June 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:2054-1: important: Security update for u-boot
by opensuse-security＠opensuse.org 13 Jun '22

13 Jun '22

SUSE Security Update: Security update for u-boot ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2054-1 Rating: important References: #1199623 #1200363 #1200364 Cross-References: CVE-2022-30552 CVE-2022-30767 CVE-2022-30790 CVSS scores: CVE-2022-30552 (SUSE): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2022-30767 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-30767 (SUSE): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2022-30790 (SUSE): 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for u-boot fixes the following issues: - CVE-2022-30552: A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code. (bsc#1200363) - CVE-2022-30790: A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive. (bsc#1200364) - CVE-2022-30767: Fixed an unbounded memcpy with a failed length check leading to a buffer overflow (bsc#1199623). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2054=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2054=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.10-150400.4.5.1 u-boot-tools-debuginfo-2021.10-150400.4.5.1 - openSUSE Leap 15.4 (aarch64): u-boot-avnetultra96rev1-2021.10-150400.4.5.1 u-boot-avnetultra96rev1-doc-2021.10-150400.4.5.1 u-boot-bananapim64-2021.10-150400.4.5.1 u-boot-bananapim64-doc-2021.10-150400.4.5.1 u-boot-dragonboard410c-2021.10-150400.4.5.1 u-boot-dragonboard410c-doc-2021.10-150400.4.5.1 u-boot-dragonboard820c-2021.10-150400.4.5.1 u-boot-dragonboard820c-doc-2021.10-150400.4.5.1 u-boot-evb-rk3399-2021.10-150400.4.5.1 u-boot-evb-rk3399-doc-2021.10-150400.4.5.1 u-boot-firefly-rk3399-2021.10-150400.4.5.1 u-boot-firefly-rk3399-doc-2021.10-150400.4.5.1 u-boot-geekbox-2021.10-150400.4.5.1 u-boot-geekbox-doc-2021.10-150400.4.5.1 u-boot-hikey-2021.10-150400.4.5.1 u-boot-hikey-doc-2021.10-150400.4.5.1 u-boot-khadas-vim-2021.10-150400.4.5.1 u-boot-khadas-vim-doc-2021.10-150400.4.5.1 u-boot-khadas-vim2-2021.10-150400.4.5.1 u-boot-khadas-vim2-doc-2021.10-150400.4.5.1 u-boot-libretech-ac-2021.10-150400.4.5.1 u-boot-libretech-ac-doc-2021.10-150400.4.5.1 u-boot-libretech-cc-2021.10-150400.4.5.1 u-boot-libretech-cc-doc-2021.10-150400.4.5.1 u-boot-ls1012afrdmqspi-2021.10-150400.4.5.1 u-boot-ls1012afrdmqspi-doc-2021.10-150400.4.5.1 u-boot-mvebudb-88f3720-2021.10-150400.4.5.1 u-boot-mvebudb-88f3720-doc-2021.10-150400.4.5.1 u-boot-mvebudbarmada8k-2021.10-150400.4.5.1 u-boot-mvebudbarmada8k-doc-2021.10-150400.4.5.1 u-boot-mvebuespressobin-88f3720-2021.10-150400.4.5.1 u-boot-mvebuespressobin-88f3720-doc-2021.10-150400.4.5.1 u-boot-mvebumcbin-88f8040-2021.10-150400.4.5.1 u-boot-mvebumcbin-88f8040-doc-2021.10-150400.4.5.1 u-boot-nanopia64-2021.10-150400.4.5.1 u-boot-nanopia64-doc-2021.10-150400.4.5.1 u-boot-odroid-c2-2021.10-150400.4.5.1 u-boot-odroid-c2-doc-2021.10-150400.4.5.1 u-boot-odroid-c4-2021.10-150400.4.5.1 u-boot-odroid-c4-doc-2021.10-150400.4.5.1 u-boot-odroid-n2-2021.10-150400.4.5.1 u-boot-odroid-n2-doc-2021.10-150400.4.5.1 u-boot-orangepipc2-2021.10-150400.4.5.1 u-boot-orangepipc2-doc-2021.10-150400.4.5.1 u-boot-p2371-2180-2021.10-150400.4.5.1 u-boot-p2371-2180-doc-2021.10-150400.4.5.1 u-boot-p2771-0000-500-2021.10-150400.4.5.1 u-boot-p2771-0000-500-doc-2021.10-150400.4.5.1 u-boot-p3450-0000-2021.10-150400.4.5.1 u-boot-p3450-0000-doc-2021.10-150400.4.5.1 u-boot-pine64plus-2021.10-150400.4.5.1 u-boot-pine64plus-doc-2021.10-150400.4.5.1 u-boot-pinebook-2021.10-150400.4.5.1 u-boot-pinebook-doc-2021.10-150400.4.5.1 u-boot-pinebook-pro-rk3399-2021.10-150400.4.5.1 u-boot-pinebook-pro-rk3399-doc-2021.10-150400.4.5.1 u-boot-pineh64-2021.10-150400.4.5.1 u-boot-pineh64-doc-2021.10-150400.4.5.1 u-boot-pinephone-2021.10-150400.4.5.1 u-boot-pinephone-doc-2021.10-150400.4.5.1 u-boot-poplar-2021.10-150400.4.5.1 u-boot-poplar-doc-2021.10-150400.4.5.1 u-boot-rock-pi-4-rk3399-2021.10-150400.4.5.1 u-boot-rock-pi-4-rk3399-doc-2021.10-150400.4.5.1 u-boot-rock-pi-n10-rk3399pro-2021.10-150400.4.5.1 u-boot-rock-pi-n10-rk3399pro-doc-2021.10-150400.4.5.1 u-boot-rock64-rk3328-2021.10-150400.4.5.1 u-boot-rock64-rk3328-doc-2021.10-150400.4.5.1 u-boot-rock960-rk3399-2021.10-150400.4.5.1 u-boot-rock960-rk3399-doc-2021.10-150400.4.5.1 u-boot-rockpro64-rk3399-2021.10-150400.4.5.1 u-boot-rockpro64-rk3399-doc-2021.10-150400.4.5.1 u-boot-rpi3-2021.10-150400.4.5.1 u-boot-rpi3-doc-2021.10-150400.4.5.1 u-boot-rpi4-2021.10-150400.4.5.1 u-boot-rpi4-doc-2021.10-150400.4.5.1 u-boot-rpiarm64-2021.10-150400.4.5.1 u-boot-rpiarm64-doc-2021.10-150400.4.5.1 u-boot-xilinxzynqmpvirt-2021.10-150400.4.5.1 u-boot-xilinxzynqmpvirt-doc-2021.10-150400.4.5.1 u-boot-xilinxzynqmpzcu102rev10-2021.10-150400.4.5.1 u-boot-xilinxzynqmpzcu102rev10-doc-2021.10-150400.4.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.10-150400.4.5.1 u-boot-tools-debuginfo-2021.10-150400.4.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64): u-boot-rpiarm64-2021.10-150400.4.5.1 u-boot-rpiarm64-doc-2021.10-150400.4.5.1 References: https://www.suse.com/security/cve/CVE-2022-30552.html https://www.suse.com/security/cve/CVE-2022-30767.html https://www.suse.com/security/cve/CVE-2022-30790.html https://bugzilla.suse.com/1199623 https://bugzilla.suse.com/1200363 https://bugzilla.suse.com/1200364

1 0

SUSE-SU-2022:2047-1: moderate: Security update for netty3
by opensuse-security＠opensuse.org 13 Jun '22

13 Jun '22

SUSE Security Update: Security update for netty3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2047-1 Rating: moderate References: #1193672 #1197787 Cross-References: CVE-2021-43797 CVSS scores: CVE-2021-43797 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-43797 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for netty3 fixes the following issues: - CVE-2021-43797: Fixed a potential HTTP request smuggling issue due to insufficient validation against control characters (bsc#1193672). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2047=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2047=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-2047=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-2047=1 Package List: - openSUSE Leap 15.4 (noarch): netty3-3.10.6-150200.3.3.2 netty3-javadoc-3.10.6-150200.3.3.2 - openSUSE Leap 15.3 (noarch): netty3-3.10.6-150200.3.3.2 netty3-javadoc-3.10.6-150200.3.3.2 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): netty3-3.10.6-150200.3.3.2 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): netty3-3.10.6-150200.3.3.2 References: https://www.suse.com/security/cve/CVE-2021-43797.html https://bugzilla.suse.com/1193672 https://bugzilla.suse.com/1197787

1 0

SUSE-SU-2022:2053-1: important: Security update for u-boot
by opensuse-security＠opensuse.org 13 Jun '22

13 Jun '22

SUSE Security Update: Security update for u-boot ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2053-1 Rating: important References: #1199623 #1200363 #1200364 Cross-References: CVE-2022-30552 CVE-2022-30767 CVE-2022-30790 CVSS scores: CVE-2022-30552 (SUSE): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2022-30767 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-30767 (SUSE): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2022-30790 (SUSE): 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for u-boot fixes the following issues: - CVE-2022-30552: A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code. (bsc#1200363) - CVE-2022-30790: A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive. (bsc#1200364) - CVE-2022-30767: Fixed an unbounded memcpy with a failed length check leading to a buffer overflow (bsc#1199623). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2053=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2053=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.01-150300.7.12.1 u-boot-tools-debuginfo-2021.01-150300.7.12.1 - openSUSE Leap 15.3 (aarch64): u-boot-avnetultra96rev1-2021.01-150300.7.12.1 u-boot-avnetultra96rev1-doc-2021.01-150300.7.12.1 u-boot-bananapim64-2021.01-150300.7.12.1 u-boot-bananapim64-doc-2021.01-150300.7.12.1 u-boot-dragonboard410c-2021.01-150300.7.12.1 u-boot-dragonboard410c-doc-2021.01-150300.7.12.1 u-boot-dragonboard820c-2021.01-150300.7.12.1 u-boot-dragonboard820c-doc-2021.01-150300.7.12.1 u-boot-evb-rk3399-2021.01-150300.7.12.1 u-boot-evb-rk3399-doc-2021.01-150300.7.12.1 u-boot-firefly-rk3399-2021.01-150300.7.12.1 u-boot-firefly-rk3399-doc-2021.01-150300.7.12.1 u-boot-geekbox-2021.01-150300.7.12.1 u-boot-geekbox-doc-2021.01-150300.7.12.1 u-boot-hikey-2021.01-150300.7.12.1 u-boot-hikey-doc-2021.01-150300.7.12.1 u-boot-khadas-vim-2021.01-150300.7.12.1 u-boot-khadas-vim-doc-2021.01-150300.7.12.1 u-boot-khadas-vim2-2021.01-150300.7.12.1 u-boot-khadas-vim2-doc-2021.01-150300.7.12.1 u-boot-libretech-ac-2021.01-150300.7.12.1 u-boot-libretech-ac-doc-2021.01-150300.7.12.1 u-boot-libretech-cc-2021.01-150300.7.12.1 u-boot-libretech-cc-doc-2021.01-150300.7.12.1 u-boot-ls1012afrdmqspi-2021.01-150300.7.12.1 u-boot-ls1012afrdmqspi-doc-2021.01-150300.7.12.1 u-boot-mvebudb-88f3720-2021.01-150300.7.12.1 u-boot-mvebudb-88f3720-doc-2021.01-150300.7.12.1 u-boot-mvebudbarmada8k-2021.01-150300.7.12.1 u-boot-mvebudbarmada8k-doc-2021.01-150300.7.12.1 u-boot-mvebuespressobin-88f3720-2021.01-150300.7.12.1 u-boot-mvebuespressobin-88f3720-doc-2021.01-150300.7.12.1 u-boot-mvebumcbin-88f8040-2021.01-150300.7.12.1 u-boot-mvebumcbin-88f8040-doc-2021.01-150300.7.12.1 u-boot-nanopia64-2021.01-150300.7.12.1 u-boot-nanopia64-doc-2021.01-150300.7.12.1 u-boot-odroid-c2-2021.01-150300.7.12.1 u-boot-odroid-c2-doc-2021.01-150300.7.12.1 u-boot-odroid-c4-2021.01-150300.7.12.1 u-boot-odroid-c4-doc-2021.01-150300.7.12.1 u-boot-odroid-n2-2021.01-150300.7.12.1 u-boot-odroid-n2-doc-2021.01-150300.7.12.1 u-boot-orangepipc2-2021.01-150300.7.12.1 u-boot-orangepipc2-doc-2021.01-150300.7.12.1 u-boot-p2371-2180-2021.01-150300.7.12.1 u-boot-p2371-2180-doc-2021.01-150300.7.12.1 u-boot-p2771-0000-500-2021.01-150300.7.12.1 u-boot-p2771-0000-500-doc-2021.01-150300.7.12.1 u-boot-p3450-0000-2021.01-150300.7.12.1 u-boot-p3450-0000-doc-2021.01-150300.7.12.1 u-boot-pine64plus-2021.01-150300.7.12.1 u-boot-pine64plus-doc-2021.01-150300.7.12.1 u-boot-pinebook-2021.01-150300.7.12.1 u-boot-pinebook-doc-2021.01-150300.7.12.1 u-boot-pinebook-pro-rk3399-2021.01-150300.7.12.1 u-boot-pinebook-pro-rk3399-doc-2021.01-150300.7.12.1 u-boot-pineh64-2021.01-150300.7.12.1 u-boot-pineh64-doc-2021.01-150300.7.12.1 u-boot-pinephone-2021.01-150300.7.12.1 u-boot-pinephone-doc-2021.01-150300.7.12.1 u-boot-poplar-2021.01-150300.7.12.1 u-boot-poplar-doc-2021.01-150300.7.12.1 u-boot-rock-pi-4-rk3399-2021.01-150300.7.12.1 u-boot-rock-pi-4-rk3399-doc-2021.01-150300.7.12.1 u-boot-rock64-rk3328-2021.01-150300.7.12.1 u-boot-rock64-rk3328-doc-2021.01-150300.7.12.1 u-boot-rock960-rk3399-2021.01-150300.7.12.1 u-boot-rock960-rk3399-doc-2021.01-150300.7.12.1 u-boot-rockpro64-rk3399-2021.01-150300.7.12.1 u-boot-rockpro64-rk3399-doc-2021.01-150300.7.12.1 u-boot-rpi3-2021.01-150300.7.12.1 u-boot-rpi3-doc-2021.01-150300.7.12.1 u-boot-rpi4-2021.01-150300.7.12.1 u-boot-rpi4-doc-2021.01-150300.7.12.1 u-boot-rpiarm64-2021.01-150300.7.12.1 u-boot-rpiarm64-doc-2021.01-150300.7.12.1 u-boot-xilinxzynqmpvirt-2021.01-150300.7.12.1 u-boot-xilinxzynqmpvirt-doc-2021.01-150300.7.12.1 u-boot-xilinxzynqmpzcu102rev10-2021.01-150300.7.12.1 u-boot-xilinxzynqmpzcu102rev10-doc-2021.01-150300.7.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.01-150300.7.12.1 u-boot-tools-debuginfo-2021.01-150300.7.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64): u-boot-rpiarm64-2021.01-150300.7.12.1 u-boot-rpiarm64-doc-2021.01-150300.7.12.1 References: https://www.suse.com/security/cve/CVE-2022-30552.html https://www.suse.com/security/cve/CVE-2022-30767.html https://www.suse.com/security/cve/CVE-2022-30790.html https://bugzilla.suse.com/1199623 https://bugzilla.suse.com/1200363 https://bugzilla.suse.com/1200364

1 0

SUSE-SU-2022:2044-1: important: Security update for google-gson
by opensuse-security＠opensuse.org 10 Jun '22

10 Jun '22

SUSE Security Update: Security update for google-gson ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2044-1 Rating: important References: #1199064 SLE-24261 Cross-References: CVE-2022-25647 CVSS scores: CVE-2022-25647 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-25647 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Module for SUSE Manager Server 4.2 SUSE Linux Enterprise Module for SUSE Manager Server 4.3 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability, contains one feature is now available. Description: This update for google-gson fixes the following issues: - CVE-2022-25647: Fixed deserialization of untrusted data (bsc#1199064). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2044=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2044=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2044=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2044=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2044=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2044=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2044=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2044=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2022-2044=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.2-2022-2044=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-2044=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-2044=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2044=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2044=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2044=1 Package List: - openSUSE Leap 15.4 (noarch): google-gson-2.8.9-150200.3.6.3 google-gson-javadoc-2.8.9-150200.3.6.3 - openSUSE Leap 15.3 (noarch): google-gson-2.8.9-150200.3.6.3 google-gson-javadoc-2.8.9-150200.3.6.3 - SUSE Manager Server 4.1 (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Manager Retail Branch Server 4.1 (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Manager Proxy 4.1 (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3 (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2 (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): google-gson-2.8.9-150200.3.6.3 - SUSE Enterprise Storage 7 (noarch): google-gson-2.8.9-150200.3.6.3 References: https://www.suse.com/security/cve/CVE-2022-25647.html https://bugzilla.suse.com/1199064

1 0

SUSE-SU-2022:2035-1: important: Security update for grub2
by opensuse-security＠opensuse.org 10 Jun '22

10 Jun '22

SUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2035-1 Rating: important References: #1191184 #1191185 #1191186 #1193282 #1197948 #1198460 #1198493 #1198495 #1198496 #1198581 Cross-References: CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2022-28733 CVE-2022-28734 CVE-2022-28735 CVE-2022-28736 CVSS scores: CVE-2021-3695 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-3696 (SUSE): 5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2021-3697 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-28733 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-28735 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-28736 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has three fixes is now available. Description: This update for grub2 fixes the following issues: This update provides security fixes and hardenings for Boothole 3 / Boothole 2022 (bsc#1198581) - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184) - CVE-2021-3696: Fixed that a crafted PNG image could lead to out-of-bound write during huffman table handling (bsc#1191185) - CVE-2021-3697: Fixed that a crafted JPEG image could lead to buffer underflow write in the heap (bsc#1191186) - CVE-2022-28733: Fixed fragmentation math in net/ip (bsc#1198460) - CVE-2022-28734: Fixed an out-of-bound write for split http headers (bsc#1198493) - CVE-2022-28735: Fixed some verifier framework changes (bsc#1198495) - CVE-2022-28736: Fixed a use-after-free in chainloader command (bsc#1198496) - Update SBAT security contact (bsc#1193282) - Bump grub's SBAT generation to 2 - Use boot disks in OpenFirmware, fixing regression caused when the root LV is completely in the boot LUN (bsc#1197948) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2035=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2035=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-2035=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2035=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): grub2-2.06-150400.11.5.2 grub2-branding-upstream-2.06-150400.11.5.2 grub2-debuginfo-2.06-150400.11.5.2 - openSUSE Leap 15.4 (aarch64 s390x x86_64): grub2-debugsource-2.06-150400.11.5.2 - openSUSE Leap 15.4 (noarch): grub2-arm64-efi-2.06-150400.11.5.2 grub2-arm64-efi-debug-2.06-150400.11.5.2 grub2-i386-pc-2.06-150400.11.5.2 grub2-i386-pc-debug-2.06-150400.11.5.2 grub2-powerpc-ieee1275-2.06-150400.11.5.2 grub2-powerpc-ieee1275-debug-2.06-150400.11.5.2 grub2-snapper-plugin-2.06-150400.11.5.2 grub2-systemd-sleep-plugin-2.06-150400.11.5.2 grub2-x86_64-efi-2.06-150400.11.5.2 grub2-x86_64-efi-debug-2.06-150400.11.5.2 grub2-x86_64-xen-2.06-150400.11.5.2 - openSUSE Leap 15.4 (s390x): grub2-s390x-emu-2.06-150400.11.5.2 grub2-s390x-emu-debug-2.06-150400.11.5.2 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): grub2-x86_64-xen-2.06-150400.11.5.2 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 (noarch): grub2-arm64-efi-2.06-150400.11.5.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): grub2-2.06-150400.11.5.2 grub2-debuginfo-2.06-150400.11.5.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 s390x x86_64): grub2-debugsource-2.06-150400.11.5.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): grub2-arm64-efi-2.06-150400.11.5.2 grub2-i386-pc-2.06-150400.11.5.2 grub2-powerpc-ieee1275-2.06-150400.11.5.2 grub2-snapper-plugin-2.06-150400.11.5.2 grub2-systemd-sleep-plugin-2.06-150400.11.5.2 grub2-x86_64-efi-2.06-150400.11.5.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (s390x): grub2-s390x-emu-2.06-150400.11.5.2 References: https://www.suse.com/security/cve/CVE-2021-3695.html https://www.suse.com/security/cve/CVE-2021-3696.html https://www.suse.com/security/cve/CVE-2021-3697.html https://www.suse.com/security/cve/CVE-2022-28733.html https://www.suse.com/security/cve/CVE-2022-28734.html https://www.suse.com/security/cve/CVE-2022-28735.html https://www.suse.com/security/cve/CVE-2022-28736.html https://bugzilla.suse.com/1191184 https://bugzilla.suse.com/1191185 https://bugzilla.suse.com/1191186 https://bugzilla.suse.com/1193282 https://bugzilla.suse.com/1197948 https://bugzilla.suse.com/1198460 https://bugzilla.suse.com/1198493 https://bugzilla.suse.com/1198495 https://bugzilla.suse.com/1198496 https://bugzilla.suse.com/1198581

1 0

SUSE-RU-2022:2020-1: moderate: Recommended update for sapwmp
by maintenance＠opensuse.org 09 Jun '22

09 Jun '22

SUSE Recommended Update: Recommended update for sapwmp ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2020-1 Rating: moderate References: SLE-24330 SLE-24332 Affected Products: SUSE Linux Enterprise Module for SAP Applications 15-SP2 SUSE Linux Enterprise Module for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains two features can now be installed. Description: This update for sapwmp fixes the following issues: - Update to version 0.1+git.1645197740.6b06c5c: * wmp-check: Polish the phrase of error output. * wmp-check: raise error when user not configure MemoryLow of target slice in digital. * Polish pull request based on review comments. * check.sh: Add unprotect_list check of subcgroups * check.sh: Fix a wmp check bug of memory_low_children * Add switch f and avoid empty DBus message error. * Skip systemd managed processes jsc#PM-3309 (jsc#SLE-24330, jsc#SLE-24332) * Enable wmp-checker for SLE15SP4. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2020=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP3-2022-2020=1 - SUSE Linux Enterprise Module for SAP Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP2-2022-2020=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): sapwmp-0.1+git.1645197740.6b06c5c-150200.3.9.2 sapwmp-debuginfo-0.1+git.1645197740.6b06c5c-150200.3.9.2 - SUSE Linux Enterprise Module for SAP Applications 15-SP3 (aarch64 ppc64le s390x x86_64): sapwmp-0.1+git.1645197740.6b06c5c-150200.3.9.2 sapwmp-debuginfo-0.1+git.1645197740.6b06c5c-150200.3.9.2 - SUSE Linux Enterprise Module for SAP Applications 15-SP2 (aarch64 ppc64le s390x x86_64): sapwmp-0.1+git.1645197740.6b06c5c-150200.3.9.2 sapwmp-debuginfo-0.1+git.1645197740.6b06c5c-150200.3.9.2 References:

1 0

SUSE-RU-2022:2025-1: Recommended update for grafana-status-panel
by maintenance＠opensuse.org 09 Jun '22

09 Jun '22

SUSE Recommended Update: Recommended update for grafana-status-panel ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2025-1 Rating: low References: #1198768 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grafana-status-panel fixes the following issues: - Update to version 1.0.11, signed for use with grafana v8.x (bsc#1198768) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2025=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2025=1 Package List: - openSUSE Leap 15.4 (noarch): grafana-status-panel-1.0.11-150200.3.8.1 - openSUSE Leap 15.3 (noarch): grafana-status-panel-1.0.11-150200.3.8.1 References: https://bugzilla.suse.com/1198768

1 0

SUSE-RU-2022:2024-1: moderate: Recommended update for python-azure-agent
by maintenance＠opensuse.org 09 Jun '22

09 Jun '22

SUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2024-1 Rating: moderate References: #1198258 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Public Cloud 15-SP1 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-azure-agent fixes the following issues: - Reset the dhcp config when deprovisioning and instance to ensure instances from aVM image created from that instance send host information to the DHCP server. (bsc#1198258) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2024=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2024=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-2024=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-2024=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-2024=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2022-2024=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2024=1 Package List: - openSUSE Leap 15.4 (noarch): python-azure-agent-2.2.49.2-150100.3.23.1 python-azure-agent-test-2.2.49.2-150100.3.23.1 - openSUSE Leap 15.3 (noarch): python-azure-agent-2.2.49.2-150100.3.23.1 python-azure-agent-test-2.2.49.2-150100.3.23.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (noarch): python-azure-agent-2.2.49.2-150100.3.23.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (noarch): python-azure-agent-2.2.49.2-150100.3.23.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch): python-azure-agent-2.2.49.2-150100.3.23.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1 (noarch): python-azure-agent-2.2.49.2-150100.3.23.1 - SUSE Linux Enterprise Micro 5.2 (noarch): python-azure-agent-2.2.49.2-150100.3.23.1 References: https://bugzilla.suse.com/1198258

1 0

SUSE-RU-2022:2026-1: Recommended update for lirc
by maintenance＠opensuse.org 09 Jun '22

09 Jun '22

SUSE Recommended Update: Recommended update for lirc ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2026-1 Rating: low References: #1192772 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lirc fixes the following issues: - Fix library dependency. (bsc#1192772) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2026=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2026=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-2026=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-2026=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-2026=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): lirc-drv-portaudio-0.9.4c-150000.4.3.1 lirc-drv-portaudio-debuginfo-0.9.4c-150000.4.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libirrecord0-0.9.4c-150000.4.3.1 libirrecord0-debuginfo-0.9.4c-150000.4.3.1 liblirc0-0.9.4c-150000.4.3.1 liblirc0-debuginfo-0.9.4c-150000.4.3.1 liblirc_client0-0.9.4c-150000.4.3.1 liblirc_client0-debuginfo-0.9.4c-150000.4.3.1 liblirc_driver0-0.9.4c-150000.4.3.1 liblirc_driver0-debuginfo-0.9.4c-150000.4.3.1 lirc-core-0.9.4c-150000.4.3.1 lirc-core-debuginfo-0.9.4c-150000.4.3.1 lirc-debugsource-0.9.4c-150000.4.3.1 lirc-devel-0.9.4c-150000.4.3.1 lirc-disable-kernel-rc-0.9.4c-150000.4.3.1 lirc-drv-ftdi-0.9.4c-150000.4.3.1 lirc-drv-ftdi-debuginfo-0.9.4c-150000.4.3.1 lirc-drv-portaudio-0.9.4c-150000.4.3.1 lirc-drv-portaudio-debuginfo-0.9.4c-150000.4.3.1 lirc-tools-gui-0.9.4c-150000.4.3.1 lirc-tools-gui-debuginfo-0.9.4c-150000.4.3.1 - openSUSE Leap 15.3 (x86_64): liblirc0-32bit-0.9.4c-150000.4.3.1 liblirc0-32bit-debuginfo-0.9.4c-150000.4.3.1 liblirc_client0-32bit-0.9.4c-150000.4.3.1 liblirc_client0-32bit-debuginfo-0.9.4c-150000.4.3.1 liblirc_driver0-32bit-0.9.4c-150000.4.3.1 liblirc_driver0-32bit-debuginfo-0.9.4c-150000.4.3.1 - openSUSE Leap 15.3 (noarch): lirc-config-0.9.4c-150000.4.3.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): libirrecord0-0.9.4c-150000.4.3.1 libirrecord0-debuginfo-0.9.4c-150000.4.3.1 liblirc0-0.9.4c-150000.4.3.1 liblirc0-debuginfo-0.9.4c-150000.4.3.1 liblirc_client0-0.9.4c-150000.4.3.1 liblirc_client0-debuginfo-0.9.4c-150000.4.3.1 liblirc_driver0-0.9.4c-150000.4.3.1 liblirc_driver0-debuginfo-0.9.4c-150000.4.3.1 lirc-debugsource-0.9.4c-150000.4.3.1 lirc-devel-0.9.4c-150000.4.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): lirc-debugsource-0.9.4c-150000.4.3.1 lirc-drv-portaudio-0.9.4c-150000.4.3.1 lirc-drv-portaudio-debuginfo-0.9.4c-150000.4.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x): libirrecord0-0.9.4c-150000.4.3.1 libirrecord0-debuginfo-0.9.4c-150000.4.3.1 liblirc0-0.9.4c-150000.4.3.1 liblirc0-debuginfo-0.9.4c-150000.4.3.1 liblirc_client0-0.9.4c-150000.4.3.1 liblirc_client0-debuginfo-0.9.4c-150000.4.3.1 liblirc_driver0-0.9.4c-150000.4.3.1 liblirc_driver0-debuginfo-0.9.4c-150000.4.3.1 lirc-core-0.9.4c-150000.4.3.1 lirc-core-debuginfo-0.9.4c-150000.4.3.1 lirc-debugsource-0.9.4c-150000.4.3.1 lirc-devel-0.9.4c-150000.4.3.1 lirc-disable-kernel-rc-0.9.4c-150000.4.3.1 lirc-drv-ftdi-0.9.4c-150000.4.3.1 lirc-drv-ftdi-debuginfo-0.9.4c-150000.4.3.1 lirc-drv-portaudio-0.9.4c-150000.4.3.1 lirc-drv-portaudio-debuginfo-0.9.4c-150000.4.3.1 lirc-tools-gui-0.9.4c-150000.4.3.1 lirc-tools-gui-debuginfo-0.9.4c-150000.4.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (noarch): lirc-config-0.9.4c-150000.4.3.1 References: https://bugzilla.suse.com/1192772

1 0

SUSE-RU-2022:2018-1: moderate: Recommended update for build
by maintenance＠opensuse.org 08 Jun '22

08 Jun '22

SUSE Recommended Update: Recommended update for build ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2018-1 Rating: moderate References: #1197298 #1197699 #1198740 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for build fixes the following issues: - Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740) - Use aio=io_uring if available (bsc#1197699) (build#814) - Add arm32 and loongarch definitions (build#808) - Add compatibility code to initvm - Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809) - Add template support for Build::SimpleJSON - minor documentation updates - docker: Add support for --root and --installroot global zypper options - debian cross build support via multi-arch (obsoleting cbinstall remnants) - Tumbleweed config synced - documentation updates - smaller bugfixes - regression fix from last release, avoid calling shutdown handler twice when building in vm Changes: * pbuild: add --debug option for building debuginfo packages * rename --debug to --debuginfo to be more exact. * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername Fixes: * Avoid shutdown of host when using nspawn Features: * download_assets: add --outdir --clean --show-dir-srcmd5 parameters support multiple --arch arguments * asset support for golang modules * add support for LXC 4. * new shortcuts for rpm building: --rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep for building directly from upstream git repositories without any tar ball. * mount securityfs if not mounted by kernel-obs-build * collect steal time during VM builds in statistics. * declare armv8 and armv7 compatible * support OBS Debuginfo build flag for Red Hat variants * setup rpmmacros for all build types and earlier * Kiwi builds - Always append the profile name to kiwi container names * Dockerfile build - improve registry handling - initial Dockerfile.dapper support - support 'curl' commands in docker builds - strip known domains from container name - support container alias names * introducing --verbose option, currently only showing kernel messages. * support cpio creation for special files * handle QEMU >= 6.0 on POWER9 Changes: * Use git+https instead of git-https as url schema * add oops=panic kernel parameter * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed) * new preinstallimages are using zstd by default * source subdirectories are used in git managed sources Minor improvements * change sccache default size limit * speed up improvements in - vm shutdown - rpm preinstall - avoid calling external commands in a loop - using zstd for preinstallimages - no more unpacking progress indicators to avoid slowdown - virtio handling * fixed vm-type=qemu * multiple smaller bugfixes and speed improvements - renamed tumbleweed config to tumbleweed - synced tumbleweed config changes - initial config for Leap 15.4 - docker build environment * Use /.dockerenv as marker for docker environment * support privileged docker/nspawn mode * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode * initvm: do not attempt to mount /proc and binfmt_misc handler if present - pbuild * rename --hide-timestamps to --no-timestamps * reuse options from older builds * revised --single build mode * support ccache - Unify ccache and sccache handling Features: - deb zstd support (for Ubuntu 21.10) - support KVM builds with enabled network - modulemd support improvements - Support a "Distmacro" directive for recipe parser-only macros Fixes: - Load selinux policy when using a preinstall image - Use the pax format for preinstall images if bsdtar is available - Add %riscv to std_macros - Fix combine_configs dropping newlines pbuild: - Implement SCC calculation - Improve --shell-after-build and --single options - initial documentation of pbuild - Bugfixes - Fix unpacking of deb/arch archives without bsdtar - fixed regression in multiline macro evaluation from 20th August release Features: - cross architecture build support (for rpm and kiwi) - modulemd meta data support - pbuild to build multiple source packages (initial release, can not be considered stable yet) - supporting external asset stores for source files - support multiple post build checks placed in the directory: /usr/lib/build/post-build-checks/ - sccache support - New --shell-after-fail option - allow to disable squashfs in SimpleImage - supporting aarch64 kernel on armv?l distributions - kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives - container: FROM scratch build support Improvements: - supporting kvm builds as non-root user - Extend stage selection support for rpm builds - various distribution config updates - Support "BuildFlags: cumulaterpms" (was done only via suse_version before) Fixes: - container builds * support newer podman versions * supporting multiple containers for multi-stage builds - Supporting URL's in Flatpak manifests - epoch handling in debian builds - catch more cases where a failed build is marked as host error - fixing wrong status reporting when a job got killed - hugetlbfs handling fixes - try mounting selinuxfs in VM - Also create the /sys dir when preinstalling (to satisfy dracut) - various XML parser fixes - and many minor ones Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2018=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2018=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-2018=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-2018=1 Package List: - openSUSE Leap 15.4 (noarch): build-20220422-150200.9.1 build-initvm-aarch64-20220422-150200.9.1 build-initvm-powerpc64le-20220422-150200.9.1 build-initvm-s390x-20220422-150200.9.1 build-initvm-x86_64-20220422-150200.9.1 build-mkbaselibs-20220422-150200.9.1 build-mkdrpms-20220422-150200.9.1 - openSUSE Leap 15.3 (noarch): build-20220422-150200.9.1 build-initvm-aarch64-20220422-150200.9.1 build-initvm-powerpc64le-20220422-150200.9.1 build-initvm-s390x-20220422-150200.9.1 build-initvm-x86_64-20220422-150200.9.1 build-mkbaselibs-20220422-150200.9.1 build-mkdrpms-20220422-150200.9.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): build-20220422-150200.9.1 build-mkbaselibs-20220422-150200.9.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): build-20220422-150200.9.1 build-mkbaselibs-20220422-150200.9.1 References: https://bugzilla.suse.com/1197298 https://bugzilla.suse.com/1197699 https://bugzilla.suse.com/1198740

1 0