August 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:2657-1: important: Security update for oracleasm
by opensuse-security＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Security Update: Security update for oracleasm ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2657-1 Rating: important References: #1198581 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2657=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2657=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): oracleasm-debugsource-2.0.8-150400.25.2.8 oracleasm-kmp-default-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 oracleasm-kmp-default-debuginfo-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 - openSUSE Leap 15.4 (aarch64): oracleasm-kmp-64kb-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 oracleasm-kmp-64kb-debuginfo-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): oracleasm-kmp-default-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 oracleasm-kmp-default-debuginfo-2.0.8_k5.14.21_150400.24.11-150400.25.2.8 References: https://bugzilla.suse.com/1198581

1 0

SUSE-SU-2022:2660-1: important: Security update for java-17-openjdk
by opensuse-security＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Security Update: Security update for java-17-openjdk ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2660-1 Rating: important References: #1201684 #1201685 #1201692 #1201694 Cross-References: CVE-2022-21540 CVE-2022-21541 CVE-2022-21549 CVE-2022-34169 CVSS scores: CVE-2022-21540 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21540 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21541 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-21541 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-21549 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21549 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-34169 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-34169 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for java-17-openjdk fixes the following issues: Update to upstream tag jdk-17.0.4+8 (July 2022 CPU) - CVE-2022-21540: Improve class compilation (bsc#1201694) - CVE-2022-21541: Enhance MethodHandle invocations (bsc#1201692) - CVE-2022-34169: Improve Xalan supports (bsc#1201684) - CVE-2022-21549: java.util.random does not correctly sample exponential or Gaussian distributions (bsc#1201685) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2660=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2660=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): java-17-openjdk-17.0.4.0-150400.3.3.1 java-17-openjdk-accessibility-17.0.4.0-150400.3.3.1 java-17-openjdk-accessibility-debuginfo-17.0.4.0-150400.3.3.1 java-17-openjdk-debuginfo-17.0.4.0-150400.3.3.1 java-17-openjdk-debugsource-17.0.4.0-150400.3.3.1 java-17-openjdk-demo-17.0.4.0-150400.3.3.1 java-17-openjdk-devel-17.0.4.0-150400.3.3.1 java-17-openjdk-devel-debuginfo-17.0.4.0-150400.3.3.1 java-17-openjdk-headless-17.0.4.0-150400.3.3.1 java-17-openjdk-headless-debuginfo-17.0.4.0-150400.3.3.1 java-17-openjdk-jmods-17.0.4.0-150400.3.3.1 java-17-openjdk-src-17.0.4.0-150400.3.3.1 - openSUSE Leap 15.4 (noarch): java-17-openjdk-javadoc-17.0.4.0-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): java-17-openjdk-17.0.4.0-150400.3.3.1 java-17-openjdk-debuginfo-17.0.4.0-150400.3.3.1 java-17-openjdk-debugsource-17.0.4.0-150400.3.3.1 java-17-openjdk-demo-17.0.4.0-150400.3.3.1 java-17-openjdk-devel-17.0.4.0-150400.3.3.1 java-17-openjdk-devel-debuginfo-17.0.4.0-150400.3.3.1 java-17-openjdk-headless-17.0.4.0-150400.3.3.1 java-17-openjdk-headless-debuginfo-17.0.4.0-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-21540.html https://www.suse.com/security/cve/CVE-2022-21541.html https://www.suse.com/security/cve/CVE-2022-21549.html https://www.suse.com/security/cve/CVE-2022-34169.html https://bugzilla.suse.com/1201684 https://bugzilla.suse.com/1201685 https://bugzilla.suse.com/1201692 https://bugzilla.suse.com/1201694

1 0

SUSE-SU-2022:2659-1: important: Security update for ldb, samba
by opensuse-security＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Security Update: Security update for ldb, samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2659-1 Rating: important References: #1196224 #1198255 #1199247 #1199734 #1200556 #1200964 #1201490 #1201492 #1201493 #1201495 #1201496 Cross-References: CVE-2022-2031 CVE-2022-32742 CVE-2022-32744 CVE-2022-32745 CVE-2022-32746 CVSS scores: CVE-2022-32744 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-32745 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVE-2022-32746 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Availability 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 6 fixes is now available. Description: This update for ldb, samba fixes the following issues: - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492). - CVE-2022-2031: Fixed AD restrictions bypass associated with changing passwords (bsc#1201495). - CVE-2022-32742: Fixed a memory leak in SMB1 (bsc#1201496). - CVE-2022-32744: Fixed an arbitrary password change request for any AD user (bsc#1201493). The following non-security bug were fixed: ldb was updated to version 2.4.3: + Fix build problems, waf produces incorrect names for python extensions; (bso#15071); samba was updated to 4.15.8: * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2659=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2659=1 - SUSE Linux Enterprise High Availability 15-SP4: zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2022-2659=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): ctdb-4.15.8+git.500.d5910280cc7-150400.3.11.1 ctdb-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 ctdb-pcp-pmda-4.15.8+git.500.d5910280cc7-150400.3.11.1 ctdb-pcp-pmda-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 ldb-debugsource-2.4.3-150400.4.8.1 ldb-tools-2.4.3-150400.4.8.1 ldb-tools-debuginfo-2.4.3-150400.4.8.1 libldb-devel-2.4.3-150400.4.8.1 libldb2-2.4.3-150400.4.8.1 libldb2-debuginfo-2.4.3-150400.4.8.1 libsamba-policy-devel-4.15.8+git.500.d5910280cc7-150400.3.11.1 libsamba-policy-python3-devel-4.15.8+git.500.d5910280cc7-150400.3.11.1 libsamba-policy0-python3-4.15.8+git.500.d5910280cc7-150400.3.11.1 libsamba-policy0-python3-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 python3-ldb-2.4.3-150400.4.8.1 python3-ldb-debuginfo-2.4.3-150400.4.8.1 python3-ldb-devel-2.4.3-150400.4.8.1 samba-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ad-dc-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ad-dc-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ad-dc-libs-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ad-dc-libs-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-libs-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-libs-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-debugsource-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-devel-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-dsdb-modules-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-dsdb-modules-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-gpupdate-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ldb-ldap-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ldb-ldap-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-python3-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-python3-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-python3-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-python3-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-test-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-test-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-tool-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-libs-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-libs-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 - openSUSE Leap 15.4 (aarch64 x86_64): samba-ceph-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ceph-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 - openSUSE Leap 15.4 (noarch): samba-doc-4.15.8+git.500.d5910280cc7-150400.3.11.1 - openSUSE Leap 15.4 (x86_64): libldb2-32bit-2.4.3-150400.4.8.1 libldb2-32bit-debuginfo-2.4.3-150400.4.8.1 libsamba-policy0-python3-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 libsamba-policy0-python3-32bit-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 python3-ldb-32bit-2.4.3-150400.4.8.1 python3-ldb-32bit-debuginfo-2.4.3-150400.4.8.1 samba-ad-dc-libs-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ad-dc-libs-32bit-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-32bit-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-libs-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-libs-32bit-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-devel-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-32bit-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-python3-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-python3-32bit-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-libs-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-libs-32bit-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): ldb-debugsource-2.4.3-150400.4.8.1 ldb-tools-2.4.3-150400.4.8.1 ldb-tools-debuginfo-2.4.3-150400.4.8.1 libldb-devel-2.4.3-150400.4.8.1 libldb2-2.4.3-150400.4.8.1 libldb2-debuginfo-2.4.3-150400.4.8.1 libsamba-policy-devel-4.15.8+git.500.d5910280cc7-150400.3.11.1 libsamba-policy-python3-devel-4.15.8+git.500.d5910280cc7-150400.3.11.1 libsamba-policy0-python3-4.15.8+git.500.d5910280cc7-150400.3.11.1 libsamba-policy0-python3-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 python3-ldb-2.4.3-150400.4.8.1 python3-ldb-debuginfo-2.4.3-150400.4.8.1 python3-ldb-devel-2.4.3-150400.4.8.1 samba-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ad-dc-libs-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ad-dc-libs-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-libs-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-libs-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-debugsource-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-devel-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-dsdb-modules-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-dsdb-modules-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-gpupdate-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ldb-ldap-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ldb-ldap-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-python3-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-python3-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-python3-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-python3-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-libs-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-winbind-libs-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 x86_64): samba-ceph-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-ceph-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libldb2-32bit-2.4.3-150400.4.8.1 libldb2-32bit-debuginfo-2.4.3-150400.4.8.1 samba-client-libs-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-client-libs-32bit-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-32bit-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-libs-32bit-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 - SUSE Linux Enterprise High Availability 15-SP4 (aarch64 ppc64le s390x x86_64): ctdb-4.15.8+git.500.d5910280cc7-150400.3.11.1 ctdb-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-debuginfo-4.15.8+git.500.d5910280cc7-150400.3.11.1 samba-debugsource-4.15.8+git.500.d5910280cc7-150400.3.11.1 References: https://www.suse.com/security/cve/CVE-2022-2031.html https://www.suse.com/security/cve/CVE-2022-32742.html https://www.suse.com/security/cve/CVE-2022-32744.html https://www.suse.com/security/cve/CVE-2022-32745.html https://www.suse.com/security/cve/CVE-2022-32746.html https://bugzilla.suse.com/1196224 https://bugzilla.suse.com/1198255 https://bugzilla.suse.com/1199247 https://bugzilla.suse.com/1199734 https://bugzilla.suse.com/1200556 https://bugzilla.suse.com/1200964 https://bugzilla.suse.com/1201490 https://bugzilla.suse.com/1201492 https://bugzilla.suse.com/1201493 https://bugzilla.suse.com/1201495 https://bugzilla.suse.com/1201496

1 0

SUSE-SU-2022:2661-1: important: Security update for u-boot
by opensuse-security＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Security Update: Security update for u-boot ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2661-1 Rating: important References: #1201214 #1201745 Cross-References: CVE-2022-33967 CVE-2022-34835 CVSS scores: CVE-2022-33967 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-33967 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L CVE-2022-34835 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-34835 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for u-boot fixes the following issues: - CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation (bsc#1201745). - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2661=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2661=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.10-150400.4.8.1 u-boot-tools-debuginfo-2021.10-150400.4.8.1 - openSUSE Leap 15.4 (aarch64): u-boot-avnetultra96rev1-2021.10-150400.4.8.1 u-boot-avnetultra96rev1-doc-2021.10-150400.4.8.1 u-boot-bananapim64-2021.10-150400.4.8.1 u-boot-bananapim64-doc-2021.10-150400.4.8.1 u-boot-dragonboard410c-2021.10-150400.4.8.1 u-boot-dragonboard410c-doc-2021.10-150400.4.8.1 u-boot-dragonboard820c-2021.10-150400.4.8.1 u-boot-dragonboard820c-doc-2021.10-150400.4.8.1 u-boot-evb-rk3399-2021.10-150400.4.8.1 u-boot-evb-rk3399-doc-2021.10-150400.4.8.1 u-boot-firefly-rk3399-2021.10-150400.4.8.1 u-boot-firefly-rk3399-doc-2021.10-150400.4.8.1 u-boot-geekbox-2021.10-150400.4.8.1 u-boot-geekbox-doc-2021.10-150400.4.8.1 u-boot-hikey-2021.10-150400.4.8.1 u-boot-hikey-doc-2021.10-150400.4.8.1 u-boot-khadas-vim-2021.10-150400.4.8.1 u-boot-khadas-vim-doc-2021.10-150400.4.8.1 u-boot-khadas-vim2-2021.10-150400.4.8.1 u-boot-khadas-vim2-doc-2021.10-150400.4.8.1 u-boot-libretech-ac-2021.10-150400.4.8.1 u-boot-libretech-ac-doc-2021.10-150400.4.8.1 u-boot-libretech-cc-2021.10-150400.4.8.1 u-boot-libretech-cc-doc-2021.10-150400.4.8.1 u-boot-ls1012afrdmqspi-2021.10-150400.4.8.1 u-boot-ls1012afrdmqspi-doc-2021.10-150400.4.8.1 u-boot-mvebudb-88f3720-2021.10-150400.4.8.1 u-boot-mvebudb-88f3720-doc-2021.10-150400.4.8.1 u-boot-mvebudbarmada8k-2021.10-150400.4.8.1 u-boot-mvebudbarmada8k-doc-2021.10-150400.4.8.1 u-boot-mvebuespressobin-88f3720-2021.10-150400.4.8.1 u-boot-mvebuespressobin-88f3720-doc-2021.10-150400.4.8.1 u-boot-mvebumcbin-88f8040-2021.10-150400.4.8.1 u-boot-mvebumcbin-88f8040-doc-2021.10-150400.4.8.1 u-boot-nanopia64-2021.10-150400.4.8.1 u-boot-nanopia64-doc-2021.10-150400.4.8.1 u-boot-odroid-c2-2021.10-150400.4.8.1 u-boot-odroid-c2-doc-2021.10-150400.4.8.1 u-boot-odroid-c4-2021.10-150400.4.8.1 u-boot-odroid-c4-doc-2021.10-150400.4.8.1 u-boot-odroid-n2-2021.10-150400.4.8.1 u-boot-odroid-n2-doc-2021.10-150400.4.8.1 u-boot-orangepipc2-2021.10-150400.4.8.1 u-boot-orangepipc2-doc-2021.10-150400.4.8.1 u-boot-p2371-2180-2021.10-150400.4.8.1 u-boot-p2371-2180-doc-2021.10-150400.4.8.1 u-boot-p2771-0000-500-2021.10-150400.4.8.1 u-boot-p2771-0000-500-doc-2021.10-150400.4.8.1 u-boot-p3450-0000-2021.10-150400.4.8.1 u-boot-p3450-0000-doc-2021.10-150400.4.8.1 u-boot-pine64plus-2021.10-150400.4.8.1 u-boot-pine64plus-doc-2021.10-150400.4.8.1 u-boot-pinebook-2021.10-150400.4.8.1 u-boot-pinebook-doc-2021.10-150400.4.8.1 u-boot-pinebook-pro-rk3399-2021.10-150400.4.8.1 u-boot-pinebook-pro-rk3399-doc-2021.10-150400.4.8.1 u-boot-pineh64-2021.10-150400.4.8.1 u-boot-pineh64-doc-2021.10-150400.4.8.1 u-boot-pinephone-2021.10-150400.4.8.1 u-boot-pinephone-doc-2021.10-150400.4.8.1 u-boot-poplar-2021.10-150400.4.8.1 u-boot-poplar-doc-2021.10-150400.4.8.1 u-boot-rock-pi-4-rk3399-2021.10-150400.4.8.1 u-boot-rock-pi-4-rk3399-doc-2021.10-150400.4.8.1 u-boot-rock-pi-n10-rk3399pro-2021.10-150400.4.8.1 u-boot-rock-pi-n10-rk3399pro-doc-2021.10-150400.4.8.1 u-boot-rock64-rk3328-2021.10-150400.4.8.1 u-boot-rock64-rk3328-doc-2021.10-150400.4.8.1 u-boot-rock960-rk3399-2021.10-150400.4.8.1 u-boot-rock960-rk3399-doc-2021.10-150400.4.8.1 u-boot-rockpro64-rk3399-2021.10-150400.4.8.1 u-boot-rockpro64-rk3399-doc-2021.10-150400.4.8.1 u-boot-rpi3-2021.10-150400.4.8.1 u-boot-rpi3-doc-2021.10-150400.4.8.1 u-boot-rpi4-2021.10-150400.4.8.1 u-boot-rpi4-doc-2021.10-150400.4.8.1 u-boot-rpiarm64-2021.10-150400.4.8.1 u-boot-rpiarm64-doc-2021.10-150400.4.8.1 u-boot-xilinxzynqmpvirt-2021.10-150400.4.8.1 u-boot-xilinxzynqmpvirt-doc-2021.10-150400.4.8.1 u-boot-xilinxzynqmpzcu102rev10-2021.10-150400.4.8.1 u-boot-xilinxzynqmpzcu102rev10-doc-2021.10-150400.4.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.10-150400.4.8.1 u-boot-tools-debuginfo-2021.10-150400.4.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64): u-boot-rpiarm64-2021.10-150400.4.8.1 u-boot-rpiarm64-doc-2021.10-150400.4.8.1 References: https://www.suse.com/security/cve/CVE-2022-33967.html https://www.suse.com/security/cve/CVE-2022-34835.html https://bugzilla.suse.com/1201214 https://bugzilla.suse.com/1201745

1 0

SUSE-SU-2022:2653-1: important: Security update for u-boot
by opensuse-security＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Security Update: Security update for u-boot ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2653-1 Rating: important References: #1201214 #1201745 Cross-References: CVE-2022-33967 CVE-2022-34835 CVSS scores: CVE-2022-33967 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-33967 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L CVE-2022-34835 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-34835 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for u-boot fixes the following issues: - CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation (bsc#1201745). - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2653=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2653=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.01-150300.7.15.1 u-boot-tools-debuginfo-2021.01-150300.7.15.1 - openSUSE Leap 15.3 (aarch64): u-boot-avnetultra96rev1-2021.01-150300.7.15.1 u-boot-avnetultra96rev1-doc-2021.01-150300.7.15.1 u-boot-bananapim64-2021.01-150300.7.15.1 u-boot-bananapim64-doc-2021.01-150300.7.15.1 u-boot-dragonboard410c-2021.01-150300.7.15.1 u-boot-dragonboard410c-doc-2021.01-150300.7.15.1 u-boot-dragonboard820c-2021.01-150300.7.15.1 u-boot-dragonboard820c-doc-2021.01-150300.7.15.1 u-boot-evb-rk3399-2021.01-150300.7.15.1 u-boot-evb-rk3399-doc-2021.01-150300.7.15.1 u-boot-firefly-rk3399-2021.01-150300.7.15.1 u-boot-firefly-rk3399-doc-2021.01-150300.7.15.1 u-boot-geekbox-2021.01-150300.7.15.1 u-boot-geekbox-doc-2021.01-150300.7.15.1 u-boot-hikey-2021.01-150300.7.15.1 u-boot-hikey-doc-2021.01-150300.7.15.1 u-boot-khadas-vim-2021.01-150300.7.15.1 u-boot-khadas-vim-doc-2021.01-150300.7.15.1 u-boot-khadas-vim2-2021.01-150300.7.15.1 u-boot-khadas-vim2-doc-2021.01-150300.7.15.1 u-boot-libretech-ac-2021.01-150300.7.15.1 u-boot-libretech-ac-doc-2021.01-150300.7.15.1 u-boot-libretech-cc-2021.01-150300.7.15.1 u-boot-libretech-cc-doc-2021.01-150300.7.15.1 u-boot-ls1012afrdmqspi-2021.01-150300.7.15.1 u-boot-ls1012afrdmqspi-doc-2021.01-150300.7.15.1 u-boot-mvebudb-88f3720-2021.01-150300.7.15.1 u-boot-mvebudb-88f3720-doc-2021.01-150300.7.15.1 u-boot-mvebudbarmada8k-2021.01-150300.7.15.1 u-boot-mvebudbarmada8k-doc-2021.01-150300.7.15.1 u-boot-mvebuespressobin-88f3720-2021.01-150300.7.15.1 u-boot-mvebuespressobin-88f3720-doc-2021.01-150300.7.15.1 u-boot-mvebumcbin-88f8040-2021.01-150300.7.15.1 u-boot-mvebumcbin-88f8040-doc-2021.01-150300.7.15.1 u-boot-nanopia64-2021.01-150300.7.15.1 u-boot-nanopia64-doc-2021.01-150300.7.15.1 u-boot-odroid-c2-2021.01-150300.7.15.1 u-boot-odroid-c2-doc-2021.01-150300.7.15.1 u-boot-odroid-c4-2021.01-150300.7.15.1 u-boot-odroid-c4-doc-2021.01-150300.7.15.1 u-boot-odroid-n2-2021.01-150300.7.15.1 u-boot-odroid-n2-doc-2021.01-150300.7.15.1 u-boot-orangepipc2-2021.01-150300.7.15.1 u-boot-orangepipc2-doc-2021.01-150300.7.15.1 u-boot-p2371-2180-2021.01-150300.7.15.1 u-boot-p2371-2180-doc-2021.01-150300.7.15.1 u-boot-p2771-0000-500-2021.01-150300.7.15.1 u-boot-p2771-0000-500-doc-2021.01-150300.7.15.1 u-boot-p3450-0000-2021.01-150300.7.15.1 u-boot-p3450-0000-doc-2021.01-150300.7.15.1 u-boot-pine64plus-2021.01-150300.7.15.1 u-boot-pine64plus-doc-2021.01-150300.7.15.1 u-boot-pinebook-2021.01-150300.7.15.1 u-boot-pinebook-doc-2021.01-150300.7.15.1 u-boot-pinebook-pro-rk3399-2021.01-150300.7.15.1 u-boot-pinebook-pro-rk3399-doc-2021.01-150300.7.15.1 u-boot-pineh64-2021.01-150300.7.15.1 u-boot-pineh64-doc-2021.01-150300.7.15.1 u-boot-pinephone-2021.01-150300.7.15.1 u-boot-pinephone-doc-2021.01-150300.7.15.1 u-boot-poplar-2021.01-150300.7.15.1 u-boot-poplar-doc-2021.01-150300.7.15.1 u-boot-rock-pi-4-rk3399-2021.01-150300.7.15.1 u-boot-rock-pi-4-rk3399-doc-2021.01-150300.7.15.1 u-boot-rock64-rk3328-2021.01-150300.7.15.1 u-boot-rock64-rk3328-doc-2021.01-150300.7.15.1 u-boot-rock960-rk3399-2021.01-150300.7.15.1 u-boot-rock960-rk3399-doc-2021.01-150300.7.15.1 u-boot-rockpro64-rk3399-2021.01-150300.7.15.1 u-boot-rockpro64-rk3399-doc-2021.01-150300.7.15.1 u-boot-rpi3-2021.01-150300.7.15.1 u-boot-rpi3-doc-2021.01-150300.7.15.1 u-boot-rpi4-2021.01-150300.7.15.1 u-boot-rpi4-doc-2021.01-150300.7.15.1 u-boot-rpiarm64-2021.01-150300.7.15.1 u-boot-rpiarm64-doc-2021.01-150300.7.15.1 u-boot-xilinxzynqmpvirt-2021.01-150300.7.15.1 u-boot-xilinxzynqmpvirt-doc-2021.01-150300.7.15.1 u-boot-xilinxzynqmpzcu102rev10-2021.01-150300.7.15.1 u-boot-xilinxzynqmpzcu102rev10-doc-2021.01-150300.7.15.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): u-boot-tools-2021.01-150300.7.15.1 u-boot-tools-debuginfo-2021.01-150300.7.15.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64): u-boot-rpiarm64-2021.01-150300.7.15.1 u-boot-rpiarm64-doc-2021.01-150300.7.15.1 References: https://www.suse.com/security/cve/CVE-2022-33967.html https://www.suse.com/security/cve/CVE-2022-34835.html https://bugzilla.suse.com/1201214 https://bugzilla.suse.com/1201745

1 0

SUSE-SU-2022:2654-1: important: Security update for u-boot
by opensuse-security＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Security Update: Security update for u-boot ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2654-1 Rating: important References: #1201214 Cross-References: CVE-2022-34835 CVSS scores: CVE-2022-34835 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-34835 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for u-boot fixes the following issues: - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2654=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2654=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2654=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2654=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2654=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2654=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2654=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2654=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2654=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2654=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2654=1 Package List: - openSUSE Leap 15.4 (aarch64): u-boot-xilinxzynqmpgeneric-2020.01-150200.10.15.1 u-boot-xilinxzynqmpgeneric-doc-2020.01-150200.10.15.1 - openSUSE Leap 15.3 (aarch64): u-boot-xilinxzynqmpgeneric-2020.01-150200.10.15.1 u-boot-xilinxzynqmpgeneric-doc-2020.01-150200.10.15.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Manager Proxy 4.1 (x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64): u-boot-rpiarm64-2020.01-150200.10.15.1 u-boot-rpiarm64-doc-2020.01-150200.10.15.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64): u-boot-rpiarm64-2020.01-150200.10.15.1 u-boot-rpiarm64-doc-2020.01-150200.10.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64): u-boot-rpiarm64-2020.01-150200.10.15.1 u-boot-rpiarm64-doc-2020.01-150200.10.15.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Enterprise Storage 7 (aarch64): u-boot-rpiarm64-2020.01-150200.10.15.1 u-boot-rpiarm64-doc-2020.01-150200.10.15.1 References: https://www.suse.com/security/cve/CVE-2022-34835.html https://bugzilla.suse.com/1201214

1 0

SUSE-SU-2022:2655-1: moderate: Security update for postgresql-jdbc
by opensuse-security＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Security Update: Security update for postgresql-jdbc ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2655-1 Rating: moderate References: #1197356 Cross-References: CVE-2022-26520 CVSS scores: CVE-2022-26520 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26520 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for postgresql-jdbc fixes the following issues: - CVE-2022-26520: Fixed arbitrary File Write Vulnerability (bsc#1197356) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2655=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2655=1 Package List: - openSUSE Leap 15.4 (noarch): postgresql-jdbc-42.2.25-150400.3.3.2 postgresql-jdbc-javadoc-42.2.25-150400.3.3.2 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): postgresql-jdbc-42.2.25-150400.3.3.2 References: https://www.suse.com/security/cve/CVE-2022-26520.html https://bugzilla.suse.com/1197356

1 0

SUSE-SU-2022:2646-1: moderate: Security update for python-numpy
by opensuse-security＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Security Update: Security update for python-numpy ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2646-1 Rating: moderate References: #1193911 Cross-References: CVE-2021-41495 CVSS scores: CVE-2021-41495 (NVD) : 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-41495 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for HPC 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-numpy fixes the following issues: - CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2646=1 - SUSE Linux Enterprise Module for HPC 15-SP4: zypper in -t patch SUSE-SLE-Module-HPC-15-SP4-2022-2646=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2646=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-numpy-debugsource-1.17.3-150400.23.3.1 python-numpy_1_17_3-gnu-hpc-debugsource-1.17.3-150400.23.3.1 python3-numpy-1.17.3-150400.23.3.1 python3-numpy-debuginfo-1.17.3-150400.23.3.1 python3-numpy-devel-1.17.3-150400.23.3.1 python3-numpy-gnu-hpc-1.17.3-150400.23.3.1 python3-numpy-gnu-hpc-devel-1.17.3-150400.23.3.1 python3-numpy_1_17_3-gnu-hpc-1.17.3-150400.23.3.1 python3-numpy_1_17_3-gnu-hpc-debuginfo-1.17.3-150400.23.3.1 python3-numpy_1_17_3-gnu-hpc-devel-1.17.3-150400.23.3.1 - SUSE Linux Enterprise Module for HPC 15-SP4 (aarch64 x86_64): python-numpy_1_17_3-gnu-hpc-debugsource-1.17.3-150400.23.3.1 python3-numpy-gnu-hpc-1.17.3-150400.23.3.1 python3-numpy-gnu-hpc-devel-1.17.3-150400.23.3.1 python3-numpy_1_17_3-gnu-hpc-1.17.3-150400.23.3.1 python3-numpy_1_17_3-gnu-hpc-debuginfo-1.17.3-150400.23.3.1 python3-numpy_1_17_3-gnu-hpc-devel-1.17.3-150400.23.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): python-numpy-debugsource-1.17.3-150400.23.3.1 python3-numpy-1.17.3-150400.23.3.1 python3-numpy-debuginfo-1.17.3-150400.23.3.1 python3-numpy-devel-1.17.3-150400.23.3.1 References: https://www.suse.com/security/cve/CVE-2021-41495.html https://bugzilla.suse.com/1193911

1 0

SUSE-SU-2022:2650-1: important: Security update for java-1_8_0-ibm
by opensuse-security＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Security Update: Security update for java-1_8_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2650-1 Rating: important References: #1191912 #1194931 #1198670 #1198671 #1198672 #1198673 #1198674 #1198675 #1201643 Cross-References: CVE-2021-35561 CVE-2022-21299 CVE-2022-21426 CVE-2022-21434 CVE-2022-21443 CVE-2022-21449 CVE-2022-21476 CVE-2022-21496 CVSS scores: CVE-2021-35561 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35561 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21426 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21426 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21434 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21434 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21443 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21443 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21449 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-21449 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-21476 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21476 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21496 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21496 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing SUSE Linux Enterprise Module for Legacy Software 15-SP3 SUSE Linux Enterprise Module for Legacy Software 15-SP4 SUSE Linux Enterprise Server SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has one errata is now available. Description: This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643] - CVE-2022-21476 (bsc#1198671), CVE-2022-21449 (bsc#1198670), CVE-2022-21496 (bsc#1198673), CVE-2022-21434 (bsc#1198674), CVE-2022-21426 (bsc#1198672), CVE-2022-21443 (bsc#1198675), CVE-2021-35561 (bsc#1191912), CVE-2022-21299 (bsc#1194931). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2650=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2650=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2650=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2650=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2650=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2650=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2650=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-2650=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2650=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2650=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2650=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-2650=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2022-2650=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP3-2022-2650=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2650=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2650=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-demo-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-src-1.8.0_sr7.10-150000.3.59.1 - openSUSE Leap 15.4 (x86_64): java-1_8_0-ibm-32bit-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-32bit-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - openSUSE Leap 15.3 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-demo-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-src-1.8.0_sr7.10-150000.3.59.1 - openSUSE Leap 15.3 (x86_64): java-1_8_0-ibm-32bit-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-32bit-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 - SUSE Manager Server 4.1 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Manager Proxy 4.1 (x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server for SAP 15 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Server 15-LTSS (s390x): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Enterprise Storage 7 (x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE Enterprise Storage 6 (x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 - SUSE CaaS Platform 4.0 (x86_64): java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 References: https://www.suse.com/security/cve/CVE-2021-35561.html https://www.suse.com/security/cve/CVE-2022-21299.html https://www.suse.com/security/cve/CVE-2022-21426.html https://www.suse.com/security/cve/CVE-2022-21434.html https://www.suse.com/security/cve/CVE-2022-21443.html https://www.suse.com/security/cve/CVE-2022-21449.html https://www.suse.com/security/cve/CVE-2022-21476.html https://www.suse.com/security/cve/CVE-2022-21496.html https://bugzilla.suse.com/1191912 https://bugzilla.suse.com/1194931 https://bugzilla.suse.com/1198670 https://bugzilla.suse.com/1198671 https://bugzilla.suse.com/1198672 https://bugzilla.suse.com/1198673 https://bugzilla.suse.com/1198674 https://bugzilla.suse.com/1198675 https://bugzilla.suse.com/1201643

1 0

SUSE-RU-2022:2644-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 03 Aug '22

03 Aug '22

SUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2644-1 Rating: moderate References: #1177461 #1184970 Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970) - Fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2644=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2644=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2644=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2644=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2644=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2644=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2644=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2644=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2644=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2644=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2644=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2644=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2644=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-extra-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-tools-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Manager Proxy 4.1 (x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): dracut-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debuginfo-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-debugsource-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-fips-049.1+suse.238.gd8dbb075-150200.3.60.1 dracut-ima-049.1+suse.238.gd8dbb075-150200.3.60.1 References: https://bugzilla.suse.com/1177461 https://bugzilla.suse.com/1184970

1 0