October 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:3745-1: moderate: Security update for golang-github-prometheus-node_exporter
by opensuse-security＠opensuse.org 26 Oct '22

26 Oct '22

SUSE Security Update: Security update for golang-github-prometheus-node_exporter ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3745-1 Rating: moderate References: #1196338 SLE-24238 SLE-24239 Cross-References: CVE-2022-21698 CVSS scores: CVE-2022-21698 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-21698 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability, contains two features is now available. Description: This update for golang-github-prometheus-node_exporter fixes the following issues: (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114, CVE-2022-21698) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3745=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3745=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3745=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3745=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3745=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3745=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3745=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3745=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3745=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3745=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3745=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3745=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3745=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3745=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3745=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3745=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3745=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3745=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3745=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Manager Proxy 4.1 (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 - SUSE CaaS Platform 4.0 (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 References: https://www.suse.com/security/cve/CVE-2022-21698.html https://bugzilla.suse.com/1196338

1 0

SUSE-RU-2022:3748-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 26 Oct '22

26 Oct '22

SUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3748-1 Rating: moderate References: #1195624 #1199562 #1200596 #1202165 #1202167 #1202631 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Module for Transactional Server 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Add Amazon EC2 detection for virtual grains (bsc#1195624) - Change the delimiters to prevent possible tracebacks on some packages with dpkg_lowpkg - Fix 'test_ipc' unit test - Fix Syndic authentication errors (bsc#1199562) - Fix state.apply in test mode with file state module on user/group checking (bsc#1202167) - Fix the regression in schedule module released in version 3004 (bsc#1202631) - Handle non-UTF-8 bytes in core grains generation (bsc#1202165) - Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3748=1 - SUSE Linux Enterprise Module for Transactional Server 15-SP4: zypper in -t patch SUSE-SLE-Module-Transactional-Server-15-SP4-2022-3748=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3748=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3748=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-3748=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python3-salt-3004-150400.8.14.1 salt-3004-150400.8.14.1 salt-api-3004-150400.8.14.1 salt-cloud-3004-150400.8.14.1 salt-doc-3004-150400.8.14.1 salt-master-3004-150400.8.14.1 salt-minion-3004-150400.8.14.1 salt-proxy-3004-150400.8.14.1 salt-ssh-3004-150400.8.14.1 salt-standalone-formulas-configuration-3004-150400.8.14.1 salt-syndic-3004-150400.8.14.1 salt-transactional-update-3004-150400.8.14.1 - openSUSE Leap 15.4 (noarch): salt-bash-completion-3004-150400.8.14.1 salt-fish-completion-3004-150400.8.14.1 salt-zsh-completion-3004-150400.8.14.1 - SUSE Linux Enterprise Module for Transactional Server 15-SP4 (aarch64 ppc64le s390x x86_64): salt-transactional-update-3004-150400.8.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): salt-api-3004-150400.8.14.1 salt-cloud-3004-150400.8.14.1 salt-master-3004-150400.8.14.1 salt-proxy-3004-150400.8.14.1 salt-ssh-3004-150400.8.14.1 salt-standalone-formulas-configuration-3004-150400.8.14.1 salt-syndic-3004-150400.8.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): salt-fish-completion-3004-150400.8.14.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): python3-salt-3004-150400.8.14.1 salt-3004-150400.8.14.1 salt-doc-3004-150400.8.14.1 salt-minion-3004-150400.8.14.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): salt-bash-completion-3004-150400.8.14.1 salt-zsh-completion-3004-150400.8.14.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): python3-salt-3004-150400.8.14.1 salt-3004-150400.8.14.1 salt-minion-3004-150400.8.14.1 salt-transactional-update-3004-150400.8.14.1 References: https://bugzilla.suse.com/1195624 https://bugzilla.suse.com/1199562 https://bugzilla.suse.com/1200596 https://bugzilla.suse.com/1202165 https://bugzilla.suse.com/1202167 https://bugzilla.suse.com/1202631

1 0

SUSE-RU-2022:3743-1: moderate: Recommended update for golang-github-prometheus-alertmanager
by maintenance＠opensuse.org 26 Oct '22

26 Oct '22

SUSE Recommended Update: Recommended update for golang-github-prometheus-alertmanager ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3743-1 Rating: moderate References: #1200725 Affected Products: SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Tools 15 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-github-prometheus-alertmanager fixes the following issues: - Do not include sources (bsc#1200725) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3743=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3743=1 - SUSE Manager Tools 15: zypper in -t patch SUSE-SLE-Manager-Tools-15-2022-3743=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-3743=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2022-3743=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.1-2022-3743=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3743=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-alertmanager-0.23.0-150100.4.10.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-alertmanager-0.23.0-150100.4.10.1 - SUSE Manager Tools 15 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-alertmanager-0.23.0-150100.4.10.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-alertmanager-0.23.0-150100.4.10.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-alertmanager-0.23.0-150100.4.10.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-alertmanager-0.23.0-150100.4.10.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): golang-github-prometheus-alertmanager-0.23.0-150100.4.10.1 References: https://bugzilla.suse.com/1200725

1 0

SUSE-SU-2022:3767-1: important: Recommended update for bind
by opensuse-security＠opensuse.org 26 Oct '22

26 Oct '22

SUSE Security Update: Recommended update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3767-1 Rating: important References: #1201689 #1203250 #1203614 #1203618 #1203619 #1203620 SLE-24600 Cross-References: CVE-2022-2795 CVE-2022-3080 CVE-2022-38177 CVE-2022-38178 CVSS scores: CVE-2022-2795 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-2795 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-3080 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-3080 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38177 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38177 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38178 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38178 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves four vulnerabilities, contains one feature and has two fixes is now available. Description: This update for bind fixes the following issues: Update to release 9.16.33: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614). - CVE-2022-3080: Fixed assertion failure when there was a stale CNAME in the cache for the incoming query and the stale-answer-client-timeout option is set to 0 (bsc#1203618). - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm (bsc#1203619). - CVE-2022-38178: Fixed memory leaks that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm (bsc#1203620). - Add systemd drop-in directory for named service (bsc#1201689). - Add modified createNamedConfInclude script and README-bind.chrootenv (bsc#1203250). - Feature Changes: - Response Rate Limiting (RRL) code now treats all QNAMEs that are subject to wildcard processing within a given zone as the same name, to prevent circumventing the limits enforced by RRL. - Zones using dnssec-policy now require dynamic DNS or inline-signing to be configured explicitly. - A backward-compatible approach was implemented for encoding internationalized domain names (IDN) in dig and converting the domain to IDNA2008 form; if that fails, BIND tries an IDNA2003 conversion. - The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically disabled on systems where they are disallowed by the security policy. Primary zones using those algorithms need to be migrated to new algorithms prior to running on these systems, as graceful migration to different DNSSEC algorithms is not possible when RSASHA1 is disallowed by the operating system. - Log messages related to fetch limiting have been improved to provide more complete information. Specifically, the final counts of allowed and spilled fetches are now logged before the counter object is destroyed. - Non-dynamic zones that inherit dnssec-policy from the view or options blocks were not marked as inline-signed and therefore never scheduled to be re-signed. This has been fixed. - The old max-zone-ttl zone option was meant to be superseded by the max-zone-ttl option in dnssec-policy; however, the latter option was not fully effective. This has been corrected: zones no longer load if they contain TTLs greater than the limit configured in dnssec-policy. For zones with both the old max-zone-ttl option and dnssec-policy configured, the old option is ignored, and a warning is generated. - rndc dumpdb -expired was fixed to include expired RRsets, even if stale-cache-enable is set to no and the cache-cleaning time window has passed. (jsc#SLE-24600) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3767=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3767=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3767=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): bind-9.16.33-150400.5.11.1 bind-debuginfo-9.16.33-150400.5.11.1 bind-debugsource-9.16.33-150400.5.11.1 bind-utils-9.16.33-150400.5.11.1 bind-utils-debuginfo-9.16.33-150400.5.11.1 - openSUSE Leap 15.4 (noarch): bind-doc-9.16.33-150400.5.11.1 python3-bind-9.16.33-150400.5.11.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): bind-9.16.33-150400.5.11.1 bind-debuginfo-9.16.33-150400.5.11.1 bind-debugsource-9.16.33-150400.5.11.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): bind-doc-9.16.33-150400.5.11.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): bind-debuginfo-9.16.33-150400.5.11.1 bind-debugsource-9.16.33-150400.5.11.1 bind-utils-9.16.33-150400.5.11.1 bind-utils-debuginfo-9.16.33-150400.5.11.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python3-bind-9.16.33-150400.5.11.1 References: https://www.suse.com/security/cve/CVE-2022-2795.html https://www.suse.com/security/cve/CVE-2022-3080.html https://www.suse.com/security/cve/CVE-2022-38177.html https://www.suse.com/security/cve/CVE-2022-38178.html https://bugzilla.suse.com/1201689 https://bugzilla.suse.com/1203250 https://bugzilla.suse.com/1203614 https://bugzilla.suse.com/1203618 https://bugzilla.suse.com/1203619 https://bugzilla.suse.com/1203620

1 0

SUSE-RU-2022:3733-1: moderate: Recommended update for libheif
by maintenance＠opensuse.org 26 Oct '22

26 Oct '22

SUSE Recommended Update: Recommended update for libheif ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3733-1 Rating: moderate References: #1199987 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libheif fixes the following issues: - Add missing gdk-pixbuf loader scriptlets (bsc#1199987) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3733=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3733=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gdk-pixbuf-loader-libheif-1.12.0-150400.3.3.1 gdk-pixbuf-loader-libheif-debuginfo-1.12.0-150400.3.3.1 libheif-debugsource-1.12.0-150400.3.3.1 libheif-devel-1.12.0-150400.3.3.1 libheif1-1.12.0-150400.3.3.1 libheif1-debuginfo-1.12.0-150400.3.3.1 - openSUSE Leap 15.4 (x86_64): libheif1-32bit-1.12.0-150400.3.3.1 libheif1-32bit-debuginfo-1.12.0-150400.3.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libheif-debugsource-1.12.0-150400.3.3.1 libheif1-1.12.0-150400.3.3.1 libheif1-debuginfo-1.12.0-150400.3.3.1 References: https://bugzilla.suse.com/1199987

1 0

SUSE-FU-2022:3732-1: important: Feature update for patterns-wsl, yast2-registration and yast2-firstboot
by maintenance＠opensuse.org 25 Oct '22

25 Oct '22

SUSE Feature Update: Feature update for patterns-wsl, yast2-registration and yast2-firstboot ______________________________________________________________________________ Announcement ID: SUSE-FU-2022:3732-1 Rating: important References: PED-1380 PED-1670 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 feature fixes and contains two features can now be installed. Description: This update for patterns-wsl, yast2-registration and yast2-firstboot fixes the following issues: patterns-wsl: - Add patterns-wsl-base, patterns-wsl-system to basesystem. - Add patterns-wsl-gui to SLED. yast2-registration: - Allow forcing registration and configuring a YAML product as installed product. yast2-firstboot: - Add client to select product in WSL - Allow installing WSL GUI pattern Patch Instructions: To install this SUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3732=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3732=1 Package List: - openSUSE Leap 15.4 (noarch): patterns-wsl-base-20221020-150400.3.5.1 patterns-wsl-gui-20221020-150400.3.5.1 yast2-firstboot-4.4.10-150400.3.6.1 yast2-firstboot-wsl-4.4.10-150400.3.6.1 yast2-registration-4.4.23-150400.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): patterns-wsl-base-20221020-150400.3.5.1 patterns-wsl-gui-20221020-150400.3.5.1 patterns-wsl-systemd-20221020-150400.3.5.1 yast2-firstboot-4.4.10-150400.3.6.1 yast2-firstboot-wsl-4.4.10-150400.3.6.1 yast2-registration-4.4.23-150400.3.6.1 References:

1 0

SUSE-SU-2022:3729-1: important: Security update for bind
by opensuse-security＠opensuse.org 25 Oct '22

25 Oct '22

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3729-1 Rating: important References: #1203614 #1203619 #1203620 Cross-References: CVE-2022-2795 CVE-2022-38177 CVE-2022-38178 CVSS scores: CVE-2022-2795 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-2795 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-38177 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38177 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38178 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38178 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for bind fixes the following issues: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614). - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm (bsc#1203619). - CVE-2022-38178: Fixed memory leaks that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm (bsc#1203620). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3729=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3729=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3729=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3729=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3729=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3729=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3729=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-3729=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3729=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3729=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3729=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3729=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-3729=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3729=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3729=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3729=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3729=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3729=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3729=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3729=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3729=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (x86_64): bind-devel-32bit-9.16.6-150000.12.63.1 libbind9-1600-32bit-9.16.6-150000.12.63.1 libbind9-1600-32bit-debuginfo-9.16.6-150000.12.63.1 libdns1605-32bit-9.16.6-150000.12.63.1 libdns1605-32bit-debuginfo-9.16.6-150000.12.63.1 libirs1601-32bit-9.16.6-150000.12.63.1 libirs1601-32bit-debuginfo-9.16.6-150000.12.63.1 libisc1606-32bit-9.16.6-150000.12.63.1 libisc1606-32bit-debuginfo-9.16.6-150000.12.63.1 libisccc1600-32bit-9.16.6-150000.12.63.1 libisccc1600-32bit-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-32bit-9.16.6-150000.12.63.1 libisccfg1600-32bit-debuginfo-9.16.6-150000.12.63.1 libns1604-32bit-9.16.6-150000.12.63.1 libns1604-32bit-debuginfo-9.16.6-150000.12.63.1 - openSUSE Leap 15.3 (x86_64): bind-devel-32bit-9.16.6-150000.12.63.1 libbind9-1600-32bit-9.16.6-150000.12.63.1 libbind9-1600-32bit-debuginfo-9.16.6-150000.12.63.1 libdns1605-32bit-9.16.6-150000.12.63.1 libdns1605-32bit-debuginfo-9.16.6-150000.12.63.1 libirs1601-32bit-9.16.6-150000.12.63.1 libirs1601-32bit-debuginfo-9.16.6-150000.12.63.1 libisc1606-32bit-9.16.6-150000.12.63.1 libisc1606-32bit-debuginfo-9.16.6-150000.12.63.1 libisccc1600-32bit-9.16.6-150000.12.63.1 libisccc1600-32bit-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-32bit-9.16.6-150000.12.63.1 libisccfg1600-32bit-debuginfo-9.16.6-150000.12.63.1 libns1604-32bit-9.16.6-150000.12.63.1 libns1604-32bit-debuginfo-9.16.6-150000.12.63.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Manager Server 4.1 (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Manager Retail Branch Server 4.1 (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Manager Proxy 4.1 (x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Manager Proxy 4.1 (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server for SAP 15 (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise Server 15-LTSS (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Enterprise Storage 7 (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 - SUSE Enterprise Storage 6 (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE CaaS Platform 4.0 (noarch): bind-doc-9.16.6-150000.12.63.1 python3-bind-9.16.6-150000.12.63.1 - SUSE CaaS Platform 4.0 (x86_64): bind-9.16.6-150000.12.63.1 bind-chrootenv-9.16.6-150000.12.63.1 bind-debuginfo-9.16.6-150000.12.63.1 bind-debugsource-9.16.6-150000.12.63.1 bind-devel-9.16.6-150000.12.63.1 bind-utils-9.16.6-150000.12.63.1 bind-utils-debuginfo-9.16.6-150000.12.63.1 libbind9-1600-9.16.6-150000.12.63.1 libbind9-1600-debuginfo-9.16.6-150000.12.63.1 libdns1605-9.16.6-150000.12.63.1 libdns1605-debuginfo-9.16.6-150000.12.63.1 libirs-devel-9.16.6-150000.12.63.1 libirs1601-9.16.6-150000.12.63.1 libirs1601-debuginfo-9.16.6-150000.12.63.1 libisc1606-9.16.6-150000.12.63.1 libisc1606-debuginfo-9.16.6-150000.12.63.1 libisccc1600-9.16.6-150000.12.63.1 libisccc1600-debuginfo-9.16.6-150000.12.63.1 libisccfg1600-9.16.6-150000.12.63.1 libisccfg1600-debuginfo-9.16.6-150000.12.63.1 libns1604-9.16.6-150000.12.63.1 libns1604-debuginfo-9.16.6-150000.12.63.1 References: https://www.suse.com/security/cve/CVE-2022-2795.html https://www.suse.com/security/cve/CVE-2022-38177.html https://www.suse.com/security/cve/CVE-2022-38178.html https://bugzilla.suse.com/1203614 https://bugzilla.suse.com/1203619 https://bugzilla.suse.com/1203620

1 0

SUSE-SU-2022:3730-1: important: Security update for python-paramiko
by opensuse-security＠opensuse.org 25 Oct '22

25 Oct '22

SUSE Security Update: Security update for python-paramiko ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3730-1 Rating: important References: #1111151 #1200603 Cross-References: CVE-2018-1000805 CVSS scores: CVE-2018-1000805 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2018-1000805 (SUSE): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for python-paramiko fixes the following issues: Updated to version 2.4.3: - CVE-2018-1000805: Fixed authentication bypass (bsc#1111151). Bugfixes: - Fixed Ed25519 key handling for certain key comment lengths (bsc#1200603). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3730=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3730=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3730=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3730=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3730=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3730=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3730=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3730=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3730=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3730=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3730=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-3730=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3730=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3730=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3730=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3730=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3730=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3730=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3730=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3730=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (noarch): python-paramiko-doc-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - openSUSE Leap 15.3 (noarch): python-paramiko-doc-2.4.3-150100.6.15.1 python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Manager Server 4.1 (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Manager Retail Branch Server 4.1 (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Manager Proxy 4.1 (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (noarch): python2-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Enterprise Storage 7 (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE Enterprise Storage 6 (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 - SUSE CaaS Platform 4.0 (noarch): python2-paramiko-2.4.3-150100.6.15.1 python3-paramiko-2.4.3-150100.6.15.1 References: https://www.suse.com/security/cve/CVE-2018-1000805.html https://bugzilla.suse.com/1111151 https://bugzilla.suse.com/1200603

1 0

SUSE-SU-2022:3731-1: important: Security update for python-waitress
by opensuse-security＠opensuse.org 25 Oct '22

25 Oct '22

SUSE Security Update: Security update for python-waitress ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3731-1 Rating: important References: #1197255 Cross-References: CVE-2022-24761 CVSS scores: CVE-2022-24761 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-24761 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-waitress fixes the following issues: - CVE-2022-24761: Fixed a bug to avoid inconsistent interpretation of HTTP requests leading to request smuggling. (bsc#1197255) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3731=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3731=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3731=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3731=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3731=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3731=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3731=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-3731=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3731=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3731=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3731=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3731=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-3731=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-3731=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-3731=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3731=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3731=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3731=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3731=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3731=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3731=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3731=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3731=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3731=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3731=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (noarch): python3-waitress-1.4.3-150000.3.6.1 - openSUSE Leap 15.3 (noarch): python2-waitress-1.4.3-150000.3.6.1 python3-waitress-1.4.3-150000.3.6.1 - SUSE Manager Server 4.1 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Manager Retail Branch Server 4.1 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Manager Proxy 4.1 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Server for SAP 15 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Server 15-LTSS (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (noarch): python2-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (noarch): python2-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Enterprise Storage 7 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE Enterprise Storage 6 (noarch): python3-waitress-1.4.3-150000.3.6.1 - SUSE CaaS Platform 4.0 (noarch): python3-waitress-1.4.3-150000.3.6.1 References: https://www.suse.com/security/cve/CVE-2022-24761.html https://bugzilla.suse.com/1197255

1 0

SUSE-SU-2022:3727-1: moderate: Security update for xen
by opensuse-security＠opensuse.org 25 Oct '22

25 Oct '22

SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3727-1 Rating: moderate References: #1027519 #1167608 #1201631 #1201994 #1203806 #1203807 Cross-References: CVE-2022-33746 CVE-2022-33748 CVSS scores: CVE-2022-33746 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2022-33746 (SUSE): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H CVE-2022-33748 (NVD) : 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2022-33748 (SUSE): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has four fixes is now available. Description: This update for xen fixes the following issues: Updated to version 4.16.2 (bsc#1027519): - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806). - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807). Bugfixes: - Fixed Xen DomU unable to emulate audio device (bsc#1201994). - Fixed logic error in built-in default of max_event_channels (bsc#1167608, bsc#1201631). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3727=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3727=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3727=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-3727=1 Package List: - openSUSE Leap 15.4 (aarch64 x86_64): xen-4.16.2_06-150400.4.11.1 xen-debugsource-4.16.2_06-150400.4.11.1 xen-devel-4.16.2_06-150400.4.11.1 xen-doc-html-4.16.2_06-150400.4.11.1 xen-libs-4.16.2_06-150400.4.11.1 xen-libs-debuginfo-4.16.2_06-150400.4.11.1 xen-tools-4.16.2_06-150400.4.11.1 xen-tools-debuginfo-4.16.2_06-150400.4.11.1 xen-tools-domU-4.16.2_06-150400.4.11.1 xen-tools-domU-debuginfo-4.16.2_06-150400.4.11.1 - openSUSE Leap 15.4 (x86_64): xen-libs-32bit-4.16.2_06-150400.4.11.1 xen-libs-32bit-debuginfo-4.16.2_06-150400.4.11.1 - openSUSE Leap 15.4 (noarch): xen-tools-xendomains-wait-disk-4.16.2_06-150400.4.11.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (x86_64): xen-4.16.2_06-150400.4.11.1 xen-debugsource-4.16.2_06-150400.4.11.1 xen-devel-4.16.2_06-150400.4.11.1 xen-tools-4.16.2_06-150400.4.11.1 xen-tools-debuginfo-4.16.2_06-150400.4.11.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): xen-tools-xendomains-wait-disk-4.16.2_06-150400.4.11.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): xen-debugsource-4.16.2_06-150400.4.11.1 xen-libs-4.16.2_06-150400.4.11.1 xen-libs-debuginfo-4.16.2_06-150400.4.11.1 xen-tools-domU-4.16.2_06-150400.4.11.1 xen-tools-domU-debuginfo-4.16.2_06-150400.4.11.1 - SUSE Linux Enterprise Micro 5.3 (x86_64): xen-debugsource-4.16.2_06-150400.4.11.1 xen-libs-4.16.2_06-150400.4.11.1 xen-libs-debuginfo-4.16.2_06-150400.4.11.1 References: https://www.suse.com/security/cve/CVE-2022-33746.html https://www.suse.com/security/cve/CVE-2022-33748.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1167608 https://bugzilla.suse.com/1201631 https://bugzilla.suse.com/1201994 https://bugzilla.suse.com/1203806 https://bugzilla.suse.com/1203807

1 0