August 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2022:10104-1: important: Security update for varnish
by opensuse-security＠opensuse.org 27 Aug '22

27 Aug '22

openSUSE Security Update: Security update for varnish ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10104-1 Rating: important References: #1202350 Cross-References: CVE-2022-38150 CVSS scores: CVE-2022-38150 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for varnish fixes the following issues: Update to release 7.1.1: - CVE-2022-38150: Resolve a denial of service attack involving reason phrases (boo#1202350). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10104=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): libvarnishapi3-7.1.1-bp154.2.6.1 varnish-7.1.1-bp154.2.6.1 varnish-devel-7.1.1-bp154.2.6.1 References: https://www.suse.com/security/cve/CVE-2022-38150.html https://bugzilla.suse.com/1202350

1 0

openSUSE-RU-2022:10100-1: moderate: Recommended update for sushi
by maintenance＠opensuse.org 27 Aug '22

27 Aug '22

openSUSE Recommended Update: Recommended update for sushi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10100-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sushi fixes the following issues: - Update to version 41.2: + Enable web process sandbox (webkitgtk). - Update to version 41.1: + Enable web process (webkitgtk) sandbox. - Add typelib\\(LOKDocView\\) global requires exclude: We do not want to mandate libreoffice install just for the file preview funtion. If libreoffice is installed, the preview in will function as expected. - Following the above, add (typelib(LOKDocView) if libreoffice) Requires: Pull in the needed libreoffice glue if libreoffice is installed. - Pass explicit wayland=enabled and X11=enabled to meson, ensure we build support for both (we already have dependencies in place). - Update to version 41.0: + Drop libmusicbrainz dependency (use libsoup directly). + Account for scale-factor when estimating window size. + Build against webkit2gtk-4.1 + Disable webkit sandboxing. + Updated translations. - Drop pkgconfig(libmusicbrainz5) BuildRequires: No longer needed. - Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1) BuildRequires following upstream changes. - Update to version 3.38.1: + Account for scaling factor while estimating window size - Update to version 3.38.0: + Fix build when Wayland is disabled. + Make X11 and Wayland configurable at build time. + Sync font-widget with gnome-font-viewer. + Fix various meson build issues. + Sandbox webkitgtk. + Fix crash caused by the lack of getters for viewers' properties. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10100=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): sushi-41.2-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): sushi-lang-41.2-bp154.2.3.1 References:

1 0

SUSE-RU-2022:2924-1: moderate: Recommended update for gcc10
by maintenance＠opensuse.org 27 Aug '22

27 Aug '22

SUSE Recommended Update: Recommended update for gcc10 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2924-1 Rating: moderate References: #1188076 #1195628 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gcc10 fixes the following issues: Update to GCC 10.4 release (80c8c5b8f69bcd2dd168933fe6a), git2794 * includes remaining regression fixes from the branch * Removes cyclades header use from libsanitizer. [bsc#1188076] - Add gcc10-PIE, similar to gcc-PIE but affecting gcc10 [bsc#1195628] - Remove sys/rseq.h from include-fixed - Put libstdc++6-pp Requires on the shared library and drop to Recoomends. - Properly adjust license GPL-3.0 WITH GCC-exception-3.1 to GPL-3.0-or-later WITH GCC-exception-3.1 - Remove bits/unistd_ext.h from include-fixed - Force using llvm11 for amdgcn offloading since llvm12 doesn't yet work. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2924=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2924=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-2924=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2924=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2924=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cpp10-10.4.0+git2794-150000.1.9.1 cpp10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-arm-gcc10-10.4.0+git2794-150000.1.9.1 cross-arm-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-arm-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-arm-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-hppa-gcc10-10.4.0+git2794-150000.1.9.1 cross-hppa-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-hppa-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-hppa-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-i386-gcc10-10.4.0+git2794-150000.1.9.1 cross-i386-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-i386-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-i386-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-m68k-gcc10-10.4.0+git2794-150000.1.9.1 cross-m68k-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-m68k-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-m68k-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-mips-gcc10-10.4.0+git2794-150000.1.9.1 cross-mips-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-mips-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-mips-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-ppc64-gcc10-10.4.0+git2794-150000.1.9.1 cross-ppc64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-ppc64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-ppc64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-riscv64-gcc10-10.4.0+git2794-150000.1.9.1 cross-riscv64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-riscv64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-riscv64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-sparc-gcc10-10.4.0+git2794-150000.1.9.1 cross-sparc-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-sparc-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-sparc64-gcc10-10.4.0+git2794-150000.1.9.1 cross-sparc64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-sparc64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-sparc64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-sparcv9-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 gcc10-10.4.0+git2794-150000.1.9.1 gcc10-ada-10.4.0+git2794-150000.1.9.1 gcc10-ada-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-c++-10.4.0+git2794-150000.1.9.1 gcc10-c++-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-debugsource-10.4.0+git2794-150000.1.9.1 gcc10-fortran-10.4.0+git2794-150000.1.9.1 gcc10-fortran-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-go-10.4.0+git2794-150000.1.9.1 gcc10-go-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-locale-10.4.0+git2794-150000.1.9.1 gcc10-obj-c++-10.4.0+git2794-150000.1.9.1 gcc10-obj-c++-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-objc-10.4.0+git2794-150000.1.9.1 gcc10-objc-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-testresults-10.4.0+git2794-150000.1.9.1 libada10-10.4.0+git2794-150000.1.9.1 libada10-debuginfo-10.4.0+git2794-150000.1.9.1 libgo16-10.4.0+git2794-150000.1.9.1 libgo16-debuginfo-10.4.0+git2794-150000.1.9.1 libstdc++6-devel-gcc10-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): cross-s390x-gcc10-10.4.0+git2794-150000.1.9.1 cross-s390x-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-s390x-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-s390x-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x): cross-x86_64-gcc10-10.4.0+git2794-150000.1.9.1 cross-x86_64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-x86_64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-x86_64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.4 (ppc64le s390x x86_64): cross-aarch64-gcc10-10.4.0+git2794-150000.1.9.1 cross-aarch64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-aarch64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-aarch64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.4 (aarch64 s390x x86_64): cross-ppc64le-gcc10-10.4.0+git2794-150000.1.9.1 cross-ppc64le-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-ppc64le-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-ppc64le-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 gcc10-d-10.4.0+git2794-150000.1.9.1 gcc10-d-debuginfo-10.4.0+git2794-150000.1.9.1 libgdruntime1-10.4.0+git2794-150000.1.9.1 libgdruntime1-debuginfo-10.4.0+git2794-150000.1.9.1 libgphobos1-10.4.0+git2794-150000.1.9.1 libgphobos1-debuginfo-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.4 (s390x x86_64): gcc10-32bit-10.4.0+git2794-150000.1.9.1 gcc10-ada-32bit-10.4.0+git2794-150000.1.9.1 gcc10-c++-32bit-10.4.0+git2794-150000.1.9.1 gcc10-d-32bit-10.4.0+git2794-150000.1.9.1 gcc10-fortran-32bit-10.4.0+git2794-150000.1.9.1 gcc10-go-32bit-10.4.0+git2794-150000.1.9.1 gcc10-obj-c++-32bit-10.4.0+git2794-150000.1.9.1 gcc10-objc-32bit-10.4.0+git2794-150000.1.9.1 libada10-32bit-10.4.0+git2794-150000.1.9.1 libada10-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 libgdruntime1-32bit-10.4.0+git2794-150000.1.9.1 libgdruntime1-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 libgo16-32bit-10.4.0+git2794-150000.1.9.1 libgo16-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 libgphobos1-32bit-10.4.0+git2794-150000.1.9.1 libgphobos1-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 libstdc++6-devel-gcc10-32bit-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.4 (noarch): gcc10-info-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.4 (x86_64): cross-nvptx-gcc10-10.4.0+git2794-150000.1.9.1 cross-nvptx-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-nvptx-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-nvptx-newlib10-devel-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cpp10-10.4.0+git2794-150000.1.9.1 cpp10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-arm-gcc10-10.4.0+git2794-150000.1.9.1 cross-arm-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-arm-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-arm-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-hppa-gcc10-10.4.0+git2794-150000.1.9.1 cross-hppa-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-hppa-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-hppa-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-i386-gcc10-10.4.0+git2794-150000.1.9.1 cross-i386-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-i386-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-i386-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-m68k-gcc10-10.4.0+git2794-150000.1.9.1 cross-m68k-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-m68k-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-m68k-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-mips-gcc10-10.4.0+git2794-150000.1.9.1 cross-mips-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-mips-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-mips-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-ppc64-gcc10-10.4.0+git2794-150000.1.9.1 cross-ppc64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-ppc64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-ppc64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-riscv64-gcc10-10.4.0+git2794-150000.1.9.1 cross-riscv64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-riscv64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-riscv64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-sparc-gcc10-10.4.0+git2794-150000.1.9.1 cross-sparc-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-sparc-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-sparc64-gcc10-10.4.0+git2794-150000.1.9.1 cross-sparc64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-sparc64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-sparc64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 cross-sparcv9-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 gcc10-10.4.0+git2794-150000.1.9.1 gcc10-ada-10.4.0+git2794-150000.1.9.1 gcc10-ada-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-c++-10.4.0+git2794-150000.1.9.1 gcc10-c++-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-debugsource-10.4.0+git2794-150000.1.9.1 gcc10-fortran-10.4.0+git2794-150000.1.9.1 gcc10-fortran-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-go-10.4.0+git2794-150000.1.9.1 gcc10-go-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-locale-10.4.0+git2794-150000.1.9.1 gcc10-obj-c++-10.4.0+git2794-150000.1.9.1 gcc10-obj-c++-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-objc-10.4.0+git2794-150000.1.9.1 gcc10-objc-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-testresults-10.4.0+git2794-150000.1.9.1 libada10-10.4.0+git2794-150000.1.9.1 libada10-debuginfo-10.4.0+git2794-150000.1.9.1 libgo16-10.4.0+git2794-150000.1.9.1 libgo16-debuginfo-10.4.0+git2794-150000.1.9.1 libstdc++6-devel-gcc10-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): cross-s390x-gcc10-10.4.0+git2794-150000.1.9.1 cross-s390x-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-s390x-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-s390x-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x): cross-x86_64-gcc10-10.4.0+git2794-150000.1.9.1 cross-x86_64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-x86_64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-x86_64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 libstdc++6-pp-gcc10-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.3 (aarch64 s390x x86_64): cross-ppc64le-gcc10-10.4.0+git2794-150000.1.9.1 cross-ppc64le-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-ppc64le-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-ppc64le-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 gcc10-d-10.4.0+git2794-150000.1.9.1 gcc10-d-debuginfo-10.4.0+git2794-150000.1.9.1 libgdruntime1-10.4.0+git2794-150000.1.9.1 libgdruntime1-debuginfo-10.4.0+git2794-150000.1.9.1 libgphobos1-10.4.0+git2794-150000.1.9.1 libgphobos1-debuginfo-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.3 (ppc64le s390x x86_64): cross-aarch64-gcc10-10.4.0+git2794-150000.1.9.1 cross-aarch64-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-aarch64-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-aarch64-gcc10-icecream-backend-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.3 (s390x x86_64): gcc10-32bit-10.4.0+git2794-150000.1.9.1 gcc10-ada-32bit-10.4.0+git2794-150000.1.9.1 gcc10-c++-32bit-10.4.0+git2794-150000.1.9.1 gcc10-d-32bit-10.4.0+git2794-150000.1.9.1 gcc10-fortran-32bit-10.4.0+git2794-150000.1.9.1 gcc10-go-32bit-10.4.0+git2794-150000.1.9.1 gcc10-obj-c++-32bit-10.4.0+git2794-150000.1.9.1 gcc10-objc-32bit-10.4.0+git2794-150000.1.9.1 libada10-32bit-10.4.0+git2794-150000.1.9.1 libada10-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 libgdruntime1-32bit-10.4.0+git2794-150000.1.9.1 libgdruntime1-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 libgo16-32bit-10.4.0+git2794-150000.1.9.1 libgo16-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 libgphobos1-32bit-10.4.0+git2794-150000.1.9.1 libgphobos1-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 libstdc++6-devel-gcc10-32bit-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.3 (x86_64): cross-nvptx-gcc10-10.4.0+git2794-150000.1.9.1 cross-nvptx-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-nvptx-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-nvptx-newlib10-devel-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.3 (noarch): gcc10-info-10.4.0+git2794-150000.1.9.1 - openSUSE Leap 15.3 (s390x): libstdc++6-pp-gcc10-32bit-10.4.0+git2794-150000.1.9.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): cpp10-10.4.0+git2794-150000.1.9.1 cpp10-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-10.4.0+git2794-150000.1.9.1 gcc10-ada-10.4.0+git2794-150000.1.9.1 gcc10-ada-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-c++-10.4.0+git2794-150000.1.9.1 gcc10-c++-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-debugsource-10.4.0+git2794-150000.1.9.1 gcc10-fortran-10.4.0+git2794-150000.1.9.1 gcc10-fortran-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-go-10.4.0+git2794-150000.1.9.1 gcc10-go-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-locale-10.4.0+git2794-150000.1.9.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (x86_64): cross-nvptx-gcc10-10.4.0+git2794-150000.1.9.1 cross-nvptx-gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 cross-nvptx-gcc10-debugsource-10.4.0+git2794-150000.1.9.1 cross-nvptx-newlib10-devel-10.4.0+git2794-150000.1.9.1 gcc10-32bit-10.4.0+git2794-150000.1.9.1 gcc10-ada-32bit-10.4.0+git2794-150000.1.9.1 gcc10-c++-32bit-10.4.0+git2794-150000.1.9.1 gcc10-fortran-32bit-10.4.0+git2794-150000.1.9.1 gcc10-go-32bit-10.4.0+git2794-150000.1.9.1 libstdc++6-devel-gcc10-32bit-10.4.0+git2794-150000.1.9.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): gcc10-info-10.4.0+git2794-150000.1.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-debugsource-10.4.0+git2794-150000.1.9.1 libada10-10.4.0+git2794-150000.1.9.1 libada10-debuginfo-10.4.0+git2794-150000.1.9.1 libgo16-10.4.0+git2794-150000.1.9.1 libgo16-debuginfo-10.4.0+git2794-150000.1.9.1 libstdc++6-devel-gcc10-10.4.0+git2794-150000.1.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libada10-32bit-10.4.0+git2794-150000.1.9.1 libada10-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 libgo16-32bit-10.4.0+git2794-150000.1.9.1 libgo16-32bit-debuginfo-10.4.0+git2794-150000.1.9.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): gcc10-debuginfo-10.4.0+git2794-150000.1.9.1 gcc10-debugsource-10.4.0+git2794-150000.1.9.1 References: https://bugzilla.suse.com/1188076 https://bugzilla.suse.com/1195628

1 0

SUSE-SU-2022:2922-1: important: Security update for libyang
by opensuse-security＠opensuse.org 26 Aug '22

26 Aug '22

SUSE Security Update: Security update for libyang ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2922-1 Rating: important References: #1186377 Cross-References: CVE-2021-28905 CVSS scores: CVE-2021-28905 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28905 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libyang fixes the following issues: - CVE-2021-28905: Fixed a reachable assertion which could be exploited by an attacker to cause a denial of service (bsc#1186377). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2922=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2922=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2922=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-2922=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libyang-cpp-devel-1.0.184-150300.3.3.1 libyang-cpp1-1.0.184-150300.3.3.1 libyang-cpp1-debuginfo-1.0.184-150300.3.3.1 libyang-debuginfo-1.0.184-150300.3.3.1 libyang-debugsource-1.0.184-150300.3.3.1 libyang-devel-1.0.184-150300.3.3.1 libyang-extentions-1.0.184-150300.3.3.1 libyang-extentions-debuginfo-1.0.184-150300.3.3.1 libyang1-1.0.184-150300.3.3.1 libyang1-debuginfo-1.0.184-150300.3.3.1 python3-yang-1.0.184-150300.3.3.1 python3-yang-debuginfo-1.0.184-150300.3.3.1 yang-tools-1.0.184-150300.3.3.1 yang-tools-debuginfo-1.0.184-150300.3.3.1 - openSUSE Leap 15.4 (noarch): libyang-doc-1.0.184-150300.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libyang-cpp-devel-1.0.184-150300.3.3.1 libyang-cpp1-1.0.184-150300.3.3.1 libyang-cpp1-debuginfo-1.0.184-150300.3.3.1 libyang-debuginfo-1.0.184-150300.3.3.1 libyang-debugsource-1.0.184-150300.3.3.1 libyang-devel-1.0.184-150300.3.3.1 libyang-extentions-1.0.184-150300.3.3.1 libyang-extentions-debuginfo-1.0.184-150300.3.3.1 libyang1-1.0.184-150300.3.3.1 libyang1-debuginfo-1.0.184-150300.3.3.1 python3-yang-1.0.184-150300.3.3.1 python3-yang-debuginfo-1.0.184-150300.3.3.1 yang-tools-1.0.184-150300.3.3.1 yang-tools-debuginfo-1.0.184-150300.3.3.1 - openSUSE Leap 15.3 (noarch): libyang-doc-1.0.184-150300.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libyang-debuginfo-1.0.184-150300.3.3.1 libyang-debugsource-1.0.184-150300.3.3.1 libyang-extentions-1.0.184-150300.3.3.1 libyang-extentions-debuginfo-1.0.184-150300.3.3.1 libyang1-1.0.184-150300.3.3.1 libyang1-debuginfo-1.0.184-150300.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libyang-debuginfo-1.0.184-150300.3.3.1 libyang-debugsource-1.0.184-150300.3.3.1 libyang-extentions-1.0.184-150300.3.3.1 libyang-extentions-debuginfo-1.0.184-150300.3.3.1 libyang1-1.0.184-150300.3.3.1 libyang1-debuginfo-1.0.184-150300.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-28905.html https://bugzilla.suse.com/1186377

1 0

SUSE-SU-2022:2923-1: important: Security update for keepalived
by opensuse-security＠opensuse.org 26 Aug '22

26 Aug '22

SUSE Security Update: Security update for keepalived ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2923-1 Rating: important References: #1193115 Cross-References: CVE-2021-44225 CVSS scores: CVE-2021-44225 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-44225 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: SUSE Linux Enterprise High Availability 15-SP1 SUSE Linux Enterprise High Availability 15-SP2 SUSE Linux Enterprise High Availability 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for keepalived fixes the following issues: - CVE-2021-44225: Fix a potential privilege escalation due to insufficient control in the D-Bus policy (bsc#1193115). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2923=1 - SUSE Linux Enterprise High Availability 15-SP3: zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2022-2923=1 - SUSE Linux Enterprise High Availability 15-SP2: zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2022-2923=1 - SUSE Linux Enterprise High Availability 15-SP1: zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2022-2923=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): keepalived-2.0.19-150100.3.6.1 keepalived-debuginfo-2.0.19-150100.3.6.1 keepalived-debugsource-2.0.19-150100.3.6.1 - SUSE Linux Enterprise High Availability 15-SP3 (aarch64 ppc64le s390x x86_64): keepalived-2.0.19-150100.3.6.1 keepalived-debuginfo-2.0.19-150100.3.6.1 keepalived-debugsource-2.0.19-150100.3.6.1 - SUSE Linux Enterprise High Availability 15-SP2 (aarch64 ppc64le s390x x86_64): keepalived-2.0.19-150100.3.6.1 keepalived-debuginfo-2.0.19-150100.3.6.1 keepalived-debugsource-2.0.19-150100.3.6.1 - SUSE Linux Enterprise High Availability 15-SP1 (aarch64 ppc64le s390x x86_64): keepalived-2.0.19-150100.3.6.1 keepalived-debuginfo-2.0.19-150100.3.6.1 keepalived-debugsource-2.0.19-150100.3.6.1 References: https://www.suse.com/security/cve/CVE-2021-44225.html https://bugzilla.suse.com/1193115

1 0

SUSE-RU-2022:2920-1: important: Recommended update for systemd
by maintenance＠opensuse.org 26 Aug '22

26 Aug '22

SUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2920-1 Rating: important References: #1195059 #1201795 PED-944 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for systemd fixes the following issues: - Don't replace /etc/systemd/system/tmp.mount symlink with a dangling one pointing to /usr/lib/systemd/ (bsc#1201795) - Drop or soften some of the deprecation warnings (jsc#PED-944) - Ensure root user can login even if systemd-user-sessions.service is not activated yet (bsc#1195059) - Avoid applying presets to any services shipped by the experimental sub-package, as they aren't enabled by default - analyze: Fix offline check for syscal filter - calendarspec: Fix timer skipping the next elapse - core: Allow command argument to be longer - hwdb: Add AV production controllers to hwdb and add uaccess - hwdb: Allow console users access to rfkill - hwdb: Allow end-users root-less access to TL866 EPROM readers - hwdb: Permit unsetting power/persist for USB devices - hwdb: Tag IR cameras as such - hwdb: Fix parsing issue - hwdb: Make usb match patterns uppercase - hwdb: Update the hardware database - journal-file: Stop using the event loop if it's already shutting down - journal-remote: Disable `--trust` option when gnutls is disabled and check_permission() should not be called - journald: Ensure resources are properly allocated for SIGTERM handling - kernel-install: Ensure modules.builtin.alias.bin is removed when no longer needed - macro: Account for negative values in DECIMAL_STR_WIDTH() - manager: Disallow clone3() function call in seccomp filters - missing-syscall: Define MOVE_MOUNT_T_EMPTY_PATH if missing - pid1,cgroup-show: Prevent failure if cgroup.procs in some subcgroups is not readable - resolve: Fix typo in dns_class_is_pseudo() - sd-event: Improve handling of process events and termination of processes - sd-ipv4acd: Fix ARP packet conflicts occurring when sender hardware is one of the host's interfaces - stdio-bridge: Improve the meaning of the error message - tmpfiles: Check for the correct directory Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2920=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2920=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.12-150400.8.10.1 libsystemd0-debuginfo-249.12-150400.8.10.1 libudev1-249.12-150400.8.10.1 libudev1-debuginfo-249.12-150400.8.10.1 nss-myhostname-249.12-150400.8.10.1 nss-myhostname-debuginfo-249.12-150400.8.10.1 nss-systemd-249.12-150400.8.10.1 nss-systemd-debuginfo-249.12-150400.8.10.1 systemd-249.12-150400.8.10.1 systemd-container-249.12-150400.8.10.1 systemd-container-debuginfo-249.12-150400.8.10.1 systemd-coredump-249.12-150400.8.10.1 systemd-coredump-debuginfo-249.12-150400.8.10.1 systemd-debuginfo-249.12-150400.8.10.1 systemd-debugsource-249.12-150400.8.10.1 systemd-devel-249.12-150400.8.10.1 systemd-doc-249.12-150400.8.10.1 systemd-experimental-249.12-150400.8.10.1 systemd-experimental-debuginfo-249.12-150400.8.10.1 systemd-journal-remote-249.12-150400.8.10.1 systemd-journal-remote-debuginfo-249.12-150400.8.10.1 systemd-network-249.12-150400.8.10.1 systemd-network-debuginfo-249.12-150400.8.10.1 systemd-portable-249.12-150400.8.10.1 systemd-portable-debuginfo-249.12-150400.8.10.1 systemd-sysvinit-249.12-150400.8.10.1 systemd-testsuite-249.12-150400.8.10.1 systemd-testsuite-debuginfo-249.12-150400.8.10.1 udev-249.12-150400.8.10.1 udev-debuginfo-249.12-150400.8.10.1 - openSUSE Leap 15.4 (x86_64): libsystemd0-32bit-249.12-150400.8.10.1 libsystemd0-32bit-debuginfo-249.12-150400.8.10.1 libudev1-32bit-249.12-150400.8.10.1 libudev1-32bit-debuginfo-249.12-150400.8.10.1 nss-myhostname-32bit-249.12-150400.8.10.1 nss-myhostname-32bit-debuginfo-249.12-150400.8.10.1 systemd-32bit-249.12-150400.8.10.1 systemd-32bit-debuginfo-249.12-150400.8.10.1 - openSUSE Leap 15.4 (noarch): systemd-lang-249.12-150400.8.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.12-150400.8.10.1 libsystemd0-debuginfo-249.12-150400.8.10.1 libudev1-249.12-150400.8.10.1 libudev1-debuginfo-249.12-150400.8.10.1 systemd-249.12-150400.8.10.1 systemd-container-249.12-150400.8.10.1 systemd-container-debuginfo-249.12-150400.8.10.1 systemd-coredump-249.12-150400.8.10.1 systemd-coredump-debuginfo-249.12-150400.8.10.1 systemd-debuginfo-249.12-150400.8.10.1 systemd-debugsource-249.12-150400.8.10.1 systemd-devel-249.12-150400.8.10.1 systemd-doc-249.12-150400.8.10.1 systemd-sysvinit-249.12-150400.8.10.1 udev-249.12-150400.8.10.1 udev-debuginfo-249.12-150400.8.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): systemd-lang-249.12-150400.8.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libsystemd0-32bit-249.12-150400.8.10.1 libsystemd0-32bit-debuginfo-249.12-150400.8.10.1 libudev1-32bit-249.12-150400.8.10.1 libudev1-32bit-debuginfo-249.12-150400.8.10.1 systemd-32bit-249.12-150400.8.10.1 systemd-32bit-debuginfo-249.12-150400.8.10.1 References: https://bugzilla.suse.com/1195059 https://bugzilla.suse.com/1201795

1 0

SUSE-RU-2022:2921-1: important: Recommended update for systemd
by maintenance＠opensuse.org 26 Aug '22

26 Aug '22

SUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2921-1 Rating: important References: #1195059 PED-944 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for systemd fixes the following issues: - Drop or soften some of the deprecation warnings (jsc#PED-944) - Ensure root user can login even if systemd-user-sessions.service is not activated yet (bsc#1195059) - tmpfiles: check for the correct directory Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2921=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2921=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2921=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2921=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2921=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nss-mymachines-246.16-150300.7.51.1 nss-mymachines-debuginfo-246.16-150300.7.51.1 nss-resolve-246.16-150300.7.51.1 nss-resolve-debuginfo-246.16-150300.7.51.1 systemd-logger-246.16-150300.7.51.1 - openSUSE Leap 15.4 (x86_64): nss-mymachines-32bit-246.16-150300.7.51.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.51.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.51.1 libsystemd0-debuginfo-246.16-150300.7.51.1 libudev-devel-246.16-150300.7.51.1 libudev1-246.16-150300.7.51.1 libudev1-debuginfo-246.16-150300.7.51.1 nss-myhostname-246.16-150300.7.51.1 nss-myhostname-debuginfo-246.16-150300.7.51.1 nss-mymachines-246.16-150300.7.51.1 nss-mymachines-debuginfo-246.16-150300.7.51.1 nss-resolve-246.16-150300.7.51.1 nss-resolve-debuginfo-246.16-150300.7.51.1 nss-systemd-246.16-150300.7.51.1 nss-systemd-debuginfo-246.16-150300.7.51.1 systemd-246.16-150300.7.51.1 systemd-container-246.16-150300.7.51.1 systemd-container-debuginfo-246.16-150300.7.51.1 systemd-coredump-246.16-150300.7.51.1 systemd-coredump-debuginfo-246.16-150300.7.51.1 systemd-debuginfo-246.16-150300.7.51.1 systemd-debugsource-246.16-150300.7.51.1 systemd-devel-246.16-150300.7.51.1 systemd-doc-246.16-150300.7.51.1 systemd-journal-remote-246.16-150300.7.51.1 systemd-journal-remote-debuginfo-246.16-150300.7.51.1 systemd-logger-246.16-150300.7.51.1 systemd-network-246.16-150300.7.51.1 systemd-network-debuginfo-246.16-150300.7.51.1 systemd-sysvinit-246.16-150300.7.51.1 udev-246.16-150300.7.51.1 udev-debuginfo-246.16-150300.7.51.1 - openSUSE Leap 15.3 (x86_64): libsystemd0-32bit-246.16-150300.7.51.1 libsystemd0-32bit-debuginfo-246.16-150300.7.51.1 libudev-devel-32bit-246.16-150300.7.51.1 libudev1-32bit-246.16-150300.7.51.1 libudev1-32bit-debuginfo-246.16-150300.7.51.1 nss-myhostname-32bit-246.16-150300.7.51.1 nss-myhostname-32bit-debuginfo-246.16-150300.7.51.1 nss-mymachines-32bit-246.16-150300.7.51.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.51.1 systemd-32bit-246.16-150300.7.51.1 systemd-32bit-debuginfo-246.16-150300.7.51.1 - openSUSE Leap 15.3 (noarch): systemd-lang-246.16-150300.7.51.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.51.1 libsystemd0-debuginfo-246.16-150300.7.51.1 libudev-devel-246.16-150300.7.51.1 libudev1-246.16-150300.7.51.1 libudev1-debuginfo-246.16-150300.7.51.1 systemd-246.16-150300.7.51.1 systemd-container-246.16-150300.7.51.1 systemd-container-debuginfo-246.16-150300.7.51.1 systemd-coredump-246.16-150300.7.51.1 systemd-coredump-debuginfo-246.16-150300.7.51.1 systemd-debuginfo-246.16-150300.7.51.1 systemd-debugsource-246.16-150300.7.51.1 systemd-devel-246.16-150300.7.51.1 systemd-doc-246.16-150300.7.51.1 systemd-journal-remote-246.16-150300.7.51.1 systemd-journal-remote-debuginfo-246.16-150300.7.51.1 systemd-sysvinit-246.16-150300.7.51.1 udev-246.16-150300.7.51.1 udev-debuginfo-246.16-150300.7.51.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): systemd-lang-246.16-150300.7.51.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libsystemd0-32bit-246.16-150300.7.51.1 libsystemd0-32bit-debuginfo-246.16-150300.7.51.1 libudev1-32bit-246.16-150300.7.51.1 libudev1-32bit-debuginfo-246.16-150300.7.51.1 systemd-32bit-246.16-150300.7.51.1 systemd-32bit-debuginfo-246.16-150300.7.51.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libsystemd0-246.16-150300.7.51.1 libsystemd0-debuginfo-246.16-150300.7.51.1 libudev1-246.16-150300.7.51.1 libudev1-debuginfo-246.16-150300.7.51.1 systemd-246.16-150300.7.51.1 systemd-container-246.16-150300.7.51.1 systemd-container-debuginfo-246.16-150300.7.51.1 systemd-debuginfo-246.16-150300.7.51.1 systemd-debugsource-246.16-150300.7.51.1 systemd-journal-remote-246.16-150300.7.51.1 systemd-journal-remote-debuginfo-246.16-150300.7.51.1 systemd-sysvinit-246.16-150300.7.51.1 udev-246.16-150300.7.51.1 udev-debuginfo-246.16-150300.7.51.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libsystemd0-246.16-150300.7.51.1 libsystemd0-debuginfo-246.16-150300.7.51.1 libudev1-246.16-150300.7.51.1 libudev1-debuginfo-246.16-150300.7.51.1 systemd-246.16-150300.7.51.1 systemd-container-246.16-150300.7.51.1 systemd-container-debuginfo-246.16-150300.7.51.1 systemd-debuginfo-246.16-150300.7.51.1 systemd-debugsource-246.16-150300.7.51.1 systemd-journal-remote-246.16-150300.7.51.1 systemd-journal-remote-debuginfo-246.16-150300.7.51.1 systemd-sysvinit-246.16-150300.7.51.1 udev-246.16-150300.7.51.1 udev-debuginfo-246.16-150300.7.51.1 References: https://bugzilla.suse.com/1195059

1 0

SUSE-SU-2022:2919-1: important: Security update for gnutls
by opensuse-security＠opensuse.org 26 Aug '22

26 Aug '22

SUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2919-1 Rating: important References: #1190698 #1198979 #1202020 Cross-References: CVE-2022-2509 CVSS scores: CVE-2022-2509 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-2509 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gnutls fixes the following issues: - CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020). Non-security fixes: - FIPS: Check minimum keylength for symmetric key generation [bsc#1190698] - FIPS: Only allows ECDSA signature with valid set of hashes (SHA2 and SHA3) [bsc#1190698] - FIPS: Provides interface for running library self tests on-demand [bsc#1198979] Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2919=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2919=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gnutls-3.7.3-150400.4.10.1 gnutls-debuginfo-3.7.3-150400.4.10.1 gnutls-debugsource-3.7.3-150400.4.10.1 gnutls-guile-3.7.3-150400.4.10.1 gnutls-guile-debuginfo-3.7.3-150400.4.10.1 libgnutls-devel-3.7.3-150400.4.10.1 libgnutls30-3.7.3-150400.4.10.1 libgnutls30-debuginfo-3.7.3-150400.4.10.1 libgnutls30-hmac-3.7.3-150400.4.10.1 libgnutlsxx-devel-3.7.3-150400.4.10.1 libgnutlsxx28-3.7.3-150400.4.10.1 libgnutlsxx28-debuginfo-3.7.3-150400.4.10.1 - openSUSE Leap 15.4 (x86_64): libgnutls-devel-32bit-3.7.3-150400.4.10.1 libgnutls30-32bit-3.7.3-150400.4.10.1 libgnutls30-32bit-debuginfo-3.7.3-150400.4.10.1 libgnutls30-hmac-32bit-3.7.3-150400.4.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): gnutls-3.7.3-150400.4.10.1 gnutls-debuginfo-3.7.3-150400.4.10.1 gnutls-debugsource-3.7.3-150400.4.10.1 libgnutls-devel-3.7.3-150400.4.10.1 libgnutls30-3.7.3-150400.4.10.1 libgnutls30-debuginfo-3.7.3-150400.4.10.1 libgnutls30-hmac-3.7.3-150400.4.10.1 libgnutlsxx-devel-3.7.3-150400.4.10.1 libgnutlsxx28-3.7.3-150400.4.10.1 libgnutlsxx28-debuginfo-3.7.3-150400.4.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libgnutls30-32bit-3.7.3-150400.4.10.1 libgnutls30-32bit-debuginfo-3.7.3-150400.4.10.1 libgnutls30-hmac-32bit-3.7.3-150400.4.10.1 References: https://www.suse.com/security/cve/CVE-2022-2509.html https://bugzilla.suse.com/1190698 https://bugzilla.suse.com/1198979 https://bugzilla.suse.com/1202020

1 0

SUSE-RU-2022:2916-1: critical: Recommended update for aws-efs-utils
by maintenance＠opensuse.org 26 Aug '22

26 Aug '22

SUSE Recommended Update: Recommended update for aws-efs-utils ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2916-1 Rating: critical References: Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15-SP1 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for aws-efs-utils fixes the following issues: - Fix missing binaries from the previous update Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2916=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2916=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-2916=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-2916=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-2916=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2022-2916=1 Package List: - openSUSE Leap 15.4 (noarch): aws-efs-utils-1.31.3-150100.4.5.1 - openSUSE Leap 15.3 (noarch): aws-efs-utils-1.31.3-150100.4.5.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (noarch): aws-efs-utils-1.31.3-150100.4.5.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (noarch): aws-efs-utils-1.31.3-150100.4.5.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch): aws-efs-utils-1.31.3-150100.4.5.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1 (noarch): aws-efs-utils-1.31.3-150100.4.5.1 References:

1 0

SUSE-SU-2022:2908-1: important: Security update for python-lxml
by opensuse-security＠opensuse.org 26 Aug '22

26 Aug '22

SUSE Security Update: Security update for python-lxml ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2908-1 Rating: important References: #1201253 Cross-References: CVE-2022-2309 CVSS scores: CVE-2022-2309 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-2309 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-lxml fixes the following issues: - CVE-2022-2309: Fixed NULL pointer dereference due to state leak between parser runs (bsc#1201253). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2908=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2908=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2908=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2908=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2908=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2908=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2908=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2908=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-2908=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2908=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2908=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2908=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2908=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2908=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - openSUSE Leap 15.4 (noarch): python3-lxml-doc-4.7.1-150200.3.10.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Manager Proxy 4.1 (x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): python-lxml-debuginfo-4.7.1-150200.3.10.1 python-lxml-debugsource-4.7.1-150200.3.10.1 python2-lxml-4.7.1-150200.3.10.1 python2-lxml-debuginfo-4.7.1-150200.3.10.1 python2-lxml-devel-4.7.1-150200.3.10.1 python3-lxml-4.7.1-150200.3.10.1 python3-lxml-debuginfo-4.7.1-150200.3.10.1 python3-lxml-devel-4.7.1-150200.3.10.1 References: https://www.suse.com/security/cve/CVE-2022-2309.html https://bugzilla.suse.com/1201253

1 0