2.3.5 by @scop in #2476 Full Changelog: https://github.com/pyenv/pyenv/compare/v2.3.4...v2.3.5 Update to 2.3.4 - Add CPython 3.11.0rc1 by @edgarrmondragon in #2434 - Add support for multiple versions in pyenv uninstall by @hardikpnsp in #2432 - Add micropython 1.18 and 1.19.1 by @dmitriy-serdyuk in #2443 - CI: support Micropython, deleted scripts; build with -v by @native-api in #2447 - Re-allow paths in .python-version while still preventing CVE-2022-35861 by @comrumino in #2442 - CI: Bump OS versions by @native-api in #2448 - Add Cinder 3.8 by @filips123 in #2433 - Add support for multiple versions in pyenv uninstall in #2432 - Add micropython 1.18 and 1.19.1 in #2443 - Add Cinder 3.8 in #2433 Update to 2.3.3 - Use version sort in pyenv versions by @fofoni in #2405 - Add CPython 3.11.0b4 by @majorgreys in #2411 - Python-build: Replace deprecated git protocol use with https in docs by @ssbarnea in #2413 - Fix relative path traversal due to using version string in path by @comrumino in #2412 - Allow pypy2 and pypy3 patching by @brogon in #2421, #2419 - Add CPython 3.11.0b5 by @edgarrmondragon in #2420 - Add GraalPython 22.2.0 by @msimacek in #2425 - Add CPython 3.10.6 by @edgarrmondragon in #2428 - Add CPython 3.11.0b4 by @majorgreys in #2411 - Replace deprecated git protocol use with https by @ssbarnea in docs #2413 - Fix relative path traversal due to using version string in path by @comrumino in #2412 - Fix patterns for pypy2.*/pypy3.* versions by @brogon in #2419 Update to 2.3.2 - Add CPython 3.11.0b2 by @saaketp in #2380 - Honor CFLAGS_EXTRA for MicroPython #2006 by @yggdr in #2007 - Add post-install checks for curses, ctypes, lzma, and tkinter by @aphedges in #2353 - Add CPython 3.11.0b3 by @edgarrmondragon in #2382 - Add flags for Homebrew into python-config --ldflags by @native-api in #2384 - Add CPython 3.10.5 by @illia-v in #2386 - Add Anaconda 2019.10, 2021.04, 2022.05; support Anaconda in add_miniconda.py by @native-api in #2385 - Add Pyston-2.3.4 by @dand-oss in #2390 - Update Anaconda3-2022.05 MacOSX arm64 md5 by @bkbncn in #2391 - Fix boo#1201582 to fix CVE-2022-35861 (from commit 22fa683, file pyenv-CVE-2022-35861.patch) Update to 2.3.0 - Bump openssl 1.1 to 1.1.1n for CPython 3.7 3.8 3.9 by @tuzi3040 in #2276 - Doc Fix: Escape a hash character causing unwanted GitHub Issue linking by @edrogers in #2282 - Add CPython 3.9.12 by @saaketp in #2296 - Add CPython 3.10.4 by @saaketp in #2295 - Add patch for 3.6.15 to support Xcode 13.3 by @nshine in #2288 - Add patch for 3.7.12 to support Xcode 13.3 by @samdoran in #2292 - Add CONTRIBUTING.md by @native-api in #2287 - Add PyPy 7.3.9 release 2022-03-30 by @dand-oss in #2308 - Add Pyston 2.3.3 by @scop in #2316 - Add CPython 3.11.0a7 by @illia-v in #2315 - Add "nogil" Python v3.9.10 by @colesbury in #2342 - Support XCode 13.3 in all releases that officially support MacOS 11 by @native-api in #2344 - Add GraalPython 22.1.0 by @msimacek in #2346 - Make PYENV_DEBUG imply -v for pyenv install by @native-api in #2347 - Simplify init scheme by @native-api in #2310 - Don't use Homebrew outside of MacOS by @native-api in #2349 - Add :latest syntax to documentation for the install command by @hay in #2351 Update to 2.2.5 - fix issue 2236 for CPython 3.6.15 and 3.7.12 by @fofoni in #2237 - python-build: add URL for get-pip for Python 3.6 by @fofoni in #2238 - Add pyston-2.3.2 by @dmrlawson in #2240 - CPython 3.11.0a5 by @saaketp in #2241 - CPython 3.11.0a6 by @saaketp in #2266 - Add miniconda 4.11.0 by @aphedges in #2268 - docs(pyenv-prefix): note support for multiple versions by @scop in #2270 - pypy 7.3.8 02/20/2022 release by @dand-oss in #2253 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10183=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): pyenv-2.3.5-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): pyenv-bash-completion-2.3.5-bp154.2.3.1 pyenv-fish-completion-2.3.5-bp154.2.3.1 pyenv-zsh-completion-2.3.5-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-35861.html https://bugzilla.suse.com/1201582

1 0

SUSE-SU-2022:3820-1: moderate: Security update for podman
by opensuse-security＠opensuse.org 31 Oct '22

31 Oct '22

SUSE Security Update: Security update for podman ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3820-1 Rating: moderate References: #1202809 Cross-References: CVE-2022-2989 CVSS scores: CVE-2022-2989 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2022-2989 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Containers 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for podman fixes the following issues: - CVE-2022-2989: Fixed possible information disclosure and modification (bsc#1202809). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3820=1 - SUSE Linux Enterprise Module for Containers 15-SP4: zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2022-3820=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-3820=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): podman-3.4.7-150400.4.6.1 podman-debuginfo-3.4.7-150400.4.6.1 podman-remote-3.4.7-150400.4.6.1 podman-remote-debuginfo-3.4.7-150400.4.6.1 - openSUSE Leap 15.4 (noarch): podman-cni-config-3.4.7-150400.4.6.1 podman-docker-3.4.7-150400.4.6.1 - SUSE Linux Enterprise Module for Containers 15-SP4 (aarch64 ppc64le s390x x86_64): podman-3.4.7-150400.4.6.1 podman-debuginfo-3.4.7-150400.4.6.1 podman-remote-3.4.7-150400.4.6.1 podman-remote-debuginfo-3.4.7-150400.4.6.1 - SUSE Linux Enterprise Module for Containers 15-SP4 (noarch): podman-cni-config-3.4.7-150400.4.6.1 podman-docker-3.4.7-150400.4.6.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): podman-3.4.7-150400.4.6.1 podman-debuginfo-3.4.7-150400.4.6.1 - SUSE Linux Enterprise Micro 5.3 (noarch): podman-cni-config-3.4.7-150400.4.6.1 References: https://www.suse.com/security/cve/CVE-2022-2989.html https://bugzilla.suse.com/1202809

1 0

SUSE-SU-2022:3819-1: moderate: Security update for podman
by opensuse-security＠opensuse.org 31 Oct '22

31 Oct '22

SUSE Security Update: Security update for podman ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3819-1 Rating: moderate References: #1202809 Cross-References: CVE-2022-2989 CVSS scores: CVE-2022-2989 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2022-2989 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Containers 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for podman fixes the following issues: - CVE-2022-2989: Fixed possible information disclosure and modification (bsc#1202809). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3819=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3819=1 - SUSE Linux Enterprise Module for Containers 15-SP3: zypper in -t patch SUSE-SLE-Module-Containers-15-SP3-2022-3819=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3819=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3819=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2022-3819=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): podman-3.4.7-150300.9.12.1 podman-debuginfo-3.4.7-150300.9.12.1 - openSUSE Leap Micro 5.2 (noarch): podman-cni-config-3.4.7-150300.9.12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): podman-3.4.7-150300.9.12.1 - openSUSE Leap 15.3 (noarch): podman-cni-config-3.4.7-150300.9.12.1 - SUSE Linux Enterprise Module for Containers 15-SP3 (aarch64 ppc64le s390x x86_64): podman-3.4.7-150300.9.12.1 - SUSE Linux Enterprise Module for Containers 15-SP3 (noarch): podman-cni-config-3.4.7-150300.9.12.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): podman-3.4.7-150300.9.12.1 podman-debuginfo-3.4.7-150300.9.12.1 - SUSE Linux Enterprise Micro 5.2 (noarch): podman-cni-config-3.4.7-150300.9.12.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): podman-3.4.7-150300.9.12.1 - SUSE Linux Enterprise Micro 5.1 (noarch): podman-cni-config-3.4.7-150300.9.12.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): podman-3.4.7-150300.9.12.1 podman-debuginfo-3.4.7-150300.9.12.1 References: https://www.suse.com/security/cve/CVE-2022-2989.html https://bugzilla.suse.com/1202809

1 0

SUSE-RU-2022:3818-1: important: Recommended update for rabbitmq-server
by maintenance＠opensuse.org 31 Oct '22

31 Oct '22

SUSE Recommended Update: Recommended update for rabbitmq-server ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3818-1 Rating: important References: #1199431 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rabbitmq-server fixes the following issues: - Ensure maintenance mode state table exists after node [re]boot (bsc#1199431) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3818=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3818=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3818=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-3818=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): erlang-rabbitmq-client-3.8.11-150300.3.6.1 rabbitmq-server-3.8.11-150300.3.6.1 rabbitmq-server-plugins-3.8.11-150300.3.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): erlang-rabbitmq-client-3.8.11-150300.3.6.1 rabbitmq-server-3.8.11-150300.3.6.1 rabbitmq-server-plugins-3.8.11-150300.3.6.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): erlang-rabbitmq-client-3.8.11-150300.3.6.1 rabbitmq-server-3.8.11-150300.3.6.1 rabbitmq-server-plugins-3.8.11-150300.3.6.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): erlang-rabbitmq-client-3.8.11-150300.3.6.1 rabbitmq-server-3.8.11-150300.3.6.1 rabbitmq-server-plugins-3.8.11-150300.3.6.1 References: https://bugzilla.suse.com/1199431

1 0

openSUSE-SU-2022:10179-1: important: Security update for jhead
by opensuse-security＠opensuse.org 31 Oct '22

31 Oct '22

openSUSE Security Update: Security update for jhead ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10179-1 Rating: important References: #1204409 Cross-References: CVE-2022-41751 CVSS scores: CVE-2022-41751 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jhead fixes the following issues: - CVE-2022-41751: Fixed shell injection via filenames (boo#1204409) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10179=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): jhead-3.06.0.1-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-41751.html https://bugzilla.suse.com/1204409

1 0

openSUSE-SU-2022:10181-1: important: Security update for opera
by opensuse-security＠opensuse.org 31 Oct '22

31 Oct '22

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10181-1 Rating: important References: Cross-References: CVE-2022-3445 CVE-2022-3446 CVE-2022-3447 CVE-2022-3448 CVE-2022-3449 CVE-2022-3450 Affected Products: openSUSE Leap 15.3:NonFree ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for opera fixes the following issues: Update to 92.0.4561.21 - CHR-9037 Update chromium on desktop-stable-106-4561 to 106.0.5249.119 - DNA-102295 Missing GX.games section in settings - DNA-102308 Presubmit errors - DNA-102329 [Consent flow] clicking on "Customize settings" doesn't resize the popup - DNA-102340 Sidebar control panel doesn't hide - DNA-102348 Replace old Dify url with a new one - DNA-102430 Translations for O92 - DNA-102534 Allow staging RH Agent extension to use VPN Pro API - DNA-102548 Rich hints extension crashes on Linux - DNA-102551 Promote O92 to stable - Complete Opera 92.0 changelog at: https://blogs.opera.com/desktop/changelog-for-92/ - The update to chromium 106.0.5249.119 fixes following issues: CVE-2022-3445, CVE-2022-3446, CVE-2022-3447, CVE-2022-3448, CVE-2022-3449, CVE-2022-3450 Update to 91.0.4516.77 - DNA-101988 Implement dark mode for consent flow popups - DNA-102348 Replace old Dify url with a new one Update to 91.0.4516.65 - DNA-101240 Save ��remind in 3 days�� setting - DNA-101622 Add a way to check if browser is connected to webenv - DNA-101838 Unfiltered dropdown disabled by default on stable - DNA-101990 Boost sites into top sites - DNA-101998 flag tiktok-panel doesn��t work - DNA-102075 Crash at extensions::ExtensionApiFrameIdMap:: OnRenderFrameDeleted(content::RenderFrameHost*) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3:NonFree: zypper in -t patch openSUSE-2022-10181=1 Package List: - openSUSE Leap 15.3:NonFree (x86_64): opera-92.0.4561.21-lp153.2.66.1 References: https://www.suse.com/security/cve/CVE-2022-3445.html https://www.suse.com/security/cve/CVE-2022-3446.html https://www.suse.com/security/cve/CVE-2022-3447.html https://www.suse.com/security/cve/CVE-2022-3448.html https://www.suse.com/security/cve/CVE-2022-3449.html https://www.suse.com/security/cve/CVE-2022-3450.html

1 0

openSUSE-SU-2022:10178-1: important: Security update for jhead
by opensuse-security＠opensuse.org 31 Oct '22

31 Oct '22

openSUSE Security Update: Security update for jhead ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10178-1 Rating: important References: #1204409 Cross-References: CVE-2022-41751 CVSS scores: CVE-2022-41751 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jhead fixes the following issues: - CVE-2022-41751: Fixed shell injection via filenames (boo#1204409) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10178=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): jhead-3.00-bp153.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-41751.html https://bugzilla.suse.com/1204409

1 0

SUSE-RU-2022:3814-1: moderate: Recommended update for sapstartsrv-resource-agents and supportutils-plugin-ha-sap
by maintenance＠opensuse.org 31 Oct '22

31 Oct '22

SUSE Recommended Update: Recommended update for sapstartsrv-resource-agents and supportutils-plugin-ha-sap ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3814-1 Rating: moderate References: #1203202 Affected Products: SUSE Linux Enterprise Module for SAP Applications 15 SUSE Linux Enterprise Module for SAP Applications 15-SP1 SUSE Linux Enterprise Module for SAP Applications 15-SP2 SUSE Linux Enterprise Module for SAP Applications 15-SP3 SUSE Linux Enterprise Module for SAP Applications 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sapstartsrv-resource-agents and supportutils-plugin-ha-sap fixes the following issues: sapstartsrv-resource-agents: - Version bump to 0.9.1 - man page updates based on customer feedback - remove 'BuildRequire python3-mock' as this is no longer needed for the tests supportutils-plugin-ha-sap: - Update to version 0.0.4 - fix basic support for saptune - add saptune version 3 awareness and add a hint for the new saptune supportconfig (bsc#1203202) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3814=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3814=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2022-3814=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2022-3814=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2022-3814=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP1: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP1-2022-3814=1 - SUSE Linux Enterprise Module for SAP Applications 15: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-2022-3814=1 Package List: - openSUSE Leap 15.4 (noarch): sapstartsrv-resource-agents-0.9.1+git.1663751963.e0ef8a2-150000.1.15.1 supportutils-plugin-ha-sap-0.0.4+git.1663763480.2bbd713-150000.1.12.1 - openSUSE Leap 15.3 (noarch): sapstartsrv-resource-agents-0.9.1+git.1663751963.e0ef8a2-150000.1.15.1 supportutils-plugin-ha-sap-0.0.4+git.1663763480.2bbd713-150000.1.12.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP4 (noarch): sapstartsrv-resource-agents-0.9.1+git.1663751963.e0ef8a2-150000.1.15.1 supportutils-plugin-ha-sap-0.0.4+git.1663763480.2bbd713-150000.1.12.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP3 (noarch): sapstartsrv-resource-agents-0.9.1+git.1663751963.e0ef8a2-150000.1.15.1 supportutils-plugin-ha-sap-0.0.4+git.1663763480.2bbd713-150000.1.12.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP2 (noarch): sapstartsrv-resource-agents-0.9.1+git.1663751963.e0ef8a2-150000.1.15.1 supportutils-plugin-ha-sap-0.0.4+git.1663763480.2bbd713-150000.1.12.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP1 (noarch): sapstartsrv-resource-agents-0.9.1+git.1663751963.e0ef8a2-150000.1.15.1 supportutils-plugin-ha-sap-0.0.4+git.1663763480.2bbd713-150000.1.12.1 - SUSE Linux Enterprise Module for SAP Applications 15 (noarch): sapstartsrv-resource-agents-0.9.1+git.1663751963.e0ef8a2-150000.1.15.1 supportutils-plugin-ha-sap-0.0.4+git.1663763480.2bbd713-150000.1.12.1 References: https://bugzilla.suse.com/1203202

1 0

SUSE-RU-2022:3811-1: moderate: Recommended update for ovmf
by maintenance＠opensuse.org 31 Oct '22

31 Oct '22

SUSE Recommended Update: Recommended update for ovmf ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3811-1 Rating: moderate References: #1199156 #1203825 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ovmf fixes the following issues: - Disable option ROM on sev (bsc#1199156) - Fix detection issue of NVME controller (bsc#1203825) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3811=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3811=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-3811=1 Package List: - openSUSE Leap 15.4 (aarch64 x86_64): ovmf-202202-150400.5.5.1 ovmf-tools-202202-150400.5.5.1 - openSUSE Leap 15.4 (x86_64): qemu-ovmf-x86_64-debug-202202-150400.5.5.1 - openSUSE Leap 15.4 (noarch): qemu-ovmf-ia32-202202-150400.5.5.1 qemu-ovmf-x86_64-202202-150400.5.5.1 qemu-uefi-aarch32-202202-150400.5.5.1 qemu-uefi-aarch64-202202-150400.5.5.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 x86_64): ovmf-202202-150400.5.5.1 ovmf-tools-202202-150400.5.5.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): qemu-ovmf-x86_64-202202-150400.5.5.1 qemu-uefi-aarch64-202202-150400.5.5.1 - SUSE Linux Enterprise Micro 5.3 (noarch): qemu-ovmf-x86_64-202202-150400.5.5.1 qemu-uefi-aarch64-202202-150400.5.5.1 References: https://bugzilla.suse.com/1199156 https://bugzilla.suse.com/1203825

1 0

openSUSE-SU-2022:10182-1: important: Security update for opera
by opensuse-security＠opensuse.org 31 Oct '22

31 Oct '22

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10182-1 Rating: important References: Cross-References: CVE-2022-3445 CVE-2022-3446 CVE-2022-3447 CVE-2022-3448 CVE-2022-3449 CVE-2022-3450 Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for opera fixes the following issues: Update to 92.0.4561.21 - CHR-9037 Update chromium on desktop-stable-106-4561 to 106.0.5249.119 - DNA-102295 Missing GX.games section in settings - DNA-102308 Presubmit errors - DNA-102329 [Consent flow] clicking on "Customize settings" doesn't resize the popup - DNA-102340 Sidebar control panel doesn't hide - DNA-102348 Replace old Dify url with a new one - DNA-102430 Translations for O92 - DNA-102534 Allow staging RH Agent extension to use VPN Pro API - DNA-102548 Rich hints extension crashes on Linux - DNA-102551 Promote O92 to stable - Complete Opera 92.0 changelog at: https://blogs.opera.com/desktop/changelog-for-92/ - The update to chromium 106.0.5249.119 fixes following issues: CVE-2022-3445, CVE-2022-3446, CVE-2022-3447, CVE-2022-3448, CVE-2022-3449, CVE-2022-3450 Update to 91.0.4516.77 - DNA-101988 Implement dark mode for consent flow popups - DNA-102348 Replace old Dify url with a new one Update to 91.0.4516.65 - DNA-101240 Save ��remind in 3 days�� setting - DNA-101622 Add a way to check if browser is connected to webenv - DNA-101838 Unfiltered dropdown disabled by default on stable - DNA-101990 Boost sites into top sites - DNA-101998 flag tiktok-panel doesn��t work - DNA-102075 Crash at extensions::ExtensionApiFrameIdMap:: OnRenderFrameDeleted(content::RenderFrameHost*) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2022-10182=1 Package List: - openSUSE Leap 15.4:NonFree (x86_64): opera-92.0.4561.21-lp154.2.26.1 References: https://www.suse.com/security/cve/CVE-2022-3445.html https://www.suse.com/security/cve/CVE-2022-3446.html https://www.suse.com/security/cve/CVE-2022-3447.html https://www.suse.com/security/cve/CVE-2022-3448.html https://www.suse.com/security/cve/CVE-2022-3449.html https://www.suse.com/security/cve/CVE-2022-3450.html

1 0