September 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:3481-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 30 Sep '22

30 Sep '22

SUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3481-1 Rating: moderate References: #1197084 #1202608 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libvirt fixes the following issues: - spec: Include aarch64 in the list of architectures that 'Require' dmidecode (bsc#1202608) - qemu: Support memory allocation threads (bsc#1197084) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3481=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3481=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3481=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3481=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-3481=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3481=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3481=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3481=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): libvirt-client-7.1.0-150300.6.35.2 libvirt-client-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-7.1.0-150300.6.35.2 libvirt-daemon-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-rbd-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-rbd-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-qemu-7.1.0-150300.6.35.2 libvirt-debugsource-7.1.0-150300.6.35.2 libvirt-libs-7.1.0-150300.6.35.2 libvirt-libs-debuginfo-7.1.0-150300.6.35.2 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libvirt-admin-7.1.0-150300.6.35.2 libvirt-admin-debuginfo-7.1.0-150300.6.35.2 - openSUSE Leap 15.4 (noarch): libvirt-bash-completion-7.1.0-150300.6.35.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirt-7.1.0-150300.6.35.2 libvirt-admin-7.1.0-150300.6.35.2 libvirt-admin-debuginfo-7.1.0-150300.6.35.2 libvirt-client-7.1.0-150300.6.35.2 libvirt-client-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-7.1.0-150300.6.35.2 libvirt-daemon-config-network-7.1.0-150300.6.35.2 libvirt-daemon-config-nwfilter-7.1.0-150300.6.35.2 libvirt-daemon-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-lxc-7.1.0-150300.6.35.2 libvirt-daemon-driver-lxc-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-gluster-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-gluster-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-hooks-7.1.0-150300.6.35.2 libvirt-daemon-lxc-7.1.0-150300.6.35.2 libvirt-daemon-qemu-7.1.0-150300.6.35.2 libvirt-debugsource-7.1.0-150300.6.35.2 libvirt-devel-7.1.0-150300.6.35.2 libvirt-libs-7.1.0-150300.6.35.2 libvirt-libs-debuginfo-7.1.0-150300.6.35.2 libvirt-lock-sanlock-7.1.0-150300.6.35.2 libvirt-lock-sanlock-debuginfo-7.1.0-150300.6.35.2 libvirt-nss-7.1.0-150300.6.35.2 libvirt-nss-debuginfo-7.1.0-150300.6.35.2 wireshark-plugin-libvirt-7.1.0-150300.6.35.2 wireshark-plugin-libvirt-debuginfo-7.1.0-150300.6.35.2 - openSUSE Leap 15.3 (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-rbd-debuginfo-7.1.0-150300.6.35.2 - openSUSE Leap 15.3 (x86_64): libvirt-client-32bit-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-libxl-7.1.0-150300.6.35.2 libvirt-daemon-driver-libxl-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-xen-7.1.0-150300.6.35.2 libvirt-devel-32bit-7.1.0-150300.6.35.2 - openSUSE Leap 15.3 (noarch): libvirt-bash-completion-7.1.0-150300.6.35.2 libvirt-doc-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libvirt-debugsource-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): libvirt-bash-completion-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libvirt-7.1.0-150300.6.35.2 libvirt-admin-7.1.0-150300.6.35.2 libvirt-admin-debuginfo-7.1.0-150300.6.35.2 libvirt-client-7.1.0-150300.6.35.2 libvirt-client-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-7.1.0-150300.6.35.2 libvirt-daemon-config-network-7.1.0-150300.6.35.2 libvirt-daemon-config-nwfilter-7.1.0-150300.6.35.2 libvirt-daemon-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-lxc-7.1.0-150300.6.35.2 libvirt-daemon-driver-lxc-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-hooks-7.1.0-150300.6.35.2 libvirt-daemon-lxc-7.1.0-150300.6.35.2 libvirt-daemon-qemu-7.1.0-150300.6.35.2 libvirt-debugsource-7.1.0-150300.6.35.2 libvirt-devel-7.1.0-150300.6.35.2 libvirt-lock-sanlock-7.1.0-150300.6.35.2 libvirt-lock-sanlock-debuginfo-7.1.0-150300.6.35.2 libvirt-nss-7.1.0-150300.6.35.2 libvirt-nss-debuginfo-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-rbd-debuginfo-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (noarch): libvirt-bash-completion-7.1.0-150300.6.35.2 libvirt-doc-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (x86_64): libvirt-daemon-driver-libxl-7.1.0-150300.6.35.2 libvirt-daemon-driver-libxl-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-xen-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libvirt-debugsource-7.1.0-150300.6.35.2 libvirt-libs-7.1.0-150300.6.35.2 libvirt-libs-debuginfo-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libvirt-client-7.1.0-150300.6.35.2 libvirt-client-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-7.1.0-150300.6.35.2 libvirt-daemon-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-qemu-7.1.0-150300.6.35.2 libvirt-debugsource-7.1.0-150300.6.35.2 libvirt-libs-7.1.0-150300.6.35.2 libvirt-libs-debuginfo-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Micro 5.2 (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-rbd-debuginfo-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libvirt-daemon-7.1.0-150300.6.35.2 libvirt-daemon-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-7.1.0-150300.6.35.2 libvirt-daemon-driver-interface-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-7.1.0-150300.6.35.2 libvirt-daemon-driver-network-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-7.1.0-150300.6.35.2 libvirt-daemon-driver-nodedev-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-7.1.0-150300.6.35.2 libvirt-daemon-driver-nwfilter-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-7.1.0-150300.6.35.2 libvirt-daemon-driver-qemu-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-7.1.0-150300.6.35.2 libvirt-daemon-driver-secret-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-core-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-disk-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-iscsi-direct-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-logical-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-mpath-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-scsi-debuginfo-7.1.0-150300.6.35.2 libvirt-daemon-qemu-7.1.0-150300.6.35.2 libvirt-debugsource-7.1.0-150300.6.35.2 libvirt-libs-7.1.0-150300.6.35.2 libvirt-libs-debuginfo-7.1.0-150300.6.35.2 - SUSE Linux Enterprise Micro 5.1 (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-7.1.0-150300.6.35.2 libvirt-daemon-driver-storage-rbd-debuginfo-7.1.0-150300.6.35.2 References: https://bugzilla.suse.com/1197084 https://bugzilla.suse.com/1202608

1 0

openSUSE-SU-2022:10134-1: critical: Security update for connman
by opensuse-security＠opensuse.org 30 Sep '22

30 Sep '22

openSUSE Security Update: Security update for connman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10134-1 Rating: critical References: #1200189 #1200190 Cross-References: CVE-2022-32292 CVE-2022-32293 CVSS scores: CVE-2022-32292 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-32293 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for connman fixes the following issues: - CVE-2022-32292: Add refcounting to wispr portal detection to avoid heap overflow (boo#1200190) - CVE-2022-32292: Fix OOB write in received_data (boo#1200189) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10134=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): connman-1.41-bp153.2.6.1 connman-client-1.41-bp153.2.6.1 connman-devel-1.41-bp153.2.6.1 connman-doc-1.41-bp153.2.6.1 connman-nmcompat-1.41-bp153.2.6.1 connman-plugin-iospm-1.41-bp153.2.6.1 connman-plugin-l2tp-1.41-bp153.2.6.1 connman-plugin-openvpn-1.41-bp153.2.6.1 connman-plugin-polkit-1.41-bp153.2.6.1 connman-plugin-pptp-1.41-bp153.2.6.1 connman-plugin-wireguard-1.41-bp153.2.6.1 connman-test-1.41-bp153.2.6.1 - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): connman-plugin-vpnc-1.41-bp153.2.6.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 s390x x86_64): connman-plugin-hh2serial-gps-1.41-bp153.2.6.1 connman-plugin-tist-1.41-bp153.2.6.1 References: https://www.suse.com/security/cve/CVE-2022-32292.html https://www.suse.com/security/cve/CVE-2022-32293.html https://bugzilla.suse.com/1200189 https://bugzilla.suse.com/1200190

1 0

openSUSE-RU-2022:10133-1: moderate: Recommended update for kdialog
by maintenance＠opensuse.org 30 Sep '22

30 Sep '22

openSUSE Recommended Update: Recommended update for kdialog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10133-1 Rating: moderate References: Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kdialog fixes the following issues: kdialog was updated to 17.04.2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-10133=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): kdialog-lang-17.04.2-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kdialog-17.04.2-2.1 References:

1 0

SUSE-SU-2022:3473-1: important: Security update for python310
by opensuse-security＠opensuse.org 30 Sep '22

30 Sep '22

SUSE Security Update: Security update for python310 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3473-1 Rating: important References: #1202624 #1203125 Cross-References: CVE-2020-10735 CVE-2021-28861 CVSS scores: CVE-2020-10735 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-10735 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28861 (NVD) : 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-28861 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Python3 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python310 fixes the following issues: Updated to version 3.10.7: - CVE-2020-10735: Fixed DoS due to missing limit of amount of digits when converting text to int (bsc#1203125). - CVE-2021-28861: Fixed an open redirect in the http server when an URI path starts with // (bsc#1202624). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3473=1 - SUSE Linux Enterprise Module for Python3 15-SP4: zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2022-3473=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpython3_10-1_0-3.10.7-150400.4.10.1 libpython3_10-1_0-debuginfo-3.10.7-150400.4.10.1 python310-3.10.7-150400.4.10.1 python310-base-3.10.7-150400.4.10.1 python310-base-debuginfo-3.10.7-150400.4.10.1 python310-core-debugsource-3.10.7-150400.4.10.1 python310-curses-3.10.7-150400.4.10.1 python310-curses-debuginfo-3.10.7-150400.4.10.1 python310-dbm-3.10.7-150400.4.10.1 python310-dbm-debuginfo-3.10.7-150400.4.10.1 python310-debuginfo-3.10.7-150400.4.10.1 python310-debugsource-3.10.7-150400.4.10.1 python310-devel-3.10.7-150400.4.10.1 python310-doc-3.10.7-150400.4.10.1 python310-doc-devhelp-3.10.7-150400.4.10.1 python310-idle-3.10.7-150400.4.10.1 python310-testsuite-3.10.7-150400.4.10.1 python310-testsuite-debuginfo-3.10.7-150400.4.10.1 python310-tk-3.10.7-150400.4.10.1 python310-tk-debuginfo-3.10.7-150400.4.10.1 python310-tools-3.10.7-150400.4.10.1 - openSUSE Leap 15.4 (x86_64): libpython3_10-1_0-32bit-3.10.7-150400.4.10.1 libpython3_10-1_0-32bit-debuginfo-3.10.7-150400.4.10.1 python310-32bit-3.10.7-150400.4.10.1 python310-32bit-debuginfo-3.10.7-150400.4.10.1 python310-base-32bit-3.10.7-150400.4.10.1 python310-base-32bit-debuginfo-3.10.7-150400.4.10.1 - SUSE Linux Enterprise Module for Python3 15-SP4 (aarch64 ppc64le s390x x86_64): libpython3_10-1_0-3.10.7-150400.4.10.1 libpython3_10-1_0-debuginfo-3.10.7-150400.4.10.1 python310-3.10.7-150400.4.10.1 python310-base-3.10.7-150400.4.10.1 python310-base-debuginfo-3.10.7-150400.4.10.1 python310-core-debugsource-3.10.7-150400.4.10.1 python310-curses-3.10.7-150400.4.10.1 python310-curses-debuginfo-3.10.7-150400.4.10.1 python310-dbm-3.10.7-150400.4.10.1 python310-dbm-debuginfo-3.10.7-150400.4.10.1 python310-debuginfo-3.10.7-150400.4.10.1 python310-debugsource-3.10.7-150400.4.10.1 python310-devel-3.10.7-150400.4.10.1 python310-idle-3.10.7-150400.4.10.1 python310-tk-3.10.7-150400.4.10.1 python310-tk-debuginfo-3.10.7-150400.4.10.1 python310-tools-3.10.7-150400.4.10.1 References: https://www.suse.com/security/cve/CVE-2020-10735.html https://www.suse.com/security/cve/CVE-2021-28861.html https://bugzilla.suse.com/1202624 https://bugzilla.suse.com/1203125

1 0

SUSE-SU-2022:3462-1: important: Security update for slurm_18_08
by opensuse-security＠opensuse.org 29 Sep '22

29 Sep '22

SUSE Security Update: Security update for slurm_18_08 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3462-1 Rating: important References: #1199278 #1199279 #1201674 Cross-References: CVE-2022-29500 CVE-2022-29501 CVE-2022-31251 CVSS scores: CVE-2022-29500 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29500 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29501 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29501 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-31251 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for slurm_18_08 fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278). - CVE-2022-29501: Fixed a vulnerability where an unprivileged user can send data to arbitrary unix socket as root (bsc#1199279). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3462=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3462=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3462=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3462=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpmi0_18_08-18.08.9-150000.1.17.1 libpmi0_18_08-debuginfo-18.08.9-150000.1.17.1 perl-slurm_18_08-18.08.9-150000.1.17.1 perl-slurm_18_08-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-18.08.9-150000.1.17.1 slurm_18_08-auth-none-18.08.9-150000.1.17.1 slurm_18_08-auth-none-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-config-18.08.9-150000.1.17.1 slurm_18_08-config-man-18.08.9-150000.1.17.1 slurm_18_08-cray-18.08.9-150000.1.17.1 slurm_18_08-cray-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-debugsource-18.08.9-150000.1.17.1 slurm_18_08-devel-18.08.9-150000.1.17.1 slurm_18_08-doc-18.08.9-150000.1.17.1 slurm_18_08-hdf5-18.08.9-150000.1.17.1 slurm_18_08-hdf5-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-lua-18.08.9-150000.1.17.1 slurm_18_08-lua-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-munge-18.08.9-150000.1.17.1 slurm_18_08-munge-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-node-18.08.9-150000.1.17.1 slurm_18_08-node-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-openlava-18.08.9-150000.1.17.1 slurm_18_08-pam_slurm-18.08.9-150000.1.17.1 slurm_18_08-pam_slurm-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-plugins-18.08.9-150000.1.17.1 slurm_18_08-plugins-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-seff-18.08.9-150000.1.17.1 slurm_18_08-sjstat-18.08.9-150000.1.17.1 slurm_18_08-slurmdbd-18.08.9-150000.1.17.1 slurm_18_08-slurmdbd-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-sql-18.08.9-150000.1.17.1 slurm_18_08-sql-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-sview-18.08.9-150000.1.17.1 slurm_18_08-sview-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-torque-18.08.9-150000.1.17.1 slurm_18_08-torque-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-webdoc-18.08.9-150000.1.17.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpmi0_18_08-18.08.9-150000.1.17.1 libpmi0_18_08-debuginfo-18.08.9-150000.1.17.1 perl-slurm_18_08-18.08.9-150000.1.17.1 perl-slurm_18_08-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-18.08.9-150000.1.17.1 slurm_18_08-auth-none-18.08.9-150000.1.17.1 slurm_18_08-auth-none-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-config-18.08.9-150000.1.17.1 slurm_18_08-config-man-18.08.9-150000.1.17.1 slurm_18_08-cray-18.08.9-150000.1.17.1 slurm_18_08-cray-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-debugsource-18.08.9-150000.1.17.1 slurm_18_08-devel-18.08.9-150000.1.17.1 slurm_18_08-doc-18.08.9-150000.1.17.1 slurm_18_08-hdf5-18.08.9-150000.1.17.1 slurm_18_08-hdf5-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-lua-18.08.9-150000.1.17.1 slurm_18_08-lua-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-munge-18.08.9-150000.1.17.1 slurm_18_08-munge-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-node-18.08.9-150000.1.17.1 slurm_18_08-node-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-openlava-18.08.9-150000.1.17.1 slurm_18_08-pam_slurm-18.08.9-150000.1.17.1 slurm_18_08-pam_slurm-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-plugins-18.08.9-150000.1.17.1 slurm_18_08-plugins-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-seff-18.08.9-150000.1.17.1 slurm_18_08-sjstat-18.08.9-150000.1.17.1 slurm_18_08-slurmdbd-18.08.9-150000.1.17.1 slurm_18_08-slurmdbd-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-sql-18.08.9-150000.1.17.1 slurm_18_08-sql-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-sview-18.08.9-150000.1.17.1 slurm_18_08-sview-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-torque-18.08.9-150000.1.17.1 slurm_18_08-torque-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-webdoc-18.08.9-150000.1.17.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libpmi0_18_08-18.08.9-150000.1.17.1 libpmi0_18_08-debuginfo-18.08.9-150000.1.17.1 libslurm33-18.08.9-150000.1.17.1 libslurm33-debuginfo-18.08.9-150000.1.17.1 perl-slurm_18_08-18.08.9-150000.1.17.1 perl-slurm_18_08-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-18.08.9-150000.1.17.1 slurm_18_08-auth-none-18.08.9-150000.1.17.1 slurm_18_08-auth-none-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-config-18.08.9-150000.1.17.1 slurm_18_08-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-debugsource-18.08.9-150000.1.17.1 slurm_18_08-devel-18.08.9-150000.1.17.1 slurm_18_08-doc-18.08.9-150000.1.17.1 slurm_18_08-lua-18.08.9-150000.1.17.1 slurm_18_08-lua-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-munge-18.08.9-150000.1.17.1 slurm_18_08-munge-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-node-18.08.9-150000.1.17.1 slurm_18_08-node-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-pam_slurm-18.08.9-150000.1.17.1 slurm_18_08-pam_slurm-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-plugins-18.08.9-150000.1.17.1 slurm_18_08-plugins-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-slurmdbd-18.08.9-150000.1.17.1 slurm_18_08-slurmdbd-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-sql-18.08.9-150000.1.17.1 slurm_18_08-sql-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-torque-18.08.9-150000.1.17.1 slurm_18_08-torque-debuginfo-18.08.9-150000.1.17.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libpmi0_18_08-18.08.9-150000.1.17.1 libpmi0_18_08-debuginfo-18.08.9-150000.1.17.1 libslurm33-18.08.9-150000.1.17.1 libslurm33-debuginfo-18.08.9-150000.1.17.1 perl-slurm_18_08-18.08.9-150000.1.17.1 perl-slurm_18_08-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-18.08.9-150000.1.17.1 slurm_18_08-auth-none-18.08.9-150000.1.17.1 slurm_18_08-auth-none-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-config-18.08.9-150000.1.17.1 slurm_18_08-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-debugsource-18.08.9-150000.1.17.1 slurm_18_08-devel-18.08.9-150000.1.17.1 slurm_18_08-doc-18.08.9-150000.1.17.1 slurm_18_08-lua-18.08.9-150000.1.17.1 slurm_18_08-lua-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-munge-18.08.9-150000.1.17.1 slurm_18_08-munge-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-node-18.08.9-150000.1.17.1 slurm_18_08-node-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-pam_slurm-18.08.9-150000.1.17.1 slurm_18_08-pam_slurm-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-plugins-18.08.9-150000.1.17.1 slurm_18_08-plugins-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-slurmdbd-18.08.9-150000.1.17.1 slurm_18_08-slurmdbd-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-sql-18.08.9-150000.1.17.1 slurm_18_08-sql-debuginfo-18.08.9-150000.1.17.1 slurm_18_08-torque-18.08.9-150000.1.17.1 slurm_18_08-torque-debuginfo-18.08.9-150000.1.17.1 References: https://www.suse.com/security/cve/CVE-2022-29500.html https://www.suse.com/security/cve/CVE-2022-29501.html https://www.suse.com/security/cve/CVE-2022-31251.html https://bugzilla.suse.com/1199278 https://bugzilla.suse.com/1199279 https://bugzilla.suse.com/1201674

1 0

openSUSE-SU-2022:10132-1: moderate: Security update for lighttpd
by opensuse-security＠opensuse.org 29 Sep '22

29 Sep '22

openSUSE Security Update: Security update for lighttpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10132-1 Rating: moderate References: #1203358 Cross-References: CVE-2022-37797 CVSS scores: CVE-2022-37797 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-37797 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lighttpd fixes the following issues: lighttpd was updated to 1.4.66: * a number of bug fixes * Fix HTTP/2 downloads >= 4GiB * Fix SIGUSR1 graceful restart with TLS * futher bug fixes * CVE-2022-37797: null pointer dereference in mod_wstunnel, possibly a remotely triggerable crash (boo#1203358) * In an upcoming release the TLS modules will default to using stronger, modern chiphers and will default to allow client preference in selecting ciphers. ��CipherString�� => ��EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384��, ��Options�� => ��-ServerPreference�� old defaults: ��CipherString�� => ��HIGH��, ��Options�� => ��ServerPreference�� * A number of TLS options are how deprecated and will be removed in a future release: �� ssl.honor-cipher-order �� ssl.dh-file �� ssl.ec-curve �� ssl.disable-client-renegotiation �� ssl.use-sslv2 �� ssl.use-sslv3 The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd defaults should be prefered * A number of modules are now deprecated and will be removed in a future release: mod_evasive, mod_secdownload, mod_uploadprogress, mod_usertrack can be replaced by mod_magnet and a few lines of lua. update to 1.4.65: * WebSockets over HTTP/2 * RFC 8441 Bootstrapping WebSockets with HTTP/2 * HTTP/2 PRIORITY_UPDATE * RFC 9218 Extensible Prioritization Scheme for HTTP * prefix/suffix conditions in lighttpd.conf * mod_webdav safe partial-PUT * webdav.opts += (��partial-put-copy-modify�� => ��enable��) * mod_accesslog option: accesslog.escaping = ��json�� * mod_deflate libdeflate build option * speed up request body uploads via HTTP/2 * Behavior Changes * change default server.max-keep-alive-requests = 1000 to adjust * to increasing HTTP/2 usage and to web2/web3 application usage * (prior default was 100) * mod_status HTML now includes HTTP/2 control stream id 0 in the output * which contains aggregate counts for the HTTP/2 connection * (These lines can be identified with URL ��*��, part of ��PRI *�� preface) * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status * MIME type application/javascript is translated to text/javascript (RFC 9239) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10132=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10132=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): lighttpd-1.4.66-bp154.2.3.1 lighttpd-debuginfo-1.4.66-bp154.2.3.1 lighttpd-debugsource-1.4.66-bp154.2.3.1 lighttpd-mod_authn_gssapi-1.4.66-bp154.2.3.1 lighttpd-mod_authn_gssapi-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_authn_ldap-1.4.66-bp154.2.3.1 lighttpd-mod_authn_ldap-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_authn_pam-1.4.66-bp154.2.3.1 lighttpd-mod_authn_pam-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_authn_sasl-1.4.66-bp154.2.3.1 lighttpd-mod_authn_sasl-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_magnet-1.4.66-bp154.2.3.1 lighttpd-mod_magnet-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_maxminddb-1.4.66-bp154.2.3.1 lighttpd-mod_maxminddb-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_rrdtool-1.4.66-bp154.2.3.1 lighttpd-mod_rrdtool-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_vhostdb_dbi-1.4.66-bp154.2.3.1 lighttpd-mod_vhostdb_dbi-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_vhostdb_ldap-1.4.66-bp154.2.3.1 lighttpd-mod_vhostdb_ldap-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_vhostdb_mysql-1.4.66-bp154.2.3.1 lighttpd-mod_vhostdb_mysql-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_vhostdb_pgsql-1.4.66-bp154.2.3.1 lighttpd-mod_vhostdb_pgsql-debuginfo-1.4.66-bp154.2.3.1 lighttpd-mod_webdav-1.4.66-bp154.2.3.1 lighttpd-mod_webdav-debuginfo-1.4.66-bp154.2.3.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): lighttpd-1.4.66-bp153.2.9.1 lighttpd-mod_authn_gssapi-1.4.66-bp153.2.9.1 lighttpd-mod_authn_ldap-1.4.66-bp153.2.9.1 lighttpd-mod_authn_pam-1.4.66-bp153.2.9.1 lighttpd-mod_authn_sasl-1.4.66-bp153.2.9.1 lighttpd-mod_magnet-1.4.66-bp153.2.9.1 lighttpd-mod_maxminddb-1.4.66-bp153.2.9.1 lighttpd-mod_rrdtool-1.4.66-bp153.2.9.1 lighttpd-mod_vhostdb_dbi-1.4.66-bp153.2.9.1 lighttpd-mod_vhostdb_ldap-1.4.66-bp153.2.9.1 lighttpd-mod_vhostdb_mysql-1.4.66-bp153.2.9.1 lighttpd-mod_vhostdb_pgsql-1.4.66-bp153.2.9.1 lighttpd-mod_webdav-1.4.66-bp153.2.9.1 References: https://www.suse.com/security/cve/CVE-2022-37797.html https://bugzilla.suse.com/1203358

1 0

SUSE-SU-2022:3468-1: important: Security update for slurm
by opensuse-security＠opensuse.org 29 Sep '22

29 Sep '22

SUSE Security Update: Security update for slurm ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3468-1 Rating: important References: #1199278 #1199279 #1201674 Cross-References: CVE-2022-29500 CVE-2022-29501 CVE-2022-31251 CVSS scores: CVE-2022-29500 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29500 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29501 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29501 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-31251 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for slurm fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278). - CVE-2022-29501: Fixed a vulnerability where an unprivileged user can send data to arbitrary unix socket as root (bsc#1199279). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3468=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3468=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3468=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3468=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libslurm33-18.08.9-150100.3.22.1 libslurm33-debuginfo-18.08.9-150100.3.22.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libslurm33-18.08.9-150100.3.22.1 libslurm33-debuginfo-18.08.9-150100.3.22.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libpmi0-18.08.9-150100.3.22.1 libpmi0-debuginfo-18.08.9-150100.3.22.1 libslurm33-18.08.9-150100.3.22.1 libslurm33-debuginfo-18.08.9-150100.3.22.1 perl-slurm-18.08.9-150100.3.22.1 perl-slurm-debuginfo-18.08.9-150100.3.22.1 slurm-18.08.9-150100.3.22.1 slurm-auth-none-18.08.9-150100.3.22.1 slurm-auth-none-debuginfo-18.08.9-150100.3.22.1 slurm-config-18.08.9-150100.3.22.1 slurm-config-man-18.08.9-150100.3.22.1 slurm-debuginfo-18.08.9-150100.3.22.1 slurm-debugsource-18.08.9-150100.3.22.1 slurm-devel-18.08.9-150100.3.22.1 slurm-doc-18.08.9-150100.3.22.1 slurm-lua-18.08.9-150100.3.22.1 slurm-lua-debuginfo-18.08.9-150100.3.22.1 slurm-munge-18.08.9-150100.3.22.1 slurm-munge-debuginfo-18.08.9-150100.3.22.1 slurm-node-18.08.9-150100.3.22.1 slurm-node-debuginfo-18.08.9-150100.3.22.1 slurm-pam_slurm-18.08.9-150100.3.22.1 slurm-pam_slurm-debuginfo-18.08.9-150100.3.22.1 slurm-plugins-18.08.9-150100.3.22.1 slurm-plugins-debuginfo-18.08.9-150100.3.22.1 slurm-slurmdbd-18.08.9-150100.3.22.1 slurm-slurmdbd-debuginfo-18.08.9-150100.3.22.1 slurm-sql-18.08.9-150100.3.22.1 slurm-sql-debuginfo-18.08.9-150100.3.22.1 slurm-sview-18.08.9-150100.3.22.1 slurm-sview-debuginfo-18.08.9-150100.3.22.1 slurm-torque-18.08.9-150100.3.22.1 slurm-torque-debuginfo-18.08.9-150100.3.22.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libpmi0-18.08.9-150100.3.22.1 libpmi0-debuginfo-18.08.9-150100.3.22.1 libslurm33-18.08.9-150100.3.22.1 libslurm33-debuginfo-18.08.9-150100.3.22.1 perl-slurm-18.08.9-150100.3.22.1 perl-slurm-debuginfo-18.08.9-150100.3.22.1 slurm-18.08.9-150100.3.22.1 slurm-auth-none-18.08.9-150100.3.22.1 slurm-auth-none-debuginfo-18.08.9-150100.3.22.1 slurm-config-18.08.9-150100.3.22.1 slurm-config-man-18.08.9-150100.3.22.1 slurm-debuginfo-18.08.9-150100.3.22.1 slurm-debugsource-18.08.9-150100.3.22.1 slurm-devel-18.08.9-150100.3.22.1 slurm-doc-18.08.9-150100.3.22.1 slurm-lua-18.08.9-150100.3.22.1 slurm-lua-debuginfo-18.08.9-150100.3.22.1 slurm-munge-18.08.9-150100.3.22.1 slurm-munge-debuginfo-18.08.9-150100.3.22.1 slurm-node-18.08.9-150100.3.22.1 slurm-node-debuginfo-18.08.9-150100.3.22.1 slurm-pam_slurm-18.08.9-150100.3.22.1 slurm-pam_slurm-debuginfo-18.08.9-150100.3.22.1 slurm-plugins-18.08.9-150100.3.22.1 slurm-plugins-debuginfo-18.08.9-150100.3.22.1 slurm-slurmdbd-18.08.9-150100.3.22.1 slurm-slurmdbd-debuginfo-18.08.9-150100.3.22.1 slurm-sql-18.08.9-150100.3.22.1 slurm-sql-debuginfo-18.08.9-150100.3.22.1 slurm-sview-18.08.9-150100.3.22.1 slurm-sview-debuginfo-18.08.9-150100.3.22.1 slurm-torque-18.08.9-150100.3.22.1 slurm-torque-debuginfo-18.08.9-150100.3.22.1 References: https://www.suse.com/security/cve/CVE-2022-29500.html https://www.suse.com/security/cve/CVE-2022-29501.html https://www.suse.com/security/cve/CVE-2022-31251.html https://bugzilla.suse.com/1199278 https://bugzilla.suse.com/1199279 https://bugzilla.suse.com/1201674

1 0

SUSE-SU-2022:3456-1: important: Security update for libostree
by opensuse-security＠opensuse.org 28 Sep '22

28 Sep '22

SUSE Security Update: Security update for libostree ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3456-1 Rating: important References: #1201770 Cross-References: CVE-2014-9862 CVSS scores: CVE-2014-9862 (NVD) : 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2014-9862 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libostree fixes the following issues: - CVE-2014-9862: Fixed arbitrary write on heap vulnerability (bsc#1201770). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3456=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3456=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3456=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3456=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3456=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3456=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3456=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3456=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3456=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3456=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3456=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3456=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libostree-grub2-2020.8-150200.3.6.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - SUSE Manager Proxy 4.1 (x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libostree-1-1-2020.8-150200.3.6.1 libostree-1-1-debuginfo-2020.8-150200.3.6.1 libostree-2020.8-150200.3.6.1 libostree-debuginfo-2020.8-150200.3.6.1 libostree-debugsource-2020.8-150200.3.6.1 libostree-devel-2020.8-150200.3.6.1 typelib-1_0-OSTree-1_0-2020.8-150200.3.6.1 References: https://www.suse.com/security/cve/CVE-2014-9862.html https://bugzilla.suse.com/1201770

1 0

SUSE-SU-2022:3457-1: important: Security update for vsftpd
by opensuse-security＠opensuse.org 28 Sep '22

28 Sep '22

SUSE Security Update: Security update for vsftpd ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3457-1 Rating: important References: #1021387 #1052900 #1181400 #1187678 #1187686 #786024 #971784 PM-3322 SLE-23896 Cross-References: CVE-2021-3618 CVSS scores: CVE-2021-3618 (NVD) : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2021-3618 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability, contains two features and has 6 fixes is now available. Description: This update for vsftpd fixes the following issues: - CVE-2021-3618: Enforced security checks against ALPACA attack (PM-3322, jsc#SLE-23896, bsc#1187686, bsc#1187678). - Added hardening to systemd services (bsc#1181400). Bugfixes: - Fixed a seccomp failure in FIPS mode when SSL was enabled (bsc#1052900). - Allowed wait4() to be called so that the broker can wait for its child processes (bsc#1021387). - Fixed hang when using seccomp and syslog (bsc#971784). - Allowed sendto() syscall when /dev/log support is enabled (bsc#786024). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3457=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3457=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3457=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3457=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3457=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3457=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3457=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-3457=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3457=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3457=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3457=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Manager Proxy 4.1 (x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): vsftpd-3.0.5-150200.12.9.1 vsftpd-debuginfo-3.0.5-150200.12.9.1 vsftpd-debugsource-3.0.5-150200.12.9.1 References: https://www.suse.com/security/cve/CVE-2021-3618.html https://bugzilla.suse.com/1021387 https://bugzilla.suse.com/1052900 https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1187678 https://bugzilla.suse.com/1187686 https://bugzilla.suse.com/786024 https://bugzilla.suse.com/971784

1 0

SUSE-RU-2022:3452-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 28 Sep '22

28 Sep '22

SUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3452-1 Rating: moderate References: #1201942 PED-987 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for glibc fixes the following issues: - Reversing calculation of __x86_shared_non_temporal_threshold (bsc#1201942) - powerpc: Optimized memcmp for power10 (jsc#PED-987) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3452=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3452=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3452=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3452=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3452=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3452=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3452=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3452=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3452=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): glibc-2.31-150300.41.1 glibc-debuginfo-2.31-150300.41.1 glibc-debugsource-2.31-150300.41.1 glibc-locale-2.31-150300.41.1 glibc-locale-base-2.31-150300.41.1 glibc-locale-base-debuginfo-2.31-150300.41.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): glibc-2.31-150300.41.1 glibc-debuginfo-2.31-150300.41.1 glibc-debugsource-2.31-150300.41.1 glibc-devel-2.31-150300.41.1 glibc-devel-debuginfo-2.31-150300.41.1 glibc-devel-static-2.31-150300.41.1 glibc-extra-2.31-150300.41.1 glibc-extra-debuginfo-2.31-150300.41.1 glibc-locale-2.31-150300.41.1 glibc-locale-base-2.31-150300.41.1 glibc-locale-base-debuginfo-2.31-150300.41.1 glibc-profile-2.31-150300.41.1 glibc-utils-2.31-150300.41.1 glibc-utils-debuginfo-2.31-150300.41.1 glibc-utils-src-debugsource-2.31-150300.41.1 nscd-2.31-150300.41.1 nscd-debuginfo-2.31-150300.41.1 - openSUSE Leap 15.4 (x86_64): glibc-32bit-2.31-150300.41.1 glibc-32bit-debuginfo-2.31-150300.41.1 glibc-devel-32bit-2.31-150300.41.1 glibc-devel-32bit-debuginfo-2.31-150300.41.1 glibc-devel-static-32bit-2.31-150300.41.1 glibc-locale-base-32bit-2.31-150300.41.1 glibc-locale-base-32bit-debuginfo-2.31-150300.41.1 glibc-profile-32bit-2.31-150300.41.1 glibc-utils-32bit-2.31-150300.41.1 glibc-utils-32bit-debuginfo-2.31-150300.41.1 - openSUSE Leap 15.4 (noarch): glibc-html-2.31-150300.41.1 glibc-i18ndata-2.31-150300.41.1 glibc-info-2.31-150300.41.1 glibc-lang-2.31-150300.41.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): glibc-2.31-150300.41.1 glibc-debuginfo-2.31-150300.41.1 glibc-debugsource-2.31-150300.41.1 glibc-devel-2.31-150300.41.1 glibc-devel-debuginfo-2.31-150300.41.1 glibc-devel-static-2.31-150300.41.1 glibc-extra-2.31-150300.41.1 glibc-extra-debuginfo-2.31-150300.41.1 glibc-locale-2.31-150300.41.1 glibc-locale-base-2.31-150300.41.1 glibc-locale-base-debuginfo-2.31-150300.41.1 glibc-profile-2.31-150300.41.1 glibc-utils-2.31-150300.41.1 glibc-utils-debuginfo-2.31-150300.41.1 glibc-utils-src-debugsource-2.31-150300.41.1 nscd-2.31-150300.41.1 nscd-debuginfo-2.31-150300.41.1 - openSUSE Leap 15.3 (x86_64): glibc-32bit-2.31-150300.41.1 glibc-32bit-debuginfo-2.31-150300.41.1 glibc-devel-32bit-2.31-150300.41.1 glibc-devel-32bit-debuginfo-2.31-150300.41.1 glibc-devel-static-32bit-2.31-150300.41.1 glibc-locale-base-32bit-2.31-150300.41.1 glibc-locale-base-32bit-debuginfo-2.31-150300.41.1 glibc-profile-32bit-2.31-150300.41.1 glibc-utils-32bit-2.31-150300.41.1 glibc-utils-32bit-debuginfo-2.31-150300.41.1 - openSUSE Leap 15.3 (noarch): glibc-html-2.31-150300.41.1 glibc-i18ndata-2.31-150300.41.1 glibc-info-2.31-150300.41.1 glibc-lang-2.31-150300.41.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): glibc-debuginfo-2.31-150300.41.1 glibc-debugsource-2.31-150300.41.1 glibc-devel-static-2.31-150300.41.1 glibc-utils-2.31-150300.41.1 glibc-utils-debuginfo-2.31-150300.41.1 glibc-utils-src-debugsource-2.31-150300.41.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (x86_64): glibc-32bit-debuginfo-2.31-150300.41.1 glibc-devel-32bit-2.31-150300.41.1 glibc-devel-32bit-debuginfo-2.31-150300.41.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): glibc-debuginfo-2.31-150300.41.1 glibc-debugsource-2.31-150300.41.1 glibc-devel-static-2.31-150300.41.1 glibc-utils-2.31-150300.41.1 glibc-utils-debuginfo-2.31-150300.41.1 glibc-utils-src-debugsource-2.31-150300.41.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (x86_64): glibc-32bit-debuginfo-2.31-150300.41.1 glibc-devel-32bit-2.31-150300.41.1 glibc-devel-32bit-debuginfo-2.31-150300.41.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): glibc-2.31-150300.41.1 glibc-debuginfo-2.31-150300.41.1 glibc-debugsource-2.31-150300.41.1 glibc-devel-2.31-150300.41.1 glibc-devel-debuginfo-2.31-150300.41.1 glibc-extra-2.31-150300.41.1 glibc-extra-debuginfo-2.31-150300.41.1 glibc-locale-2.31-150300.41.1 glibc-locale-base-2.31-150300.41.1 glibc-locale-base-debuginfo-2.31-150300.41.1 glibc-profile-2.31-150300.41.1 nscd-2.31-150300.41.1 nscd-debuginfo-2.31-150300.41.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): glibc-i18ndata-2.31-150300.41.1 glibc-info-2.31-150300.41.1 glibc-lang-2.31-150300.41.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): glibc-32bit-2.31-150300.41.1 glibc-32bit-debuginfo-2.31-150300.41.1 glibc-locale-base-32bit-2.31-150300.41.1 glibc-locale-base-32bit-debuginfo-2.31-150300.41.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): glibc-2.31-150300.41.1 glibc-debuginfo-2.31-150300.41.1 glibc-debugsource-2.31-150300.41.1 glibc-devel-2.31-150300.41.1 glibc-devel-debuginfo-2.31-150300.41.1 glibc-extra-2.31-150300.41.1 glibc-extra-debuginfo-2.31-150300.41.1 glibc-locale-2.31-150300.41.1 glibc-locale-base-2.31-150300.41.1 glibc-locale-base-debuginfo-2.31-150300.41.1 glibc-profile-2.31-150300.41.1 nscd-2.31-150300.41.1 nscd-debuginfo-2.31-150300.41.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): glibc-i18ndata-2.31-150300.41.1 glibc-info-2.31-150300.41.1 glibc-lang-2.31-150300.41.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): glibc-32bit-2.31-150300.41.1 glibc-32bit-debuginfo-2.31-150300.41.1 glibc-locale-base-32bit-2.31-150300.41.1 glibc-locale-base-32bit-debuginfo-2.31-150300.41.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): glibc-2.31-150300.41.1 glibc-debuginfo-2.31-150300.41.1 glibc-debugsource-2.31-150300.41.1 glibc-devel-2.31-150300.41.1 glibc-locale-2.31-150300.41.1 glibc-locale-base-2.31-150300.41.1 glibc-locale-base-debuginfo-2.31-150300.41.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): glibc-2.31-150300.41.1 glibc-debuginfo-2.31-150300.41.1 glibc-debugsource-2.31-150300.41.1 glibc-devel-2.31-150300.41.1 glibc-locale-2.31-150300.41.1 glibc-locale-base-2.31-150300.41.1 glibc-locale-base-debuginfo-2.31-150300.41.1 References: https://bugzilla.suse.com/1201942

1 0

SUSE-SU-2022:3451-1: moderate: Security update for rust1.62
by opensuse-security＠opensuse.org 28 Sep '22

28 Sep '22

SUSE Security Update: Security update for rust1.62 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3451-1 Rating: moderate References: #1203431 #1203433 Cross-References: CVE-2022-36113 CVE-2022-36114 CVSS scores: CVE-2022-36113 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2022-36113 (SUSE): 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L CVE-2022-36114 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-36114 (SUSE): 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for rust1.62 fixes the following issues: - CVE-2022-36113: Fixed symlink hijack vulnerability (bsc#1203433). - CVE-2022-36114: Fixed zip bomb vulnerability (bsc#1203431). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3451=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3451=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3451=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3451=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cargo1.62-1.62.1-150300.7.7.1 cargo1.62-debuginfo-1.62.1-150300.7.7.1 rust1.62-1.62.1-150300.7.7.1 rust1.62-debuginfo-1.62.1-150300.7.7.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cargo1.62-1.62.1-150300.7.7.1 cargo1.62-debuginfo-1.62.1-150300.7.7.1 rust1.62-1.62.1-150300.7.7.1 rust1.62-debuginfo-1.62.1-150300.7.7.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): cargo1.62-1.62.1-150300.7.7.1 cargo1.62-debuginfo-1.62.1-150300.7.7.1 rust1.62-1.62.1-150300.7.7.1 rust1.62-debuginfo-1.62.1-150300.7.7.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): cargo1.62-1.62.1-150300.7.7.1 cargo1.62-debuginfo-1.62.1-150300.7.7.1 rust1.62-1.62.1-150300.7.7.1 rust1.62-debuginfo-1.62.1-150300.7.7.1 References: https://www.suse.com/security/cve/CVE-2022-36113.html https://www.suse.com/security/cve/CVE-2022-36114.html https://bugzilla.suse.com/1203431 https://bugzilla.suse.com/1203433

1 0

SUSE-RU-2022:3449-1: moderate: Recommended update for perl-Bootloader
by maintenance＠opensuse.org 27 Sep '22

27 Sep '22

SUSE Recommended Update: Recommended update for perl-Bootloader ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3449-1 Rating: moderate References: #1198197 #1198828 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for perl-Bootloader fixes the following issues: - Fix sysconfig parsing (bsc#1198828) - grub2/install: Reset error code when passing through recover code. (bsc#1198197) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3449=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3449=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3449=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): perl-Bootloader-0.939-150400.3.3.1 perl-Bootloader-YAML-0.939-150400.3.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): perl-Bootloader-YAML-0.939-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): perl-Bootloader-0.939-150400.3.3.1 References: https://bugzilla.suse.com/1198197 https://bugzilla.suse.com/1198828

1 0

SUSE-RU-2022:3448-1: moderate: Recommended update for Mesa
by maintenance＠opensuse.org 27 Sep '22

27 Sep '22

SUSE Recommended Update: Recommended update for Mesa ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3448-1 Rating: moderate References: #1202850 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Mesa fixes the following issue: - Remove confusing option `-Dprefer-iris=false`. (bsc#1202850) * The default driver for Intel Gen8-11 hardware is already "i965" and the option `-Dprefer-iris=false` is not needed. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3448=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3448=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-3448=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-3448=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3448=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3448=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): Mesa-debugsource-20.2.4-150300.59.6.1 libgbm1-20.2.4-150300.59.6.1 libgbm1-debuginfo-20.2.4-150300.59.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): Mesa-20.2.4-150300.59.6.1 Mesa-KHR-devel-20.2.4-150300.59.6.1 Mesa-debugsource-20.2.4-150300.59.6.1 Mesa-devel-20.2.4-150300.59.6.1 Mesa-dri-20.2.4-150300.59.6.1 Mesa-dri-debuginfo-20.2.4-150300.59.6.1 Mesa-dri-devel-20.2.4-150300.59.6.1 Mesa-drivers-debugsource-20.2.4-150300.59.6.1 Mesa-libEGL-devel-20.2.4-150300.59.6.1 Mesa-libEGL1-20.2.4-150300.59.6.1 Mesa-libEGL1-debuginfo-20.2.4-150300.59.6.1 Mesa-libGL-devel-20.2.4-150300.59.6.1 Mesa-libGL1-20.2.4-150300.59.6.1 Mesa-libGL1-debuginfo-20.2.4-150300.59.6.1 Mesa-libGLESv1_CM-devel-20.2.4-150300.59.6.1 Mesa-libGLESv2-devel-20.2.4-150300.59.6.1 Mesa-libGLESv3-devel-20.2.4-150300.59.6.1 Mesa-libglapi-devel-20.2.4-150300.59.6.1 Mesa-libglapi0-20.2.4-150300.59.6.1 Mesa-libglapi0-debuginfo-20.2.4-150300.59.6.1 libOSMesa-devel-20.2.4-150300.59.6.1 libOSMesa8-20.2.4-150300.59.6.1 libOSMesa8-debuginfo-20.2.4-150300.59.6.1 libgbm-devel-20.2.4-150300.59.6.1 libgbm1-20.2.4-150300.59.6.1 libgbm1-debuginfo-20.2.4-150300.59.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): Mesa-dri-nouveau-20.2.4-150300.59.6.1 Mesa-dri-nouveau-debuginfo-20.2.4-150300.59.6.1 Mesa-gallium-20.2.4-150300.59.6.1 Mesa-gallium-debuginfo-20.2.4-150300.59.6.1 Mesa-libOpenCL-20.2.4-150300.59.6.1 Mesa-libOpenCL-debuginfo-20.2.4-150300.59.6.1 Mesa-libva-20.2.4-150300.59.6.1 Mesa-libva-debuginfo-20.2.4-150300.59.6.1 libXvMC_nouveau-20.2.4-150300.59.6.1 libXvMC_nouveau-debuginfo-20.2.4-150300.59.6.1 libXvMC_r600-20.2.4-150300.59.6.1 libXvMC_r600-debuginfo-20.2.4-150300.59.6.1 libvdpau_nouveau-20.2.4-150300.59.6.1 libvdpau_nouveau-debuginfo-20.2.4-150300.59.6.1 libvdpau_r300-20.2.4-150300.59.6.1 libvdpau_r300-debuginfo-20.2.4-150300.59.6.1 libvdpau_r600-20.2.4-150300.59.6.1 libvdpau_r600-debuginfo-20.2.4-150300.59.6.1 libvdpau_radeonsi-20.2.4-150300.59.6.1 libvdpau_radeonsi-debuginfo-20.2.4-150300.59.6.1 libxatracker-devel-1.0.0-150300.59.6.1 libxatracker2-1.0.0-150300.59.6.1 libxatracker2-debuginfo-1.0.0-150300.59.6.1 - openSUSE Leap 15.3 (aarch64 x86_64): Mesa-libd3d-20.2.4-150300.59.6.1 Mesa-libd3d-debuginfo-20.2.4-150300.59.6.1 Mesa-libd3d-devel-20.2.4-150300.59.6.1 - openSUSE Leap 15.3 (aarch64): Mesa-dri-vc4-20.2.4-150300.59.6.1 Mesa-dri-vc4-debuginfo-20.2.4-150300.59.6.1 - openSUSE Leap 15.3 (x86_64): Mesa-32bit-20.2.4-150300.59.6.1 Mesa-dri-32bit-20.2.4-150300.59.6.1 Mesa-dri-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-dri-nouveau-32bit-20.2.4-150300.59.6.1 Mesa-dri-nouveau-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-gallium-32bit-20.2.4-150300.59.6.1 Mesa-gallium-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-libEGL-devel-32bit-20.2.4-150300.59.6.1 Mesa-libEGL1-32bit-20.2.4-150300.59.6.1 Mesa-libEGL1-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-libGL-devel-32bit-20.2.4-150300.59.6.1 Mesa-libGL1-32bit-20.2.4-150300.59.6.1 Mesa-libGL1-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-libGLESv1_CM-devel-32bit-20.2.4-150300.59.6.1 Mesa-libGLESv2-devel-32bit-20.2.4-150300.59.6.1 Mesa-libVulkan-devel-20.2.4-150300.59.6.1 Mesa-libd3d-32bit-20.2.4-150300.59.6.1 Mesa-libd3d-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-libd3d-devel-32bit-20.2.4-150300.59.6.1 Mesa-libglapi-devel-32bit-20.2.4-150300.59.6.1 Mesa-libglapi0-32bit-20.2.4-150300.59.6.1 Mesa-libglapi0-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-vulkan-device-select-20.2.4-150300.59.6.1 Mesa-vulkan-device-select-32bit-20.2.4-150300.59.6.1 Mesa-vulkan-device-select-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-vulkan-device-select-debuginfo-20.2.4-150300.59.6.1 Mesa-vulkan-overlay-20.2.4-150300.59.6.1 Mesa-vulkan-overlay-32bit-20.2.4-150300.59.6.1 Mesa-vulkan-overlay-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-vulkan-overlay-debuginfo-20.2.4-150300.59.6.1 libOSMesa-devel-32bit-20.2.4-150300.59.6.1 libOSMesa8-32bit-20.2.4-150300.59.6.1 libOSMesa8-32bit-debuginfo-20.2.4-150300.59.6.1 libXvMC_nouveau-32bit-20.2.4-150300.59.6.1 libXvMC_nouveau-32bit-debuginfo-20.2.4-150300.59.6.1 libXvMC_r600-32bit-20.2.4-150300.59.6.1 libXvMC_r600-32bit-debuginfo-20.2.4-150300.59.6.1 libgbm-devel-32bit-20.2.4-150300.59.6.1 libgbm1-32bit-20.2.4-150300.59.6.1 libgbm1-32bit-debuginfo-20.2.4-150300.59.6.1 libvdpau_nouveau-32bit-20.2.4-150300.59.6.1 libvdpau_nouveau-32bit-debuginfo-20.2.4-150300.59.6.1 libvdpau_r300-32bit-20.2.4-150300.59.6.1 libvdpau_r300-32bit-debuginfo-20.2.4-150300.59.6.1 libvdpau_r600-32bit-20.2.4-150300.59.6.1 libvdpau_r600-32bit-debuginfo-20.2.4-150300.59.6.1 libvdpau_radeonsi-32bit-20.2.4-150300.59.6.1 libvdpau_radeonsi-32bit-debuginfo-20.2.4-150300.59.6.1 libvulkan_intel-20.2.4-150300.59.6.1 libvulkan_intel-32bit-20.2.4-150300.59.6.1 libvulkan_intel-32bit-debuginfo-20.2.4-150300.59.6.1 libvulkan_intel-debuginfo-20.2.4-150300.59.6.1 libvulkan_radeon-20.2.4-150300.59.6.1 libvulkan_radeon-32bit-20.2.4-150300.59.6.1 libvulkan_radeon-32bit-debuginfo-20.2.4-150300.59.6.1 libvulkan_radeon-debuginfo-20.2.4-150300.59.6.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): Mesa-dri-nouveau-20.2.4-150300.59.6.1 Mesa-dri-nouveau-debuginfo-20.2.4-150300.59.6.1 Mesa-drivers-debugsource-20.2.4-150300.59.6.1 libXvMC_nouveau-20.2.4-150300.59.6.1 libvdpau_nouveau-20.2.4-150300.59.6.1 libvdpau_nouveau-debuginfo-20.2.4-150300.59.6.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (x86_64): Mesa-debugsource-20.2.4-150300.59.6.1 libOSMesa8-32bit-20.2.4-150300.59.6.1 libOSMesa8-32bit-debuginfo-20.2.4-150300.59.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): Mesa-20.2.4-150300.59.6.1 Mesa-KHR-devel-20.2.4-150300.59.6.1 Mesa-debugsource-20.2.4-150300.59.6.1 Mesa-devel-20.2.4-150300.59.6.1 Mesa-dri-20.2.4-150300.59.6.1 Mesa-dri-debuginfo-20.2.4-150300.59.6.1 Mesa-dri-devel-20.2.4-150300.59.6.1 Mesa-drivers-debugsource-20.2.4-150300.59.6.1 Mesa-libEGL-devel-20.2.4-150300.59.6.1 Mesa-libEGL1-20.2.4-150300.59.6.1 Mesa-libEGL1-debuginfo-20.2.4-150300.59.6.1 Mesa-libGL-devel-20.2.4-150300.59.6.1 Mesa-libGL1-20.2.4-150300.59.6.1 Mesa-libGL1-debuginfo-20.2.4-150300.59.6.1 Mesa-libGLESv1_CM-devel-20.2.4-150300.59.6.1 Mesa-libGLESv2-devel-20.2.4-150300.59.6.1 Mesa-libGLESv3-devel-20.2.4-150300.59.6.1 Mesa-libglapi-devel-20.2.4-150300.59.6.1 Mesa-libglapi0-20.2.4-150300.59.6.1 Mesa-libglapi0-debuginfo-20.2.4-150300.59.6.1 libOSMesa-devel-20.2.4-150300.59.6.1 libOSMesa8-20.2.4-150300.59.6.1 libOSMesa8-debuginfo-20.2.4-150300.59.6.1 libgbm-devel-20.2.4-150300.59.6.1 libgbm1-20.2.4-150300.59.6.1 libgbm1-debuginfo-20.2.4-150300.59.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le x86_64): Mesa-gallium-20.2.4-150300.59.6.1 Mesa-gallium-debuginfo-20.2.4-150300.59.6.1 Mesa-libva-20.2.4-150300.59.6.1 Mesa-libva-debuginfo-20.2.4-150300.59.6.1 libvdpau_r300-20.2.4-150300.59.6.1 libvdpau_r300-debuginfo-20.2.4-150300.59.6.1 libvdpau_r600-20.2.4-150300.59.6.1 libvdpau_r600-debuginfo-20.2.4-150300.59.6.1 libxatracker-devel-1.0.0-150300.59.6.1 libxatracker2-1.0.0-150300.59.6.1 libxatracker2-debuginfo-1.0.0-150300.59.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): Mesa-32bit-20.2.4-150300.59.6.1 Mesa-dri-32bit-20.2.4-150300.59.6.1 Mesa-dri-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-gallium-32bit-20.2.4-150300.59.6.1 Mesa-gallium-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-libEGL1-32bit-20.2.4-150300.59.6.1 Mesa-libEGL1-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-libGL1-32bit-20.2.4-150300.59.6.1 Mesa-libGL1-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-libVulkan-devel-20.2.4-150300.59.6.1 Mesa-libd3d-20.2.4-150300.59.6.1 Mesa-libd3d-debuginfo-20.2.4-150300.59.6.1 Mesa-libd3d-devel-20.2.4-150300.59.6.1 Mesa-libglapi0-32bit-20.2.4-150300.59.6.1 Mesa-libglapi0-32bit-debuginfo-20.2.4-150300.59.6.1 Mesa-vulkan-device-select-20.2.4-150300.59.6.1 Mesa-vulkan-device-select-debuginfo-20.2.4-150300.59.6.1 Mesa-vulkan-overlay-20.2.4-150300.59.6.1 Mesa-vulkan-overlay-debuginfo-20.2.4-150300.59.6.1 libgbm1-32bit-20.2.4-150300.59.6.1 libgbm1-32bit-debuginfo-20.2.4-150300.59.6.1 libvdpau_radeonsi-20.2.4-150300.59.6.1 libvdpau_radeonsi-debuginfo-20.2.4-150300.59.6.1 libvulkan_intel-20.2.4-150300.59.6.1 libvulkan_intel-debuginfo-20.2.4-150300.59.6.1 libvulkan_radeon-20.2.4-150300.59.6.1 libvulkan_radeon-debuginfo-20.2.4-150300.59.6.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): Mesa-debugsource-20.2.4-150300.59.6.1 libgbm1-20.2.4-150300.59.6.1 libgbm1-debuginfo-20.2.4-150300.59.6.1 References: https://bugzilla.suse.com/1202850

1 0

SUSE-RU-2022:3447-1: important: Recommended update for myspell-dictionaries
by maintenance＠opensuse.org 27 Sep '22

27 Sep '22

SUSE Recommended Update: Recommended update for myspell-dictionaries ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3447-1 Rating: important References: #1203307 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for myspell-dictionaries provides: - Deliver missing myspell-de_CH and myspell-de_AT to the SUSE Linux Enterprise Basesystem Module. (bsc#1203307) - There are NO code changes. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3447=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3447=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-3447=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-3447=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-3447=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-3447=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3447=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3447=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): myspell-dictionaries-20191219-150000.3.25.1 myspell-lightproof-en-20191219-150000.3.25.1 myspell-lightproof-hu_HU-20191219-150000.3.25.1 myspell-lightproof-pt_BR-20191219-150000.3.25.1 myspell-lightproof-ru_RU-20191219-150000.3.25.1 - openSUSE Leap 15.4 (noarch): myspell-af_NA-20191219-150000.3.25.1 myspell-af_ZA-20191219-150000.3.25.1 myspell-an-20191219-150000.3.25.1 myspell-an_ES-20191219-150000.3.25.1 myspell-ar-20191219-150000.3.25.1 myspell-ar_AE-20191219-150000.3.25.1 myspell-ar_BH-20191219-150000.3.25.1 myspell-ar_DZ-20191219-150000.3.25.1 myspell-ar_EG-20191219-150000.3.25.1 myspell-ar_IQ-20191219-150000.3.25.1 myspell-ar_JO-20191219-150000.3.25.1 myspell-ar_KW-20191219-150000.3.25.1 myspell-ar_LB-20191219-150000.3.25.1 myspell-ar_LY-20191219-150000.3.25.1 myspell-ar_MA-20191219-150000.3.25.1 myspell-ar_OM-20191219-150000.3.25.1 myspell-ar_QA-20191219-150000.3.25.1 myspell-ar_SA-20191219-150000.3.25.1 myspell-ar_SD-20191219-150000.3.25.1 myspell-ar_SY-20191219-150000.3.25.1 myspell-ar_TN-20191219-150000.3.25.1 myspell-ar_YE-20191219-150000.3.25.1 myspell-be_BY-20191219-150000.3.25.1 myspell-bg_BG-20191219-150000.3.25.1 myspell-bn_BD-20191219-150000.3.25.1 myspell-bn_IN-20191219-150000.3.25.1 myspell-bo-20191219-150000.3.25.1 myspell-bo_CN-20191219-150000.3.25.1 myspell-bo_IN-20191219-150000.3.25.1 myspell-br_FR-20191219-150000.3.25.1 myspell-bs-20191219-150000.3.25.1 myspell-bs_BA-20191219-150000.3.25.1 myspell-ca-20191219-150000.3.25.1 myspell-ca_AD-20191219-150000.3.25.1 myspell-ca_ES-20191219-150000.3.25.1 myspell-ca_ES_valencia-20191219-150000.3.25.1 myspell-ca_FR-20191219-150000.3.25.1 myspell-ca_IT-20191219-150000.3.25.1 myspell-cs_CZ-20191219-150000.3.25.1 myspell-da_DK-20191219-150000.3.25.1 myspell-de-20191219-150000.3.25.1 myspell-de_AT-20191219-150000.3.25.1 myspell-de_CH-20191219-150000.3.25.1 myspell-de_DE-20191219-150000.3.25.1 myspell-el_GR-20191219-150000.3.25.1 myspell-en-20191219-150000.3.25.1 myspell-en_AU-20191219-150000.3.25.1 myspell-en_BS-20191219-150000.3.25.1 myspell-en_BZ-20191219-150000.3.25.1 myspell-en_CA-20191219-150000.3.25.1 myspell-en_GB-20191219-150000.3.25.1 myspell-en_GH-20191219-150000.3.25.1 myspell-en_IE-20191219-150000.3.25.1 myspell-en_IN-20191219-150000.3.25.1 myspell-en_JM-20191219-150000.3.25.1 myspell-en_MW-20191219-150000.3.25.1 myspell-en_NA-20191219-150000.3.25.1 myspell-en_NZ-20191219-150000.3.25.1 myspell-en_PH-20191219-150000.3.25.1 myspell-en_TT-20191219-150000.3.25.1 myspell-en_US-20191219-150000.3.25.1 myspell-en_ZA-20191219-150000.3.25.1 myspell-en_ZW-20191219-150000.3.25.1 myspell-es-20191219-150000.3.25.1 myspell-es_AR-20191219-150000.3.25.1 myspell-es_BO-20191219-150000.3.25.1 myspell-es_CL-20191219-150000.3.25.1 myspell-es_CO-20191219-150000.3.25.1 myspell-es_CR-20191219-150000.3.25.1 myspell-es_CU-20191219-150000.3.25.1 myspell-es_DO-20191219-150000.3.25.1 myspell-es_EC-20191219-150000.3.25.1 myspell-es_ES-20191219-150000.3.25.1 myspell-es_GT-20191219-150000.3.25.1 myspell-es_HN-20191219-150000.3.25.1 myspell-es_MX-20191219-150000.3.25.1 myspell-es_NI-20191219-150000.3.25.1 myspell-es_PA-20191219-150000.3.25.1 myspell-es_PE-20191219-150000.3.25.1 myspell-es_PR-20191219-150000.3.25.1 myspell-es_PY-20191219-150000.3.25.1 myspell-es_SV-20191219-150000.3.25.1 myspell-es_UY-20191219-150000.3.25.1 myspell-es_VE-20191219-150000.3.25.1 myspell-et_EE-20191219-150000.3.25.1 myspell-fr_BE-20191219-150000.3.25.1 myspell-fr_CA-20191219-150000.3.25.1 myspell-fr_CH-20191219-150000.3.25.1 myspell-fr_FR-20191219-150000.3.25.1 myspell-fr_LU-20191219-150000.3.25.1 myspell-fr_MC-20191219-150000.3.25.1 myspell-gd_GB-20191219-150000.3.25.1 myspell-gl-20191219-150000.3.25.1 myspell-gl_ES-20191219-150000.3.25.1 myspell-gu_IN-20191219-150000.3.25.1 myspell-gug-20191219-150000.3.25.1 myspell-gug_PY-20191219-150000.3.25.1 myspell-he_IL-20191219-150000.3.25.1 myspell-hi_IN-20191219-150000.3.25.1 myspell-hr_HR-20191219-150000.3.25.1 myspell-hu_HU-20191219-150000.3.25.1 myspell-id-20191219-150000.3.25.1 myspell-id_ID-20191219-150000.3.25.1 myspell-is-20191219-150000.3.25.1 myspell-is_IS-20191219-150000.3.25.1 myspell-it_IT-20191219-150000.3.25.1 myspell-kmr_Latn-20191219-150000.3.25.1 myspell-kmr_Latn_SY-20191219-150000.3.25.1 myspell-kmr_Latn_TR-20191219-150000.3.25.1 myspell-lo_LA-20191219-150000.3.25.1 myspell-lt_LT-20191219-150000.3.25.1 myspell-lv_LV-20191219-150000.3.25.1 myspell-nb_NO-20191219-150000.3.25.1 myspell-ne_NP-20191219-150000.3.25.1 myspell-nl_BE-20191219-150000.3.25.1 myspell-nl_NL-20191219-150000.3.25.1 myspell-nn_NO-20191219-150000.3.25.1 myspell-no-20191219-150000.3.25.1 myspell-oc_FR-20191219-150000.3.25.1 myspell-pl_PL-20191219-150000.3.25.1 myspell-pt_AO-20191219-150000.3.25.1 myspell-pt_BR-20191219-150000.3.25.1 myspell-pt_PT-20191219-150000.3.25.1 myspell-ro-20191219-150000.3.25.1 myspell-ro_RO-20191219-150000.3.25.1 myspell-ru_RU-20191219-150000.3.25.1 myspell-si_LK-20191219-150000.3.25.1 myspell-sk_SK-20191219-150000.3.25.1 myspell-sl_SI-20191219-150000.3.25.1 myspell-sq_AL-20191219-150000.3.25.1 myspell-sr-20191219-150000.3.25.1 myspell-sr_CS-20191219-150000.3.25.1 myspell-sr_Latn_CS-20191219-150000.3.25.1 myspell-sr_Latn_RS-20191219-150000.3.25.1 myspell-sr_RS-20191219-150000.3.25.1 myspell-sv_FI-20191219-150000.3.25.1 myspell-sv_SE-20191219-150000.3.25.1 myspell-sw_TZ-20191219-150000.3.25.1 myspell-te-20191219-150000.3.25.1 myspell-te_IN-20191219-150000.3.25.1 myspell-th_TH-20191219-150000.3.25.1 myspell-tr-20191219-150000.3.25.1 myspell-tr_TR-20191219-150000.3.25.1 myspell-uk_UA-20191219-150000.3.25.1 myspell-vi-20191219-150000.3.25.1 myspell-vi_VN-20191219-150000.3.25.1 myspell-zu_ZA-20191219-150000.3.25.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): myspell-dictionaries-20191219-150000.3.25.1 myspell-lightproof-en-20191219-150000.3.25.1 myspell-lightproof-hu_HU-20191219-150000.3.25.1 myspell-lightproof-pt_BR-20191219-150000.3.25.1 myspell-lightproof-ru_RU-20191219-150000.3.25.1 - openSUSE Leap 15.3 (noarch): myspell-af_NA-20191219-150000.3.25.1 myspell-af_ZA-20191219-150000.3.25.1 myspell-an-20191219-150000.3.25.1 myspell-an_ES-20191219-150000.3.25.1 myspell-ar-20191219-150000.3.25.1 myspell-ar_AE-20191219-150000.3.25.1 myspell-ar_BH-20191219-150000.3.25.1 myspell-ar_DZ-20191219-150000.3.25.1 myspell-ar_EG-20191219-150000.3.25.1 myspell-ar_IQ-20191219-150000.3.25.1 myspell-ar_JO-20191219-150000.3.25.1 myspell-ar_KW-20191219-150000.3.25.1 myspell-ar_LB-20191219-150000.3.25.1 myspell-ar_LY-20191219-150000.3.25.1 myspell-ar_MA-20191219-150000.3.25.1 myspell-ar_OM-20191219-150000.3.25.1 myspell-ar_QA-20191219-150000.3.25.1 myspell-ar_SA-20191219-150000.3.25.1 myspell-ar_SD-20191219-150000.3.25.1 myspell-ar_SY-20191219-150000.3.25.1 myspell-ar_TN-20191219-150000.3.25.1 myspell-ar_YE-20191219-150000.3.25.1 myspell-be_BY-20191219-150000.3.25.1 myspell-bg_BG-20191219-150000.3.25.1 myspell-bn_BD-20191219-150000.3.25.1 myspell-bn_IN-20191219-150000.3.25.1 myspell-bo-20191219-150000.3.25.1 myspell-bo_CN-20191219-150000.3.25.1 myspell-bo_IN-20191219-150000.3.25.1 myspell-br_FR-20191219-150000.3.25.1 myspell-bs-20191219-150000.3.25.1 myspell-bs_BA-20191219-150000.3.25.1 myspell-ca-20191219-150000.3.25.1 myspell-ca_AD-20191219-150000.3.25.1 myspell-ca_ES-20191219-150000.3.25.1 myspell-ca_ES_valencia-20191219-150000.3.25.1 myspell-ca_FR-20191219-150000.3.25.1 myspell-ca_IT-20191219-150000.3.25.1 myspell-cs_CZ-20191219-150000.3.25.1 myspell-da_DK-20191219-150000.3.25.1 myspell-de-20191219-150000.3.25.1 myspell-de_AT-20191219-150000.3.25.1 myspell-de_CH-20191219-150000.3.25.1 myspell-de_DE-20191219-150000.3.25.1 myspell-el_GR-20191219-150000.3.25.1 myspell-en-20191219-150000.3.25.1 myspell-en_AU-20191219-150000.3.25.1 myspell-en_BS-20191219-150000.3.25.1 myspell-en_BZ-20191219-150000.3.25.1 myspell-en_CA-20191219-150000.3.25.1 myspell-en_GB-20191219-150000.3.25.1 myspell-en_GH-20191219-150000.3.25.1 myspell-en_IE-20191219-150000.3.25.1 myspell-en_IN-20191219-150000.3.25.1 myspell-en_JM-20191219-150000.3.25.1 myspell-en_MW-20191219-150000.3.25.1 myspell-en_NA-20191219-150000.3.25.1 myspell-en_NZ-20191219-150000.3.25.1 myspell-en_PH-20191219-150000.3.25.1 myspell-en_TT-20191219-150000.3.25.1 myspell-en_US-20191219-150000.3.25.1 myspell-en_ZA-20191219-150000.3.25.1 myspell-en_ZW-20191219-150000.3.25.1 myspell-es-20191219-150000.3.25.1 myspell-es_AR-20191219-150000.3.25.1 myspell-es_BO-20191219-150000.3.25.1 myspell-es_CL-20191219-150000.3.25.1 myspell-es_CO-20191219-150000.3.25.1 myspell-es_CR-20191219-150000.3.25.1 myspell-es_CU-20191219-150000.3.25.1 myspell-es_DO-20191219-150000.3.25.1 myspell-es_EC-20191219-150000.3.25.1 myspell-es_ES-20191219-150000.3.25.1 myspell-es_GT-20191219-150000.3.25.1 myspell-es_HN-20191219-150000.3.25.1 myspell-es_MX-20191219-150000.3.25.1 myspell-es_NI-20191219-150000.3.25.1 myspell-es_PA-20191219-150000.3.25.1 myspell-es_PE-20191219-150000.3.25.1 myspell-es_PR-20191219-150000.3.25.1 myspell-es_PY-20191219-150000.3.25.1 myspell-es_SV-20191219-150000.3.25.1 myspell-es_UY-20191219-150000.3.25.1 myspell-es_VE-20191219-150000.3.25.1 myspell-et_EE-20191219-150000.3.25.1 myspell-fr_BE-20191219-150000.3.25.1 myspell-fr_CA-20191219-150000.3.25.1 myspell-fr_CH-20191219-150000.3.25.1 myspell-fr_FR-20191219-150000.3.25.1 myspell-fr_LU-20191219-150000.3.25.1 myspell-fr_MC-20191219-150000.3.25.1 myspell-gd_GB-20191219-150000.3.25.1 myspell-gl-20191219-150000.3.25.1 myspell-gl_ES-20191219-150000.3.25.1 myspell-gu_IN-20191219-150000.3.25.1 myspell-gug-20191219-150000.3.25.1 myspell-gug_PY-20191219-150000.3.25.1 myspell-he_IL-20191219-150000.3.25.1 myspell-hi_IN-20191219-150000.3.25.1 myspell-hr_HR-20191219-150000.3.25.1 myspell-hu_HU-20191219-150000.3.25.1 myspell-id-20191219-150000.3.25.1 myspell-id_ID-20191219-150000.3.25.1 myspell-is-20191219-150000.3.25.1 myspell-is_IS-20191219-150000.3.25.1 myspell-it_IT-20191219-150000.3.25.1 myspell-kmr_Latn-20191219-150000.3.25.1 myspell-kmr_Latn_SY-20191219-150000.3.25.1 myspell-kmr_Latn_TR-20191219-150000.3.25.1 myspell-lo_LA-20191219-150000.3.25.1 myspell-lt_LT-20191219-150000.3.25.1 myspell-lv_LV-20191219-150000.3.25.1 myspell-nb_NO-20191219-150000.3.25.1 myspell-ne_NP-20191219-150000.3.25.1 myspell-nl_BE-20191219-150000.3.25.1 myspell-nl_NL-20191219-150000.3.25.1 myspell-nn_NO-20191219-150000.3.25.1 myspell-no-20191219-150000.3.25.1 myspell-oc_FR-20191219-150000.3.25.1 myspell-pl_PL-20191219-150000.3.25.1 myspell-pt_AO-20191219-150000.3.25.1 myspell-pt_BR-20191219-150000.3.25.1 myspell-pt_PT-20191219-150000.3.25.1 myspell-ro-20191219-150000.3.25.1 myspell-ro_RO-20191219-150000.3.25.1 myspell-ru_RU-20191219-150000.3.25.1 myspell-si_LK-20191219-150000.3.25.1 myspell-sk_SK-20191219-150000.3.25.1 myspell-sl_SI-20191219-150000.3.25.1 myspell-sq_AL-20191219-150000.3.25.1 myspell-sr-20191219-150000.3.25.1 myspell-sr_CS-20191219-150000.3.25.1 myspell-sr_Latn_CS-20191219-150000.3.25.1 myspell-sr_Latn_RS-20191219-150000.3.25.1 myspell-sr_RS-20191219-150000.3.25.1 myspell-sv_FI-20191219-150000.3.25.1 myspell-sv_SE-20191219-150000.3.25.1 myspell-sw_TZ-20191219-150000.3.25.1 myspell-te-20191219-150000.3.25.1 myspell-te_IN-20191219-150000.3.25.1 myspell-th_TH-20191219-150000.3.25.1 myspell-tr-20191219-150000.3.25.1 myspell-tr_TR-20191219-150000.3.25.1 myspell-uk_UA-20191219-150000.3.25.1 myspell-vi-20191219-150000.3.25.1 myspell-vi_VN-20191219-150000.3.25.1 myspell-zu_ZA-20191219-150000.3.25.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (noarch): myspell-af_ZA-20191219-150000.3.25.1 myspell-ar-20191219-150000.3.25.1 myspell-bg_BG-20191219-150000.3.25.1 myspell-bn_BD-20191219-150000.3.25.1 myspell-br_FR-20191219-150000.3.25.1 myspell-ca-20191219-150000.3.25.1 myspell-cs_CZ-20191219-150000.3.25.1 myspell-da_DK-20191219-150000.3.25.1 myspell-el_GR-20191219-150000.3.25.1 myspell-et_EE-20191219-150000.3.25.1 myspell-fr_FR-20191219-150000.3.25.1 myspell-gl-20191219-150000.3.25.1 myspell-gu_IN-20191219-150000.3.25.1 myspell-he_IL-20191219-150000.3.25.1 myspell-hi_IN-20191219-150000.3.25.1 myspell-hr_HR-20191219-150000.3.25.1 myspell-it_IT-20191219-150000.3.25.1 myspell-lt_LT-20191219-150000.3.25.1 myspell-lv_LV-20191219-150000.3.25.1 myspell-nl_NL-20191219-150000.3.25.1 myspell-nn_NO-20191219-150000.3.25.1 myspell-pl_PL-20191219-150000.3.25.1 myspell-pt_PT-20191219-150000.3.25.1 myspell-si_LK-20191219-150000.3.25.1 myspell-sk_SK-20191219-150000.3.25.1 myspell-sl_SI-20191219-150000.3.25.1 myspell-sr-20191219-150000.3.25.1 myspell-sv_SE-20191219-150000.3.25.1 myspell-te_IN-20191219-150000.3.25.1 myspell-th_TH-20191219-150000.3.25.1 myspell-tr_TR-20191219-150000.3.25.1 myspell-uk_UA-20191219-150000.3.25.1 myspell-zu_ZA-20191219-150000.3.25.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (noarch): myspell-af_ZA-20191219-150000.3.25.1 myspell-ar-20191219-150000.3.25.1 myspell-bg_BG-20191219-150000.3.25.1 myspell-bn_BD-20191219-150000.3.25.1 myspell-br_FR-20191219-150000.3.25.1 myspell-ca-20191219-150000.3.25.1 myspell-cs_CZ-20191219-150000.3.25.1 myspell-da_DK-20191219-150000.3.25.1 myspell-el_GR-20191219-150000.3.25.1 myspell-et_EE-20191219-150000.3.25.1 myspell-fr_FR-20191219-150000.3.25.1 myspell-gl-20191219-150000.3.25.1 myspell-gu_IN-20191219-150000.3.25.1 myspell-he_IL-20191219-150000.3.25.1 myspell-hi_IN-20191219-150000.3.25.1 myspell-hr_HR-20191219-150000.3.25.1 myspell-it_IT-20191219-150000.3.25.1 myspell-lt_LT-20191219-150000.3.25.1 myspell-lv_LV-20191219-150000.3.25.1 myspell-nl_NL-20191219-150000.3.25.1 myspell-nn_NO-20191219-150000.3.25.1 myspell-pl_PL-20191219-150000.3.25.1 myspell-pt_PT-20191219-150000.3.25.1 myspell-si_LK-20191219-150000.3.25.1 myspell-sk_SK-20191219-150000.3.25.1 myspell-sl_SI-20191219-150000.3.25.1 myspell-sr-20191219-150000.3.25.1 myspell-sv_SE-20191219-150000.3.25.1 myspell-te_IN-20191219-150000.3.25.1 myspell-th_TH-20191219-150000.3.25.1 myspell-tr_TR-20191219-150000.3.25.1 myspell-uk_UA-20191219-150000.3.25.1 myspell-zu_ZA-20191219-150000.3.25.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (noarch): myspell-af_ZA-20191219-150000.3.25.1 myspell-ar-20191219-150000.3.25.1 myspell-be_BY-20191219-150000.3.25.1 myspell-bg_BG-20191219-150000.3.25.1 myspell-bn_BD-20191219-150000.3.25.1 myspell-bn_IN-20191219-150000.3.25.1 myspell-bo-20191219-150000.3.25.1 myspell-br_FR-20191219-150000.3.25.1 myspell-ca-20191219-150000.3.25.1 myspell-ca_ES_valencia-20191219-150000.3.25.1 myspell-cs_CZ-20191219-150000.3.25.1 myspell-da_DK-20191219-150000.3.25.1 myspell-el_GR-20191219-150000.3.25.1 myspell-en_GB-20191219-150000.3.25.1 myspell-en_ZA-20191219-150000.3.25.1 myspell-et_EE-20191219-150000.3.25.1 myspell-fr_FR-20191219-150000.3.25.1 myspell-gd_GB-20191219-150000.3.25.1 myspell-gl-20191219-150000.3.25.1 myspell-gu_IN-20191219-150000.3.25.1 myspell-gug-20191219-150000.3.25.1 myspell-he_IL-20191219-150000.3.25.1 myspell-hi_IN-20191219-150000.3.25.1 myspell-hr_HR-20191219-150000.3.25.1 myspell-id-20191219-150000.3.25.1 myspell-is-20191219-150000.3.25.1 myspell-it_IT-20191219-150000.3.25.1 myspell-kmr_Latn-20191219-150000.3.25.1 myspell-lo_LA-20191219-150000.3.25.1 myspell-lt_LT-20191219-150000.3.25.1 myspell-lv_LV-20191219-150000.3.25.1 myspell-ne_NP-20191219-150000.3.25.1 myspell-nl_NL-20191219-150000.3.25.1 myspell-nn_NO-20191219-150000.3.25.1 myspell-oc_FR-20191219-150000.3.25.1 myspell-pl_PL-20191219-150000.3.25.1 myspell-pt_PT-20191219-150000.3.25.1 myspell-si_LK-20191219-150000.3.25.1 myspell-sk_SK-20191219-150000.3.25.1 myspell-sl_SI-20191219-150000.3.25.1 myspell-sq_AL-20191219-150000.3.25.1 myspell-sr-20191219-150000.3.25.1 myspell-sv_SE-20191219-150000.3.25.1 myspell-sw_TZ-20191219-150000.3.25.1 myspell-te_IN-20191219-150000.3.25.1 myspell-th_TH-20191219-150000.3.25.1 myspell-tr_TR-20191219-150000.3.25.1 myspell-uk_UA-20191219-150000.3.25.1 myspell-vi-20191219-150000.3.25.1 myspell-zu_ZA-20191219-150000.3.25.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (noarch): myspell-af_ZA-20191219-150000.3.25.1 myspell-ar-20191219-150000.3.25.1 myspell-be_BY-20191219-150000.3.25.1 myspell-bg_BG-20191219-150000.3.25.1 myspell-bn_BD-20191219-150000.3.25.1 myspell-bn_IN-20191219-150000.3.25.1 myspell-bo-20191219-150000.3.25.1 myspell-br_FR-20191219-150000.3.25.1 myspell-ca-20191219-150000.3.25.1 myspell-ca_ES_valencia-20191219-150000.3.25.1 myspell-cs_CZ-20191219-150000.3.25.1 myspell-da_DK-20191219-150000.3.25.1 myspell-el_GR-20191219-150000.3.25.1 myspell-en_GB-20191219-150000.3.25.1 myspell-en_ZA-20191219-150000.3.25.1 myspell-et_EE-20191219-150000.3.25.1 myspell-fr_FR-20191219-150000.3.25.1 myspell-gd_GB-20191219-150000.3.25.1 myspell-gl-20191219-150000.3.25.1 myspell-gu_IN-20191219-150000.3.25.1 myspell-gug-20191219-150000.3.25.1 myspell-he_IL-20191219-150000.3.25.1 myspell-hi_IN-20191219-150000.3.25.1 myspell-hr_HR-20191219-150000.3.25.1 myspell-id-20191219-150000.3.25.1 myspell-is-20191219-150000.3.25.1 myspell-it_IT-20191219-150000.3.25.1 myspell-kmr_Latn-20191219-150000.3.25.1 myspell-lo_LA-20191219-150000.3.25.1 myspell-lt_LT-20191219-150000.3.25.1 myspell-lv_LV-20191219-150000.3.25.1 myspell-ne_NP-20191219-150000.3.25.1 myspell-nl_NL-20191219-150000.3.25.1 myspell-nn_NO-20191219-150000.3.25.1 myspell-oc_FR-20191219-150000.3.25.1 myspell-pl_PL-20191219-150000.3.25.1 myspell-pt_PT-20191219-150000.3.25.1 myspell-si_LK-20191219-150000.3.25.1 myspell-sk_SK-20191219-150000.3.25.1 myspell-sl_SI-20191219-150000.3.25.1 myspell-sq_AL-20191219-150000.3.25.1 myspell-sr-20191219-150000.3.25.1 myspell-sv_SE-20191219-150000.3.25.1 myspell-sw_TZ-20191219-150000.3.25.1 myspell-te_IN-20191219-150000.3.25.1 myspell-th_TH-20191219-150000.3.25.1 myspell-tr_TR-20191219-150000.3.25.1 myspell-uk_UA-20191219-150000.3.25.1 myspell-vi-20191219-150000.3.25.1 myspell-zu_ZA-20191219-150000.3.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): myspell-dictionaries-20191219-150000.3.25.1 myspell-lightproof-en-20191219-150000.3.25.1 myspell-lightproof-hu_HU-20191219-150000.3.25.1 myspell-lightproof-pt_BR-20191219-150000.3.25.1 myspell-lightproof-ru_RU-20191219-150000.3.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): myspell-de-20191219-150000.3.25.1 myspell-de_AT-20191219-150000.3.25.1 myspell-de_CH-20191219-150000.3.25.1 myspell-de_DE-20191219-150000.3.25.1 myspell-en-20191219-150000.3.25.1 myspell-en_US-20191219-150000.3.25.1 myspell-es-20191219-150000.3.25.1 myspell-es_ES-20191219-150000.3.25.1 myspell-hu_HU-20191219-150000.3.25.1 myspell-nb_NO-20191219-150000.3.25.1 myspell-no-20191219-150000.3.25.1 myspell-pt_BR-20191219-150000.3.25.1 myspell-ro-20191219-150000.3.25.1 myspell-ro_RO-20191219-150000.3.25.1 myspell-ru_RU-20191219-150000.3.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): myspell-dictionaries-20191219-150000.3.25.1 myspell-lightproof-en-20191219-150000.3.25.1 myspell-lightproof-hu_HU-20191219-150000.3.25.1 myspell-lightproof-pt_BR-20191219-150000.3.25.1 myspell-lightproof-ru_RU-20191219-150000.3.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): myspell-de-20191219-150000.3.25.1 myspell-de_AT-20191219-150000.3.25.1 myspell-de_CH-20191219-150000.3.25.1 myspell-de_DE-20191219-150000.3.25.1 myspell-en-20191219-150000.3.25.1 myspell-en_US-20191219-150000.3.25.1 myspell-es-20191219-150000.3.25.1 myspell-es_ES-20191219-150000.3.25.1 myspell-hu_HU-20191219-150000.3.25.1 myspell-nb_NO-20191219-150000.3.25.1 myspell-no-20191219-150000.3.25.1 myspell-pt_BR-20191219-150000.3.25.1 myspell-ro-20191219-150000.3.25.1 myspell-ro_RO-20191219-150000.3.25.1 myspell-ru_RU-20191219-150000.3.25.1 References: https://bugzilla.suse.com/1203307

1 0

SUSE-SU-2022:3430-1: important: Security update for dpdk
by opensuse-security＠opensuse.org 27 Sep '22

27 Sep '22

SUSE Security Update: Security update for dpdk ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3430-1 Rating: important References: #1202903 Cross-References: CVE-2022-2132 CVSS scores: CVE-2022-2132 (NVD) : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2022-2132 (SUSE): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server for SAP 15-SP1 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3430=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3430=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3430=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3430=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3430=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3430=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3430=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3430=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): libdpdk-18_11-18.11.9-150100.4.19.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.19.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libdpdk-18_11-18.11.9-150100.4.19.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.19.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): dpdk-18.11.9-150100.4.19.1 dpdk-debuginfo-18.11.9-150100.4.19.1 dpdk-debugsource-18.11.9-150100.4.19.1 dpdk-devel-18.11.9-150100.4.19.1 dpdk-devel-debuginfo-18.11.9-150100.4.19.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-tools-18.11.9-150100.4.19.1 dpdk-tools-debuginfo-18.11.9-150100.4.19.1 libdpdk-18_11-18.11.9-150100.4.19.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.19.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le x86_64): dpdk-18.11.9-150100.4.19.1 dpdk-debuginfo-18.11.9-150100.4.19.1 dpdk-debugsource-18.11.9-150100.4.19.1 dpdk-devel-18.11.9-150100.4.19.1 dpdk-devel-debuginfo-18.11.9-150100.4.19.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-tools-18.11.9-150100.4.19.1 dpdk-tools-debuginfo-18.11.9-150100.4.19.1 libdpdk-18_11-18.11.9-150100.4.19.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.19.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): dpdk-18.11.9-150100.4.19.1 dpdk-debuginfo-18.11.9-150100.4.19.1 dpdk-debugsource-18.11.9-150100.4.19.1 dpdk-devel-18.11.9-150100.4.19.1 dpdk-devel-debuginfo-18.11.9-150100.4.19.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-tools-18.11.9-150100.4.19.1 dpdk-tools-debuginfo-18.11.9-150100.4.19.1 libdpdk-18_11-18.11.9-150100.4.19.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.19.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): dpdk-18.11.9-150100.4.19.1 dpdk-debuginfo-18.11.9-150100.4.19.1 dpdk-debugsource-18.11.9-150100.4.19.1 dpdk-devel-18.11.9-150100.4.19.1 dpdk-devel-debuginfo-18.11.9-150100.4.19.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-tools-18.11.9-150100.4.19.1 dpdk-tools-debuginfo-18.11.9-150100.4.19.1 libdpdk-18_11-18.11.9-150100.4.19.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.19.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): dpdk-18.11.9-150100.4.19.1 dpdk-debuginfo-18.11.9-150100.4.19.1 dpdk-debugsource-18.11.9-150100.4.19.1 dpdk-devel-18.11.9-150100.4.19.1 dpdk-devel-debuginfo-18.11.9-150100.4.19.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-tools-18.11.9-150100.4.19.1 dpdk-tools-debuginfo-18.11.9-150100.4.19.1 libdpdk-18_11-18.11.9-150100.4.19.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.19.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): dpdk-18.11.9-150100.4.19.1 dpdk-debuginfo-18.11.9-150100.4.19.1 dpdk-debugsource-18.11.9-150100.4.19.1 dpdk-devel-18.11.9-150100.4.19.1 dpdk-devel-debuginfo-18.11.9-150100.4.19.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-tools-18.11.9-150100.4.19.1 dpdk-tools-debuginfo-18.11.9-150100.4.19.1 libdpdk-18_11-18.11.9-150100.4.19.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.19.1 - SUSE CaaS Platform 4.0 (x86_64): dpdk-18.11.9-150100.4.19.1 dpdk-debuginfo-18.11.9-150100.4.19.1 dpdk-debugsource-18.11.9-150100.4.19.1 dpdk-devel-18.11.9-150100.4.19.1 dpdk-devel-debuginfo-18.11.9-150100.4.19.1 dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 dpdk-tools-18.11.9-150100.4.19.1 dpdk-tools-debuginfo-18.11.9-150100.4.19.1 libdpdk-18_11-18.11.9-150100.4.19.1 libdpdk-18_11-debuginfo-18.11.9-150100.4.19.1 References: https://www.suse.com/security/cve/CVE-2022-2132.html https://bugzilla.suse.com/1202903

1 0

SUSE-RU-2022:3437-1: important: Recommended update for mariadb-galera
by maintenance＠opensuse.org 27 Sep '22

27 Sep '22

SUSE Recommended Update: Recommended update for mariadb-galera ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3437-1 Rating: important References: #1202760 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for mariadb-galera provides: - Deliver missing mariadb-galera to SUSE Linux Enterprise 15 Service Pack 4 PackageHub - There are NO code changes Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3437=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3437=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libmariadbd-devel-10.6.9-150400.3.14.1 libmariadbd19-10.6.9-150400.3.14.1 libmariadbd19-debuginfo-10.6.9-150400.3.14.1 mariadb-10.6.9-150400.3.14.1 mariadb-bench-10.6.9-150400.3.14.1 mariadb-bench-debuginfo-10.6.9-150400.3.14.1 mariadb-client-10.6.9-150400.3.14.1 mariadb-client-debuginfo-10.6.9-150400.3.14.1 mariadb-debuginfo-10.6.9-150400.3.14.1 mariadb-debugsource-10.6.9-150400.3.14.1 mariadb-galera-10.6.9-150400.3.14.1 mariadb-rpm-macros-10.6.9-150400.3.14.1 mariadb-test-10.6.9-150400.3.14.1 mariadb-test-debuginfo-10.6.9-150400.3.14.1 mariadb-tools-10.6.9-150400.3.14.1 mariadb-tools-debuginfo-10.6.9-150400.3.14.1 - openSUSE Leap 15.4 (noarch): mariadb-errormessages-10.6.9-150400.3.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libmariadbd-devel-10.6.9-150400.3.14.1 libmariadbd19-10.6.9-150400.3.14.1 libmariadbd19-debuginfo-10.6.9-150400.3.14.1 mariadb-10.6.9-150400.3.14.1 mariadb-client-10.6.9-150400.3.14.1 mariadb-client-debuginfo-10.6.9-150400.3.14.1 mariadb-debuginfo-10.6.9-150400.3.14.1 mariadb-debugsource-10.6.9-150400.3.14.1 mariadb-tools-10.6.9-150400.3.14.1 mariadb-tools-debuginfo-10.6.9-150400.3.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): mariadb-errormessages-10.6.9-150400.3.14.1 References: https://bugzilla.suse.com/1202760

1 0

SUSE-RU-2022:3435-1: important: Recommended update for runc
by maintenance＠opensuse.org 27 Sep '22

27 Sep '22

SUSE Recommended Update: Recommended update for runc ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3435-1 Rating: important References: #1202821 Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Containers 15-SP3 SUSE Linux Enterprise Module for Containers 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for runc fixes the following issues: - Fix mounting via wrong proc fd. When the user and mount namespaces are used, and the bind mount is followed by the cgroup mount in the spec, the cgroup was mounted using the bind mount's mount fd. - Fix "permission denied" error from runc run on noexec fs - Fix regression causing a failed 'exec' error after systemctl daemon-reload (bsc#1202821) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3435=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3435=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3435=1 - SUSE Linux Enterprise Module for Containers 15-SP4: zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2022-3435=1 - SUSE Linux Enterprise Module for Containers 15-SP3: zypper in -t patch SUSE-SLE-Module-Containers-15-SP3-2022-3435=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3435=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3435=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2022-3435=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3435=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): runc-1.1.4-150000.33.4 runc-debuginfo-1.1.4-150000.33.4 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): runc-1.1.4-150000.33.4 runc-debuginfo-1.1.4-150000.33.4 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): runc-1.1.4-150000.33.4 runc-debuginfo-1.1.4-150000.33.4 - SUSE Linux Enterprise Module for Containers 15-SP4 (aarch64 ppc64le s390x x86_64): runc-1.1.4-150000.33.4 runc-debuginfo-1.1.4-150000.33.4 - SUSE Linux Enterprise Module for Containers 15-SP3 (aarch64 ppc64le s390x x86_64): runc-1.1.4-150000.33.4 runc-debuginfo-1.1.4-150000.33.4 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): runc-1.1.4-150000.33.4 runc-debuginfo-1.1.4-150000.33.4 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): runc-1.1.4-150000.33.4 runc-debuginfo-1.1.4-150000.33.4 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): runc-1.1.4-150000.33.4 runc-debuginfo-1.1.4-150000.33.4 - SUSE Enterprise Storage 7 (aarch64 x86_64): runc-1.1.4-150000.33.4 runc-debuginfo-1.1.4-150000.33.4 References: https://bugzilla.suse.com/1202821

1 0

openSUSE-SU-2022:10131-1: important: Security update for opera
by opensuse-security＠opensuse.org 27 Sep '22

27 Sep '22

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10131-1 Rating: important References: Cross-References: CVE-2022-3196 CVE-2022-3197 CVE-2022-3198 CVE-2022-3199 CVE-2022-3200 CVE-2022-3201 Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for opera fixes the following issues: Update to 91.0.4516.20 - CHR-9019 Update chromium on desktop-stable-105-4516 to 105.0.5195.127 - DNA-101312 Allow changing logged in user with BrowserAPI - The update to chromium 105.0.5195.127 fixes following issues: CVE-2022-3196, CVE-2022-3197, CVE-2022-3198, CVE-2022-3199, CVE-2022-3200, CVE-2022-3201 Update to 91.0.4516.16 - CHR-9010 Update chromium on desktop-stable-105-4516 to 105.0.5195.102 - DNA-101447 Incorrect translation in Russian - DNA-101482 Crash at ProfileKey::GetProtoDatabaseProvider() - DNA-101495 Performance Stint 2022 - DNA-101551 Add version number info to browser API - DNA-101662 Suppress 'Allowing special test code paths' warning on buildbot - DNA-101753 News don't show after close browser - DNA-101760 Translations for O91 - DNA-101799 Crash at opera::SuggestionList::SortAndCull - DNA-101812 Sponsored site gets chosen as default entry when typing part of top-level domain - DNA-101876 Promote 91 to stable - Complete Opera 91.0 changelog at: https://blogs.opera.com/desktop/changelog-for-91/ - Update to 90.0.4480.107 - DNA-100664 Shopping corner widget - DNA-101495 Performance Stint 2022 - DNA-101753 News don��t show after close browser - DNA-101799 Crash at opera::SuggestionList::SortAndCull Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2022-10131=1 Package List: - openSUSE Leap 15.4:NonFree (x86_64): opera-91.0.4516.20-lp154.2.23.1 References: https://www.suse.com/security/cve/CVE-2022-3196.html https://www.suse.com/security/cve/CVE-2022-3197.html https://www.suse.com/security/cve/CVE-2022-3198.html https://www.suse.com/security/cve/CVE-2022-3199.html https://www.suse.com/security/cve/CVE-2022-3200.html https://www.suse.com/security/cve/CVE-2022-3201.html

1 0

SUSE-RU-2022:3426-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 27 Sep '22

27 Sep '22

SUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3426-1 Rating: moderate References: #1202827 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for osinfo-db fixes the following issues: - Fail to deploy sle15sp5 guest via virt-install with osinfo (bsc#1202827) - Add support for openSUSE Leap 15.5, SLES 15.5, and SLE Micro 5.3 - Update to database version 20220516 Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3426=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3426=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3426=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3426=1 Package List: - openSUSE Leap Micro 5.2 (noarch): osinfo-db-20220727-150300.3.8.1 - openSUSE Leap 15.3 (noarch): osinfo-db-20220727-150300.3.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): osinfo-db-20220727-150300.3.8.1 - SUSE Linux Enterprise Micro 5.2 (noarch): osinfo-db-20220727-150300.3.8.1 References: https://bugzilla.suse.com/1202827

1 0

SUSE-RU-2022:3427-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 27 Sep '22

27 Sep '22

SUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3427-1 Rating: moderate References: #1202827 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for osinfo-db fixes the following issues: - Fail to deploy sle15sp5 guest via virt-install with osinfo (bsc#1202827) - Add support for openSUSE Leap 15.5, SLES 15.5, and SLE Micro 5.3 - Update to database version 20220516 Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3427=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3427=1 Package List: - openSUSE Leap 15.4 (noarch): osinfo-db-20220727-150400.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): osinfo-db-20220727-150400.3.6.1 References: https://bugzilla.suse.com/1202827

1 0

SUSE-SU-2022:3408-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 26 Sep '22

26 Sep '22

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3408-1 Rating: important References: #1177440 #1180153 #1188944 #1191881 #1194535 #1196616 #1197158 #1199482 #1199665 #1201019 #1201420 #1201705 #1201726 #1201948 #1202096 #1202097 #1202154 #1202335 #1202346 #1202347 #1202393 #1202396 #1202672 #1202897 #1202898 #1203098 #1203107 Cross-References: CVE-2020-36516 CVE-2021-4203 CVE-2022-1012 CVE-2022-20368 CVE-2022-20369 CVE-2022-21385 CVE-2022-2588 CVE-2022-26373 CVE-2022-2639 CVE-2022-2663 CVE-2022-29581 CVE-2022-2977 CVE-2022-3028 CVE-2022-36879 CVE-2022-39188 CVSS scores: CVE-2020-36516 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L CVE-2020-36516 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2021-4203 (NVD) : 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2021-4203 (SUSE): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L CVE-2022-1012 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-1012 (SUSE): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2022-20368 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-20368 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-20369 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-20369 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-21385 (NVD) : 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-21385 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-2588 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26373 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-26373 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-2639 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-2639 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-2663 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-2663 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-29581 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-29581 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-2977 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-2977 (SUSE): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H CVE-2022-3028 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-3028 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-36879 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-36879 (SUSE): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-39188 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-39188 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Availability 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise Module for Live Patching 15-SP1 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Storage 6 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has 12 fixes is now available. Description: The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616). - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535). - CVE-2022-1012: Fixed a memory leak problem that was found in the TCP source port generation algorithm in net/ipv4/tcp.c (bnc#1199482). - CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346). - CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347). - CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897). - CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096). - CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726). - CVE-2022-2639: Fixed an integer coercion error that was found in the openvswitch kernel module (bnc#1202154). - CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097). - CVE-2022-29581: Fixed improper update of reference count vulnerability in net/sched that allowed a local attacker to cause privilege escalation to root (bnc#1199665). - CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672). - CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898). - CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948). - CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107). The following non-security bugs were fixed: - rpm: Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019). - cifs: fix error paths in cifs_tree_connect() (bsc#1177440). - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1188944). - cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440). - cifs: skip trailing separators of prefix paths (bsc#1188944). - kernel-obs-build: include qemu_fw_cfg (boo#1201705) - lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325). - md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158). - mm/rmap.c: do not reuse anon_vma if we just want a copy (git-fixes, bsc#1203098). - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (git-fixes, bsc#1203098). - net_sched: cls_route: disallow handle of 0 (bsc#1202393). - net_sched: cls_route: disallow handle of 0 (bsc#1202393). - objtool: Add --backtrace support (bsc#1202396). - objtool: Add support for intra-function calls (bsc#1202396). - objtool: Allow no-op CFI ops in alternatives (bsc#1202396). - objtool: Convert insn type to enum (bsc#1202396). - objtool: Do not use ignore flag for fake jumps (bsc#1202396). - objtool: Fix !CFI insn_state propagation (bsc#1202396). - objtool: Fix ORC vs alternatives (bsc#1202396). - objtool: Fix sibling call detection (bsc#1202396). - objtool: Make handle_insn_ops() unconditional (bsc#1202396). - objtool: Remove INSN_STACK (bsc#1202396). - objtool: Remove check preventing branches within alternative (bsc#1202396). - objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (bsc#1202396). - objtool: Rename struct cfi_state (bsc#1202396). - objtool: Rework allocating stack_ops on decode (bsc#1202396). - objtool: Rewrite alt->skip_orig (bsc#1202396). - objtool: Set insn->func for alternatives (bsc#1202396). - objtool: Support conditional retpolines (bsc#1202396). - objtool: Support multiple stack_op per instruction (bsc#1202396). - objtool: Track original function across branches (bsc#1202396). - objtool: Uniquely identify alternative instruction groups (bsc#1202396). - objtool: Use Elf_Scn typedef instead of assuming struct name (bsc#1202396). - tcp: add some entropy in __inet_hash_connect() (bsc#1180153 bsc#1202335). - tcp: change source port randomizarion at connect() time (bsc#1180153 bsc#1202335). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3408=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3408=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3408=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3408=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3408=1 - SUSE Linux Enterprise Module for Live Patching 15-SP1: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2022-3408=1 Please note that this is the initial kernel livepatch without fixes itself, this livepatch package is later updated by seperate standalone livepatch updates. - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3408=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3408=1 - SUSE Linux Enterprise High Availability 15-SP1: zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2022-3408=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3408=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): kernel-default-base-debuginfo-4.12.14-150100.197.123.1 kernel-vanilla-4.12.14-150100.197.123.1 kernel-vanilla-base-4.12.14-150100.197.123.1 kernel-vanilla-base-debuginfo-4.12.14-150100.197.123.1 kernel-vanilla-debuginfo-4.12.14-150100.197.123.1 kernel-vanilla-debugsource-4.12.14-150100.197.123.1 kernel-vanilla-devel-4.12.14-150100.197.123.1 kernel-vanilla-devel-debuginfo-4.12.14-150100.197.123.1 kernel-vanilla-livepatch-devel-4.12.14-150100.197.123.1 - openSUSE Leap 15.4 (ppc64le x86_64): kernel-debug-base-4.12.14-150100.197.123.1 kernel-debug-base-debuginfo-4.12.14-150100.197.123.1 - openSUSE Leap 15.4 (x86_64): kernel-kvmsmall-base-4.12.14-150100.197.123.1 kernel-kvmsmall-base-debuginfo-4.12.14-150100.197.123.1 - openSUSE Leap 15.4 (s390x): kernel-default-man-4.12.14-150100.197.123.1 kernel-zfcpdump-man-4.12.14-150100.197.123.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): kernel-default-base-debuginfo-4.12.14-150100.197.123.1 kernel-vanilla-4.12.14-150100.197.123.1 kernel-vanilla-base-4.12.14-150100.197.123.1 kernel-vanilla-base-debuginfo-4.12.14-150100.197.123.1 kernel-vanilla-debuginfo-4.12.14-150100.197.123.1 kernel-vanilla-debugsource-4.12.14-150100.197.123.1 kernel-vanilla-devel-4.12.14-150100.197.123.1 kernel-vanilla-devel-debuginfo-4.12.14-150100.197.123.1 kernel-vanilla-livepatch-devel-4.12.14-150100.197.123.1 - openSUSE Leap 15.3 (ppc64le x86_64): kernel-debug-base-4.12.14-150100.197.123.1 kernel-debug-base-debuginfo-4.12.14-150100.197.123.1 - openSUSE Leap 15.3 (x86_64): kernel-kvmsmall-base-4.12.14-150100.197.123.1 kernel-kvmsmall-base-debuginfo-4.12.14-150100.197.123.1 - openSUSE Leap 15.3 (s390x): kernel-default-man-4.12.14-150100.197.123.1 kernel-zfcpdump-man-4.12.14-150100.197.123.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): kernel-default-4.12.14-150100.197.123.1 kernel-default-base-4.12.14-150100.197.123.1 kernel-default-base-debuginfo-4.12.14-150100.197.123.1 kernel-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debugsource-4.12.14-150100.197.123.1 kernel-default-devel-4.12.14-150100.197.123.1 kernel-default-devel-debuginfo-4.12.14-150100.197.123.1 kernel-obs-build-4.12.14-150100.197.123.1 kernel-obs-build-debugsource-4.12.14-150100.197.123.1 kernel-syms-4.12.14-150100.197.123.1 reiserfs-kmp-default-4.12.14-150100.197.123.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.123.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): kernel-devel-4.12.14-150100.197.123.1 kernel-docs-4.12.14-150100.197.123.1 kernel-macros-4.12.14-150100.197.123.1 kernel-source-4.12.14-150100.197.123.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): kernel-default-4.12.14-150100.197.123.1 kernel-default-base-4.12.14-150100.197.123.1 kernel-default-base-debuginfo-4.12.14-150100.197.123.1 kernel-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debugsource-4.12.14-150100.197.123.1 kernel-default-devel-4.12.14-150100.197.123.1 kernel-default-devel-debuginfo-4.12.14-150100.197.123.1 kernel-obs-build-4.12.14-150100.197.123.1 kernel-obs-build-debugsource-4.12.14-150100.197.123.1 kernel-syms-4.12.14-150100.197.123.1 reiserfs-kmp-default-4.12.14-150100.197.123.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.123.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): kernel-devel-4.12.14-150100.197.123.1 kernel-docs-4.12.14-150100.197.123.1 kernel-macros-4.12.14-150100.197.123.1 kernel-source-4.12.14-150100.197.123.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (s390x): kernel-default-man-4.12.14-150100.197.123.1 kernel-zfcpdump-debuginfo-4.12.14-150100.197.123.1 kernel-zfcpdump-debugsource-4.12.14-150100.197.123.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): kernel-devel-4.12.14-150100.197.123.1 kernel-docs-4.12.14-150100.197.123.1 kernel-macros-4.12.14-150100.197.123.1 kernel-source-4.12.14-150100.197.123.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): kernel-default-4.12.14-150100.197.123.1 kernel-default-base-4.12.14-150100.197.123.1 kernel-default-base-debuginfo-4.12.14-150100.197.123.1 kernel-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debugsource-4.12.14-150100.197.123.1 kernel-default-devel-4.12.14-150100.197.123.1 kernel-default-devel-debuginfo-4.12.14-150100.197.123.1 kernel-obs-build-4.12.14-150100.197.123.1 kernel-obs-build-debugsource-4.12.14-150100.197.123.1 kernel-syms-4.12.14-150100.197.123.1 reiserfs-kmp-default-4.12.14-150100.197.123.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.123.1 - SUSE Linux Enterprise Module for Live Patching 15-SP1 (ppc64le x86_64): kernel-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debugsource-4.12.14-150100.197.123.1 kernel-default-livepatch-4.12.14-150100.197.123.1 kernel-default-livepatch-devel-4.12.14-150100.197.123.1 kernel-livepatch-4_12_14-150100_197_123-default-1-150100.3.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): kernel-default-4.12.14-150100.197.123.1 kernel-default-base-4.12.14-150100.197.123.1 kernel-default-base-debuginfo-4.12.14-150100.197.123.1 kernel-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debugsource-4.12.14-150100.197.123.1 kernel-default-devel-4.12.14-150100.197.123.1 kernel-default-devel-debuginfo-4.12.14-150100.197.123.1 kernel-obs-build-4.12.14-150100.197.123.1 kernel-obs-build-debugsource-4.12.14-150100.197.123.1 kernel-syms-4.12.14-150100.197.123.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): kernel-devel-4.12.14-150100.197.123.1 kernel-docs-4.12.14-150100.197.123.1 kernel-macros-4.12.14-150100.197.123.1 kernel-source-4.12.14-150100.197.123.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): kernel-default-4.12.14-150100.197.123.1 kernel-default-base-4.12.14-150100.197.123.1 kernel-default-base-debuginfo-4.12.14-150100.197.123.1 kernel-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debugsource-4.12.14-150100.197.123.1 kernel-default-devel-4.12.14-150100.197.123.1 kernel-default-devel-debuginfo-4.12.14-150100.197.123.1 kernel-obs-build-4.12.14-150100.197.123.1 kernel-obs-build-debugsource-4.12.14-150100.197.123.1 kernel-syms-4.12.14-150100.197.123.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): kernel-devel-4.12.14-150100.197.123.1 kernel-docs-4.12.14-150100.197.123.1 kernel-macros-4.12.14-150100.197.123.1 kernel-source-4.12.14-150100.197.123.1 - SUSE Linux Enterprise High Availability 15-SP1 (aarch64 ppc64le s390x x86_64): cluster-md-kmp-default-4.12.14-150100.197.123.1 cluster-md-kmp-default-debuginfo-4.12.14-150100.197.123.1 dlm-kmp-default-4.12.14-150100.197.123.1 dlm-kmp-default-debuginfo-4.12.14-150100.197.123.1 gfs2-kmp-default-4.12.14-150100.197.123.1 gfs2-kmp-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debugsource-4.12.14-150100.197.123.1 ocfs2-kmp-default-4.12.14-150100.197.123.1 ocfs2-kmp-default-debuginfo-4.12.14-150100.197.123.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): kernel-default-4.12.14-150100.197.123.1 kernel-default-base-4.12.14-150100.197.123.1 kernel-default-base-debuginfo-4.12.14-150100.197.123.1 kernel-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debugsource-4.12.14-150100.197.123.1 kernel-default-devel-4.12.14-150100.197.123.1 kernel-default-devel-debuginfo-4.12.14-150100.197.123.1 kernel-obs-build-4.12.14-150100.197.123.1 kernel-obs-build-debugsource-4.12.14-150100.197.123.1 kernel-syms-4.12.14-150100.197.123.1 reiserfs-kmp-default-4.12.14-150100.197.123.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.123.1 - SUSE Enterprise Storage 6 (noarch): kernel-devel-4.12.14-150100.197.123.1 kernel-docs-4.12.14-150100.197.123.1 kernel-macros-4.12.14-150100.197.123.1 kernel-source-4.12.14-150100.197.123.1 - SUSE CaaS Platform 4.0 (x86_64): kernel-default-4.12.14-150100.197.123.1 kernel-default-base-4.12.14-150100.197.123.1 kernel-default-base-debuginfo-4.12.14-150100.197.123.1 kernel-default-debuginfo-4.12.14-150100.197.123.1 kernel-default-debugsource-4.12.14-150100.197.123.1 kernel-default-devel-4.12.14-150100.197.123.1 kernel-default-devel-debuginfo-4.12.14-150100.197.123.1 kernel-obs-build-4.12.14-150100.197.123.1 kernel-obs-build-debugsource-4.12.14-150100.197.123.1 kernel-syms-4.12.14-150100.197.123.1 reiserfs-kmp-default-4.12.14-150100.197.123.1 reiserfs-kmp-default-debuginfo-4.12.14-150100.197.123.1 - SUSE CaaS Platform 4.0 (noarch): kernel-devel-4.12.14-150100.197.123.1 kernel-docs-4.12.14-150100.197.123.1 kernel-macros-4.12.14-150100.197.123.1 kernel-source-4.12.14-150100.197.123.1 References: https://www.suse.com/security/cve/CVE-2020-36516.html https://www.suse.com/security/cve/CVE-2021-4203.html https://www.suse.com/security/cve/CVE-2022-1012.html https://www.suse.com/security/cve/CVE-2022-20368.html https://www.suse.com/security/cve/CVE-2022-20369.html https://www.suse.com/security/cve/CVE-2022-21385.html https://www.suse.com/security/cve/CVE-2022-2588.html https://www.suse.com/security/cve/CVE-2022-26373.html https://www.suse.com/security/cve/CVE-2022-2639.html https://www.suse.com/security/cve/CVE-2022-2663.html https://www.suse.com/security/cve/CVE-2022-29581.html https://www.suse.com/security/cve/CVE-2022-2977.html https://www.suse.com/security/cve/CVE-2022-3028.html https://www.suse.com/security/cve/CVE-2022-36879.html https://www.suse.com/security/cve/CVE-2022-39188.html https://bugzilla.suse.com/1177440 https://bugzilla.suse.com/1180153 https://bugzilla.suse.com/1188944 https://bugzilla.suse.com/1191881 https://bugzilla.suse.com/1194535 https://bugzilla.suse.com/1196616 https://bugzilla.suse.com/1197158 https://bugzilla.suse.com/1199482 https://bugzilla.suse.com/1199665 https://bugzilla.suse.com/1201019 https://bugzilla.suse.com/1201420 https://bugzilla.suse.com/1201705 https://bugzilla.suse.com/1201726 https://bugzilla.suse.com/1201948 https://bugzilla.suse.com/1202096 https://bugzilla.suse.com/1202097 https://bugzilla.suse.com/1202154 https://bugzilla.suse.com/1202335 https://bugzilla.suse.com/1202346 https://bugzilla.suse.com/1202347 https://bugzilla.suse.com/1202393 https://bugzilla.suse.com/1202396 https://bugzilla.suse.com/1202672 https://bugzilla.suse.com/1202897 https://bugzilla.suse.com/1202898 https://bugzilla.suse.com/1203098 https://bugzilla.suse.com/1203107

1 0

SUSE-SU-2022:3393-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 26 Sep '22

26 Sep '22

SUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3393-1 Rating: moderate References: #1192425 Cross-References: CVE-2021-23177 CVSS scores: CVE-2021-23177 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-23177 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libarchive fixes the following issues: - CVE-2021-23177: Fixed symlink ACL extraction that modifies ACLs of the target system (bsc#1192425). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3393=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3393=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3393=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): bsdtar-3.4.2-150200.4.9.1 bsdtar-debuginfo-3.4.2-150200.4.9.1 libarchive-debugsource-3.4.2-150200.4.9.1 libarchive-devel-3.4.2-150200.4.9.1 libarchive13-3.4.2-150200.4.9.1 libarchive13-debuginfo-3.4.2-150200.4.9.1 - openSUSE Leap 15.3 (x86_64): libarchive13-32bit-3.4.2-150200.4.9.1 libarchive13-32bit-debuginfo-3.4.2-150200.4.9.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): bsdtar-3.4.2-150200.4.9.1 bsdtar-debuginfo-3.4.2-150200.4.9.1 libarchive-debugsource-3.4.2-150200.4.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libarchive-debugsource-3.4.2-150200.4.9.1 libarchive-devel-3.4.2-150200.4.9.1 libarchive13-3.4.2-150200.4.9.1 libarchive13-debuginfo-3.4.2-150200.4.9.1 References: https://www.suse.com/security/cve/CVE-2021-23177.html https://bugzilla.suse.com/1192425

1 0

SUSE-SU-2022:3396-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 26 Sep '22

26 Sep '22

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3396-1 Rating: important References: #1200793 #1201758 #1202645 #1203477 Cross-References: CVE-2022-2200 CVE-2022-2505 CVE-2022-34468 CVE-2022-34469 CVE-2022-34470 CVE-2022-34471 CVE-2022-34472 CVE-2022-34473 CVE-2022-34474 CVE-2022-34475 CVE-2022-34476 CVE-2022-34477 CVE-2022-34478 CVE-2022-34479 CVE-2022-34480 CVE-2022-34481 CVE-2022-34482 CVE-2022-34483 CVE-2022-34484 CVE-2022-34485 CVE-2022-36314 CVE-2022-36318 CVE-2022-36319 CVE-2022-38472 CVE-2022-38473 CVE-2022-38476 CVE-2022-38477 CVE-2022-38478 CVE-2022-40956 CVE-2022-40957 CVE-2022-40958 CVE-2022-40959 CVE-2022-40960 CVE-2022-40962 CVSS scores: CVE-2022-2505 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-34472 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-36314 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-36318 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-36319 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 34 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 102.3.0esr ESR (bsc#1200793, bsc#1201758, bsc#1202645, bsc#1203477): - CVE-2022-40959: Fixed bypassing FeaturePolicy restrictions on transient pages. - CVE-2022-40960: Fixed data-race when parsing non-UTF-8 URLs in threads. - CVE-2022-40958: Fixed bypassing secure context restriction for cookies with __Host and __Secure prefix. - CVE-2022-40956: Fixed content-security-policy base-uri bypass. - CVE-2022-40957: Fixed incoherent instruction cache when building WASM on ARM64. - CVE-2022-40962: Fixed memory safety bugs. - CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error handling. - CVE-2022-38473: Fixed an issue where cross-origin XSLT documents could inherit the parent's permissions. - CVE-2022-38478: Fixed various memory safety issues. - CVE-2022-38476: Fixed data race and potential use-after-free in PK11_ChangePW. - CVE-2022-38477: Fixed memory safety bugs. - CVE-2022-36319: Fixed mouse position spoofing with CSS transforms. - CVE-2022-36318: Fixed directory indexes for bundled resources reflected URL parameters. - CVE-2022-36314: Fixed unexpected network loads when opening local .lnk files. - CVE-2022-2505: Fixed memory safety bugs. - CVE-2022-34479: Fixed vulnerabilty where a popup window could be resized in a way to overlay the address bar with web content. - CVE-2022-34470: Fixed use-after-free in nsSHistory. - CVE-2022-34468: Fixed bypass of CSP sandbox header without `allow-scripts` via retargeted javascript: URI. - CVE-2022-34482: Fixed drag and drop of malicious image that could have led to malicious executable and potential code execution. - CVE-2022-34483: Fixed drag and drop of malicious image that could have led to malicious executable and potential code execution. - CVE-2022-34476: Fixed vulnerability where ASN.1 parser could have been tricked into accepting malformed ASN.1. - CVE-2022-34481: Fixed potential integer overflow in ReplaceElementsAt - CVE-2022-34474: Fixed vulnerability where sandboxed iframes could redirect to external schemes. - CVE-2022-34469: Fixed TLS certificate errors on HSTS-protected domains which could be bypassed by the user on Firefox for Android. - CVE-2022-34471: Fixed vulnerability where a compromised server could trick a browser into an addon downgrade. - CVE-2022-34472: Fixed vulnerability where an unavailable PAC file resulted in OCSP requests being blocked. - CVE-2022-34478: Fixed vulnerability where Microsoft protocols can be attacked if a user accepts a prompt. - CVE-2022-2200: Fixed vulnerability where undesired attributes could be set as part of prototype pollution. - CVE-2022-34480: Fixed free of uninitialized pointer in lg_init. - CVE-2022-34477: Fixed vulnerability in MediaError message property leaking information on cross-origin same-site pages. - CVE-2022-34475: Fixed vulnerability where the HTML Sanitizer could have been bypassed via same-origin script via use tags. - CVE-2022-34473: Fixed vulnerability where the HTML Sanitizer could have been bypassed via use tags. - CVE-2022-34484: Fixed memory safety bugs. - CVE-2022-34485: Fixed memory safety bugs. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3396=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3396=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3396=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3396=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3396=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3396=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3396=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3396=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3396=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3396=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3396=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3396=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3396=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-branding-upstream-102.3.0-150200.152.61.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-branding-upstream-102.3.0-150200.152.61.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Manager Proxy 4.1 (x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le x86_64): MozillaFirefox-devel-102.3.0-150200.152.61.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le x86_64): MozillaFirefox-devel-102.3.0-150200.152.61.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): MozillaFirefox-102.3.0-150200.152.61.1 MozillaFirefox-branding-SLE-102-150200.9.10.1 MozillaFirefox-debuginfo-102.3.0-150200.152.61.1 MozillaFirefox-debugsource-102.3.0-150200.152.61.1 MozillaFirefox-devel-102.3.0-150200.152.61.1 MozillaFirefox-translations-common-102.3.0-150200.152.61.1 MozillaFirefox-translations-other-102.3.0-150200.152.61.1 References: https://www.suse.com/security/cve/CVE-2022-2200.html https://www.suse.com/security/cve/CVE-2022-2505.html https://www.suse.com/security/cve/CVE-2022-34468.html https://www.suse.com/security/cve/CVE-2022-34469.html https://www.suse.com/security/cve/CVE-2022-34470.html https://www.suse.com/security/cve/CVE-2022-34471.html https://www.suse.com/security/cve/CVE-2022-34472.html https://www.suse.com/security/cve/CVE-2022-34473.html https://www.suse.com/security/cve/CVE-2022-34474.html https://www.suse.com/security/cve/CVE-2022-34475.html https://www.suse.com/security/cve/CVE-2022-34476.html https://www.suse.com/security/cve/CVE-2022-34477.html https://www.suse.com/security/cve/CVE-2022-34478.html https://www.suse.com/security/cve/CVE-2022-34479.html https://www.suse.com/security/cve/CVE-2022-34480.html https://www.suse.com/security/cve/CVE-2022-34481.html https://www.suse.com/security/cve/CVE-2022-34482.html https://www.suse.com/security/cve/CVE-2022-34483.html https://www.suse.com/security/cve/CVE-2022-34484.html https://www.suse.com/security/cve/CVE-2022-34485.html https://www.suse.com/security/cve/CVE-2022-36314.html https://www.suse.com/security/cve/CVE-2022-36318.html https://www.suse.com/security/cve/CVE-2022-36319.html https://www.suse.com/security/cve/CVE-2022-38472.html https://www.suse.com/security/cve/CVE-2022-38473.html https://www.suse.com/security/cve/CVE-2022-38476.html https://www.suse.com/security/cve/CVE-2022-38477.html https://www.suse.com/security/cve/CVE-2022-38478.html https://www.suse.com/security/cve/CVE-2022-40956.html https://www.suse.com/security/cve/CVE-2022-40957.html https://www.suse.com/security/cve/CVE-2022-40958.html https://www.suse.com/security/cve/CVE-2022-40959.html https://www.suse.com/security/cve/CVE-2022-40960.html https://www.suse.com/security/cve/CVE-2022-40962.html https://bugzilla.suse.com/1200793 https://bugzilla.suse.com/1201758 https://bugzilla.suse.com/1202645 https://bugzilla.suse.com/1203477

1 0

SUSE-SU-2022:3397-1: important: Security update for snakeyaml
by opensuse-security＠opensuse.org 26 Sep '22

26 Sep '22

SUSE Security Update: Security update for snakeyaml ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3397-1 Rating: important References: #1202932 #1203149 #1203153 #1203154 #1203158 Cross-References: CVE-2020-13936 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 CVSS scores: CVE-2020-13936 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-13936 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25857 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-25857 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38749 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-38749 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38750 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-38750 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38751 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-38751 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38752 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-38752 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Module for SUSE Manager Server 4.2 SUSE Linux Enterprise Module for SUSE Manager Server 4.3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for snakeyaml fixes the following issues: - CVE-2022-38750: Fixed uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject (bsc#1203158). - CVE-2022-38749: Fixed StackOverflowError for many open unmatched brackets (bsc#1203149). - CVE-2022-38752: Fixed uncaught exception in java.base/java.util.ArrayList.hashCode (bsc#1203154). - CVE-2022-38751: Fixed unrestricted data matched with Regular Expressions (bsc#1203153). - CVE-2022-25857: Fixed denial of service vulnerability due missing to nested depth limitation for collections (bsc#1202932). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3397=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3397=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2022-3397=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.2-2022-3397=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3397=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3397=1 Package List: - openSUSE Leap 15.4 (noarch): snakeyaml-1.31-150200.3.8.1 snakeyaml-javadoc-1.31-150200.3.8.1 - openSUSE Leap 15.3 (noarch): snakeyaml-1.31-150200.3.8.1 snakeyaml-javadoc-1.31-150200.3.8.1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3 (noarch): snakeyaml-1.31-150200.3.8.1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2 (noarch): snakeyaml-1.31-150200.3.8.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): snakeyaml-1.31-150200.3.8.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): snakeyaml-1.31-150200.3.8.1 References: https://www.suse.com/security/cve/CVE-2020-13936.html https://www.suse.com/security/cve/CVE-2022-25857.html https://www.suse.com/security/cve/CVE-2022-38749.html https://www.suse.com/security/cve/CVE-2022-38750.html https://www.suse.com/security/cve/CVE-2022-38751.html https://www.suse.com/security/cve/CVE-2022-38752.html https://bugzilla.suse.com/1202932 https://bugzilla.suse.com/1203149 https://bugzilla.suse.com/1203153 https://bugzilla.suse.com/1203154 https://bugzilla.suse.com/1203158

1 0

SUSE-SU-2022:3400-1: moderate: Security update for libcaca
by opensuse-security＠opensuse.org 26 Sep '22

26 Sep '22

SUSE Security Update: Security update for libcaca ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3400-1 Rating: moderate References: #1182731 Cross-References: CVE-2021-3410 CVSS scores: CVE-2021-3410 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-3410 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcaca fixes the following issues: - CVE-2021-3410: Fixed overflow when multiplying large ints (bsc#1182731). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3400=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3400=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3400=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3400=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): caca-utils-0.99.beta19.git20171003-150200.11.9.1 caca-utils-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca-debugsource-0.99.beta19.git20171003-150200.11.9.1 libcaca-devel-0.99.beta19.git20171003-150200.11.9.1 libcaca-ruby-0.99.beta19.git20171003-150200.11.9.1 libcaca-ruby-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca0-0.99.beta19.git20171003-150200.11.9.1 libcaca0-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-debuginfo-0.99.beta19.git20171003-150200.11.9.1 - openSUSE Leap 15.4 (noarch): python3-caca-0.99.beta19.git20171003-150200.11.9.1 - openSUSE Leap 15.4 (x86_64): libcaca0-32bit-0.99.beta19.git20171003-150200.11.9.1 libcaca0-32bit-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-32bit-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-32bit-debuginfo-0.99.beta19.git20171003-150200.11.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): caca-utils-0.99.beta19.git20171003-150200.11.9.1 caca-utils-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca-debugsource-0.99.beta19.git20171003-150200.11.9.1 libcaca-devel-0.99.beta19.git20171003-150200.11.9.1 libcaca-ruby-0.99.beta19.git20171003-150200.11.9.1 libcaca-ruby-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca0-0.99.beta19.git20171003-150200.11.9.1 libcaca0-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-debuginfo-0.99.beta19.git20171003-150200.11.9.1 - openSUSE Leap 15.3 (x86_64): libcaca0-32bit-0.99.beta19.git20171003-150200.11.9.1 libcaca0-32bit-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-32bit-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-32bit-debuginfo-0.99.beta19.git20171003-150200.11.9.1 - openSUSE Leap 15.3 (noarch): python3-caca-0.99.beta19.git20171003-150200.11.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libcaca-debugsource-0.99.beta19.git20171003-150200.11.9.1 libcaca-devel-0.99.beta19.git20171003-150200.11.9.1 libcaca0-0.99.beta19.git20171003-150200.11.9.1 libcaca0-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-debuginfo-0.99.beta19.git20171003-150200.11.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libcaca-debugsource-0.99.beta19.git20171003-150200.11.9.1 libcaca-devel-0.99.beta19.git20171003-150200.11.9.1 libcaca0-0.99.beta19.git20171003-150200.11.9.1 libcaca0-debuginfo-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-0.99.beta19.git20171003-150200.11.9.1 libcaca0-plugins-debuginfo-0.99.beta19.git20171003-150200.11.9.1 References: https://www.suse.com/security/cve/CVE-2021-3410.html https://bugzilla.suse.com/1182731

1 0