June 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:1934-1: moderate: Security update for openvpn
by opensuse-security＠opensuse.org 03 Jun '22

03 Jun '22

SUSE Security Update: Security update for openvpn ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1934-1 Rating: moderate References: #1123557 #1197341 Cross-References: CVE-2022-0547 CVSS scores: CVE-2022-0547 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-0547 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for openvpn fixes the following issues: - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341). - By default the --suppress-timestamps flag is not needed (bsc#1123557). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1934=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1934=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): openvpn-2.5.6-150400.3.3.1 openvpn-auth-pam-plugin-2.5.6-150400.3.3.1 openvpn-auth-pam-plugin-debuginfo-2.5.6-150400.3.3.1 openvpn-debuginfo-2.5.6-150400.3.3.1 openvpn-debugsource-2.5.6-150400.3.3.1 openvpn-devel-2.5.6-150400.3.3.1 openvpn-down-root-plugin-2.5.6-150400.3.3.1 openvpn-down-root-plugin-debuginfo-2.5.6-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): openvpn-2.5.6-150400.3.3.1 openvpn-auth-pam-plugin-2.5.6-150400.3.3.1 openvpn-auth-pam-plugin-debuginfo-2.5.6-150400.3.3.1 openvpn-debuginfo-2.5.6-150400.3.3.1 openvpn-debugsource-2.5.6-150400.3.3.1 openvpn-devel-2.5.6-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-0547.html https://bugzilla.suse.com/1123557 https://bugzilla.suse.com/1197341

1 0

openSUSE-RU-2022:10004-1: moderate: Recommended update for steam
by maintenance＠opensuse.org 02 Jun '22

02 Jun '22

openSUSE Recommended Update: Recommended update for steam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10004-1 Rating: moderate References: #1198118 Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for steam fixes the following issues: - Make sure 32bit NVIDIA drivers are installed where necessary - Require tar (boo#1198118) - Allow PrefersNonDefaultGPU on 15.4 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2022-10004=1 Package List: - openSUSE Leap 15.4:NonFree (i586 x86_64): steam-1.0.0.74-lp154.2.3.1 steam-devices-1.0.0.74-lp154.2.3.1 References: https://bugzilla.suse.com/1198118

1 0

openSUSE-RU-2022:10003-1: moderate: Recommended update for steam
by maintenance＠opensuse.org 02 Jun '22

02 Jun '22

openSUSE Recommended Update: Recommended update for steam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10003-1 Rating: moderate References: #1198118 Affected Products: openSUSE Leap 15.3:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for steam fixes the following issues: - Make sure 32bit NVIDIA drivers are installed where necessary - Require tar (boo#1198118) - Allow PrefersNonDefaultGPU on 15.4 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3:NonFree: zypper in -t patch openSUSE-2022-10003=1 Package List: - openSUSE Leap 15.3:NonFree (i586 x86_64): steam-1.0.0.74-lp153.2.18.1 steam-devices-1.0.0.74-lp153.2.18.1 References: https://bugzilla.suse.com/1198118

1 0

SUSE-SU-2022:1929-1: moderate: Security update for redis
by opensuse-security＠opensuse.org 02 Jun '22

02 Jun '22

SUSE Security Update: Security update for redis ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1929-1 Rating: moderate References: #1198952 #1198953 Cross-References: CVE-2022-24735 CVE-2022-24736 CVSS scores: CVE-2022-24735 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-24735 (SUSE): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N CVE-2022-24736 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24736 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for redis fixes the following issues: - CVE-2022-24735: Fixed Lua code injection (bsc#1198952). - CVE-2022-24736: Fixed Lua NULL pointer dereference (bsc#1198953). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1929=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-1929=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): redis-6.2.6-150400.3.3.7 redis-debuginfo-6.2.6-150400.3.3.7 redis-debugsource-6.2.6-150400.3.3.7 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): redis-6.2.6-150400.3.3.7 redis-debuginfo-6.2.6-150400.3.3.7 redis-debugsource-6.2.6-150400.3.3.7 References: https://www.suse.com/security/cve/CVE-2022-24735.html https://www.suse.com/security/cve/CVE-2022-24736.html https://bugzilla.suse.com/1198952 https://bugzilla.suse.com/1198953

1 0

SUSE-SU-2022:1928-1: Security update for php8
by opensuse-security＠opensuse.org 02 Jun '22

02 Jun '22

SUSE Security Update: Security update for php8 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1928-1 Rating: low References: #1197644 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Web Scripting 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for php8 fixes the following issues: - Fixed filter_var bypass vulnerability (bsc#1197644). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1928=1 - SUSE Linux Enterprise Module for Web Scripting 15-SP4: zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP4-2022-1928=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): apache2-mod_php8-8.0.10-150400.4.3.1 apache2-mod_php8-debuginfo-8.0.10-150400.4.3.1 apache2-mod_php8-debugsource-8.0.10-150400.4.3.1 php8-8.0.10-150400.4.3.1 php8-bcmath-8.0.10-150400.4.3.1 php8-bcmath-debuginfo-8.0.10-150400.4.3.1 php8-bz2-8.0.10-150400.4.3.1 php8-bz2-debuginfo-8.0.10-150400.4.3.1 php8-calendar-8.0.10-150400.4.3.1 php8-calendar-debuginfo-8.0.10-150400.4.3.1 php8-cli-8.0.10-150400.4.3.1 php8-cli-debuginfo-8.0.10-150400.4.3.1 php8-ctype-8.0.10-150400.4.3.1 php8-ctype-debuginfo-8.0.10-150400.4.3.1 php8-curl-8.0.10-150400.4.3.1 php8-curl-debuginfo-8.0.10-150400.4.3.1 php8-dba-8.0.10-150400.4.3.1 php8-dba-debuginfo-8.0.10-150400.4.3.1 php8-debuginfo-8.0.10-150400.4.3.1 php8-debugsource-8.0.10-150400.4.3.1 php8-devel-8.0.10-150400.4.3.1 php8-dom-8.0.10-150400.4.3.1 php8-dom-debuginfo-8.0.10-150400.4.3.1 php8-embed-8.0.10-150400.4.3.1 php8-embed-debuginfo-8.0.10-150400.4.3.1 php8-embed-debugsource-8.0.10-150400.4.3.1 php8-enchant-8.0.10-150400.4.3.1 php8-enchant-debuginfo-8.0.10-150400.4.3.1 php8-exif-8.0.10-150400.4.3.1 php8-exif-debuginfo-8.0.10-150400.4.3.1 php8-fastcgi-8.0.10-150400.4.3.1 php8-fastcgi-debuginfo-8.0.10-150400.4.3.1 php8-fastcgi-debugsource-8.0.10-150400.4.3.1 php8-fileinfo-8.0.10-150400.4.3.1 php8-fileinfo-debuginfo-8.0.10-150400.4.3.1 php8-fpm-8.0.10-150400.4.3.1 php8-fpm-debuginfo-8.0.10-150400.4.3.1 php8-fpm-debugsource-8.0.10-150400.4.3.1 php8-ftp-8.0.10-150400.4.3.1 php8-ftp-debuginfo-8.0.10-150400.4.3.1 php8-gd-8.0.10-150400.4.3.1 php8-gd-debuginfo-8.0.10-150400.4.3.1 php8-gettext-8.0.10-150400.4.3.1 php8-gettext-debuginfo-8.0.10-150400.4.3.1 php8-gmp-8.0.10-150400.4.3.1 php8-gmp-debuginfo-8.0.10-150400.4.3.1 php8-iconv-8.0.10-150400.4.3.1 php8-iconv-debuginfo-8.0.10-150400.4.3.1 php8-intl-8.0.10-150400.4.3.1 php8-intl-debuginfo-8.0.10-150400.4.3.1 php8-ldap-8.0.10-150400.4.3.1 php8-ldap-debuginfo-8.0.10-150400.4.3.1 php8-mbstring-8.0.10-150400.4.3.1 php8-mbstring-debuginfo-8.0.10-150400.4.3.1 php8-mysql-8.0.10-150400.4.3.1 php8-mysql-debuginfo-8.0.10-150400.4.3.1 php8-odbc-8.0.10-150400.4.3.1 php8-odbc-debuginfo-8.0.10-150400.4.3.1 php8-opcache-8.0.10-150400.4.3.1 php8-opcache-debuginfo-8.0.10-150400.4.3.1 php8-openssl-8.0.10-150400.4.3.1 php8-openssl-debuginfo-8.0.10-150400.4.3.1 php8-pcntl-8.0.10-150400.4.3.1 php8-pcntl-debuginfo-8.0.10-150400.4.3.1 php8-pdo-8.0.10-150400.4.3.1 php8-pdo-debuginfo-8.0.10-150400.4.3.1 php8-pgsql-8.0.10-150400.4.3.1 php8-pgsql-debuginfo-8.0.10-150400.4.3.1 php8-phar-8.0.10-150400.4.3.1 php8-phar-debuginfo-8.0.10-150400.4.3.1 php8-posix-8.0.10-150400.4.3.1 php8-posix-debuginfo-8.0.10-150400.4.3.1 php8-readline-8.0.10-150400.4.3.1 php8-readline-debuginfo-8.0.10-150400.4.3.1 php8-shmop-8.0.10-150400.4.3.1 php8-shmop-debuginfo-8.0.10-150400.4.3.1 php8-snmp-8.0.10-150400.4.3.1 php8-snmp-debuginfo-8.0.10-150400.4.3.1 php8-soap-8.0.10-150400.4.3.1 php8-soap-debuginfo-8.0.10-150400.4.3.1 php8-sockets-8.0.10-150400.4.3.1 php8-sockets-debuginfo-8.0.10-150400.4.3.1 php8-sodium-8.0.10-150400.4.3.1 php8-sodium-debuginfo-8.0.10-150400.4.3.1 php8-sqlite-8.0.10-150400.4.3.1 php8-sqlite-debuginfo-8.0.10-150400.4.3.1 php8-sysvmsg-8.0.10-150400.4.3.1 php8-sysvmsg-debuginfo-8.0.10-150400.4.3.1 php8-sysvsem-8.0.10-150400.4.3.1 php8-sysvsem-debuginfo-8.0.10-150400.4.3.1 php8-sysvshm-8.0.10-150400.4.3.1 php8-sysvshm-debuginfo-8.0.10-150400.4.3.1 php8-test-8.0.10-150400.4.3.2 php8-tidy-8.0.10-150400.4.3.1 php8-tidy-debuginfo-8.0.10-150400.4.3.1 php8-tokenizer-8.0.10-150400.4.3.1 php8-tokenizer-debuginfo-8.0.10-150400.4.3.1 php8-xmlreader-8.0.10-150400.4.3.1 php8-xmlreader-debuginfo-8.0.10-150400.4.3.1 php8-xmlwriter-8.0.10-150400.4.3.1 php8-xmlwriter-debuginfo-8.0.10-150400.4.3.1 php8-xsl-8.0.10-150400.4.3.1 php8-xsl-debuginfo-8.0.10-150400.4.3.1 php8-zip-8.0.10-150400.4.3.1 php8-zip-debuginfo-8.0.10-150400.4.3.1 php8-zlib-8.0.10-150400.4.3.1 php8-zlib-debuginfo-8.0.10-150400.4.3.1 - SUSE Linux Enterprise Module for Web Scripting 15-SP4 (aarch64 ppc64le s390x x86_64): apache2-mod_php8-8.0.10-150400.4.3.1 apache2-mod_php8-debuginfo-8.0.10-150400.4.3.1 apache2-mod_php8-debugsource-8.0.10-150400.4.3.1 php8-8.0.10-150400.4.3.1 php8-bcmath-8.0.10-150400.4.3.1 php8-bcmath-debuginfo-8.0.10-150400.4.3.1 php8-bz2-8.0.10-150400.4.3.1 php8-bz2-debuginfo-8.0.10-150400.4.3.1 php8-calendar-8.0.10-150400.4.3.1 php8-calendar-debuginfo-8.0.10-150400.4.3.1 php8-cli-8.0.10-150400.4.3.1 php8-cli-debuginfo-8.0.10-150400.4.3.1 php8-ctype-8.0.10-150400.4.3.1 php8-ctype-debuginfo-8.0.10-150400.4.3.1 php8-curl-8.0.10-150400.4.3.1 php8-curl-debuginfo-8.0.10-150400.4.3.1 php8-dba-8.0.10-150400.4.3.1 php8-dba-debuginfo-8.0.10-150400.4.3.1 php8-debuginfo-8.0.10-150400.4.3.1 php8-debugsource-8.0.10-150400.4.3.1 php8-devel-8.0.10-150400.4.3.1 php8-dom-8.0.10-150400.4.3.1 php8-dom-debuginfo-8.0.10-150400.4.3.1 php8-embed-8.0.10-150400.4.3.1 php8-embed-debuginfo-8.0.10-150400.4.3.1 php8-embed-debugsource-8.0.10-150400.4.3.1 php8-enchant-8.0.10-150400.4.3.1 php8-enchant-debuginfo-8.0.10-150400.4.3.1 php8-exif-8.0.10-150400.4.3.1 php8-exif-debuginfo-8.0.10-150400.4.3.1 php8-fastcgi-8.0.10-150400.4.3.1 php8-fastcgi-debuginfo-8.0.10-150400.4.3.1 php8-fastcgi-debugsource-8.0.10-150400.4.3.1 php8-fileinfo-8.0.10-150400.4.3.1 php8-fileinfo-debuginfo-8.0.10-150400.4.3.1 php8-fpm-8.0.10-150400.4.3.1 php8-fpm-debuginfo-8.0.10-150400.4.3.1 php8-fpm-debugsource-8.0.10-150400.4.3.1 php8-ftp-8.0.10-150400.4.3.1 php8-ftp-debuginfo-8.0.10-150400.4.3.1 php8-gd-8.0.10-150400.4.3.1 php8-gd-debuginfo-8.0.10-150400.4.3.1 php8-gettext-8.0.10-150400.4.3.1 php8-gettext-debuginfo-8.0.10-150400.4.3.1 php8-gmp-8.0.10-150400.4.3.1 php8-gmp-debuginfo-8.0.10-150400.4.3.1 php8-iconv-8.0.10-150400.4.3.1 php8-iconv-debuginfo-8.0.10-150400.4.3.1 php8-intl-8.0.10-150400.4.3.1 php8-intl-debuginfo-8.0.10-150400.4.3.1 php8-ldap-8.0.10-150400.4.3.1 php8-ldap-debuginfo-8.0.10-150400.4.3.1 php8-mbstring-8.0.10-150400.4.3.1 php8-mbstring-debuginfo-8.0.10-150400.4.3.1 php8-mysql-8.0.10-150400.4.3.1 php8-mysql-debuginfo-8.0.10-150400.4.3.1 php8-odbc-8.0.10-150400.4.3.1 php8-odbc-debuginfo-8.0.10-150400.4.3.1 php8-opcache-8.0.10-150400.4.3.1 php8-opcache-debuginfo-8.0.10-150400.4.3.1 php8-openssl-8.0.10-150400.4.3.1 php8-openssl-debuginfo-8.0.10-150400.4.3.1 php8-pcntl-8.0.10-150400.4.3.1 php8-pcntl-debuginfo-8.0.10-150400.4.3.1 php8-pdo-8.0.10-150400.4.3.1 php8-pdo-debuginfo-8.0.10-150400.4.3.1 php8-pgsql-8.0.10-150400.4.3.1 php8-pgsql-debuginfo-8.0.10-150400.4.3.1 php8-phar-8.0.10-150400.4.3.1 php8-phar-debuginfo-8.0.10-150400.4.3.1 php8-posix-8.0.10-150400.4.3.1 php8-posix-debuginfo-8.0.10-150400.4.3.1 php8-readline-8.0.10-150400.4.3.1 php8-readline-debuginfo-8.0.10-150400.4.3.1 php8-shmop-8.0.10-150400.4.3.1 php8-shmop-debuginfo-8.0.10-150400.4.3.1 php8-snmp-8.0.10-150400.4.3.1 php8-snmp-debuginfo-8.0.10-150400.4.3.1 php8-soap-8.0.10-150400.4.3.1 php8-soap-debuginfo-8.0.10-150400.4.3.1 php8-sockets-8.0.10-150400.4.3.1 php8-sockets-debuginfo-8.0.10-150400.4.3.1 php8-sodium-8.0.10-150400.4.3.1 php8-sodium-debuginfo-8.0.10-150400.4.3.1 php8-sqlite-8.0.10-150400.4.3.1 php8-sqlite-debuginfo-8.0.10-150400.4.3.1 php8-sysvmsg-8.0.10-150400.4.3.1 php8-sysvmsg-debuginfo-8.0.10-150400.4.3.1 php8-sysvsem-8.0.10-150400.4.3.1 php8-sysvsem-debuginfo-8.0.10-150400.4.3.1 php8-sysvshm-8.0.10-150400.4.3.1 php8-sysvshm-debuginfo-8.0.10-150400.4.3.1 php8-test-8.0.10-150400.4.3.2 php8-tidy-8.0.10-150400.4.3.1 php8-tidy-debuginfo-8.0.10-150400.4.3.1 php8-tokenizer-8.0.10-150400.4.3.1 php8-tokenizer-debuginfo-8.0.10-150400.4.3.1 php8-xmlreader-8.0.10-150400.4.3.1 php8-xmlreader-debuginfo-8.0.10-150400.4.3.1 php8-xmlwriter-8.0.10-150400.4.3.1 php8-xmlwriter-debuginfo-8.0.10-150400.4.3.1 php8-xsl-8.0.10-150400.4.3.1 php8-xsl-debuginfo-8.0.10-150400.4.3.1 php8-zip-8.0.10-150400.4.3.1 php8-zip-debuginfo-8.0.10-150400.4.3.1 php8-zlib-8.0.10-150400.4.3.1 php8-zlib-debuginfo-8.0.10-150400.4.3.1 References: https://bugzilla.suse.com/1197644

1 0

SUSE-SU-2022:1930-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 02 Jun '22

02 Jun '22

SUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1930-1 Rating: moderate References: #1022528 #1188572 #1189528 #1197634 Cross-References: CVE-2017-5601 CVE-2021-36976 CVE-2022-26280 CVSS scores: CVE-2017-5601 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2017-5601 (SUSE): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L CVE-2021-36976 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-36976 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-26280 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-26280 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for libarchive fixes the following issues: - CVE-2022-26280: Fixed out-of-bounds read via the component zipx_lzma_alone_init (bsc#1197634). - CVE-2021-36976: Fixed use-after-free in copy_string (called from do_uncompress_block and process_block) (bsc#1188572). - CVE-2017-5601: Fixed out-of-bounds memory access preventing denial-of-service (bsc#1197634, bsc#1189528). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1930=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1930=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1930=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): bsdtar-3.5.1-150400.3.3.1 bsdtar-debuginfo-3.5.1-150400.3.3.1 libarchive-debugsource-3.5.1-150400.3.3.1 libarchive-devel-3.5.1-150400.3.3.1 libarchive13-3.5.1-150400.3.3.1 libarchive13-debuginfo-3.5.1-150400.3.3.1 - openSUSE Leap 15.4 (x86_64): libarchive13-32bit-3.5.1-150400.3.3.1 libarchive13-32bit-debuginfo-3.5.1-150400.3.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): bsdtar-3.5.1-150400.3.3.1 bsdtar-debuginfo-3.5.1-150400.3.3.1 libarchive-debugsource-3.5.1-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libarchive-debugsource-3.5.1-150400.3.3.1 libarchive-devel-3.5.1-150400.3.3.1 libarchive13-3.5.1-150400.3.3.1 libarchive13-debuginfo-3.5.1-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2017-5601.html https://www.suse.com/security/cve/CVE-2021-36976.html https://www.suse.com/security/cve/CVE-2022-26280.html https://bugzilla.suse.com/1022528 https://bugzilla.suse.com/1188572 https://bugzilla.suse.com/1189528 https://bugzilla.suse.com/1197634

1 0

SUSE-RU-2022:1924-1: moderate: Recommended update for mutter
by maintenance＠opensuse.org 02 Jun '22

02 Jun '22

SUSE Recommended Update: Recommended update for mutter ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1924-1 Rating: moderate References: #1199382 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mutter fixes the following issues: - Fix SIGSEGV in meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267). - Update to version 41.5: + Fix X11 wayland drops ending up in the wrong wayland client. + Allow forcing EGLStream backend. + Updated translations. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1924=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-1924=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): mutter-41.5-150400.3.3.1 mutter-debuginfo-41.5-150400.3.3.1 mutter-debugsource-41.5-150400.3.3.1 mutter-devel-41.5-150400.3.3.1 - openSUSE Leap 15.4 (noarch): mutter-lang-41.5-150400.3.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): mutter-41.5-150400.3.3.1 mutter-debuginfo-41.5-150400.3.3.1 mutter-debugsource-41.5-150400.3.3.1 mutter-devel-41.5-150400.3.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (noarch): mutter-lang-41.5-150400.3.3.1 References: https://bugzilla.suse.com/1199382

1 0

SUSE-SU-2022:1923-1: important: Security update for kernel-firmware
by opensuse-security＠opensuse.org 02 Jun '22

02 Jun '22

SUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1923-1 Rating: important References: #1195786 #1199459 #1199470 Cross-References: CVE-2021-26312 CVE-2021-26339 CVE-2021-26342 CVE-2021-26347 CVE-2021-26348 CVE-2021-26349 CVE-2021-26350 CVE-2021-26364 CVE-2021-26372 CVE-2021-26373 CVE-2021-26375 CVE-2021-26376 CVE-2021-26378 CVE-2021-26388 CVE-2021-33139 CVE-2021-33155 CVE-2021-46744 CVSS scores: CVE-2021-26312 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-26339 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26339 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26342 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-26342 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-26347 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26348 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-26349 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-26350 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26364 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26372 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26373 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26375 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26376 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26378 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26388 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33139 (NVD) : 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33139 (SUSE): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33155 (NVD) : 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33155 (SUSE): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46744 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2021-46744 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: This update for kernel-firmware fixes the following issues: Update to version 20220411 (git commit f219d616f42b, bsc#1199459): - CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26350, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312: Update AMD cpu microcode Update to version 20220309 (git commit cd01f857da28, bsc#1199470): - CVE-2021-46744: Ciphertext Side Channels on AMD SEV Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786): - CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth products may allow an authenticated user to potentially cause denial of service via adjacent access. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1923=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1923=1 Package List: - openSUSE Leap 15.4 (noarch): kernel-firmware-20220509-150400.4.5.1 kernel-firmware-all-20220509-150400.4.5.1 kernel-firmware-amdgpu-20220509-150400.4.5.1 kernel-firmware-ath10k-20220509-150400.4.5.1 kernel-firmware-ath11k-20220509-150400.4.5.1 kernel-firmware-atheros-20220509-150400.4.5.1 kernel-firmware-bluetooth-20220509-150400.4.5.1 kernel-firmware-bnx2-20220509-150400.4.5.1 kernel-firmware-brcm-20220509-150400.4.5.1 kernel-firmware-chelsio-20220509-150400.4.5.1 kernel-firmware-dpaa2-20220509-150400.4.5.1 kernel-firmware-i915-20220509-150400.4.5.1 kernel-firmware-intel-20220509-150400.4.5.1 kernel-firmware-iwlwifi-20220509-150400.4.5.1 kernel-firmware-liquidio-20220509-150400.4.5.1 kernel-firmware-marvell-20220509-150400.4.5.1 kernel-firmware-media-20220509-150400.4.5.1 kernel-firmware-mediatek-20220509-150400.4.5.1 kernel-firmware-mellanox-20220509-150400.4.5.1 kernel-firmware-mwifiex-20220509-150400.4.5.1 kernel-firmware-network-20220509-150400.4.5.1 kernel-firmware-nfp-20220509-150400.4.5.1 kernel-firmware-nvidia-20220509-150400.4.5.1 kernel-firmware-platform-20220509-150400.4.5.1 kernel-firmware-prestera-20220509-150400.4.5.1 kernel-firmware-qcom-20220509-150400.4.5.1 kernel-firmware-qlogic-20220509-150400.4.5.1 kernel-firmware-radeon-20220509-150400.4.5.1 kernel-firmware-realtek-20220509-150400.4.5.1 kernel-firmware-serial-20220509-150400.4.5.1 kernel-firmware-sound-20220509-150400.4.5.1 kernel-firmware-ti-20220509-150400.4.5.1 kernel-firmware-ueagle-20220509-150400.4.5.1 kernel-firmware-usb-network-20220509-150400.4.5.1 ucode-amd-20220509-150400.4.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): kernel-firmware-all-20220509-150400.4.5.1 kernel-firmware-amdgpu-20220509-150400.4.5.1 kernel-firmware-ath10k-20220509-150400.4.5.1 kernel-firmware-ath11k-20220509-150400.4.5.1 kernel-firmware-atheros-20220509-150400.4.5.1 kernel-firmware-bluetooth-20220509-150400.4.5.1 kernel-firmware-bnx2-20220509-150400.4.5.1 kernel-firmware-brcm-20220509-150400.4.5.1 kernel-firmware-chelsio-20220509-150400.4.5.1 kernel-firmware-dpaa2-20220509-150400.4.5.1 kernel-firmware-i915-20220509-150400.4.5.1 kernel-firmware-intel-20220509-150400.4.5.1 kernel-firmware-iwlwifi-20220509-150400.4.5.1 kernel-firmware-liquidio-20220509-150400.4.5.1 kernel-firmware-marvell-20220509-150400.4.5.1 kernel-firmware-media-20220509-150400.4.5.1 kernel-firmware-mediatek-20220509-150400.4.5.1 kernel-firmware-mellanox-20220509-150400.4.5.1 kernel-firmware-mwifiex-20220509-150400.4.5.1 kernel-firmware-network-20220509-150400.4.5.1 kernel-firmware-nfp-20220509-150400.4.5.1 kernel-firmware-nvidia-20220509-150400.4.5.1 kernel-firmware-platform-20220509-150400.4.5.1 kernel-firmware-prestera-20220509-150400.4.5.1 kernel-firmware-qcom-20220509-150400.4.5.1 kernel-firmware-qlogic-20220509-150400.4.5.1 kernel-firmware-radeon-20220509-150400.4.5.1 kernel-firmware-realtek-20220509-150400.4.5.1 kernel-firmware-serial-20220509-150400.4.5.1 kernel-firmware-sound-20220509-150400.4.5.1 kernel-firmware-ti-20220509-150400.4.5.1 kernel-firmware-ueagle-20220509-150400.4.5.1 kernel-firmware-usb-network-20220509-150400.4.5.1 ucode-amd-20220509-150400.4.5.1 References: https://www.suse.com/security/cve/CVE-2021-26312.html https://www.suse.com/security/cve/CVE-2021-26339.html https://www.suse.com/security/cve/CVE-2021-26342.html https://www.suse.com/security/cve/CVE-2021-26347.html https://www.suse.com/security/cve/CVE-2021-26348.html https://www.suse.com/security/cve/CVE-2021-26349.html https://www.suse.com/security/cve/CVE-2021-26350.html https://www.suse.com/security/cve/CVE-2021-26364.html https://www.suse.com/security/cve/CVE-2021-26372.html https://www.suse.com/security/cve/CVE-2021-26373.html https://www.suse.com/security/cve/CVE-2021-26375.html https://www.suse.com/security/cve/CVE-2021-26376.html https://www.suse.com/security/cve/CVE-2021-26378.html https://www.suse.com/security/cve/CVE-2021-26388.html https://www.suse.com/security/cve/CVE-2021-33139.html https://www.suse.com/security/cve/CVE-2021-33155.html https://www.suse.com/security/cve/CVE-2021-46744.html https://bugzilla.suse.com/1195786 https://bugzilla.suse.com/1199459 https://bugzilla.suse.com/1199470

1 0

SUSE-SU-2022:1925-1: moderate: Security update for patch
by opensuse-security＠opensuse.org 02 Jun '22

02 Jun '22

SUSE Security Update: Security update for patch ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1925-1 Rating: moderate References: #1080985 #1111572 #1142041 #1198106 Cross-References: CVE-2018-6952 CVE-2019-13636 CVSS scores: CVE-2018-6952 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-6952 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2019-13636 (NVD) : 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2019-13636 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for patch fixes the following issues: Security issues fixed: - CVE-2019-13636: Fixed follow symlinks unless --follow-symlinks is given. This increases the security against malicious patches (bsc#1142041). - CVE-2018-6952: Fixed swapping fakelines in pch_swap. This bug was causing a double free leading to a crash (bsc#1080985). Bugfixes: - Abort when cleaning up fails. This bug could cause an infinite loop when a patch wouldn't apply, leading to a segmentation fault (bsc#1111572). - Pass the correct stat to backup files. This bug would occasionally cause backup files to be missing when all hunks failed to apply (bsc#1198106). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1925=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1925=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1925=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1925=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): patch-2.7.6-150000.5.3.1 patch-debuginfo-2.7.6-150000.5.3.1 patch-debugsource-2.7.6-150000.5.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): patch-2.7.6-150000.5.3.1 patch-debuginfo-2.7.6-150000.5.3.1 patch-debugsource-2.7.6-150000.5.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): patch-2.7.6-150000.5.3.1 patch-debuginfo-2.7.6-150000.5.3.1 patch-debugsource-2.7.6-150000.5.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): patch-2.7.6-150000.5.3.1 patch-debuginfo-2.7.6-150000.5.3.1 patch-debugsource-2.7.6-150000.5.3.1 References: https://www.suse.com/security/cve/CVE-2018-6952.html https://www.suse.com/security/cve/CVE-2019-13636.html https://bugzilla.suse.com/1080985 https://bugzilla.suse.com/1111572 https://bugzilla.suse.com/1142041 https://bugzilla.suse.com/1198106

1 0

SUSE-SU-2022:1920-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 02 Jun '22

02 Jun '22

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1920-1 Rating: important References: #1200027 Cross-References: CVE-2022-31736 CVE-2022-31737 CVE-2022-31738 CVE-2022-31739 CVE-2022-31740 CVE-2022-31741 CVE-2022-31742 CVE-2022-31747 CVSS scores: CVE-2022-31736 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-31737 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-31738 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-31739 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-31740 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-31741 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-31742 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-31747 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.10.0 ESR (MFSA 2022-21)(bsc#1200027) - CVE-2022-31736: Cross-Origin resource's length leaked - CVE-2022-31737: Heap buffer overflow in WebGL - CVE-2022-31738: Browser window spoof using fullscreen mode - CVE-2022-31739: Attacker-influenced path traversal when saving downloaded files - CVE-2022-31740: Register allocation problem in WASM on arm64 - CVE-2022-31741: Uninitialized variable leads to invalid memory read - CVE-2022-31742: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information - CVE-2022-31747: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10 Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1920=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1920=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1920=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1920=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1920=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1920=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1920=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1920=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-1920=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1920=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1920=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1920=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1920=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-branding-upstream-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-branding-upstream-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Manager Proxy 4.1 (x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.10.0-150200.152.43.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.10.0-150200.152.43.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): MozillaFirefox-91.10.0-150200.152.43.1 MozillaFirefox-debuginfo-91.10.0-150200.152.43.1 MozillaFirefox-debugsource-91.10.0-150200.152.43.1 MozillaFirefox-devel-91.10.0-150200.152.43.1 MozillaFirefox-translations-common-91.10.0-150200.152.43.1 MozillaFirefox-translations-other-91.10.0-150200.152.43.1 References: https://www.suse.com/security/cve/CVE-2022-31736.html https://www.suse.com/security/cve/CVE-2022-31737.html https://www.suse.com/security/cve/CVE-2022-31738.html https://www.suse.com/security/cve/CVE-2022-31739.html https://www.suse.com/security/cve/CVE-2022-31740.html https://www.suse.com/security/cve/CVE-2022-31741.html https://www.suse.com/security/cve/CVE-2022-31742.html https://www.suse.com/security/cve/CVE-2022-31747.html https://bugzilla.suse.com/1200027

1 0