November 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:3830-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3830-1 Rating: moderate References: #1203867 #1203870 Cross-References: CVE-2022-31628 CVE-2022-31629 CVSS scores: CVE-2022-31628 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-31628 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-31629 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php7 fixes the following issues: - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing "quines" gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3830=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): php7-wddx-7.2.5-150000.4.98.2 php7-wddx-debuginfo-7.2.5-150000.4.98.2 References: https://www.suse.com/security/cve/CVE-2022-31628.html https://www.suse.com/security/cve/CVE-2022-31629.html https://bugzilla.suse.com/1203867 https://bugzilla.suse.com/1203870

1 0

SUSE-SU-2022:3827-1: important: Security update for hdf5
by opensuse-security＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Security Update: Security update for hdf5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3827-1 Rating: important References: #1093663 #1101475 #1101906 #1107069 #1111598 #1125882 #1167400 #1194366 #1194375 #1195212 #1195215 Cross-References: CVE-2018-11205 CVE-2018-13867 CVE-2018-14031 CVE-2018-16438 CVE-2018-17439 CVE-2019-8396 CVE-2020-10812 CVE-2021-45830 CVE-2021-45833 CVE-2021-46242 CVE-2021-46244 CVSS scores: CVE-2018-11205 (NVD) : 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVE-2018-11205 (SUSE): 5.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CVE-2018-13867 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-13867 (SUSE): 5.3 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L CVE-2018-14031 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-14031 (SUSE): 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2018-16438 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-16438 (SUSE): 2.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVE-2018-17439 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-17439 (SUSE): 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2019-8396 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-8396 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2020-10812 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-10812 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2021-45830 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45830 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2021-45833 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45833 (SUSE): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2021-46242 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-46242 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2021-46244 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-46244 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for hdf5 fixes the following issues: - CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215). - CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906). - CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069). - CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400). - CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375). - CVE-2019-8396: Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882). - CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663). - CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212). - CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366). - CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475). - CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3827=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3827=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3827=1 Package List: - openSUSE Leap 15.4 (ppc64le): hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-hpc-examples-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-hpc-examples-1.10.8-150100.7.7.1 libhdf5-gnu-hpc-1.10.8-150100.7.7.1 libhdf5-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): hdf5-gnu-hpc-devel-1.10.8-150100.7.7.1 hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.7.1 hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.7.1 hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.7.1 hdf5-hpc-examples-1.10.8-150100.7.7.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-debugsource-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.7.1 hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.7.1 hdf5_1_10_8-hpc-examples-1.10.8-150100.7.7.1 libhdf5-gnu-hpc-1.10.8-150100.7.7.1 libhdf5-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.7.1 libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo-1.10.8-150100.7.7.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): hdf5-gnu-hpc-devel-1.10.8-150100.7.7.1 hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.7.1 hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.7.1 hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.7.1 hdf5-hpc-examples-1.10.8-150100.7.7.1 References: https://www.suse.com/security/cve/CVE-2018-11205.html https://www.suse.com/security/cve/CVE-2018-13867.html https://www.suse.com/security/cve/CVE-2018-14031.html https://www.suse.com/security/cve/CVE-2018-16438.html https://www.suse.com/security/cve/CVE-2018-17439.html https://www.suse.com/security/cve/CVE-2019-8396.html https://www.suse.com/security/cve/CVE-2020-10812.html https://www.suse.com/security/cve/CVE-2021-45830.html https://www.suse.com/security/cve/CVE-2021-45833.html https://www.suse.com/security/cve/CVE-2021-46242.html https://www.suse.com/security/cve/CVE-2021-46244.html https://bugzilla.suse.com/1093663 https://bugzilla.suse.com/1101475 https://bugzilla.suse.com/1101906 https://bugzilla.suse.com/1107069 https://bugzilla.suse.com/1111598 https://bugzilla.suse.com/1125882 https://bugzilla.suse.com/1167400 https://bugzilla.suse.com/1194366 https://bugzilla.suse.com/1194375 https://bugzilla.suse.com/1195212 https://bugzilla.suse.com/1195215

1 0

SUSE-SU-2022:3837-1: moderate: Security update for gnome-desktop
by opensuse-security＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Security Update: Security update for gnome-desktop ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3837-1 Rating: moderate References: #1133043 Cross-References: CVE-2019-11460 CVSS scores: CVE-2019-11460 (NVD) : 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2019-11460 (SUSE): 4.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gnome-desktop fixes the following issues: - CVE-2019-11460: Fixed sandbox issue that allowed bypassing from a compromised thumbnailer (bsc#1133043). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3837=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3837=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libgnome-desktop-3-12-3.26.2-150000.4.3.1 libgnome-desktop-3-12-debuginfo-3.26.2-150000.4.3.1 - openSUSE Leap 15.4 (x86_64): libgnome-desktop-3-12-32bit-3.26.2-150000.4.3.1 libgnome-desktop-3-12-32bit-debuginfo-3.26.2-150000.4.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libgnome-desktop-3-12-3.26.2-150000.4.3.1 libgnome-desktop-3-12-debuginfo-3.26.2-150000.4.3.1 - openSUSE Leap 15.3 (x86_64): libgnome-desktop-3-12-32bit-3.26.2-150000.4.3.1 libgnome-desktop-3-12-32bit-debuginfo-3.26.2-150000.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-11460.html https://bugzilla.suse.com/1133043

1 0

SUSE-SU-2022:3834-1: moderate: Security update for python-Flask-Security
by opensuse-security＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Security Update: Security update for python-Flask-Security ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3834-1 Rating: moderate References: #1202105 Cross-References: CVE-2021-23385 CVSS scores: CVE-2021-23385 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-23385 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Flask-Security fixes the following issues: - CVE-2021-23385: Fixed open redirect (bsc#1202105). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3834=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3834=1 Package List: - openSUSE Leap 15.4 (noarch): python3-Flask-Security-3.0.0-150100.4.3.1 - openSUSE Leap 15.3 (noarch): python2-Flask-Security-3.0.0-150100.4.3.1 python3-Flask-Security-3.0.0-150100.4.3.1 References: https://www.suse.com/security/cve/CVE-2021-23385.html https://bugzilla.suse.com/1202105

1 0

SUSE-OU-2022:3831-1: moderate: Optional update for raspberrypi-firmware, raspberrypi-firmware-config, raspberrypi-firmware-dt, bcm43xx-firmware, u-boot, wireless-tools
by maintenance＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Optional Update: Optional update for raspberrypi-firmware, raspberrypi-firmware-config, raspberrypi-firmware-dt, bcm43xx-firmware, u-boot, wireless-tools ______________________________________________________________________________ Announcement ID: SUSE-OU-2022:3831-1 Rating: moderate References: #1199084 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This optional update includes the packages below in SLE Micro 5.2 (bsc#1199084, jsc#SMO-106): - raspberrypi-firmware - raspberrypi-firmware-config - raspberrypi-firmware-dt - bcm43xx-firmware - u-boot-rpiarm64 - wireless-tools Patch Instructions: To install this SUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3831=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3831=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3831=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libiw-devel-30.pre9-150000.4.2.1 libiw30-30.pre9-150000.4.2.1 libiw30-debuginfo-30.pre9-150000.4.2.1 u-boot-tools-2021.01-150300.7.21.1 u-boot-tools-debuginfo-2021.01-150300.7.21.1 wireless-tools-30.pre9-150000.4.2.1 wireless-tools-debuginfo-30.pre9-150000.4.2.1 wireless-tools-debugsource-30.pre9-150000.4.2.1 - openSUSE Leap 15.3 (aarch64): u-boot-avnetultra96rev1-2021.01-150300.7.21.1 u-boot-avnetultra96rev1-doc-2021.01-150300.7.21.1 u-boot-bananapim64-2021.01-150300.7.21.1 u-boot-bananapim64-doc-2021.01-150300.7.21.1 u-boot-dragonboard410c-2021.01-150300.7.21.1 u-boot-dragonboard410c-doc-2021.01-150300.7.21.1 u-boot-dragonboard820c-2021.01-150300.7.21.1 u-boot-dragonboard820c-doc-2021.01-150300.7.21.1 u-boot-evb-rk3399-2021.01-150300.7.21.1 u-boot-evb-rk3399-doc-2021.01-150300.7.21.1 u-boot-firefly-rk3399-2021.01-150300.7.21.1 u-boot-firefly-rk3399-doc-2021.01-150300.7.21.1 u-boot-geekbox-2021.01-150300.7.21.1 u-boot-geekbox-doc-2021.01-150300.7.21.1 u-boot-hikey-2021.01-150300.7.21.1 u-boot-hikey-doc-2021.01-150300.7.21.1 u-boot-khadas-vim-2021.01-150300.7.21.1 u-boot-khadas-vim-doc-2021.01-150300.7.21.1 u-boot-khadas-vim2-2021.01-150300.7.21.1 u-boot-khadas-vim2-doc-2021.01-150300.7.21.1 u-boot-libretech-ac-2021.01-150300.7.21.1 u-boot-libretech-ac-doc-2021.01-150300.7.21.1 u-boot-libretech-cc-2021.01-150300.7.21.1 u-boot-libretech-cc-doc-2021.01-150300.7.21.1 u-boot-ls1012afrdmqspi-2021.01-150300.7.21.1 u-boot-ls1012afrdmqspi-doc-2021.01-150300.7.21.1 u-boot-mvebudb-88f3720-2021.01-150300.7.21.1 u-boot-mvebudb-88f3720-doc-2021.01-150300.7.21.1 u-boot-mvebudbarmada8k-2021.01-150300.7.21.1 u-boot-mvebudbarmada8k-doc-2021.01-150300.7.21.1 u-boot-mvebuespressobin-88f3720-2021.01-150300.7.21.1 u-boot-mvebuespressobin-88f3720-doc-2021.01-150300.7.21.1 u-boot-mvebumcbin-88f8040-2021.01-150300.7.21.1 u-boot-mvebumcbin-88f8040-doc-2021.01-150300.7.21.1 u-boot-nanopia64-2021.01-150300.7.21.1 u-boot-nanopia64-doc-2021.01-150300.7.21.1 u-boot-odroid-c2-2021.01-150300.7.21.1 u-boot-odroid-c2-doc-2021.01-150300.7.21.1 u-boot-odroid-c4-2021.01-150300.7.21.1 u-boot-odroid-c4-doc-2021.01-150300.7.21.1 u-boot-odroid-n2-2021.01-150300.7.21.1 u-boot-odroid-n2-doc-2021.01-150300.7.21.1 u-boot-orangepipc2-2021.01-150300.7.21.1 u-boot-orangepipc2-doc-2021.01-150300.7.21.1 u-boot-p2371-2180-2021.01-150300.7.21.1 u-boot-p2371-2180-doc-2021.01-150300.7.21.1 u-boot-p2771-0000-500-2021.01-150300.7.21.1 u-boot-p2771-0000-500-doc-2021.01-150300.7.21.1 u-boot-p3450-0000-2021.01-150300.7.21.1 u-boot-p3450-0000-doc-2021.01-150300.7.21.1 u-boot-pine64plus-2021.01-150300.7.21.1 u-boot-pine64plus-doc-2021.01-150300.7.21.1 u-boot-pinebook-2021.01-150300.7.21.1 u-boot-pinebook-doc-2021.01-150300.7.21.1 u-boot-pinebook-pro-rk3399-2021.01-150300.7.21.1 u-boot-pinebook-pro-rk3399-doc-2021.01-150300.7.21.1 u-boot-pineh64-2021.01-150300.7.21.1 u-boot-pineh64-doc-2021.01-150300.7.21.1 u-boot-pinephone-2021.01-150300.7.21.1 u-boot-pinephone-doc-2021.01-150300.7.21.1 u-boot-poplar-2021.01-150300.7.21.1 u-boot-poplar-doc-2021.01-150300.7.21.1 u-boot-rock-pi-4-rk3399-2021.01-150300.7.21.1 u-boot-rock-pi-4-rk3399-doc-2021.01-150300.7.21.1 u-boot-rock64-rk3328-2021.01-150300.7.21.1 u-boot-rock64-rk3328-doc-2021.01-150300.7.21.1 u-boot-rock960-rk3399-2021.01-150300.7.21.1 u-boot-rock960-rk3399-doc-2021.01-150300.7.21.1 u-boot-rockpro64-rk3399-2021.01-150300.7.21.1 u-boot-rockpro64-rk3399-doc-2021.01-150300.7.21.1 u-boot-rpi3-2021.01-150300.7.21.1 u-boot-rpi3-doc-2021.01-150300.7.21.1 u-boot-rpi4-2021.01-150300.7.21.1 u-boot-rpi4-doc-2021.01-150300.7.21.1 u-boot-rpiarm64-2021.01-150300.7.21.1 u-boot-rpiarm64-doc-2021.01-150300.7.21.1 u-boot-xilinxzynqmpvirt-2021.01-150300.7.21.1 u-boot-xilinxzynqmpvirt-doc-2021.01-150300.7.21.1 u-boot-xilinxzynqmpzcu102rev10-2021.01-150300.7.21.1 u-boot-xilinxzynqmpzcu102rev10-doc-2021.01-150300.7.21.1 - openSUSE Leap 15.3 (noarch): bcm43xx-firmware-20180314-150300.23.7.1 raspberrypi-firmware-2021.03.10-150300.4.2.1 raspberrypi-firmware-config-2021.03.10-150300.4.2.1 raspberrypi-firmware-dt-2021.03.15-150300.4.2.1 raspberrypi-firmware-extra-2021.03.10-150300.4.2.1 raspberrypi-firmware-extra-pi4-2021.03.10-150300.4.2.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libiw-devel-30.pre9-150000.4.2.1 libiw30-30.pre9-150000.4.2.1 libiw30-debuginfo-30.pre9-150000.4.2.1 u-boot-tools-2021.01-150300.7.21.1 u-boot-tools-debuginfo-2021.01-150300.7.21.1 wireless-tools-30.pre9-150000.4.2.1 wireless-tools-debuginfo-30.pre9-150000.4.2.1 wireless-tools-debugsource-30.pre9-150000.4.2.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64): u-boot-rpiarm64-2021.01-150300.7.21.1 u-boot-rpiarm64-doc-2021.01-150300.7.21.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): bcm43xx-firmware-20180314-150300.23.7.1 raspberrypi-firmware-2021.03.10-150300.4.2.1 raspberrypi-firmware-config-2021.03.10-150300.4.2.1 raspberrypi-firmware-dt-2021.03.15-150300.4.2.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libiw30-30.pre9-150000.4.2.1 libiw30-debuginfo-30.pre9-150000.4.2.1 wireless-tools-30.pre9-150000.4.2.1 wireless-tools-debuginfo-30.pre9-150000.4.2.1 wireless-tools-debugsource-30.pre9-150000.4.2.1 - SUSE Linux Enterprise Micro 5.2 (aarch64): u-boot-rpiarm64-2021.01-150300.7.21.1 - SUSE Linux Enterprise Micro 5.2 (noarch): bcm43xx-firmware-20180314-150300.23.7.1 raspberrypi-firmware-2021.03.10-150300.4.2.1 raspberrypi-firmware-config-2021.03.10-150300.4.2.1 raspberrypi-firmware-dt-2021.03.15-150300.4.2.1 References: https://bugzilla.suse.com/1199084

1 0

SUSE-SU-2022:3833-1: moderate: Security update for podofo
by opensuse-security＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Security Update: Security update for podofo ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3833-1 Rating: moderate References: #1099719 Cross-References: CVE-2018-12983 CVSS scores: CVE-2018-12983 (NVD) : 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-12983 (SUSE): 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for podofo fixes the following issues: - CVE-2018-12983: Fixed a stack overrun (bsc#1099719). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3833=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3833=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpodofo-devel-0.9.6-150300.3.6.1 libpodofo0_9_6-0.9.6-150300.3.6.1 libpodofo0_9_6-debuginfo-0.9.6-150300.3.6.1 podofo-0.9.6-150300.3.6.1 podofo-debuginfo-0.9.6-150300.3.6.1 podofo-debugsource-0.9.6-150300.3.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpodofo-devel-0.9.6-150300.3.6.1 libpodofo0_9_6-0.9.6-150300.3.6.1 libpodofo0_9_6-debuginfo-0.9.6-150300.3.6.1 podofo-0.9.6-150300.3.6.1 podofo-debuginfo-0.9.6-150300.3.6.1 podofo-debugsource-0.9.6-150300.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-12983.html https://bugzilla.suse.com/1099719

1 0

SUSE-SU-2022:3823-1: important: Security update for hsqldb
by opensuse-security＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Security Update: Security update for hsqldb ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3823-1 Rating: important References: #1204521 Cross-References: CVE-2022-41853 CVSS scores: CVE-2022-41853 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-41853 (SUSE): 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hsqldb fixes the following issues: - CVE-2022-41853: Fixed insufficient input sanitization (bsc#1204521). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3823=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3823=1 Package List: - openSUSE Leap 15.4 (noarch): hsqldb-2.3.3-150000.7.3.1 hsqldb-demo-2.3.3-150000.7.3.1 hsqldb-javadoc-2.3.3-150000.7.3.1 hsqldb-manual-2.3.3-150000.7.3.1 - openSUSE Leap 15.3 (noarch): hsqldb-2.3.3-150000.7.3.1 hsqldb-demo-2.3.3-150000.7.3.1 hsqldb-javadoc-2.3.3-150000.7.3.1 hsqldb-manual-2.3.3-150000.7.3.1 References: https://www.suse.com/security/cve/CVE-2022-41853.html https://bugzilla.suse.com/1204521

1 0

SUSE-SU-2022:3835-1: moderate: Security update for nodejs10
by opensuse-security＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Security Update: Security update for nodejs10 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3835-1 Rating: moderate References: #1201325 #1203832 Cross-References: CVE-2022-32213 CVE-2022-35256 CVSS scores: CVE-2022-32213 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2022-32213 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2022-35256 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for nodejs10 fixes the following issues: - CVE-2022-35256: Fixed incorrect parsing of header fields (bsc#1203832). - CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3835=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3835=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.50.1 nodejs10-debuginfo-10.24.1-150000.1.50.1 nodejs10-debugsource-10.24.1-150000.1.50.1 nodejs10-devel-10.24.1-150000.1.50.1 npm10-10.24.1-150000.1.50.1 - openSUSE Leap 15.4 (noarch): nodejs10-docs-10.24.1-150000.1.50.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.50.1 nodejs10-debuginfo-10.24.1-150000.1.50.1 nodejs10-debugsource-10.24.1-150000.1.50.1 nodejs10-devel-10.24.1-150000.1.50.1 npm10-10.24.1-150000.1.50.1 - openSUSE Leap 15.3 (noarch): nodejs10-docs-10.24.1-150000.1.50.1 References: https://www.suse.com/security/cve/CVE-2022-32213.html https://www.suse.com/security/cve/CVE-2022-35256.html https://bugzilla.suse.com/1201325 https://bugzilla.suse.com/1203832

1 0

SUSE-RU-2022:3822-1: moderate: Recommended update for adcli
by maintenance＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Recommended Update: Recommended update for adcli ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3822-1 Rating: moderate References: #1202647 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for adcli fixes the following issues: - Remove errx() calls on error conditions to execute the cleanup function and delete the krb5 snippets created in /tmp (bsc#1202647) - Set umask before calling mkdtemp (bsc#1202647) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3822=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3822=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): adcli-0.8.2-150400.17.3.1 adcli-debuginfo-0.8.2-150400.17.3.1 adcli-debugsource-0.8.2-150400.17.3.1 adcli-doc-0.8.2-150400.17.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): adcli-0.8.2-150400.17.3.1 adcli-debuginfo-0.8.2-150400.17.3.1 adcli-debugsource-0.8.2-150400.17.3.1 adcli-doc-0.8.2-150400.17.3.1 References: https://bugzilla.suse.com/1202647

1 0

SUSE-RU-2022:3821-1: moderate: Recommended update for adcli
by maintenance＠opensuse.org 01 Nov '22

01 Nov '22

SUSE Recommended Update: Recommended update for adcli ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3821-1 Rating: moderate References: #1202647 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for adcli fixes the following issues: - Remove errx() calls on error conditions to execute the cleanup function and delete the krb5 snippets created in /tmp (bsc#1202647) - Set umask before calling mkdtemp (bsc#1202647) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3821=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3821=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): adcli-0.8.2-150200.9.9.1 adcli-debuginfo-0.8.2-150200.9.9.1 adcli-debugsource-0.8.2-150200.9.9.1 adcli-doc-0.8.2-150200.9.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): adcli-0.8.2-150200.9.9.1 adcli-debuginfo-0.8.2-150200.9.9.1 adcli-debugsource-0.8.2-150200.9.9.1 adcli-doc-0.8.2-150200.9.9.1 References: https://bugzilla.suse.com/1202647

1 0