May 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:1871-1: moderate: Recommended update for nftables
by maintenance＠opensuse.org 27 May '22

27 May '22

SUSE Recommended Update: Recommended update for nftables ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1871-1 Rating: moderate References: #1197606 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nftables fixes the following issues: - Fix rare crashes that could occur e.g. in firewalld (bsc#1197606) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1871=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1871=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1871=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1871=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1871=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1871=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libnftables1-0.9.8-150300.3.3.1 libnftables1-debuginfo-0.9.8-150300.3.3.1 nftables-0.9.8-150300.3.3.1 nftables-debuginfo-0.9.8-150300.3.3.1 nftables-debugsource-0.9.8-150300.3.3.1 nftables-devel-0.9.8-150300.3.3.1 python3-nftables-0.9.8-150300.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libnftables1-0.9.8-150300.3.3.1 libnftables1-debuginfo-0.9.8-150300.3.3.1 nftables-0.9.8-150300.3.3.1 nftables-debuginfo-0.9.8-150300.3.3.1 nftables-debugsource-0.9.8-150300.3.3.1 nftables-devel-0.9.8-150300.3.3.1 python3-nftables-0.9.8-150300.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libnftables1-0.9.8-150300.3.3.1 libnftables1-debuginfo-0.9.8-150300.3.3.1 nftables-0.9.8-150300.3.3.1 nftables-debuginfo-0.9.8-150300.3.3.1 nftables-debugsource-0.9.8-150300.3.3.1 python3-nftables-0.9.8-150300.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libnftables1-0.9.8-150300.3.3.1 libnftables1-debuginfo-0.9.8-150300.3.3.1 nftables-0.9.8-150300.3.3.1 nftables-debuginfo-0.9.8-150300.3.3.1 nftables-debugsource-0.9.8-150300.3.3.1 python3-nftables-0.9.8-150300.3.3.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libnftables1-0.9.8-150300.3.3.1 libnftables1-debuginfo-0.9.8-150300.3.3.1 nftables-0.9.8-150300.3.3.1 nftables-debuginfo-0.9.8-150300.3.3.1 nftables-debugsource-0.9.8-150300.3.3.1 python3-nftables-0.9.8-150300.3.3.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libnftables1-0.9.8-150300.3.3.1 libnftables1-debuginfo-0.9.8-150300.3.3.1 nftables-0.9.8-150300.3.3.1 nftables-debuginfo-0.9.8-150300.3.3.1 nftables-debugsource-0.9.8-150300.3.3.1 python3-nftables-0.9.8-150300.3.3.1 References: https://bugzilla.suse.com/1197606

1 0

openSUSE-SU-2022:0151-1: moderate: Security update for bind
by opensuse-security＠opensuse.org 27 May '22

27 May '22

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0151-1 Rating: moderate References: #1192146 #1199370 Cross-References: CVE-2021-25219 CVE-2022-27114 CVSS scores: CVE-2021-25219 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-25219 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-27114 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-27114 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for bind fixes the following issues: - CVE-2021-25219: Fixed flaw that allowed abusing lame cache to severely degrade resolver performance (bsc#1192146). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-151=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-151=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): bind-9.16.6-150300.22.13.1 bind-chrootenv-9.16.6-150300.22.13.1 bind-debuginfo-9.16.6-150300.22.13.1 bind-debugsource-9.16.6-150300.22.13.1 bind-devel-9.16.6-150300.22.13.1 bind-utils-9.16.6-150300.22.13.1 bind-utils-debuginfo-9.16.6-150300.22.13.1 libbind9-1600-9.16.6-150300.22.13.1 libbind9-1600-debuginfo-9.16.6-150300.22.13.1 libdns1605-9.16.6-150300.22.13.1 libdns1605-debuginfo-9.16.6-150300.22.13.1 libirs-devel-9.16.6-150300.22.13.1 libirs1601-9.16.6-150300.22.13.1 libirs1601-debuginfo-9.16.6-150300.22.13.1 libisc1606-9.16.6-150300.22.13.1 libisc1606-debuginfo-9.16.6-150300.22.13.1 libisccc1600-9.16.6-150300.22.13.1 libisccc1600-debuginfo-9.16.6-150300.22.13.1 libisccfg1600-9.16.6-150300.22.13.1 libisccfg1600-debuginfo-9.16.6-150300.22.13.1 libns1604-9.16.6-150300.22.13.1 libns1604-debuginfo-9.16.6-150300.22.13.1 - openSUSE Leap 15.3 (noarch): bind-doc-9.16.6-150300.22.13.1 python3-bind-9.16.6-150300.22.13.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): htmldoc-1.9.12-bp153.2.15.1 References: https://www.suse.com/security/cve/CVE-2021-25219.html https://www.suse.com/security/cve/CVE-2022-27114.html https://bugzilla.suse.com/1192146 https://bugzilla.suse.com/1199370

1 0

SUSE-RU-2022:1867-1: Recommended update for v4l-utils
by maintenance＠opensuse.org 27 May '22

27 May '22

SUSE Recommended Update: Recommended update for v4l-utils ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1867-1 Rating: low References: #1197861 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for v4l-utils fixes the following issues: - fix build (bsc#1197861) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1867=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1867=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1867=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1867=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-1867=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1867=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1867=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1867=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): dvb-utils-1.14.1-150000.3.3.1 dvb-utils-debuginfo-1.14.1-150000.3.3.1 libdvbv5-0-1.14.1-150000.3.3.1 libdvbv5-0-debuginfo-1.14.1-150000.3.3.1 libdvbv5-devel-1.14.1-150000.3.3.1 libv4l-1.14.1-150000.3.3.1 libv4l-debuginfo-1.14.1-150000.3.3.1 libv4l-devel-1.14.1-150000.3.3.1 libv4l1-0-1.14.1-150000.3.3.1 libv4l1-0-debuginfo-1.14.1-150000.3.3.1 libv4l2-0-1.14.1-150000.3.3.1 libv4l2-0-debuginfo-1.14.1-150000.3.3.1 libv4l2rds0-1.14.1-150000.3.3.1 libv4l2rds0-debuginfo-1.14.1-150000.3.3.1 libv4lconvert0-1.14.1-150000.3.3.1 libv4lconvert0-debuginfo-1.14.1-150000.3.3.1 v4l-utils-1.14.1-150000.3.3.1 v4l-utils-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debugsource-1.14.1-150000.3.3.1 v4l-utils-devel-tools-1.14.1-150000.3.3.1 v4l-utils-devel-tools-debuginfo-1.14.1-150000.3.3.1 - openSUSE Leap 15.4 (ppc64le s390x x86_64): qv4l2-1.14.1-150000.3.3.1 qv4l2-debuginfo-1.14.1-150000.3.3.1 - openSUSE Leap 15.4 (x86_64): libdvbv5-0-32bit-1.14.1-150000.3.3.1 libdvbv5-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l-32bit-1.14.1-150000.3.3.1 libv4l-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l-devel-32bit-1.14.1-150000.3.3.1 libv4l1-0-32bit-1.14.1-150000.3.3.1 libv4l1-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l2-0-32bit-1.14.1-150000.3.3.1 libv4l2-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l2rds0-32bit-1.14.1-150000.3.3.1 libv4l2rds0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4lconvert0-32bit-1.14.1-150000.3.3.1 libv4lconvert0-32bit-debuginfo-1.14.1-150000.3.3.1 - openSUSE Leap 15.4 (noarch): libdvbv5-0-lang-1.14.1-150000.3.3.1 v4l-utils-lang-1.14.1-150000.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dvb-utils-1.14.1-150000.3.3.1 dvb-utils-debuginfo-1.14.1-150000.3.3.1 libdvbv5-0-1.14.1-150000.3.3.1 libdvbv5-0-debuginfo-1.14.1-150000.3.3.1 libdvbv5-devel-1.14.1-150000.3.3.1 libv4l-1.14.1-150000.3.3.1 libv4l-debuginfo-1.14.1-150000.3.3.1 libv4l-devel-1.14.1-150000.3.3.1 libv4l1-0-1.14.1-150000.3.3.1 libv4l1-0-debuginfo-1.14.1-150000.3.3.1 libv4l2-0-1.14.1-150000.3.3.1 libv4l2-0-debuginfo-1.14.1-150000.3.3.1 libv4l2rds0-1.14.1-150000.3.3.1 libv4l2rds0-debuginfo-1.14.1-150000.3.3.1 libv4lconvert0-1.14.1-150000.3.3.1 libv4lconvert0-debuginfo-1.14.1-150000.3.3.1 v4l-utils-1.14.1-150000.3.3.1 v4l-utils-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debugsource-1.14.1-150000.3.3.1 v4l-utils-devel-tools-1.14.1-150000.3.3.1 v4l-utils-devel-tools-debuginfo-1.14.1-150000.3.3.1 - openSUSE Leap 15.3 (ppc64le s390x x86_64): qv4l2-1.14.1-150000.3.3.1 qv4l2-debuginfo-1.14.1-150000.3.3.1 - openSUSE Leap 15.3 (x86_64): libdvbv5-0-32bit-1.14.1-150000.3.3.1 libdvbv5-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l-32bit-1.14.1-150000.3.3.1 libv4l-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l-devel-32bit-1.14.1-150000.3.3.1 libv4l1-0-32bit-1.14.1-150000.3.3.1 libv4l1-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l2-0-32bit-1.14.1-150000.3.3.1 libv4l2-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l2rds0-32bit-1.14.1-150000.3.3.1 libv4l2rds0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4lconvert0-32bit-1.14.1-150000.3.3.1 libv4lconvert0-32bit-debuginfo-1.14.1-150000.3.3.1 - openSUSE Leap 15.3 (noarch): libdvbv5-0-lang-1.14.1-150000.3.3.1 v4l-utils-lang-1.14.1-150000.3.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x x86_64): v4l-utils-1.14.1-150000.3.3.1 v4l-utils-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debugsource-1.14.1-150000.3.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (x86_64): libv4l1-0-32bit-1.14.1-150000.3.3.1 libv4l1-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l2-0-32bit-1.14.1-150000.3.3.1 libv4l2-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4lconvert0-32bit-1.14.1-150000.3.3.1 libv4lconvert0-32bit-debuginfo-1.14.1-150000.3.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): v4l-utils-1.14.1-150000.3.3.1 v4l-utils-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debugsource-1.14.1-150000.3.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (x86_64): libv4l1-0-32bit-1.14.1-150000.3.3.1 libv4l1-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4l2-0-32bit-1.14.1-150000.3.3.1 libv4l2-0-32bit-debuginfo-1.14.1-150000.3.3.1 libv4lconvert0-32bit-1.14.1-150000.3.3.1 libv4lconvert0-32bit-debuginfo-1.14.1-150000.3.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libdvbv5-0-1.14.1-150000.3.3.1 libdvbv5-0-debuginfo-1.14.1-150000.3.3.1 libdvbv5-devel-1.14.1-150000.3.3.1 libv4l-devel-1.14.1-150000.3.3.1 libv4l2rds0-1.14.1-150000.3.3.1 libv4l2rds0-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debugsource-1.14.1-150000.3.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libdvbv5-0-1.14.1-150000.3.3.1 libdvbv5-0-debuginfo-1.14.1-150000.3.3.1 libdvbv5-devel-1.14.1-150000.3.3.1 libv4l-devel-1.14.1-150000.3.3.1 libv4l2rds0-1.14.1-150000.3.3.1 libv4l2rds0-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debugsource-1.14.1-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libv4l-1.14.1-150000.3.3.1 libv4l-debuginfo-1.14.1-150000.3.3.1 libv4l1-0-1.14.1-150000.3.3.1 libv4l1-0-debuginfo-1.14.1-150000.3.3.1 libv4l2-0-1.14.1-150000.3.3.1 libv4l2-0-debuginfo-1.14.1-150000.3.3.1 libv4lconvert0-1.14.1-150000.3.3.1 libv4lconvert0-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debugsource-1.14.1-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libv4l-1.14.1-150000.3.3.1 libv4l-debuginfo-1.14.1-150000.3.3.1 libv4l1-0-1.14.1-150000.3.3.1 libv4l1-0-debuginfo-1.14.1-150000.3.3.1 libv4l2-0-1.14.1-150000.3.3.1 libv4l2-0-debuginfo-1.14.1-150000.3.3.1 libv4lconvert0-1.14.1-150000.3.3.1 libv4lconvert0-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debuginfo-1.14.1-150000.3.3.1 v4l-utils-debugsource-1.14.1-150000.3.3.1 References: https://bugzilla.suse.com/1197861

1 0

openSUSE-SU-2022:0148-1: important: Security update for varnish
by opensuse-security＠opensuse.org 27 May '22

27 May '22

openSUSE Security Update: Security update for varnish ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0148-1 Rating: important References: #1181400 #1188470 #1195188 Cross-References: CVE-2021-36740 CVE-2022-23959 CVSS scores: CVE-2021-36740 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2021-36740 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23959 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2022-23959 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for varnish fixes the following issues: varnish was updated to release 7.1.0 [boo#1195188] [CVE-2022-23959] * VCL: It is now possible to assign a BLOB value to a BODY variable, in addition to STRING as before. * VMOD: New STRING strftime(TIME time, STRING format) function for UTC formatting. Update to release 6.6.1 * CVE-2021-36740: Fix an HTTP/2.0 request smuggling vulnerability. [boo#1188470] Update to release 6.6.0: * The ban_cutoff parameter now refers to the overall length of the ban list, including completed bans, where before only non-completed (��active��) bans were counted towards ban_cutoff. * Body bytes accounting has been fixed to always represent the number of body bytes moved on the wire, exclusive of protocol-specific overhead like HTTP/1 chunked encoding or HTTP/2 framing. * The connection close reason has been fixed to properly report SC_RESP_CLOSE where previously only SC_REQ_CLOSE was reported. * Unless the new validate_headers feature is disabled, all newly set headers are now validated to contain only characters allowed by RFC7230. * The filter_re, keep_re and get_re functions from the bundled cookie vmod have been changed to take the VCL_REGEX type. This implies that their regular expression arguments now need to be literal, not e.g. string. * The interface for private pointers in VMODs has been changed, the VRT backend interface has been changed, many filter (VDP/VFP) related signatures have been changed, and the stevedore API has been changed. (Details thereto, see online changelog.) Update to release 6.5.1 * Bump the VRT_MAJOR_VERSION number defined in the vrt.h Update to release 6.5.0 * `PRIV_TOP` is now thread-safe to support parallel ESI implementations. * varnishstat's JSON output format (-j option) has been changed. * Behavior for 304-type responses was changed not to update the Content-Encoding response header of the stored object. - Update Git-Web repository link Update to release 6.4.0 * The MAIN.sess_drop counter is gone. * backend "none" was added for "no backend". * The hash algorithm of the hash director was changed, so backend selection will change once only when upgrading. * It is now possible for VMOD authors to customize the connection pooling of a dynamic backend. * For more, see changes.rst. Update to release 6.3.2 * Fix a denial of service vulnerability when using the proxy protocol version 2. Update to release 6.3.0 * The Host: header is folded to lower-case in the builtin_vcl. * Improved performance of shared memory statistics counters. * Synthetic objects created from vcl_backend_error {} now replace existing stale objects as ordinary backend fetches would (for details see changes.rst) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-148=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): libvarnishapi3-7.1.0-bp153.2.3.1 varnish-7.1.0-bp153.2.3.1 varnish-devel-7.1.0-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-36740.html https://www.suse.com/security/cve/CVE-2022-23959.html https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1188470 https://bugzilla.suse.com/1195188

1 0

SUSE-RU-2022:1866-1: moderate: Recommended update for ceph
by maintenance＠opensuse.org 27 May '22

27 May '22

SUSE Recommended Update: Recommended update for ceph ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1866-1 Rating: moderate References: #1187748 #1188911 #1192838 #1196046 #1196733 Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for ceph fixes the following issues: - Remove build directory during '%clean'. (bsc#1196733) - ses7: mgr/cephadm: try to get FQDN for configuration files - cephadm: infer the default container image during pull - ses7: Notify user that there is a SES7.1 upgrade available - mgr/cephadm: Try to get FQDN for configuration files. (bsc#1196046) - cephadm: Fix iscsi client caps to allow 'mgr service status' calls. (bsc#1192838) - When an RBD is mapped, it is attempted to be deployed as an OSD. (bsc#1187748) - OSD marked down causes wrong backfill_toofull. (bsc#1188911) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1866=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1866=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1866=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1866=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1866=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1866=1 Package List: - openSUSE Leap 15.4 (noarch): ceph-mgr-diskprediction-cloud-15.2.16.99+g96ce9b152f5-150200.3.37.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ceph-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-base-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-base-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-common-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-common-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-debugsource-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-fuse-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-fuse-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-immutable-object-cache-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-immutable-object-cache-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mds-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mds-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mgr-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mgr-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mon-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mon-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-osd-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-osd-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-radosgw-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-radosgw-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 cephfs-shell-15.2.16.99+g96ce9b152f5-150200.3.37.1 libcephfs-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 libcephfs2-15.2.16.99+g96ce9b152f5-150200.3.37.1 libcephfs2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados-devel-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 libradospp-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librgw-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 librgw2-15.2.16.99+g96ce9b152f5-150200.3.37.1 librgw2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-ceph-argparse-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-ceph-common-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-cephfs-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-cephfs-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rados-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rados-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rbd-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rbd-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rgw-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rgw-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 rados-objclass-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-fuse-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-fuse-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-mirror-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-mirror-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-nbd-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-nbd-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 - openSUSE Leap 15.3 (noarch): ceph-grafana-dashboards-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mgr-cephadm-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mgr-dashboard-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mgr-diskprediction-cloud-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mgr-diskprediction-local-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mgr-k8sevents-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mgr-modules-core-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-mgr-rook-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-prometheus-alerts-15.2.16.99+g96ce9b152f5-150200.3.37.1 cephadm-15.2.16.99+g96ce9b152f5-150200.3.37.1 - openSUSE Leap 15.3 (x86_64): ceph-test-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-test-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-test-debugsource-15.2.16.99+g96ce9b152f5-150200.3.37.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): ceph-common-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-common-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-debugsource-15.2.16.99+g96ce9b152f5-150200.3.37.1 libcephfs-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 libcephfs2-15.2.16.99+g96ce9b152f5-150200.3.37.1 libcephfs2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados-devel-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 libradospp-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librgw-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 librgw2-15.2.16.99+g96ce9b152f5-150200.3.37.1 librgw2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-ceph-argparse-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-ceph-common-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-cephfs-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-cephfs-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rados-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rados-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rbd-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rbd-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rgw-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rgw-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 rados-objclass-devel-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-nbd-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-nbd-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 x86_64): ceph-debugsource-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 x86_64): ceph-debugsource-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): ceph-base-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-base-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-common-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-common-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 ceph-debugsource-15.2.16.99+g96ce9b152f5-150200.3.37.1 libcephfs2-15.2.16.99+g96ce9b152f5-150200.3.37.1 libcephfs2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-15.2.16.99+g96ce9b152f5-150200.3.37.1 librados2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-15.2.16.99+g96ce9b152f5-150200.3.37.1 librbd1-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 librgw2-15.2.16.99+g96ce9b152f5-150200.3.37.1 librgw2-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-ceph-argparse-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-ceph-common-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-cephfs-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-cephfs-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rados-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rados-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rbd-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rbd-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rgw-15.2.16.99+g96ce9b152f5-150200.3.37.1 python3-rgw-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-nbd-15.2.16.99+g96ce9b152f5-150200.3.37.1 rbd-nbd-debuginfo-15.2.16.99+g96ce9b152f5-150200.3.37.1 - SUSE Enterprise Storage 7 (noarch): cephadm-15.2.16.99+g96ce9b152f5-150200.3.37.1 References: https://bugzilla.suse.com/1187748 https://bugzilla.suse.com/1188911 https://bugzilla.suse.com/1192838 https://bugzilla.suse.com/1196046 https://bugzilla.suse.com/1196733

1 0

SUSE-OU-2022:1863-1: Optional update for ckermit
by maintenance＠opensuse.org 27 May '22

27 May '22

SUSE Optional Update: Optional update for ckermit ______________________________________________________________________________ Announcement ID: SUSE-OU-2022:1863-1 Rating: low References: #1197708 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This optional update for ckermit fixes the following issues: There are no visible changes for the final user. - Solve a source build issue (FTBFS) after the removal of `libio` with `glibc-2.28`. (bsc#1197708) Patch Instructions: To install this SUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1863=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1863=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1863=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1863=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): ckermit-9.0.302-150000.3.3.1 ckermit-debuginfo-9.0.302-150000.3.3.1 - openSUSE Leap 15.4 (noarch): ckermit-doc-9.0.302-150000.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ckermit-9.0.302-150000.3.3.1 ckermit-debuginfo-9.0.302-150000.3.3.1 - openSUSE Leap 15.3 (noarch): ckermit-doc-9.0.302-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): ckermit-9.0.302-150000.3.3.1 ckermit-debuginfo-9.0.302-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): ckermit-9.0.302-150000.3.3.1 ckermit-debuginfo-9.0.302-150000.3.3.1 References: https://bugzilla.suse.com/1197708

1 0

SUSE-RU-2022:1864-1: Recommended update for leveldb
by maintenance＠opensuse.org 27 May '22

27 May '22

SUSE Recommended Update: Recommended update for leveldb ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1864-1 Rating: low References: #1197742 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for leveldb fixes the following issue: - fix tests (bsc#1197742) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1864=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1864=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-1864=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1864=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1864=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1864=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): leveldb-debugsource-1.18-150000.3.3.1 leveldb-devel-1.18-150000.3.3.1 leveldb-devel-static-1.18-150000.3.3.1 libleveldb1-1.18-150000.3.3.1 libleveldb1-debuginfo-1.18-150000.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): leveldb-debugsource-1.18-150000.3.3.1 leveldb-devel-1.18-150000.3.3.1 leveldb-devel-static-1.18-150000.3.3.1 libleveldb1-1.18-150000.3.3.1 libleveldb1-debuginfo-1.18-150000.3.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): leveldb-debugsource-1.18-150000.3.3.1 leveldb-devel-1.18-150000.3.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): leveldb-debugsource-1.18-150000.3.3.1 leveldb-devel-1.18-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): leveldb-debugsource-1.18-150000.3.3.1 libleveldb1-1.18-150000.3.3.1 libleveldb1-debuginfo-1.18-150000.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): leveldb-debugsource-1.18-150000.3.3.1 libleveldb1-1.18-150000.3.3.1 libleveldb1-debuginfo-1.18-150000.3.3.1 References: https://bugzilla.suse.com/1197742

1 0

openSUSE-SU-2022:0149-1: moderate: Security update for libredwg
by opensuse-security＠opensuse.org 27 May '22

27 May '22

SUSE Security Update: Security update for libredwg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0149-1 Rating: moderate References: #1193372 #1194767 Cross-References: CVE-2021-28237 CVE-2022-21658 CVSS scores: CVE-2022-21658 (NVD) : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-21658 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libredwg fixes the following issues: Update to release 0.12.5 [boo#1193372] [CVE-2021-28237] * Restricted accepted DXF objects to all stable and unstable classes, minus MATERIAL, ARC_DIMENSION, SUN, PROXY*. I.e. most unstable objects do not allow unknown DXF codes anymore. This fixed most oss-fuzz errors. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-149=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-149=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cargo1.56-1.56.1-150300.7.6.1 cargo1.56-debuginfo-1.56.1-150300.7.6.1 rust1.56-1.56.1-150300.7.6.1 rust1.56-debuginfo-1.56.1-150300.7.6.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): libredwg-devel-0.12.5-bp153.2.3.1 libredwg-tools-0.12.5-bp153.2.3.1 libredwg0-0.12.5-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-28237.html https://www.suse.com/security/cve/CVE-2022-21658.html https://bugzilla.suse.com/1193372 https://bugzilla.suse.com/1194767

1 0

openSUSE-SU-2022:0150-1: important: Security update for seamonkey
by opensuse-security＠opensuse.org 27 May '22

27 May '22

openSUSE Security Update: Security update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0150-1 Rating: important References: #1194735 Cross-References: CVE-2021-45417 CVSS scores: CVE-2021-45417 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for seamonkey fixes the following issues: Update to SeaMonkey 2.53.12 * Format Toolbar forgets its hidden status when switching to other view modes bug 1719020. * Remove obsolete plugin code from SeaMonkey bug 1762733. * Fix a few strict warnings in SeaMonkey bug 1755553. * Remove Run Flash from Site permissions and page info bug 1758289. * Use fixIterator and replace use of removeItemAt in FilterListDialog bug 1756359. * Remove RDF usage in tabmail.js bug 1758282. * Implement 'Edit Template' and 'New Message From Template' commands and UI bug 1759376. * [SM] Implement 'Edit Draft' command and hide it when not in a draft folder (port Thunderbird bug 1106412) bug 1256716. * Messages in Template folder need "Edit Template" button in header (like for Drafts) bug 80280. * Refactor and simplify the feed Subscribe dialog options updates bug 1420473. * Add system memory and disk size and placeDB page limit to about:support bug 1753729. * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57 bug 1755558. * SeaMonkey 2.53.12 uses the same backend as Firefox and contains the relevant Firefox 60.8 security fixes. * SeaMonkey 2.53.12 shares most parts of the mail and news code with Thunderbird. Please read the Thunderbird 60.8.0 release notes for specific security fixes in this release. * Additional important security fixes up to Current Firefox 91.9 and Thunderbird 91.9 ESR plus many enhancements have been backported. We will continue to enhance SeaMonkey security in subsequent 2.53.x beta and release versions as fast as we are able to. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-150=1 openSUSE-SLE-15.3-2022-150=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): aide-0.16-24.1 aide-debuginfo-0.16-24.1 aide-debugsource-0.16-24.1 aide-test-0.16-24.1 - openSUSE Leap 15.3 (i586 s390x x86_64): seamonkey-2.53.12-lp153.17.8.2 seamonkey-debuginfo-2.53.12-lp153.17.8.2 seamonkey-debugsource-2.53.12-lp153.17.8.2 seamonkey-dom-inspector-2.53.12-lp153.17.8.2 seamonkey-irc-2.53.12-lp153.17.8.2 References: https://www.suse.com/security/cve/CVE-2021-45417.html https://bugzilla.suse.com/1194735

1 0

SUSE-RU-2022:1868-1: Recommended update for openwsman
by maintenance＠opensuse.org 27 May '22

27 May '22

SUSE Recommended Update: Recommended update for openwsman ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1868-1 Rating: low References: #1197792 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openwsman fixes the following issue: - fix FTBFS with newer libcurl in SLE 15-SP4 (bsc#1197792) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1868=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1868=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-1868=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-1868=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libwsman-devel-2.6.7-150000.3.12.2 libwsman3-2.6.7-150000.3.12.2 libwsman3-debuginfo-2.6.7-150000.3.12.2 libwsman_clientpp-devel-2.6.7-150000.3.12.2 libwsman_clientpp1-2.6.7-150000.3.12.2 libwsman_clientpp1-debuginfo-2.6.7-150000.3.12.2 openwsman-debuginfo-2.6.7-150000.3.12.2 openwsman-debugsource-2.6.7-150000.3.12.2 openwsman-java-2.6.7-150000.3.12.2 openwsman-perl-2.6.7-150000.3.12.2 openwsman-perl-debuginfo-2.6.7-150000.3.12.2 openwsman-ruby-2.6.7-150000.3.12.2 openwsman-ruby-debuginfo-2.6.7-150000.3.12.2 openwsman-ruby-docs-2.6.7-150000.3.12.2 openwsman-server-2.6.7-150000.3.12.2 openwsman-server-debuginfo-2.6.7-150000.3.12.2 openwsman-server-plugin-ruby-2.6.7-150000.3.12.2 openwsman-server-plugin-ruby-debuginfo-2.6.7-150000.3.12.2 python3-openwsman-2.6.7-150000.3.12.2 python3-openwsman-debuginfo-2.6.7-150000.3.12.2 winrs-2.6.7-150000.3.12.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libwsman-devel-2.6.7-150000.3.12.2 libwsman3-2.6.7-150000.3.12.2 libwsman3-debuginfo-2.6.7-150000.3.12.2 libwsman_clientpp-devel-2.6.7-150000.3.12.2 libwsman_clientpp1-2.6.7-150000.3.12.2 libwsman_clientpp1-debuginfo-2.6.7-150000.3.12.2 openwsman-debuginfo-2.6.7-150000.3.12.2 openwsman-debugsource-2.6.7-150000.3.12.2 openwsman-java-2.6.7-150000.3.12.2 openwsman-perl-2.6.7-150000.3.12.2 openwsman-perl-debuginfo-2.6.7-150000.3.12.2 openwsman-ruby-2.6.7-150000.3.12.2 openwsman-ruby-debuginfo-2.6.7-150000.3.12.2 openwsman-ruby-docs-2.6.7-150000.3.12.2 openwsman-server-2.6.7-150000.3.12.2 openwsman-server-debuginfo-2.6.7-150000.3.12.2 openwsman-server-plugin-ruby-2.6.7-150000.3.12.2 openwsman-server-plugin-ruby-debuginfo-2.6.7-150000.3.12.2 python3-openwsman-2.6.7-150000.3.12.2 python3-openwsman-debuginfo-2.6.7-150000.3.12.2 winrs-2.6.7-150000.3.12.2 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libwsman-devel-2.6.7-150000.3.12.2 libwsman3-2.6.7-150000.3.12.2 libwsman3-debuginfo-2.6.7-150000.3.12.2 openwsman-debuginfo-2.6.7-150000.3.12.2 openwsman-debugsource-2.6.7-150000.3.12.2 openwsman-server-2.6.7-150000.3.12.2 openwsman-server-debuginfo-2.6.7-150000.3.12.2 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libwsman-devel-2.6.7-150000.3.12.2 libwsman3-2.6.7-150000.3.12.2 libwsman3-debuginfo-2.6.7-150000.3.12.2 openwsman-debuginfo-2.6.7-150000.3.12.2 openwsman-debugsource-2.6.7-150000.3.12.2 openwsman-server-2.6.7-150000.3.12.2 openwsman-server-debuginfo-2.6.7-150000.3.12.2 References: https://bugzilla.suse.com/1197792

1 0