April 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:1449-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 28 Apr '22

28 Apr '22

SUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1449-1 Rating: moderate References: #1182144 #1188336 #1188692 #1192238 #1196965 #1197958 SLE-17764 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 6 recommended fixes and contains one feature can now be installed. Description: This update for osinfo-db fixes the following issues: - Update to database version 20220214 - Request support for SLE15-SP4 in the osinfo database. (bsc#1197958) - Add support for SUSE linux Enterprise Micro 5.2 - openSUSE Tumbleweed unattended installation with libvirt fails (bsc#1196965, bsc#1188336) - Dev: Support Oracle Linux as a guest VM. (jsc#SLE-17764, bsc#1192238) - Fix AutoYaST profiles to pass the validation during installation. (bsc#1182144) - Add support for openSUSE Leap 15.4, SLE15-SP4, and SLEM 5.1 (bsc#1188692) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1449=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1449=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1449=1 Package List: - openSUSE Leap 15.3 (noarch): osinfo-db-20220214-150300.3.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): osinfo-db-20220214-150300.3.5.1 - SUSE Linux Enterprise Micro 5.2 (noarch): osinfo-db-20220214-150300.3.5.1 References: https://bugzilla.suse.com/1182144 https://bugzilla.suse.com/1188336 https://bugzilla.suse.com/1188692 https://bugzilla.suse.com/1192238 https://bugzilla.suse.com/1196965 https://bugzilla.suse.com/1197958

1 0

SUSE-SU-2022:1446-1: moderate: Security update for python-paramiko
by opensuse-security＠opensuse.org 28 Apr '22

28 Apr '22

SUSE Security Update: Security update for python-paramiko ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1446-1 Rating: moderate References: #1197279 Cross-References: CVE-2022-24302 CVSS scores: CVE-2022-24302 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-24302 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-paramiko fixes the following issues: - CVE-2022-24302: Fixed a race condition between creation and chmod when writing private keys. (bsc#1197279) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1446=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1446=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1446=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-1446=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1446=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1446=1 Package List: - openSUSE Leap 15.4 (noarch): python-paramiko-doc-2.4.2-150100.6.12.1 python2-paramiko-2.4.2-150100.6.12.1 python3-paramiko-2.4.2-150100.6.12.1 - openSUSE Leap 15.3 (noarch): python-paramiko-doc-2.4.2-150100.6.12.1 python2-paramiko-2.4.2-150100.6.12.1 python3-paramiko-2.4.2-150100.6.12.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch): python3-paramiko-2.4.2-150100.6.12.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (noarch): python2-paramiko-2.4.2-150100.6.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python3-paramiko-2.4.2-150100.6.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): python3-paramiko-2.4.2-150100.6.12.1 References: https://www.suse.com/security/cve/CVE-2022-24302.html https://bugzilla.suse.com/1197279

1 0

SUSE-RU-2022:1445-1: important: Recommended update for patterns-public-cloud-15
by maintenance＠opensuse.org 28 Apr '22

28 Apr '22

SUSE Recommended Update: Recommended update for patterns-public-cloud-15 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1445-1 Rating: important References: #1196122 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15-SP1 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for patterns-public-cloud-15 fixes the following issues: - Fix pattern migration issue from SLE 12 to SLE 15. (bsc#1196122) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1445=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-1445=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-1445=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-1445=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2022-1445=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): patterns-public-cloud-15-Amazon-Web-Services-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Tools-15.1-150100.8.3.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (aarch64 ppc64le s390x x86_64): patterns-public-cloud-15-Amazon-Web-Services-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Tools-15.1-150100.8.3.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (aarch64 ppc64le s390x x86_64): patterns-public-cloud-15-Amazon-Web-Services-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Tools-15.1-150100.8.3.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (aarch64 ppc64le s390x x86_64): patterns-public-cloud-15-Amazon-Web-Services-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Tools-15.1-150100.8.3.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1 (aarch64 ppc64le s390x x86_64): patterns-public-cloud-15-Amazon-Web-Services-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Amazon-Web-Services-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Google-Cloud-Platform-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-Microsoft-Azure-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Init-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Instance-Tools-15.1-150100.8.3.1 patterns-public-cloud-15-OpenStack-Tools-15.1-150100.8.3.1 References: https://bugzilla.suse.com/1196122

1 0

SUSE-RU-2022:1451-1: moderate: Recommended update for perl
by maintenance＠opensuse.org 28 Apr '22

28 Apr '22

SUSE Recommended Update: Recommended update for perl ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1451-1 Rating: moderate References: #1193489 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl fixes the following issues: - Fix Socket::VERSION evaluation and stabilize Socket:VERSION comparisons (bsc#1193489) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1451=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1451=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1451=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1451=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1451=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1451=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1451=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1451=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1451=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1451=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): perl-5.26.1-150300.17.3.1 perl-base-5.26.1-150300.17.3.1 perl-base-debuginfo-5.26.1-150300.17.3.1 perl-core-DB_File-5.26.1-150300.17.3.1 perl-core-DB_File-debuginfo-5.26.1-150300.17.3.1 perl-debuginfo-5.26.1-150300.17.3.1 perl-debugsource-5.26.1-150300.17.3.1 - openSUSE Leap 15.4 (noarch): perl-doc-5.26.1-150300.17.3.1 - openSUSE Leap 15.4 (x86_64): perl-32bit-5.26.1-150300.17.3.1 perl-32bit-debuginfo-5.26.1-150300.17.3.1 perl-base-32bit-5.26.1-150300.17.3.1 perl-base-32bit-debuginfo-5.26.1-150300.17.3.1 perl-core-DB_File-32bit-5.26.1-150300.17.3.1 perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): perl-5.26.1-150300.17.3.1 perl-base-5.26.1-150300.17.3.1 perl-base-debuginfo-5.26.1-150300.17.3.1 perl-core-DB_File-5.26.1-150300.17.3.1 perl-core-DB_File-debuginfo-5.26.1-150300.17.3.1 perl-debuginfo-5.26.1-150300.17.3.1 perl-debugsource-5.26.1-150300.17.3.1 - openSUSE Leap 15.3 (x86_64): perl-32bit-5.26.1-150300.17.3.1 perl-32bit-debuginfo-5.26.1-150300.17.3.1 perl-base-32bit-5.26.1-150300.17.3.1 perl-base-32bit-debuginfo-5.26.1-150300.17.3.1 perl-core-DB_File-32bit-5.26.1-150300.17.3.1 perl-core-DB_File-32bit-debuginfo-5.26.1-150300.17.3.1 - openSUSE Leap 15.3 (noarch): perl-doc-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (x86_64): perl-32bit-5.26.1-150300.17.3.1 perl-32bit-debuginfo-5.26.1-150300.17.3.1 perl-debugsource-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (x86_64): perl-32bit-5.26.1-150300.17.3.1 perl-32bit-debuginfo-5.26.1-150300.17.3.1 perl-debugsource-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): perl-doc-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): perl-doc-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): perl-5.26.1-150300.17.3.1 perl-base-5.26.1-150300.17.3.1 perl-base-debuginfo-5.26.1-150300.17.3.1 perl-core-DB_File-5.26.1-150300.17.3.1 perl-core-DB_File-debuginfo-5.26.1-150300.17.3.1 perl-debuginfo-5.26.1-150300.17.3.1 perl-debugsource-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): perl-32bit-debuginfo-5.26.1-150300.17.3.1 perl-base-32bit-5.26.1-150300.17.3.1 perl-base-32bit-debuginfo-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): perl-5.26.1-150300.17.3.1 perl-base-5.26.1-150300.17.3.1 perl-base-debuginfo-5.26.1-150300.17.3.1 perl-core-DB_File-5.26.1-150300.17.3.1 perl-core-DB_File-debuginfo-5.26.1-150300.17.3.1 perl-debuginfo-5.26.1-150300.17.3.1 perl-debugsource-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): perl-32bit-debuginfo-5.26.1-150300.17.3.1 perl-base-32bit-5.26.1-150300.17.3.1 perl-base-32bit-debuginfo-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): perl-5.26.1-150300.17.3.1 perl-base-5.26.1-150300.17.3.1 perl-base-debuginfo-5.26.1-150300.17.3.1 perl-debuginfo-5.26.1-150300.17.3.1 perl-debugsource-5.26.1-150300.17.3.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): perl-5.26.1-150300.17.3.1 perl-base-5.26.1-150300.17.3.1 perl-base-debuginfo-5.26.1-150300.17.3.1 perl-debuginfo-5.26.1-150300.17.3.1 perl-debugsource-5.26.1-150300.17.3.1 References: https://bugzilla.suse.com/1193489

1 0

SUSE-SU-2022:1455-1: Security update for glib2
by opensuse-security＠opensuse.org 28 Apr '22

28 Apr '22

SUSE Security Update: Security update for glib2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1455-1 Rating: low References: #1183533 Cross-References: CVE-2021-28153 CVSS scores: CVE-2021-28153 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-28153 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for glib2 fixes the following issues: - CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files (bsc#1183533). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1455=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1455=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1455=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1455=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1455=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1455=1 - SUSE Linux Enterprise Micro 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-1455=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): glib2-tests-2.62.6-150200.3.9.1 glib2-tests-debuginfo-2.62.6-150200.3.9.1 libgio-fam-2.62.6-150200.3.9.1 libgio-fam-debuginfo-2.62.6-150200.3.9.1 - openSUSE Leap 15.4 (x86_64): libgio-fam-32bit-2.62.6-150200.3.9.1 libgio-fam-32bit-debuginfo-2.62.6-150200.3.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): glib2-debugsource-2.62.6-150200.3.9.1 glib2-devel-2.62.6-150200.3.9.1 glib2-devel-debuginfo-2.62.6-150200.3.9.1 glib2-devel-static-2.62.6-150200.3.9.1 glib2-tests-2.62.6-150200.3.9.1 glib2-tests-debuginfo-2.62.6-150200.3.9.1 glib2-tools-2.62.6-150200.3.9.1 glib2-tools-debuginfo-2.62.6-150200.3.9.1 libgio-2_0-0-2.62.6-150200.3.9.1 libgio-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgio-fam-2.62.6-150200.3.9.1 libgio-fam-debuginfo-2.62.6-150200.3.9.1 libglib-2_0-0-2.62.6-150200.3.9.1 libglib-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgmodule-2_0-0-2.62.6-150200.3.9.1 libgmodule-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgobject-2_0-0-2.62.6-150200.3.9.1 libgobject-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgthread-2_0-0-2.62.6-150200.3.9.1 libgthread-2_0-0-debuginfo-2.62.6-150200.3.9.1 - openSUSE Leap 15.3 (x86_64): glib2-devel-32bit-2.62.6-150200.3.9.1 glib2-devel-32bit-debuginfo-2.62.6-150200.3.9.1 glib2-tools-32bit-2.62.6-150200.3.9.1 glib2-tools-32bit-debuginfo-2.62.6-150200.3.9.1 libgio-2_0-0-32bit-2.62.6-150200.3.9.1 libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libgio-fam-32bit-2.62.6-150200.3.9.1 libgio-fam-32bit-debuginfo-2.62.6-150200.3.9.1 libglib-2_0-0-32bit-2.62.6-150200.3.9.1 libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libgmodule-2_0-0-32bit-2.62.6-150200.3.9.1 libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libgobject-2_0-0-32bit-2.62.6-150200.3.9.1 libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libgthread-2_0-0-32bit-2.62.6-150200.3.9.1 libgthread-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 - openSUSE Leap 15.3 (noarch): gio-branding-upstream-2.62.6-150200.3.9.1 glib2-lang-2.62.6-150200.3.9.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch): glib2-lang-2.62.6-150200.3.9.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): glib2-debugsource-2.62.6-150200.3.9.1 glib2-devel-2.62.6-150200.3.9.1 glib2-devel-debuginfo-2.62.6-150200.3.9.1 glib2-tools-2.62.6-150200.3.9.1 glib2-tools-debuginfo-2.62.6-150200.3.9.1 libgio-2_0-0-2.62.6-150200.3.9.1 libgio-2_0-0-32bit-2.62.6-150200.3.9.1 libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libgio-2_0-0-debuginfo-2.62.6-150200.3.9.1 libglib-2_0-0-2.62.6-150200.3.9.1 libglib-2_0-0-32bit-2.62.6-150200.3.9.1 libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libglib-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgmodule-2_0-0-2.62.6-150200.3.9.1 libgmodule-2_0-0-32bit-2.62.6-150200.3.9.1 libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libgmodule-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgobject-2_0-0-2.62.6-150200.3.9.1 libgobject-2_0-0-32bit-2.62.6-150200.3.9.1 libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libgobject-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgthread-2_0-0-2.62.6-150200.3.9.1 libgthread-2_0-0-debuginfo-2.62.6-150200.3.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): glib2-debugsource-2.62.6-150200.3.9.1 glib2-devel-2.62.6-150200.3.9.1 glib2-devel-debuginfo-2.62.6-150200.3.9.1 glib2-tools-2.62.6-150200.3.9.1 glib2-tools-debuginfo-2.62.6-150200.3.9.1 libgio-2_0-0-2.62.6-150200.3.9.1 libgio-2_0-0-debuginfo-2.62.6-150200.3.9.1 libglib-2_0-0-2.62.6-150200.3.9.1 libglib-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgmodule-2_0-0-2.62.6-150200.3.9.1 libgmodule-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgobject-2_0-0-2.62.6-150200.3.9.1 libgobject-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgthread-2_0-0-2.62.6-150200.3.9.1 libgthread-2_0-0-debuginfo-2.62.6-150200.3.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libgio-2_0-0-32bit-2.62.6-150200.3.9.1 libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libglib-2_0-0-32bit-2.62.6-150200.3.9.1 libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libgmodule-2_0-0-32bit-2.62.6-150200.3.9.1 libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 libgobject-2_0-0-32bit-2.62.6-150200.3.9.1 libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): glib2-lang-2.62.6-150200.3.9.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): glib2-debugsource-2.62.6-150200.3.9.1 glib2-tools-2.62.6-150200.3.9.1 glib2-tools-debuginfo-2.62.6-150200.3.9.1 libgio-2_0-0-2.62.6-150200.3.9.1 libgio-2_0-0-debuginfo-2.62.6-150200.3.9.1 libglib-2_0-0-2.62.6-150200.3.9.1 libglib-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgmodule-2_0-0-2.62.6-150200.3.9.1 libgmodule-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgobject-2_0-0-2.62.6-150200.3.9.1 libgobject-2_0-0-debuginfo-2.62.6-150200.3.9.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): glib2-debugsource-2.62.6-150200.3.9.1 glib2-tools-2.62.6-150200.3.9.1 glib2-tools-debuginfo-2.62.6-150200.3.9.1 libgio-2_0-0-2.62.6-150200.3.9.1 libgio-2_0-0-debuginfo-2.62.6-150200.3.9.1 libglib-2_0-0-2.62.6-150200.3.9.1 libglib-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgmodule-2_0-0-2.62.6-150200.3.9.1 libgmodule-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgobject-2_0-0-2.62.6-150200.3.9.1 libgobject-2_0-0-debuginfo-2.62.6-150200.3.9.1 - SUSE Linux Enterprise Micro 5.0 (aarch64 x86_64): glib2-debugsource-2.62.6-150200.3.9.1 glib2-tools-2.62.6-150200.3.9.1 glib2-tools-debuginfo-2.62.6-150200.3.9.1 libgio-2_0-0-2.62.6-150200.3.9.1 libgio-2_0-0-debuginfo-2.62.6-150200.3.9.1 libglib-2_0-0-2.62.6-150200.3.9.1 libglib-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgmodule-2_0-0-2.62.6-150200.3.9.1 libgmodule-2_0-0-debuginfo-2.62.6-150200.3.9.1 libgobject-2_0-0-2.62.6-150200.3.9.1 libgobject-2_0-0-debuginfo-2.62.6-150200.3.9.1 References: https://www.suse.com/security/cve/CVE-2021-28153.html https://bugzilla.suse.com/1183533

1 0

SUSE-RU-2022:1438-1: Recommended update for systemd-presets-common-SUSE
by maintenance＠opensuse.org 27 Apr '22

27 Apr '22

SUSE Recommended Update: Recommended update for systemd-presets-common-SUSE ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1438-1 Rating: low References: #1195251 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemd-presets-common-SUSE fixes the following issue: - enable vgauthd service for VMWare by default (bsc#1195251) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1438=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1438=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1438=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1438=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1438=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1438=1 - SUSE Linux Enterprise Micro 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-1438=1 Package List: - openSUSE Leap 15.4 (noarch): systemd-presets-common-SUSE-15-150100.8.12.1 - openSUSE Leap 15.3 (noarch): systemd-presets-common-SUSE-15-150100.8.12.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch): systemd-presets-common-SUSE-15-150100.8.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): systemd-presets-common-SUSE-15-150100.8.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): systemd-presets-common-SUSE-15-150100.8.12.1 - SUSE Linux Enterprise Micro 5.1 (noarch): systemd-presets-common-SUSE-15-150100.8.12.1 - SUSE Linux Enterprise Micro 5.0 (noarch): systemd-presets-common-SUSE-15-150100.8.12.1 References: https://bugzilla.suse.com/1195251

1 0

SUSE-RU-2022:1439-1: moderate: Recommended update for binutils
by maintenance＠opensuse.org 27 Apr '22

27 Apr '22

SUSE Recommended Update: Recommended update for binutils ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1439-1 Rating: moderate References: #1198237 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for binutils fixes the following issues: - The official name IBM z16 for IBM zSeries arch14 is recognized. (bsc#1198237) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1439=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1439=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1439=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1439=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1439=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1439=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1439=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1439=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1439=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): binutils-2.37-150100.7.29.1 binutils-debuginfo-2.37-150100.7.29.1 binutils-debugsource-2.37-150100.7.29.1 binutils-devel-2.37-150100.7.29.1 binutils-gold-2.37-150100.7.29.1 binutils-gold-debuginfo-2.37-150100.7.29.1 cross-arm-binutils-2.37-150100.7.29.1 cross-arm-binutils-debuginfo-2.37-150100.7.29.1 cross-arm-binutils-debugsource-2.37-150100.7.29.1 cross-avr-binutils-2.37-150100.7.29.1 cross-avr-binutils-debuginfo-2.37-150100.7.29.1 cross-avr-binutils-debugsource-2.37-150100.7.29.1 cross-epiphany-binutils-2.37-150100.7.29.1 cross-epiphany-binutils-debuginfo-2.37-150100.7.29.1 cross-epiphany-binutils-debugsource-2.37-150100.7.29.1 cross-hppa-binutils-2.37-150100.7.29.1 cross-hppa-binutils-debuginfo-2.37-150100.7.29.1 cross-hppa-binutils-debugsource-2.37-150100.7.29.1 cross-hppa64-binutils-2.37-150100.7.29.1 cross-hppa64-binutils-debuginfo-2.37-150100.7.29.1 cross-hppa64-binutils-debugsource-2.37-150100.7.29.1 cross-i386-binutils-2.37-150100.7.29.1 cross-i386-binutils-debuginfo-2.37-150100.7.29.1 cross-i386-binutils-debugsource-2.37-150100.7.29.1 cross-ia64-binutils-2.37-150100.7.29.1 cross-ia64-binutils-debuginfo-2.37-150100.7.29.1 cross-ia64-binutils-debugsource-2.37-150100.7.29.1 cross-m68k-binutils-2.37-150100.7.29.1 cross-m68k-binutils-debuginfo-2.37-150100.7.29.1 cross-m68k-binutils-debugsource-2.37-150100.7.29.1 cross-mips-binutils-2.37-150100.7.29.1 cross-mips-binutils-debuginfo-2.37-150100.7.29.1 cross-mips-binutils-debugsource-2.37-150100.7.29.1 cross-ppc-binutils-2.37-150100.7.29.1 cross-ppc-binutils-debuginfo-2.37-150100.7.29.1 cross-ppc-binutils-debugsource-2.37-150100.7.29.1 cross-ppc64-binutils-2.37-150100.7.29.1 cross-ppc64-binutils-debuginfo-2.37-150100.7.29.1 cross-ppc64-binutils-debugsource-2.37-150100.7.29.1 cross-riscv64-binutils-2.37-150100.7.29.1 cross-riscv64-binutils-debuginfo-2.37-150100.7.29.1 cross-riscv64-binutils-debugsource-2.37-150100.7.29.1 cross-rx-binutils-2.37-150100.7.29.1 cross-rx-binutils-debuginfo-2.37-150100.7.29.1 cross-rx-binutils-debugsource-2.37-150100.7.29.1 cross-s390-binutils-2.37-150100.7.29.1 cross-s390-binutils-debuginfo-2.37-150100.7.29.1 cross-s390-binutils-debugsource-2.37-150100.7.29.1 cross-sparc-binutils-2.37-150100.7.29.1 cross-sparc-binutils-debuginfo-2.37-150100.7.29.1 cross-sparc-binutils-debugsource-2.37-150100.7.29.1 cross-sparc64-binutils-2.37-150100.7.29.1 cross-sparc64-binutils-debuginfo-2.37-150100.7.29.1 cross-sparc64-binutils-debugsource-2.37-150100.7.29.1 cross-spu-binutils-2.37-150100.7.29.1 cross-spu-binutils-debuginfo-2.37-150100.7.29.1 cross-spu-binutils-debugsource-2.37-150100.7.29.1 libctf-nobfd0-2.37-150100.7.29.1 libctf-nobfd0-debuginfo-2.37-150100.7.29.1 libctf0-2.37-150100.7.29.1 libctf0-debuginfo-2.37-150100.7.29.1 - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): cross-s390x-binutils-2.37-150100.7.29.1 cross-s390x-binutils-debuginfo-2.37-150100.7.29.1 cross-s390x-binutils-debugsource-2.37-150100.7.29.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x): cross-x86_64-binutils-2.37-150100.7.29.1 cross-x86_64-binutils-debuginfo-2.37-150100.7.29.1 cross-x86_64-binutils-debugsource-2.37-150100.7.29.1 - openSUSE Leap 15.4 (aarch64 s390x x86_64): cross-ppc64le-binutils-2.37-150100.7.29.1 cross-ppc64le-binutils-debuginfo-2.37-150100.7.29.1 cross-ppc64le-binutils-debugsource-2.37-150100.7.29.1 - openSUSE Leap 15.4 (ppc64le s390x x86_64): cross-aarch64-binutils-2.37-150100.7.29.1 cross-aarch64-binutils-debuginfo-2.37-150100.7.29.1 cross-aarch64-binutils-debugsource-2.37-150100.7.29.1 - openSUSE Leap 15.4 (x86_64): binutils-devel-32bit-2.37-150100.7.29.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): binutils-2.37-150100.7.29.1 binutils-debuginfo-2.37-150100.7.29.1 binutils-debugsource-2.37-150100.7.29.1 binutils-devel-2.37-150100.7.29.1 binutils-gold-2.37-150100.7.29.1 binutils-gold-debuginfo-2.37-150100.7.29.1 cross-arm-binutils-2.37-150100.7.29.1 cross-arm-binutils-debuginfo-2.37-150100.7.29.1 cross-arm-binutils-debugsource-2.37-150100.7.29.1 cross-avr-binutils-2.37-150100.7.29.1 cross-avr-binutils-debuginfo-2.37-150100.7.29.1 cross-avr-binutils-debugsource-2.37-150100.7.29.1 cross-epiphany-binutils-2.37-150100.7.29.1 cross-epiphany-binutils-debuginfo-2.37-150100.7.29.1 cross-epiphany-binutils-debugsource-2.37-150100.7.29.1 cross-hppa-binutils-2.37-150100.7.29.1 cross-hppa-binutils-debuginfo-2.37-150100.7.29.1 cross-hppa-binutils-debugsource-2.37-150100.7.29.1 cross-hppa64-binutils-2.37-150100.7.29.1 cross-hppa64-binutils-debuginfo-2.37-150100.7.29.1 cross-hppa64-binutils-debugsource-2.37-150100.7.29.1 cross-i386-binutils-2.37-150100.7.29.1 cross-i386-binutils-debuginfo-2.37-150100.7.29.1 cross-i386-binutils-debugsource-2.37-150100.7.29.1 cross-ia64-binutils-2.37-150100.7.29.1 cross-ia64-binutils-debuginfo-2.37-150100.7.29.1 cross-ia64-binutils-debugsource-2.37-150100.7.29.1 cross-m68k-binutils-2.37-150100.7.29.1 cross-m68k-binutils-debuginfo-2.37-150100.7.29.1 cross-m68k-binutils-debugsource-2.37-150100.7.29.1 cross-mips-binutils-2.37-150100.7.29.1 cross-mips-binutils-debuginfo-2.37-150100.7.29.1 cross-mips-binutils-debugsource-2.37-150100.7.29.1 cross-ppc-binutils-2.37-150100.7.29.1 cross-ppc-binutils-debuginfo-2.37-150100.7.29.1 cross-ppc-binutils-debugsource-2.37-150100.7.29.1 cross-ppc64-binutils-2.37-150100.7.29.1 cross-ppc64-binutils-debuginfo-2.37-150100.7.29.1 cross-ppc64-binutils-debugsource-2.37-150100.7.29.1 cross-riscv64-binutils-2.37-150100.7.29.1 cross-riscv64-binutils-debuginfo-2.37-150100.7.29.1 cross-riscv64-binutils-debugsource-2.37-150100.7.29.1 cross-rx-binutils-2.37-150100.7.29.1 cross-rx-binutils-debuginfo-2.37-150100.7.29.1 cross-rx-binutils-debugsource-2.37-150100.7.29.1 cross-s390-binutils-2.37-150100.7.29.1 cross-s390-binutils-debuginfo-2.37-150100.7.29.1 cross-s390-binutils-debugsource-2.37-150100.7.29.1 cross-sparc-binutils-2.37-150100.7.29.1 cross-sparc-binutils-debuginfo-2.37-150100.7.29.1 cross-sparc-binutils-debugsource-2.37-150100.7.29.1 cross-sparc64-binutils-2.37-150100.7.29.1 cross-sparc64-binutils-debuginfo-2.37-150100.7.29.1 cross-sparc64-binutils-debugsource-2.37-150100.7.29.1 cross-spu-binutils-2.37-150100.7.29.1 cross-spu-binutils-debuginfo-2.37-150100.7.29.1 cross-spu-binutils-debugsource-2.37-150100.7.29.1 libctf-nobfd0-2.37-150100.7.29.1 libctf-nobfd0-debuginfo-2.37-150100.7.29.1 libctf0-2.37-150100.7.29.1 libctf0-debuginfo-2.37-150100.7.29.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): cross-s390x-binutils-2.37-150100.7.29.1 cross-s390x-binutils-debuginfo-2.37-150100.7.29.1 cross-s390x-binutils-debugsource-2.37-150100.7.29.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x): cross-x86_64-binutils-2.37-150100.7.29.1 cross-x86_64-binutils-debuginfo-2.37-150100.7.29.1 cross-x86_64-binutils-debugsource-2.37-150100.7.29.1 - openSUSE Leap 15.3 (aarch64 s390x x86_64): cross-ppc64le-binutils-2.37-150100.7.29.1 cross-ppc64le-binutils-debuginfo-2.37-150100.7.29.1 cross-ppc64le-binutils-debugsource-2.37-150100.7.29.1 - openSUSE Leap 15.3 (ppc64le s390x x86_64): cross-aarch64-binutils-2.37-150100.7.29.1 cross-aarch64-binutils-debuginfo-2.37-150100.7.29.1 cross-aarch64-binutils-debugsource-2.37-150100.7.29.1 - openSUSE Leap 15.3 (x86_64): binutils-devel-32bit-2.37-150100.7.29.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): binutils-2.37-150100.7.29.1 binutils-debuginfo-2.37-150100.7.29.1 binutils-debugsource-2.37-150100.7.29.1 binutils-devel-2.37-150100.7.29.1 binutils-devel-32bit-2.37-150100.7.29.1 libctf-nobfd0-2.37-150100.7.29.1 libctf-nobfd0-debuginfo-2.37-150100.7.29.1 libctf0-2.37-150100.7.29.1 libctf0-debuginfo-2.37-150100.7.29.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x x86_64): binutils-debuginfo-2.37-150100.7.29.1 binutils-debugsource-2.37-150100.7.29.1 binutils-gold-2.37-150100.7.29.1 binutils-gold-debuginfo-2.37-150100.7.29.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): binutils-debuginfo-2.37-150100.7.29.1 binutils-debugsource-2.37-150100.7.29.1 binutils-gold-2.37-150100.7.29.1 binutils-gold-debuginfo-2.37-150100.7.29.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (x86_64): binutils-debugsource-2.37-150100.7.29.1 binutils-devel-32bit-2.37-150100.7.29.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (x86_64): binutils-debugsource-2.37-150100.7.29.1 binutils-devel-32bit-2.37-150100.7.29.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): binutils-2.37-150100.7.29.1 binutils-debuginfo-2.37-150100.7.29.1 binutils-debugsource-2.37-150100.7.29.1 binutils-devel-2.37-150100.7.29.1 libctf-nobfd0-2.37-150100.7.29.1 libctf-nobfd0-debuginfo-2.37-150100.7.29.1 libctf0-2.37-150100.7.29.1 libctf0-debuginfo-2.37-150100.7.29.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): binutils-2.37-150100.7.29.1 binutils-debuginfo-2.37-150100.7.29.1 binutils-debugsource-2.37-150100.7.29.1 binutils-devel-2.37-150100.7.29.1 libctf-nobfd0-2.37-150100.7.29.1 libctf-nobfd0-debuginfo-2.37-150100.7.29.1 libctf0-2.37-150100.7.29.1 libctf0-debuginfo-2.37-150100.7.29.1 References: https://bugzilla.suse.com/1198237

1 0

SUSE-SU-2022:1437-1: moderate: Security update for buildah
by opensuse-security＠opensuse.org 27 Apr '22

27 Apr '22

SUSE Security Update: Security update for buildah ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1437-1 Rating: moderate References: #1197870 Cross-References: CVE-2022-27651 CVSS scores: CVE-2022-27651 (NVD) : 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2022-27651 (SUSE): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Containers 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for buildah fixes the following issues: - CVE-2022-27651: Fixed incorrect default inheritable capabilities for linux container (bsc#1197870). Update to version 1.25.1. The following non-security bugs were fixed: - add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043 Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1437=1 - SUSE Linux Enterprise Module for Containers 15-SP3: zypper in -t patch SUSE-SLE-Module-Containers-15-SP3-2022-1437=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): buildah-1.25.1-150300.8.6.1 - SUSE Linux Enterprise Module for Containers 15-SP3 (aarch64 ppc64le s390x x86_64): buildah-1.25.1-150300.8.6.1 References: https://www.suse.com/security/cve/CVE-2022-27651.html https://bugzilla.suse.com/1197870

1 0

SUSE-SU-2022:1435-1: important: Security update for firewalld, golang-github-prometheus-prometheus
by opensuse-security＠opensuse.org 27 Apr '22

27 Apr '22

SUSE Security Update: Security update for firewalld, golang-github-prometheus-prometheus ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1435-1 Rating: important References: #1196338 #1197042 SLE-24373 SLE-24374 SLE-24375 Cross-References: CVE-2022-21698 CVSS scores: CVE-2022-21698 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-21698 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 6 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability, contains three features and has one errata is now available. Description: This update for firewalld, golang-github-prometheus-prometheus fixes the following issues: Security fixes for golang-github-prometheus-prometheus: - CVE-2022-21698: Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests with non-standard HTTP methods (bsc#1196338). Other non security changes for golang-github-prometheus-prometheus: - Build `firewalld-prometheus-config` only for SUSE Linux Enterprise 15, 15-SP1 and 15-SP2, and require `firewalld`. - Only recommends `firewalld-prometheus-config` as prometheus does not require it to run. - Create `firewalld-prometheus-config` subpackage (bsc#1197042, jsc#SLE-24373, jsc#SLE-24374, jsc#SLE-24375) Other non security changes for firewalld: - Provide dummy `firewalld-prometheus-config` package (bsc#1197042) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1435=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1435=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-1435=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2022-1435=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.1-2022-1435=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1435=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1435=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1435=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1435=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-1435=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-150100.4.9.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-150100.4.9.2 - openSUSE Leap 15.3 (noarch): firewall-applet-0.9.3-150300.3.6.1 firewall-config-0.9.3-150300.3.6.1 firewall-macros-0.9.3-150300.3.6.1 firewalld-0.9.3-150300.3.6.1 firewalld-lang-0.9.3-150300.3.6.1 python3-firewall-0.9.3-150300.3.6.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-150100.4.9.2 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-150100.4.9.2 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.1 (aarch64 ppc64le s390x x86_64): firewalld-prometheus-config-0.1-150100.4.9.2 golang-github-prometheus-prometheus-2.32.1-150100.4.9.2 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (noarch): firewall-applet-0.9.3-150300.3.6.1 firewall-config-0.9.3-150300.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): firewall-macros-0.9.3-150300.3.6.1 firewalld-0.9.3-150300.3.6.1 firewalld-lang-0.9.3-150300.3.6.1 python3-firewall-0.9.3-150300.3.6.1 - SUSE Linux Enterprise Micro 5.2 (noarch): firewalld-0.9.3-150300.3.6.1 python3-firewall-0.9.3-150300.3.6.1 - SUSE Linux Enterprise Micro 5.1 (noarch): firewalld-0.9.3-150300.3.6.1 python3-firewall-0.9.3-150300.3.6.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): firewalld-prometheus-config-0.1-150100.4.9.2 golang-github-prometheus-prometheus-2.32.1-150100.4.9.2 References: https://www.suse.com/security/cve/CVE-2022-21698.html https://bugzilla.suse.com/1196338 https://bugzilla.suse.com/1197042

1 0

SUSE-SU-2022:1436-1: moderate: Security update for libaom
by opensuse-security＠opensuse.org 27 Apr '22

27 Apr '22

SUSE Security Update: Security update for libaom ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1436-1 Rating: moderate References: #1185778 Cross-References: CVE-2021-30473 CVSS scores: CVE-2021-30473 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30473 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libaom fixes the following issues: - CVE-2021-30473: AOMedia in aom_image.c frees memory that is not located on the heap (bsc#1185778). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1436=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1436=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1436=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1436=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libaom0-1.0.0-150200.3.12.1 libaom0-debuginfo-1.0.0-150200.3.12.1 - openSUSE Leap 15.4 (x86_64): libaom0-32bit-1.0.0-150200.3.12.1 libaom0-32bit-debuginfo-1.0.0-150200.3.12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): aom-tools-1.0.0-150200.3.12.1 aom-tools-debuginfo-1.0.0-150200.3.12.1 libaom-debugsource-1.0.0-150200.3.12.1 libaom-devel-1.0.0-150200.3.12.1 libaom0-1.0.0-150200.3.12.1 libaom0-debuginfo-1.0.0-150200.3.12.1 - openSUSE Leap 15.3 (x86_64): libaom0-32bit-1.0.0-150200.3.12.1 libaom0-32bit-debuginfo-1.0.0-150200.3.12.1 - openSUSE Leap 15.3 (noarch): libaom-devel-doc-1.0.0-150200.3.12.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): libaom-debugsource-1.0.0-150200.3.12.1 libaom0-1.0.0-150200.3.12.1 libaom0-debuginfo-1.0.0-150200.3.12.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libaom-debugsource-1.0.0-150200.3.12.1 libaom0-1.0.0-150200.3.12.1 libaom0-debuginfo-1.0.0-150200.3.12.1 References: https://www.suse.com/security/cve/CVE-2021-30473.html https://bugzilla.suse.com/1185778

1 0