December 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:4493-1: moderate: Recommended update for libsass
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for libsass ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4493-1 Rating: moderate References: #1201074 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libsass fixes the following issues: - Update libsass to fix Greybird Geeko theme build failures (bsc#1201074) - Update version to 3.6.5 (bsc#1201074): * Fix extend edge case going endlessly * Fix source-maps and how we count unicode characters * Fix seed generator if std::random_device fails * Fix url() containing exclamation mark causing an error * Fix Offset initialization when end was not given * Fix obvious backporting error in pseudo extend * Fix obvious identical subexpressions in op_color_number * Fix edge case regarding unit-less number equality as object keys * Revert compound re-ordering for non extended selectors * Prevent compiler warning about unnecessary copy - Update version to 3.6.4 * Fix parenthesization for selector schema and real parents * Add deprecation warning for global variable creation * Ensure correct output order of compound selectors * Handle loaded source code as shared objects * New custom memory allocator - disabled for now * Add back C-API getters for plugin paths * Fix abspath handling on windows without directory * Fix various edge case crashes * Fix segfault on directive ruleset * Fix heap-buffer-overflow in lexer * Fix stack-overflow in parser * Fix memory leak in parser * Fix memory leak in evaluation * Fix memory handling edge case * Fix some null pointer access crashes * Preparations for ongoing refactoring - from v3.6.3 * Fix compound extend warning * Fix extend being stuck in endless loop * Fix various edge-case segfault crashes * Extend error_src lifetime on c-api context * Fix memory leak in permutation function * Preserve indentation in nested mode - from v3.6.2 * Improve pseudo selector handling * Code improvements * Fix various functions arguments * Fix "call" for $function * Check weight argument on invert call * Improve makefile to use dylib extension on MacOS * Fix bug in scale-color with positive saturation * Minor API documentation improvements * Fix selector isInvisible logic * Fix evaluation of unary expressions in loops * Fix attribute selector equality with modifiers Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4493=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4493=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsass-debugsource-3.6.5-150200.4.3.1 libsass-devel-3.6.5-150200.4.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsass-debugsource-3.6.5-150200.4.3.1 libsass-devel-3.6.5-150200.4.3.1 References: https://bugzilla.suse.com/1201074

1 0

SUSE-RU-2022:4489-1: moderate: Recommended update for keepalived
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for keepalived ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4489-1 Rating: moderate References: PED-2086 SLE-11203 Affected Products: SUSE Linux Enterprise High Availability 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains two features can now be installed. Description: This update of keepalived fixes the following issues: - rebuild against the new net-snmp (jsc#SLE-11203). - rebuild against the new libipset (jsc#PED-2086). Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4489=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4489=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4489=1 - SUSE Linux Enterprise High Availability 15-SP4: zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2022-4489=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): keepalived-2.2.2-150400.3.7.2 keepalived-debuginfo-2.2.2-150400.3.7.2 keepalived-debugsource-2.2.2-150400.3.7.2 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): keepalived-2.2.2-150400.3.7.2 keepalived-debuginfo-2.2.2-150400.3.7.2 keepalived-debugsource-2.2.2-150400.3.7.2 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): keepalived-2.2.2-150400.3.7.2 keepalived-debuginfo-2.2.2-150400.3.7.2 keepalived-debugsource-2.2.2-150400.3.7.2 - SUSE Linux Enterprise High Availability 15-SP4 (aarch64 ppc64le s390x x86_64): keepalived-2.2.2-150400.3.7.2 keepalived-debuginfo-2.2.2-150400.3.7.2 keepalived-debugsource-2.2.2-150400.3.7.2 References:

1 0

SUSE-SU-2022:4488-1: moderate: Security update for apache2-mod_wsgi
by opensuse-security＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Security Update: Security update for apache2-mod_wsgi ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4488-1 Rating: moderate References: #1201634 Cross-References: CVE-2022-2255 CVSS scores: CVE-2022-2255 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-2255 (SUSE): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15-SP1 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache2-mod_wsgi fixes the following issues: - CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4488=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4488=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-4488=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-4488=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-4488=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2022-4488=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.1-2022-4488=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-4488=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-4488=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2022-4488=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-python3-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debugsource-4.5.18-150000.4.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-4.5.18-150000.4.6.1 apache2-mod_wsgi-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-debugsource-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debugsource-4.5.18-150000.4.6.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-python3-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debugsource-4.5.18-150000.4.6.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-python3-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debugsource-4.5.18-150000.4.6.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-python3-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debugsource-4.5.18-150000.4.6.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-python3-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debugsource-4.5.18-150000.4.6.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-python3-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-python3-debugsource-4.5.18-150000.4.6.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-4.5.18-150000.4.6.1 apache2-mod_wsgi-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-debugsource-4.5.18-150000.4.6.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-4.5.18-150000.4.6.1 apache2-mod_wsgi-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-debugsource-4.5.18-150000.4.6.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1 (aarch64 ppc64le s390x x86_64): apache2-mod_wsgi-4.5.18-150000.4.6.1 apache2-mod_wsgi-debuginfo-4.5.18-150000.4.6.1 apache2-mod_wsgi-debugsource-4.5.18-150000.4.6.1 References: https://www.suse.com/security/cve/CVE-2022-2255.html https://bugzilla.suse.com/1201634

1 0

SUSE-SU-2022:4479-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4479-1 Rating: important References: #1205874 #1205875 #1205876 #1205877 #1205878 #1205879 #1206017 Cross-References: CVE-2022-4283 CVE-2022-46340 CVE-2022-46341 CVE-2022-46342 CVE-2022-46343 CVE-2022-46344 CVSS scores: CVE-2022-4283 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-46340 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-46341 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-46342 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-46343 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVE-2022-46344 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874) - CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877) - CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free (bsc#1205879) - CVE-2022-46343: Server ScreenSaverSetAttributes use-after-free (bsc#1205878) - CVE-2022-46344: Server XIChangeProperty out-of-bounds access (bsc#1205876) - CVE-2022-4283: Reset the radio_groups pointer to NULL after freeing it (bsc#1206017) - Xi: return an error from XI property changes if verification failed (bsc#1205875) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4479=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-4479=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4479=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): xorg-x11-server-1.20.3-150400.38.13.1 xorg-x11-server-debuginfo-1.20.3-150400.38.13.1 xorg-x11-server-debugsource-1.20.3-150400.38.13.1 xorg-x11-server-extra-1.20.3-150400.38.13.1 xorg-x11-server-extra-debuginfo-1.20.3-150400.38.13.1 xorg-x11-server-sdk-1.20.3-150400.38.13.1 xorg-x11-server-source-1.20.3-150400.38.13.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): xorg-x11-server-debuginfo-1.20.3-150400.38.13.1 xorg-x11-server-debugsource-1.20.3-150400.38.13.1 xorg-x11-server-sdk-1.20.3-150400.38.13.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): xorg-x11-server-1.20.3-150400.38.13.1 xorg-x11-server-debuginfo-1.20.3-150400.38.13.1 xorg-x11-server-debugsource-1.20.3-150400.38.13.1 xorg-x11-server-extra-1.20.3-150400.38.13.1 xorg-x11-server-extra-debuginfo-1.20.3-150400.38.13.1 References: https://www.suse.com/security/cve/CVE-2022-4283.html https://www.suse.com/security/cve/CVE-2022-46340.html https://www.suse.com/security/cve/CVE-2022-46341.html https://www.suse.com/security/cve/CVE-2022-46342.html https://www.suse.com/security/cve/CVE-2022-46343.html https://www.suse.com/security/cve/CVE-2022-46344.html https://bugzilla.suse.com/1205874 https://bugzilla.suse.com/1205875 https://bugzilla.suse.com/1205876 https://bugzilla.suse.com/1205877 https://bugzilla.suse.com/1205878 https://bugzilla.suse.com/1205879 https://bugzilla.suse.com/1206017

1 0

SUSE-SU-2022:4480-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4480-1 Rating: important References: #1205874 #1205875 #1205876 #1205877 #1205878 #1205879 #1206017 Cross-References: CVE-2022-4283 CVE-2022-46340 CVE-2022-46341 CVE-2022-46342 CVE-2022-46343 CVE-2022-46344 CVSS scores: CVE-2022-4283 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-46340 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-46341 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-46342 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-46343 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVE-2022-46344 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874) - CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877) - CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free (bsc#1205879) - CVE-2022-46343: Server ScreenSaverSetAttributes use-after-free (bsc#1205878) - CVE-2022-46344: Server XIChangeProperty out-of-bounds access (bsc#1205876) - CVE-2022-4283: Reset the radio_groups pointer to NULL after freeing it (bsc#1206017) - Xi: return an error from XI property changes if verification failed (bsc#1205875) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4480=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4480=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-4480=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-4480=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-4480=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-4480=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-4480=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-4480=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-4480=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-4480=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-4480=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4480=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-4480=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-4480=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-4480=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): xorg-x11-server-wayland-1.20.3-150200.22.5.63.1 xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.63.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 xorg-x11-server-source-1.20.3-150200.22.5.63.1 xorg-x11-server-wayland-1.20.3-150200.22.5.63.1 xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.63.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 - SUSE Manager Proxy 4.1 (x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-wayland-1.20.3-150200.22.5.63.1 xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.63.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-wayland-1.20.3-150200.22.5.63.1 xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.63.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): xorg-x11-server-1.20.3-150200.22.5.63.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-1.20.3-150200.22.5.63.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.63.1 xorg-x11-server-sdk-1.20.3-150200.22.5.63.1 References: https://www.suse.com/security/cve/CVE-2022-4283.html https://www.suse.com/security/cve/CVE-2022-46340.html https://www.suse.com/security/cve/CVE-2022-46341.html https://www.suse.com/security/cve/CVE-2022-46342.html https://www.suse.com/security/cve/CVE-2022-46343.html https://www.suse.com/security/cve/CVE-2022-46344.html https://bugzilla.suse.com/1205874 https://bugzilla.suse.com/1205875 https://bugzilla.suse.com/1205876 https://bugzilla.suse.com/1205877 https://bugzilla.suse.com/1205878 https://bugzilla.suse.com/1205879 https://bugzilla.suse.com/1206017

1 0

SUSE-SU-2022:4487-1: important: Security update for xwayland
by opensuse-security＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Security Update: Security update for xwayland ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4487-1 Rating: important References: #1205874 #1205875 #1205876 #1205877 #1205878 #1205879 #1206017 Cross-References: CVE-2022-4283 CVE-2022-46340 CVE-2022-46341 CVE-2022-46342 CVE-2022-46343 CVE-2022-46344 CVSS scores: CVE-2022-4283 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-46340 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-46341 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-46342 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-46343 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVE-2022-46344 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: This update for xwayland fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874) - CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free (bsc#1205879) - CVE-2022-46344: Server XIChangeProperty out-of-bounds access (bsc#1205876) - CVE-2022-46343: Server ScreenSaverSetAttributes use-after-free (bsc#1205878) - CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877) - CVE-2022-4283: Reset the radio_groups pointer to NULL after freeing it (bsc#1206017) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4487=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-4487=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): xwayland-21.1.4-150400.3.6.1 xwayland-debuginfo-21.1.4-150400.3.6.1 xwayland-debugsource-21.1.4-150400.3.6.1 xwayland-devel-21.1.4-150400.3.6.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): xwayland-21.1.4-150400.3.6.1 xwayland-debuginfo-21.1.4-150400.3.6.1 xwayland-debugsource-21.1.4-150400.3.6.1 References: https://www.suse.com/security/cve/CVE-2022-4283.html https://www.suse.com/security/cve/CVE-2022-46340.html https://www.suse.com/security/cve/CVE-2022-46341.html https://www.suse.com/security/cve/CVE-2022-46342.html https://www.suse.com/security/cve/CVE-2022-46343.html https://www.suse.com/security/cve/CVE-2022-46344.html https://bugzilla.suse.com/1205874 https://bugzilla.suse.com/1205875 https://bugzilla.suse.com/1205876 https://bugzilla.suse.com/1205877 https://bugzilla.suse.com/1205878 https://bugzilla.suse.com/1205879 https://bugzilla.suse.com/1206017

1 0

SUSE-RU-2022:4492-1: moderate: Recommended update for mozilla-nss
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for mozilla-nss ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4492-1 Rating: moderate References: #1191546 #1198980 #1201298 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for mozilla-nss fixes the following issues: - FIPS: Disapprove the creation of DSA keys, i.e. mark them as not-fips (bsc#1201298) - FIPS: Allow the use SHA keygen mechs (bsc#1191546). - FIPS: ensure abort() is called when the repeat integrity check fails (bsc#1198980). Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4492=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4492=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4492=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4492=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libfreebl3-3.79.2-150400.3.18.1 libfreebl3-debuginfo-3.79.2-150400.3.18.1 libfreebl3-hmac-3.79.2-150400.3.18.1 libsoftokn3-3.79.2-150400.3.18.1 libsoftokn3-debuginfo-3.79.2-150400.3.18.1 libsoftokn3-hmac-3.79.2-150400.3.18.1 mozilla-nss-3.79.2-150400.3.18.1 mozilla-nss-certs-3.79.2-150400.3.18.1 mozilla-nss-certs-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-debugsource-3.79.2-150400.3.18.1 mozilla-nss-tools-3.79.2-150400.3.18.1 mozilla-nss-tools-debuginfo-3.79.2-150400.3.18.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libfreebl3-3.79.2-150400.3.18.1 libfreebl3-debuginfo-3.79.2-150400.3.18.1 libfreebl3-hmac-3.79.2-150400.3.18.1 libsoftokn3-3.79.2-150400.3.18.1 libsoftokn3-debuginfo-3.79.2-150400.3.18.1 libsoftokn3-hmac-3.79.2-150400.3.18.1 mozilla-nss-3.79.2-150400.3.18.1 mozilla-nss-certs-3.79.2-150400.3.18.1 mozilla-nss-certs-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-debugsource-3.79.2-150400.3.18.1 mozilla-nss-devel-3.79.2-150400.3.18.1 mozilla-nss-sysinit-3.79.2-150400.3.18.1 mozilla-nss-sysinit-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-tools-3.79.2-150400.3.18.1 mozilla-nss-tools-debuginfo-3.79.2-150400.3.18.1 - openSUSE Leap 15.4 (x86_64): libfreebl3-32bit-3.79.2-150400.3.18.1 libfreebl3-32bit-debuginfo-3.79.2-150400.3.18.1 libfreebl3-hmac-32bit-3.79.2-150400.3.18.1 libsoftokn3-32bit-3.79.2-150400.3.18.1 libsoftokn3-32bit-debuginfo-3.79.2-150400.3.18.1 libsoftokn3-hmac-32bit-3.79.2-150400.3.18.1 mozilla-nss-32bit-3.79.2-150400.3.18.1 mozilla-nss-32bit-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-certs-32bit-3.79.2-150400.3.18.1 mozilla-nss-certs-32bit-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-sysinit-32bit-3.79.2-150400.3.18.1 mozilla-nss-sysinit-32bit-debuginfo-3.79.2-150400.3.18.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libfreebl3-3.79.2-150400.3.18.1 libfreebl3-debuginfo-3.79.2-150400.3.18.1 libfreebl3-hmac-3.79.2-150400.3.18.1 libsoftokn3-3.79.2-150400.3.18.1 libsoftokn3-debuginfo-3.79.2-150400.3.18.1 libsoftokn3-hmac-3.79.2-150400.3.18.1 mozilla-nss-3.79.2-150400.3.18.1 mozilla-nss-certs-3.79.2-150400.3.18.1 mozilla-nss-certs-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-debugsource-3.79.2-150400.3.18.1 mozilla-nss-devel-3.79.2-150400.3.18.1 mozilla-nss-sysinit-3.79.2-150400.3.18.1 mozilla-nss-sysinit-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-tools-3.79.2-150400.3.18.1 mozilla-nss-tools-debuginfo-3.79.2-150400.3.18.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libfreebl3-32bit-3.79.2-150400.3.18.1 libfreebl3-32bit-debuginfo-3.79.2-150400.3.18.1 libfreebl3-hmac-32bit-3.79.2-150400.3.18.1 libsoftokn3-32bit-3.79.2-150400.3.18.1 libsoftokn3-32bit-debuginfo-3.79.2-150400.3.18.1 libsoftokn3-hmac-32bit-3.79.2-150400.3.18.1 mozilla-nss-32bit-3.79.2-150400.3.18.1 mozilla-nss-32bit-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-certs-32bit-3.79.2-150400.3.18.1 mozilla-nss-certs-32bit-debuginfo-3.79.2-150400.3.18.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libfreebl3-3.79.2-150400.3.18.1 libfreebl3-debuginfo-3.79.2-150400.3.18.1 libfreebl3-hmac-3.79.2-150400.3.18.1 libsoftokn3-3.79.2-150400.3.18.1 libsoftokn3-debuginfo-3.79.2-150400.3.18.1 libsoftokn3-hmac-3.79.2-150400.3.18.1 mozilla-nss-3.79.2-150400.3.18.1 mozilla-nss-certs-3.79.2-150400.3.18.1 mozilla-nss-certs-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-debuginfo-3.79.2-150400.3.18.1 mozilla-nss-debugsource-3.79.2-150400.3.18.1 mozilla-nss-tools-3.79.2-150400.3.18.1 mozilla-nss-tools-debuginfo-3.79.2-150400.3.18.1 References: https://bugzilla.suse.com/1191546 https://bugzilla.suse.com/1198980 https://bugzilla.suse.com/1201298

1 0

SUSE-RU-2022:4491-1: important: Recommended update for libsodium, python-Django, python-PyNaCl, python-cffi, python-hypothesis, python-packaging, python-readthedocs-sphinx-ext, python-semver, python-sphinx_rtd_theme
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for libsodium, python-Django, python-PyNaCl, python-cffi, python-hypothesis, python-packaging, python-readthedocs-sphinx-ext, python-semver, python-sphinx_rtd_theme ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4491-1 Rating: important References: #1111657 #1144506 #1148184 #1186870 #1199282 PM-3243 SLE-24629 Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has 5 recommended fixes and contains two features can now be installed. Description: This update for libsodium, python-Django, python-PyNaCl, python-cffi, python-hypothesis, python-packaging, python-readthedocs-sphinx-ext, python-semver, python-sphinx_rtd_theme fixes the following issues: libsodium: - Version update from 1.0.16 to 1.0.18 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) * Enterprise versions of Visual Studio are now supported * Visual Studio 2019 is now supported * 32-bit binaries for Visual Studio 2010 are now provided * Emscripten: print and printErr functions are overridden to send errors to the console, if there is one * Emscripten: UTF8ToString() is now exported since Pointer_stringify() has been deprecated * Libsodium version detection has been fixed in the CMake recipe * Generic hashing got a 10% speedup on AVX2. * New target: WebAssembly/WASI (compile with dist-builds/wasm32-wasi.sh) * New functions to map a hash to an edwards25519 point or get a random point: core_ed25519_from_hash() and core_ed25519_random() * crypto_core_ed25519_scalar_mul() has been implemented for scalar*scalar (mod L) multiplication * Support for the Ristretto group has been implemented for interoperability with wasm-crypto * Improvements have been made to the test suite * Portability improvements have been made * 'randombytes_salsa20' has been 'renamed to randombytes_internal' * Support for NativeClient has been removed * Most ((nonnull)) attributes have been relaxed to allow 0-length inputs to be NULL. * The -ftree-vectorize and -ftree-slp-vectorize compiler switches are now used, if available, for optimized builds * For the full list of changes please consult the packaged ChangeLog - Disable LTO to bypass build failures on Power PC architecture (bsc#1148184) python-cffi: - Version update from 1.11.2 to 1.15.0 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) * Fixed MANIFEST.in to include missing file for Windows arm64 support * Fixed Linux wheel build to use gcc default ISA for libffi * Updated setup.py Python trove specifiers to currently-tested Python versions * CPython 3.10 support (including wheels) * MacOS arm64 support (including wheels) * Initial Windows arm64 support * Misc. doc and test updates - Fix for using to proper void returning function not to corrupt memory in tests. (bsc#1111657) python-Django: - New package at version 2.0.7 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-hypothesis: - Version update from 3.40.1 to 3.76.0 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) * This release deprecates using floats for min_size and max_size * The type hint for average_size arguments has been changed from Optional[int] to None, because non-None values are always ignored and deprecated. * Fix a broken link in a docstring * Deprecate the use of 'min_size=None', setting the mdefault min_size to 0 * Strategies are now fully constructed and validated before the timer is started * Fix some broken formatting and links in the documentation * Check that the value of the print_blob setting is a PrintSettings instance * Being able to specify a boolean value was not intended, and is now deprecated. In addition, specifying True will now cause the blob to always be printed, instead of causing it to be suppressed. * Specifying any value that is not a PrintSettings or a boolean is now an error * Changes the documentation for hypothesis.strategies.datetimes, hypothesis.strategies.dates, hypothesis.strategies.times to use the new parameter names min_value and max_value instead of the deprecated names * Ensure that Hypothesis deprecation warnings display the code that emitted them when you��re not running in -Werror mode * For the full list of changes please consult the changelog at https://hypothesis.readthedocs.io/en/latest/changes.html#v3-76-0 python-packaging: - Version update from 16.8 to 21.3 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) * Fix testsuite on big-endian targets * Ignore python3.6.2 since the test doesn't support it * Replace the blank pyparsing 3 exclusion with a 3.0.5 exclusion * Fix a spelling mistake * Work around dependency generator issues (bsc#1186870) * Remove dependency on attrs (bsc#1144506) * Update documentation entry for 21.1. * Update pin to pyparsing to exclude 3.0.0. * PEP 656: musllinux support * Drop support for Python 2.7, Python 3.4 and Python 3.5. * Replace distutils usage with sysconfig * Add support for zip files in `parse_sdist_filename` * Use cached `_hash` attribute to short-circuit tag equality comparisons * Specify the default value for the `specifier` argument to `SpecifierSet` * Proper keyword-only "warn" argument in packaging.tags * Correctly remove prerelease suffixes from ~= check * Fix type hints for `Version.post`` and `Version.dev` * Use typing alias `UnparsedVersion`` * Improve type inference for `packaging.specifiers.filter()` * Tighten the return type of `canonicalize_version()` * For the full list of changes please consult the packaged CHANGELOG file python-PyNaCl: - Version update from 1.2.1 to 1.4.0 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) * Add dependency requirement to python-six, needed by the testsuite * Update `libsodium` to 1.0.18. * **BACKWARDS INCOMPATIBLE:** We no longer distribute 32-bit `manylinux1` wheels. Continuing to produce them was a maintenance burden. * Added support for Python 3.8, and removed support for Python 3.4. * Add low level bindings for extracting the seed and the public key from crypto_sign_ed25519 secret key * Add low level bindings for deterministic random generation. * Add `wheel` and `setuptools` setup_requirements in `setup.py` * Fix checks on very slow builders (#481, #495) * Add low-level bindings to ed25519 arithmetic functions * Update low-level blake2b state implementation * Fix wrong short-input behavior of SealedBox.decrypt() * Raise CryptPrefixError exception instead of InvalidkeyError when trying to check a password against a verifier stored in a unknown format * Add support for minimal builds of libsodium. Trying to call functions not available in a minimal build will raise an UnavailableError exception. To compile a minimal build of the bundled libsodium, set the SODIUM_INSTALL_MINIMAL environment variable to any non-empty string (e.g. `SODIUM_INSTALL_MINIMAL=1`) for setup. python-semver: - New package at version 2.13.0 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-sphinx_rtd_theme: - Version update from 0.2.4 to 0.5.1 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) * Add github, gitlab, bitbucket page arguments option * Add html language attribute * Add language to the JS output variable * Add open list spacing * Add option to style external links * Add pygments support * Add setuptools entry point allowing to use sphinx_rtd_theme as Sphinx html_theme directly. * Add Sphinx as a dependency * Allow setting 'rel' and 'title' attributes for stylesheets * Changed code and literals to use a native font stack * Color accessibility improvements on the left navigation * Compress our Javascript files * Do not rely on readthedocs.org for CSS/JS * Fix line height adjustments for Liberation Mono * Fix line number spacing to align with the code lines * Fix many sidebar glitches * Fix many styling issues * Fix mkdocs version selector * Fix small styling issues * Fix some HTML warnings and errors * Fix table centering * Hide Edit links on auto created pages * Include missing font files with the theme * Updated dependencies * Write theme version and build date at top of JavaScript and CSS Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4491=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4491=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4491=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-4491=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-4491=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-4491=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-4491=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4491=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4491=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4491=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4491=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4491=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): libsodium-debugsource-1.0.18-150000.4.6.1 libsodium23-1.0.18-150000.4.6.1 libsodium23-debuginfo-1.0.18-150000.4.6.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsodium-debugsource-1.0.18-150000.4.6.1 libsodium-devel-1.0.18-150000.4.6.1 libsodium23-1.0.18-150000.4.6.1 libsodium23-debuginfo-1.0.18-150000.4.6.1 python-PyNaCl-debuginfo-1.4.0-150000.3.6.6 python-PyNaCl-debugsource-1.4.0-150000.3.6.6 python3-PyNaCl-1.4.0-150000.3.6.6 python3-PyNaCl-debuginfo-1.4.0-150000.3.6.6 - openSUSE Leap 15.4 (noarch): python3-sphinx_rtd_theme-0.5.1-150000.3.5.1 - openSUSE Leap 15.4 (x86_64): libsodium23-32bit-1.0.18-150000.4.6.1 libsodium23-32bit-debuginfo-1.0.18-150000.4.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsodium-debugsource-1.0.18-150000.4.6.1 libsodium-devel-1.0.18-150000.4.6.1 libsodium23-1.0.18-150000.4.6.1 libsodium23-debuginfo-1.0.18-150000.4.6.1 python-PyNaCl-debuginfo-1.4.0-150000.3.6.6 python-PyNaCl-debugsource-1.4.0-150000.3.6.6 python2-PyNaCl-1.4.0-150000.3.6.6 python2-PyNaCl-debuginfo-1.4.0-150000.3.6.6 python3-PyNaCl-1.4.0-150000.3.6.6 python3-PyNaCl-debuginfo-1.4.0-150000.3.6.6 - openSUSE Leap 15.3 (noarch): python2-hypothesis-3.76.0-150000.3.3.1 python2-sphinx_rtd_theme-0.5.1-150000.3.5.1 python3-hypothesis-3.76.0-150000.3.3.1 python3-sphinx_rtd_theme-0.5.1-150000.3.5.1 - openSUSE Leap 15.3 (x86_64): libsodium23-32bit-1.0.18-150000.4.6.1 libsodium23-32bit-debuginfo-1.0.18-150000.4.6.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64): python-PyNaCl-debuginfo-1.4.0-150000.3.6.6 python-PyNaCl-debugsource-1.4.0-150000.3.6.6 python2-PyNaCl-1.4.0-150000.3.6.6 python2-PyNaCl-debuginfo-1.4.0-150000.3.6.6 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch): python3-sphinx_rtd_theme-0.5.1-150000.3.5.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (noarch): python2-sphinx_rtd_theme-0.5.1-150000.3.5.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (noarch): python2-sphinx_rtd_theme-0.5.1-150000.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsodium-debugsource-1.0.18-150000.4.6.1 libsodium-devel-1.0.18-150000.4.6.1 libsodium23-1.0.18-150000.4.6.1 libsodium23-debuginfo-1.0.18-150000.4.6.1 python-PyNaCl-debuginfo-1.4.0-150000.3.6.6 python-PyNaCl-debugsource-1.4.0-150000.3.6.6 python3-PyNaCl-1.4.0-150000.3.6.6 python3-PyNaCl-debuginfo-1.4.0-150000.3.6.6 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libsodium23-32bit-1.0.18-150000.4.6.1 libsodium23-32bit-debuginfo-1.0.18-150000.4.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python3-sphinx_rtd_theme-0.5.1-150000.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libsodium-debugsource-1.0.18-150000.4.6.1 libsodium-devel-1.0.18-150000.4.6.1 libsodium23-1.0.18-150000.4.6.1 libsodium23-debuginfo-1.0.18-150000.4.6.1 python-PyNaCl-debuginfo-1.4.0-150000.3.6.6 python-PyNaCl-debugsource-1.4.0-150000.3.6.6 python3-PyNaCl-1.4.0-150000.3.6.6 python3-PyNaCl-debuginfo-1.4.0-150000.3.6.6 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): python3-sphinx_rtd_theme-0.5.1-150000.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libsodium23-32bit-1.0.18-150000.4.6.1 libsodium23-32bit-debuginfo-1.0.18-150000.4.6.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libsodium-debugsource-1.0.18-150000.4.6.1 libsodium23-1.0.18-150000.4.6.1 libsodium23-debuginfo-1.0.18-150000.4.6.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libsodium-debugsource-1.0.18-150000.4.6.1 libsodium23-1.0.18-150000.4.6.1 libsodium23-debuginfo-1.0.18-150000.4.6.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libsodium-debugsource-1.0.18-150000.4.6.1 libsodium23-1.0.18-150000.4.6.1 libsodium23-debuginfo-1.0.18-150000.4.6.1 References: https://bugzilla.suse.com/1111657 https://bugzilla.suse.com/1144506 https://bugzilla.suse.com/1148184 https://bugzilla.suse.com/1186870 https://bugzilla.suse.com/1199282

1 0

SUSE-SU-2022:4478-1: moderate: Security update for capnproto
by opensuse-security＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Security Update: Security update for capnproto ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4478-1 Rating: moderate References: #1205968 Cross-References: CVE-2022-46149 CVSS scores: CVE-2022-46149 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2022-46149 (SUSE): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for capnproto fixes the following issues: - CVE-2022-46149: Fixed out of bounds read when handling a list of lists (bsc#1205968). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4478=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4478=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): capnproto-0.9.1-150400.3.4.1 capnproto-debuginfo-0.9.1-150400.3.4.1 capnproto-debugsource-0.9.1-150400.3.4.1 libcapnp-0_9-0.9.1-150400.3.4.1 libcapnp-0_9-debuginfo-0.9.1-150400.3.4.1 libcapnp-devel-0.9.1-150400.3.4.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): capnproto-debuginfo-0.9.1-150400.3.4.1 capnproto-debugsource-0.9.1-150400.3.4.1 libcapnp-0_9-0.9.1-150400.3.4.1 libcapnp-0_9-debuginfo-0.9.1-150400.3.4.1 References: https://www.suse.com/security/cve/CVE-2022-46149.html https://bugzilla.suse.com/1205968

1 0

SUSE-RU-2022:4474-1: moderate: Recommended update for python-paramiko
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for python-paramiko ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4474-1 Rating: moderate References: #1205132 Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-paramiko fixes the following issues: - Fix loading of RSA key (bsc#1205132) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4474=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4474=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-4474=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4474=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4474=1 Package List: - openSUSE Leap 15.4 (noarch): python-paramiko-doc-2.4.3-150100.6.18.1 python3-paramiko-2.4.3-150100.6.18.1 - openSUSE Leap 15.3 (noarch): python-paramiko-doc-2.4.3-150100.6.18.1 python2-paramiko-2.4.3-150100.6.18.1 python3-paramiko-2.4.3-150100.6.18.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (noarch): python2-paramiko-2.4.3-150100.6.18.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python3-paramiko-2.4.3-150100.6.18.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): python3-paramiko-2.4.3-150100.6.18.1 References: https://bugzilla.suse.com/1205132

1 0