April 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:1259-1: important: Security update for icedtea-web
by opensuse-security＠opensuse.org 19 Apr '22

19 Apr '22

SUSE Security Update: Security update for icedtea-web ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1259-1 Rating: important References: #1142825 #1142832 #1142835 Cross-References: CVE-2019-10181 CVE-2019-10182 CVE-2019-10185 CVSS scores: CVE-2019-10181 (NVD) : 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-10181 (SUSE): 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-10182 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2019-10182 (SUSE): 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2019-10185 (SUSE): 8.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for icedtea-web fixes the following issues: - CVE-2019-10181: Fixed an issue where an attacker could inject unsigned code in a signed JAR file (bsc#1142835). - CVE-2019-10182: Fixed a path traversal issue where an attacker could upload arbritrary files by tricking a victim into running a specially crafted application(bsc#1142825). - CVE-2019-10185: Fixed an issue where an attacker could write files to arbitrary locations during JAR auto-extraction (bsc#1142832). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1259=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1259=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-1259=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-1259=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1259=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1259=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): icedtea-web-1.7.2-150100.7.3.1 - openSUSE Leap 15.4 (noarch): icedtea-web-javadoc-1.7.2-150100.7.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): icedtea-web-1.7.2-150100.7.3.1 - openSUSE Leap 15.3 (noarch): icedtea-web-javadoc-1.7.2-150100.7.3.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): icedtea-web-1.7.2-150100.7.3.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): icedtea-web-1.7.2-150100.7.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): icedtea-web-1.7.2-150100.7.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (noarch): icedtea-web-javadoc-1.7.2-150100.7.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x): icedtea-web-1.7.2-150100.7.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (noarch): icedtea-web-javadoc-1.7.2-150100.7.3.1 References: https://www.suse.com/security/cve/CVE-2019-10181.html https://www.suse.com/security/cve/CVE-2019-10182.html https://www.suse.com/security/cve/CVE-2019-10185.html https://bugzilla.suse.com/1142825 https://bugzilla.suse.com/1142832 https://bugzilla.suse.com/1142835

1 0

SUSE-SU-2022:1252-1: important: Security update for openjpeg2
by opensuse-security＠opensuse.org 19 Apr '22

19 Apr '22

SUSE Security Update: Security update for openjpeg2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1252-1 Rating: important References: #1076314 #1076967 #1079845 #1102016 #1106881 #1106882 #1140130 #1160782 #1162090 #1173578 #1180457 #1184774 #1197738 Cross-References: CVE-2018-14423 CVE-2018-16375 CVE-2018-16376 CVE-2018-20845 CVE-2018-5727 CVE-2018-5785 CVE-2018-6616 CVE-2020-15389 CVE-2020-27823 CVE-2020-6851 CVE-2020-8112 CVE-2021-29338 CVE-2022-1122 CVSS scores: CVE-2018-14423 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-14423 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2018-16375 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-16375 (SUSE): 4.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2018-16376 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-16376 (SUSE): 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2018-20845 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-20845 (SUSE): 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2018-5727 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-5727 (SUSE): 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2018-5785 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-5785 (SUSE): 4 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2018-6616 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-6616 (SUSE): 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2020-15389 (NVD) : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2020-15389 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2020-27823 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-27823 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-6851 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-6851 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-8112 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-8112 (SUSE): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2021-29338 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-29338 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-1122 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-1122 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for openjpeg2 fixes the following issues: - CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314). - CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967). - CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845). - CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016). - CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882). - CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881). - CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.ci (bsc#1140130). - CVE-2020-6851: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor (bsc#1160782). - CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090). - CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578). - CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457). - CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774). - CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1252=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1252=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1252=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1252=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1252=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1252=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-1252=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-1252=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1252=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1252=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-1252=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-1252=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-1252=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1252=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1252=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1252=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1252=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1252=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1252=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-1252=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-1252=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1252=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1252=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1252=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-1252=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - openSUSE Leap 15.4 (x86_64): libopenjp2-7-32bit-2.3.0-150000.3.5.1 libopenjp2-7-32bit-debuginfo-2.3.0-150000.3.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - openSUSE Leap 15.3 (x86_64): libopenjp2-7-32bit-2.3.0-150000.3.5.1 libopenjp2-7-32bit-debuginfo-2.3.0-150000.3.5.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Manager Proxy 4.1 (x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (x86_64): libopenjp2-7-32bit-2.3.0-150000.3.5.1 libopenjp2-7-32bit-debuginfo-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 - SUSE CaaS Platform 4.0 (x86_64): libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-debuginfo-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-debuginfo-2.3.0-150000.3.5.1 openjpeg2-debugsource-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 References: https://www.suse.com/security/cve/CVE-2018-14423.html https://www.suse.com/security/cve/CVE-2018-16375.html https://www.suse.com/security/cve/CVE-2018-16376.html https://www.suse.com/security/cve/CVE-2018-20845.html https://www.suse.com/security/cve/CVE-2018-5727.html https://www.suse.com/security/cve/CVE-2018-5785.html https://www.suse.com/security/cve/CVE-2018-6616.html https://www.suse.com/security/cve/CVE-2020-15389.html https://www.suse.com/security/cve/CVE-2020-27823.html https://www.suse.com/security/cve/CVE-2020-6851.html https://www.suse.com/security/cve/CVE-2020-8112.html https://www.suse.com/security/cve/CVE-2021-29338.html https://www.suse.com/security/cve/CVE-2022-1122.html https://bugzilla.suse.com/1076314 https://bugzilla.suse.com/1076967 https://bugzilla.suse.com/1079845 https://bugzilla.suse.com/1102016 https://bugzilla.suse.com/1106881 https://bugzilla.suse.com/1106882 https://bugzilla.suse.com/1140130 https://bugzilla.suse.com/1160782 https://bugzilla.suse.com/1162090 https://bugzilla.suse.com/1173578 https://bugzilla.suse.com/1180457 https://bugzilla.suse.com/1184774 https://bugzilla.suse.com/1197738

1 0

openSUSE-SU-2022:0114-1: important: Security update for chromium
by opensuse-security＠opensuse.org 19 Apr '22

19 Apr '22

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0114-1 Rating: important References: #1198509 Cross-References: CVE-2022-1364 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium fixes the following issues: Updated Chromium to 100.0.4896.127 (boo#1198509) - CVE-2022-1364: Type Confusion in V8 - Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-114=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-100.0.4896.127-bp153.2.85.1 chromium-100.0.4896.127-bp153.2.85.1 References: https://www.suse.com/security/cve/CVE-2022-1364.html https://bugzilla.suse.com/1198509

1 0

SUSE-RU-2022:1253-1: moderate: Recommended update for helm
by maintenance＠opensuse.org 19 Apr '22

19 Apr '22

SUSE Recommended Update: Recommended update for helm ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1253-1 Rating: moderate References: SLE-21605 SLE-21606 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Containers 15-SP3 SUSE Linux Enterprise Module for Containers 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains two features can now be installed. Description: This update for helm delivers helm 3.8.0 to the Containers module. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1253=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1253=1 - SUSE Linux Enterprise Module for Containers 15-SP4: zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2022-1253=1 - SUSE Linux Enterprise Module for Containers 15-SP3: zypper in -t patch SUSE-SLE-Module-Containers-15-SP3-2022-1253=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): helm-3.8.0-150000.1.3.1 helm-debuginfo-3.8.0-150000.1.3.1 - openSUSE Leap 15.4 (noarch): helm-bash-completion-3.8.0-150000.1.3.1 helm-zsh-completion-3.8.0-150000.1.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): helm-3.8.0-150000.1.3.1 helm-debuginfo-3.8.0-150000.1.3.1 - openSUSE Leap 15.3 (noarch): helm-bash-completion-3.8.0-150000.1.3.1 helm-zsh-completion-3.8.0-150000.1.3.1 - SUSE Linux Enterprise Module for Containers 15-SP4 (aarch64 ppc64le s390x x86_64): helm-3.8.0-150000.1.3.1 helm-debuginfo-3.8.0-150000.1.3.1 - SUSE Linux Enterprise Module for Containers 15-SP4 (noarch): helm-bash-completion-3.8.0-150000.1.3.1 helm-zsh-completion-3.8.0-150000.1.3.1 - SUSE Linux Enterprise Module for Containers 15-SP3 (aarch64 ppc64le s390x x86_64): helm-3.8.0-150000.1.3.1 helm-debuginfo-3.8.0-150000.1.3.1 - SUSE Linux Enterprise Module for Containers 15-SP3 (noarch): helm-bash-completion-3.8.0-150000.1.3.1 helm-zsh-completion-3.8.0-150000.1.3.1 References:

1 0

openSUSE-SU-2022:0113-1: moderate: Security update for nodejs12
by opensuse-security＠opensuse.org 17 Apr '22

17 Apr '22

openSUSE Security Update: Security update for nodejs12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0113-1 Rating: moderate References: #1194511 #1194512 #1194513 #1194514 #1198204 Cross-References: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824 CVE-2022-24191 CVSS scores: CVE-2021-44531 (NVD) : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2021-44531 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-44532 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-44532 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-44533 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-44533 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21824 (NVD) : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2022-21824 (SUSE): 4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2022-24191 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for nodejs12 fixes the following issues: - CVE-2021-44531: Fixed improper handling of URI Subject Alternative Names (bsc#1194511). - CVE-2021-44532: Fixed certificate Verification Bypass via String Injection (bsc#1194512). - CVE-2021-44533: Fixed incorrect handling of certificate subject and issuer fields (bsc#1194513). - CVE-2022-21824: Fixed prototype pollution via console.table properties (bsc#1194514). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-113=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-113=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs12-12.22.9-4.25.1 nodejs12-debuginfo-12.22.9-4.25.1 nodejs12-debugsource-12.22.9-4.25.1 nodejs12-devel-12.22.9-4.25.1 npm12-12.22.9-4.25.1 - openSUSE Leap 15.3 (noarch): nodejs12-docs-12.22.9-4.25.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): htmldoc-1.9.12-bp153.2.9.1 References: https://www.suse.com/security/cve/CVE-2021-44531.html https://www.suse.com/security/cve/CVE-2021-44532.html https://www.suse.com/security/cve/CVE-2021-44533.html https://www.suse.com/security/cve/CVE-2022-21824.html https://www.suse.com/security/cve/CVE-2022-24191.html https://bugzilla.suse.com/1194511 https://bugzilla.suse.com/1194512 https://bugzilla.suse.com/1194513 https://bugzilla.suse.com/1194514 https://bugzilla.suse.com/1198204

1 0

SUSE-SU-2022:1218-1: important: Security update for SDL2
by opensuse-security＠opensuse.org 14 Apr '22

14 Apr '22

SUSE Security Update: Security update for SDL2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1218-1 Rating: important References: #1198001 Cross-References: CVE-2021-33657 CVSS scores: CVE-2021-33657 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-33657 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for SDL2 fixes the following issues: - CVE-2021-33657: Fix a buffer overflow when parsing a crafted BMP image (bsc#1198001). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1218=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1218=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1218=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1218=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1218=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1218=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1218=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1218=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1218=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1218=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1218=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-1218=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1218=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1218=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1218=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1218=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - openSUSE Leap 15.4 (x86_64): libSDL2-2_0-0-32bit-2.0.8-150200.11.6.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-32bit-2.0.8-150200.11.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - openSUSE Leap 15.3 (x86_64): libSDL2-2_0-0-32bit-2.0.8-150200.11.6.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-32bit-2.0.8-150200.11.6.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Manager Proxy 4.1 (x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-32bit-2.0.8-150200.11.6.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-150200.11.6.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-32bit-2.0.8-150200.11.6.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-150200.11.6.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): SDL2-debugsource-2.0.8-150200.11.6.1 libSDL2-2_0-0-2.0.8-150200.11.6.1 libSDL2-2_0-0-debuginfo-2.0.8-150200.11.6.1 libSDL2-devel-2.0.8-150200.11.6.1 References: https://www.suse.com/security/cve/CVE-2021-33657.html https://bugzilla.suse.com/1198001

1 0

SUSE-RU-2022:1208-1: moderate: Recommended update for vncmanager
by maintenance＠opensuse.org 14 Apr '22

14 Apr '22

SUSE Recommended Update: Recommended update for vncmanager ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1208-1 Rating: moderate References: #1169732 #1171344 #1189247 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for vncmanager fixes the following issues: - Consider different pixel format depths on Tight Encoding. TightPixel was considering only pixels defined with 3 bytes. (bsc#1189247) - Fix tight decoder with 888 pixel encodings. (bsc#1169732, bsc#1171344) - Fix PixelFormat::ntoh() and PixelFormat::hton(). (bsc#1169732, bsc#1171344) - Fix tight compression decoder on big-endian systems. (bsc#1171344) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1208=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1208=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1208=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1208=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): vncmanager-1.0.2-150000.4.9.3 vncmanager-debuginfo-1.0.2-150000.4.9.3 vncmanager-debugsource-1.0.2-150000.4.9.3 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): vncmanager-1.0.2-150000.4.9.3 vncmanager-debuginfo-1.0.2-150000.4.9.3 vncmanager-debugsource-1.0.2-150000.4.9.3 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): vncmanager-1.0.2-150000.4.9.3 vncmanager-debuginfo-1.0.2-150000.4.9.3 vncmanager-debugsource-1.0.2-150000.4.9.3 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): vncmanager-1.0.2-150000.4.9.3 vncmanager-debuginfo-1.0.2-150000.4.9.3 vncmanager-debugsource-1.0.2-150000.4.9.3 References: https://bugzilla.suse.com/1169732 https://bugzilla.suse.com/1171344 https://bugzilla.suse.com/1189247

1 0

SUSE-RU-2022:1200-1: moderate: Recommended update for ClusterTools2
by maintenance＠opensuse.org 14 Apr '22

14 Apr '22

SUSE Recommended Update: Recommended update for ClusterTools2 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1200-1 Rating: moderate References: #1188456 #1188652 Affected Products: SUSE Linux Enterprise Module for SAP Applications 15-SP1 SUSE Linux Enterprise Module for SAP Applications 15-SP2 SUSE Linux Enterprise Module for SAP Applications 15-SP3 SUSE Linux Enterprise Module for SAP Applications 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ClusterTools2 fixes the following issues: - change version from 3.1.1 to 3.1.2 - As newer versions of pacemaker display the output from command 'crmadmin --quiet' on stdout instead on stderr, the command 'cs_clusterstate' was enhanced to adapt these change. (bsc#1188652) - Adapt 'cs_show_scores' to support newer versions of pacemaker and crmshi. (bsc#1188456) - man page updates Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1200=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1200=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2022-1200=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2022-1200=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2022-1200=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP1: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP1-2022-1200=1 Package List: - openSUSE Leap 15.4 (noarch): ClusterTools2-3.1.2-150100.8.9.1 - openSUSE Leap 15.3 (noarch): ClusterTools2-3.1.2-150100.8.9.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP4 (noarch): ClusterTools2-3.1.2-150100.8.9.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP3 (noarch): ClusterTools2-3.1.2-150100.8.9.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP2 (noarch): ClusterTools2-3.1.2-150100.8.9.1 - SUSE Linux Enterprise Module for SAP Applications 15-SP1 (noarch): ClusterTools2-3.1.2-150100.8.9.1 References: https://bugzilla.suse.com/1188456 https://bugzilla.suse.com/1188652

1 0

SUSE-RU-2022:1204-1: moderate: Recommended update for hwdata
by maintenance＠opensuse.org 14 Apr '22

14 Apr '22

SUSE Recommended Update: Recommended update for hwdata ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1204-1 Rating: moderate References: #1196332 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for SUSE Manager Server 4.1 SUSE Linux Enterprise Module for SUSE Manager Server 4.2 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Tools 15 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hwdata fixes the following issues: - Updated pci, usb and vendor ids (bsc#1196332) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1204=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1204=1 - SUSE Manager Tools 15: zypper in -t patch SUSE-SLE-Manager-Tools-15-2022-1204=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1204=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.2-2022-1204=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.1-2022-1204=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2022-1204=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.1-2022-1204=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1204=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1204=1 Package List: - openSUSE Leap 15.4 (noarch): hwdata-0.357-150000.3.42.1 - openSUSE Leap 15.3 (noarch): hwdata-0.357-150000.3.42.1 - SUSE Manager Tools 15 (noarch): hwdata-0.357-150000.3.42.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch): hwdata-0.357-150000.3.42.1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2 (noarch): hwdata-0.357-150000.3.42.1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.1 (noarch): hwdata-0.357-150000.3.42.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 (noarch): hwdata-0.357-150000.3.42.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1 (noarch): hwdata-0.357-150000.3.42.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): hwdata-0.357-150000.3.42.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): hwdata-0.357-150000.3.42.1 References: https://bugzilla.suse.com/1196332

1 0

SUSE-RU-2022:1203-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 14 Apr '22

14 Apr '22

SUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1203-1 Rating: moderate References: #1195231 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Availability 15-SP2 SUSE Linux Enterprise High Availability 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lvm2 fixes the following issues: - udev: create symlinks and watch even in suspended state (bsc#1195231) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1203=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1203=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1203=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1203=1 - SUSE Linux Enterprise Micro 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-1203=1 - SUSE Linux Enterprise High Availability 15-SP3: zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2022-1203=1 - SUSE Linux Enterprise High Availability 15-SP2: zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2022-1203=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): device-mapper-1.02.163-8.42.1 device-mapper-debuginfo-1.02.163-8.42.1 device-mapper-devel-1.02.163-8.42.1 libdevmapper-event1_03-1.02.163-8.42.1 libdevmapper-event1_03-debuginfo-1.02.163-8.42.1 libdevmapper1_03-1.02.163-8.42.1 libdevmapper1_03-debuginfo-1.02.163-8.42.1 liblvm2cmd2_03-2.03.05-8.42.1 liblvm2cmd2_03-debuginfo-2.03.05-8.42.1 lvm2-2.03.05-8.42.1 lvm2-debuginfo-2.03.05-8.42.1 lvm2-debugsource-2.03.05-8.42.1 lvm2-devel-2.03.05-8.42.1 lvm2-device-mapper-debugsource-2.03.05-8.42.1 lvm2-lockd-2.03.05-8.42.1 lvm2-lockd-debuginfo-2.03.05-8.42.1 lvm2-lvmlockd-debugsource-2.03.05-8.42.1 lvm2-testsuite-2.03.05-8.42.1 lvm2-testsuite-debuginfo-2.03.05-8.42.1 - openSUSE Leap 15.3 (x86_64): device-mapper-devel-32bit-1.02.163-8.42.1 libdevmapper-event1_03-32bit-1.02.163-8.42.1 libdevmapper-event1_03-32bit-debuginfo-1.02.163-8.42.1 libdevmapper1_03-32bit-1.02.163-8.42.1 libdevmapper1_03-32bit-debuginfo-1.02.163-8.42.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): device-mapper-1.02.163-8.42.1 device-mapper-debuginfo-1.02.163-8.42.1 device-mapper-devel-1.02.163-8.42.1 libdevmapper-event1_03-1.02.163-8.42.1 libdevmapper-event1_03-debuginfo-1.02.163-8.42.1 libdevmapper1_03-1.02.163-8.42.1 libdevmapper1_03-32bit-1.02.163-8.42.1 libdevmapper1_03-32bit-debuginfo-1.02.163-8.42.1 libdevmapper1_03-debuginfo-1.02.163-8.42.1 liblvm2cmd2_03-2.03.05-8.42.1 liblvm2cmd2_03-debuginfo-2.03.05-8.42.1 lvm2-2.03.05-8.42.1 lvm2-debuginfo-2.03.05-8.42.1 lvm2-debugsource-2.03.05-8.42.1 lvm2-devel-2.03.05-8.42.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): device-mapper-1.02.163-8.42.1 device-mapper-debuginfo-1.02.163-8.42.1 device-mapper-devel-1.02.163-8.42.1 libdevmapper-event1_03-1.02.163-8.42.1 libdevmapper-event1_03-debuginfo-1.02.163-8.42.1 libdevmapper1_03-1.02.163-8.42.1 libdevmapper1_03-debuginfo-1.02.163-8.42.1 liblvm2cmd2_03-2.03.05-8.42.1 liblvm2cmd2_03-debuginfo-2.03.05-8.42.1 lvm2-2.03.05-8.42.1 lvm2-debuginfo-2.03.05-8.42.1 lvm2-debugsource-2.03.05-8.42.1 lvm2-devel-2.03.05-8.42.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libdevmapper1_03-32bit-1.02.163-8.42.1 libdevmapper1_03-32bit-debuginfo-1.02.163-8.42.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): device-mapper-1.02.163-8.42.1 device-mapper-debuginfo-1.02.163-8.42.1 libdevmapper-event1_03-1.02.163-8.42.1 libdevmapper-event1_03-debuginfo-1.02.163-8.42.1 libdevmapper1_03-1.02.163-8.42.1 libdevmapper1_03-debuginfo-1.02.163-8.42.1 liblvm2cmd2_03-2.03.05-8.42.1 liblvm2cmd2_03-debuginfo-2.03.05-8.42.1 lvm2-2.03.05-8.42.1 lvm2-debuginfo-2.03.05-8.42.1 lvm2-debugsource-2.03.05-8.42.1 - SUSE Linux Enterprise Micro 5.0 (aarch64 x86_64): device-mapper-1.02.163-8.42.1 device-mapper-debuginfo-1.02.163-8.42.1 libdevmapper-event1_03-1.02.163-8.42.1 libdevmapper-event1_03-debuginfo-1.02.163-8.42.1 libdevmapper1_03-1.02.163-8.42.1 libdevmapper1_03-debuginfo-1.02.163-8.42.1 liblvm2cmd2_03-2.03.05-8.42.1 liblvm2cmd2_03-debuginfo-2.03.05-8.42.1 lvm2-2.03.05-8.42.1 lvm2-debuginfo-2.03.05-8.42.1 lvm2-debugsource-2.03.05-8.42.1 - SUSE Linux Enterprise High Availability 15-SP3 (aarch64 ppc64le s390x x86_64): lvm2-lockd-2.03.05-8.42.1 lvm2-lockd-debuginfo-2.03.05-8.42.1 lvm2-lvmlockd-debugsource-2.03.05-8.42.1 - SUSE Linux Enterprise High Availability 15-SP2 (aarch64 ppc64le s390x x86_64): lvm2-lockd-2.03.05-8.42.1 lvm2-lockd-debuginfo-2.03.05-8.42.1 lvm2-lvmlockd-debugsource-2.03.05-8.42.1 References: https://bugzilla.suse.com/1195231

1 0