October 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:3558-1: Recommended update for release-notes-sled
by maintenance＠opensuse.org 10 Oct '22

10 Oct '22

SUSE Recommended Update: Recommended update for release-notes-sled ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3558-1 Rating: low References: #1187664 #933411 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for release-notes-sled fixes the following issues: Update the release notes to version 15.3.20220831 (bsc#933411) - Update outdated links (bsc#1187664) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3558=1 - SUSE Linux Enterprise Desktop 15-SP3: zypper in -t patch SUSE-SLE-Product-SLED-15-SP3-2022-3558=1 Package List: - openSUSE Leap 15.3 (noarch): release-notes-sled-15.3.20220831-150300.3.6.1 - SUSE Linux Enterprise Desktop 15-SP3 (noarch): release-notes-sled-15.3.20220831-150300.3.6.1 References: https://bugzilla.suse.com/1187664 https://bugzilla.suse.com/933411

1 0

SUSE-RU-2022:3555-1: important: Recommended update for aaa_base
by maintenance＠opensuse.org 10 Oct '22

10 Oct '22

SUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3555-1 Rating: important References: #1199492 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aaa_base fixes the following issues: - The wrapper rootsh is not a restricted shell. (bsc#1199492) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3555=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3555=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3555=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3555=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3555=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3555=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-3555=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3555=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3555=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): aaa_base-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-extras-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-wsl-84.87+git20180409.04c9dae-150200.8.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): aaa_base-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-extras-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-wsl-84.87+git20180409.04c9dae-150200.8.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): aaa_base-debuginfo-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-150200.8.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): aaa_base-debuginfo-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-150200.8.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): aaa_base-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-extras-84.87+git20180409.04c9dae-150200.8.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): aaa_base-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-extras-84.87+git20180409.04c9dae-150200.8.3.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): aaa_base-84.87+git20180409.04c9dae-150300.10.3.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-150300.10.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-150300.10.3.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): aaa_base-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-150200.8.3.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): aaa_base-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-150200.8.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-150200.8.3.1 References: https://bugzilla.suse.com/1199492

1 0

SUSE-RU-2022:3557-1: critical: Recommended update for aws-efs-utils
by maintenance＠opensuse.org 10 Oct '22

10 Oct '22

SUSE Recommended Update: Recommended update for aws-efs-utils ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3557-1 Rating: critical References: #1203170 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15-SP1 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aws-efs-utils fixes the following issues: - Update to version 1.33.4 (bsc#1203170) * Fix the issue where watchdog sending signal to incorrect processes and add FIPS mode support * Apply additional check on awscredsuri option - from version 1.33.3 * Fix the potential stunnel hanging issue caused by full subprocess PIPE filled by stunnel log * Specify FIPS mode in configuration * Add separate env_path for macOS; Add comments * Update get-pip.py download url in README - from version 1.33.2 * Fix the incorrect path to generate read_ahead_kb config file and Bump the default tls port range from 400 to 1000 - Add patch to use unittest.mock instead of mock in testsuite - Use relative URL in Source field - version update to 1.33.1 * Enable mount process to retry on failed or timed out mount.nfs command * use unittest.mock instead of mock - version update to 1.32.1 * Enable watchdog to check stunnel health periodically and restart hanging stunnel process when necessary. - do not require python-mock for build Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3557=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3557=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-3557=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-3557=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-3557=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2022-3557=1 Package List: - openSUSE Leap 15.4 (noarch): aws-efs-utils-1.33.4-150100.4.8.1 - openSUSE Leap 15.3 (noarch): aws-efs-utils-1.33.4-150100.4.8.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (noarch): aws-efs-utils-1.33.4-150100.4.8.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (noarch): aws-efs-utils-1.33.4-150100.4.8.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch): aws-efs-utils-1.33.4-150100.4.8.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1 (noarch): aws-efs-utils-1.33.4-150100.4.8.1 References: https://bugzilla.suse.com/1203170

1 0

SUSE-FU-2022:3556-1: moderate: Feature update for nvme-stas
by maintenance＠opensuse.org 10 Oct '22

10 Oct '22

SUSE Feature Update: Feature update for nvme-stas ______________________________________________________________________________ Announcement ID: SUSE-FU-2022:3556-1 Rating: moderate References: #1200128 SLE-24805 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one feature fix and contains one feature can now be installed. Description: This feature update for nvme-stas fixes the following issues: Update from version 1.0 to version 1.1.6 (bsc#1200128, jsc#SLE-24805): - Added systemd service file (service disabled) - Install everything under `/usr/lib` instead of `/usr/lib64` - conf: Enable sticky-connections by default - doc: Troubleshoot guide for missing mDNS packets - doc: Update README.md - stacd: Add configuration parameter 'sticky-connections' - stacd: Fix D-Bus race condition between stacd and stafd - stacd: Allow disabling nvme-cli auto-connect udev rule - stacd: Audit connections - stacd: Fix I/O controller connection audits - stacd: Fix defered call to remove_controller() with wrong arguments - stafd, stacd: Add man page to systend service file. - staslib: Fix cback function deleting object that called the cback - staslib: Add override support - staslib: Calling wrong cback function on controller removal - staslib: Check that async operation hasn't been cancelled before proceeding - staslib: Fix race conditions during controller object removal - staslib: Fix support for fibre channel - staslib: Make sure controller object gets "purged" when removed - systemd: Add explicit dependency to modprobe(a)nvme_fabrics.service - udev: Fix I/O controller scan & detect algorithm Patch Instructions: To install this SUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3556=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3556=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nvme-stas-1.1.6-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): nvme-stas-1.1.6-150400.3.3.1 References: https://bugzilla.suse.com/1200128

1 0

SUSE-SU-2022:3552-1: Security update for ImageMagick
by opensuse-security＠opensuse.org 07 Oct '22

07 Oct '22

SUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3552-1 Rating: low References: #1203212 Cross-References: CVE-2021-3574 CVSS scores: CVE-2021-3574 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2021-3574 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ImageMagick fixes the following issues: - CVE-2021-3574: Fixed memory leaks with convert command (bsc#1203212). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3552=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3552=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3552=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3552=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libMagick++-7_Q16HDRI4-7.0.7.34-150200.10.39.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-150200.10.39.1 - openSUSE Leap 15.4 (x86_64): libMagick++-7_Q16HDRI4-32bit-7.0.7.34-150200.10.39.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-150200.10.39.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ImageMagick-7.0.7.34-150200.10.39.1 ImageMagick-config-7-SUSE-7.0.7.34-150200.10.39.1 ImageMagick-config-7-upstream-7.0.7.34-150200.10.39.1 ImageMagick-debuginfo-7.0.7.34-150200.10.39.1 ImageMagick-debugsource-7.0.7.34-150200.10.39.1 ImageMagick-devel-7.0.7.34-150200.10.39.1 ImageMagick-extra-7.0.7.34-150200.10.39.1 ImageMagick-extra-debuginfo-7.0.7.34-150200.10.39.1 libMagick++-7_Q16HDRI4-7.0.7.34-150200.10.39.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-150200.10.39.1 libMagick++-devel-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-150200.10.39.1 perl-PerlMagick-7.0.7.34-150200.10.39.1 perl-PerlMagick-debuginfo-7.0.7.34-150200.10.39.1 - openSUSE Leap 15.3 (x86_64): ImageMagick-devel-32bit-7.0.7.34-150200.10.39.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-150200.10.39.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-150200.10.39.1 libMagick++-devel-32bit-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-150200.10.39.1 - openSUSE Leap 15.3 (noarch): ImageMagick-doc-7.0.7.34-150200.10.39.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): ImageMagick-debuginfo-7.0.7.34-150200.10.39.1 ImageMagick-debugsource-7.0.7.34-150200.10.39.1 perl-PerlMagick-7.0.7.34-150200.10.39.1 perl-PerlMagick-debuginfo-7.0.7.34-150200.10.39.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): ImageMagick-7.0.7.34-150200.10.39.1 ImageMagick-config-7-SUSE-7.0.7.34-150200.10.39.1 ImageMagick-config-7-upstream-7.0.7.34-150200.10.39.1 ImageMagick-debuginfo-7.0.7.34-150200.10.39.1 ImageMagick-debugsource-7.0.7.34-150200.10.39.1 ImageMagick-devel-7.0.7.34-150200.10.39.1 libMagick++-7_Q16HDRI4-7.0.7.34-150200.10.39.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-150200.10.39.1 libMagick++-devel-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-7.0.7.34-150200.10.39.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-7.0.7.34-150200.10.39.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-150200.10.39.1 References: https://www.suse.com/security/cve/CVE-2021-3574.html https://bugzilla.suse.com/1203212

1 0

SUSE-RU-2022:3551-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 07 Oct '22

07 Oct '22

SUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3551-1 Rating: moderate References: #1182983 #1190700 #1191020 #1202117 SLE-24941 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has four recommended fixes and contains one feature can now be installed. Description: This update for libgcrypt fixes the following issues: - FIPS: Fixed gpg/gpg2 gets out of core handler in FIPS mode while typing Tab key to Auto-Completion. [bsc#1182983] - FIPS: Ported libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941] * Enable the jitter based entropy generator by default in random.conf * Update the internal jitterentropy to version 3.4.0 - FIPS: Get most of the entropy from rndjent_poll [bsc#1202117] - FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700] * Consider approved keylength greater or equal to 112 bits. - FIPS: Zeroize buffer and digest in check_binary_integrity() [bsc#1191020] Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3551=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3551=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libgcrypt-cavs-1.9.4-150400.6.5.1 libgcrypt-cavs-debuginfo-1.9.4-150400.6.5.1 libgcrypt-debugsource-1.9.4-150400.6.5.1 libgcrypt-devel-1.9.4-150400.6.5.1 libgcrypt-devel-debuginfo-1.9.4-150400.6.5.1 libgcrypt20-1.9.4-150400.6.5.1 libgcrypt20-debuginfo-1.9.4-150400.6.5.1 libgcrypt20-hmac-1.9.4-150400.6.5.1 - openSUSE Leap 15.4 (x86_64): libgcrypt-devel-32bit-1.9.4-150400.6.5.1 libgcrypt-devel-32bit-debuginfo-1.9.4-150400.6.5.1 libgcrypt20-32bit-1.9.4-150400.6.5.1 libgcrypt20-32bit-debuginfo-1.9.4-150400.6.5.1 libgcrypt20-hmac-32bit-1.9.4-150400.6.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libgcrypt-debugsource-1.9.4-150400.6.5.1 libgcrypt-devel-1.9.4-150400.6.5.1 libgcrypt-devel-debuginfo-1.9.4-150400.6.5.1 libgcrypt20-1.9.4-150400.6.5.1 libgcrypt20-debuginfo-1.9.4-150400.6.5.1 libgcrypt20-hmac-1.9.4-150400.6.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libgcrypt20-32bit-1.9.4-150400.6.5.1 libgcrypt20-32bit-debuginfo-1.9.4-150400.6.5.1 libgcrypt20-hmac-32bit-1.9.4-150400.6.5.1 References: https://bugzilla.suse.com/1182983 https://bugzilla.suse.com/1190700 https://bugzilla.suse.com/1191020 https://bugzilla.suse.com/1202117

1 0

SUSE-RU-2022:3548-1: moderate: Recommended update for sassc
by maintenance＠opensuse.org 07 Oct '22

07 Oct '22

SUSE Recommended Update: Recommended update for sassc ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3548-1 Rating: moderate References: #1201074 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sassc fixes the following issues: - Update to version 3.6.2 (bsc#1201074): * Improve pseudo selector handling * Code improvements * Fix various functions arguments * Fix "call" for $function * Check weight argument on invert call * Fix bug in scale-color with positive saturation * Minor API documentation improvements * Fix selector isInvisible logic * Fix evaluation of unary expressions in loops * Fix attribute selector equality with modifiers Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3548=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3548=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): sassc-3.6.2-150200.3.3.1 sassc-debuginfo-3.6.2-150200.3.3.1 sassc-debugsource-3.6.2-150200.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): sassc-3.6.2-150200.3.3.1 sassc-debuginfo-3.6.2-150200.3.3.1 sassc-debugsource-3.6.2-150200.3.3.1 References: https://bugzilla.suse.com/1201074

1 0

SUSE-SU-2022:3544-1: important: Security update for python3
by opensuse-security＠opensuse.org 06 Oct '22

06 Oct '22

SUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3544-1 Rating: important References: #1202624 Cross-References: CVE-2021-28861 CVSS scores: CVE-2021-28861 (NVD) : 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-28861 (SUSE): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3544=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3544=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3544=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3544=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3544=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3544=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3544=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-3544=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3544=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): libpython3_6m1_0-3.6.15-150300.10.30.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.30.1 python3-3.6.15-150300.10.30.1 python3-base-3.6.15-150300.10.30.1 python3-base-debuginfo-3.6.15-150300.10.30.1 python3-core-debugsource-3.6.15-150300.10.30.1 python3-debuginfo-3.6.15-150300.10.30.1 python3-debugsource-3.6.15-150300.10.30.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.30.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.30.1 python3-3.6.15-150300.10.30.1 python3-base-3.6.15-150300.10.30.1 python3-base-debuginfo-3.6.15-150300.10.30.1 python3-core-debugsource-3.6.15-150300.10.30.1 python3-curses-3.6.15-150300.10.30.1 python3-curses-debuginfo-3.6.15-150300.10.30.1 python3-dbm-3.6.15-150300.10.30.1 python3-dbm-debuginfo-3.6.15-150300.10.30.1 python3-debuginfo-3.6.15-150300.10.30.1 python3-debugsource-3.6.15-150300.10.30.1 python3-devel-3.6.15-150300.10.30.1 python3-devel-debuginfo-3.6.15-150300.10.30.1 python3-doc-3.6.15-150300.10.30.1 python3-doc-devhelp-3.6.15-150300.10.30.1 python3-idle-3.6.15-150300.10.30.1 python3-testsuite-3.6.15-150300.10.30.1 python3-testsuite-debuginfo-3.6.15-150300.10.30.1 python3-tk-3.6.15-150300.10.30.1 python3-tk-debuginfo-3.6.15-150300.10.30.1 python3-tools-3.6.15-150300.10.30.1 - openSUSE Leap 15.4 (x86_64): libpython3_6m1_0-32bit-3.6.15-150300.10.30.1 libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.30.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.30.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.30.1 python3-3.6.15-150300.10.30.1 python3-base-3.6.15-150300.10.30.1 python3-base-debuginfo-3.6.15-150300.10.30.1 python3-core-debugsource-3.6.15-150300.10.30.1 python3-curses-3.6.15-150300.10.30.1 python3-curses-debuginfo-3.6.15-150300.10.30.1 python3-dbm-3.6.15-150300.10.30.1 python3-dbm-debuginfo-3.6.15-150300.10.30.1 python3-debuginfo-3.6.15-150300.10.30.1 python3-debugsource-3.6.15-150300.10.30.1 python3-devel-3.6.15-150300.10.30.1 python3-devel-debuginfo-3.6.15-150300.10.30.1 python3-doc-3.6.15-150300.10.30.1 python3-doc-devhelp-3.6.15-150300.10.30.1 python3-idle-3.6.15-150300.10.30.1 python3-testsuite-3.6.15-150300.10.30.1 python3-testsuite-debuginfo-3.6.15-150300.10.30.1 python3-tk-3.6.15-150300.10.30.1 python3-tk-debuginfo-3.6.15-150300.10.30.1 python3-tools-3.6.15-150300.10.30.1 - openSUSE Leap 15.3 (x86_64): libpython3_6m1_0-32bit-3.6.15-150300.10.30.1 libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.30.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): python3-core-debugsource-3.6.15-150300.10.30.1 python3-tools-3.6.15-150300.10.30.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): python3-core-debugsource-3.6.15-150300.10.30.1 python3-tools-3.6.15-150300.10.30.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.30.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.30.1 python3-3.6.15-150300.10.30.1 python3-base-3.6.15-150300.10.30.1 python3-base-debuginfo-3.6.15-150300.10.30.1 python3-core-debugsource-3.6.15-150300.10.30.1 python3-curses-3.6.15-150300.10.30.1 python3-curses-debuginfo-3.6.15-150300.10.30.1 python3-dbm-3.6.15-150300.10.30.1 python3-dbm-debuginfo-3.6.15-150300.10.30.1 python3-debuginfo-3.6.15-150300.10.30.1 python3-debugsource-3.6.15-150300.10.30.1 python3-devel-3.6.15-150300.10.30.1 python3-devel-debuginfo-3.6.15-150300.10.30.1 python3-idle-3.6.15-150300.10.30.1 python3-tk-3.6.15-150300.10.30.1 python3-tk-debuginfo-3.6.15-150300.10.30.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.30.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.30.1 python3-3.6.15-150300.10.30.1 python3-base-3.6.15-150300.10.30.1 python3-base-debuginfo-3.6.15-150300.10.30.1 python3-core-debugsource-3.6.15-150300.10.30.1 python3-curses-3.6.15-150300.10.30.1 python3-curses-debuginfo-3.6.15-150300.10.30.1 python3-dbm-3.6.15-150300.10.30.1 python3-dbm-debuginfo-3.6.15-150300.10.30.1 python3-debuginfo-3.6.15-150300.10.30.1 python3-debugsource-3.6.15-150300.10.30.1 python3-devel-3.6.15-150300.10.30.1 python3-devel-debuginfo-3.6.15-150300.10.30.1 python3-idle-3.6.15-150300.10.30.1 python3-tk-3.6.15-150300.10.30.1 python3-tk-debuginfo-3.6.15-150300.10.30.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.30.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.30.1 python3-3.6.15-150300.10.30.1 python3-base-3.6.15-150300.10.30.1 python3-base-debuginfo-3.6.15-150300.10.30.1 python3-core-debugsource-3.6.15-150300.10.30.1 python3-debuginfo-3.6.15-150300.10.30.1 python3-debugsource-3.6.15-150300.10.30.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.30.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.30.1 python3-3.6.15-150300.10.30.1 python3-base-3.6.15-150300.10.30.1 python3-base-debuginfo-3.6.15-150300.10.30.1 python3-core-debugsource-3.6.15-150300.10.30.1 python3-debuginfo-3.6.15-150300.10.30.1 python3-debugsource-3.6.15-150300.10.30.1 References: https://www.suse.com/security/cve/CVE-2021-28861.html https://bugzilla.suse.com/1202624

1 0

SUSE-SU-2022:3531-1: important: Security update for squid
by opensuse-security＠opensuse.org 06 Oct '22

06 Oct '22

SUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3531-1 Rating: important References: #1203677 #1203680 Cross-References: CVE-2022-41317 CVE-2022-41318 CVSS scores: CVE-2022-41317 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-41318 (SUSE): 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for squid fixes the following issues: Updated squid to version 5.7: - CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677). - CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3531=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3531=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): squid-5.7-150400.3.6.1 squid-debuginfo-5.7-150400.3.6.1 squid-debugsource-5.7-150400.3.6.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): squid-5.7-150400.3.6.1 squid-debuginfo-5.7-150400.3.6.1 squid-debugsource-5.7-150400.3.6.1 References: https://www.suse.com/security/cve/CVE-2022-41317.html https://www.suse.com/security/cve/CVE-2022-41318.html https://bugzilla.suse.com/1203677 https://bugzilla.suse.com/1203680

1 0

SUSE-SU-2022:3540-1: moderate: Security update for LibVNCServer
by opensuse-security＠opensuse.org 06 Oct '22

06 Oct '22

SUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3540-1 Rating: moderate References: #1203106 Cross-References: CVE-2020-29260 CVSS scores: CVE-2020-29260 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-29260 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for LibVNCServer fixes the following issues: - CVE-2020-29260: Fixed memory leakage via rfbClientCleanup() (bsc#1203106). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3540=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-3540=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-3540=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): LibVNCServer-debugsource-0.9.13-150400.3.3.1 LibVNCServer-devel-0.9.13-150400.3.3.1 libvncclient1-0.9.13-150400.3.3.1 libvncclient1-debuginfo-0.9.13-150400.3.3.1 libvncserver1-0.9.13-150400.3.3.1 libvncserver1-debuginfo-0.9.13-150400.3.3.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): LibVNCServer-debugsource-0.9.13-150400.3.3.1 libvncclient1-0.9.13-150400.3.3.1 libvncclient1-debuginfo-0.9.13-150400.3.3.1 libvncserver1-0.9.13-150400.3.3.1 libvncserver1-debuginfo-0.9.13-150400.3.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): LibVNCServer-debugsource-0.9.13-150400.3.3.1 libvncclient1-0.9.13-150400.3.3.1 libvncclient1-debuginfo-0.9.13-150400.3.3.1 libvncserver1-0.9.13-150400.3.3.1 libvncserver1-debuginfo-0.9.13-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-29260.html https://bugzilla.suse.com/1203106

1 0