August 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:2957-1: important: Security update for gstreamer-plugins-good
by opensuse-security＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Security Update: Security update for gstreamer-plugins-good ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2957-1 Rating: important References: #1201688 #1201693 #1201702 #1201704 #1201706 #1201707 #1201708 Cross-References: CVE-2022-1920 CVE-2022-1921 CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925 CVE-2022-2122 CVSS scores: CVE-2022-1920 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1920 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2022-1921 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1921 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2022-1922 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1922 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2022-1923 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1923 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2022-1924 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1924 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2022-1925 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1925 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2022-2122 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2122 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for gstreamer-plugins-good fixes the following issues: - CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688). - CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693). - CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702). - CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704). - CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706). - CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707). - CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2957=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2957=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2957=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2957=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2957=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2957=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2957=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2957=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2957=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2957=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2957=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2957=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gstreamer-plugins-good-doc-1.16.3-150200.3.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 gstreamer-plugins-good-doc-1.16.3-150200.3.9.1 gstreamer-plugins-good-extra-1.16.3-150200.3.9.1 gstreamer-plugins-good-extra-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-gtk-1.16.3-150200.3.9.1 gstreamer-plugins-good-gtk-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-jack-1.16.3-150200.3.9.1 gstreamer-plugins-good-jack-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-qtqml-1.16.3-150200.3.9.1 gstreamer-plugins-good-qtqml-debuginfo-1.16.3-150200.3.9.1 - openSUSE Leap 15.3 (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - openSUSE Leap 15.3 (x86_64): gstreamer-plugins-good-32bit-1.16.3-150200.3.9.1 gstreamer-plugins-good-32bit-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-extra-32bit-1.16.3-150200.3.9.1 gstreamer-plugins-good-extra-32bit-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-jack-32bit-1.16.3-150200.3.9.1 gstreamer-plugins-good-jack-32bit-debuginfo-1.16.3-150200.3.9.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Manager Server 4.1 (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Manager Retail Branch Server 4.1 (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - SUSE Manager Proxy 4.1 (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - SUSE Manager Proxy 4.1 (x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): gstreamer-plugins-good-1.16.3-150200.3.9.1 gstreamer-plugins-good-debuginfo-1.16.3-150200.3.9.1 gstreamer-plugins-good-debugsource-1.16.3-150200.3.9.1 - SUSE Enterprise Storage 7 (noarch): gstreamer-plugins-good-lang-1.16.3-150200.3.9.1 References: https://www.suse.com/security/cve/CVE-2022-1920.html https://www.suse.com/security/cve/CVE-2022-1921.html https://www.suse.com/security/cve/CVE-2022-1922.html https://www.suse.com/security/cve/CVE-2022-1923.html https://www.suse.com/security/cve/CVE-2022-1924.html https://www.suse.com/security/cve/CVE-2022-1925.html https://www.suse.com/security/cve/CVE-2022-2122.html https://bugzilla.suse.com/1201688 https://bugzilla.suse.com/1201693 https://bugzilla.suse.com/1201702 https://bugzilla.suse.com/1201704 https://bugzilla.suse.com/1201706 https://bugzilla.suse.com/1201707 https://bugzilla.suse.com/1201708

1 0

SUSE-SU-2022:2960-1: moderate: Security update for ucode-intel
by opensuse-security＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2960-1 Rating: moderate References: #1201727 Cross-References: CVE-2022-21233 CVSS scores: CVE-2022-21233 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-21233 (SUSE): 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release (bsc#1201727): - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave (INTEL-SA-00657). See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0 0657.html Other fixes: - Update for functional issues. See also: https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scala ble-spec-update.html?wapkw=processor+specification+update - Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | SKX-SP | B1 | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx | ICX-SP | D0 | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx | GLK-R | R0 | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile | TGL-R | C0 | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile | TGL-H | R0 | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile | RKL-S | B0 | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11 | ADL | C0 | 06-97-02/03 | 0000001f | 00000022 | Core Gen12 | ADL | C0 | 06-97-05/03 | 0000001f | 00000022 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12 | ADL | L0 | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12 | ADL | C0 | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12 | ADL | C0 | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12 ------------------------------------------------------------------ Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2960=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2960=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2960=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2960=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2960=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2960=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2960=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2960=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2960=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2960=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2960=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2960=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2960=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2960=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2960=1 Package List: - openSUSE Leap 15.4 (x86_64): ucode-intel-20220809-150200.18.1 - openSUSE Leap 15.3 (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Manager Server 4.1 (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Manager Proxy 4.1 (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Linux Enterprise Micro 5.2 (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Linux Enterprise Micro 5.1 (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (x86_64): ucode-intel-20220809-150200.18.1 - SUSE Enterprise Storage 7 (x86_64): ucode-intel-20220809-150200.18.1 References: https://www.suse.com/security/cve/CVE-2022-21233.html https://bugzilla.suse.com/1201727

1 0

SUSE-SU-2022:2959-1: important: Security update for rsync
by opensuse-security＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Security Update: Security update for rsync ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2959-1 Rating: important References: #1201840 Cross-References: CVE-2022-29154 CVSS scores: CVE-2022-29154 (NVD) : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-29154 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rsync fixes the following issues: - CVE-2022-29154: Fixed an arbitrary file write issue that could be triggered by a malicious remote server (bsc#1201840). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2959=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2959=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2959=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2959=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2959=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2959=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-2959=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2959=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2959=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2959=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2959=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-2959=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2959=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2959=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2959=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2959=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2959=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-2959=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-2959=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-2959=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-2959=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2959=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2959=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Manager Proxy 4.1 (x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 - SUSE CaaS Platform 4.0 (x86_64): rsync-3.1.3-150000.4.13.1 rsync-debuginfo-3.1.3-150000.4.13.1 rsync-debugsource-3.1.3-150000.4.13.1 References: https://www.suse.com/security/cve/CVE-2022-29154.html https://bugzilla.suse.com/1201840

1 0

SUSE-RU-2022:2955-1: moderate: Recommended update for bpftrace
by maintenance＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Recommended Update: Recommended update for bpftrace ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2955-1 Rating: moderate References: #1200630 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bpftrace fixes the following issues: - do not link against the shared BFD libraries to avoid explicit binutils dependency (bsc#1200630) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2955=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-2955=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): bpftrace-0.11.4-150300.3.14.1 - openSUSE Leap 15.3 (noarch): bpftrace-tools-0.11.4-150300.3.14.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): bpftrace-0.11.4-150300.3.14.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): bpftrace-tools-0.11.4-150300.3.14.1 References: https://bugzilla.suse.com/1200630

1 0

SUSE-RU-2022:2954-1: moderate: Recommended update for bpftrace
by maintenance＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Recommended Update: Recommended update for bpftrace ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2954-1 Rating: moderate References: #1200630 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bpftrace fixes the following issues: - Do not link against the shared BFD libraries, avoids direct dependency against binutils versions (bsc#1200630) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2954=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-2954=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): bpftrace-0.14.0-150400.3.5.1 - openSUSE Leap 15.4 (noarch): bpftrace-tools-0.14.0-150400.3.5.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): bpftrace-0.14.0-150400.3.5.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): bpftrace-tools-0.14.0-150400.3.5.1 References: https://bugzilla.suse.com/1200630

1 0

SUSE-RU-2022:2951-1: important: Recommended update for suse-migration-services
by maintenance＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Recommended Update: Recommended update for suse-migration-services ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2951-1 Rating: important References: #1202706 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-migration-services fixes the following issues: - Bump version: 2.0.34 - Add handling for locating the cache files in cloud-regionsrv-client (bsc#1202706) - Update document version and authors - Add missing python3-PyYAML dependency on suse-migration-pre-checks Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2951=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2951=1 Package List: - openSUSE Leap 15.4 (noarch): suse-migration-pre-checks-2.0.34-150000.1.51.1 suse-migration-services-2.0.34-150000.1.51.1 - openSUSE Leap 15.3 (noarch): suse-migration-pre-checks-2.0.34-150000.1.51.1 suse-migration-services-2.0.34-150000.1.51.1 References: https://bugzilla.suse.com/1202706

1 0

SUSE-RU-2022:2953-1: moderate: Recommended update for cloud-regionsrv-client
by maintenance＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Recommended Update: Recommended update for cloud-regionsrv-client ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2953-1 Rating: moderate References: #1201612 #1202706 Affected Products: SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Public Cloud 15-SP1 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for cloud-regionsrv-client fixes the following issues: - While the source code was updated to support SLE Micro the spec file was not updated for the new locations of the cache and the certs. Update the spec file to be consistent with the code implementation. (bsc#1202706) - Handle exception when trying to deregister a system form the server. (bsc#1201612) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2953=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2953=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-2953=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-2953=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-2953=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2022-2953=1 - SUSE Linux Enterprise Module for Public Cloud 15: zypper in -t patch SUSE-SLE-Module-Public-Cloud-Unrestricted-15-2022-2953=1 Package List: - openSUSE Leap 15.4 (noarch): cloud-regionsrv-client-10.0.5-150000.6.76.1 cloud-regionsrv-client-addon-azure-1.0.5-150000.6.76.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.76.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.76.1 - openSUSE Leap 15.3 (noarch): cloud-regionsrv-client-10.0.5-150000.6.76.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.76.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.76.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (noarch): cloud-regionsrv-client-10.0.5-150000.6.76.1 cloud-regionsrv-client-addon-azure-1.0.5-150000.6.76.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.76.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.76.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (noarch): cloud-regionsrv-client-10.0.5-150000.6.76.1 cloud-regionsrv-client-addon-azure-1.0.5-150000.6.76.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.76.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.76.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch): cloud-regionsrv-client-10.0.5-150000.6.76.1 cloud-regionsrv-client-addon-azure-1.0.5-150000.6.76.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.76.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.76.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1 (noarch): cloud-regionsrv-client-10.0.5-150000.6.76.1 cloud-regionsrv-client-addon-azure-1.0.5-150000.6.76.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.76.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.76.1 - SUSE Linux Enterprise Module for Public Cloud 15 (noarch): cloud-regionsrv-client-10.0.5-150000.6.76.1 cloud-regionsrv-client-addon-azure-1.0.5-150000.6.76.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.76.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.76.1 References: https://bugzilla.suse.com/1201612 https://bugzilla.suse.com/1202706

1 0

SUSE-RU-2022:2956-1: moderate: Recommended update for post-build-checks
by maintenance＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Recommended Update: Recommended update for post-build-checks ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2956-1 Rating: moderate References: Affected Products: openSUSE Leap 15.5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for post-build-checks is a test update for openSUSE Leap 15.5. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.5: zypper in -t patch openSUSE-SLE-15.5-2022-2956=1 Package List: - openSUSE Leap 15.5 (noarch): post-build-checks-84.87+git20220325.f46ef3c-150500.3.2.1 References:

1 0

SUSE-SU-2022:2949-1: important: Security update for java-1_8_0-ibm
by opensuse-security＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Security Update: Security update for java-1_8_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2949-1 Rating: important References: #1201684 #1201685 #1201692 #1201694 #1202427 Cross-References: CVE-2022-21540 CVE-2022-21541 CVE-2022-21549 CVE-2022-34169 CVSS scores: CVE-2022-21540 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21540 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21541 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-21541 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-21549 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21549 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-34169 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-34169 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing SUSE Linux Enterprise Module for Legacy Software 15-SP3 SUSE Linux Enterprise Module for Legacy Software 15-SP4 SUSE Linux Enterprise Server SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for java-1_8_0-ibm fixes the following issues: - Updated to Java 8.0 Service Refresh 7 Fix Pack 11 (bsc#1202427): - CVE-2022-34169: Fixed an integer truncation issue in the Xalan Java XSLT library that occurred when processing malicious stylesheets (bsc#1201684). - CVE-2022-21549: Fixed an issue that could lead to computing negative random exponentials (bsc#1201685). - CVE-2022-21541: Fixed a potential bypass of sandbox restrictions in the Hotspot component (bsc#1201692). - CVE-2022-21540: Fixed a potential bypass of sandbox restrictions in the Hotspot component (bsc#1201694). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2949=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2949=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2949=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2949=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2949=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2949=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2949=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-2949=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2949=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2949=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2949=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-2949=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2022-2949=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP3-2022-2949=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2949=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2949=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-demo-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-src-1.8.0_sr7.11-150000.3.62.1 - openSUSE Leap 15.4 (x86_64): java-1_8_0-ibm-32bit-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-32bit-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - openSUSE Leap 15.3 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-demo-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-src-1.8.0_sr7.11-150000.3.62.1 - openSUSE Leap 15.3 (x86_64): java-1_8_0-ibm-32bit-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-32bit-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 - SUSE Manager Server 4.1 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Manager Proxy 4.1 (x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server for SAP 15 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Server 15-LTSS (s390x): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Enterprise Storage 7 (x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE Enterprise Storage 6 (x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 - SUSE CaaS Platform 4.0 (x86_64): java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 References: https://www.suse.com/security/cve/CVE-2022-21540.html https://www.suse.com/security/cve/CVE-2022-21541.html https://www.suse.com/security/cve/CVE-2022-21549.html https://www.suse.com/security/cve/CVE-2022-34169.html https://bugzilla.suse.com/1201684 https://bugzilla.suse.com/1201685 https://bugzilla.suse.com/1201692 https://bugzilla.suse.com/1201694 https://bugzilla.suse.com/1202427

1 0

SUSE-RU-2022:2945-1: important: Recommended update for sssd
by maintenance＠opensuse.org 31 Aug '22

31 Aug '22

SUSE Recommended Update: Recommended update for sssd ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2945-1 Rating: important References: #1202326 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for sssd fixes the following issues: - Fix sssd-common-32bit version conflict (bsc#1202326) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2945=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2945=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libipa_hbac-devel-2.5.2-150400.4.8.1 libipa_hbac0-2.5.2-150400.4.8.1 libipa_hbac0-debuginfo-2.5.2-150400.4.8.1 libnfsidmap-sss-2.5.2-150400.4.8.1 libnfsidmap-sss-debuginfo-2.5.2-150400.4.8.1 libsss_certmap-devel-2.5.2-150400.4.8.1 libsss_certmap0-2.5.2-150400.4.8.1 libsss_certmap0-debuginfo-2.5.2-150400.4.8.1 libsss_idmap-devel-2.5.2-150400.4.8.1 libsss_idmap0-2.5.2-150400.4.8.1 libsss_idmap0-debuginfo-2.5.2-150400.4.8.1 libsss_nss_idmap-devel-2.5.2-150400.4.8.1 libsss_nss_idmap0-2.5.2-150400.4.8.1 libsss_nss_idmap0-debuginfo-2.5.2-150400.4.8.1 libsss_simpleifp-devel-2.5.2-150400.4.8.1 libsss_simpleifp0-2.5.2-150400.4.8.1 libsss_simpleifp0-debuginfo-2.5.2-150400.4.8.1 python3-ipa_hbac-2.5.2-150400.4.8.1 python3-ipa_hbac-debuginfo-2.5.2-150400.4.8.1 python3-sss-murmur-2.5.2-150400.4.8.1 python3-sss-murmur-debuginfo-2.5.2-150400.4.8.1 python3-sss_nss_idmap-2.5.2-150400.4.8.1 python3-sss_nss_idmap-debuginfo-2.5.2-150400.4.8.1 python3-sssd-config-2.5.2-150400.4.8.1 python3-sssd-config-debuginfo-2.5.2-150400.4.8.1 sssd-2.5.2-150400.4.8.1 sssd-ad-2.5.2-150400.4.8.1 sssd-ad-debuginfo-2.5.2-150400.4.8.1 sssd-common-2.5.2-150400.4.8.1 sssd-common-debuginfo-2.5.2-150400.4.8.1 sssd-dbus-2.5.2-150400.4.8.1 sssd-dbus-debuginfo-2.5.2-150400.4.8.1 sssd-debugsource-2.5.2-150400.4.8.1 sssd-ipa-2.5.2-150400.4.8.1 sssd-ipa-debuginfo-2.5.2-150400.4.8.1 sssd-kcm-2.5.2-150400.4.8.1 sssd-kcm-debuginfo-2.5.2-150400.4.8.1 sssd-krb5-2.5.2-150400.4.8.1 sssd-krb5-common-2.5.2-150400.4.8.1 sssd-krb5-common-debuginfo-2.5.2-150400.4.8.1 sssd-krb5-debuginfo-2.5.2-150400.4.8.1 sssd-ldap-2.5.2-150400.4.8.1 sssd-ldap-debuginfo-2.5.2-150400.4.8.1 sssd-proxy-2.5.2-150400.4.8.1 sssd-proxy-debuginfo-2.5.2-150400.4.8.1 sssd-tools-2.5.2-150400.4.8.1 sssd-tools-debuginfo-2.5.2-150400.4.8.1 sssd-winbind-idmap-2.5.2-150400.4.8.1 sssd-winbind-idmap-debuginfo-2.5.2-150400.4.8.1 - openSUSE Leap 15.4 (x86_64): sssd-common-32bit-2.5.2-150400.4.8.1 sssd-common-32bit-debuginfo-2.5.2-150400.4.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libipa_hbac-devel-2.5.2-150400.4.8.1 libipa_hbac0-2.5.2-150400.4.8.1 libipa_hbac0-debuginfo-2.5.2-150400.4.8.1 libsss_certmap-devel-2.5.2-150400.4.8.1 libsss_certmap0-2.5.2-150400.4.8.1 libsss_certmap0-debuginfo-2.5.2-150400.4.8.1 libsss_idmap-devel-2.5.2-150400.4.8.1 libsss_idmap0-2.5.2-150400.4.8.1 libsss_idmap0-debuginfo-2.5.2-150400.4.8.1 libsss_nss_idmap-devel-2.5.2-150400.4.8.1 libsss_nss_idmap0-2.5.2-150400.4.8.1 libsss_nss_idmap0-debuginfo-2.5.2-150400.4.8.1 libsss_simpleifp-devel-2.5.2-150400.4.8.1 libsss_simpleifp0-2.5.2-150400.4.8.1 libsss_simpleifp0-debuginfo-2.5.2-150400.4.8.1 python3-sssd-config-2.5.2-150400.4.8.1 python3-sssd-config-debuginfo-2.5.2-150400.4.8.1 sssd-2.5.2-150400.4.8.1 sssd-ad-2.5.2-150400.4.8.1 sssd-ad-debuginfo-2.5.2-150400.4.8.1 sssd-common-2.5.2-150400.4.8.1 sssd-common-debuginfo-2.5.2-150400.4.8.1 sssd-dbus-2.5.2-150400.4.8.1 sssd-dbus-debuginfo-2.5.2-150400.4.8.1 sssd-debugsource-2.5.2-150400.4.8.1 sssd-ipa-2.5.2-150400.4.8.1 sssd-ipa-debuginfo-2.5.2-150400.4.8.1 sssd-kcm-2.5.2-150400.4.8.1 sssd-kcm-debuginfo-2.5.2-150400.4.8.1 sssd-krb5-2.5.2-150400.4.8.1 sssd-krb5-common-2.5.2-150400.4.8.1 sssd-krb5-common-debuginfo-2.5.2-150400.4.8.1 sssd-krb5-debuginfo-2.5.2-150400.4.8.1 sssd-ldap-2.5.2-150400.4.8.1 sssd-ldap-debuginfo-2.5.2-150400.4.8.1 sssd-proxy-2.5.2-150400.4.8.1 sssd-proxy-debuginfo-2.5.2-150400.4.8.1 sssd-tools-2.5.2-150400.4.8.1 sssd-tools-debuginfo-2.5.2-150400.4.8.1 sssd-winbind-idmap-2.5.2-150400.4.8.1 sssd-winbind-idmap-debuginfo-2.5.2-150400.4.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): sssd-common-32bit-2.5.2-150400.4.8.1 sssd-common-32bit-debuginfo-2.5.2-150400.4.8.1 References: https://bugzilla.suse.com/1202326

1 0