November 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:4205-1: moderate: Security update for net-snmp
by opensuse-security＠opensuse.org 23 Nov '22

23 Nov '22

SUSE Security Update: Security update for net-snmp ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4205-1 Rating: moderate References: #1201103 SLE-11203 Cross-References: CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810 Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap 15.5 ______________________________________________________________________________ An update that fixes 6 vulnerabilities, contains one feature is now available. Description: This update for net-snmp fixes the following issues: Updated to version 5.9.3 (bsc#1201103, jsc#SLE-11203): - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access. - CVE-2022-24809: Fixed a malformed OID in a GET-NEXT to the nsVacmAccessTable that can cause a NULL pointer dereference. - CVE-2022-24806: Fixed an improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously. - CVE-2022-24807: Fixed a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. - CVE-2022-24808: Fixed a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference. - CVE-2022-24810: Fixed a malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-SLE-15.5-2022-4205=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4205=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4205=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-4205=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-4205=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4205=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4205=1 Package List: - openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64): net-snmp-5.9.3-150300.15.3.1 net-snmp-debuginfo-5.9.3-150300.15.3.1 net-snmp-debugsource-5.9.3-150300.15.3.1 net-snmp-devel-5.9.3-150300.15.3.1 perl-SNMP-5.9.3-150300.15.3.1 perl-SNMP-debuginfo-5.9.3-150300.15.3.1 python3-net-snmp-5.9.3-150300.15.3.1 python3-net-snmp-debuginfo-5.9.3-150300.15.3.1 snmp-mibs-5.9.3-150300.15.3.1 - openSUSE Leap 15.5 (x86_64): net-snmp-devel-32bit-5.9.3-150300.15.3.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsnmp40-5.9.3-150300.15.3.1 libsnmp40-debuginfo-5.9.3-150300.15.3.1 net-snmp-5.9.3-150300.15.3.1 net-snmp-debuginfo-5.9.3-150300.15.3.1 net-snmp-debugsource-5.9.3-150300.15.3.1 net-snmp-devel-5.9.3-150300.15.3.1 perl-SNMP-5.9.3-150300.15.3.1 perl-SNMP-debuginfo-5.9.3-150300.15.3.1 python3-net-snmp-5.9.3-150300.15.3.1 python3-net-snmp-debuginfo-5.9.3-150300.15.3.1 snmp-mibs-5.9.3-150300.15.3.1 - openSUSE Leap 15.4 (x86_64): libsnmp40-32bit-5.9.3-150300.15.3.1 libsnmp40-32bit-debuginfo-5.9.3-150300.15.3.1 net-snmp-devel-32bit-5.9.3-150300.15.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsnmp40-5.9.3-150300.15.3.1 libsnmp40-debuginfo-5.9.3-150300.15.3.1 net-snmp-5.9.3-150300.15.3.1 net-snmp-debuginfo-5.9.3-150300.15.3.1 net-snmp-debugsource-5.9.3-150300.15.3.1 net-snmp-devel-5.9.3-150300.15.3.1 perl-SNMP-5.9.3-150300.15.3.1 perl-SNMP-debuginfo-5.9.3-150300.15.3.1 python2-net-snmp-5.9.3-150300.15.3.1 python2-net-snmp-debuginfo-5.9.3-150300.15.3.1 python3-net-snmp-5.9.3-150300.15.3.1 python3-net-snmp-debuginfo-5.9.3-150300.15.3.1 snmp-mibs-5.9.3-150300.15.3.1 - openSUSE Leap 15.3 (x86_64): libsnmp40-32bit-5.9.3-150300.15.3.1 libsnmp40-32bit-debuginfo-5.9.3-150300.15.3.1 net-snmp-devel-32bit-5.9.3-150300.15.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (x86_64): net-snmp-debugsource-5.9.3-150300.15.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (x86_64): libsnmp40-32bit-5.9.3-150300.15.3.1 libsnmp40-32bit-debuginfo-5.9.3-150300.15.3.1 net-snmp-debugsource-5.9.3-150300.15.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsnmp40-5.9.3-150300.15.3.1 libsnmp40-debuginfo-5.9.3-150300.15.3.1 net-snmp-5.9.3-150300.15.3.1 net-snmp-debuginfo-5.9.3-150300.15.3.1 net-snmp-debugsource-5.9.3-150300.15.3.1 net-snmp-devel-5.9.3-150300.15.3.1 perl-SNMP-5.9.3-150300.15.3.1 perl-SNMP-debuginfo-5.9.3-150300.15.3.1 snmp-mibs-5.9.3-150300.15.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libsnmp40-5.9.3-150300.15.3.1 libsnmp40-debuginfo-5.9.3-150300.15.3.1 net-snmp-5.9.3-150300.15.3.1 net-snmp-debuginfo-5.9.3-150300.15.3.1 net-snmp-debugsource-5.9.3-150300.15.3.1 net-snmp-devel-5.9.3-150300.15.3.1 perl-SNMP-5.9.3-150300.15.3.1 perl-SNMP-debuginfo-5.9.3-150300.15.3.1 snmp-mibs-5.9.3-150300.15.3.1 References: https://www.suse.com/security/cve/CVE-2022-24805.html https://www.suse.com/security/cve/CVE-2022-24806.html https://www.suse.com/security/cve/CVE-2022-24807.html https://www.suse.com/security/cve/CVE-2022-24808.html https://www.suse.com/security/cve/CVE-2022-24809.html https://www.suse.com/security/cve/CVE-2022-24810.html https://bugzilla.suse.com/1201103

1 0

SUSE-SU-2022:4206-1: important: Security update for pixman
by opensuse-security＠opensuse.org 23 Nov '22

23 Nov '22

SUSE Security Update: Security update for pixman ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4206-1 Rating: important References: #1205033 Cross-References: CVE-2022-44638 CVSS scores: CVE-2022-44638 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-44638 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pixman fixes the following issues: - CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4206=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4206=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4206=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4206=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4206=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libpixman-1-0-0.40.0-150400.3.3.1 libpixman-1-0-debuginfo-0.40.0-150400.3.3.1 pixman-debugsource-0.40.0-150400.3.3.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpixman-1-0-0.40.0-150400.3.3.1 libpixman-1-0-debuginfo-0.40.0-150400.3.3.1 libpixman-1-0-devel-0.40.0-150400.3.3.1 pixman-debugsource-0.40.0-150400.3.3.1 - openSUSE Leap 15.4 (x86_64): libpixman-1-0-32bit-0.40.0-150400.3.3.1 libpixman-1-0-32bit-debuginfo-0.40.0-150400.3.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (x86_64): libpixman-1-0-32bit-0.40.0-150400.3.3.1 libpixman-1-0-32bit-debuginfo-0.40.0-150400.3.3.1 pixman-debugsource-0.40.0-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libpixman-1-0-0.40.0-150400.3.3.1 libpixman-1-0-debuginfo-0.40.0-150400.3.3.1 libpixman-1-0-devel-0.40.0-150400.3.3.1 pixman-debugsource-0.40.0-150400.3.3.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libpixman-1-0-0.40.0-150400.3.3.1 libpixman-1-0-debuginfo-0.40.0-150400.3.3.1 pixman-debugsource-0.40.0-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-44638.html https://bugzilla.suse.com/1205033

1 0

SUSE-SU-2022:4207-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 23 Nov '22

23 Nov '22

SUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4207-1 Rating: important References: #1205120 #1205121 #1205122 #1205123 #1205124 Cross-References: CVE-2022-32888 CVE-2022-32923 CVE-2022-42799 CVE-2022-42823 CVE-2022-42824 CVSS scores: CVE-2022-32888 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-32888 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-32923 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-32923 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-42799 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-42799 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-42823 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-42823 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-42824 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-42824 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121). - CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122). - CVE-2022-42799: Fixed user interface spoofing when visiting a malicious website (bsc#1205123). - CVE-2022-42823: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205120). - CVE-2022-42824: Fixed possible sensitive user information leak via maliciously crafted web content (bsc#1205124). Update to version 2.38.2: - Fix scrolling issues in some sites having fixed background. - Fix prolonged buffering during progressive live playback. - Fix the build with accessibility disabled. - Fix several crashes and rendering issues. Update to version 2.38.1: - Make xdg-dbus-proxy work if host session bus address is an abstract socket. - Use a single xdg-dbus-proxy process when sandbox is enabled. - Fix high resolution video playback due to unimplemented changeType operation. - Ensure GSubprocess uses posix_spawn() again and inherit file descriptors. - Fix player stucking in buffering (paused) state for progressive streaming. - Do not try to preconnect on link click when link preconnect setting is disabled. - Fix close status code returned when the client closes a WebSocket in some cases. - Fix media player duration calculation. - Fix several crashes and rendering issues. Update to version 2.38.0: - New media controls UI style. - Add new API to set WebView's Content-Security-Policy for web extensions support. - Make it possible to use the remote inspector from other browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var. - MediaSession is enabled by default, allowing remote media control using MPRIS. - Add support for PDF documents using PDF.js. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4207=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-4207=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4207=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4207=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.2-150400.4.22.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.2-150400.4.22.1 libjavascriptcoregtk-4_1-0-2.38.2-150400.4.22.1 libjavascriptcoregtk-4_1-0-debuginfo-2.38.2-150400.4.22.1 libjavascriptcoregtk-5_0-0-2.38.2-150400.4.22.1 libjavascriptcoregtk-5_0-0-debuginfo-2.38.2-150400.4.22.1 libwebkit2gtk-4_0-37-2.38.2-150400.4.22.1 libwebkit2gtk-4_0-37-debuginfo-2.38.2-150400.4.22.1 libwebkit2gtk-4_1-0-2.38.2-150400.4.22.1 libwebkit2gtk-4_1-0-debuginfo-2.38.2-150400.4.22.1 libwebkit2gtk-5_0-0-2.38.2-150400.4.22.1 libwebkit2gtk-5_0-0-debuginfo-2.38.2-150400.4.22.1 typelib-1_0-JavaScriptCore-4_0-2.38.2-150400.4.22.1 typelib-1_0-JavaScriptCore-4_1-2.38.2-150400.4.22.1 typelib-1_0-JavaScriptCore-5_0-2.38.2-150400.4.22.1 typelib-1_0-WebKit2-4_0-2.38.2-150400.4.22.1 typelib-1_0-WebKit2-4_1-2.38.2-150400.4.22.1 typelib-1_0-WebKit2-5_0-2.38.2-150400.4.22.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.2-150400.4.22.1 typelib-1_0-WebKit2WebExtension-4_1-2.38.2-150400.4.22.1 typelib-1_0-WebKit2WebExtension-5_0-2.38.2-150400.4.22.1 webkit-jsc-4-2.38.2-150400.4.22.1 webkit-jsc-4-debuginfo-2.38.2-150400.4.22.1 webkit-jsc-4.1-2.38.2-150400.4.22.1 webkit-jsc-4.1-debuginfo-2.38.2-150400.4.22.1 webkit-jsc-5.0-2.38.2-150400.4.22.1 webkit-jsc-5.0-debuginfo-2.38.2-150400.4.22.1 webkit2gtk-4_0-injected-bundles-2.38.2-150400.4.22.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.2-150400.4.22.1 webkit2gtk-4_1-injected-bundles-2.38.2-150400.4.22.1 webkit2gtk-4_1-injected-bundles-debuginfo-2.38.2-150400.4.22.1 webkit2gtk-5_0-injected-bundles-2.38.2-150400.4.22.1 webkit2gtk-5_0-injected-bundles-debuginfo-2.38.2-150400.4.22.1 webkit2gtk3-debugsource-2.38.2-150400.4.22.1 webkit2gtk3-devel-2.38.2-150400.4.22.1 webkit2gtk3-minibrowser-2.38.2-150400.4.22.1 webkit2gtk3-minibrowser-debuginfo-2.38.2-150400.4.22.1 webkit2gtk3-soup2-debugsource-2.38.2-150400.4.22.1 webkit2gtk3-soup2-devel-2.38.2-150400.4.22.1 webkit2gtk3-soup2-minibrowser-2.38.2-150400.4.22.1 webkit2gtk3-soup2-minibrowser-debuginfo-2.38.2-150400.4.22.1 webkit2gtk4-debugsource-2.38.2-150400.4.22.1 webkit2gtk4-devel-2.38.2-150400.4.22.1 webkit2gtk4-minibrowser-2.38.2-150400.4.22.1 webkit2gtk4-minibrowser-debuginfo-2.38.2-150400.4.22.1 - openSUSE Leap 15.4 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.38.2-150400.4.22.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.38.2-150400.4.22.1 libjavascriptcoregtk-4_1-0-32bit-2.38.2-150400.4.22.1 libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.38.2-150400.4.22.1 libwebkit2gtk-4_0-37-32bit-2.38.2-150400.4.22.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.38.2-150400.4.22.1 libwebkit2gtk-4_1-0-32bit-2.38.2-150400.4.22.1 libwebkit2gtk-4_1-0-32bit-debuginfo-2.38.2-150400.4.22.1 - openSUSE Leap 15.4 (noarch): WebKit2GTK-4.0-lang-2.38.2-150400.4.22.1 WebKit2GTK-4.1-lang-2.38.2-150400.4.22.1 WebKit2GTK-5.0-lang-2.38.2-150400.4.22.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-5_0-0-2.38.2-150400.4.22.1 libjavascriptcoregtk-5_0-0-debuginfo-2.38.2-150400.4.22.1 libwebkit2gtk-5_0-0-2.38.2-150400.4.22.1 libwebkit2gtk-5_0-0-debuginfo-2.38.2-150400.4.22.1 typelib-1_0-JavaScriptCore-5_0-2.38.2-150400.4.22.1 typelib-1_0-WebKit2-5_0-2.38.2-150400.4.22.1 webkit2gtk-5_0-injected-bundles-2.38.2-150400.4.22.1 webkit2gtk-5_0-injected-bundles-debuginfo-2.38.2-150400.4.22.1 webkit2gtk4-debugsource-2.38.2-150400.4.22.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_1-0-2.38.2-150400.4.22.1 libjavascriptcoregtk-4_1-0-debuginfo-2.38.2-150400.4.22.1 libwebkit2gtk-4_1-0-2.38.2-150400.4.22.1 libwebkit2gtk-4_1-0-debuginfo-2.38.2-150400.4.22.1 typelib-1_0-JavaScriptCore-4_1-2.38.2-150400.4.22.1 typelib-1_0-WebKit2-4_1-2.38.2-150400.4.22.1 typelib-1_0-WebKit2WebExtension-4_1-2.38.2-150400.4.22.1 webkit2gtk-4_1-injected-bundles-2.38.2-150400.4.22.1 webkit2gtk-4_1-injected-bundles-debuginfo-2.38.2-150400.4.22.1 webkit2gtk3-debugsource-2.38.2-150400.4.22.1 webkit2gtk3-devel-2.38.2-150400.4.22.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.2-150400.4.22.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.2-150400.4.22.1 libwebkit2gtk-4_0-37-2.38.2-150400.4.22.1 libwebkit2gtk-4_0-37-debuginfo-2.38.2-150400.4.22.1 typelib-1_0-JavaScriptCore-4_0-2.38.2-150400.4.22.1 typelib-1_0-WebKit2-4_0-2.38.2-150400.4.22.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.2-150400.4.22.1 webkit2gtk-4_0-injected-bundles-2.38.2-150400.4.22.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.2-150400.4.22.1 webkit2gtk3-soup2-debugsource-2.38.2-150400.4.22.1 webkit2gtk3-soup2-devel-2.38.2-150400.4.22.1 References: https://www.suse.com/security/cve/CVE-2022-32888.html https://www.suse.com/security/cve/CVE-2022-32923.html https://www.suse.com/security/cve/CVE-2022-42799.html https://www.suse.com/security/cve/CVE-2022-42823.html https://www.suse.com/security/cve/CVE-2022-42824.html https://bugzilla.suse.com/1205120 https://bugzilla.suse.com/1205121 https://bugzilla.suse.com/1205122 https://bugzilla.suse.com/1205123 https://bugzilla.suse.com/1205124

1 0

SUSE-SU-2022:4209-1: Security update for libarchive
by opensuse-security＠opensuse.org 23 Nov '22

23 Nov '22

SUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4209-1 Rating: low References: #1205629 Cross-References: CVE-2022-36227 CVSS scores: CVE-2022-36227 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libarchive fixes the following issues: - CVE-2022-36227: Fixed potential NULL pointer dereference in __archive_write_allocate_filter() (bsc#1205629). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4209=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4209=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-4209=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4209=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4209=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libarchive-debugsource-3.5.1-150400.3.12.1 libarchive13-3.5.1-150400.3.12.1 libarchive13-debuginfo-3.5.1-150400.3.12.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): bsdtar-3.5.1-150400.3.12.1 bsdtar-debuginfo-3.5.1-150400.3.12.1 libarchive-debugsource-3.5.1-150400.3.12.1 libarchive-devel-3.5.1-150400.3.12.1 libarchive13-3.5.1-150400.3.12.1 libarchive13-debuginfo-3.5.1-150400.3.12.1 - openSUSE Leap 15.4 (x86_64): libarchive13-32bit-3.5.1-150400.3.12.1 libarchive13-32bit-debuginfo-3.5.1-150400.3.12.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): bsdtar-3.5.1-150400.3.12.1 bsdtar-debuginfo-3.5.1-150400.3.12.1 libarchive-debugsource-3.5.1-150400.3.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libarchive-debugsource-3.5.1-150400.3.12.1 libarchive-devel-3.5.1-150400.3.12.1 libarchive13-3.5.1-150400.3.12.1 libarchive13-debuginfo-3.5.1-150400.3.12.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libarchive-debugsource-3.5.1-150400.3.12.1 libarchive13-3.5.1-150400.3.12.1 libarchive13-debuginfo-3.5.1-150400.3.12.1 References: https://www.suse.com/security/cve/CVE-2022-36227.html https://bugzilla.suse.com/1205629

1 0

SUSE-SU-2022:4197-1: moderate: Security update for strongswan
by opensuse-security＠opensuse.org 23 Nov '22

23 Nov '22

SUSE Security Update: Security update for strongswan ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4197-1 Rating: moderate References: #1203556 SLE-20151 Cross-References: CVE-2022-40617 CVSS scores: CVE-2022-40617 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-40617 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability, contains one feature is now available. Description: This update for strongswan fixes the following issues: Security issues fixed: - CVE-2022-40617: Fixed that using untrusted URIs for revocation checking could lead to denial of service (bsc#1203556) Feature changes: - Enable Marvell plugin (jsc#SLE-20151) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4197=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-4197=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-4197=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4197=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): strongswan-5.8.2-150400.19.3.3 strongswan-debuginfo-5.8.2-150400.19.3.3 strongswan-debugsource-5.8.2-150400.19.3.3 strongswan-hmac-5.8.2-150400.19.3.3 strongswan-ipsec-5.8.2-150400.19.3.3 strongswan-ipsec-debuginfo-5.8.2-150400.19.3.3 strongswan-libs0-5.8.2-150400.19.3.3 strongswan-libs0-debuginfo-5.8.2-150400.19.3.3 strongswan-mysql-5.8.2-150400.19.3.3 strongswan-mysql-debuginfo-5.8.2-150400.19.3.3 strongswan-nm-5.8.2-150400.19.3.3 strongswan-nm-debuginfo-5.8.2-150400.19.3.3 strongswan-sqlite-5.8.2-150400.19.3.3 strongswan-sqlite-debuginfo-5.8.2-150400.19.3.3 - openSUSE Leap 15.4 (noarch): strongswan-doc-5.8.2-150400.19.3.3 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): strongswan-debuginfo-5.8.2-150400.19.3.3 strongswan-debugsource-5.8.2-150400.19.3.3 strongswan-nm-5.8.2-150400.19.3.3 strongswan-nm-debuginfo-5.8.2-150400.19.3.3 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x x86_64): strongswan-debuginfo-5.8.2-150400.19.3.3 strongswan-debugsource-5.8.2-150400.19.3.3 strongswan-nm-5.8.2-150400.19.3.3 strongswan-nm-debuginfo-5.8.2-150400.19.3.3 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): strongswan-5.8.2-150400.19.3.3 strongswan-debuginfo-5.8.2-150400.19.3.3 strongswan-debugsource-5.8.2-150400.19.3.3 strongswan-hmac-5.8.2-150400.19.3.3 strongswan-ipsec-5.8.2-150400.19.3.3 strongswan-ipsec-debuginfo-5.8.2-150400.19.3.3 strongswan-libs0-5.8.2-150400.19.3.3 strongswan-libs0-debuginfo-5.8.2-150400.19.3.3 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): strongswan-doc-5.8.2-150400.19.3.3 References: https://www.suse.com/security/cve/CVE-2022-40617.html https://bugzilla.suse.com/1203556

1 0

openSUSE-RU-2022:10213-1: Recommended update for yast2-theme
by maintenance＠opensuse.org 23 Nov '22

23 Nov '22

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10213-1 Rating: low References: Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yast2-theme syncs it with the current dependencies. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2022-10213=1 Package List: - openSUSE Leap 15.4 (noarch): yast2-theme-4.4.4-lp154.2.6.1 yast2-theme-breeze-4.4.4-lp154.2.6.1 yast2-theme-oxygen-4.4.4-lp154.2.6.1 References:

1 0

SUSE-RU-2022:4200-1: Recommended update for perl-DBD-SQLite
by maintenance＠opensuse.org 23 Nov '22

23 Nov '22

SUSE Recommended Update: Recommended update for perl-DBD-SQLite ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4200-1 Rating: low References: #1203742 Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-DBD-SQLite fixes the following issues: - Fixed a failing test when comparing lowercase data (bsc#1203742) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4200=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4200=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4200=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4200=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): perl-DBD-SQLite-1.66-150300.3.6.1 perl-DBD-SQLite-debuginfo-1.66-150300.3.6.1 perl-DBD-SQLite-debugsource-1.66-150300.3.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): perl-DBD-SQLite-1.66-150300.3.6.1 perl-DBD-SQLite-debuginfo-1.66-150300.3.6.1 perl-DBD-SQLite-debugsource-1.66-150300.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): perl-DBD-SQLite-1.66-150300.3.6.1 perl-DBD-SQLite-debuginfo-1.66-150300.3.6.1 perl-DBD-SQLite-debugsource-1.66-150300.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): perl-DBD-SQLite-1.66-150300.3.6.1 perl-DBD-SQLite-debuginfo-1.66-150300.3.6.1 perl-DBD-SQLite-debugsource-1.66-150300.3.6.1 References: https://bugzilla.suse.com/1203742

1 0

SUSE-SU-2022:4196-1: moderate: Security update for opensc
by opensuse-security＠opensuse.org 23 Nov '22

23 Nov '22

SUSE Security Update: Security update for opensc ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4196-1 Rating: moderate References: #1122756 Cross-References: CVE-2019-6502 CVSS scores: CVE-2019-6502 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-6502 (SUSE): 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opensc fixes the following issues: - CVE-2019-6502: Fixed memory leak in sc_context_create in ctx.c (bsc#1122756). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4196=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4196=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4196=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4196=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4196=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): opensc-0.19.0-150100.3.19.1 opensc-debuginfo-0.19.0-150100.3.19.1 opensc-debugsource-0.19.0-150100.3.19.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): opensc-0.19.0-150100.3.19.1 opensc-debuginfo-0.19.0-150100.3.19.1 opensc-debugsource-0.19.0-150100.3.19.1 - openSUSE Leap 15.3 (x86_64): opensc-32bit-0.19.0-150100.3.19.1 opensc-32bit-debuginfo-0.19.0-150100.3.19.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): opensc-0.19.0-150100.3.19.1 opensc-debuginfo-0.19.0-150100.3.19.1 opensc-debugsource-0.19.0-150100.3.19.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): opensc-0.19.0-150100.3.19.1 opensc-debuginfo-0.19.0-150100.3.19.1 opensc-debugsource-0.19.0-150100.3.19.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): opensc-0.19.0-150100.3.19.1 opensc-debuginfo-0.19.0-150100.3.19.1 opensc-debugsource-0.19.0-150100.3.19.1 References: https://www.suse.com/security/cve/CVE-2019-6502.html https://bugzilla.suse.com/1122756

1 0

SUSE-RU-2022:4198-1: moderate: Recommended update for rpm
by maintenance＠opensuse.org 23 Nov '22

23 Nov '22

SUSE Recommended Update: Recommended update for rpm ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4198-1 Rating: moderate References: #1202750 Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 SUSE Linux Enterprise Module for SUSE Manager Server 4.2 SUSE Linux Enterprise Module for SUSE Manager Server 4.3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpm fixes the following issues: - Strip critical bit in signature subpackage parsing - No longer deadlock DNF after pubkey import (bsc#1202750) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4198=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4198=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4198=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2022-4198=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.2-2022-4198=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-4198=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2022-4198=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-4198=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-4198=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-4198=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-4198=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-4198=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4198=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4198=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4198=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4198=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4198=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): python-rpm-debugsource-4.14.3-150300.52.1 python3-rpm-4.14.3-150300.52.1 python3-rpm-debuginfo-4.14.3-150300.52.1 rpm-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 rpm-ndb-4.14.3-150300.52.1 rpm-ndb-debuginfo-4.14.3-150300.52.1 rpm-ndb-debugsource-4.14.3-150300.52.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.52.1 python3-rpm-4.14.3-150300.52.1 python3-rpm-debuginfo-4.14.3-150300.52.1 rpm-4.14.3-150300.52.1 rpm-build-4.14.3-150300.52.1 rpm-build-debuginfo-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 rpm-devel-4.14.3-150300.52.1 rpm-ndb-4.14.3-150300.52.1 rpm-ndb-debuginfo-4.14.3-150300.52.1 rpm-ndb-debugsource-4.14.3-150300.52.1 - openSUSE Leap 15.4 (x86_64): rpm-32bit-4.14.3-150300.52.1 rpm-32bit-debuginfo-4.14.3-150300.52.1 rpm-ndb-32bit-4.14.3-150300.52.1 rpm-ndb-32bit-debuginfo-4.14.3-150300.52.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.52.1 python2-rpm-4.14.3-150300.52.1 python2-rpm-debuginfo-4.14.3-150300.52.1 python3-rpm-4.14.3-150300.52.1 python3-rpm-debuginfo-4.14.3-150300.52.1 rpm-4.14.3-150300.52.1 rpm-build-4.14.3-150300.52.1 rpm-build-debuginfo-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 rpm-devel-4.14.3-150300.52.1 rpm-ndb-4.14.3-150300.52.1 rpm-ndb-debuginfo-4.14.3-150300.52.1 rpm-ndb-debugsource-4.14.3-150300.52.1 - openSUSE Leap 15.3 (x86_64): rpm-32bit-4.14.3-150300.52.1 rpm-32bit-debuginfo-4.14.3-150300.52.1 rpm-ndb-32bit-4.14.3-150300.52.1 rpm-ndb-32bit-debuginfo-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.52.1 rpm-build-debuginfo-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.52.1 rpm-build-debuginfo-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.52.1 rpm-build-debuginfo-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.52.1 rpm-build-debuginfo-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.52.1 python2-rpm-4.14.3-150300.52.1 python2-rpm-debuginfo-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (aarch64 ppc64le s390x x86_64): rpm-ndb-4.14.3-150300.52.1 rpm-ndb-debuginfo-4.14.3-150300.52.1 rpm-ndb-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (aarch64 ppc64le s390x x86_64): rpm-ndb-4.14.3-150300.52.1 rpm-ndb-debuginfo-4.14.3-150300.52.1 rpm-ndb-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.52.1 rpm-build-debuginfo-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.52.1 rpm-build-debuginfo-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.52.1 python3-rpm-4.14.3-150300.52.1 python3-rpm-debuginfo-4.14.3-150300.52.1 rpm-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 rpm-devel-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): rpm-32bit-4.14.3-150300.52.1 rpm-32bit-debuginfo-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.52.1 python3-rpm-4.14.3-150300.52.1 python3-rpm-debuginfo-4.14.3-150300.52.1 rpm-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 rpm-devel-4.14.3-150300.52.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): rpm-32bit-4.14.3-150300.52.1 rpm-32bit-debuginfo-4.14.3-150300.52.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): python-rpm-debugsource-4.14.3-150300.52.1 python3-rpm-4.14.3-150300.52.1 python3-rpm-debuginfo-4.14.3-150300.52.1 rpm-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 rpm-ndb-4.14.3-150300.52.1 rpm-ndb-debuginfo-4.14.3-150300.52.1 rpm-ndb-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): python-rpm-debugsource-4.14.3-150300.52.1 python3-rpm-4.14.3-150300.52.1 python3-rpm-debuginfo-4.14.3-150300.52.1 rpm-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 rpm-ndb-4.14.3-150300.52.1 rpm-ndb-debuginfo-4.14.3-150300.52.1 rpm-ndb-debugsource-4.14.3-150300.52.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): python-rpm-debugsource-4.14.3-150300.52.1 python3-rpm-4.14.3-150300.52.1 python3-rpm-debuginfo-4.14.3-150300.52.1 rpm-4.14.3-150300.52.1 rpm-debuginfo-4.14.3-150300.52.1 rpm-debugsource-4.14.3-150300.52.1 References: https://bugzilla.suse.com/1202750

1 0

openSUSE-SU-2022:10211-1: moderate: Security update for Botan
by opensuse-security＠opensuse.org 23 Nov '22

23 Nov '22

openSUSE Security Update: Security update for Botan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10211-1 Rating: moderate References: #1205509 Cross-References: CVE-2022-43705 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for Botan fixes the following issues: - CVE-2022-43705: Fixed validation of embedded certificates was when checking OCSP responses (boo#1205509). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10211=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 s390x x86_64): Botan-2.18.2-bp154.2.3.1 libbotan-2-18-2.18.2-bp154.2.3.1 libbotan-devel-2.18.2-bp154.2.3.1 python3-botan-2.18.2-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (aarch64_ilp32): libbotan-2-18-64bit-2.18.2-bp154.2.3.1 libbotan-devel-64bit-2.18.2-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): Botan-doc-2.18.2-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (x86_64): libbotan-2-18-32bit-2.18.2-bp154.2.3.1 libbotan-devel-32bit-2.18.2-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-43705.html https://bugzilla.suse.com/1205509

1 0