May 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:1655-1: moderate: Recommended update for pam
by maintenance＠opensuse.org 13 May '22

13 May '22

SUSE Recommended Update: Recommended update for pam ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1655-1 Rating: moderate References: #1197794 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Module for Legacy Software 15-SP3 SUSE Linux Enterprise Module for Legacy Software 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pam fixes the following issue: - Do not include obsolete header files (bsc#1197794) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1655=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1655=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1655=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2022-1655=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP3-2022-1655=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1655=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1655=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1655=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1655=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1655=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1655=1 - SUSE Linux Enterprise Micro 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-1655=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): pam-1.3.0-150000.6.58.3 pam-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 pam-devel-1.3.0-150000.6.58.3 pam-extra-1.3.0-150000.6.58.3 pam-extra-debuginfo-1.3.0-150000.6.58.3 pam-modules-12.1-150000.5.3.2 pam-modules-debuginfo-12.1-150000.5.3.2 pam-modules-debugsource-12.1-150000.5.3.2 - openSUSE Leap 15.4 (noarch): pam-doc-1.3.0-150000.6.58.3 - openSUSE Leap 15.4 (x86_64): pam-32bit-1.3.0-150000.6.58.3 pam-32bit-debuginfo-1.3.0-150000.6.58.3 pam-devel-32bit-1.3.0-150000.6.58.3 pam-extra-32bit-1.3.0-150000.6.58.3 pam-extra-32bit-debuginfo-1.3.0-150000.6.58.3 pam-modules-32bit-12.1-150000.5.3.2 pam-modules-32bit-debuginfo-12.1-150000.5.3.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): pam-1.3.0-150000.6.58.3 pam-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 pam-devel-1.3.0-150000.6.58.3 pam-extra-1.3.0-150000.6.58.3 pam-extra-debuginfo-1.3.0-150000.6.58.3 pam-modules-12.1-150000.5.3.2 pam-modules-debuginfo-12.1-150000.5.3.2 pam-modules-debugsource-12.1-150000.5.3.2 - openSUSE Leap 15.3 (noarch): pam-doc-1.3.0-150000.6.58.3 - openSUSE Leap 15.3 (x86_64): pam-32bit-1.3.0-150000.6.58.3 pam-32bit-debuginfo-1.3.0-150000.6.58.3 pam-devel-32bit-1.3.0-150000.6.58.3 pam-extra-32bit-1.3.0-150000.6.58.3 pam-extra-32bit-debuginfo-1.3.0-150000.6.58.3 pam-modules-32bit-12.1-150000.5.3.2 pam-modules-32bit-debuginfo-12.1-150000.5.3.2 - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch): pam-doc-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): pam-1.3.0-150000.6.58.3 pam-32bit-1.3.0-150000.6.58.3 pam-32bit-debuginfo-1.3.0-150000.6.58.3 pam-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 pam-devel-1.3.0-150000.6.58.3 pam-devel-32bit-1.3.0-150000.6.58.3 pam-extra-1.3.0-150000.6.58.3 pam-extra-32bit-1.3.0-150000.6.58.3 pam-extra-32bit-debuginfo-1.3.0-150000.6.58.3 pam-extra-debuginfo-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Module for Legacy Software 15-SP4 (aarch64 ppc64le s390x x86_64): pam-modules-12.1-150000.5.3.2 pam-modules-debuginfo-12.1-150000.5.3.2 pam-modules-debugsource-12.1-150000.5.3.2 - SUSE Linux Enterprise Module for Legacy Software 15-SP4 (x86_64): pam-modules-32bit-12.1-150000.5.3.2 pam-modules-32bit-debuginfo-12.1-150000.5.3.2 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (aarch64 ppc64le s390x x86_64): pam-modules-12.1-150000.5.3.2 pam-modules-debuginfo-12.1-150000.5.3.2 pam-modules-debugsource-12.1-150000.5.3.2 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (x86_64): pam-modules-32bit-12.1-150000.5.3.2 pam-modules-32bit-debuginfo-12.1-150000.5.3.2 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (x86_64): pam-32bit-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 pam-devel-32bit-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (x86_64): pam-32bit-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 pam-devel-32bit-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): pam-1.3.0-150000.6.58.3 pam-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 pam-devel-1.3.0-150000.6.58.3 pam-extra-1.3.0-150000.6.58.3 pam-extra-debuginfo-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): pam-doc-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): pam-32bit-1.3.0-150000.6.58.3 pam-32bit-debuginfo-1.3.0-150000.6.58.3 pam-extra-32bit-1.3.0-150000.6.58.3 pam-extra-32bit-debuginfo-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): pam-1.3.0-150000.6.58.3 pam-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 pam-devel-1.3.0-150000.6.58.3 pam-extra-1.3.0-150000.6.58.3 pam-extra-debuginfo-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): pam-32bit-1.3.0-150000.6.58.3 pam-32bit-debuginfo-1.3.0-150000.6.58.3 pam-extra-32bit-1.3.0-150000.6.58.3 pam-extra-32bit-debuginfo-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): pam-doc-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): pam-1.3.0-150000.6.58.3 pam-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): pam-1.3.0-150000.6.58.3 pam-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 - SUSE Linux Enterprise Micro 5.0 (aarch64 x86_64): pam-1.3.0-150000.6.58.3 pam-debuginfo-1.3.0-150000.6.58.3 pam-debugsource-1.3.0-150000.6.58.3 References: https://bugzilla.suse.com/1197794

1 0

SUSE-SU-2022:1644-1: important: Security update for clamav
by opensuse-security＠opensuse.org 12 May '22

12 May '22

SUSE Security Update: Security update for clamav ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1644-1 Rating: important References: #1199242 #1199244 #1199245 #1199246 #1199274 Cross-References: CVE-2022-20770 CVE-2022-20771 CVE-2022-20785 CVE-2022-20792 CVE-2022-20796 CVSS scores: CVE-2022-20770 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-20771 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-20785 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-20792 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-20796 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for clamav fixes the following issues: - CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM file parser (bsc#1199242). - CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the scan verdict cache check (bsc#1199246). - CVE-2022-20771: Fixed a possible infinite loop vulnerability in the TIFF file parser (bsc#1199244). - CVE-2022-20785: Fixed a possible memory leak in the HTML file parser / Javascript normalizer (bsc#1199245). - CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write vulnerability in the signature database load module (bsc#1199274). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1644=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1644=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1644=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1644=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): clamav-0.103.6-150000.3.38.1 clamav-debuginfo-0.103.6-150000.3.38.1 clamav-debugsource-0.103.6-150000.3.38.1 clamav-devel-0.103.6-150000.3.38.1 libclamav9-0.103.6-150000.3.38.1 libclamav9-debuginfo-0.103.6-150000.3.38.1 libfreshclam2-0.103.6-150000.3.38.1 libfreshclam2-debuginfo-0.103.6-150000.3.38.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): clamav-0.103.6-150000.3.38.1 clamav-debuginfo-0.103.6-150000.3.38.1 clamav-debugsource-0.103.6-150000.3.38.1 clamav-devel-0.103.6-150000.3.38.1 libclamav9-0.103.6-150000.3.38.1 libclamav9-debuginfo-0.103.6-150000.3.38.1 libfreshclam2-0.103.6-150000.3.38.1 libfreshclam2-debuginfo-0.103.6-150000.3.38.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): clamav-0.103.6-150000.3.38.1 clamav-debuginfo-0.103.6-150000.3.38.1 clamav-debugsource-0.103.6-150000.3.38.1 clamav-devel-0.103.6-150000.3.38.1 libclamav9-0.103.6-150000.3.38.1 libclamav9-debuginfo-0.103.6-150000.3.38.1 libfreshclam2-0.103.6-150000.3.38.1 libfreshclam2-debuginfo-0.103.6-150000.3.38.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): clamav-0.103.6-150000.3.38.1 clamav-debuginfo-0.103.6-150000.3.38.1 clamav-debugsource-0.103.6-150000.3.38.1 clamav-devel-0.103.6-150000.3.38.1 libclamav9-0.103.6-150000.3.38.1 libclamav9-debuginfo-0.103.6-150000.3.38.1 libfreshclam2-0.103.6-150000.3.38.1 libfreshclam2-debuginfo-0.103.6-150000.3.38.1 References: https://www.suse.com/security/cve/CVE-2022-20770.html https://www.suse.com/security/cve/CVE-2022-20771.html https://www.suse.com/security/cve/CVE-2022-20785.html https://www.suse.com/security/cve/CVE-2022-20792.html https://www.suse.com/security/cve/CVE-2022-20796.html https://bugzilla.suse.com/1199242 https://bugzilla.suse.com/1199244 https://bugzilla.suse.com/1199245 https://bugzilla.suse.com/1199246 https://bugzilla.suse.com/1199274

1 0

SUSE-RU-2022:1643-1: moderate: Recommended update for linuxrc
by maintenance＠opensuse.org 12 May '22

12 May '22

SUSE Recommended Update: Recommended update for linuxrc ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1643-1 Rating: moderate References: #1196061 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for linuxrc fixes the following issues: - Do not leave repository mounted when starting yast (bsc#1196061) - Improve url logging function - Handle umount errors better - Check RAID devices for install repository (bsc#1196061) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1643=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1643=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): linuxrc-7.0.30.6-150300.3.9.1 linuxrc-debuginfo-7.0.30.6-150300.3.9.1 linuxrc-debugsource-7.0.30.6-150300.3.9.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): linuxrc-7.0.30.6-150300.3.9.1 linuxrc-debuginfo-7.0.30.6-150300.3.9.1 linuxrc-debugsource-7.0.30.6-150300.3.9.1 References: https://bugzilla.suse.com/1196061

1 0

SUSE-RU-2022:1642-1: moderate: Recommended update for u-boot
by maintenance＠opensuse.org 11 May '22

11 May '22

SUSE Recommended Update: Recommended update for u-boot ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1642-1 Rating: moderate References: #1197627 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for u-boot fixes the following issue: - Fix USB stall that causes reboot with some devices on RPi (bsc#1197627) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1642=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1642=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.01-150300.7.7.1 u-boot-tools-debuginfo-2021.01-150300.7.7.1 - openSUSE Leap 15.3 (aarch64): u-boot-avnetultra96rev1-2021.01-150300.7.7.1 u-boot-avnetultra96rev1-doc-2021.01-150300.7.7.1 u-boot-bananapim64-2021.01-150300.7.7.1 u-boot-bananapim64-doc-2021.01-150300.7.7.1 u-boot-dragonboard410c-2021.01-150300.7.7.1 u-boot-dragonboard410c-doc-2021.01-150300.7.7.1 u-boot-dragonboard820c-2021.01-150300.7.7.1 u-boot-dragonboard820c-doc-2021.01-150300.7.7.1 u-boot-evb-rk3399-2021.01-150300.7.7.1 u-boot-evb-rk3399-doc-2021.01-150300.7.7.1 u-boot-firefly-rk3399-2021.01-150300.7.7.1 u-boot-firefly-rk3399-doc-2021.01-150300.7.7.1 u-boot-geekbox-2021.01-150300.7.7.1 u-boot-geekbox-doc-2021.01-150300.7.7.1 u-boot-hikey-2021.01-150300.7.7.1 u-boot-hikey-doc-2021.01-150300.7.7.1 u-boot-khadas-vim-2021.01-150300.7.7.1 u-boot-khadas-vim-doc-2021.01-150300.7.7.1 u-boot-khadas-vim2-2021.01-150300.7.7.1 u-boot-khadas-vim2-doc-2021.01-150300.7.7.1 u-boot-libretech-ac-2021.01-150300.7.7.1 u-boot-libretech-ac-doc-2021.01-150300.7.7.1 u-boot-libretech-cc-2021.01-150300.7.7.1 u-boot-libretech-cc-doc-2021.01-150300.7.7.1 u-boot-ls1012afrdmqspi-2021.01-150300.7.7.1 u-boot-ls1012afrdmqspi-doc-2021.01-150300.7.7.1 u-boot-mvebudb-88f3720-2021.01-150300.7.7.1 u-boot-mvebudb-88f3720-doc-2021.01-150300.7.7.1 u-boot-mvebudbarmada8k-2021.01-150300.7.7.1 u-boot-mvebudbarmada8k-doc-2021.01-150300.7.7.1 u-boot-mvebuespressobin-88f3720-2021.01-150300.7.7.1 u-boot-mvebuespressobin-88f3720-doc-2021.01-150300.7.7.1 u-boot-mvebumcbin-88f8040-2021.01-150300.7.7.1 u-boot-mvebumcbin-88f8040-doc-2021.01-150300.7.7.1 u-boot-nanopia64-2021.01-150300.7.7.1 u-boot-nanopia64-doc-2021.01-150300.7.7.1 u-boot-odroid-c2-2021.01-150300.7.7.1 u-boot-odroid-c2-doc-2021.01-150300.7.7.1 u-boot-odroid-c4-2021.01-150300.7.7.1 u-boot-odroid-c4-doc-2021.01-150300.7.7.1 u-boot-odroid-n2-2021.01-150300.7.7.1 u-boot-odroid-n2-doc-2021.01-150300.7.7.1 u-boot-orangepipc2-2021.01-150300.7.7.1 u-boot-orangepipc2-doc-2021.01-150300.7.7.1 u-boot-p2371-2180-2021.01-150300.7.7.1 u-boot-p2371-2180-doc-2021.01-150300.7.7.1 u-boot-p2771-0000-500-2021.01-150300.7.7.1 u-boot-p2771-0000-500-doc-2021.01-150300.7.7.1 u-boot-p3450-0000-2021.01-150300.7.7.1 u-boot-p3450-0000-doc-2021.01-150300.7.7.1 u-boot-pine64plus-2021.01-150300.7.7.1 u-boot-pine64plus-doc-2021.01-150300.7.7.1 u-boot-pinebook-2021.01-150300.7.7.1 u-boot-pinebook-doc-2021.01-150300.7.7.1 u-boot-pinebook-pro-rk3399-2021.01-150300.7.7.1 u-boot-pinebook-pro-rk3399-doc-2021.01-150300.7.7.1 u-boot-pineh64-2021.01-150300.7.7.1 u-boot-pineh64-doc-2021.01-150300.7.7.1 u-boot-pinephone-2021.01-150300.7.7.1 u-boot-pinephone-doc-2021.01-150300.7.7.1 u-boot-poplar-2021.01-150300.7.7.1 u-boot-poplar-doc-2021.01-150300.7.7.1 u-boot-rock-pi-4-rk3399-2021.01-150300.7.7.1 u-boot-rock-pi-4-rk3399-doc-2021.01-150300.7.7.1 u-boot-rock64-rk3328-2021.01-150300.7.7.1 u-boot-rock64-rk3328-doc-2021.01-150300.7.7.1 u-boot-rock960-rk3399-2021.01-150300.7.7.1 u-boot-rock960-rk3399-doc-2021.01-150300.7.7.1 u-boot-rockpro64-rk3399-2021.01-150300.7.7.1 u-boot-rockpro64-rk3399-doc-2021.01-150300.7.7.1 u-boot-rpi3-2021.01-150300.7.7.1 u-boot-rpi3-doc-2021.01-150300.7.7.1 u-boot-rpi4-2021.01-150300.7.7.1 u-boot-rpi4-doc-2021.01-150300.7.7.1 u-boot-rpiarm64-2021.01-150300.7.7.1 u-boot-rpiarm64-doc-2021.01-150300.7.7.1 u-boot-xilinxzynqmpvirt-2021.01-150300.7.7.1 u-boot-xilinxzynqmpvirt-doc-2021.01-150300.7.7.1 u-boot-xilinxzynqmpzcu102rev10-2021.01-150300.7.7.1 u-boot-xilinxzynqmpzcu102rev10-doc-2021.01-150300.7.7.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.01-150300.7.7.1 u-boot-tools-debuginfo-2021.01-150300.7.7.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64): u-boot-rpiarm64-2021.01-150300.7.7.1 u-boot-rpiarm64-doc-2021.01-150300.7.7.1 References: https://bugzilla.suse.com/1197627

1 0

SUSE-RU-2022:1626-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 10 May '22

10 May '22

SUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1626-1 Rating: moderate References: #1198090 #1198114 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090) - journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114) - tmpfiles: constify item_compatible() parameters - test tmpfiles: add a test for 'w+' - test: add test checking tmpfiles conf file precedence - journald: make use of CLAMP() in cache_space_refresh() - journal-file: port journal_file_open() to openat_report_new() - fs-util: make sure openat_report_new() initializes return param also on shortcut - fs-util: fix typos in comments - fs-util: add openat_report_new() wrapper around openat() Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1626=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1626=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1626=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1626=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1626=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libudev-devel-246.16-150300.7.45.1 nss-mymachines-246.16-150300.7.45.1 nss-mymachines-debuginfo-246.16-150300.7.45.1 nss-resolve-246.16-150300.7.45.1 nss-resolve-debuginfo-246.16-150300.7.45.1 systemd-logger-246.16-150300.7.45.1 - openSUSE Leap 15.4 (x86_64): libudev-devel-32bit-246.16-150300.7.45.1 nss-mymachines-32bit-246.16-150300.7.45.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.45.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.45.1 libsystemd0-debuginfo-246.16-150300.7.45.1 libudev-devel-246.16-150300.7.45.1 libudev1-246.16-150300.7.45.1 libudev1-debuginfo-246.16-150300.7.45.1 nss-myhostname-246.16-150300.7.45.1 nss-myhostname-debuginfo-246.16-150300.7.45.1 nss-mymachines-246.16-150300.7.45.1 nss-mymachines-debuginfo-246.16-150300.7.45.1 nss-resolve-246.16-150300.7.45.1 nss-resolve-debuginfo-246.16-150300.7.45.1 nss-systemd-246.16-150300.7.45.1 nss-systemd-debuginfo-246.16-150300.7.45.1 systemd-246.16-150300.7.45.1 systemd-container-246.16-150300.7.45.1 systemd-container-debuginfo-246.16-150300.7.45.1 systemd-coredump-246.16-150300.7.45.1 systemd-coredump-debuginfo-246.16-150300.7.45.1 systemd-debuginfo-246.16-150300.7.45.1 systemd-debugsource-246.16-150300.7.45.1 systemd-devel-246.16-150300.7.45.1 systemd-doc-246.16-150300.7.45.1 systemd-journal-remote-246.16-150300.7.45.1 systemd-journal-remote-debuginfo-246.16-150300.7.45.1 systemd-logger-246.16-150300.7.45.1 systemd-network-246.16-150300.7.45.1 systemd-network-debuginfo-246.16-150300.7.45.1 systemd-sysvinit-246.16-150300.7.45.1 udev-246.16-150300.7.45.1 udev-debuginfo-246.16-150300.7.45.1 - openSUSE Leap 15.3 (noarch): systemd-lang-246.16-150300.7.45.1 - openSUSE Leap 15.3 (x86_64): libsystemd0-32bit-246.16-150300.7.45.1 libsystemd0-32bit-debuginfo-246.16-150300.7.45.1 libudev-devel-32bit-246.16-150300.7.45.1 libudev1-32bit-246.16-150300.7.45.1 libudev1-32bit-debuginfo-246.16-150300.7.45.1 nss-myhostname-32bit-246.16-150300.7.45.1 nss-myhostname-32bit-debuginfo-246.16-150300.7.45.1 nss-mymachines-32bit-246.16-150300.7.45.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.45.1 systemd-32bit-246.16-150300.7.45.1 systemd-32bit-debuginfo-246.16-150300.7.45.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.45.1 libsystemd0-debuginfo-246.16-150300.7.45.1 libudev-devel-246.16-150300.7.45.1 libudev1-246.16-150300.7.45.1 libudev1-debuginfo-246.16-150300.7.45.1 systemd-246.16-150300.7.45.1 systemd-container-246.16-150300.7.45.1 systemd-container-debuginfo-246.16-150300.7.45.1 systemd-coredump-246.16-150300.7.45.1 systemd-coredump-debuginfo-246.16-150300.7.45.1 systemd-debuginfo-246.16-150300.7.45.1 systemd-debugsource-246.16-150300.7.45.1 systemd-devel-246.16-150300.7.45.1 systemd-doc-246.16-150300.7.45.1 systemd-journal-remote-246.16-150300.7.45.1 systemd-journal-remote-debuginfo-246.16-150300.7.45.1 systemd-sysvinit-246.16-150300.7.45.1 udev-246.16-150300.7.45.1 udev-debuginfo-246.16-150300.7.45.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): systemd-lang-246.16-150300.7.45.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libsystemd0-32bit-246.16-150300.7.45.1 libsystemd0-32bit-debuginfo-246.16-150300.7.45.1 libudev1-32bit-246.16-150300.7.45.1 libudev1-32bit-debuginfo-246.16-150300.7.45.1 systemd-32bit-246.16-150300.7.45.1 systemd-32bit-debuginfo-246.16-150300.7.45.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libsystemd0-246.16-150300.7.45.1 libsystemd0-debuginfo-246.16-150300.7.45.1 libudev1-246.16-150300.7.45.1 libudev1-debuginfo-246.16-150300.7.45.1 systemd-246.16-150300.7.45.1 systemd-container-246.16-150300.7.45.1 systemd-container-debuginfo-246.16-150300.7.45.1 systemd-debuginfo-246.16-150300.7.45.1 systemd-debugsource-246.16-150300.7.45.1 systemd-journal-remote-246.16-150300.7.45.1 systemd-journal-remote-debuginfo-246.16-150300.7.45.1 systemd-sysvinit-246.16-150300.7.45.1 udev-246.16-150300.7.45.1 udev-debuginfo-246.16-150300.7.45.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libsystemd0-246.16-150300.7.45.1 libsystemd0-debuginfo-246.16-150300.7.45.1 libudev1-246.16-150300.7.45.1 libudev1-debuginfo-246.16-150300.7.45.1 systemd-246.16-150300.7.45.1 systemd-container-246.16-150300.7.45.1 systemd-container-debuginfo-246.16-150300.7.45.1 systemd-debuginfo-246.16-150300.7.45.1 systemd-debugsource-246.16-150300.7.45.1 systemd-journal-remote-246.16-150300.7.45.1 systemd-journal-remote-debuginfo-246.16-150300.7.45.1 systemd-sysvinit-246.16-150300.7.45.1 udev-246.16-150300.7.45.1 udev-debuginfo-246.16-150300.7.45.1 References: https://bugzilla.suse.com/1198090 https://bugzilla.suse.com/1198114

1 0

SUSE-RU-2022:1627-1: moderate: Recommended update for cluster-glue
by maintenance＠opensuse.org 10 May '22

10 May '22

SUSE Recommended Update: Recommended update for cluster-glue ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1627-1 Rating: moderate References: #1197681 SLE-23490 SLE-23491 SLE-23492 SLE-23494 Affected Products: SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15-SP1 SUSE Linux Enterprise High Availability 15-SP2 SUSE Linux Enterprise High Availability 15-SP3 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains four features can now be installed. Description: This update for cluster-glue fixes the following issues: - Fix for comment in external ec2 (bsc#1197681) - Support IMDSv2 in EC2 stonith agent. (jsc#SLE-23490, jsc#SLE-23491, jsc#SLE-23492, jsc#SLE-23494) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1627=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1627=1 - SUSE Linux Enterprise High Availability 15-SP3: zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2022-1627=1 - SUSE Linux Enterprise High Availability 15-SP2: zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2022-1627=1 - SUSE Linux Enterprise High Availability 15-SP1: zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2022-1627=1 - SUSE Linux Enterprise High Availability 15: zypper in -t patch SUSE-SLE-Product-HA-15-2022-1627=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debugsource-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 - openSUSE Leap 15.4 (x86_64): libglue-devel-32bit-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-32bit-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-32bit-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-32bit-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debugsource-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 - openSUSE Leap 15.3 (x86_64): libglue-devel-32bit-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-32bit-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-32bit-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-32bit-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 - SUSE Linux Enterprise High Availability 15-SP3 (aarch64 ppc64le s390x x86_64): cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debugsource-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 - SUSE Linux Enterprise High Availability 15-SP2 (aarch64 ppc64le s390x x86_64): cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debugsource-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 - SUSE Linux Enterprise High Availability 15-SP1 (aarch64 ppc64le s390x x86_64): cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debugsource-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 - SUSE Linux Enterprise High Availability 15 (aarch64 ppc64le s390x x86_64): cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-glue-debugsource-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue-devel-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libglue2-debuginfo-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 References: https://bugzilla.suse.com/1197681

1 0

SUSE-RU-2022:1625-1: moderate: Recommended update for python-python3-saml
by maintenance＠opensuse.org 10 May '22

10 May '22

SUSE Recommended Update: Recommended update for python-python3-saml ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1625-1 Rating: moderate References: #1197846 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-python3-saml fixes the following issues: - Update expiry dates for responses. (bsc#1197846) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1625=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1625=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1625=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1625=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1625=1 Package List: - openSUSE Leap 15.4 (noarch): python2-python3-saml-1.7.0-150200.3.3.2 python3-python3-saml-1.7.0-150200.3.3.2 - openSUSE Leap 15.3 (noarch): python2-python3-saml-1.7.0-150200.3.3.2 python3-python3-saml-1.7.0-150200.3.3.2 - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch): python3-python3-saml-1.7.0-150200.3.3.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python3-python3-saml-1.7.0-150200.3.3.2 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): python3-python3-saml-1.7.0-150200.3.3.2 References: https://bugzilla.suse.com/1197846

1 0

SUSE-SU-2022:1617-1: important: Security update for gzip
by opensuse-security＠opensuse.org 10 May '22

10 May '22

SUSE Security Update: Security update for gzip ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1617-1 Rating: important References: #1198062 #1198922 Cross-References: CVE-2022-1271 CVSS scores: CVE-2022-1271 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for gzip fixes the following issues: - CVE-2022-1271: Fix escaping of malicious filenames. (bsc#1198062) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1617=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1617=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1617=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1617=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1617=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1617=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1617=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1617=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1617=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1617=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1617=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1617=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1617=1 - SUSE Linux Enterprise Micro 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-1617=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1617=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1617=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1617=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Manager Proxy 4.1 (x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise Micro 5.0 (aarch64 x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): gzip-1.10-150200.10.1 gzip-debuginfo-1.10-150200.10.1 gzip-debugsource-1.10-150200.10.1 References: https://www.suse.com/security/cve/CVE-2022-1271.html https://bugzilla.suse.com/1198062 https://bugzilla.suse.com/1198922

1 0

openSUSE-SU-2022:0132-1: important: Security update for php-composer
by opensuse-security＠opensuse.org 10 May '22

10 May '22

openSUSE Security Update: Security update for php-composer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0132-1 Rating: important References: #1198494 Cross-References: CVE-2021-41116 CVE-2022-24828 CVSS scores: CVE-2021-41116 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-24828 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-24828 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php-composer fixes the following issues: php-composer was updated to version 1.10.26: * Security: Fixed command injection vulnerability in HgDriver/GitDriver: CVE-2022-24828 boo#1198494 Update to version 1.10.25 * Fix regression with PHP 8.1.0 and 8.1.1 Update to version 1.10.24 * Fixed PHP 8.1 compatibility Update to version 1.10.23 * Security: Fixed command injection vulnerability CVE-2021-41116 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-132=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): php-composer-1.10.26-bp153.2.6.1 References: https://www.suse.com/security/cve/CVE-2021-41116.html https://www.suse.com/security/cve/CVE-2022-24828.html https://bugzilla.suse.com/1198494

1 0

SUSE-RU-2022:1595-1: important: Recommended update for libnss_nis
by maintenance＠opensuse.org 10 May '22

10 May '22

SUSE Recommended Update: Recommended update for libnss_nis ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1595-1 Rating: important References: #1197768 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libnss_nis fixes the following issues: - Fix build issues occurring on SUSE Linux Enterprise 15 Service Pack 4 (bsc#1197768) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1595=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1595=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1595=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1595=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1595=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libnss_nis-debugsource-3.0-150000.3.3.1 libnss_nis2-3.0-150000.3.3.1 libnss_nis2-debuginfo-3.0-150000.3.3.1 - openSUSE Leap 15.4 (x86_64): libnss_nis2-32bit-3.0-150000.3.3.1 libnss_nis2-32bit-debuginfo-3.0-150000.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libnss_nis-debugsource-3.0-150000.3.3.1 libnss_nis2-3.0-150000.3.3.1 libnss_nis2-debuginfo-3.0-150000.3.3.1 - openSUSE Leap 15.3 (x86_64): libnss_nis2-32bit-3.0-150000.3.3.1 libnss_nis2-32bit-debuginfo-3.0-150000.3.3.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): libnss_nis-debugsource-3.0-150000.3.3.1 libnss_nis2-3.0-150000.3.3.1 libnss_nis2-32bit-3.0-150000.3.3.1 libnss_nis2-32bit-debuginfo-3.0-150000.3.3.1 libnss_nis2-debuginfo-3.0-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libnss_nis-debugsource-3.0-150000.3.3.1 libnss_nis2-3.0-150000.3.3.1 libnss_nis2-debuginfo-3.0-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libnss_nis2-32bit-3.0-150000.3.3.1 libnss_nis2-32bit-debuginfo-3.0-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libnss_nis-debugsource-3.0-150000.3.3.1 libnss_nis2-3.0-150000.3.3.1 libnss_nis2-debuginfo-3.0-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libnss_nis2-32bit-3.0-150000.3.3.1 libnss_nis2-32bit-debuginfo-3.0-150000.3.3.1 References: https://bugzilla.suse.com/1197768

1 0

SUSE-OU-2022:1594-1: moderate: Optional update for SUSE Package Hub
by maintenance＠opensuse.org 10 May '22

10 May '22

SUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: SUSE-OU-2022:1594-1 Rating: moderate References: MSC-303 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 optional fixes and contains one feature can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: stoken Patch Instructions: To install this SUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1594=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1594=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-1594=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-1594=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1594=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1594=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libstoken1-0.81-150000.3.2.1 libstoken1-debuginfo-0.81-150000.3.2.1 stoken-0.81-150000.3.2.1 stoken-debuginfo-0.81-150000.3.2.1 stoken-debugsource-0.81-150000.3.2.1 stoken-devel-0.81-150000.3.2.1 stoken-gui-0.81-150000.3.2.1 stoken-gui-debuginfo-0.81-150000.3.2.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libstoken1-0.81-150000.3.2.1 libstoken1-debuginfo-0.81-150000.3.2.1 stoken-0.81-150000.3.2.1 stoken-debuginfo-0.81-150000.3.2.1 stoken-debugsource-0.81-150000.3.2.1 stoken-devel-0.81-150000.3.2.1 stoken-gui-0.81-150000.3.2.1 stoken-gui-debuginfo-0.81-150000.3.2.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): libstoken1-0.81-150000.3.2.1 libstoken1-debuginfo-0.81-150000.3.2.1 stoken-debuginfo-0.81-150000.3.2.1 stoken-debugsource-0.81-150000.3.2.1 stoken-devel-0.81-150000.3.2.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): libstoken1-0.81-150000.3.2.1 libstoken1-debuginfo-0.81-150000.3.2.1 stoken-debuginfo-0.81-150000.3.2.1 stoken-debugsource-0.81-150000.3.2.1 stoken-devel-0.81-150000.3.2.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): libstoken1-0.81-150000.3.2.1 libstoken1-debuginfo-0.81-150000.3.2.1 stoken-debuginfo-0.81-150000.3.2.1 stoken-debugsource-0.81-150000.3.2.1 stoken-devel-0.81-150000.3.2.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x): libstoken1-0.81-150000.3.2.1 libstoken1-debuginfo-0.81-150000.3.2.1 stoken-debuginfo-0.81-150000.3.2.1 stoken-debugsource-0.81-150000.3.2.1 stoken-devel-0.81-150000.3.2.1 stoken-gui-0.81-150000.3.2.1 References:

1 0

SUSE-RU-2022:1579-1: important: Recommended update for MozillaFirefox
by maintenance＠opensuse.org 09 May '22

09 May '22

SUSE Recommended Update: Recommended update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1579-1 Rating: important References: #1198970 Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.0 ESR MFSA 2022-17 (bsc#1198970) * CVE-2022-29914: Fullscreen notification bypass using popups * CVE-2022-29909: Bypassing permission prompt in nested browsing contexts * CVE-2022-29916: Leaking browser history with CSS variables * CVE-2022-29911: iframe Sandbox bypass * CVE-2022-29912: Reader mode bypassed SameSite cookies * CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9 Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1579=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1579=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1579=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1579=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1579=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1579=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1579=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1579=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-1579=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1579=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1579=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1579=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1579=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-branding-upstream-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-branding-upstream-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Manager Proxy 4.1 (x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.9.0-150200.152.33.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.9.0-150200.152.33.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): MozillaFirefox-91.9.0-150200.152.33.1 MozillaFirefox-debuginfo-91.9.0-150200.152.33.1 MozillaFirefox-debugsource-91.9.0-150200.152.33.1 MozillaFirefox-devel-91.9.0-150200.152.33.1 MozillaFirefox-translations-common-91.9.0-150200.152.33.1 MozillaFirefox-translations-other-91.9.0-150200.152.33.1 References: https://www.suse.com/security/cve/CVE-2022-29909.html https://www.suse.com/security/cve/CVE-2022-29911.html https://www.suse.com/security/cve/CVE-2022-29912.html https://www.suse.com/security/cve/CVE-2022-29914.html https://www.suse.com/security/cve/CVE-2022-29916.html https://www.suse.com/security/cve/CVE-2022-29917.html https://bugzilla.suse.com/1198970

1 0

SUSE-SU-2022:1583-1: important: Security update for rsyslog
by opensuse-security＠opensuse.org 09 May '22

09 May '22

SUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1583-1 Rating: important References: #1199061 Cross-References: CVE-2022-24903 CVSS scores: CVE-2022-24903 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rsyslog fixes the following issues: - CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1583=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1583=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1583=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1583=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1583=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1583=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1583=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1583=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-1583=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1583=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1583=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1583=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1583=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-diag-tools-8.2106.0-150200.4.26.1 rsyslog-diag-tools-debuginfo-8.2106.0-150200.4.26.1 rsyslog-doc-8.2106.0-150200.4.26.1 rsyslog-module-dbi-8.2106.0-150200.4.26.1 rsyslog-module-dbi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-elasticsearch-8.2106.0-150200.4.26.1 rsyslog-module-elasticsearch-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gcrypt-8.2106.0-150200.4.26.1 rsyslog-module-gcrypt-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-omamqp1-8.2106.0-150200.4.26.1 rsyslog-module-omamqp1-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-omhttpfs-8.2106.0-150200.4.26.1 rsyslog-module-omhttpfs-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-omtcl-8.2106.0-150200.4.26.1 rsyslog-module-omtcl-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-ossl-8.2106.0-150200.4.26.1 rsyslog-module-ossl-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Manager Proxy 4.1 (x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): rsyslog-8.2106.0-150200.4.26.1 rsyslog-debuginfo-8.2106.0-150200.4.26.1 rsyslog-debugsource-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-8.2106.0-150200.4.26.1 rsyslog-module-gssapi-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-gtls-8.2106.0-150200.4.26.1 rsyslog-module-gtls-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-8.2106.0-150200.4.26.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-mysql-8.2106.0-150200.4.26.1 rsyslog-module-mysql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-8.2106.0-150200.4.26.1 rsyslog-module-pgsql-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-relp-8.2106.0-150200.4.26.1 rsyslog-module-relp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-snmp-8.2106.0-150200.4.26.1 rsyslog-module-snmp-debuginfo-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-8.2106.0-150200.4.26.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-150200.4.26.1 References: https://www.suse.com/security/cve/CVE-2022-24903.html https://bugzilla.suse.com/1199061

1 0

SUSE-SU-2022:1576-1: Security update for ldb
by opensuse-security＠opensuse.org 09 May '22

09 May '22

SUSE Security Update: Security update for ldb ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1576-1 Rating: low References: #1198397 Cross-References: CVE-2021-3670 CVSS scores: CVE-2021-3670 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ldb fixes the following issues: - Update to version 2.4.2 - CVE-2021-3670: Fixed an issue where the LDAP server MaxQueryDuration value would not be honoured (bsc#1198397). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1576=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1576=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1576=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1576=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2022-1576=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ldb-debugsource-2.4.2-150300.3.15.1 ldb-tools-2.4.2-150300.3.15.1 ldb-tools-debuginfo-2.4.2-150300.3.15.1 libldb-devel-2.4.2-150300.3.15.1 libldb2-2.4.2-150300.3.15.1 libldb2-debuginfo-2.4.2-150300.3.15.1 python3-ldb-2.4.2-150300.3.15.1 python3-ldb-debuginfo-2.4.2-150300.3.15.1 python3-ldb-devel-2.4.2-150300.3.15.1 - openSUSE Leap 15.3 (x86_64): libldb2-32bit-2.4.2-150300.3.15.1 libldb2-32bit-debuginfo-2.4.2-150300.3.15.1 python3-ldb-32bit-2.4.2-150300.3.15.1 python3-ldb-32bit-debuginfo-2.4.2-150300.3.15.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): ldb-debugsource-2.4.2-150300.3.15.1 ldb-tools-2.4.2-150300.3.15.1 ldb-tools-debuginfo-2.4.2-150300.3.15.1 libldb-devel-2.4.2-150300.3.15.1 libldb2-2.4.2-150300.3.15.1 libldb2-debuginfo-2.4.2-150300.3.15.1 python3-ldb-2.4.2-150300.3.15.1 python3-ldb-debuginfo-2.4.2-150300.3.15.1 python3-ldb-devel-2.4.2-150300.3.15.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libldb2-32bit-2.4.2-150300.3.15.1 libldb2-32bit-debuginfo-2.4.2-150300.3.15.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): ldb-debugsource-2.4.2-150300.3.15.1 libldb2-2.4.2-150300.3.15.1 libldb2-debuginfo-2.4.2-150300.3.15.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): ldb-debugsource-2.4.2-150300.3.15.1 libldb2-2.4.2-150300.3.15.1 libldb2-debuginfo-2.4.2-150300.3.15.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): ldb-debugsource-2.4.2-150300.3.15.1 libldb2-2.4.2-150300.3.15.1 libldb2-debuginfo-2.4.2-150300.3.15.1 python3-ldb-2.4.2-150300.3.15.1 python3-ldb-debuginfo-2.4.2-150300.3.15.1 References: https://www.suse.com/security/cve/CVE-2021-3670.html https://bugzilla.suse.com/1198397

1 0

SUSE-RU-2022:1566-1: moderate: Recommended update for go1.17
by maintenance＠opensuse.org 07 May '22

07 May '22

SUSE Recommended Update: Recommended update for go1.17 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1566-1 Rating: moderate References: Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for go1.17 fixes the following issues: - Remove remaining use of gold linker when bootstrapping with gccgo. * History: go1.8.3 2017-06-18 added conditional if gccgo defined BuildRequires: binutils-gold for arches other than s390x * No information available why binutils-gold was used initially * Unrelated to upstream recent hardcoded gold dependency for ARM Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1566=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1566=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1566=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1566=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1566=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): go1.17-1.17.9-150000.1.31.1 go1.17-doc-1.17.9-150000.1.31.1 - openSUSE Leap 15.4 (aarch64 x86_64): go1.17-race-1.17.9-150000.1.31.1 - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): go1.17-1.17.9-150000.1.31.1 go1.17-doc-1.17.9-150000.1.31.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.17-race-1.17.9-150000.1.31.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): go1.17-1.17.9-150000.1.31.1 go1.17-doc-1.17.9-150000.1.31.1 go1.17-race-1.17.9-150000.1.31.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): go1.17-1.17.9-150000.1.31.1 go1.17-doc-1.17.9-150000.1.31.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 x86_64): go1.17-race-1.17.9-150000.1.31.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): go1.17-1.17.9-150000.1.31.1 go1.17-doc-1.17.9-150000.1.31.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 x86_64): go1.17-race-1.17.9-150000.1.31.1 References:

1 0

openSUSE-RU-2022:0128-1: moderate: Recommended update for docker-distribution
by maintenance＠opensuse.org 07 May '22

07 May '22

openSUSE Recommended Update: Recommended update for docker-distribution ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0128-1 Rating: moderate References: #1197821 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: docker-distribution was updated to version 2.8.0 (bsc#1197821) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-128=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): docker-distribution-registry-2.8.0-bp152.4.6.1 References: https://bugzilla.suse.com/1197821

1 0

openSUSE-RU-2022:0129-1: moderate: Recommended update for knot
by maintenance＠opensuse.org 07 May '22

07 May '22

openSUSE Recommended Update: Recommended update for knot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0129-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: knot was updated to 3.1.8: - Update to version 3.1.8, see: https://www.knot-dns.cz/2022-04-28-version-318.html - Update to version 3.1.7, see: https://www.knot-dns.cz/2022-03-30-version-317.html - Update to version 3.1.6, see: https://www.knot-dns.cz/2022-02-08-version-316.html - Update to version 3.1.5, see: https://www.knot-dns.cz/2021-12-20-version-315.html - Update to version 3.1.4, see: https://www.knot-dns.cz/2021-11-04-version-314.html - Update to version 3.1.3, see: https://www.knot-dns.cz/2021-10-18-version-313.html - migrate to user creation via sysuser-tools - Update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html - Update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html - Update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html - Update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html - Update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html - Make /etc/knot directory owned by knot - fix reload action - Update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-129=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): knot-3.1.8-lp153.2.3.1 knot-debuginfo-3.1.8-lp153.2.3.1 knot-debugsource-3.1.8-lp153.2.3.1 knot-devel-3.1.8-lp153.2.3.1 libdnssec8-3.1.8-lp153.2.3.1 libdnssec8-debuginfo-3.1.8-lp153.2.3.1 libknot12-3.1.8-lp153.2.3.1 libknot12-debuginfo-3.1.8-lp153.2.3.1 libzscanner4-3.1.8-lp153.2.3.1 libzscanner4-debuginfo-3.1.8-lp153.2.3.1 References:

1 0

openSUSE-RU-2022:0130-1: moderate: Recommended update for glusterfs
by maintenance＠opensuse.org 07 May '22

07 May '22

openSUSE Recommended Update: Recommended update for glusterfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0130-1 Rating: moderate References: #1198734 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for glusterfs adds requires for both rpcbind and python-xml (boo#1198734) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-130=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): glusterfs-3.12.3-bp153.2.3.1 glusterfs-devel-3.12.3-bp153.2.3.1 libgfapi0-3.12.3-bp153.2.3.1 libgfchangelog0-3.12.3-bp153.2.3.1 libgfdb0-3.12.3-bp153.2.3.1 libgfrpc0-3.12.3-bp153.2.3.1 libgfxdr0-3.12.3-bp153.2.3.1 libglusterfs0-3.12.3-bp153.2.3.1 python-gluster-3.12.3-bp153.2.3.1 References: https://bugzilla.suse.com/1198734

1 0

openSUSE-RU-2022:0127-1: moderate: Recommended update for obs-service-docker_label_helper
by maintenance＠opensuse.org 07 May '22

07 May '22

SUSE Recommended Update: Recommended update for obs-service-docker_label_helper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0127-1 Rating: moderate References: #1193429 #1197821 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for obs-service-docker_label_helper fixes the following issues: - Support new syntax which makes Dockerfiles compatible with plain Docker/podman build. The new syntax uses entry/exit point to determine whether labels should be expanded. Doing so makes the Dockerfile compatible with standard `docker build` and `podman build` command. (bsc#1193429) - Retain compatibility with old syntax. Update documentation - Improve summary, description and README.md a bit - Improve regexp instead of having two as proposed by Fabian Vogt Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-127=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-127=1 Package List: - openSUSE Leap 15.3 (noarch): obs-service-docker_label_helper-0.0-5.6.1 - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): docker-distribution-registry-2.8.0-bp153.2.3.1 References: https://bugzilla.suse.com/1193429 https://bugzilla.suse.com/1197821

1 0

SUSE-SU-2022:1565-1: moderate: Security update for giflib
by opensuse-security＠opensuse.org 06 May '22

06 May '22

SUSE Security Update: Security update for giflib ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1565-1 Rating: moderate References: #1094832 #1146299 #1184123 #974847 Cross-References: CVE-2016-3977 CVE-2018-11490 CVE-2019-15133 CVSS scores: CVE-2016-3977 (NVD) : 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-11490 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-11490 (SUSE): 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-15133 (SUSE): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for giflib fixes the following issues: - CVE-2019-15133: Fixed a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero (bsc#1146299). - CVE-2018-11490: Fixed a heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c (bsc#1094832). - CVE-2016-3977: Fixed a heap buffer overflow in gif2rgb (bsc#974847). Update to version 5.2.1 * In gifbuild.c, avoid a core dump on no color map. * Restore inadvertently removed library version numbers in Makefile. Changes in version 5.2.0 * The undocumented and deprecated GifQuantizeBuffer() entry point has been moved to the util library to reduce libgif size and attack surface. Applications needing this function are couraged to link the util library or make their own copy. * The following obsolete utility programs are no longer installed: gifecho, giffilter, gifinto, gifsponge. These were either installed in error or have been obsolesced by modern image-transformmation tools like ImageMagick convert. They may be removed entirely in a future release. * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84 * Address SF bug #134: Giflib fails to slurp significant number of gifs * Apply SPDX convention for license tagging. Changes in version 5.1.9 * The documentation directory now includes an HTMlified version of the GIF89 standard, and a more detailed description of how LZW compression is applied to GIFs. * Address SF bug #129: The latest version of giflib cannot be build on windows. * Address SF bug #126: Cannot compile giflib using c89 Changes in version 5.1.8 * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299) * Address SF bug #125: 5.1.7: xmlto is still required for tarball * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible * Address SF bug #122: 5.1.7 installs manpages to wrong directory * Address SF bug #121: make: getversion: Command not found * Address SF bug #120: 5.1.7 does not build a proper library - no Changes in version 5.1.7 * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs. Changes in version 5.1.6 * Fix library installation in the Makefile. Changes in version 5.1.5 * Fix SF bug #114: Null dereferences in main() of gifclrmp * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine() in cgif.c. This had been assigned (CVE-2018-11490 bsc#1094832). * Fix SF bug #111: segmentation fault in PrintCodeBlock * Fix SF bug #109: Segmentation fault of giftool reading a crafted file * Fix SF bug #107: Floating point exception in giftext utility * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317 * Fix SF bug #104: Ineffective bounds check in DGifSlurp * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847) * The horrible old autoconf build system has been removed with extreme prejudice. You now build this simply by running "make" from the top-level directory. The following non-security bugs were fixed: - build path independent objects and inherit CFLAGS from the build system (bsc#1184123) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1565=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1565=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1565=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1565=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1565=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): giflib-debugsource-5.2.1-150000.4.8.1 giflib-devel-5.2.1-150000.4.8.1 giflib-progs-5.2.1-150000.4.8.1 giflib-progs-debuginfo-5.2.1-150000.4.8.1 libgif7-5.2.1-150000.4.8.1 libgif7-debuginfo-5.2.1-150000.4.8.1 - openSUSE Leap 15.4 (x86_64): giflib-devel-32bit-5.2.1-150000.4.8.1 libgif7-32bit-5.2.1-150000.4.8.1 libgif7-32bit-debuginfo-5.2.1-150000.4.8.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): giflib-debugsource-5.2.1-150000.4.8.1 giflib-devel-5.2.1-150000.4.8.1 giflib-progs-5.2.1-150000.4.8.1 giflib-progs-debuginfo-5.2.1-150000.4.8.1 libgif7-5.2.1-150000.4.8.1 libgif7-debuginfo-5.2.1-150000.4.8.1 - openSUSE Leap 15.3 (x86_64): giflib-devel-32bit-5.2.1-150000.4.8.1 libgif7-32bit-5.2.1-150000.4.8.1 libgif7-32bit-debuginfo-5.2.1-150000.4.8.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): giflib-debugsource-5.2.1-150000.4.8.1 giflib-devel-5.2.1-150000.4.8.1 libgif7-5.2.1-150000.4.8.1 libgif7-debuginfo-5.2.1-150000.4.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): giflib-debugsource-5.2.1-150000.4.8.1 giflib-devel-5.2.1-150000.4.8.1 libgif7-5.2.1-150000.4.8.1 libgif7-debuginfo-5.2.1-150000.4.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): giflib-debugsource-5.2.1-150000.4.8.1 giflib-devel-5.2.1-150000.4.8.1 libgif7-5.2.1-150000.4.8.1 libgif7-debuginfo-5.2.1-150000.4.8.1 References: https://www.suse.com/security/cve/CVE-2016-3977.html https://www.suse.com/security/cve/CVE-2018-11490.html https://www.suse.com/security/cve/CVE-2019-15133.html https://bugzilla.suse.com/1094832 https://bugzilla.suse.com/1146299 https://bugzilla.suse.com/1184123 https://bugzilla.suse.com/974847

1 0

openSUSE-RU-2022:0126-1: Security update for htmldoc
by maintenance＠opensuse.org 06 May '22

06 May '22

openSUSE Recommended Update: Security update for htmldoc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0126-1 Rating: low References: #1198933 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: htmldoc was updated to fix the following issues: - CVE-2022-28085: Fixed heap buffer overflow in function pdf_write_names in ps-pdf.cxx [bsc#1198933] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-126=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): htmldoc-1.9.12-bp153.2.12.1 References: https://www.suse.com/security/cve/CVE-2022-28085.html https://bugzilla.suse.com/1198933

1 0

SUSE-RU-2022:1558-1: important: Recommended update for perf
by maintenance＠opensuse.org 06 May '22

06 May '22

SUSE Recommended Update: Recommended update for perf ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1558-1 Rating: important References: #1198077 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perf fixes the following issues: - Support for PowerPC exposing Performance Monitor Counter SPRs as part of extended regs (bsc#1198077) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1558=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1558=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): perf-5.3.18-150300.38.3.1 perf-debuginfo-5.3.18-150300.38.3.1 perf-debugsource-5.3.18-150300.38.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): perf-5.3.18-150300.38.3.1 perf-debuginfo-5.3.18-150300.38.3.1 perf-debugsource-5.3.18-150300.38.3.1 References: https://bugzilla.suse.com/1198077

1 0

SUSE-RU-2022:1561-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 06 May '22

06 May '22

SUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1561-1 Rating: moderate References: #1192523 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kiwi fixes the following issue: - Fix booting GRUB submenu entries with hybrid images (linux/linuxefi) Variables assigned with "set" are not visible in submenus. Export $linux and $initrd, so that they also work in submenu entries. (bsc#1192523) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1561=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1561=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1561=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1561=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1561=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1561=1 - SUSE Linux Enterprise Micro 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-1561=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.17-150100.3.50.1 dracut-kiwi-live-9.24.17-150100.3.50.1 dracut-kiwi-oem-dump-9.24.17-150100.3.50.1 dracut-kiwi-oem-repart-9.24.17-150100.3.50.1 dracut-kiwi-overlay-9.24.17-150100.3.50.1 kiwi-man-pages-9.24.17-150100.3.50.1 kiwi-systemdeps-9.24.17-150100.3.50.1 kiwi-systemdeps-bootloaders-9.24.17-150100.3.50.1 kiwi-systemdeps-containers-9.24.17-150100.3.50.1 kiwi-systemdeps-core-9.24.17-150100.3.50.1 kiwi-systemdeps-disk-images-9.24.17-150100.3.50.1 kiwi-systemdeps-filesystems-9.24.17-150100.3.50.1 kiwi-systemdeps-image-validation-9.24.17-150100.3.50.1 kiwi-systemdeps-iso-media-9.24.17-150100.3.50.1 kiwi-tools-9.24.17-150100.3.50.1 kiwi-tools-debuginfo-9.24.17-150100.3.50.1 python-kiwi-debugsource-9.24.17-150100.3.50.1 python3-kiwi-9.24.17-150100.3.50.1 - openSUSE Leap 15.3 (x86_64): kiwi-pxeboot-9.24.17-150100.3.50.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): dracut-kiwi-lib-9.24.17-150100.3.50.1 dracut-kiwi-live-9.24.17-150100.3.50.1 dracut-kiwi-oem-dump-9.24.17-150100.3.50.1 dracut-kiwi-oem-repart-9.24.17-150100.3.50.1 dracut-kiwi-overlay-9.24.17-150100.3.50.1 kiwi-man-pages-9.24.17-150100.3.50.1 kiwi-pxeboot-9.24.17-150100.3.50.1 kiwi-systemdeps-bootloaders-9.24.17-150100.3.50.1 kiwi-systemdeps-core-9.24.17-150100.3.50.1 kiwi-systemdeps-disk-images-9.24.17-150100.3.50.1 kiwi-systemdeps-filesystems-9.24.17-150100.3.50.1 kiwi-systemdeps-image-validation-9.24.17-150100.3.50.1 kiwi-systemdeps-iso-media-9.24.17-150100.3.50.1 kiwi-tools-9.24.17-150100.3.50.1 kiwi-tools-debuginfo-9.24.17-150100.3.50.1 python-kiwi-debugsource-9.24.17-150100.3.50.1 python3-kiwi-9.24.17-150100.3.50.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.17-150100.3.50.1 dracut-kiwi-live-9.24.17-150100.3.50.1 dracut-kiwi-oem-dump-9.24.17-150100.3.50.1 dracut-kiwi-oem-repart-9.24.17-150100.3.50.1 dracut-kiwi-overlay-9.24.17-150100.3.50.1 kiwi-man-pages-9.24.17-150100.3.50.1 kiwi-systemdeps-9.24.17-150100.3.50.1 kiwi-systemdeps-bootloaders-9.24.17-150100.3.50.1 kiwi-systemdeps-containers-9.24.17-150100.3.50.1 kiwi-systemdeps-core-9.24.17-150100.3.50.1 kiwi-systemdeps-disk-images-9.24.17-150100.3.50.1 kiwi-systemdeps-filesystems-9.24.17-150100.3.50.1 kiwi-systemdeps-image-validation-9.24.17-150100.3.50.1 kiwi-systemdeps-iso-media-9.24.17-150100.3.50.1 kiwi-tools-9.24.17-150100.3.50.1 kiwi-tools-debuginfo-9.24.17-150100.3.50.1 python-kiwi-debugsource-9.24.17-150100.3.50.1 python3-kiwi-9.24.17-150100.3.50.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (x86_64): kiwi-pxeboot-9.24.17-150100.3.50.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.17-150100.3.50.1 dracut-kiwi-live-9.24.17-150100.3.50.1 dracut-kiwi-oem-dump-9.24.17-150100.3.50.1 dracut-kiwi-oem-repart-9.24.17-150100.3.50.1 dracut-kiwi-overlay-9.24.17-150100.3.50.1 kiwi-man-pages-9.24.17-150100.3.50.1 kiwi-systemdeps-9.24.17-150100.3.50.1 kiwi-systemdeps-bootloaders-9.24.17-150100.3.50.1 kiwi-systemdeps-containers-9.24.17-150100.3.50.1 kiwi-systemdeps-core-9.24.17-150100.3.50.1 kiwi-systemdeps-disk-images-9.24.17-150100.3.50.1 kiwi-systemdeps-filesystems-9.24.17-150100.3.50.1 kiwi-systemdeps-image-validation-9.24.17-150100.3.50.1 kiwi-systemdeps-iso-media-9.24.17-150100.3.50.1 kiwi-tools-9.24.17-150100.3.50.1 kiwi-tools-debuginfo-9.24.17-150100.3.50.1 python-kiwi-debugsource-9.24.17-150100.3.50.1 python3-kiwi-9.24.17-150100.3.50.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (x86_64): kiwi-pxeboot-9.24.17-150100.3.50.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): dracut-kiwi-lib-9.24.17-150100.3.50.1 dracut-kiwi-oem-dump-9.24.17-150100.3.50.1 dracut-kiwi-oem-repart-9.24.17-150100.3.50.1 python-kiwi-debugsource-9.24.17-150100.3.50.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): dracut-kiwi-lib-9.24.17-150100.3.50.1 dracut-kiwi-oem-repart-9.24.17-150100.3.50.1 python-kiwi-debugsource-9.24.17-150100.3.50.1 - SUSE Linux Enterprise Micro 5.0 (aarch64 x86_64): dracut-kiwi-lib-9.24.17-150100.3.50.1 dracut-kiwi-oem-repart-9.24.17-150100.3.50.1 python-kiwi-debugsource-9.24.17-150100.3.50.1 References: https://bugzilla.suse.com/1192523

1 0

SUSE-RU-2022:1555-1: moderate: Recommended update for amavisd-new
by maintenance＠opensuse.org 06 May '22

06 May '22

SUSE Recommended Update: Recommended update for amavisd-new ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1555-1 Rating: moderate References: #1185145 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for amavisd-new fixes the following issues: - Removed deprecated option "syslog" used in amavis.service (bsc#1185145) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1555=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1555=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1555=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1555=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1555=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): amavisd-new-2.11.1-150000.6.6.1 amavisd-new-debuginfo-2.11.1-150000.6.6.1 amavisd-new-debugsource-2.11.1-150000.6.6.1 amavisd-new-docs-2.11.1-150000.6.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): amavisd-new-2.11.1-150000.6.6.1 amavisd-new-debuginfo-2.11.1-150000.6.6.1 amavisd-new-debugsource-2.11.1-150000.6.6.1 amavisd-new-docs-2.11.1-150000.6.6.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): amavisd-new-2.11.1-150000.6.6.1 amavisd-new-debuginfo-2.11.1-150000.6.6.1 amavisd-new-debugsource-2.11.1-150000.6.6.1 amavisd-new-docs-2.11.1-150000.6.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): amavisd-new-2.11.1-150000.6.6.1 amavisd-new-debuginfo-2.11.1-150000.6.6.1 amavisd-new-debugsource-2.11.1-150000.6.6.1 amavisd-new-docs-2.11.1-150000.6.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): amavisd-new-2.11.1-150000.6.6.1 amavisd-new-debuginfo-2.11.1-150000.6.6.1 amavisd-new-debugsource-2.11.1-150000.6.6.1 amavisd-new-docs-2.11.1-150000.6.6.1 References: https://bugzilla.suse.com/1185145

1 0

SUSE-RU-2022:1559-1: important: Recommended update for ovmf
by maintenance＠opensuse.org 06 May '22

06 May '22

SUSE Recommended Update: Recommended update for ovmf ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1559-1 Rating: important References: #1197458 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ovmf fixes the following issues: - Set TPM2_ENABLE and TPM2_CONFIG_ENABLE because it's needed by ARM (bsc#1197458) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1559=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-1559=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1559=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1559=1 Package List: - openSUSE Leap 15.3 (aarch64 x86_64): ovmf-202008-150300.10.14.1 ovmf-tools-202008-150300.10.14.1 - openSUSE Leap 15.3 (noarch): qemu-ovmf-ia32-202008-150300.10.14.1 qemu-ovmf-x86_64-202008-150300.10.14.1 qemu-uefi-aarch32-202008-150300.10.14.1 qemu-uefi-aarch64-202008-150300.10.14.1 - openSUSE Leap 15.3 (x86_64): qemu-ovmf-x86_64-debug-202008-150300.10.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 x86_64): ovmf-202008-150300.10.14.1 ovmf-tools-202008-150300.10.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (noarch): qemu-ovmf-x86_64-202008-150300.10.14.1 qemu-uefi-aarch64-202008-150300.10.14.1 - SUSE Linux Enterprise Micro 5.2 (noarch): qemu-ovmf-x86_64-202008-150300.10.14.1 qemu-uefi-aarch64-202008-150300.10.14.1 - SUSE Linux Enterprise Micro 5.1 (noarch): qemu-ovmf-x86_64-202008-150300.10.14.1 qemu-uefi-aarch64-202008-150300.10.14.1 References: https://bugzilla.suse.com/1197458

1 0