December 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:4469-1: important: Recommended update for sudo
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for sudo ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4469-1 Rating: important References: #1197998 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sudo fixes the following issues: - Change sudo-ldap schema from ASCII to UTF8 to fix a regression introduced in a previous maintenance update (bsc#1197998) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4469=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4469=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4469=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4469=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): sudo-1.9.9-150400.4.9.1 sudo-debuginfo-1.9.9-150400.4.9.1 sudo-debugsource-1.9.9-150400.4.9.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): sudo-1.9.9-150400.4.9.1 sudo-debuginfo-1.9.9-150400.4.9.1 sudo-debugsource-1.9.9-150400.4.9.1 sudo-devel-1.9.9-150400.4.9.1 sudo-plugin-python-1.9.9-150400.4.9.1 sudo-plugin-python-debuginfo-1.9.9-150400.4.9.1 sudo-test-1.9.9-150400.4.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): sudo-1.9.9-150400.4.9.1 sudo-debuginfo-1.9.9-150400.4.9.1 sudo-debugsource-1.9.9-150400.4.9.1 sudo-devel-1.9.9-150400.4.9.1 sudo-plugin-python-1.9.9-150400.4.9.1 sudo-plugin-python-debuginfo-1.9.9-150400.4.9.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): sudo-1.9.9-150400.4.9.1 sudo-debuginfo-1.9.9-150400.4.9.1 sudo-debugsource-1.9.9-150400.4.9.1 References: https://bugzilla.suse.com/1197998

1 0

SUSE-FU-2022:4464-1: important: YaST
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Feature Update: YaST ______________________________________________________________________________ Announcement ID: SUSE-FU-2022:4464-1 Rating: important References: #1204180 #1205918 SLE-24764 SLE-25087 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Installer 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two feature fixes and contains two features can now be installed. Description: This update for YaST fixes the following issues: autoyast2: - Add needed packages for kdump if the product enables kdump by default (bsc#1204180) - Add support for DISA STIG security policy validation (jsc#SLE-25087, jsc#SLE-24764) skelcd-control-leanos: - Add support for DISA STIG security policy validation (jsc#SLE-25087, jsc#SLE-24764) yast2-installation: - Fixed the help in the installation summary (jsc#SLE-25087, jsc#SLE-24764) - Write configuration for ssg-apply script according to the enabled security policy (jsc#SLE-25087, jsc#SLE-24764) yast2-schema-default: - Add support for DISA STIG security policy validation (jsc#SLE-25087, jsc#SLE-24764) yast2-security: - Fixed wrong steps count causing a crash during saving (bsc#1205918) - Disable the ssg-apply service if the selected SCAP action is "do nothing" (jsc#SLE-25087, jsc#SLE-24764) - Add support for DISA STIG security policy validation (jsc#SLE-25087, jsc#SLE-24764) yast2-storage-ng: - Validate security policies in both guided proposal and partitioner (jsc#SLE-25087, jsc#SLE-24764) Patch Instructions: To install this SUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4464=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4464=1 - SUSE Linux Enterprise Installer 15-SP4: zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2022-4464=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): yast2-schema-default-4.4.15-150400.3.9.1 yast2-schema-micro-4.4.15-150400.3.9.1 yast2-storage-ng-4.4.41-150400.3.6.1 - openSUSE Leap 15.4 (noarch): autoyast2-4.4.43-150400.3.16.1 autoyast2-installation-4.4.43-150400.3.16.1 yast2-installation-4.4.58-150400.3.15.1 yast2-security-4.4.17-150400.3.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): yast2-schema-default-4.4.15-150400.3.9.1 yast2-storage-ng-4.4.41-150400.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): autoyast2-4.4.43-150400.3.16.1 autoyast2-installation-4.4.43-150400.3.16.1 yast2-installation-4.4.58-150400.3.15.1 yast2-security-4.4.17-150400.3.10.1 - SUSE Linux Enterprise Installer 15-SP4 (aarch64 ppc64le s390x x86_64): yast2-schema-default-4.4.15-150400.3.9.1 yast2-schema-micro-4.4.15-150400.3.9.1 yast2-storage-ng-4.4.41-150400.3.6.1 - SUSE Linux Enterprise Installer 15-SP4 (noarch): autoyast2-4.4.43-150400.3.16.1 autoyast2-installation-4.4.43-150400.3.16.1 yast2-installation-4.4.58-150400.3.15.1 yast2-security-4.4.17-150400.3.10.1 References: https://bugzilla.suse.com/1204180 https://bugzilla.suse.com/1205918

1 0

SUSE-RU-2022:4470-1: important: Recommended update for sudo
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for sudo ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4470-1 Rating: important References: #1197998 Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sudo fixes the following issues: - Change sudo-ldap schema from ASCII to UTF8 to fix a regression introduced in a previous maintenance update (bsc#1197998) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4470=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4470=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4470=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4470=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4470=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): sudo-1.9.5p2-150300.3.16.1 sudo-debuginfo-1.9.5p2-150300.3.16.1 sudo-debugsource-1.9.5p2-150300.3.16.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): sudo-1.9.5p2-150300.3.16.1 sudo-debuginfo-1.9.5p2-150300.3.16.1 sudo-debugsource-1.9.5p2-150300.3.16.1 sudo-devel-1.9.5p2-150300.3.16.1 sudo-plugin-python-1.9.5p2-150300.3.16.1 sudo-plugin-python-debuginfo-1.9.5p2-150300.3.16.1 sudo-test-1.9.5p2-150300.3.16.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): sudo-1.9.5p2-150300.3.16.1 sudo-debuginfo-1.9.5p2-150300.3.16.1 sudo-debugsource-1.9.5p2-150300.3.16.1 sudo-devel-1.9.5p2-150300.3.16.1 sudo-plugin-python-1.9.5p2-150300.3.16.1 sudo-plugin-python-debuginfo-1.9.5p2-150300.3.16.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): sudo-1.9.5p2-150300.3.16.1 sudo-debuginfo-1.9.5p2-150300.3.16.1 sudo-debugsource-1.9.5p2-150300.3.16.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): sudo-1.9.5p2-150300.3.16.1 sudo-debuginfo-1.9.5p2-150300.3.16.1 sudo-debugsource-1.9.5p2-150300.3.16.1 References: https://bugzilla.suse.com/1197998

1 0

SUSE-RU-2022:4466-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4466-1 Rating: moderate References: #1203896 Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kiwi fixes the following issues: Version update from 9.24.36 to 9.24.43: - Add example aarch64 integration test for Ubuntu - Add option '--target-arch' for image info to allow cross architecture dependency solving - Add support for group id in users setting - Fix error handling for setfiles policy lookup and ensure the path to run scandir is properly created - Fix handling of signing_keys in cmdline options - Fix helper method to detect dracut outfile format - Fix 'kexec' options setup in kiwi-dump-reboot - Fix issues with the setfiles SELinux relabel command - Prefer file based syscall in kexec when possible, needed to support boot on a secure boot enabled system (bsc#1203896) - Setup SELinux on every system prepare / build Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4466=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4466=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4466=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4466=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-4466=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-4466=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4466=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4466=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4466=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): dracut-kiwi-lib-9.24.43-150100.3.56.3 dracut-kiwi-oem-dump-9.24.43-150100.3.56.3 dracut-kiwi-oem-repart-9.24.43-150100.3.56.3 python-kiwi-debugsource-9.24.43-150100.3.56.3 - openSUSE Leap Micro 5.2 (aarch64 x86_64): dracut-kiwi-lib-9.24.43-150100.3.56.3 dracut-kiwi-oem-dump-9.24.43-150100.3.56.3 dracut-kiwi-oem-repart-9.24.43-150100.3.56.3 python-kiwi-debugsource-9.24.43-150100.3.56.3 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.43-150100.3.56.3 dracut-kiwi-live-9.24.43-150100.3.56.3 dracut-kiwi-oem-dump-9.24.43-150100.3.56.3 dracut-kiwi-oem-repart-9.24.43-150100.3.56.3 dracut-kiwi-overlay-9.24.43-150100.3.56.3 kiwi-man-pages-9.24.43-150100.3.56.3 kiwi-systemdeps-9.24.43-150100.3.56.3 kiwi-systemdeps-bootloaders-9.24.43-150100.3.56.3 kiwi-systemdeps-containers-9.24.43-150100.3.56.3 kiwi-systemdeps-core-9.24.43-150100.3.56.3 kiwi-systemdeps-disk-images-9.24.43-150100.3.56.3 kiwi-systemdeps-filesystems-9.24.43-150100.3.56.3 kiwi-systemdeps-image-validation-9.24.43-150100.3.56.3 kiwi-systemdeps-iso-media-9.24.43-150100.3.56.3 kiwi-tools-9.24.43-150100.3.56.3 kiwi-tools-debuginfo-9.24.43-150100.3.56.3 python-kiwi-debugsource-9.24.43-150100.3.56.3 python3-kiwi-9.24.43-150100.3.56.3 - openSUSE Leap 15.4 (x86_64): kiwi-pxeboot-9.24.43-150100.3.56.3 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.43-150100.3.56.3 dracut-kiwi-live-9.24.43-150100.3.56.3 dracut-kiwi-oem-dump-9.24.43-150100.3.56.3 dracut-kiwi-oem-repart-9.24.43-150100.3.56.3 dracut-kiwi-overlay-9.24.43-150100.3.56.3 kiwi-man-pages-9.24.43-150100.3.56.3 kiwi-systemdeps-9.24.43-150100.3.56.3 kiwi-systemdeps-bootloaders-9.24.43-150100.3.56.3 kiwi-systemdeps-containers-9.24.43-150100.3.56.3 kiwi-systemdeps-core-9.24.43-150100.3.56.3 kiwi-systemdeps-disk-images-9.24.43-150100.3.56.3 kiwi-systemdeps-filesystems-9.24.43-150100.3.56.3 kiwi-systemdeps-image-validation-9.24.43-150100.3.56.3 kiwi-systemdeps-iso-media-9.24.43-150100.3.56.3 kiwi-tools-9.24.43-150100.3.56.3 kiwi-tools-debuginfo-9.24.43-150100.3.56.3 python-kiwi-debugsource-9.24.43-150100.3.56.3 python3-kiwi-9.24.43-150100.3.56.3 - openSUSE Leap 15.3 (x86_64): kiwi-pxeboot-9.24.43-150100.3.56.3 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.43-150100.3.56.3 dracut-kiwi-live-9.24.43-150100.3.56.3 dracut-kiwi-oem-dump-9.24.43-150100.3.56.3 dracut-kiwi-oem-repart-9.24.43-150100.3.56.3 dracut-kiwi-overlay-9.24.43-150100.3.56.3 kiwi-man-pages-9.24.43-150100.3.56.3 kiwi-systemdeps-9.24.43-150100.3.56.3 kiwi-systemdeps-bootloaders-9.24.43-150100.3.56.3 kiwi-systemdeps-containers-9.24.43-150100.3.56.3 kiwi-systemdeps-core-9.24.43-150100.3.56.3 kiwi-systemdeps-disk-images-9.24.43-150100.3.56.3 kiwi-systemdeps-filesystems-9.24.43-150100.3.56.3 kiwi-systemdeps-image-validation-9.24.43-150100.3.56.3 kiwi-systemdeps-iso-media-9.24.43-150100.3.56.3 kiwi-tools-9.24.43-150100.3.56.3 kiwi-tools-debuginfo-9.24.43-150100.3.56.3 python-kiwi-debugsource-9.24.43-150100.3.56.3 python3-kiwi-9.24.43-150100.3.56.3 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (x86_64): kiwi-pxeboot-9.24.43-150100.3.56.3 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.43-150100.3.56.3 dracut-kiwi-live-9.24.43-150100.3.56.3 dracut-kiwi-oem-dump-9.24.43-150100.3.56.3 dracut-kiwi-oem-repart-9.24.43-150100.3.56.3 dracut-kiwi-overlay-9.24.43-150100.3.56.3 kiwi-man-pages-9.24.43-150100.3.56.3 kiwi-systemdeps-9.24.43-150100.3.56.3 kiwi-systemdeps-bootloaders-9.24.43-150100.3.56.3 kiwi-systemdeps-containers-9.24.43-150100.3.56.3 kiwi-systemdeps-core-9.24.43-150100.3.56.3 kiwi-systemdeps-disk-images-9.24.43-150100.3.56.3 kiwi-systemdeps-filesystems-9.24.43-150100.3.56.3 kiwi-systemdeps-image-validation-9.24.43-150100.3.56.3 kiwi-systemdeps-iso-media-9.24.43-150100.3.56.3 kiwi-tools-9.24.43-150100.3.56.3 kiwi-tools-debuginfo-9.24.43-150100.3.56.3 python-kiwi-debugsource-9.24.43-150100.3.56.3 python3-kiwi-9.24.43-150100.3.56.3 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (x86_64): kiwi-pxeboot-9.24.43-150100.3.56.3 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): dracut-kiwi-lib-9.24.43-150100.3.56.3 dracut-kiwi-oem-dump-9.24.43-150100.3.56.3 dracut-kiwi-oem-repart-9.24.43-150100.3.56.3 python-kiwi-debugsource-9.24.43-150100.3.56.3 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): dracut-kiwi-lib-9.24.43-150100.3.56.3 dracut-kiwi-oem-dump-9.24.43-150100.3.56.3 dracut-kiwi-oem-repart-9.24.43-150100.3.56.3 python-kiwi-debugsource-9.24.43-150100.3.56.3 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): dracut-kiwi-lib-9.24.43-150100.3.56.3 dracut-kiwi-oem-repart-9.24.43-150100.3.56.3 python-kiwi-debugsource-9.24.43-150100.3.56.3 References: https://bugzilla.suse.com/1203896

1 0

SUSE-RU-2022:4472-1: moderate: Recommended update for pesign
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for pesign ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4472-1 Rating: moderate References: #1205323 Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign fixes the following issues: - Fix OID array indices (bsc#1205323) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4472=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4472=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4472=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4472=1 Package List: - openSUSE Leap 15.4 (aarch64 x86_64): pesign-0.112-150000.4.12.1 pesign-debuginfo-0.112-150000.4.12.1 pesign-debugsource-0.112-150000.4.12.1 - openSUSE Leap 15.3 (aarch64 x86_64): pesign-0.112-150000.4.12.1 pesign-debuginfo-0.112-150000.4.12.1 pesign-debugsource-0.112-150000.4.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 x86_64): pesign-0.112-150000.4.12.1 pesign-debuginfo-0.112-150000.4.12.1 pesign-debugsource-0.112-150000.4.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 x86_64): pesign-0.112-150000.4.12.1 pesign-debuginfo-0.112-150000.4.12.1 pesign-debugsource-0.112-150000.4.12.1 References: https://bugzilla.suse.com/1205323

1 0

SUSE-RU-2022:4465-1: important: Recommended update for motif
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for motif ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4465-1 Rating: important References: #1205253 Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for motif fixes the following issues: - Fix to prevent third party application crash (bsc#1205253) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4465=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4465=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-4465=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4465=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-4465=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libMrm4-2.3.4-150000.3.8.1 libMrm4-debuginfo-2.3.4-150000.3.8.1 libUil4-2.3.4-150000.3.8.1 libUil4-debuginfo-2.3.4-150000.3.8.1 libXm4-2.3.4-150000.3.8.1 libXm4-debuginfo-2.3.4-150000.3.8.1 motif-2.3.4-150000.3.8.1 motif-debuginfo-2.3.4-150000.3.8.1 motif-debugsource-2.3.4-150000.3.8.1 motif-devel-2.3.4-150000.3.8.1 motif-devel-debuginfo-2.3.4-150000.3.8.1 - openSUSE Leap 15.4 (x86_64): libMrm4-32bit-2.3.4-150000.3.8.1 libMrm4-32bit-debuginfo-2.3.4-150000.3.8.1 libUil4-32bit-2.3.4-150000.3.8.1 libUil4-32bit-debuginfo-2.3.4-150000.3.8.1 libXm4-32bit-2.3.4-150000.3.8.1 libXm4-32bit-debuginfo-2.3.4-150000.3.8.1 motif-devel-32bit-2.3.4-150000.3.8.1 motif-devel-32bit-debuginfo-2.3.4-150000.3.8.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libMrm4-2.3.4-150000.3.8.1 libMrm4-debuginfo-2.3.4-150000.3.8.1 libUil4-2.3.4-150000.3.8.1 libUil4-debuginfo-2.3.4-150000.3.8.1 libXm4-2.3.4-150000.3.8.1 libXm4-debuginfo-2.3.4-150000.3.8.1 motif-2.3.4-150000.3.8.1 motif-debuginfo-2.3.4-150000.3.8.1 motif-debugsource-2.3.4-150000.3.8.1 motif-devel-2.3.4-150000.3.8.1 motif-devel-debuginfo-2.3.4-150000.3.8.1 - openSUSE Leap 15.3 (x86_64): libMrm4-32bit-2.3.4-150000.3.8.1 libMrm4-32bit-debuginfo-2.3.4-150000.3.8.1 libUil4-32bit-2.3.4-150000.3.8.1 libUil4-32bit-debuginfo-2.3.4-150000.3.8.1 libXm4-32bit-2.3.4-150000.3.8.1 libXm4-32bit-debuginfo-2.3.4-150000.3.8.1 motif-devel-32bit-2.3.4-150000.3.8.1 motif-devel-32bit-debuginfo-2.3.4-150000.3.8.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x): libXm4-2.3.4-150000.3.8.1 libXm4-debuginfo-2.3.4-150000.3.8.1 motif-2.3.4-150000.3.8.1 motif-debuginfo-2.3.4-150000.3.8.1 motif-debugsource-2.3.4-150000.3.8.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libMrm4-2.3.4-150000.3.8.1 libMrm4-debuginfo-2.3.4-150000.3.8.1 libUil4-2.3.4-150000.3.8.1 libUil4-debuginfo-2.3.4-150000.3.8.1 libXm4-2.3.4-150000.3.8.1 libXm4-debuginfo-2.3.4-150000.3.8.1 motif-2.3.4-150000.3.8.1 motif-debuginfo-2.3.4-150000.3.8.1 motif-debugsource-2.3.4-150000.3.8.1 motif-devel-2.3.4-150000.3.8.1 motif-devel-debuginfo-2.3.4-150000.3.8.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (x86_64): libMrm4-32bit-2.3.4-150000.3.8.1 libMrm4-32bit-debuginfo-2.3.4-150000.3.8.1 libUil4-32bit-2.3.4-150000.3.8.1 libUil4-32bit-debuginfo-2.3.4-150000.3.8.1 libXm4-32bit-2.3.4-150000.3.8.1 libXm4-32bit-debuginfo-2.3.4-150000.3.8.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libMrm4-2.3.4-150000.3.8.1 libMrm4-debuginfo-2.3.4-150000.3.8.1 libUil4-2.3.4-150000.3.8.1 libUil4-debuginfo-2.3.4-150000.3.8.1 libXm4-2.3.4-150000.3.8.1 libXm4-debuginfo-2.3.4-150000.3.8.1 motif-2.3.4-150000.3.8.1 motif-debuginfo-2.3.4-150000.3.8.1 motif-debugsource-2.3.4-150000.3.8.1 motif-devel-2.3.4-150000.3.8.1 motif-devel-debuginfo-2.3.4-150000.3.8.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (x86_64): libMrm4-32bit-2.3.4-150000.3.8.1 libMrm4-32bit-debuginfo-2.3.4-150000.3.8.1 libUil4-32bit-2.3.4-150000.3.8.1 libUil4-32bit-debuginfo-2.3.4-150000.3.8.1 libXm4-32bit-2.3.4-150000.3.8.1 libXm4-32bit-debuginfo-2.3.4-150000.3.8.1 References: https://bugzilla.suse.com/1205253

1 0

SUSE-RU-2022:4467-1: important: Recommended update for python-parallax
by maintenance＠opensuse.org 14 Dec '22

14 Dec '22

SUSE Recommended Update: Recommended update for python-parallax ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4467-1 Rating: important References: #1205116 Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Availability 15-SP2 SUSE Linux Enterprise High Availability 15-SP3 SUSE Linux Enterprise High Availability 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-parallax fixes the following issues: - Fix parallax file descriptor leakage (bsc#1205116) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4467=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4467=1 - SUSE Linux Enterprise High Availability 15-SP4: zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2022-4467=1 - SUSE Linux Enterprise High Availability 15-SP3: zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2022-4467=1 - SUSE Linux Enterprise High Availability 15-SP2: zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2022-4467=1 Package List: - openSUSE Leap 15.4 (noarch): python3-parallax-1.0.8-150200.4.9.2 - openSUSE Leap 15.3 (noarch): python2-parallax-1.0.8-150200.4.9.2 python3-parallax-1.0.8-150200.4.9.2 - SUSE Linux Enterprise High Availability 15-SP4 (noarch): python3-parallax-1.0.8-150200.4.9.2 - SUSE Linux Enterprise High Availability 15-SP3 (noarch): python3-parallax-1.0.8-150200.4.9.2 - SUSE Linux Enterprise High Availability 15-SP2 (noarch): python3-parallax-1.0.8-150200.4.9.2 References: https://bugzilla.suse.com/1205116

1 0

SUSE-SU-2022:4462-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 13 Dec '22

13 Dec '22

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4462-1 Rating: important References: #1206242 Cross-References: CVE-2022-46872 CVE-2022-46874 CVE-2022-46875 CVE-2022-46878 CVE-2022-46880 CVE-2022-46881 CVE-2022-46882 Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 102.6.0 ESR (bsc#1206242): - CVE-2022-46880: Use-after-free in WebGL - CVE-2022-46872: Arbitrary file read from a compromised content process - CVE-2022-46881: Memory corruption in WebGL - CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions - CVE-2022-46875: Download Protections were bypassed by .atloc and .ftploc files on Mac OS - CVE-2022-46882: Use-after-free in WebGL - CVE-2022-46878: Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6 Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4462=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4462=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-4462=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-4462=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-4462=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-4462=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-4462=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-4462=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4462=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-4462=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-4462=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-4462=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-4462=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-branding-upstream-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-branding-upstream-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Manager Proxy 4.1 (x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le x86_64): MozillaFirefox-devel-102.6.0-150200.152.70.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le x86_64): MozillaFirefox-devel-102.6.0-150200.152.70.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): MozillaFirefox-102.6.0-150200.152.70.1 MozillaFirefox-debuginfo-102.6.0-150200.152.70.1 MozillaFirefox-debugsource-102.6.0-150200.152.70.1 MozillaFirefox-devel-102.6.0-150200.152.70.1 MozillaFirefox-translations-common-102.6.0-150200.152.70.1 MozillaFirefox-translations-other-102.6.0-150200.152.70.1 References: https://www.suse.com/security/cve/CVE-2022-46872.html https://www.suse.com/security/cve/CVE-2022-46874.html https://www.suse.com/security/cve/CVE-2022-46875.html https://www.suse.com/security/cve/CVE-2022-46878.html https://www.suse.com/security/cve/CVE-2022-46880.html https://www.suse.com/security/cve/CVE-2022-46881.html https://www.suse.com/security/cve/CVE-2022-46882.html https://bugzilla.suse.com/1206242

1 0

SUSE-SU-2022:4463-1: important: Security update for containerd
by opensuse-security＠opensuse.org 13 Dec '22

13 Dec '22

SUSE Security Update: Security update for containerd ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4463-1 Rating: important References: #1197284 #1206065 #1206235 Cross-References: CVE-2022-23471 CVE-2022-27191 CVSS scores: CVE-2022-23471 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-23471 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-27191 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27191 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Containers 15-SP3 SUSE Linux Enterprise Module for Containers 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for containerd fixes the following issues: Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). Also includes the following fix: - CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235). - CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4463=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4463=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4463=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4463=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-4463=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-4463=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-4463=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-4463=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-4463=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-4463=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-4463=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-4463=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-4463=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-4463=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-4463=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-4463=1 - SUSE Linux Enterprise Module for Containers 15-SP4: zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2022-4463=1 - SUSE Linux Enterprise Module for Containers 15-SP3: zypper in -t patch SUSE-SLE-Module-Containers-15-SP3-2022-4463=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4463=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4463=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4463=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-4463=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-4463=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-4463=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-4463=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-4463=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-4463=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-4463=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-4463=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): containerd-1.6.12-150000.79.1 - openSUSE Leap Micro 5.2 (aarch64 x86_64): containerd-1.6.12-150000.79.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Manager Proxy 4.1 (x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Server 15-LTSS (s390x): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Module for Containers 15-SP4 (aarch64 ppc64le s390x x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Module for Containers 15-SP3 (aarch64 ppc64le s390x x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): containerd-1.6.12-150000.79.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): containerd-1.6.12-150000.79.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): containerd-1.6.12-150000.79.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 - SUSE CaaS Platform 4.0 (x86_64): containerd-1.6.12-150000.79.1 containerd-ctr-1.6.12-150000.79.1 References: https://www.suse.com/security/cve/CVE-2022-23471.html https://www.suse.com/security/cve/CVE-2022-27191.html https://bugzilla.suse.com/1197284 https://bugzilla.suse.com/1206065 https://bugzilla.suse.com/1206235

1 0

SUSE-SU-2022:4205-2: moderate: Security update for net-snmp
by opensuse-security＠opensuse.org 13 Dec '22

13 Dec '22

SUSE Security Update: Security update for net-snmp ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4205-2 Rating: moderate References: #1201103 SLE-11203 Cross-References: CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810 Affected Products: SUSE Linux Enterprise Micro 5.3 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities, contains one feature is now available. Description: This update for net-snmp fixes the following issues: Updated to version 5.9.3 (bsc#1201103, jsc#SLE-11203): - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access. - CVE-2022-24809: Fixed a malformed OID in a GET-NEXT to the nsVacmAccessTable that can cause a NULL pointer dereference. - CVE-2022-24806: Fixed an improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously. - CVE-2022-24807: Fixed a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. - CVE-2022-24808: Fixed a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference. - CVE-2022-24810: Fixed a malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4205=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4205=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libsnmp40-5.9.3-150300.15.3.1 libsnmp40-debuginfo-5.9.3-150300.15.3.1 net-snmp-debuginfo-5.9.3-150300.15.3.1 net-snmp-debugsource-5.9.3-150300.15.3.1 snmp-mibs-5.9.3-150300.15.3.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libsnmp40-5.9.3-150300.15.3.1 libsnmp40-debuginfo-5.9.3-150300.15.3.1 net-snmp-debuginfo-5.9.3-150300.15.3.1 net-snmp-debugsource-5.9.3-150300.15.3.1 snmp-mibs-5.9.3-150300.15.3.1 References: https://www.suse.com/security/cve/CVE-2022-24805.html https://www.suse.com/security/cve/CVE-2022-24806.html https://www.suse.com/security/cve/CVE-2022-24807.html https://www.suse.com/security/cve/CVE-2022-24808.html https://www.suse.com/security/cve/CVE-2022-24809.html https://www.suse.com/security/cve/CVE-2022-24810.html https://bugzilla.suse.com/1201103

1 0