February 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2022:0503-1: important: Security update for xerces-j2
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for xerces-j2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0503-1 Rating: important References: #1195108 Cross-References: CVE-2022-23437 CVSS scores: CVE-2022-23437 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-23437 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xerces-j2 fixes the following issues: - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-503=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-503=1 Package List: - openSUSE Leap 15.4 (noarch): xerces-j2-2.12.0-3.3.1 xerces-j2-demo-2.12.0-3.3.1 xerces-j2-javadoc-2.12.0-3.3.1 - openSUSE Leap 15.3 (noarch): xerces-j2-2.12.0-3.3.1 xerces-j2-demo-2.12.0-3.3.1 xerces-j2-javadoc-2.12.0-3.3.1 References: https://www.suse.com/security/cve/CVE-2022-23437.html https://bugzilla.suse.com/1195108

1 0

openSUSE-SU-2022:0500-1: important: Security update for xerces-j2
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for xerces-j2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0500-1 Rating: important References: #1195108 Cross-References: CVE-2022-23437 CVSS scores: CVE-2022-23437 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-23437 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xerces-j2 fixes the following issues: - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-500=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-500=1 Package List: - openSUSE Leap 15.4 (noarch): xerces-j2-scripts-2.11.0-4.3.1 xerces-j2-xml-apis-2.11.0-4.3.1 xerces-j2-xml-resolver-2.11.0-4.3.1 - openSUSE Leap 15.3 (noarch): xerces-j2-scripts-2.11.0-4.3.1 xerces-j2-xml-apis-2.11.0-4.3.1 xerces-j2-xml-resolver-2.11.0-4.3.1 References: https://www.suse.com/security/cve/CVE-2022-23437.html https://bugzilla.suse.com/1195108

1 0

openSUSE-SU-2022:0491-1: moderate: Security update for rust
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for rust ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0491-1 Rating: moderate References: #1194767 Cross-References: CVE-2022-21658 CVSS scores: CVE-2022-21658 (NVD) : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-21658 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rust fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-491=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-491=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cargo-debuginfo-1.53.0-22.1 rust-debuginfo-1.53.0-22.1 - openSUSE Leap 15.4 (aarch64 x86_64): rls-debuginfo-1.53.0-22.1 rust-analysis-1.53.0-22.1 rust-doc-1.53.0-22.1 - openSUSE Leap 15.4 (noarch): cargo-doc-1.53.0-22.1 rust-src-1.53.0-22.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cargo-debuginfo-1.53.0-22.1 rust-debuginfo-1.53.0-22.1 - openSUSE Leap 15.3 (aarch64 x86_64): rls-debuginfo-1.53.0-22.1 rust-analysis-1.53.0-22.1 rust-doc-1.53.0-22.1 - openSUSE Leap 15.3 (noarch): cargo-doc-1.53.0-22.1 rust-src-1.53.0-22.1 References: https://www.suse.com/security/cve/CVE-2022-21658.html https://bugzilla.suse.com/1194767

1 0

openSUSE-SU-2022:0499-1: important: Security update for python-Twisted
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for python-Twisted ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0499-1 Rating: important References: #1195667 Cross-References: CVE-2022-21712 CVSS scores: CVE-2022-21712 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21712 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Twisted fixes the following issues: - CVE-2022-21712: Fixed secret exposure in cross-origin redirects by properly removing sensitive headers when redirecting to a different origin (bsc#1195667). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-499=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-499=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-Twisted-debuginfo-19.10.0-3.6.1 python-Twisted-debugsource-19.10.0-3.6.1 python2-Twisted-19.10.0-3.6.1 python2-Twisted-debuginfo-19.10.0-3.6.1 python3-Twisted-debuginfo-19.10.0-3.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-Twisted-debuginfo-19.10.0-3.6.1 python-Twisted-debugsource-19.10.0-3.6.1 python-Twisted-doc-19.10.0-3.6.1 python2-Twisted-19.10.0-3.6.1 python2-Twisted-debuginfo-19.10.0-3.6.1 python3-Twisted-19.10.0-3.6.1 python3-Twisted-debuginfo-19.10.0-3.6.1 References: https://www.suse.com/security/cve/CVE-2022-21712.html https://bugzilla.suse.com/1195667

1 0

openSUSE-SU-2022:0069-2: Security update for libmspack
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for libmspack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0069-2 Rating: low References: #1113040 Cross-References: CVE-2018-18586 CVSS scores: CVE-2018-18586 (NVD) : 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libmspack fixes the following issues: - CVE-2018-18586: Fixed directory traversal in chmextract by adding anti "../" and leading slash protection (bsc#1113040). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-69=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libmspack-debugsource-0.6-3.14.1 libmspack-devel-0.6-3.14.1 libmspack0-0.6-3.14.1 libmspack0-debuginfo-0.6-3.14.1 mspack-tools-0.6-3.14.1 mspack-tools-debuginfo-0.6-3.14.1 - openSUSE Leap 15.4 (x86_64): libmspack0-32bit-0.6-3.14.1 libmspack0-32bit-debuginfo-0.6-3.14.1 References: https://www.suse.com/security/cve/CVE-2018-18586.html https://bugzilla.suse.com/1113040

1 0

openSUSE-RU-2022:0487-1: moderate: Recommended update for transactional-update
by maintenance＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0487-1 Rating: moderate References: #1133891 #1149131 #1177149 #1183521 #1183539 #1183856 #1184529 #1185224 #1185226 #1185625 #1185766 #1186213 #1186775 #1186842 #1188110 #1188322 #1188648 #1189728 #1189807 #1190383 #1190574 #1190788 #1191475 #1191945 #1192078 #1192242 #1192302 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 27 recommended fixes can now be installed. Description: This update for transactional-update fixes the following issues: - Version 3.6.2 - Bind mount root file system snapshot on itself, this makes the temporary directory in '/tmp' unnecessary; also fixes to return the correct snapshot's working directory via API call. (bsc#1188110) - Use separate mount namespace for transactional-update; this should fix several applications that fail to run if a mount point has the 'unbindable' mount flag set - Version 3.6.1 - Fix rsyncing '/etc' into the running system with '--drop-if-no-change'. (bsc#1192242) - Version 3.6.0 - Simplify mount hierarchy by just using a single slave bind mount as the root of the update environment; this may avoid the error messages of failed unmounts. (bsc#1191945) - Version 3.5.7 Various fixes affecting Salt support: - t-u: Don't squash stderr messages into stdout - t-u: Correctly handle case when the snapshot has been deleted due to using --drop-if-no-change: Don't show reboot messages and avoid an awk error message. (bsc#1191475) - tukit: Make inotify handler less sensitive / ignore more directories (bsc#1191475) - Version 3.5.6 - tukit: Add S/390 bootloader support (bsc#1189807) - t-u: support purge-kernels with t-u patch (bsc#1190788) - Version 3.5.5 - t-u: Use tukit for SUSEConnect call (bsc#1190574) Correctly registers repositories - Version 3.5.4 - tukit: Fix resolved support (bsc#1190383) - Version 3.5.3 - t-u: Purge kernels as part of package operations Required for live patching support (bsc#1189728) - Version 3.5.2 - tukit: Fix overlay syncing errors with SELinux (bsc#1188648) - Don't print message for `shell` with --quiet - Version 3.5.1 - t-u: Disable status file generation by default The new experimental `status` command requires the availability of /etc/YaST2/control.xml, which is not present on all systems. Hide the creation of the corresponding status file behind a new EXPERIMENTAL_STATUS option to try out this functionality. - Increase library version - Version 3.5.0 - Add alias setDiscardIfUnchanged for setDiscard. The old method name wasn't really clear and will be removed if we should have an API break in the future - Replace 'mkinitrd' with direct dracut call. (bsc#1186213) - tukit: Add configuration file support (/etc/tukit.conf) - Allow users to configure additional bind mounts (see /usr/etc/tukit.conf for an example and limitations). (bsc#1188322) - Add 'transactional-update status' call. This is a POC for obtaining a hash of a system to verify its integrity. - Internal bugfixes / optimizations - Version 3.4.0 - Apply 'SElinux' context on '/etc' in transaction. (bsc#1185625, bsc#1185766, bsc#1186842, bsc#1186775) - Implement inotify handling in C instead of Bash; this makes the --drop-if-no-change option work on SLE Micro. (bsc#1184529) - Use `tukit call` for up, dup and patch to allow resuming an update after zypper updated itself in the snapshot. (bsc#1185226) - Fix obsolete output type messages in 'initrd'. (bsc#1177149) - Make different base snapshot warning more visible. (bsc#1185224) - Version 3.3.0 - Add support for more package managers by bind mounting their directories - Support snapshots without dedicated overlay [bsc#1183539], (bsc#1183539) - Link RPM database correctly with older zypper versions (bsc#1183521) - Don't discard manual changes in fstab (bsc#1183856, bsc#1192302) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-487=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libtukit-devel-3.6.2-150300.3.3.1 libtukit0-3.6.2-150300.3.3.1 libtukit0-debuginfo-3.6.2-150300.3.3.1 transactional-update-3.6.2-150300.3.3.1 transactional-update-debuginfo-3.6.2-150300.3.3.1 transactional-update-debugsource-3.6.2-150300.3.3.1 tukit-3.6.2-150300.3.3.1 tukit-debuginfo-3.6.2-150300.3.3.1 - openSUSE Leap 15.3 (noarch): dracut-transactional-update-3.6.2-150300.3.3.1 transactional-update-zypp-config-3.6.2-150300.3.3.1 References: https://bugzilla.suse.com/1133891 https://bugzilla.suse.com/1149131 https://bugzilla.suse.com/1177149 https://bugzilla.suse.com/1183521 https://bugzilla.suse.com/1183539 https://bugzilla.suse.com/1183856 https://bugzilla.suse.com/1184529 https://bugzilla.suse.com/1185224 https://bugzilla.suse.com/1185226 https://bugzilla.suse.com/1185625 https://bugzilla.suse.com/1185766 https://bugzilla.suse.com/1186213 https://bugzilla.suse.com/1186775 https://bugzilla.suse.com/1186842 https://bugzilla.suse.com/1188110 https://bugzilla.suse.com/1188322 https://bugzilla.suse.com/1188648 https://bugzilla.suse.com/1189728 https://bugzilla.suse.com/1189807 https://bugzilla.suse.com/1190383 https://bugzilla.suse.com/1190574 https://bugzilla.suse.com/1190788 https://bugzilla.suse.com/1191475 https://bugzilla.suse.com/1191945 https://bugzilla.suse.com/1192078 https://bugzilla.suse.com/1192242 https://bugzilla.suse.com/1192302

1 0

openSUSE-RU-2022:0485-1: moderate: Recommended update for tomcat
by maintenance＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0485-1 Rating: moderate References: #1193569 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tomcat fixes the following issues: - Fix Null Pointer Exception in JNDIRealm, when userRoleAttribute is not set (bsc#1193569) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-485=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-485=1 Package List: - openSUSE Leap 15.4 (noarch): tomcat-9.0.36-16.1 tomcat-admin-webapps-9.0.36-16.1 tomcat-docs-webapp-9.0.36-16.1 tomcat-el-3_0-api-9.0.36-16.1 tomcat-embed-9.0.36-16.1 tomcat-javadoc-9.0.36-16.1 tomcat-jsp-2_3-api-9.0.36-16.1 tomcat-jsvc-9.0.36-16.1 tomcat-lib-9.0.36-16.1 tomcat-servlet-4_0-api-9.0.36-16.1 tomcat-webapps-9.0.36-16.1 - openSUSE Leap 15.3 (noarch): tomcat-9.0.36-16.1 tomcat-admin-webapps-9.0.36-16.1 tomcat-docs-webapp-9.0.36-16.1 tomcat-el-3_0-api-9.0.36-16.1 tomcat-embed-9.0.36-16.1 tomcat-javadoc-9.0.36-16.1 tomcat-jsp-2_3-api-9.0.36-16.1 tomcat-jsvc-9.0.36-16.1 tomcat-lib-9.0.36-16.1 tomcat-servlet-4_0-api-9.0.36-16.1 tomcat-webapps-9.0.36-16.1 References: https://bugzilla.suse.com/1193569

1 0

openSUSE-SU-2022:0052-2: important: Security update for libsndfile
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for libsndfile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0052-2 Rating: important References: #1194006 Cross-References: CVE-2021-4156 CVSS scores: CVE-2021-4156 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libsndfile fixes the following issues: - CVE-2021-4156: Fixed heap buffer overflow in flac_buffer_copy that could potentially lead to heap exploitation (bsc#1194006). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-52=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsndfile-debugsource-1.0.28-5.15.1 libsndfile-devel-1.0.28-5.15.1 libsndfile-progs-1.0.28-5.15.1 libsndfile-progs-debuginfo-1.0.28-5.15.1 libsndfile-progs-debugsource-1.0.28-5.15.1 libsndfile1-1.0.28-5.15.1 libsndfile1-debuginfo-1.0.28-5.15.1 - openSUSE Leap 15.4 (x86_64): libsndfile1-32bit-1.0.28-5.15.1 libsndfile1-32bit-debuginfo-1.0.28-5.15.1 References: https://www.suse.com/security/cve/CVE-2021-4156.html https://bugzilla.suse.com/1194006

1 0

openSUSE-SU-2022:0150-2: important: Security update for aide
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for aide ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0150-2 Rating: important References: #1194735 Cross-References: CVE-2021-45417 CVSS scores: CVE-2021-45417 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for aide fixes the following issues: - CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-150=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): aide-0.16-24.1 aide-debuginfo-0.16-24.1 aide-debugsource-0.16-24.1 aide-test-0.16-24.1 References: https://www.suse.com/security/cve/CVE-2021-45417.html https://bugzilla.suse.com/1194735

1 0

openSUSE-SU-2022:0043-1: moderate: Security update for htmldoc
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for htmldoc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0043-1 Rating: moderate References: #1178561 #1190515 #1192357 #1194178 #1194487 #1195758 Cross-References: CVE-2021-3997 CVE-2021-40985 CVE-2021-43579 CVE-2022-0534 CVSS scores: CVE-2021-3997 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-40985 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2021-43579 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-0534 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0534 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: htmldoc was updated to fix issues: - CVE-2021-40985: Fixed buffer overflow may lead to DoS via a crafted BMP image (bsc#1192357) - CVE-2021-43579: Fixed stack-based buffer overflow in image_load_bmp() results in remote code execution if the victim converts an HTML document linking to a crafted BMP file (bsc#1194487) - CVE-2022-0534: Fixed stack out-of-bounds read in gif_get_code() when opening a malicious GIF file results in a segmentation fault (bsc#1195758) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-43=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-43=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-7.33.1 libsystemd0-debuginfo-246.16-7.33.1 libudev-devel-246.16-7.33.1 libudev1-246.16-7.33.1 libudev1-debuginfo-246.16-7.33.1 nss-myhostname-246.16-7.33.1 nss-myhostname-debuginfo-246.16-7.33.1 nss-mymachines-246.16-7.33.1 nss-mymachines-debuginfo-246.16-7.33.1 nss-resolve-246.16-7.33.1 nss-resolve-debuginfo-246.16-7.33.1 nss-systemd-246.16-7.33.1 nss-systemd-debuginfo-246.16-7.33.1 systemd-246.16-7.33.1 systemd-container-246.16-7.33.1 systemd-container-debuginfo-246.16-7.33.1 systemd-coredump-246.16-7.33.1 systemd-coredump-debuginfo-246.16-7.33.1 systemd-debuginfo-246.16-7.33.1 systemd-debugsource-246.16-7.33.1 systemd-devel-246.16-7.33.1 systemd-doc-246.16-7.33.1 systemd-journal-remote-246.16-7.33.1 systemd-journal-remote-debuginfo-246.16-7.33.1 systemd-logger-246.16-7.33.1 systemd-network-246.16-7.33.1 systemd-network-debuginfo-246.16-7.33.1 systemd-sysvinit-246.16-7.33.1 udev-246.16-7.33.1 udev-debuginfo-246.16-7.33.1 - openSUSE Leap 15.3 (x86_64): libsystemd0-32bit-246.16-7.33.1 libsystemd0-32bit-debuginfo-246.16-7.33.1 libudev-devel-32bit-246.16-7.33.1 libudev1-32bit-246.16-7.33.1 libudev1-32bit-debuginfo-246.16-7.33.1 nss-myhostname-32bit-246.16-7.33.1 nss-myhostname-32bit-debuginfo-246.16-7.33.1 nss-mymachines-32bit-246.16-7.33.1 nss-mymachines-32bit-debuginfo-246.16-7.33.1 systemd-32bit-246.16-7.33.1 systemd-32bit-debuginfo-246.16-7.33.1 - openSUSE Leap 15.3 (noarch): systemd-lang-246.16-7.33.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): htmldoc-1.9.12-bp153.2.6.1 References: https://www.suse.com/security/cve/CVE-2021-3997.html https://www.suse.com/security/cve/CVE-2021-40985.html https://www.suse.com/security/cve/CVE-2021-43579.html https://www.suse.com/security/cve/CVE-2022-0534.html https://bugzilla.suse.com/1178561 https://bugzilla.suse.com/1190515 https://bugzilla.suse.com/1192357 https://bugzilla.suse.com/1194178 https://bugzilla.suse.com/1194487 https://bugzilla.suse.com/1195758

1 0