April 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:1279-1: important: Recommended update for sgi-bitmap-fonts
by maintenance＠opensuse.org 20 Apr '22

20 Apr '22

SUSE Recommended Update: Recommended update for sgi-bitmap-fonts ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1279-1 Rating: important References: #1197854 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sgi-bitmap-fonts fixes the following issues: - Fix package building issue (bsc#1197854) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1279=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1279=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1279=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1279=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1279=1 Package List: - openSUSE Leap 15.4 (noarch): sgi-bitmap-fonts-1.0-150000.3.3.1 - openSUSE Leap 15.3 (noarch): sgi-bitmap-fonts-1.0-150000.3.3.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch): sgi-bitmap-fonts-1.0-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): sgi-bitmap-fonts-1.0-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): sgi-bitmap-fonts-1.0-150000.3.3.1 References: https://bugzilla.suse.com/1197854

1 0

SUSE-SU-2022:1277-1: moderate: Security update for dcraw
by opensuse-security＠opensuse.org 20 Apr '22

20 Apr '22

SUSE Security Update: Security update for dcraw ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1277-1 Rating: moderate References: #1056170 #1063798 #1084690 #1097973 #1097974 #1117436 #1117512 #1117517 #1117622 #1117896 #1189642 Cross-References: CVE-2017-13735 CVE-2017-14608 CVE-2018-19565 CVE-2018-19566 CVE-2018-19567 CVE-2018-19568 CVE-2018-19655 CVE-2018-5801 CVE-2018-5805 CVE-2018-5806 CVE-2021-3624 CVSS scores: CVE-2017-13735 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2017-13735 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-14608 (NVD) : 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2017-14608 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2018-19565 (NVD) : 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVE-2018-19565 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2018-19566 (NVD) : 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVE-2018-19566 (SUSE): 4.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2018-19567 (NVD) : 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-19567 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2018-19568 (NVD) : 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-19568 (SUSE): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-19655 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-19655 (SUSE): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-5801 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-5801 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2018-5805 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-5805 (SUSE): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-5806 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-5806 (SUSE): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3624 (SUSE): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for dcraw fixes the following issues: - CVE-2017-13735: Fixed a denial of service issue due to a floating point exception (bsc#1056170). - CVE-2017-14608: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1063798). - CVE-2018-19655: Fixed a buffer overflow that could lead to an application crash (bsc#1117896). - CVE-2018-5801: Fixed an invalid memory access that could lead to denial of service (bsc#1084690). - CVE-2018-5805: Fixed a buffer overflow that could lead to an application crash (bsc#1097973). - CVE-2018-5806: Fixed an invalid memory access that could lead to denial of service (bsc#1097974). - CVE-2018-19565: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1117622). - CVE-2018-19566: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1117517). - CVE-2018-19567: Fixed a denial of service issue due to a floating point exception (bsc#1117512). - CVE-2018-19568: Fixed a denial of service issue due to a floating point exception (bsc#1117436). - CVE-2021-3624: Fixed a buffer overflow that could lead to code execution or denial of service (bsc#1189642). Non-security fixes: - Updated to version 9.28.0. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1277=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1277=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): dcraw-9.28.0-150000.3.3.1 dcraw-debuginfo-9.28.0-150000.3.3.1 dcraw-debugsource-9.28.0-150000.3.3.1 - openSUSE Leap 15.4 (noarch): dcraw-lang-9.28.0-150000.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dcraw-9.28.0-150000.3.3.1 dcraw-debuginfo-9.28.0-150000.3.3.1 dcraw-debugsource-9.28.0-150000.3.3.1 - openSUSE Leap 15.3 (noarch): dcraw-lang-9.28.0-150000.3.3.1 References: https://www.suse.com/security/cve/CVE-2017-13735.html https://www.suse.com/security/cve/CVE-2017-14608.html https://www.suse.com/security/cve/CVE-2018-19565.html https://www.suse.com/security/cve/CVE-2018-19566.html https://www.suse.com/security/cve/CVE-2018-19567.html https://www.suse.com/security/cve/CVE-2018-19568.html https://www.suse.com/security/cve/CVE-2018-19655.html https://www.suse.com/security/cve/CVE-2018-5801.html https://www.suse.com/security/cve/CVE-2018-5805.html https://www.suse.com/security/cve/CVE-2018-5806.html https://www.suse.com/security/cve/CVE-2021-3624.html https://bugzilla.suse.com/1056170 https://bugzilla.suse.com/1063798 https://bugzilla.suse.com/1084690 https://bugzilla.suse.com/1097973 https://bugzilla.suse.com/1097974 https://bugzilla.suse.com/1117436 https://bugzilla.suse.com/1117512 https://bugzilla.suse.com/1117517 https://bugzilla.suse.com/1117622 https://bugzilla.suse.com/1117896 https://bugzilla.suse.com/1189642

1 0

SUSE-SU-2022:1271-1: important: Security update for netty
by opensuse-security＠opensuse.org 20 Apr '22

20 Apr '22

SUSE Security Update: Security update for netty ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1271-1 Rating: important References: #1182103 #1183262 #1190610 #1190613 #1193672 Cross-References: CVE-2021-21290 CVE-2021-21295 CVE-2021-37136 CVE-2021-37137 CVE-2021-43797 CVSS scores: CVE-2021-21290 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-21290 (SUSE): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-21295 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-21295 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2021-37136 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-37136 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-37137 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-37137 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-43797 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-43797 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for netty fixes the following issues: - Updated to version 4.1.75: - CVE-2021-37136: Fixed an unrestricted decompressed data size in Bzip2Decoder (bsc#1190610). - CVE-2021-37137: Fixed an unrestricted chunk length in SnappyFrameDecoder, which might lead to excessive memory usage (#bsc#1190613). - CVE-2021-43797: Fixed a potential HTTP request smuggling issue due to insufficient validation against control characters (bsc#1193672). - CVE-2021-21290: Fixed an information disclosure via the local system temporary directory (bsc#1182103). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1271=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1271=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): netty-4.1.75-150200.4.6.2 - openSUSE Leap 15.4 (noarch): netty-javadoc-4.1.75-150200.4.6.2 netty-poms-4.1.75-150200.4.6.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): netty-4.1.75-150200.4.6.2 - openSUSE Leap 15.3 (noarch): netty-javadoc-4.1.75-150200.4.6.2 netty-poms-4.1.75-150200.4.6.2 References: https://www.suse.com/security/cve/CVE-2021-21290.html https://www.suse.com/security/cve/CVE-2021-21295.html https://www.suse.com/security/cve/CVE-2021-37136.html https://www.suse.com/security/cve/CVE-2021-37137.html https://www.suse.com/security/cve/CVE-2021-43797.html https://bugzilla.suse.com/1182103 https://bugzilla.suse.com/1183262 https://bugzilla.suse.com/1190610 https://bugzilla.suse.com/1190613 https://bugzilla.suse.com/1193672

1 0

SUSE-SU-2022:1274-1: important: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 20 Apr '22

20 Apr '22

SUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1274-1 Rating: important References: #1198351 Cross-References: CVE-2022-1270 CVSS scores: CVE-2022-1270 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2022-1270: Fixed a heap buffer overflow when parsing MIFF (bsc#1198351). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1274=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1274=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): GraphicsMagick-1.3.35-150300.3.3.1 GraphicsMagick-debuginfo-1.3.35-150300.3.3.1 GraphicsMagick-debugsource-1.3.35-150300.3.3.1 GraphicsMagick-devel-1.3.35-150300.3.3.1 libGraphicsMagick++-Q16-12-1.3.35-150300.3.3.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.35-150300.3.3.1 libGraphicsMagick++-devel-1.3.35-150300.3.3.1 libGraphicsMagick-Q16-3-1.3.35-150300.3.3.1 libGraphicsMagick-Q16-3-debuginfo-1.3.35-150300.3.3.1 libGraphicsMagick3-config-1.3.35-150300.3.3.1 libGraphicsMagickWand-Q16-2-1.3.35-150300.3.3.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.35-150300.3.3.1 perl-GraphicsMagick-1.3.35-150300.3.3.1 perl-GraphicsMagick-debuginfo-1.3.35-150300.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): GraphicsMagick-1.3.35-150300.3.3.1 GraphicsMagick-debuginfo-1.3.35-150300.3.3.1 GraphicsMagick-debugsource-1.3.35-150300.3.3.1 GraphicsMagick-devel-1.3.35-150300.3.3.1 libGraphicsMagick++-Q16-12-1.3.35-150300.3.3.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.35-150300.3.3.1 libGraphicsMagick++-devel-1.3.35-150300.3.3.1 libGraphicsMagick-Q16-3-1.3.35-150300.3.3.1 libGraphicsMagick-Q16-3-debuginfo-1.3.35-150300.3.3.1 libGraphicsMagick3-config-1.3.35-150300.3.3.1 libGraphicsMagickWand-Q16-2-1.3.35-150300.3.3.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.35-150300.3.3.1 perl-GraphicsMagick-1.3.35-150300.3.3.1 perl-GraphicsMagick-debuginfo-1.3.35-150300.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-1270.html https://bugzilla.suse.com/1198351

1 0

SUSE-SU-2022:1273-1: important: Security update for SDL
by opensuse-security＠opensuse.org 20 Apr '22

20 Apr '22

SUSE Security Update: Security update for SDL ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1273-1 Rating: important References: #1181201 #1181202 #1198001 Cross-References: CVE-2020-14409 CVE-2020-14410 CVE-2021-33657 CVSS scores: CVE-2020-14409 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-14409 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-14410 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2020-14410 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-33657 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-33657 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for SDL fixes the following issues: - CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202) - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201) - CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1273=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1273=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1273=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1273=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1273=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1273=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-1273=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-1273=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1273=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1273=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-1273=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-1273=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-1273=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1273=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1273=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-1273=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1273=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1273=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1273=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-1273=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-1273=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1273=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1273=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1273=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-1273=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - openSUSE Leap 15.4 (x86_64): libSDL-1_2-0-32bit-1.2.15-150000.3.19.1 libSDL-1_2-0-32bit-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-32bit-1.2.15-150000.3.19.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - openSUSE Leap 15.3 (x86_64): libSDL-1_2-0-32bit-1.2.15-150000.3.19.1 libSDL-1_2-0-32bit-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-32bit-1.2.15-150000.3.19.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Manager Proxy 4.1 (x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x): libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 - SUSE CaaS Platform 4.0 (x86_64): SDL-debugsource-1.2.15-150000.3.19.1 libSDL-1_2-0-1.2.15-150000.3.19.1 libSDL-1_2-0-debuginfo-1.2.15-150000.3.19.1 libSDL-devel-1.2.15-150000.3.19.1 References: https://www.suse.com/security/cve/CVE-2020-14409.html https://www.suse.com/security/cve/CVE-2020-14410.html https://www.suse.com/security/cve/CVE-2021-33657.html https://bugzilla.suse.com/1181201 https://bugzilla.suse.com/1181202 https://bugzilla.suse.com/1198001

1 0

SUSE-SU-2022:1276-1: important: Security update for nbd
by opensuse-security＠opensuse.org 20 Apr '22

20 Apr '22

SUSE Security Update: Security update for nbd ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1276-1 Rating: important References: #1196827 #1196828 Cross-References: CVE-2022-26495 CVE-2022-26496 CVSS scores: CVE-2022-26495 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26495 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26496 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26496 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for nbd fixes the following issues: - CVE-2022-26495: Fixed an integer overflow with a resultant heap-based buffer overflow (bsc#1196827). - CVE-2022-26496: Fixed a stack-based buffer overflow when parsing the name field by sending a crafted NBD_OPT_INFO (bsc#1196828). Update to version 3.24 (bsc#1196827, bsc#1196828, CVE-2022-26495, CVE-2022-26496): * https://github.com/advisories/GHSA-q9rw-8758-hccj Update to version 3.23: * Don't overwrite the hostname with the TLS hostname Update to version 3.22: - nbd-server: handle auth for v6-mapped IPv4 addresses - nbd-client.c: parse the next option in all cases - configure.ac: silence a few autoconf 2.71 warnings - spec: Relax NBD_OPT_LIST_META_CONTEXTS - client: Don't confuse Unix socket with TLS hostname - server: Avoid deprecated g_memdup Update to version 3.21: - Fix --disable-manpages build - Fix a bug in whitespace handling regarding authorization files - Support client-side marking of devices as read-only - Support preinitialized NBD connection (i.e., skip the negotiation). - Fix the systemd unit file for nbd-client so it works with netlink (the more common situation nowadays) Update to 3.20.0 (no changelog) Update to version 3.19.0: * Better error messages in case of unexpected disconnects * Better compatibility with non-bash sh implementations (for configure.sh) * Fix for a segfault in NBD_OPT_INFO handling * The ability to specify whether to listen on both TCP and Unix domain sockets, rather than to always do so * Various minor editorial and spelling fixes in the documentation. Update to version 1.18.0: * Client: Add the "-g" option to avoid even trying the NBD_OPT_GO message * Server: fixes to inetd mode * Don't make gnutls and libnl automagic. * Server: bugfixes in handling of some export names during verification. * Server: clean supplementary groups when changing user. * Client: when using the netlink protocol, only set a timeout when there actually is a timeout, rather than defaulting to 0 seconds * Improve documentation on the nbdtab file * Minor improvements to some error messages * Improvements to test suite so it works better on non-GNU userland environments - Update to version 1.17.0: * proto: add xNBD command NBD_CMD_CACHE to the spec * server: do not crash when handling child name * server: Close socket pair when fork fails Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1276=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1276=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nbd-3.24-150000.3.3.1 nbd-debuginfo-3.24-150000.3.3.1 nbd-debugsource-3.24-150000.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nbd-3.24-150000.3.3.1 nbd-debuginfo-3.24-150000.3.3.1 nbd-debugsource-3.24-150000.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-26495.html https://www.suse.com/security/cve/CVE-2022-26496.html https://bugzilla.suse.com/1196827 https://bugzilla.suse.com/1196828

1 0

SUSE-SU-2022:1265-1: important: Security update for jsoup, jsr-305
by opensuse-security＠opensuse.org 19 Apr '22

19 Apr '22

SUSE Security Update: Security update for jsoup, jsr-305 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1265-1 Rating: important References: #1189749 Cross-References: CVE-2021-37714 CVSS scores: CVE-2021-37714 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-37714 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jsoup, jsr-305 fixes the following issues: - CVE-2021-37714: Fixed infinite in untrusted HTML or XML data parsing (bsc#1189749). Changes in jsr-305: - Build with java source and target levels 8 - Upgrade to upstream version 3.0.2 Changes in jsoup: - Upgrade to upstream version 1.14.2 - Generate tarball using source service instead of a script Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1265=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1265=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1265=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1265=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1265=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1265=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1265=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1265=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1265=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1265=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1265=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1265=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1265=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1265=1 Package List: - openSUSE Leap 15.4 (noarch): jsoup-1.14.2-150200.3.3.1 jsoup-javadoc-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 jsr-305-javadoc-3.0.2-150200.3.3.1 - openSUSE Leap 15.3 (noarch): jsoup-1.14.2-150200.3.3.1 jsoup-javadoc-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 jsr-305-javadoc-3.0.2-150200.3.3.1 - SUSE Manager Server 4.1 (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Manager Retail Branch Server 4.1 (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Manager Proxy 4.1 (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 - SUSE Enterprise Storage 7 (noarch): jsoup-1.14.2-150200.3.3.1 jsr-305-3.0.2-150200.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-37714.html https://bugzilla.suse.com/1189749

1 0

SUSE-RU-2022:1263-1: critical: Recommended update for cloud-regionsrv-client
by maintenance＠opensuse.org 19 Apr '22

19 Apr '22

SUSE Recommended Update: Recommended update for cloud-regionsrv-client ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1263-1 Rating: critical References: #1198389 Affected Products: SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Public Cloud 15-SP1 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-regionsrv-client fixes the following issues: - Update to version 10.0.3 (bsc#1198389) - Descend into the extension tree even if top level module is recommended - Cache license state for AHB support to detect type switch - Properly clean suse.com credentials when switching from SCC to update infrastructure - New log message to indicate base product registration success Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1263=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1263=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-1263=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-1263=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-1263=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2022-1263=1 - SUSE Linux Enterprise Module for Public Cloud 15: zypper in -t patch SUSE-SLE-Module-Public-Cloud-Unrestricted-15-2022-1263=1 Package List: - openSUSE Leap 15.4 (noarch): cloud-regionsrv-client-10.0.3-150000.6.70.1 cloud-regionsrv-client-addon-azure-1.0.4-150000.6.70.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.70.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.70.1 - openSUSE Leap 15.3 (noarch): cloud-regionsrv-client-10.0.3-150000.6.70.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.70.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.70.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (noarch): cloud-regionsrv-client-10.0.3-150000.6.70.1 cloud-regionsrv-client-addon-azure-1.0.4-150000.6.70.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.70.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.70.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (noarch): cloud-regionsrv-client-10.0.3-150000.6.70.1 cloud-regionsrv-client-addon-azure-1.0.4-150000.6.70.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.70.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.70.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch): cloud-regionsrv-client-10.0.3-150000.6.70.1 cloud-regionsrv-client-addon-azure-1.0.4-150000.6.70.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.70.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.70.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1 (noarch): cloud-regionsrv-client-10.0.3-150000.6.70.1 cloud-regionsrv-client-addon-azure-1.0.4-150000.6.70.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.70.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.70.1 - SUSE Linux Enterprise Module for Public Cloud 15 (noarch): cloud-regionsrv-client-10.0.3-150000.6.70.1 cloud-regionsrv-client-addon-azure-1.0.4-150000.6.70.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.70.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.70.1 References: https://bugzilla.suse.com/1198389

1 0

SUSE-SU-2022:1256-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 19 Apr '22

19 Apr '22

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1256-1 Rating: important References: #1189562 #1193738 #1194943 #1195051 #1195254 #1195353 #1196018 #1196114 #1196433 #1196468 #1196488 #1196514 #1196639 #1196761 #1196830 #1196836 #1196942 #1196973 #1197227 #1197331 #1197366 #1197391 #1198031 #1198032 #1198033 SLE-18234 SLE-23652 Cross-References: CVE-2021-39713 CVE-2021-45868 CVE-2022-0812 CVE-2022-0850 CVE-2022-1016 CVE-2022-1048 CVE-2022-23036 CVE-2022-23037 CVE-2022-23038 CVE-2022-23039 CVE-2022-23040 CVE-2022-23041 CVE-2022-23042 CVE-2022-26490 CVE-2022-26966 CVE-2022-28356 CVE-2022-28388 CVE-2022-28389 CVE-2022-28390 CVSS scores: CVE-2021-39713 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39713 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-45868 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45868 (SUSE): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0812 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-0850 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVE-2022-1016 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-1048 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23036 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23036 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23037 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23037 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23038 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23038 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23039 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23039 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23040 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23040 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23041 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23041 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23042 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23042 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-26490 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26490 (SUSE): 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-26966 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-26966 (SUSE): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-28356 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-28356 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-28388 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-28388 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-28389 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-28389 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-28390 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-28390 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Availability 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise Module for Live Patching 15-SP1 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 19 vulnerabilities, contains two features and has 6 fixes is now available. Description: The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391). - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution (bsc#1197227). - CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel (bnc#1198032). - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel (bnc#1198033). - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031). - CVE-2022-0812: Fixed an incorrect header size calculations in xprtrdma (bsc#1196639). - CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197331). - CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c (bsc#1196761). - CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device (bsc#1196836). - CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file (bnc#1197366). - CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1196973). - CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040, CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers (bsc#1196488). - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830). The following non-security bugs were fixed: - ax88179_178a: Fixed memory issues that could be triggered by malicious USB devices (bsc#1196018). - genirq: Use rcu in kstat_irqs_usr() (bsc#1193738). - gve/net: Fixed multiple bugfixes (jsc#SLE-23652). - net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468). - net: tipc: validate domain record count on input (bsc#1195254). - powerpc: Fixed issues related to slow I/O on PowerPC (bsc#1196433). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1256=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1256=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-1256=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-1256=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-1256=1 - SUSE Linux Enterprise Module for Live Patching 15-SP1: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2022-1256=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-1256=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-1256=1 - SUSE Linux Enterprise High Availability 15-SP1: zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2022-1256=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-1256=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): kernel-default-base-debuginfo-4.12.14-150100.197.111.1 kernel-vanilla-4.12.14-150100.197.111.1 kernel-vanilla-base-4.12.14-150100.197.111.1 kernel-vanilla-base-debuginfo-4.12.14-150100.197.111.1 kernel-vanilla-debuginfo-4.12.14-150100.197.111.1 kernel-vanilla-debugsource-4.12.14-150100.197.111.1 kernel-vanilla-devel-4.12.14-150100.197.111.1 kernel-vanilla-devel-debuginfo-4.12.14-150100.197.111.1 kernel-vanilla-livepatch-devel-4.12.14-150100.197.111.1 - openSUSE Leap 15.4 (ppc64le x86_64): kernel-debug-base-4.12.14-150100.197.111.1 kernel-debug-base-debuginfo-4.12.14-150100.197.111.1 - openSUSE Leap 15.4 (x86_64): kernel-kvmsmall-base-4.12.14-150100.197.111.1 kernel-kvmsmall-base-debuginfo-4.12.14-150100.197.111.1 - openSUSE Leap 15.4 (s390x): kernel-default-man-4.12.14-150100.197.111.1 kernel-zfcpdump-man-4.12.14-150100.197.111.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): kernel-default-base-debuginfo-4.12.14-150100.197.111.1 kernel-vanilla-4.12.14-150100.197.111.1 kernel-vanilla-base-4.12.14-150100.197.111.1 kernel-vanilla-base-debuginfo-4.12.14-150100.197.111.1 kernel-vanilla-debuginfo-4.12.14-150100.197.111.1 kernel-vanilla-debugsource-4.12.14-150100.197.111.1 kernel-vanilla-devel-4.12.14-150100.197.111.1 kernel-vanilla-devel-debuginfo-4.12.14-150100.197.111.1 kernel-vanilla-livepatch-devel-4.12.14-150100.197.111.1 - openSUSE Leap 15.3 (ppc64le x86_64): kernel-debug-base-4.12.14-150100.197.111.1 kernel-debug-base-debuginfo-4.12.14-150100.197.111.1 - openSUSE Leap 15.3 (x86_64): kernel-kvmsmall-base-4.12.14-150100.197.111.1 kernel-kvmsmall-base-debuginfo-4.12.14-150100.197.111.1 - openSUSE Leap 15.3 (s390x): kernel-default-man-4.12.14-150100.197.111.1 kernel-zfcpdump-man-4.12.14-150100.197.111.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): kernel-default-4.12.14-150100.197.111.1 kernel-default-base-4.12.14-150100.197.111.1 kernel-default-base-debuginfo-4.12.14-150100.197.111.1 kernel-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debugsource-4.12.14-150100.197.111.1 kernel-default-devel-4.12.14-150100.197.111.1 kernel-default-devel-debuginfo-4.12.14-150100.197.111.1 kernel-obs-build-4.12.14-150100.197.111.1 kernel-obs-build-debugsource-4.12.14-150100.197.111.1 kernel-syms-4.12.14-150100.197.111.1 reiserfs-kmp-default-4.12.14-150100.197.111.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.111.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): kernel-devel-4.12.14-150100.197.111.1 kernel-docs-4.12.14-150100.197.111.1 kernel-macros-4.12.14-150100.197.111.1 kernel-source-4.12.14-150100.197.111.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): kernel-default-4.12.14-150100.197.111.1 kernel-default-base-4.12.14-150100.197.111.1 kernel-default-base-debuginfo-4.12.14-150100.197.111.1 kernel-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debugsource-4.12.14-150100.197.111.1 kernel-default-devel-4.12.14-150100.197.111.1 kernel-default-devel-debuginfo-4.12.14-150100.197.111.1 kernel-obs-build-4.12.14-150100.197.111.1 kernel-obs-build-debugsource-4.12.14-150100.197.111.1 kernel-syms-4.12.14-150100.197.111.1 reiserfs-kmp-default-4.12.14-150100.197.111.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.111.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): kernel-devel-4.12.14-150100.197.111.1 kernel-docs-4.12.14-150100.197.111.1 kernel-macros-4.12.14-150100.197.111.1 kernel-source-4.12.14-150100.197.111.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (s390x): kernel-default-man-4.12.14-150100.197.111.1 kernel-zfcpdump-debuginfo-4.12.14-150100.197.111.1 kernel-zfcpdump-debugsource-4.12.14-150100.197.111.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): kernel-devel-4.12.14-150100.197.111.1 kernel-docs-4.12.14-150100.197.111.1 kernel-macros-4.12.14-150100.197.111.1 kernel-source-4.12.14-150100.197.111.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): kernel-default-4.12.14-150100.197.111.1 kernel-default-base-4.12.14-150100.197.111.1 kernel-default-base-debuginfo-4.12.14-150100.197.111.1 kernel-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debugsource-4.12.14-150100.197.111.1 kernel-default-devel-4.12.14-150100.197.111.1 kernel-default-devel-debuginfo-4.12.14-150100.197.111.1 kernel-obs-build-4.12.14-150100.197.111.1 kernel-obs-build-debugsource-4.12.14-150100.197.111.1 kernel-syms-4.12.14-150100.197.111.1 reiserfs-kmp-default-4.12.14-150100.197.111.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.111.1 - SUSE Linux Enterprise Module for Live Patching 15-SP1 (ppc64le x86_64): kernel-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debugsource-4.12.14-150100.197.111.1 kernel-default-livepatch-4.12.14-150100.197.111.1 kernel-default-livepatch-devel-4.12.14-150100.197.111.1 kernel-livepatch-4_12_14-150100_197_111-default-1-150100.3.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): kernel-default-4.12.14-150100.197.111.1 kernel-default-base-4.12.14-150100.197.111.1 kernel-default-base-debuginfo-4.12.14-150100.197.111.1 kernel-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debugsource-4.12.14-150100.197.111.1 kernel-default-devel-4.12.14-150100.197.111.1 kernel-default-devel-debuginfo-4.12.14-150100.197.111.1 kernel-obs-build-4.12.14-150100.197.111.1 kernel-obs-build-debugsource-4.12.14-150100.197.111.1 kernel-syms-4.12.14-150100.197.111.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): kernel-devel-4.12.14-150100.197.111.1 kernel-docs-4.12.14-150100.197.111.1 kernel-macros-4.12.14-150100.197.111.1 kernel-source-4.12.14-150100.197.111.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): kernel-default-4.12.14-150100.197.111.1 kernel-default-base-4.12.14-150100.197.111.1 kernel-default-base-debuginfo-4.12.14-150100.197.111.1 kernel-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debugsource-4.12.14-150100.197.111.1 kernel-default-devel-4.12.14-150100.197.111.1 kernel-default-devel-debuginfo-4.12.14-150100.197.111.1 kernel-obs-build-4.12.14-150100.197.111.1 kernel-obs-build-debugsource-4.12.14-150100.197.111.1 kernel-syms-4.12.14-150100.197.111.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): kernel-devel-4.12.14-150100.197.111.1 kernel-docs-4.12.14-150100.197.111.1 kernel-macros-4.12.14-150100.197.111.1 kernel-source-4.12.14-150100.197.111.1 - SUSE Linux Enterprise High Availability 15-SP1 (aarch64 ppc64le s390x x86_64): cluster-md-kmp-default-4.12.14-150100.197.111.1 cluster-md-kmp-default-debuginfo-4.12.14-150100.197.111.1 dlm-kmp-default-4.12.14-150100.197.111.1 dlm-kmp-default-debuginfo-4.12.14-150100.197.111.1 gfs2-kmp-default-4.12.14-150100.197.111.1 gfs2-kmp-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debugsource-4.12.14-150100.197.111.1 ocfs2-kmp-default-4.12.14-150100.197.111.1 ocfs2-kmp-default-debuginfo-4.12.14-150100.197.111.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): kernel-default-4.12.14-150100.197.111.1 kernel-default-base-4.12.14-150100.197.111.1 kernel-default-base-debuginfo-4.12.14-150100.197.111.1 kernel-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debugsource-4.12.14-150100.197.111.1 kernel-default-devel-4.12.14-150100.197.111.1 kernel-default-devel-debuginfo-4.12.14-150100.197.111.1 kernel-obs-build-4.12.14-150100.197.111.1 kernel-obs-build-debugsource-4.12.14-150100.197.111.1 kernel-syms-4.12.14-150100.197.111.1 reiserfs-kmp-default-4.12.14-150100.197.111.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.111.1 - SUSE Enterprise Storage 6 (noarch): kernel-devel-4.12.14-150100.197.111.1 kernel-docs-4.12.14-150100.197.111.1 kernel-macros-4.12.14-150100.197.111.1 kernel-source-4.12.14-150100.197.111.1 - SUSE CaaS Platform 4.0 (noarch): kernel-devel-4.12.14-150100.197.111.1 kernel-docs-4.12.14-150100.197.111.1 kernel-macros-4.12.14-150100.197.111.1 kernel-source-4.12.14-150100.197.111.1 - SUSE CaaS Platform 4.0 (x86_64): kernel-default-4.12.14-150100.197.111.1 kernel-default-base-4.12.14-150100.197.111.1 kernel-default-base-debuginfo-4.12.14-150100.197.111.1 kernel-default-debuginfo-4.12.14-150100.197.111.1 kernel-default-debugsource-4.12.14-150100.197.111.1 kernel-default-devel-4.12.14-150100.197.111.1 kernel-default-devel-debuginfo-4.12.14-150100.197.111.1 kernel-obs-build-4.12.14-150100.197.111.1 kernel-obs-build-debugsource-4.12.14-150100.197.111.1 kernel-syms-4.12.14-150100.197.111.1 reiserfs-kmp-default-4.12.14-150100.197.111.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.111.1 References: https://www.suse.com/security/cve/CVE-2021-39713.html https://www.suse.com/security/cve/CVE-2021-45868.html https://www.suse.com/security/cve/CVE-2022-0812.html https://www.suse.com/security/cve/CVE-2022-0850.html https://www.suse.com/security/cve/CVE-2022-1016.html https://www.suse.com/security/cve/CVE-2022-1048.html https://www.suse.com/security/cve/CVE-2022-23036.html https://www.suse.com/security/cve/CVE-2022-23037.html https://www.suse.com/security/cve/CVE-2022-23038.html https://www.suse.com/security/cve/CVE-2022-23039.html https://www.suse.com/security/cve/CVE-2022-23040.html https://www.suse.com/security/cve/CVE-2022-23041.html https://www.suse.com/security/cve/CVE-2022-23042.html https://www.suse.com/security/cve/CVE-2022-26490.html https://www.suse.com/security/cve/CVE-2022-26966.html https://www.suse.com/security/cve/CVE-2022-28356.html https://www.suse.com/security/cve/CVE-2022-28388.html https://www.suse.com/security/cve/CVE-2022-28389.html https://www.suse.com/security/cve/CVE-2022-28390.html https://bugzilla.suse.com/1189562 https://bugzilla.suse.com/1193738 https://bugzilla.suse.com/1194943 https://bugzilla.suse.com/1195051 https://bugzilla.suse.com/1195254 https://bugzilla.suse.com/1195353 https://bugzilla.suse.com/1196018 https://bugzilla.suse.com/1196114 https://bugzilla.suse.com/1196433 https://bugzilla.suse.com/1196468 https://bugzilla.suse.com/1196488 https://bugzilla.suse.com/1196514 https://bugzilla.suse.com/1196639 https://bugzilla.suse.com/1196761 https://bugzilla.suse.com/1196830 https://bugzilla.suse.com/1196836 https://bugzilla.suse.com/1196942 https://bugzilla.suse.com/1196973 https://bugzilla.suse.com/1197227 https://bugzilla.suse.com/1197331 https://bugzilla.suse.com/1197366 https://bugzilla.suse.com/1197391 https://bugzilla.suse.com/1198031 https://bugzilla.suse.com/1198032 https://bugzilla.suse.com/1198033

1 0

SUSE-SU-2022:1260-1: important: Security update for git
by opensuse-security＠opensuse.org 19 Apr '22

19 Apr '22

SUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1260-1 Rating: important References: #1198234 Cross-References: CVE-2022-24765 CVSS scores: CVE-2022-24765 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git fixes the following issues: - CVE-2022-24765: Fixed a potential command injection via git worktree (bsc#1198234). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1260=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1260=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1260=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1260=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1260=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1260=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-1260=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-1260=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1260=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1260=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-1260=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-1260=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-1260=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1260=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1260=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1260=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-1260=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-1260=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1260=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1260=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1260=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-1260=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): git-svn-debuginfo-2.26.2-150000.36.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): git-svn-debuginfo-2.26.2-150000.36.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Manager Server 4.1 (noarch): git-doc-2.26.2-150000.36.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Manager Retail Branch Server 4.1 (noarch): git-doc-2.26.2-150000.36.1 - SUSE Manager Proxy 4.1 (noarch): git-doc-2.26.2-150000.36.1 - SUSE Manager Proxy 4.1 (x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Server for SAP 15 (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Server 15-LTSS (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (noarch): git-doc-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (noarch): git-doc-2.26.2-150000.36.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Enterprise Storage 7 (noarch): git-doc-2.26.2-150000.36.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE Enterprise Storage 6 (noarch): git-doc-2.26.2-150000.36.1 - SUSE CaaS Platform 4.0 (x86_64): git-2.26.2-150000.36.1 git-arch-2.26.2-150000.36.1 git-core-2.26.2-150000.36.1 git-core-debuginfo-2.26.2-150000.36.1 git-cvs-2.26.2-150000.36.1 git-daemon-2.26.2-150000.36.1 git-daemon-debuginfo-2.26.2-150000.36.1 git-debuginfo-2.26.2-150000.36.1 git-debugsource-2.26.2-150000.36.1 git-email-2.26.2-150000.36.1 git-gui-2.26.2-150000.36.1 git-svn-2.26.2-150000.36.1 git-svn-debuginfo-2.26.2-150000.36.1 git-web-2.26.2-150000.36.1 gitk-2.26.2-150000.36.1 - SUSE CaaS Platform 4.0 (noarch): git-doc-2.26.2-150000.36.1 References: https://www.suse.com/security/cve/CVE-2022-24765.html https://bugzilla.suse.com/1198234

1 0