September 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2022:10117-1: important: Security update for opera
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10117-1 Rating: important References: Cross-References: CVE-2022-3075 Affected Products: openSUSE Leap 15.3:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opera fixes the following issues: Update to 90.0.4480.84 - DNA-101690 Cherry-pick fix for CVE-2022-3075 from chromium Update to 90.0.4480.80 - DNA-99188 Tab Tooltip doesn't disappear - DNA-100664 Shopping corner widget - DNA-100843 Options to install and update VPN Pro app, when it's not installed - DNA-100901 Disappearing "X" when closing tabs. - DNA-101093 Changing News section is not working - DNA-101246 Use long tail list for suggesting instead of current Speed Dial Suggestions - DNA-101278 PDF don't work on Opera with CN location - DNA-101312 Allow changing logged in user with BrowserAPI - DNA-101315 Can not connect to free VPN in private window - DNA-101411 [Linux] Clicking VpnPopup Settings to 'vpnWithDisclaimer' leads to black popup - DNA-101422 Crash at void content::NavigationControllerImpl:: NavigateToExistingPendingEntry(content::ReloadType, int, bool) - DNA-101429 News loads for Global-EN language by default - DNA-101482 Crash at ProfileKey::GetProtoDatabaseProvider() - DNA-101485 Crash at base::SequencedTaskRunnerHandle::Get() via extensions::OperaTouchPrivateGetImageFunction::PerformGetImage - DNA-101524 [Mac] Tab should be highlighted again after dismissing context menu - DNA-101549 Crash at views::View::IsMouseHovered() Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3:NonFree: zypper in -t patch openSUSE-2022-10117=1 Package List: - openSUSE Leap 15.3:NonFree (x86_64): opera-90.0.4480.84-lp153.2.60.1 References: https://www.suse.com/security/cve/CVE-2022-3075.html

1 0

SUSE-SU-2022:1064-2: important: Security update for python2-numpy
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for python2-numpy ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1064-2 Rating: important References: #1193907 #1193911 #1193913 Cross-References: CVE-2021-33430 CVE-2021-41495 CVE-2021-41496 CVSS scores: CVE-2021-33430 (NVD) : 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33430 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-41495 (NVD) : 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-41495 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-41496 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-41496 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python2-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907). - CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1064=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1064=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1064=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1064=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1064=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1064=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1064=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1064=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1064=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): python-numpy_1_16_5-gnu-hpc-debugsource-1.16.5-150200.3.5.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 - SUSE Manager Proxy 4.1 (x86_64): python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): python-numpy_1_16_5-gnu-hpc-debugsource-1.16.5-150200.3.5.1 python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 python2-numpy-gnu-hpc-1.16.5-150200.3.5.1 python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-debuginfo-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): python-numpy_1_16_5-gnu-hpc-debugsource-1.16.5-150200.3.5.1 python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 python2-numpy-gnu-hpc-1.16.5-150200.3.5.1 python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-debuginfo-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 References: https://www.suse.com/security/cve/CVE-2021-33430.html https://www.suse.com/security/cve/CVE-2021-41495.html https://www.suse.com/security/cve/CVE-2021-41496.html https://bugzilla.suse.com/1193907 https://bugzilla.suse.com/1193911 https://bugzilla.suse.com/1193913

1 0

SUSE-SU-2022:3259-1: important: Security update for rubygem-kramdown
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for rubygem-kramdown ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3259-1 Rating: important References: #1174297 Cross-References: CVE-2020-14001 CVSS scores: CVE-2020-14001 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-14001 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L Affected Products: SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15-SP1 SUSE Linux Enterprise High Availability 15-SP2 SUSE Linux Enterprise High Availability 15-SP3 SUSE Linux Enterprise High Availability 15-SP4 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-kramdown fixes the following issues: - CVE-2020-14001: Fixed processing template options inside documents allowing unintended read access or embedded Ruby code execution (bsc#1174297). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3259=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3259=1 - SUSE Linux Enterprise High Availability 15-SP4: zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2022-3259=1 - SUSE Linux Enterprise High Availability 15-SP3: zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2022-3259=1 - SUSE Linux Enterprise High Availability 15-SP2: zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2022-3259=1 - SUSE Linux Enterprise High Availability 15-SP1: zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2022-3259=1 - SUSE Linux Enterprise High Availability 15: zypper in -t patch SUSE-SLE-Product-HA-15-2022-3259=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1 ruby2.5-rubygem-kramdown-doc-1.15.0-150000.3.3.1 ruby2.5-rubygem-kramdown-testsuite-1.15.0-150000.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1 ruby2.5-rubygem-kramdown-doc-1.15.0-150000.3.3.1 ruby2.5-rubygem-kramdown-testsuite-1.15.0-150000.3.3.1 - SUSE Linux Enterprise High Availability 15-SP4 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1 - SUSE Linux Enterprise High Availability 15-SP3 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1 - SUSE Linux Enterprise High Availability 15-SP2 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1 - SUSE Linux Enterprise High Availability 15-SP1 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1 - SUSE Linux Enterprise High Availability 15 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-14001.html https://bugzilla.suse.com/1174297

1 0

SUSE-RU-2022:3258-1: moderate: Recommended update for sca-appliance-broker
by maintenance＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Recommended Update: Recommended update for sca-appliance-broker ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3258-1 Rating: moderate References: #1201011 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sca-appliance-broker fixes the following issues: - Update setup-sca checks for php8 (bsc#1201011) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3258=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3258=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3258=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-3258=1 Package List: - openSUSE Leap 15.4 (noarch): sca-appliance-broker-1.3.2-150300.3.3.1 - openSUSE Leap 15.3 (noarch): sca-appliance-broker-1.3.2-150300.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): sca-appliance-broker-1.3.2-150300.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (noarch): sca-appliance-broker-1.3.2-150300.3.3.1 References: https://bugzilla.suse.com/1201011

1 0

SUSE-RU-2022:3254-1: moderate: Recommended update for inkscape
by maintenance＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Recommended Update: Recommended update for inkscape ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3254-1 Rating: moderate References: #1200369 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for inkscape fixes the following issues: - Fix rendering of multi-line text (bsc#1200369) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3254=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-3254=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-3254=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): inkscape-1.0.1-150400.9.3.2 inkscape-debuginfo-1.0.1-150400.9.3.2 inkscape-debugsource-1.0.1-150400.9.3.2 inkscape-extensions-extra-1.0.1-150400.9.3.2 inkscape-extensions-fig-1.0.1-150400.9.3.2 inkscape-extensions-gimp-1.0.1-150400.9.3.2 inkscape-extensions-scribus-1.0.1-150400.9.3.2 - openSUSE Leap 15.4 (noarch): inkscape-lang-1.0.1-150400.9.3.2 - SUSE Linux Enterprise Workstation Extension 15-SP4 (noarch): inkscape-lang-1.0.1-150400.9.3.2 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): inkscape-1.0.1-150400.9.3.2 inkscape-debuginfo-1.0.1-150400.9.3.2 inkscape-debugsource-1.0.1-150400.9.3.2 inkscape-extensions-extra-1.0.1-150400.9.3.2 inkscape-extensions-fig-1.0.1-150400.9.3.2 inkscape-extensions-gimp-1.0.1-150400.9.3.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): inkscape-1.0.1-150400.9.3.2 inkscape-debuginfo-1.0.1-150400.9.3.2 inkscape-debugsource-1.0.1-150400.9.3.2 inkscape-extensions-extra-1.0.1-150400.9.3.2 inkscape-extensions-fig-1.0.1-150400.9.3.2 inkscape-extensions-gimp-1.0.1-150400.9.3.2 inkscape-extensions-scribus-1.0.1-150400.9.3.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (noarch): inkscape-lang-1.0.1-150400.9.3.2 References: https://bugzilla.suse.com/1200369

1 0

SUSE-RU-2022:3255-1: moderate: Recommended update for pulseaudio
by maintenance＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Recommended Update: Recommended update for pulseaudio ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3255-1 Rating: moderate References: #1189778 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pulseaudio fixes the following issues: - Drop SDL_AUDIODRIVER override, as SDL already prefers PA as default; this also fixes the recent breakage with SDL2 (bsc#1189778) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3255=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3255=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-3255=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-3255=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3255=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3255=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): pulseaudio-esound-compat-14.2-150300.6.3.1 pulseaudio-module-gconf-14.2-150300.6.3.1 pulseaudio-module-gconf-debuginfo-14.2-150300.6.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpulse-devel-14.2-150300.6.3.1 libpulse-mainloop-glib0-14.2-150300.6.3.1 libpulse-mainloop-glib0-debuginfo-14.2-150300.6.3.1 libpulse0-14.2-150300.6.3.1 libpulse0-debuginfo-14.2-150300.6.3.1 pulseaudio-14.2-150300.6.3.1 pulseaudio-bash-completion-14.2-150300.6.3.1 pulseaudio-debuginfo-14.2-150300.6.3.1 pulseaudio-debugsource-14.2-150300.6.3.1 pulseaudio-esound-compat-14.2-150300.6.3.1 pulseaudio-gdm-hooks-14.2-150300.6.3.1 pulseaudio-module-bluetooth-14.2-150300.6.3.1 pulseaudio-module-bluetooth-debuginfo-14.2-150300.6.3.1 pulseaudio-module-gconf-14.2-150300.6.3.1 pulseaudio-module-gconf-debuginfo-14.2-150300.6.3.1 pulseaudio-module-gsettings-14.2-150300.6.3.1 pulseaudio-module-gsettings-debuginfo-14.2-150300.6.3.1 pulseaudio-module-jack-14.2-150300.6.3.1 pulseaudio-module-jack-debuginfo-14.2-150300.6.3.1 pulseaudio-module-lirc-14.2-150300.6.3.1 pulseaudio-module-lirc-debuginfo-14.2-150300.6.3.1 pulseaudio-module-x11-14.2-150300.6.3.1 pulseaudio-module-x11-debuginfo-14.2-150300.6.3.1 pulseaudio-module-zeroconf-14.2-150300.6.3.1 pulseaudio-module-zeroconf-debuginfo-14.2-150300.6.3.1 pulseaudio-system-wide-14.2-150300.6.3.1 pulseaudio-utils-14.2-150300.6.3.1 pulseaudio-utils-debuginfo-14.2-150300.6.3.1 pulseaudio-zsh-completion-14.2-150300.6.3.1 - openSUSE Leap 15.3 (noarch): pulseaudio-lang-14.2-150300.6.3.1 - openSUSE Leap 15.3 (x86_64): libpulse-devel-32bit-14.2-150300.6.3.1 libpulse-mainloop-glib0-32bit-14.2-150300.6.3.1 libpulse-mainloop-glib0-32bit-debuginfo-14.2-150300.6.3.1 libpulse0-32bit-14.2-150300.6.3.1 libpulse0-32bit-debuginfo-14.2-150300.6.3.1 pulseaudio-utils-32bit-14.2-150300.6.3.1 pulseaudio-utils-32bit-debuginfo-14.2-150300.6.3.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): pulseaudio-debuginfo-14.2-150300.6.3.1 pulseaudio-debugsource-14.2-150300.6.3.1 pulseaudio-module-bluetooth-14.2-150300.6.3.1 pulseaudio-module-bluetooth-debuginfo-14.2-150300.6.3.1 pulseaudio-module-lirc-14.2-150300.6.3.1 pulseaudio-module-lirc-debuginfo-14.2-150300.6.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (x86_64): libpulse0-32bit-14.2-150300.6.3.1 libpulse0-32bit-debuginfo-14.2-150300.6.3.1 pulseaudio-debugsource-14.2-150300.6.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): pulseaudio-14.2-150300.6.3.1 pulseaudio-bash-completion-14.2-150300.6.3.1 pulseaudio-debuginfo-14.2-150300.6.3.1 pulseaudio-debugsource-14.2-150300.6.3.1 pulseaudio-esound-compat-14.2-150300.6.3.1 pulseaudio-gdm-hooks-14.2-150300.6.3.1 pulseaudio-module-gconf-14.2-150300.6.3.1 pulseaudio-module-gconf-debuginfo-14.2-150300.6.3.1 pulseaudio-module-gsettings-14.2-150300.6.3.1 pulseaudio-module-gsettings-debuginfo-14.2-150300.6.3.1 pulseaudio-module-x11-14.2-150300.6.3.1 pulseaudio-module-x11-debuginfo-14.2-150300.6.3.1 pulseaudio-module-zeroconf-14.2-150300.6.3.1 pulseaudio-module-zeroconf-debuginfo-14.2-150300.6.3.1 pulseaudio-utils-14.2-150300.6.3.1 pulseaudio-utils-debuginfo-14.2-150300.6.3.1 pulseaudio-zsh-completion-14.2-150300.6.3.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (noarch): pulseaudio-lang-14.2-150300.6.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libpulse-devel-14.2-150300.6.3.1 libpulse-mainloop-glib0-14.2-150300.6.3.1 libpulse-mainloop-glib0-debuginfo-14.2-150300.6.3.1 libpulse0-14.2-150300.6.3.1 libpulse0-debuginfo-14.2-150300.6.3.1 pulseaudio-debuginfo-14.2-150300.6.3.1 pulseaudio-debugsource-14.2-150300.6.3.1 References: https://bugzilla.suse.com/1189778

1 0

SUSE-SU-2022:3252-1: moderate: Security update for freetype2
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for freetype2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3252-1 Rating: moderate References: #1198823 #1198830 #1198832 Cross-References: CVE-2022-27404 CVE-2022-27405 CVE-2022-27406 CVSS scores: CVE-2022-27404 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-27404 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2022-27405 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27405 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-27406 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27406 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for freetype2 fixes the following issues: - CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830). - CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832). - CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823). Non-security fixes: - Updated to version 2.10.4 Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3252=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3252=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3252=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3252=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3252=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3252=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3252=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3252=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3252=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): freetype2-debugsource-2.10.4-150000.4.12.1 libfreetype6-2.10.4-150000.4.12.1 libfreetype6-debuginfo-2.10.4-150000.4.12.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): freetype2-debugsource-2.10.4-150000.4.12.1 freetype2-devel-2.10.4-150000.4.12.1 ft2demos-2.10.4-150000.4.12.1 ftbench-2.10.4-150000.4.12.1 ftdiff-2.10.4-150000.4.12.1 ftdump-2.10.4-150000.4.12.1 ftgamma-2.10.4-150000.4.12.1 ftgrid-2.10.4-150000.4.12.1 ftinspect-2.10.4-150000.4.12.1 ftlint-2.10.4-150000.4.12.1 ftmulti-2.10.4-150000.4.12.1 ftstring-2.10.4-150000.4.12.1 ftvalid-2.10.4-150000.4.12.1 ftview-2.10.4-150000.4.12.1 libfreetype6-2.10.4-150000.4.12.1 libfreetype6-debuginfo-2.10.4-150000.4.12.1 - openSUSE Leap 15.4 (x86_64): freetype2-devel-32bit-2.10.4-150000.4.12.1 libfreetype6-32bit-2.10.4-150000.4.12.1 libfreetype6-32bit-debuginfo-2.10.4-150000.4.12.1 - openSUSE Leap 15.4 (noarch): freetype2-profile-tti35-2.10.4-150000.4.12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): freetype2-debugsource-2.10.4-150000.4.12.1 freetype2-devel-2.10.4-150000.4.12.1 ft2demos-2.10.4-150000.4.12.1 ftbench-2.10.4-150000.4.12.1 ftdiff-2.10.4-150000.4.12.1 ftdump-2.10.4-150000.4.12.1 ftgamma-2.10.4-150000.4.12.1 ftgrid-2.10.4-150000.4.12.1 ftinspect-2.10.4-150000.4.12.1 ftlint-2.10.4-150000.4.12.1 ftmulti-2.10.4-150000.4.12.1 ftstring-2.10.4-150000.4.12.1 ftvalid-2.10.4-150000.4.12.1 ftview-2.10.4-150000.4.12.1 libfreetype6-2.10.4-150000.4.12.1 libfreetype6-debuginfo-2.10.4-150000.4.12.1 - openSUSE Leap 15.3 (x86_64): freetype2-devel-32bit-2.10.4-150000.4.12.1 libfreetype6-32bit-2.10.4-150000.4.12.1 libfreetype6-32bit-debuginfo-2.10.4-150000.4.12.1 - openSUSE Leap 15.3 (noarch): freetype2-profile-tti35-2.10.4-150000.4.12.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): ftdump-2.10.4-150000.4.12.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): ftdump-2.10.4-150000.4.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): freetype2-debugsource-2.10.4-150000.4.12.1 freetype2-devel-2.10.4-150000.4.12.1 libfreetype6-2.10.4-150000.4.12.1 libfreetype6-debuginfo-2.10.4-150000.4.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libfreetype6-32bit-2.10.4-150000.4.12.1 libfreetype6-32bit-debuginfo-2.10.4-150000.4.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): freetype2-debugsource-2.10.4-150000.4.12.1 freetype2-devel-2.10.4-150000.4.12.1 libfreetype6-2.10.4-150000.4.12.1 libfreetype6-debuginfo-2.10.4-150000.4.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libfreetype6-32bit-2.10.4-150000.4.12.1 libfreetype6-32bit-debuginfo-2.10.4-150000.4.12.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): freetype2-debugsource-2.10.4-150000.4.12.1 libfreetype6-2.10.4-150000.4.12.1 libfreetype6-debuginfo-2.10.4-150000.4.12.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): freetype2-debugsource-2.10.4-150000.4.12.1 libfreetype6-2.10.4-150000.4.12.1 libfreetype6-debuginfo-2.10.4-150000.4.12.1 References: https://www.suse.com/security/cve/CVE-2022-27404.html https://www.suse.com/security/cve/CVE-2022-27405.html https://www.suse.com/security/cve/CVE-2022-27406.html https://bugzilla.suse.com/1198823 https://bugzilla.suse.com/1198830 https://bugzilla.suse.com/1198832

1 0

SUSE-SU-2022:3251-1: moderate: Security update for nodejs16
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for nodejs16 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3251-1 Rating: moderate References: #1200303 #1200517 #1201710 #1202382 #1202383 Cross-References: CVE-2022-29244 CVE-2022-31150 CVE-2022-35948 CVE-2022-35949 CVSS scores: CVE-2022-29244 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-29244 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-31150 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2022-31150 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-35948 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-35948 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-35949 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-35949 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Web Scripting 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for nodejs16 fixes the following issues: - CVE-2022-35949: Fixed SSRF when an application takes in user input into the path/pathname option of undici.request (bsc#1202382). - CVE-2022-35948: Fixed CRLF injection via Content-Type (bsc#1202383). - CVE-2022-29244: Fixed npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace (bsc#1200517). - CVE-2022-31150: Fixed CRLF injection in node-undici (bsc#1201710). Bugfixes: - Enable crypto-policies for SLE15 SP4+ and TW (bsc#1200303) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3251=1 - SUSE Linux Enterprise Module for Web Scripting 15-SP3: zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP3-2022-3251=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs16-16.17.0-150300.7.9.1 nodejs16-debuginfo-16.17.0-150300.7.9.1 nodejs16-debugsource-16.17.0-150300.7.9.1 nodejs16-devel-16.17.0-150300.7.9.1 npm16-16.17.0-150300.7.9.1 - openSUSE Leap 15.3 (noarch): nodejs16-docs-16.17.0-150300.7.9.1 - SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64): nodejs16-16.17.0-150300.7.9.1 nodejs16-debuginfo-16.17.0-150300.7.9.1 nodejs16-debugsource-16.17.0-150300.7.9.1 nodejs16-devel-16.17.0-150300.7.9.1 npm16-16.17.0-150300.7.9.1 - SUSE Linux Enterprise Module for Web Scripting 15-SP3 (noarch): nodejs16-docs-16.17.0-150300.7.9.1 References: https://www.suse.com/security/cve/CVE-2022-29244.html https://www.suse.com/security/cve/CVE-2022-31150.html https://www.suse.com/security/cve/CVE-2022-35948.html https://www.suse.com/security/cve/CVE-2022-35949.html https://bugzilla.suse.com/1200303 https://bugzilla.suse.com/1200517 https://bugzilla.suse.com/1201710 https://bugzilla.suse.com/1202382 https://bugzilla.suse.com/1202383

1 0

SUSE-SU-2022:3249-1: important: Security update for clamav
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for clamav ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3249-1 Rating: important References: #1202986 Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for clamav fixes the following issues: clamav was updated to 0.103.7 (bsc#1202986) * Upgrade the vendored UnRAR library to version 6.1.7. * Fix logical signature "Intermediates" feature. * Relax constraints on slightly malformed zip archives that contain overlapping file entries. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3249=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3249=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3249=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3249=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3249=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3249=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3249=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-3249=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3249=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3249=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3249=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3249=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-3249=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3249=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3249=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3249=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3249=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3249=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3249=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3249=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3249=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3249=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3249=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Manager Proxy 4.1 (x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 - SUSE CaaS Platform 4.0 (x86_64): clamav-0.103.7-150000.3.41.1 clamav-debuginfo-0.103.7-150000.3.41.1 clamav-debugsource-0.103.7-150000.3.41.1 clamav-devel-0.103.7-150000.3.41.1 libclamav9-0.103.7-150000.3.41.1 libclamav9-debuginfo-0.103.7-150000.3.41.1 libfreshclam2-0.103.7-150000.3.41.1 libfreshclam2-debuginfo-0.103.7-150000.3.41.1 References: https://bugzilla.suse.com/1202986

1 0

SUSE-SU-2022:3247-1: important: Security update for bluez
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for bluez ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3247-1 Rating: important References: #1194704 Cross-References: CVE-2022-0204 CVSS scores: CVE-2022-0204 (NVD) : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-0204 (SUSE): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bluez fixes the following issues: - CVE-2022-0204: Fixed check if the prepare writes would append more than the allowed maximum attribute length (bsc#1194704). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3247=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-3247=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3247=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3247=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): bluez-5.62-150400.4.5.1 bluez-cups-5.62-150400.4.5.1 bluez-cups-debuginfo-5.62-150400.4.5.1 bluez-debuginfo-5.62-150400.4.5.1 bluez-debugsource-5.62-150400.4.5.1 bluez-deprecated-5.62-150400.4.5.1 bluez-deprecated-debuginfo-5.62-150400.4.5.1 bluez-devel-5.62-150400.4.5.1 bluez-test-5.62-150400.4.5.1 bluez-test-debuginfo-5.62-150400.4.5.1 libbluetooth3-5.62-150400.4.5.1 libbluetooth3-debuginfo-5.62-150400.4.5.1 - openSUSE Leap 15.4 (noarch): bluez-auto-enable-devices-5.62-150400.4.5.1 - openSUSE Leap 15.4 (x86_64): bluez-devel-32bit-5.62-150400.4.5.1 libbluetooth3-32bit-5.62-150400.4.5.1 libbluetooth3-32bit-debuginfo-5.62-150400.4.5.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): bluez-cups-5.62-150400.4.5.1 bluez-cups-debuginfo-5.62-150400.4.5.1 bluez-debuginfo-5.62-150400.4.5.1 bluez-debugsource-5.62-150400.4.5.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): bluez-debuginfo-5.62-150400.4.5.1 bluez-debugsource-5.62-150400.4.5.1 bluez-devel-5.62-150400.4.5.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): bluez-5.62-150400.4.5.1 bluez-debuginfo-5.62-150400.4.5.1 bluez-debugsource-5.62-150400.4.5.1 bluez-deprecated-5.62-150400.4.5.1 bluez-deprecated-debuginfo-5.62-150400.4.5.1 libbluetooth3-5.62-150400.4.5.1 libbluetooth3-debuginfo-5.62-150400.4.5.1 References: https://www.suse.com/security/cve/CVE-2022-0204.html https://bugzilla.suse.com/1194704

1 0