December 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:4636-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 29 Dec '22

29 Dec '22

SUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4636-1 Rating: moderate References: #1206653 Cross-References: CVE-2022-46874 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for MozillaThunderbird fixes the following issues: Update to version 102.6.1 * fixed: Remote content did not load in user-defined signatures * fixed: Addons that added new action buttons were not shown for addon upgrades, requiring removal and reinstall * fixed: Various stability improvements * CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions (bsc#1206653) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4636=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-4636=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-4636=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-102.6.1-150200.8.99.1 MozillaThunderbird-debuginfo-102.6.1-150200.8.99.1 MozillaThunderbird-debugsource-102.6.1-150200.8.99.1 MozillaThunderbird-translations-common-102.6.1-150200.8.99.1 MozillaThunderbird-translations-other-102.6.1-150200.8.99.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): MozillaThunderbird-102.6.1-150200.8.99.1 MozillaThunderbird-debuginfo-102.6.1-150200.8.99.1 MozillaThunderbird-debugsource-102.6.1-150200.8.99.1 MozillaThunderbird-translations-common-102.6.1-150200.8.99.1 MozillaThunderbird-translations-other-102.6.1-150200.8.99.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): MozillaThunderbird-102.6.1-150200.8.99.1 MozillaThunderbird-debuginfo-102.6.1-150200.8.99.1 MozillaThunderbird-debugsource-102.6.1-150200.8.99.1 MozillaThunderbird-translations-common-102.6.1-150200.8.99.1 MozillaThunderbird-translations-other-102.6.1-150200.8.99.1 References: https://www.suse.com/security/cve/CVE-2022-46874.html https://bugzilla.suse.com/1206653

1 0

SUSE-SU-2022:4635-1: moderate: Security update for conmon
by opensuse-security＠opensuse.org 29 Dec '22

29 Dec '22

SUSE Security Update: Security update for conmon ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4635-1 Rating: moderate References: #1200285 Cross-References: CVE-2022-1708 CVSS scores: CVE-2022-1708 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-1708 (SUSE): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Containers 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for conmon fixes the following issues: conmon was updated to version 2.1.5: * don't leak syslog_identifier * logging: do not read more that the buf size * logging: fix error handling * Makefile: Fix install for FreeBSD * signal: Track changes to get_signal_descriptor in the FreeBSD version * Packit: initial enablement Update to version 2.1.4: * Fix a bug where conmon crashed when it got a SIGCHLD update to 2.1.3: * Stop using g_unix_signal_add() to avoid threads * Rename CLI optionlog-size-global-max to log-global-size-max Update to version 2.1.2: * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 bsc#1200285) * journald: print tag and name if both are specified * drop some logs to debug level Update to version 2.1.0 * logging: buffer partial messages to journald * exit: close all fds >= 3 * fix: cgroup: Free memory_cgroup_file_path if open fails. Update to version 2.0.32 * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor. * exit_command: Fix: unset subreaper attribute before running exit command Update to version 2.0.31 * logging: new mode -l passthrough * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald * conmon: Fix: free userdata files before exec cleanup Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4635=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4635=1 - SUSE Linux Enterprise Module for Containers 15-SP4: zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2022-4635=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4635=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): conmon-2.1.5-150400.3.3.1 conmon-debuginfo-2.1.5-150400.3.3.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): conmon-2.1.5-150400.3.3.1 conmon-debuginfo-2.1.5-150400.3.3.1 - SUSE Linux Enterprise Module for Containers 15-SP4 (aarch64 ppc64le s390x x86_64): conmon-2.1.5-150400.3.3.1 conmon-debuginfo-2.1.5-150400.3.3.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): conmon-2.1.5-150400.3.3.1 conmon-debuginfo-2.1.5-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-1708.html https://bugzilla.suse.com/1200285

1 0

SUSE-SU-2022:4634-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 29 Dec '22

29 Dec '22

SUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4634-1 Rating: important References: #1206474 Cross-References: CVE-2022-42856 CVSS scores: CVE-2022-42856 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-42856 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4634=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-4634=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4634=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4634=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-debuginfo-2.38.3-150400.4.25.1 libjavascriptcoregtk-5_0-0-2.38.3-150400.4.25.1 libjavascriptcoregtk-5_0-0-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-5_0-0-2.38.3-150400.4.25.1 libwebkit2gtk-5_0-0-debuginfo-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-4_1-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-5_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-4_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-4_1-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-5_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-4_1-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-5_0-2.38.3-150400.4.25.1 webkit-jsc-4-2.38.3-150400.4.25.1 webkit-jsc-4-debuginfo-2.38.3-150400.4.25.1 webkit-jsc-4.1-2.38.3-150400.4.25.1 webkit-jsc-4.1-debuginfo-2.38.3-150400.4.25.1 webkit-jsc-5.0-2.38.3-150400.4.25.1 webkit-jsc-5.0-debuginfo-2.38.3-150400.4.25.1 webkit2gtk-4_0-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk-4_1-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-4_1-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk-5_0-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-5_0-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk3-debugsource-2.38.3-150400.4.25.1 webkit2gtk3-devel-2.38.3-150400.4.25.1 webkit2gtk3-minibrowser-2.38.3-150400.4.25.1 webkit2gtk3-minibrowser-debuginfo-2.38.3-150400.4.25.1 webkit2gtk3-soup2-debugsource-2.38.3-150400.4.25.1 webkit2gtk3-soup2-devel-2.38.3-150400.4.25.1 webkit2gtk3-soup2-minibrowser-2.38.3-150400.4.25.1 webkit2gtk3-soup2-minibrowser-debuginfo-2.38.3-150400.4.25.1 webkit2gtk4-debugsource-2.38.3-150400.4.25.1 webkit2gtk4-devel-2.38.3-150400.4.25.1 webkit2gtk4-minibrowser-2.38.3-150400.4.25.1 webkit2gtk4-minibrowser-debuginfo-2.38.3-150400.4.25.1 - openSUSE Leap 15.4 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-32bit-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-32bit-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-32bit-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-32bit-debuginfo-2.38.3-150400.4.25.1 - openSUSE Leap 15.4 (noarch): WebKit2GTK-4.0-lang-2.38.3-150400.4.25.1 WebKit2GTK-4.1-lang-2.38.3-150400.4.25.1 WebKit2GTK-5.0-lang-2.38.3-150400.4.25.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-5_0-0-2.38.3-150400.4.25.1 libjavascriptcoregtk-5_0-0-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-5_0-0-2.38.3-150400.4.25.1 libwebkit2gtk-5_0-0-debuginfo-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-5_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-5_0-2.38.3-150400.4.25.1 webkit2gtk-5_0-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-5_0-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk4-debugsource-2.38.3-150400.4.25.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_1-0-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-debuginfo-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-4_1-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-4_1-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-4_1-2.38.3-150400.4.25.1 webkit2gtk-4_1-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-4_1-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk3-debugsource-2.38.3-150400.4.25.1 webkit2gtk3-devel-2.38.3-150400.4.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-4_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150400.4.25.1 webkit2gtk-4_0-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk3-soup2-debugsource-2.38.3-150400.4.25.1 webkit2gtk3-soup2-devel-2.38.3-150400.4.25.1 References: https://www.suse.com/security/cve/CVE-2022-42856.html https://bugzilla.suse.com/1206474

1 0

SUSE-SU-2022:4630-1: important: Security update for systemd
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4630-1 Rating: important References: #1200723 #1203857 #1204423 #1205000 Cross-References: CVE-2022-4415 CVSS scores: CVE-2022-4415 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). Bug fixes: - Support by-path devlink for multipath nvme block devices (bsc#1200723). - Set SYSTEMD_NSS_DYNAMIC_BYPASS=1 env var for dbus-daemon (bsc#1203857). - Restrict cpu rule to x86_64, and also update the rule files to make use of the "CONST{arch}" syntax (bsc#1204423). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4630=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4630=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4630=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2022-4630=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2022-4630=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2022-4630=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2022-4630=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2022-4630=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4630=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4630=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4630=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4630=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2022-4630=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2022-4630=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2022-4630=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nss-mymachines-246.16-150300.7.57.1 nss-mymachines-debuginfo-246.16-150300.7.57.1 nss-resolve-246.16-150300.7.57.1 nss-resolve-debuginfo-246.16-150300.7.57.1 systemd-logger-246.16-150300.7.57.1 - openSUSE Leap 15.4 (x86_64): nss-mymachines-32bit-246.16-150300.7.57.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.57.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 nss-myhostname-246.16-150300.7.57.1 nss-myhostname-debuginfo-246.16-150300.7.57.1 nss-mymachines-246.16-150300.7.57.1 nss-mymachines-debuginfo-246.16-150300.7.57.1 nss-resolve-246.16-150300.7.57.1 nss-resolve-debuginfo-246.16-150300.7.57.1 nss-systemd-246.16-150300.7.57.1 nss-systemd-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-logger-246.16-150300.7.57.1 systemd-network-246.16-150300.7.57.1 systemd-network-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - openSUSE Leap 15.3 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev-devel-32bit-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 nss-myhostname-32bit-246.16-150300.7.57.1 nss-myhostname-32bit-debuginfo-246.16-150300.7.57.1 nss-mymachines-32bit-246.16-150300.7.57.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - openSUSE Leap 15.3 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Manager Server 4.2 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Manager Server 4.2 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Manager Retail Branch Server 4.2 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Manager Proxy 4.2 (x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Manager Proxy 4.2 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Enterprise Storage 7.1 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Enterprise Storage 7.1 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 References: https://www.suse.com/security/cve/CVE-2022-4415.html https://bugzilla.suse.com/1200723 https://bugzilla.suse.com/1203857 https://bugzilla.suse.com/1204423 https://bugzilla.suse.com/1205000

1 0

SUSE-RU-2022:4632-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by maintenance＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Recommended Update: Recommended update for lifecycle-data-sle-module-live-patching ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4632-1 Rating: moderate References: #1020320 Affected Products: SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15-SP1 SUSE Linux Enterprise Module for Live Patching 15-SP2 SUSE Linux Enterprise Module for Live Patching 15-SP3 SUSE Linux Enterprise Module for Live Patching 15-SP4 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lifecycle-data-sle-module-live-patching fixes the following issues: - Added data for 4_12_14-150000_150_101, 4_12_14-150000_150_104, 4_12_14-150100_197_123, 4_12_14-150100_197_126, 5_14_21-150400_24_21, 5_14_21-150400_24_28, 5_3_18-150200_24_129, 5_3_18-150200_24_134, 5_3_18-150300_59_93, 5_3_18-150300_59_98. (bsc#1020320) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4632=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15-SP4: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15-SP3: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15-SP2: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15-SP1: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-2022-4632=1 Package List: - openSUSE Leap 15.4 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - openSUSE Leap 15.3 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15-SP4 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15-SP3 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15-SP2 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15-SP1 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 References: https://bugzilla.suse.com/1020320

1 0

SUSE-SU-2022:4633-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4633-1 Rating: moderate References: #1206309 Cross-References: CVE-2022-43552 CVSS scores: CVE-2022-43552 (SUSE): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Realtime Extension 15-SP3 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for curl fixes the following issues: - CVE-2022-43552: HTTP Proxy deny use-after-free (bsc#1206309). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4633=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4633=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4633=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4633=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4633=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl-devel-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 - openSUSE Leap 15.3 (x86_64): libcurl-devel-32bit-7.66.0-150200.4.45.1 libcurl4-32bit-7.66.0-150200.4.45.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.45.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl-devel-7.66.0-150200.4.45.1 libcurl4-32bit-7.66.0-150200.4.45.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 References: https://www.suse.com/security/cve/CVE-2022-43552.html https://bugzilla.suse.com/1206309

1 0

SUSE-SU-2022:4628-1: moderate: Security update for sqlite3
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4628-1 Rating: moderate References: #1206337 Cross-References: CVE-2022-46908 CVSS scores: CVE-2022-46908 (NVD) : 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L CVE-2022-46908 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 fixes the following issues: - CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism, when relying on --safe for execution of an untrusted CLI script (bsc#1206337). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4628=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4628=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4628=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4628=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4628=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4628=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4628=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4628=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4628=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - openSUSE Leap Micro 5.2 (aarch64 x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-devel-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - openSUSE Leap 15.4 (x86_64): libsqlite3-0-32bit-3.39.3-150000.3.20.1 libsqlite3-0-32bit-debuginfo-3.39.3-150000.3.20.1 - openSUSE Leap 15.4 (noarch): sqlite3-doc-3.39.3-150000.3.20.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-devel-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - openSUSE Leap 15.3 (x86_64): libsqlite3-0-32bit-3.39.3-150000.3.20.1 libsqlite3-0-32bit-debuginfo-3.39.3-150000.3.20.1 - openSUSE Leap 15.3 (noarch): sqlite3-doc-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-32bit-3.39.3-150000.3.20.1 libsqlite3-0-32bit-debuginfo-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-devel-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-devel-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libsqlite3-0-32bit-3.39.3-150000.3.20.1 libsqlite3-0-32bit-debuginfo-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 References: https://www.suse.com/security/cve/CVE-2022-46908.html https://bugzilla.suse.com/1206337

1 0

SUSE-RU-2022:4632-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by maintenance＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Recommended Update: Recommended update for lifecycle-data-sle-module-live-patching ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4632-1 Rating: moderate References: #1020320 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lifecycle-data-sle-module-live-patching fixes the following issues: - Added data for 4_12_14-150000_150_101, 4_12_14-150000_150_104, 4_12_14-150100_197_123, 4_12_14-150100_197_126, 5_14_21-150400_24_21, 5_14_21-150400_24_28, 5_3_18-150200_24_129, 5_3_18-150200_24_134, 5_3_18-150300_59_93, 5_3_18-150300_59_98. (bsc#1020320) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4632=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4632=1 Package List: - openSUSE Leap 15.4 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - openSUSE Leap 15.3 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 References: https://bugzilla.suse.com/1020320

1 0

SUSE-SU-2022:4631-1: important: Security update for vim
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4631-1 Rating: important References: #1204779 #1205797 #1206028 #1206071 #1206072 #1206075 #1206077 Cross-References: CVE-2022-3491 CVE-2022-3520 CVE-2022-3591 CVE-2022-3705 CVE-2022-4141 CVE-2022-4292 CVE-2022-4293 CVSS scores: CVE-2022-3491 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-3491 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-3520 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-3520 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-3591 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-3591 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-3705 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-3705 (SUSE): 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-4141 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4141 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2022-4292 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4292 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4293 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-4293 (SUSE): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for vim fixes the following issues: Updated to version 9.0.1040: - CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742 (bsc#1206028). - CVE-2022-3520: vim: Heap-based Buffer Overflow (bsc#1206071). - CVE-2022-3591: vim: Use After Free (bsc#1206072). - CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882 (bsc#1206075). - CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804 (bsc#1206077). - CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11 (bsc#1205797). - CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c (bsc#1204779). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4631=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4631=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4631=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4631=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2022-4631=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-4631=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2022-4631=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-4631=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2022-4631=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-4631=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2022-4631=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-4631=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-4631=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2022-4631=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-4631=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-4631=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4631=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4631=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4631=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4631=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4631=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4631=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2022-4631=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2022-4631=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-4631=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-4631=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2022-4631=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-4631=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-4631=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - openSUSE Leap Micro 5.3 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - openSUSE Leap Micro 5.2 (aarch64 x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - openSUSE Leap Micro 5.2 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - openSUSE Leap 15.4 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - openSUSE Leap 15.3 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Manager Server 4.2 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Manager Server 4.1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Retail Branch Server 4.2 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Manager Retail Branch Server 4.1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Proxy 4.2 (x86_64): vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Manager Proxy 4.2 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Proxy 4.1 (x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Manager Proxy 4.1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.3 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.2 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.1 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 7.1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 7 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 6 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE CaaS Platform 4.0 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE CaaS Platform 4.0 (x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 References: https://www.suse.com/security/cve/CVE-2022-3491.html https://www.suse.com/security/cve/CVE-2022-3520.html https://www.suse.com/security/cve/CVE-2022-3591.html https://www.suse.com/security/cve/CVE-2022-3705.html https://www.suse.com/security/cve/CVE-2022-4141.html https://www.suse.com/security/cve/CVE-2022-4292.html https://www.suse.com/security/cve/CVE-2022-4293.html https://bugzilla.suse.com/1204779 https://bugzilla.suse.com/1205797 https://bugzilla.suse.com/1206028 https://bugzilla.suse.com/1206071 https://bugzilla.suse.com/1206072 https://bugzilla.suse.com/1206075 https://bugzilla.suse.com/1206077

1 0

SUSE-SU-2022:4629-1: important: Security update for systemd
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4629-1 Rating: important References: #1200723 #1205000 Cross-References: CVE-2022-4415 CVSS scores: CVE-2022-4415 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). Bug fixes: - Support by-path devlink for multipath nvme block devices (bsc#1200723). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4629=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4629=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4629=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4629=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libsystemd0-249.12-150400.8.16.1 libsystemd0-debuginfo-249.12-150400.8.16.1 libudev1-249.12-150400.8.16.1 libudev1-debuginfo-249.12-150400.8.16.1 systemd-249.12-150400.8.16.1 systemd-container-249.12-150400.8.16.1 systemd-container-debuginfo-249.12-150400.8.16.1 systemd-debuginfo-249.12-150400.8.16.1 systemd-debugsource-249.12-150400.8.16.1 systemd-journal-remote-249.12-150400.8.16.1 systemd-journal-remote-debuginfo-249.12-150400.8.16.1 systemd-sysvinit-249.12-150400.8.16.1 udev-249.12-150400.8.16.1 udev-debuginfo-249.12-150400.8.16.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.12-150400.8.16.1 libsystemd0-debuginfo-249.12-150400.8.16.1 libudev1-249.12-150400.8.16.1 libudev1-debuginfo-249.12-150400.8.16.1 nss-myhostname-249.12-150400.8.16.1 nss-myhostname-debuginfo-249.12-150400.8.16.1 nss-systemd-249.12-150400.8.16.1 nss-systemd-debuginfo-249.12-150400.8.16.1 systemd-249.12-150400.8.16.1 systemd-container-249.12-150400.8.16.1 systemd-container-debuginfo-249.12-150400.8.16.1 systemd-coredump-249.12-150400.8.16.1 systemd-coredump-debuginfo-249.12-150400.8.16.1 systemd-debuginfo-249.12-150400.8.16.1 systemd-debugsource-249.12-150400.8.16.1 systemd-devel-249.12-150400.8.16.1 systemd-doc-249.12-150400.8.16.1 systemd-experimental-249.12-150400.8.16.1 systemd-experimental-debuginfo-249.12-150400.8.16.1 systemd-journal-remote-249.12-150400.8.16.1 systemd-journal-remote-debuginfo-249.12-150400.8.16.1 systemd-network-249.12-150400.8.16.1 systemd-network-debuginfo-249.12-150400.8.16.1 systemd-portable-249.12-150400.8.16.1 systemd-portable-debuginfo-249.12-150400.8.16.1 systemd-sysvinit-249.12-150400.8.16.1 systemd-testsuite-249.12-150400.8.16.1 systemd-testsuite-debuginfo-249.12-150400.8.16.1 udev-249.12-150400.8.16.1 udev-debuginfo-249.12-150400.8.16.1 - openSUSE Leap 15.4 (x86_64): libsystemd0-32bit-249.12-150400.8.16.1 libsystemd0-32bit-debuginfo-249.12-150400.8.16.1 libudev1-32bit-249.12-150400.8.16.1 libudev1-32bit-debuginfo-249.12-150400.8.16.1 nss-myhostname-32bit-249.12-150400.8.16.1 nss-myhostname-32bit-debuginfo-249.12-150400.8.16.1 systemd-32bit-249.12-150400.8.16.1 systemd-32bit-debuginfo-249.12-150400.8.16.1 - openSUSE Leap 15.4 (noarch): systemd-lang-249.12-150400.8.16.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.12-150400.8.16.1 libsystemd0-debuginfo-249.12-150400.8.16.1 libudev1-249.12-150400.8.16.1 libudev1-debuginfo-249.12-150400.8.16.1 systemd-249.12-150400.8.16.1 systemd-container-249.12-150400.8.16.1 systemd-container-debuginfo-249.12-150400.8.16.1 systemd-coredump-249.12-150400.8.16.1 systemd-coredump-debuginfo-249.12-150400.8.16.1 systemd-debuginfo-249.12-150400.8.16.1 systemd-debugsource-249.12-150400.8.16.1 systemd-devel-249.12-150400.8.16.1 systemd-doc-249.12-150400.8.16.1 systemd-sysvinit-249.12-150400.8.16.1 udev-249.12-150400.8.16.1 udev-debuginfo-249.12-150400.8.16.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): systemd-lang-249.12-150400.8.16.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libsystemd0-32bit-249.12-150400.8.16.1 libsystemd0-32bit-debuginfo-249.12-150400.8.16.1 libudev1-32bit-249.12-150400.8.16.1 libudev1-32bit-debuginfo-249.12-150400.8.16.1 systemd-32bit-249.12-150400.8.16.1 systemd-32bit-debuginfo-249.12-150400.8.16.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libsystemd0-249.12-150400.8.16.1 libsystemd0-debuginfo-249.12-150400.8.16.1 libudev1-249.12-150400.8.16.1 libudev1-debuginfo-249.12-150400.8.16.1 systemd-249.12-150400.8.16.1 systemd-container-249.12-150400.8.16.1 systemd-container-debuginfo-249.12-150400.8.16.1 systemd-debuginfo-249.12-150400.8.16.1 systemd-debugsource-249.12-150400.8.16.1 systemd-journal-remote-249.12-150400.8.16.1 systemd-journal-remote-debuginfo-249.12-150400.8.16.1 systemd-sysvinit-249.12-150400.8.16.1 udev-249.12-150400.8.16.1 udev-debuginfo-249.12-150400.8.16.1 References: https://www.suse.com/security/cve/CVE-2022-4415.html https://bugzilla.suse.com/1200723 https://bugzilla.suse.com/1205000

1 0