December 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:10224-1: moderate: Recommended update for minetest-game
by maintenance＠opensuse.org 01 Dec '22

01 Dec '22

openSUSE Recommended Update: Recommended update for minetest-game ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10224-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for minetest-game fixes the following issues: Update to version 5.6.0 to match up minetest version * Improved cart movement behavior * Dynamic shadow intensity increases with cloud density * Allow mods to override player animation globalstep * Log API added * New translation: Polish * Translation updates: Ukrainian, Russian, German, Lojban, and Esperanto * Various bug fixes Update to version 5.5.0 & 5.5.1: * Add ��Read�� and ��Write�� tabs to book interface when you own the book (orbea) * Allow to write books without text or title (orbea) * Make identical keys stackable (Luis Royer) * Fix creative inventory trash slot not working for player named ��trash�� (Montandalar) * Fix sunlight propagation for glass stair/slab (An0n3m0us) * Fix glass bottle with firefly not being placable in vessels shelf (An0n3m0us) * Other bugfixes * Translations: Esperanto (Jason Cartwright), Russian (ptah-alexs), Japanese (nogajun), German (Wuzzy), Slovak (Daretmavi), French (Olivier Dragon), Swedish (ROllerozxa), Chinese (��), Ukrainian (baytuch) * player_api mod: Fix crash if player has no model (appgurueu) * player_api mod: Mods can now override globalstep by overriding player_api.globalstep (LoneWolfHT) * Shadow intensity (of dynamic shadows) changes with weather (lhofhansl) * Some cart movement behavior fixes (SmallJoker) * Fix some translations in uk and ru locales (baytuch) Update to version 5.4.1: * This is a maintenance release based on 5.4.0, it contains bugfixes but no new features. Update to 5.4.0: * Add crafting guide * Added 5 wood variants of Mese Post Light * Add environment sounds for lava and active furnace * Change several block sounds * Fix players sleeping in an occupied bed * Fix 'sleepwalking' in bed * Fix sleeping player flying off the bed when damaged and flying far away from the bed after death * Fix sleeping player being immobilized and bed undiggable after death * Fix furnace infotext not always updating when removing item * New translation: Slovak, Brazilian Portuguese and Lojban (admittedly not a very good translation) * Update existing translations Update to version 5.3.0 * Rename ��Dry Dirt�� and related blocks to ��Savanna Dirt�� and similar (paramat) * Added Wild Cotton: grows in savannas, drops Cotton Seeds (paramat) * Sort items into correct categories (An0n3m0us) * Tune cloud density variation (paramat) * Fix broken Creative inventory search in translation (sfan5) * Make Straw Stairs/Slabs usable as fuel (Paul Ouellette) * New textures: Dry Shrub, Brake Rail (Extex101, Hooded Ice) * Block particles when leaves decay, TNT explodes (sfan5) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10224=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10224=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): minetest-game-5.6.0-bp154.2.3.1 - openSUSE Backports SLE-15-SP3 (noarch): minetest-game-5.6.0-bp153.2.3.1 References:

1 0

SUSE-SU-2022:4301-1: important: Security update for nodejs10
by opensuse-security＠opensuse.org 01 Dec '22

01 Dec '22

SUSE Security Update: Security update for nodejs10 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4301-1 Rating: important References: #1205119 Cross-References: CVE-2022-43548 CVSS scores: CVE-2022-43548 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nodejs10 fixes the following issues: - CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4301=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4301=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-4301=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-4301=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-4301=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-4301=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-4301=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-4301=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-4301=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-4301=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-4301=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-4301=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-4301=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-4301=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-4301=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-4301=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-4301=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-4301=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-4301=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-4301=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-4301=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - openSUSE Leap 15.4 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - openSUSE Leap 15.3 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Manager Server 4.1 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Manager Retail Branch Server 4.1 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Manager Proxy 4.1 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Manager Proxy 4.1 (x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server for SAP 15 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise Server 15-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Enterprise Storage 7 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE Enterprise Storage 6 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 - SUSE CaaS Platform 4.0 (x86_64): nodejs10-10.24.1-150000.1.53.1 nodejs10-debuginfo-10.24.1-150000.1.53.1 nodejs10-debugsource-10.24.1-150000.1.53.1 nodejs10-devel-10.24.1-150000.1.53.1 npm10-10.24.1-150000.1.53.1 - SUSE CaaS Platform 4.0 (noarch): nodejs10-docs-10.24.1-150000.1.53.1 References: https://www.suse.com/security/cve/CVE-2022-43548.html https://bugzilla.suse.com/1205119

1 0

SUSE-SU-2022:4304-1: important: Security update for emacs
by opensuse-security＠opensuse.org 01 Dec '22

01 Dec '22

SUSE Security Update: Security update for emacs ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4304-1 Rating: important References: #1205822 Cross-References: CVE-2022-45939 CVSS scores: CVE-2022-45939 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for emacs fixes the following issues: - CVE-2022-45939: Fixed shell command injection via source code files when using ctags (bsc#1205822). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4304=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4304=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4304=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): emacs-27.2-150400.3.3.1 emacs-debuginfo-27.2-150400.3.3.1 emacs-debugsource-27.2-150400.3.3.1 emacs-nox-27.2-150400.3.3.1 emacs-nox-debuginfo-27.2-150400.3.3.1 emacs-x11-27.2-150400.3.3.1 emacs-x11-debuginfo-27.2-150400.3.3.1 etags-27.2-150400.3.3.1 etags-debuginfo-27.2-150400.3.3.1 - openSUSE Leap 15.4 (noarch): emacs-el-27.2-150400.3.3.1 emacs-info-27.2-150400.3.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): emacs-debuginfo-27.2-150400.3.3.1 emacs-debugsource-27.2-150400.3.3.1 emacs-x11-27.2-150400.3.3.1 emacs-x11-debuginfo-27.2-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): emacs-27.2-150400.3.3.1 emacs-debuginfo-27.2-150400.3.3.1 emacs-debugsource-27.2-150400.3.3.1 emacs-nox-27.2-150400.3.3.1 emacs-nox-debuginfo-27.2-150400.3.3.1 etags-27.2-150400.3.3.1 etags-debuginfo-27.2-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): emacs-el-27.2-150400.3.3.1 emacs-info-27.2-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-45939.html https://bugzilla.suse.com/1205822

1 0