May 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:1883-1: important: Recommended update for pcre2
by maintenance＠opensuse.org 30 May '22

30 May '22

SUSE Recommended Update: Recommended update for pcre2 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1883-1 Rating: important References: #1199232 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pcre2 fixes the following issues: - CVE-2022-1586: Fixed out-of-bounds read via missing Unicode property matching issue in JIT compiled regular expressions (bsc#1199232). Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1883=1 Package List: - openSUSE Leap 15.4 (x86_64): libpcre2-16-0-10.31-150000.3.7.1 libpcre2-16-0-32bit-10.31-150000.3.7.1 libpcre2-16-0-32bit-debuginfo-10.31-150000.3.7.1 libpcre2-16-0-debuginfo-10.31-150000.3.7.1 libpcre2-32-0-10.31-150000.3.7.1 libpcre2-32-0-32bit-10.31-150000.3.7.1 libpcre2-32-0-32bit-debuginfo-10.31-150000.3.7.1 libpcre2-32-0-debuginfo-10.31-150000.3.7.1 libpcre2-8-0-10.31-150000.3.7.1 libpcre2-8-0-32bit-10.31-150000.3.7.1 libpcre2-8-0-32bit-debuginfo-10.31-150000.3.7.1 libpcre2-8-0-debuginfo-10.31-150000.3.7.1 libpcre2-posix2-10.31-150000.3.7.1 libpcre2-posix2-32bit-10.31-150000.3.7.1 libpcre2-posix2-32bit-debuginfo-10.31-150000.3.7.1 libpcre2-posix2-debuginfo-10.31-150000.3.7.1 pcre2-debugsource-10.31-150000.3.7.1 pcre2-devel-10.31-150000.3.7.1 pcre2-devel-static-10.31-150000.3.7.1 pcre2-tools-10.31-150000.3.7.1 pcre2-tools-debuginfo-10.31-150000.3.7.1 - openSUSE Leap 15.4 (noarch): pcre2-doc-10.31-150000.3.7.1 References: https://www.suse.com/security/cve/CVE-2022-1586.html https://bugzilla.suse.com/1199232

1 0

SUSE-SU-2022:1882-1: important: Security update for tiff
by opensuse-security＠opensuse.org 30 May '22

30 May '22

SUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1882-1 Rating: important References: #1195964 #1195965 #1197066 #1197068 #1197072 #1197073 #1197074 #1197631 Cross-References: CVE-2022-0561 CVE-2022-0562 CVE-2022-0865 CVE-2022-0891 CVE-2022-0908 CVE-2022-0909 CVE-2022-0924 CVE-2022-1056 CVSS scores: CVE-2022-0561 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0561 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0562 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0562 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0865 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0865 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0891 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H CVE-2022-0891 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-0908 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0908 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0909 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0909 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0924 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0924 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-1056 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-1056 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for tiff fixes the following issues: - CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964). - CVE-2022-0562: Fixed null source pointer passed as an argument to memcpy() within TIFFReadDirectory() in tif_dirread.c (bsc#1195965). - CVE-2022-0865: Fixed assertion failure in TIFFReadAndRealloc (bsc#1197066). - CVE-2022-0909: Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197072). - CVE-2022-0924: Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file (bsc#1197073). - CVE-2022-0908: Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() (bsc#1197074). - CVE-2022-1056: Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197631). - CVE-2022-0891: Fixed heap buffer overflow in extractImageSection (bsc#1197068). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1882=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1882=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1882=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1882=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1882=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1882=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-1882=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-1882=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1882=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1882=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-1882=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-1882=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-1882=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1882=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1882=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1882=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1882=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1882=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1882=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1882=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1882=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-1882=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-1882=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1882=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1882=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1882=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-1882=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - openSUSE Leap 15.4 (x86_64): libtiff-devel-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - openSUSE Leap 15.3 (x86_64): libtiff-devel-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Manager Server 4.1 (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Manager Proxy 4.1 (x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server for SAP 15 (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x x86_64): tiff-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): tiff-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Enterprise Storage 7 (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 - SUSE Enterprise Storage 6 (x86_64): libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 - SUSE CaaS Platform 4.0 (x86_64): libtiff-devel-4.0.9-150000.45.8.1 libtiff5-32bit-4.0.9-150000.45.8.1 libtiff5-32bit-debuginfo-4.0.9-150000.45.8.1 libtiff5-4.0.9-150000.45.8.1 libtiff5-debuginfo-4.0.9-150000.45.8.1 tiff-debuginfo-4.0.9-150000.45.8.1 tiff-debugsource-4.0.9-150000.45.8.1 References: https://www.suse.com/security/cve/CVE-2022-0561.html https://www.suse.com/security/cve/CVE-2022-0562.html https://www.suse.com/security/cve/CVE-2022-0865.html https://www.suse.com/security/cve/CVE-2022-0891.html https://www.suse.com/security/cve/CVE-2022-0908.html https://www.suse.com/security/cve/CVE-2022-0909.html https://www.suse.com/security/cve/CVE-2022-0924.html https://www.suse.com/security/cve/CVE-2022-1056.html https://bugzilla.suse.com/1195964 https://bugzilla.suse.com/1195965 https://bugzilla.suse.com/1197066 https://bugzilla.suse.com/1197068 https://bugzilla.suse.com/1197072 https://bugzilla.suse.com/1197073 https://bugzilla.suse.com/1197074 https://bugzilla.suse.com/1197631

1 0

SUSE-RU-2022:1876-1: Recommended update for csync
by maintenance＠opensuse.org 30 May '22

30 May '22

SUSE Recommended Update: Recommended update for csync ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1876-1 Rating: low References: #1197711 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for csync fixes the following issues: - Detect libssh version. (bsc#1197711) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1876=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1876=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-1876=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-1876=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1876=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1876=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): csync-0.50.0-150000.3.8.1 csync-debuginfo-0.50.0-150000.3.8.1 csync-debugsource-0.50.0-150000.3.8.1 libcsync-devel-0.50.0-150000.3.8.1 libcsync-devel-doc-0.50.0-150000.3.8.1 libcsync-doc-0.50.0-150000.3.8.1 libcsync-plugin-owncloud-0.50.0-150000.3.8.1 libcsync-plugin-owncloud-debuginfo-0.50.0-150000.3.8.1 libcsync-plugin-sftp-0.50.0-150000.3.8.1 libcsync-plugin-sftp-debuginfo-0.50.0-150000.3.8.1 libcsync-plugin-smb-0.50.0-150000.3.8.1 libcsync-plugin-smb-debuginfo-0.50.0-150000.3.8.1 libcsync0-0.50.0-150000.3.8.1 libcsync0-debuginfo-0.50.0-150000.3.8.1 - openSUSE Leap 15.4 (x86_64): libcsync0-32bit-0.50.0-150000.3.8.1 libcsync0-32bit-debuginfo-0.50.0-150000.3.8.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): csync-0.50.0-150000.3.8.1 csync-debuginfo-0.50.0-150000.3.8.1 csync-debugsource-0.50.0-150000.3.8.1 libcsync-devel-0.50.0-150000.3.8.1 libcsync-devel-doc-0.50.0-150000.3.8.1 libcsync-doc-0.50.0-150000.3.8.1 libcsync-plugin-owncloud-0.50.0-150000.3.8.1 libcsync-plugin-owncloud-debuginfo-0.50.0-150000.3.8.1 libcsync-plugin-sftp-0.50.0-150000.3.8.1 libcsync-plugin-sftp-debuginfo-0.50.0-150000.3.8.1 libcsync-plugin-smb-0.50.0-150000.3.8.1 libcsync-plugin-smb-debuginfo-0.50.0-150000.3.8.1 libcsync0-0.50.0-150000.3.8.1 libcsync0-debuginfo-0.50.0-150000.3.8.1 - openSUSE Leap 15.3 (x86_64): libcsync0-32bit-0.50.0-150000.3.8.1 libcsync0-32bit-debuginfo-0.50.0-150000.3.8.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): csync-0.50.0-150000.3.8.1 csync-debuginfo-0.50.0-150000.3.8.1 csync-debugsource-0.50.0-150000.3.8.1 libcsync-plugin-sftp-0.50.0-150000.3.8.1 libcsync-plugin-sftp-debuginfo-0.50.0-150000.3.8.1 libcsync-plugin-smb-0.50.0-150000.3.8.1 libcsync-plugin-smb-debuginfo-0.50.0-150000.3.8.1 libcsync0-0.50.0-150000.3.8.1 libcsync0-debuginfo-0.50.0-150000.3.8.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): csync-0.50.0-150000.3.8.1 csync-debuginfo-0.50.0-150000.3.8.1 csync-debugsource-0.50.0-150000.3.8.1 libcsync-plugin-sftp-0.50.0-150000.3.8.1 libcsync-plugin-sftp-debuginfo-0.50.0-150000.3.8.1 libcsync-plugin-smb-0.50.0-150000.3.8.1 libcsync-plugin-smb-debuginfo-0.50.0-150000.3.8.1 libcsync0-0.50.0-150000.3.8.1 libcsync0-debuginfo-0.50.0-150000.3.8.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): csync-0.50.0-150000.3.8.1 csync-debuginfo-0.50.0-150000.3.8.1 csync-debugsource-0.50.0-150000.3.8.1 libcsync-plugin-sftp-0.50.0-150000.3.8.1 libcsync-plugin-sftp-debuginfo-0.50.0-150000.3.8.1 libcsync-plugin-smb-0.50.0-150000.3.8.1 libcsync-plugin-smb-debuginfo-0.50.0-150000.3.8.1 libcsync0-0.50.0-150000.3.8.1 libcsync0-debuginfo-0.50.0-150000.3.8.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x): csync-0.50.0-150000.3.8.1 csync-debuginfo-0.50.0-150000.3.8.1 csync-debugsource-0.50.0-150000.3.8.1 libcsync-plugin-sftp-0.50.0-150000.3.8.1 libcsync-plugin-sftp-debuginfo-0.50.0-150000.3.8.1 libcsync-plugin-smb-0.50.0-150000.3.8.1 libcsync-plugin-smb-debuginfo-0.50.0-150000.3.8.1 libcsync0-0.50.0-150000.3.8.1 libcsync0-debuginfo-0.50.0-150000.3.8.1 References: https://bugzilla.suse.com/1197711

1 0

SUSE-RU-2022:1875-1: Recommended update for grpc
by maintenance＠opensuse.org 30 May '22

30 May '22

SUSE Recommended Update: Recommended update for grpc ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1875-1 Rating: low References: #1197726 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grpc fixes the following issues: - grpc won't compile on SP4(bsc#1197726) - Add conditional to build without python2 if needed Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1875=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1875=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-1875=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-1875=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-1875=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-1875=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-1875=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): grpc-debuginfo-1.25.0-150200.3.5.1 grpc-debugsource-1.25.0-150200.3.5.1 grpc-devel-1.25.0-150200.3.5.1 grpc-devel-debuginfo-1.25.0-150200.3.5.1 libgrpc++1-1.25.0-150200.3.5.1 libgrpc++1-debuginfo-1.25.0-150200.3.5.1 libgrpc8-1.25.0-150200.3.5.1 libgrpc8-debuginfo-1.25.0-150200.3.5.1 python2-grpcio-1.25.0-150200.3.5.1 python2-grpcio-debuginfo-1.25.0-150200.3.5.1 python3-grpcio-1.25.0-150200.3.5.1 python3-grpcio-debuginfo-1.25.0-150200.3.5.1 - openSUSE Leap 15.4 (noarch): grpc-source-1.25.0-150200.3.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): grpc-debuginfo-1.25.0-150200.3.5.1 grpc-debugsource-1.25.0-150200.3.5.1 grpc-devel-1.25.0-150200.3.5.1 grpc-devel-debuginfo-1.25.0-150200.3.5.1 libgrpc++1-1.25.0-150200.3.5.1 libgrpc++1-debuginfo-1.25.0-150200.3.5.1 libgrpc8-1.25.0-150200.3.5.1 libgrpc8-debuginfo-1.25.0-150200.3.5.1 python2-grpcio-1.25.0-150200.3.5.1 python2-grpcio-debuginfo-1.25.0-150200.3.5.1 python3-grpcio-1.25.0-150200.3.5.1 python3-grpcio-debuginfo-1.25.0-150200.3.5.1 - openSUSE Leap 15.3 (noarch): grpc-source-1.25.0-150200.3.5.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): grpc-debuginfo-1.25.0-150200.3.5.1 grpc-debugsource-1.25.0-150200.3.5.1 libgrpc++1-1.25.0-150200.3.5.1 libgrpc++1-debuginfo-1.25.0-150200.3.5.1 libgrpc8-1.25.0-150200.3.5.1 libgrpc8-debuginfo-1.25.0-150200.3.5.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): grpc-debuginfo-1.25.0-150200.3.5.1 grpc-debugsource-1.25.0-150200.3.5.1 libgrpc++1-1.25.0-150200.3.5.1 libgrpc++1-debuginfo-1.25.0-150200.3.5.1 libgrpc8-1.25.0-150200.3.5.1 libgrpc8-debuginfo-1.25.0-150200.3.5.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (aarch64 ppc64le s390x x86_64): grpc-debuginfo-1.25.0-150200.3.5.1 grpc-debugsource-1.25.0-150200.3.5.1 python3-grpcio-1.25.0-150200.3.5.1 python3-grpcio-debuginfo-1.25.0-150200.3.5.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (aarch64 ppc64le s390x x86_64): grpc-debuginfo-1.25.0-150200.3.5.1 grpc-debugsource-1.25.0-150200.3.5.1 python3-grpcio-1.25.0-150200.3.5.1 python3-grpcio-debuginfo-1.25.0-150200.3.5.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (aarch64 ppc64le s390x x86_64): libgrpc8-1.25.0-150200.3.5.1 libgrpc8-debuginfo-1.25.0-150200.3.5.1 python3-grpcio-1.25.0-150200.3.5.1 python3-grpcio-debuginfo-1.25.0-150200.3.5.1 References: https://bugzilla.suse.com/1197726

1 0

openSUSE-SU-2022:0156-1: important: Security update for opera
by opensuse-security＠opensuse.org 28 May '22

28 May '22

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0156-1 Rating: important References: Cross-References: CVE-2022-1364 CVE-2022-1633 CVE-2022-1634 CVE-2022-1635 CVE-2022-1636 CVE-2022-1637 CVE-2022-1638 CVE-2022-1639 CVE-2022-1640 CVE-2022-1641 Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for opera fixes the following issues: Update to 87.0.4390.25: - CHR-8870 Update chromium on desktop-stable-101-4390 to 101.0.4951.64 - DNA-99209 Enable #easy-files-multiupload on all streams - DNA-99325 Use a preference to set number of recent searches and recently closed in unfiltered dropdown - DNA-99353 Translations for O87 - DNA-99365 Adding title to the first category duplicates categories titles in the dropdown - DNA-99385 Feedback button in filtered dropdown can overlap with other web buttons for highlighted suggestion - DNA-99391 Add bookmarks at the bottom of a bookmarks bar folder - DNA-99491 Suggestion is not immediately removed form recent searches view in dropdown. - DNA-99501 Promote O87 to stable - DNA-99504 ��Switch to tab�� button is not aligned to the right for some categories in dropdown - The update to chromium 101.0.4951.64 fixes following issues: CVE-2022-1633, CVE-2022-1634, CVE-2022-1635, CVE-2022-1636, CVE-2022-1637, CVE-2022-1638, CVE-2022-1639, CVE-2022-1640, CVE-2022-1641 - Complete Opera 87.0 changelog at: https://blogs.opera.com/desktop/changelog-for-87/ - Update to 86.0.4363.59 - DNA-99021 Crash in sidebar when extension of sidebar item was uninstalled - DNA-99359 Crash at opera:: ContinueShoppingExpiredProductRemoverImpl::RemoveExpiredProducts() - Update to 86.0.4363.50 - DNA-68493 Opera doesn��t close address field drop-down when dragging text from the address field - DNA-99003 Crash at views::Widget::GetNativeView() const - DNA-99133 BrowserSidebarWithProxyAuthTest.PreloadWithWebModalDialog fails - DNA-99230 Switching search engine with shortcut stopped working after DNA-99178 - DNA-99317 Make history match appear on top - Update to 86.0.4363.32 - DNA-98510 Blank icon in sidebar setup - DNA-98525 Unable to drag tab to far right - DNA-98893 Sound indicator is too precise in Google Meet - DNA-98919 Shopping corner internal API access update - DNA-98924 Tab tooltip gets stuck on screen - DNA-98981 Enable easy-files-multiupload on developer stream - DNA-99041 Move Shopping Corner to sidebar entry - DNA-99061 Enable #address-bar-dropdown-categories on all streams - DNA-99062 Create flag to show top sites and recently closed in unfiltered suggestions - DNA-99064 Hard to drag & drop current URL to a specific folder on bookmarks bar when unfiltered dropdown is displayed - DNA-99070 Make scroll button in Continue On scroll multiple items - DNA-99089 Shopping corner tab is not preserved after restart - DNA-99115 Request updating the Avro schema for sidebar event - DNA-99117 Make sure shopping corner is enabled by default - DNA-99178 Left/right not working in address bar dropdown - DNA-99204 Hide Shopping Corner by default - Update to 86.0.4363.23 - CHR-8843 Update chromium on desktop-stable-100-4363 to 100.0.4896.127 - DNA-98236 Turn on #snap-text-selection on all streams - DNA-98507 DCHECK at address_bar_controller.cc(547) - DNA-98528 Suggestions for internal pages disappear when typing their full name - DNA-98538 Change name of "Opera Crypto Wallet" to "Crypto Wallet" - DNA-98540 Booking.com used instead of custom search engine - DNA-98587 Favicon of booking suggestion in the city category is unexpectedly changing - DNA-98605 City suggestions should show URL in address field when selected - DNA-98608 #address-bar-dropdown-categories expired - DNA-98616 Add recent searches to 'old' BABE - DNA-98668 Switch to tab button leads to wrong tab - DNA-98673 Improve suggestion removal handling in suggestion providers - DNA-98681 Remove unused suggestion consumers - DNA-98684 Have a dedicated SuggestionList for the new address bar dropdown - DNA-98685 Enable #native-crypto-wallet on developer - DNA-98688 "Disable this feature" mini-menu settings is non-intuitive - DNA-98690 Autocompleted text stayed in address field after removing suggestion - DNA-98738 Inline autocomplete suggestion for SD disappears after typing 3rd letter of SD name - DNA-98743 Blank dropdown after pressing space key - DNA-98783 Improve showing suggestions with long URLs or page titles - DNA-98785 "Switch to tab" button not shown for suggestions with www subdomain when typing domain text - DNA-98879 "Disable suggestions before typing" mini-menu option should change to "Enable suggestions before typing" when being selected - DNA-98917 Translations for O86 - DNA-98975 Turn on #snap-crop-tool on all channels - DNA-98980 Enable #native-crypto-wallet on all streams - DNA-99005 The sidebar item is not visible for already active crypto wallet users when #native-crypto-wallet flag is enabled. - DNA-99007 Crash at TemplateURLRef::ParseIfNecessary(SearchTermsData const&) const - DNA-99047 Promote O86 to stable - The update to chromium 100.0.4896.127 fixes following issues: CVE-2022-1364 - Complete Opera 86.0 changelog at: https://blogs.opera.com/desktop/changelog-for-86/ - Update to 85.0.4341.60 - DNA-98666 Set baidu as default search engine in China - DNA-98707 Hint is not displayed for new crypto wallet sidebar icon - DNA-98775 RichHintsSearchEngineCondition.testSogouSearchEngine errors - Update to 85.0.4341.47 - DNA-98249 Add feature flag #native-crypto-wallet - DNA-98250 Install extension on startup - DNA-98251 Make Crypto Wallet setting enable / disable extension - DNA-98252 Deactivate old desktop crypto wallet - DNA-98253 Always show ��Crypto Wallet�� in Sidebar Setup - DNA-98497 Crash when installing extension - DNA-98506 Enable opera_feature_crypto_wallet_encryption on desktop - DNA-98510 Blank icon in sidebar setup - DNA-98538 Change name of "Opera Crypto Wallet" to "Crypto Wallet" - DNA-98685 Enable #native-crypto-wallet on developer - DNA-98766 Crash at opera::AddressBarControllerImpl::OpenNativeDropdown() - DNA-98768 Crash at extensions::ContentFilterPrivateIsWhitelistedFunction::Run() - DNA-98770 Recent searches stay in address field after selecting entry from dropdown - DNA-98772 Screen sharing broken - DNA-98803 Autofilled part appended after selecting address bar using shortcut Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2022-156=1 Package List: - openSUSE Leap 15.4:NonFree (x86_64): opera-87.0.4390.25-lp154.2.8.1 References: https://www.suse.com/security/cve/CVE-2022-1364.html https://www.suse.com/security/cve/CVE-2022-1633.html https://www.suse.com/security/cve/CVE-2022-1634.html https://www.suse.com/security/cve/CVE-2022-1635.html https://www.suse.com/security/cve/CVE-2022-1636.html https://www.suse.com/security/cve/CVE-2022-1637.html https://www.suse.com/security/cve/CVE-2022-1638.html https://www.suse.com/security/cve/CVE-2022-1639.html https://www.suse.com/security/cve/CVE-2022-1640.html https://www.suse.com/security/cve/CVE-2022-1641.html

1 0

openSUSE-RU-2022:0154-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 27 May '22

27 May '22

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0154-1 Rating: moderate References: #1192432 #1193649 #1199215 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: lxd was updated to fix the following issues: - Update to LXD 4.24. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-24-has-been-released/13550 boo#1199215 This is the last release before LXD 5.0 (which does not support the Leap 15.3 kernel -- LXD 5.0 requires kernel 5.4 or newer). Thus this will be the last LXD release for Leap 15.3. + lxc file mount and new files API + Cluster event hub role * Reworked lxc storage volume info + AppArmor profiles for image extractors + Grafana dashboard + Degraded startup (missing disk) + restricted.containers.interception project option + core.metrics_authentication server option + Network interface name and MTU in virtual machines + I/O uring support for VM storage + ipv4.neighbor_probe and ipv6.neighbor_probe NIC options - Update to LXD 4.21. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-21-has-been-released/12860 boo#1193649 + Cluster member groups * Reworked cloud-init support + Trust certificate self-renewal + Restricted disk passthrough in projects + Restricted idmap uid/gid in projects + List all lxc commands with --sub-commands + List instances across all projects with --all-projects + New database-leader cluster role * Consistent units for byte sizes. * Routed networking in virtual machines + Support for ipv4.routes and ipv6.routes on routed type NICs + Option to skip records for NAT-ed addresses in network zones + Allow blocking an IP address family with security filtering options + New ceph.rbd.du storage config option to disable potentially slow rbd du * Optimized moving of instances and volumes between projects * Support for copying/moving custom volumes between cluster members - Update to LXD 4.20. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540 boo#1192432 + Live migration of virtual machines + Network peering for OVN + Network zones (DNS) + SR-IOV acceleration for OVN networking + Linux sysctl configuration on containers + Core scheduling for virtual machines + Cluster member configuration * Improvement to network leases - Update to LXD 4.18. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-18-has-been-released/12068/2 boo#1190323 + Network forwards (floating IPs) + Native BGP support * NAT address customization with OVN * lxd cluster edit for cluster disaster recovery + Refresh support for custom volume copies + Additional device restrictions for projects * --minimal option for lxd init * Additional network counters in instance state - Disable stripping of binaries, which seems to be causing issues at runtime due to some ld.so assertion failing. In particular it seems that libdqlite is getting corrupted somehow. - Update to LXD 4.17. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-17-has-been-released/11812 boo#1189645 + lxd import replaced by new lxd recover + Cluster member evacuation * Reworked lxc info output + Requestor address in lifecycle event + USB GPU support in the resources API + Monitoring of all projects in lxc monitor + Alternative format options in lxc monitor - Update to LXD 4.16. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-16-has-been-released/11547 boo#1188946 + Cluster certificate update + Copy/move of custom volumes between projects + lxc monitor --pretty now works with all event types + Easier revocation of cluster join tokens + IP filtering on unmanaged bridges + New warnings + New lifecycle events - Build with go1.15 for reproducible build results (boo#1102408) - Fixed a Leap-specific kernel backport bug (close_range(2) was backported but not the flags that it supported in the first version). boo#1186786 - Build lxd-agent and lxd-p2c statically to match upstream LXD build scripts (and to make VMs work properly -- lxd-agent is injected into the VM). - Update lxd-rpmlintrc to match this. - Update to LXD 4.15. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-15-has-been-released/11252 bsc#1186906 + Network interface hotplug in VMs + Configurable shutdown timeout + New persistent warnings (time skew, apparmor and virtiofsd) + Location field in /dev/lxd API + New type and name columns in lxc config trust list + Cluster members acting as database stand-by now visible + lxc monitor --pretty now supported with lifecycle events + New --expire flag for lxc publish + Requestor now recorded in lifecyle events + Proxy header support on main API endpoint + Full swagger coverage of REST API - Update to LXD 4.14. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-14-has-been-released/11008 bsc#1186647 + ACL support on managed bridges + Cluster member certificates + Cluster member description + Cluster token based join + Server warnings + Backup and snapshot project restrictions + User keys in device configuration + More auto-generated REST-API documentation Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-154=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): lxd-4.24-lp153.3.3.2 - openSUSE Leap 15.3 (noarch): lxd-bash-completion-4.24-lp153.3.3.2 References: https://bugzilla.suse.com/1192432 https://bugzilla.suse.com/1193649 https://bugzilla.suse.com/1199215

1 0

openSUSE-RU-2022:0153-1: moderate: Recommended update for warewulf
by maintenance＠opensuse.org 27 May '22

27 May '22

SUSE Recommended Update: Recommended update for warewulf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0153-1 Rating: moderate References: #1089434 #1195796 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for warewulf fixes the following issues: - Improve creating chroot on SLE: use repositories from host OS. This avoids registrations to get out of sync (boo#1195796). - Include SUSE into overlay template: Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-153=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-153=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): enchant-2-backend-aspell-2.2.5-4.6.1 enchant-2-backend-aspell-debuginfo-2.2.5-4.6.1 enchant-2-backend-hunspell-2.2.5-4.6.1 enchant-2-backend-hunspell-debuginfo-2.2.5-4.6.1 enchant-2-backend-voikko-2.2.5-4.6.1 enchant-2-backend-voikko-debuginfo-2.2.5-4.6.1 enchant-data-2.2.5-4.6.1 enchant-debugsource-2.2.5-4.6.1 enchant-devel-2.2.5-4.6.1 enchant-tools-2.2.5-4.6.1 enchant-tools-debuginfo-2.2.5-4.6.1 libenchant-2-2-2.2.5-4.6.1 libenchant-2-2-debuginfo-2.2.5-4.6.1 - openSUSE Leap 15.3 (x86_64): enchant-2-backend-voikko-32bit-2.2.5-4.6.1 enchant-2-backend-voikko-32bit-debuginfo-2.2.5-4.6.1 libenchant-2-2-32bit-2.2.5-4.6.1 libenchant-2-2-32bit-debuginfo-2.2.5-4.6.1 - openSUSE Backports SLE-15-SP3 (noarch): perl-warewulf-cluster-3.8.1-bp153.6.35 perl-warewulf-common-3.8.1-bp153.6.1 perl-warewulf-ipmi-3.8.1-bp153.6.35 perl-warewulf-provision-3.8.1-bp153.6.35 perl-warewulf-provision-server-3.8.1-bp153.6.35 warewulf-cluster-3.8.1-bp153.6.35 warewulf-common-3.8.1-bp153.6.1 warewulf-doc-3.8.1-bp153.6.1 warewulf-provision-3.8.1-bp153.6.35 warewulf-provision-ipxe-images-3.8.1-bp153.6.35 warewulf-provision-server-3.8.1-bp153.6.35 warewulf-provision-x86_64-initramfs-3.8.1-bp153.6.35 warewulf-vnfs-3.8.1-bp153.6.35 References: https://bugzilla.suse.com/1089434 https://bugzilla.suse.com/1195796

1 0

SUSE-RU-2022:1872-1: important: Recommended update for oprofile
by maintenance＠opensuse.org 27 May '22

27 May '22

SUSE Recommended Update: Recommended update for oprofile ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1872-1 Rating: important References: #1197793 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for oprofile fixes the following issues: - Resolve build issues due to binutils 2.34 api changes (bsc#1197793) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1872=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1872=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1872=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1872=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libopagent1-1.3.0-150100.8.3.1 libopagent1-debuginfo-1.3.0-150100.8.3.1 oprofile-1.3.0-150100.8.3.1 oprofile-debuginfo-1.3.0-150100.8.3.1 oprofile-debugsource-1.3.0-150100.8.3.1 oprofile-devel-1.3.0-150100.8.3.1 - openSUSE Leap 15.4 (x86_64): libopagent1-32bit-1.3.0-150100.8.3.1 libopagent1-32bit-debuginfo-1.3.0-150100.8.3.1 oprofile-32bit-1.3.0-150100.8.3.1 oprofile-32bit-debuginfo-1.3.0-150100.8.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopagent1-1.3.0-150100.8.3.1 libopagent1-debuginfo-1.3.0-150100.8.3.1 oprofile-1.3.0-150100.8.3.1 oprofile-debuginfo-1.3.0-150100.8.3.1 oprofile-debugsource-1.3.0-150100.8.3.1 oprofile-devel-1.3.0-150100.8.3.1 - openSUSE Leap 15.3 (x86_64): libopagent1-32bit-1.3.0-150100.8.3.1 libopagent1-32bit-debuginfo-1.3.0-150100.8.3.1 oprofile-32bit-1.3.0-150100.8.3.1 oprofile-32bit-debuginfo-1.3.0-150100.8.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): libopagent1-1.3.0-150100.8.3.1 libopagent1-debuginfo-1.3.0-150100.8.3.1 oprofile-1.3.0-150100.8.3.1 oprofile-debuginfo-1.3.0-150100.8.3.1 oprofile-debugsource-1.3.0-150100.8.3.1 oprofile-devel-1.3.0-150100.8.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (x86_64): libopagent1-32bit-1.3.0-150100.8.3.1 libopagent1-32bit-debuginfo-1.3.0-150100.8.3.1 oprofile-32bit-1.3.0-150100.8.3.1 oprofile-32bit-debuginfo-1.3.0-150100.8.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): libopagent1-1.3.0-150100.8.3.1 libopagent1-debuginfo-1.3.0-150100.8.3.1 oprofile-1.3.0-150100.8.3.1 oprofile-debuginfo-1.3.0-150100.8.3.1 oprofile-debugsource-1.3.0-150100.8.3.1 oprofile-devel-1.3.0-150100.8.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (x86_64): libopagent1-32bit-1.3.0-150100.8.3.1 libopagent1-32bit-debuginfo-1.3.0-150100.8.3.1 oprofile-32bit-1.3.0-150100.8.3.1 oprofile-32bit-debuginfo-1.3.0-150100.8.3.1 References: https://bugzilla.suse.com/1197793

1 0

SUSE-SU-2022:1870-1: important: Security update for curl
by opensuse-security＠opensuse.org 27 May '22

27 May '22

SUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1870-1 Rating: important References: #1199223 #1199224 Cross-References: CVE-2022-27781 CVE-2022-27782 CVSS scores: CVE-2022-27781 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-27782 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for curl fixes the following issues: - CVE-2022-27781: Fixed CERTINFO never-ending busy-loop (bsc#1199223) - CVE-2022-27782: Fixed TLS and SSH connection too eager reuse (bsc#1199224) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1870=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1870=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1870=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1870=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1870=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1870=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1870=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1870=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1870=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1870=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1870=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1870=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1870=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - openSUSE Leap 15.3 (x86_64): libcurl-devel-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Manager Server 4.1 (x86_64): libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Manager Proxy 4.1 (x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64): libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (x86_64): libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (x86_64): libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (x86_64): libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): curl-7.66.0-150200.4.33.1 curl-debuginfo-7.66.0-150200.4.33.1 curl-debugsource-7.66.0-150200.4.33.1 libcurl-devel-7.66.0-150200.4.33.1 libcurl4-7.66.0-150200.4.33.1 libcurl4-debuginfo-7.66.0-150200.4.33.1 - SUSE Enterprise Storage 7 (x86_64): libcurl4-32bit-7.66.0-150200.4.33.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.33.1 References: https://www.suse.com/security/cve/CVE-2022-27781.html https://www.suse.com/security/cve/CVE-2022-27782.html https://bugzilla.suse.com/1199223 https://bugzilla.suse.com/1199224

1 0

openSUSE-RU-2022:0152-1: moderate: Recommended update for hostapd
by maintenance＠opensuse.org 27 May '22

27 May '22

openSUSE Recommended Update: Recommended update for hostapd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0152-1 Rating: moderate References: #1181400 #1192959 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for hostapd fixes the following issues: Adjust config: * Enable SAE * Enable DPP * Enable wired driver * Enable Airtime policy support * Enable Fast Initial Link Setup (FILS) (IEEE 802.11ai) Update to version 2.10 * SAE changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] - added option send SAE Confirm immediately (sae_config_immediate=1) after SAE Commit - added support for the hash-to-element mechanism (sae_pwe=1 or sae_pwe=2) - fixed PMKSA caching with OKC - added support for SAE-PK * EAP-pwd changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] * fixed WPS UPnP SUBSCRIBE handling of invalid operations [https://w1.fi/security/2020-1/] * fixed PMF disconnection protection bypass [https://w1.fi/security/2019-7/] * added support for using OpenSSL 3.0 * fixed various issues in experimental support for EAP-TEAP server * added configuration (max_auth_rounds, max_auth_rounds_short) to increase the maximum number of EAP message exchanges (mainly to support cases with very large certificates) for the EAP server * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol) * extended HE (IEEE 802.11ax) support, including 6 GHz support * removed obsolete IAPP functionality * fixed EAP-FAST server with TLS GCM/CCM ciphers * dropped support for libnl 1.1 * added support for nl80211 control port for EAPOL frame TX/RX * fixed OWE key derivation with groups 20 and 21; this breaks backwards compatibility for these groups while the default group 19 remains backwards compatible; owe_ptk_workaround=1 can be used to enabled a a workaround for the group 20/21 backwards compatibility * added support for Beacon protection * added support for Extended Key ID for pairwise keys * removed WEP support from the default build (CONFIG_WEP=y can be used to enable it, if really needed) * added a build option to remove TKIP support (CONFIG_NO_TKIP=y) * added support for Transition Disable mechanism to allow the AP to automatically disable transition mode to improve security * added support for PASN * added EAP-TLS server support for TLS 1.3 (disabled by default for now) * a large number of other fixes, cleanup, and extensions - Fix AppArmor profile -- allow access to /etc/ssl/openssl.cnf (boo#1192959) - Added hardening to systemd service(s) (boo#1181400). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-152=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): hostapd-2.10-bp153.3.3.1 References: https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1192959

1 0