September 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2022:3241-1: moderate: Recommended update for cups
by maintenance＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Recommended Update: Recommended update for cups ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3241-1 Rating: moderate References: #1201511 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cups fixes the following issues: - Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0 (bsc#1201511) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3241=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3241=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3241=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3241=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3241=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3241=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3241=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3241=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): cups-config-2.2.7-150000.3.35.1 cups-debuginfo-2.2.7-150000.3.35.1 cups-debugsource-2.2.7-150000.3.35.1 libcups2-2.2.7-150000.3.35.1 libcups2-debuginfo-2.2.7-150000.3.35.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cups-2.2.7-150000.3.35.1 cups-client-2.2.7-150000.3.35.1 cups-client-debuginfo-2.2.7-150000.3.35.1 cups-config-2.2.7-150000.3.35.1 cups-ddk-2.2.7-150000.3.35.1 cups-ddk-debuginfo-2.2.7-150000.3.35.1 cups-debuginfo-2.2.7-150000.3.35.1 cups-debugsource-2.2.7-150000.3.35.1 cups-devel-2.2.7-150000.3.35.1 libcups2-2.2.7-150000.3.35.1 libcups2-debuginfo-2.2.7-150000.3.35.1 libcupscgi1-2.2.7-150000.3.35.1 libcupscgi1-debuginfo-2.2.7-150000.3.35.1 libcupsimage2-2.2.7-150000.3.35.1 libcupsimage2-debuginfo-2.2.7-150000.3.35.1 libcupsmime1-2.2.7-150000.3.35.1 libcupsmime1-debuginfo-2.2.7-150000.3.35.1 libcupsppdc1-2.2.7-150000.3.35.1 libcupsppdc1-debuginfo-2.2.7-150000.3.35.1 - openSUSE Leap 15.4 (x86_64): cups-devel-32bit-2.2.7-150000.3.35.1 libcups2-32bit-2.2.7-150000.3.35.1 libcups2-32bit-debuginfo-2.2.7-150000.3.35.1 libcupscgi1-32bit-2.2.7-150000.3.35.1 libcupscgi1-32bit-debuginfo-2.2.7-150000.3.35.1 libcupsimage2-32bit-2.2.7-150000.3.35.1 libcupsimage2-32bit-debuginfo-2.2.7-150000.3.35.1 libcupsmime1-32bit-2.2.7-150000.3.35.1 libcupsmime1-32bit-debuginfo-2.2.7-150000.3.35.1 libcupsppdc1-32bit-2.2.7-150000.3.35.1 libcupsppdc1-32bit-debuginfo-2.2.7-150000.3.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cups-2.2.7-150000.3.35.1 cups-client-2.2.7-150000.3.35.1 cups-client-debuginfo-2.2.7-150000.3.35.1 cups-config-2.2.7-150000.3.35.1 cups-ddk-2.2.7-150000.3.35.1 cups-ddk-debuginfo-2.2.7-150000.3.35.1 cups-debuginfo-2.2.7-150000.3.35.1 cups-debugsource-2.2.7-150000.3.35.1 cups-devel-2.2.7-150000.3.35.1 libcups2-2.2.7-150000.3.35.1 libcups2-debuginfo-2.2.7-150000.3.35.1 libcupscgi1-2.2.7-150000.3.35.1 libcupscgi1-debuginfo-2.2.7-150000.3.35.1 libcupsimage2-2.2.7-150000.3.35.1 libcupsimage2-debuginfo-2.2.7-150000.3.35.1 libcupsmime1-2.2.7-150000.3.35.1 libcupsmime1-debuginfo-2.2.7-150000.3.35.1 libcupsppdc1-2.2.7-150000.3.35.1 libcupsppdc1-debuginfo-2.2.7-150000.3.35.1 - openSUSE Leap 15.3 (x86_64): cups-devel-32bit-2.2.7-150000.3.35.1 libcups2-32bit-2.2.7-150000.3.35.1 libcups2-32bit-debuginfo-2.2.7-150000.3.35.1 libcupscgi1-32bit-2.2.7-150000.3.35.1 libcupscgi1-32bit-debuginfo-2.2.7-150000.3.35.1 libcupsimage2-32bit-2.2.7-150000.3.35.1 libcupsimage2-32bit-debuginfo-2.2.7-150000.3.35.1 libcupsmime1-32bit-2.2.7-150000.3.35.1 libcupsmime1-32bit-debuginfo-2.2.7-150000.3.35.1 libcupsppdc1-32bit-2.2.7-150000.3.35.1 libcupsppdc1-32bit-debuginfo-2.2.7-150000.3.35.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): cups-ddk-2.2.7-150000.3.35.1 cups-ddk-debuginfo-2.2.7-150000.3.35.1 cups-debuginfo-2.2.7-150000.3.35.1 cups-debugsource-2.2.7-150000.3.35.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): cups-ddk-2.2.7-150000.3.35.1 cups-ddk-debuginfo-2.2.7-150000.3.35.1 cups-debuginfo-2.2.7-150000.3.35.1 cups-debugsource-2.2.7-150000.3.35.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): cups-2.2.7-150000.3.35.1 cups-client-2.2.7-150000.3.35.1 cups-client-debuginfo-2.2.7-150000.3.35.1 cups-config-2.2.7-150000.3.35.1 cups-debuginfo-2.2.7-150000.3.35.1 cups-debugsource-2.2.7-150000.3.35.1 cups-devel-2.2.7-150000.3.35.1 libcups2-2.2.7-150000.3.35.1 libcups2-debuginfo-2.2.7-150000.3.35.1 libcupscgi1-2.2.7-150000.3.35.1 libcupscgi1-debuginfo-2.2.7-150000.3.35.1 libcupsimage2-2.2.7-150000.3.35.1 libcupsimage2-debuginfo-2.2.7-150000.3.35.1 libcupsmime1-2.2.7-150000.3.35.1 libcupsmime1-debuginfo-2.2.7-150000.3.35.1 libcupsppdc1-2.2.7-150000.3.35.1 libcupsppdc1-debuginfo-2.2.7-150000.3.35.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libcups2-32bit-2.2.7-150000.3.35.1 libcups2-32bit-debuginfo-2.2.7-150000.3.35.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): cups-2.2.7-150000.3.35.1 cups-client-2.2.7-150000.3.35.1 cups-client-debuginfo-2.2.7-150000.3.35.1 cups-config-2.2.7-150000.3.35.1 cups-debuginfo-2.2.7-150000.3.35.1 cups-debugsource-2.2.7-150000.3.35.1 cups-devel-2.2.7-150000.3.35.1 libcups2-2.2.7-150000.3.35.1 libcups2-debuginfo-2.2.7-150000.3.35.1 libcupscgi1-2.2.7-150000.3.35.1 libcupscgi1-debuginfo-2.2.7-150000.3.35.1 libcupsimage2-2.2.7-150000.3.35.1 libcupsimage2-debuginfo-2.2.7-150000.3.35.1 libcupsmime1-2.2.7-150000.3.35.1 libcupsmime1-debuginfo-2.2.7-150000.3.35.1 libcupsppdc1-2.2.7-150000.3.35.1 libcupsppdc1-debuginfo-2.2.7-150000.3.35.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libcups2-32bit-2.2.7-150000.3.35.1 libcups2-32bit-debuginfo-2.2.7-150000.3.35.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): cups-config-2.2.7-150000.3.35.1 cups-debuginfo-2.2.7-150000.3.35.1 cups-debugsource-2.2.7-150000.3.35.1 libcups2-2.2.7-150000.3.35.1 libcups2-debuginfo-2.2.7-150000.3.35.1 References: https://bugzilla.suse.com/1201511

1 0

SUSE-SU-2022:3244-1: important: Security update for samba
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3244-1 Rating: important References: #1200102 #1202803 #1202976 Cross-References: CVE-2022-1615 CVE-2022-32743 CVSS scores: CVE-2022-1615 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-1615 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-32743 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-32743 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Availability 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for samba fixes the following issues: - CVE-2022-1615: Fixed error handling in random number generation (bso#15103)(bsc#1202976). - CVE-2022-32743: Implement validated dnsHostName write rights (bso#14833)(bsc#1202803). Bugfixes: - Fixed use after free when iterating smbd_server_connection->connections after tree disconnect failure (bso#15128)(bsc#1200102). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3244=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3244=1 - SUSE Linux Enterprise High Availability 15-SP4: zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2022-3244=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): ctdb-4.15.8+git.527.8d0c05d313e-150400.3.14.1 ctdb-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 ctdb-pcp-pmda-4.15.8+git.527.8d0c05d313e-150400.3.14.1 ctdb-pcp-pmda-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 libsamba-policy-devel-4.15.8+git.527.8d0c05d313e-150400.3.14.1 libsamba-policy-python3-devel-4.15.8+git.527.8d0c05d313e-150400.3.14.1 libsamba-policy0-python3-4.15.8+git.527.8d0c05d313e-150400.3.14.1 libsamba-policy0-python3-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ad-dc-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ad-dc-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ad-dc-libs-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ad-dc-libs-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-libs-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-libs-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-debugsource-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-devel-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-dsdb-modules-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-dsdb-modules-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-gpupdate-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ldb-ldap-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ldb-ldap-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-python3-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-python3-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-python3-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-python3-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-test-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-test-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-tool-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-libs-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-libs-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 - openSUSE Leap 15.4 (aarch64 x86_64): samba-ceph-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ceph-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 - openSUSE Leap 15.4 (x86_64): libsamba-policy0-python3-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 libsamba-policy0-python3-32bit-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ad-dc-libs-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ad-dc-libs-32bit-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-32bit-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-libs-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-libs-32bit-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-devel-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-32bit-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-python3-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-python3-32bit-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-libs-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-libs-32bit-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 - openSUSE Leap 15.4 (noarch): samba-doc-4.15.8+git.527.8d0c05d313e-150400.3.14.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsamba-policy-devel-4.15.8+git.527.8d0c05d313e-150400.3.14.1 libsamba-policy-python3-devel-4.15.8+git.527.8d0c05d313e-150400.3.14.1 libsamba-policy0-python3-4.15.8+git.527.8d0c05d313e-150400.3.14.1 libsamba-policy0-python3-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ad-dc-libs-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ad-dc-libs-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-libs-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-libs-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-debugsource-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-devel-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-dsdb-modules-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-dsdb-modules-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-gpupdate-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ldb-ldap-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ldb-ldap-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-python3-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-python3-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-python3-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-python3-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-libs-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-winbind-libs-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 x86_64): samba-ceph-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-ceph-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): samba-client-libs-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-client-libs-32bit-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-32bit-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-libs-32bit-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 - SUSE Linux Enterprise High Availability 15-SP4 (aarch64 ppc64le s390x x86_64): ctdb-4.15.8+git.527.8d0c05d313e-150400.3.14.1 ctdb-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-debuginfo-4.15.8+git.527.8d0c05d313e-150400.3.14.1 samba-debugsource-4.15.8+git.527.8d0c05d313e-150400.3.14.1 References: https://www.suse.com/security/cve/CVE-2022-1615.html https://www.suse.com/security/cve/CVE-2022-32743.html https://bugzilla.suse.com/1200102 https://bugzilla.suse.com/1202803 https://bugzilla.suse.com/1202976

1 0

SUSE-SU-2022:3250-1: moderate: Security update for nodejs16
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for nodejs16 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3250-1 Rating: moderate References: #1200303 #1200517 #1201710 #1202382 #1202383 Cross-References: CVE-2022-29244 CVE-2022-31150 CVE-2022-35948 CVE-2022-35949 CVSS scores: CVE-2022-29244 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-29244 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-31150 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2022-31150 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-35948 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-35948 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-35949 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-35949 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Web Scripting 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for nodejs16 fixes the following issues: - CVE-2022-35949: Fixed SSRF when an application takes in user input into the path/pathname option of undici.request (bsc#1202382). - CVE-2022-35948: Fixed CRLF injection via Content-Type (bsc#1202383). - CVE-2022-29244: Fixed npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace (bsc#1200517). - CVE-2022-31150: Fixed CRLF injection in node-undici (bsc#1201710). Bugfixes: - Enable crypto-policies for SLE15 SP4+ and TW (bsc#1200303) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3250=1 - SUSE Linux Enterprise Module for Web Scripting 15-SP4: zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP4-2022-3250=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): corepack16-16.17.0-150400.3.6.1 nodejs16-16.17.0-150400.3.6.1 nodejs16-debuginfo-16.17.0-150400.3.6.1 nodejs16-debugsource-16.17.0-150400.3.6.1 nodejs16-devel-16.17.0-150400.3.6.1 npm16-16.17.0-150400.3.6.1 - openSUSE Leap 15.4 (noarch): nodejs16-docs-16.17.0-150400.3.6.1 - SUSE Linux Enterprise Module for Web Scripting 15-SP4 (aarch64 ppc64le s390x x86_64): nodejs16-16.17.0-150400.3.6.1 nodejs16-debuginfo-16.17.0-150400.3.6.1 nodejs16-debugsource-16.17.0-150400.3.6.1 nodejs16-devel-16.17.0-150400.3.6.1 npm16-16.17.0-150400.3.6.1 - SUSE Linux Enterprise Module for Web Scripting 15-SP4 (noarch): nodejs16-docs-16.17.0-150400.3.6.1 References: https://www.suse.com/security/cve/CVE-2022-29244.html https://www.suse.com/security/cve/CVE-2022-31150.html https://www.suse.com/security/cve/CVE-2022-35948.html https://www.suse.com/security/cve/CVE-2022-35949.html https://bugzilla.suse.com/1200303 https://bugzilla.suse.com/1200517 https://bugzilla.suse.com/1201710 https://bugzilla.suse.com/1202382 https://bugzilla.suse.com/1202383

1 0

SUSE-SU-2022:3248-1: important: Security update for qpdf
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for qpdf ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3248-1 Rating: important References: #1188514 Cross-References: CVE-2021-36978 CVSS scores: CVE-2021-36978 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-36978 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for qpdf fixes the following issues: - CVE-2021-36978: Fixed heap-based buffer overflow in Pl_ASCII85Decoder::write (bsc#1188514). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3248=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3248=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3248=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3248=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3248=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3248=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3248=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3248=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3248=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3248=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3248=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3248=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3248=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 qpdf-devel-9.0.2-150200.3.3.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 qpdf-devel-9.0.2-150200.3.3.1 - SUSE Manager Proxy 4.1 (x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 qpdf-devel-9.0.2-150200.3.3.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 qpdf-devel-9.0.2-150200.3.3.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 qpdf-devel-9.0.2-150200.3.3.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 qpdf-devel-9.0.2-150200.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 qpdf-devel-9.0.2-150200.3.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 qpdf-devel-9.0.2-150200.3.3.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libqpdf26-9.0.2-150200.3.3.1 libqpdf26-debuginfo-9.0.2-150200.3.3.1 qpdf-9.0.2-150200.3.3.1 qpdf-debuginfo-9.0.2-150200.3.3.1 qpdf-debugsource-9.0.2-150200.3.3.1 qpdf-devel-9.0.2-150200.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-36978.html https://bugzilla.suse.com/1188514

1 0

SUSE-SU-2022:3246-1: important: Security update for frr
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for frr ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3246-1 Rating: important References: #1202022 #1202023 Cross-References: CVE-2019-25074 CVE-2022-37032 CVSS scores: CVE-2019-25074 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-37032 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for frr fixes the following issues: - CVE-2022-37032: Fixed out-of-bounds read in the BGP daemon that may lead to information disclosure or denial of service (bsc#1202023). - CVE-2019-25074: Fixed a memory leak in the IS-IS daemon that may lead to server memory exhaustion (bsc#1202022). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3246=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3246=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3246=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-3246=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.7.1 frr-debuginfo-7.4-150300.4.7.1 frr-debugsource-7.4-150300.4.7.1 frr-devel-7.4-150300.4.7.1 libfrr0-7.4-150300.4.7.1 libfrr0-debuginfo-7.4-150300.4.7.1 libfrr_pb0-7.4-150300.4.7.1 libfrr_pb0-debuginfo-7.4-150300.4.7.1 libfrrcares0-7.4-150300.4.7.1 libfrrcares0-debuginfo-7.4-150300.4.7.1 libfrrfpm_pb0-7.4-150300.4.7.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.7.1 libfrrgrpc_pb0-7.4-150300.4.7.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.7.1 libfrrospfapiclient0-7.4-150300.4.7.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.7.1 libfrrsnmp0-7.4-150300.4.7.1 libfrrsnmp0-debuginfo-7.4-150300.4.7.1 libfrrzmq0-7.4-150300.4.7.1 libfrrzmq0-debuginfo-7.4-150300.4.7.1 libmlag_pb0-7.4-150300.4.7.1 libmlag_pb0-debuginfo-7.4-150300.4.7.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.7.1 frr-debuginfo-7.4-150300.4.7.1 frr-debugsource-7.4-150300.4.7.1 frr-devel-7.4-150300.4.7.1 libfrr0-7.4-150300.4.7.1 libfrr0-debuginfo-7.4-150300.4.7.1 libfrr_pb0-7.4-150300.4.7.1 libfrr_pb0-debuginfo-7.4-150300.4.7.1 libfrrcares0-7.4-150300.4.7.1 libfrrcares0-debuginfo-7.4-150300.4.7.1 libfrrfpm_pb0-7.4-150300.4.7.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.7.1 libfrrgrpc_pb0-7.4-150300.4.7.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.7.1 libfrrospfapiclient0-7.4-150300.4.7.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.7.1 libfrrsnmp0-7.4-150300.4.7.1 libfrrsnmp0-debuginfo-7.4-150300.4.7.1 libfrrzmq0-7.4-150300.4.7.1 libfrrzmq0-debuginfo-7.4-150300.4.7.1 libmlag_pb0-7.4-150300.4.7.1 libmlag_pb0-debuginfo-7.4-150300.4.7.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.7.1 frr-debuginfo-7.4-150300.4.7.1 frr-debugsource-7.4-150300.4.7.1 frr-devel-7.4-150300.4.7.1 libfrr0-7.4-150300.4.7.1 libfrr0-debuginfo-7.4-150300.4.7.1 libfrr_pb0-7.4-150300.4.7.1 libfrr_pb0-debuginfo-7.4-150300.4.7.1 libfrrcares0-7.4-150300.4.7.1 libfrrcares0-debuginfo-7.4-150300.4.7.1 libfrrfpm_pb0-7.4-150300.4.7.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.7.1 libfrrgrpc_pb0-7.4-150300.4.7.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.7.1 libfrrospfapiclient0-7.4-150300.4.7.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.7.1 libfrrsnmp0-7.4-150300.4.7.1 libfrrsnmp0-debuginfo-7.4-150300.4.7.1 libfrrzmq0-7.4-150300.4.7.1 libfrrzmq0-debuginfo-7.4-150300.4.7.1 libmlag_pb0-7.4-150300.4.7.1 libmlag_pb0-debuginfo-7.4-150300.4.7.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.7.1 frr-debuginfo-7.4-150300.4.7.1 frr-debugsource-7.4-150300.4.7.1 frr-devel-7.4-150300.4.7.1 libfrr0-7.4-150300.4.7.1 libfrr0-debuginfo-7.4-150300.4.7.1 libfrr_pb0-7.4-150300.4.7.1 libfrr_pb0-debuginfo-7.4-150300.4.7.1 libfrrcares0-7.4-150300.4.7.1 libfrrcares0-debuginfo-7.4-150300.4.7.1 libfrrfpm_pb0-7.4-150300.4.7.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.7.1 libfrrgrpc_pb0-7.4-150300.4.7.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.7.1 libfrrospfapiclient0-7.4-150300.4.7.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.7.1 libfrrsnmp0-7.4-150300.4.7.1 libfrrsnmp0-debuginfo-7.4-150300.4.7.1 libfrrzmq0-7.4-150300.4.7.1 libfrrzmq0-debuginfo-7.4-150300.4.7.1 libmlag_pb0-7.4-150300.4.7.1 libmlag_pb0-debuginfo-7.4-150300.4.7.1 References: https://www.suse.com/security/cve/CVE-2019-25074.html https://www.suse.com/security/cve/CVE-2022-37032.html https://bugzilla.suse.com/1202022 https://bugzilla.suse.com/1202023

1 0

SUSE-SU-2022:3245-1: important: Security update for libyang
by opensuse-security＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Security Update: Security update for libyang ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3245-1 Rating: important References: #1186374 #1186375 #1186376 #1186378 Cross-References: CVE-2021-28902 CVE-2021-28903 CVE-2021-28904 CVE-2021-28906 CVSS scores: CVE-2021-28902 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28902 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28903 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28903 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28904 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28904 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28906 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28906 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for libyang fixes the following issues: - CVE-2021-28906: Fixed missing check in read_yin_leaf that can lead to DoS (bsc#1186378) - CVE-2021-28904: Fixed missing check in ext_get_plugin that lead to DoS (bsc#1186376). - CVE-2021-28903: Fixed stack overflow in lyxml_parse_mem (bsc#1186375). - CVE-2021-28902: Fixed missing check in read_yin_container that can lead to DoS (bsc#1186374). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3245=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3245=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3245=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-3245=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libyang-cpp-devel-1.0.184-150300.3.6.1 libyang-cpp1-1.0.184-150300.3.6.1 libyang-cpp1-debuginfo-1.0.184-150300.3.6.1 libyang-debuginfo-1.0.184-150300.3.6.1 libyang-debugsource-1.0.184-150300.3.6.1 libyang-devel-1.0.184-150300.3.6.1 libyang-extentions-1.0.184-150300.3.6.1 libyang-extentions-debuginfo-1.0.184-150300.3.6.1 libyang1-1.0.184-150300.3.6.1 libyang1-debuginfo-1.0.184-150300.3.6.1 python3-yang-1.0.184-150300.3.6.1 python3-yang-debuginfo-1.0.184-150300.3.6.1 yang-tools-1.0.184-150300.3.6.1 yang-tools-debuginfo-1.0.184-150300.3.6.1 - openSUSE Leap 15.4 (noarch): libyang-doc-1.0.184-150300.3.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libyang-cpp-devel-1.0.184-150300.3.6.1 libyang-cpp1-1.0.184-150300.3.6.1 libyang-cpp1-debuginfo-1.0.184-150300.3.6.1 libyang-debuginfo-1.0.184-150300.3.6.1 libyang-debugsource-1.0.184-150300.3.6.1 libyang-devel-1.0.184-150300.3.6.1 libyang-extentions-1.0.184-150300.3.6.1 libyang-extentions-debuginfo-1.0.184-150300.3.6.1 libyang1-1.0.184-150300.3.6.1 libyang1-debuginfo-1.0.184-150300.3.6.1 python3-yang-1.0.184-150300.3.6.1 python3-yang-debuginfo-1.0.184-150300.3.6.1 yang-tools-1.0.184-150300.3.6.1 yang-tools-debuginfo-1.0.184-150300.3.6.1 - openSUSE Leap 15.3 (noarch): libyang-doc-1.0.184-150300.3.6.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libyang-debuginfo-1.0.184-150300.3.6.1 libyang-debugsource-1.0.184-150300.3.6.1 libyang-extentions-1.0.184-150300.3.6.1 libyang-extentions-debuginfo-1.0.184-150300.3.6.1 libyang1-1.0.184-150300.3.6.1 libyang1-debuginfo-1.0.184-150300.3.6.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libyang-debuginfo-1.0.184-150300.3.6.1 libyang-debugsource-1.0.184-150300.3.6.1 libyang-extentions-1.0.184-150300.3.6.1 libyang-extentions-debuginfo-1.0.184-150300.3.6.1 libyang1-1.0.184-150300.3.6.1 libyang1-debuginfo-1.0.184-150300.3.6.1 References: https://www.suse.com/security/cve/CVE-2021-28902.html https://www.suse.com/security/cve/CVE-2021-28903.html https://www.suse.com/security/cve/CVE-2021-28904.html https://www.suse.com/security/cve/CVE-2021-28906.html https://bugzilla.suse.com/1186374 https://bugzilla.suse.com/1186375 https://bugzilla.suse.com/1186376 https://bugzilla.suse.com/1186378

1 0

SUSE-RU-2022:3239-1: moderate: Recommended update for tpm2-0-tss
by maintenance＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Recommended Update: Recommended update for tpm2-0-tss ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3239-1 Rating: moderate References: #1202172 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tpm2-0-tss fixes the following issues: - Fix missing zero initialization of a header data field that could lead to data corruption if the TPM does not support partial read (bsc#1202172) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3239=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3239=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3239=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libtss2-fapi0-2.4.5-150300.3.3.1 libtss2-fapi0-debuginfo-2.4.5-150300.3.3.1 libtss2-sys0-2.4.5-150300.3.3.1 libtss2-sys0-debuginfo-2.4.5-150300.3.3.1 - openSUSE Leap 15.4 (x86_64): libtss2-sys0-32bit-2.4.5-150300.3.3.1 libtss2-sys0-32bit-debuginfo-2.4.5-150300.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libtss2-esys0-2.4.5-150300.3.3.1 libtss2-esys0-debuginfo-2.4.5-150300.3.3.1 libtss2-fapi0-2.4.5-150300.3.3.1 libtss2-fapi0-debuginfo-2.4.5-150300.3.3.1 libtss2-mu0-2.4.5-150300.3.3.1 libtss2-mu0-debuginfo-2.4.5-150300.3.3.1 libtss2-rc0-2.4.5-150300.3.3.1 libtss2-rc0-debuginfo-2.4.5-150300.3.3.1 libtss2-sys0-2.4.5-150300.3.3.1 libtss2-sys0-debuginfo-2.4.5-150300.3.3.1 libtss2-tcti-device0-2.4.5-150300.3.3.1 libtss2-tcti-device0-debuginfo-2.4.5-150300.3.3.1 libtss2-tcti-mssim0-2.4.5-150300.3.3.1 libtss2-tcti-mssim0-debuginfo-2.4.5-150300.3.3.1 libtss2-tctildr0-2.4.5-150300.3.3.1 libtss2-tctildr0-debuginfo-2.4.5-150300.3.3.1 tpm2-0-tss-2.4.5-150300.3.3.1 tpm2-0-tss-debugsource-2.4.5-150300.3.3.1 tpm2-0-tss-devel-2.4.5-150300.3.3.1 - openSUSE Leap 15.3 (x86_64): libtss2-esys0-32bit-2.4.5-150300.3.3.1 libtss2-esys0-32bit-debuginfo-2.4.5-150300.3.3.1 libtss2-mu0-32bit-2.4.5-150300.3.3.1 libtss2-mu0-32bit-debuginfo-2.4.5-150300.3.3.1 libtss2-sys0-32bit-2.4.5-150300.3.3.1 libtss2-sys0-32bit-debuginfo-2.4.5-150300.3.3.1 libtss2-tcti-device0-32bit-2.4.5-150300.3.3.1 libtss2-tcti-device0-32bit-debuginfo-2.4.5-150300.3.3.1 libtss2-tcti-mssim0-32bit-2.4.5-150300.3.3.1 libtss2-tcti-mssim0-32bit-debuginfo-2.4.5-150300.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libtss2-esys0-2.4.5-150300.3.3.1 libtss2-esys0-debuginfo-2.4.5-150300.3.3.1 libtss2-fapi0-2.4.5-150300.3.3.1 libtss2-fapi0-debuginfo-2.4.5-150300.3.3.1 libtss2-mu0-2.4.5-150300.3.3.1 libtss2-mu0-debuginfo-2.4.5-150300.3.3.1 libtss2-rc0-2.4.5-150300.3.3.1 libtss2-rc0-debuginfo-2.4.5-150300.3.3.1 libtss2-sys0-2.4.5-150300.3.3.1 libtss2-sys0-debuginfo-2.4.5-150300.3.3.1 libtss2-tcti-device0-2.4.5-150300.3.3.1 libtss2-tcti-device0-debuginfo-2.4.5-150300.3.3.1 libtss2-tcti-mssim0-2.4.5-150300.3.3.1 libtss2-tcti-mssim0-debuginfo-2.4.5-150300.3.3.1 libtss2-tctildr0-2.4.5-150300.3.3.1 libtss2-tctildr0-debuginfo-2.4.5-150300.3.3.1 tpm2-0-tss-2.4.5-150300.3.3.1 tpm2-0-tss-debugsource-2.4.5-150300.3.3.1 tpm2-0-tss-devel-2.4.5-150300.3.3.1 References: https://bugzilla.suse.com/1202172

1 0

SUSE-RU-2022:3238-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 12 Sep '22

12 Sep '22

SUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3238-1 Rating: moderate References: #1202006 Affected Products: SUSE Linux Enterprise High Availability 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for crmsh fixes the following issues: - Use crmsh.parallax instead of parallax module directly (bsc#1202006) - parallax: Add strict option to avoid raise exception when set to False - Don't open mgmt port since it's deprecated - Don't sync csync2 when peer node's service is not ready Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3238=1 - SUSE Linux Enterprise High Availability 15-SP4: zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2022-3238=1 Package List: - openSUSE Leap 15.4 (noarch): crmsh-4.4.0+20220815.5bbf78a8-150400.3.6.3 crmsh-scripts-4.4.0+20220815.5bbf78a8-150400.3.6.3 crmsh-test-4.4.0+20220815.5bbf78a8-150400.3.6.3 - SUSE Linux Enterprise High Availability 15-SP4 (noarch): crmsh-4.4.0+20220815.5bbf78a8-150400.3.6.3 crmsh-scripts-4.4.0+20220815.5bbf78a8-150400.3.6.3 References: https://bugzilla.suse.com/1202006

1 0

SUSE-SU-2022:3232-1: important: Security update for keepalived
by opensuse-security＠opensuse.org 09 Sep '22

09 Sep '22

SUSE Security Update: Security update for keepalived ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3232-1 Rating: important References: #1193115 #1202808 Cross-References: CVE-2021-44225 CVSS scores: CVE-2021-44225 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-44225 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: SUSE Linux Enterprise High Availability 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for keepalived fixes the following issues: - CVE-2021-44225: Fix a potential privilege escalation due to insufficient control in the D-Bus policy (bsc#1193115). Bugfixes: - Set ProtectKernelModules to false in service file (bsc#1202808). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3232=1 - SUSE Linux Enterprise High Availability 15-SP4: zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2022-3232=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): keepalived-2.2.2-150400.3.5.1 keepalived-debuginfo-2.2.2-150400.3.5.1 keepalived-debugsource-2.2.2-150400.3.5.1 - SUSE Linux Enterprise High Availability 15-SP4 (aarch64 ppc64le s390x x86_64): keepalived-2.2.2-150400.3.5.1 keepalived-debuginfo-2.2.2-150400.3.5.1 keepalived-debugsource-2.2.2-150400.3.5.1 References: https://www.suse.com/security/cve/CVE-2021-44225.html https://bugzilla.suse.com/1193115 https://bugzilla.suse.com/1202808

1 0

SUSE-SU-2022:3229-1: important: Security update for vim
by opensuse-security＠opensuse.org 09 Sep '22

09 Sep '22

SUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3229-1 Rating: important References: #1200270 #1200697 #1200698 #1200700 #1200701 #1200732 #1200884 #1200902 #1200903 #1200904 #1201132 #1201133 #1201134 #1201135 #1201136 #1201150 #1201151 #1201152 #1201153 #1201154 #1201155 #1201249 #1201356 #1201359 #1201363 #1201620 #1201863 #1202046 #1202049 #1202050 #1202051 #1202414 #1202420 #1202421 #1202511 #1202512 #1202515 #1202552 #1202599 #1202687 #1202689 #1202862 Cross-References: CVE-2022-1720 CVE-2022-1968 CVE-2022-2124 CVE-2022-2125 CVE-2022-2126 CVE-2022-2129 CVE-2022-2175 CVE-2022-2182 CVE-2022-2183 CVE-2022-2206 CVE-2022-2207 CVE-2022-2208 CVE-2022-2210 CVE-2022-2231 CVE-2022-2257 CVE-2022-2264 CVE-2022-2284 CVE-2022-2285 CVE-2022-2286 CVE-2022-2287 CVE-2022-2304 CVE-2022-2343 CVE-2022-2344 CVE-2022-2345 CVE-2022-2522 CVE-2022-2571 CVE-2022-2580 CVE-2022-2581 CVE-2022-2598 CVE-2022-2816 CVE-2022-2817 CVE-2022-2819 CVE-2022-2845 CVE-2022-2849 CVE-2022-2862 CVE-2022-2874 CVE-2022-2889 CVE-2022-2923 CVE-2022-2946 CVE-2022-3016 CVSS scores: CVE-2022-1720 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1720 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-1968 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1968 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L CVE-2022-2124 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2124 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2125 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2125 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2126 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2126 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2129 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2129 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2175 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2175 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2182 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2182 (SUSE): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L CVE-2022-2183 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2183 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2022-2206 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2206 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2022-2207 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-2207 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2208 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2208 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2210 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-2210 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-2231 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2231 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2257 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2257 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2264 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2264 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2284 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2284 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2285 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2285 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L CVE-2022-2286 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2286 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2287 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVE-2022-2287 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2304 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2304 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-2343 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2343 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2344 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2344 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2345 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2345 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2522 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2522 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2571 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2571 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-2580 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2580 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-2581 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2581 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2022-2598 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2598 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2816 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2816 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2817 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2817 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2819 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2819 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2845 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2845 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2849 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2849 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2862 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2862 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L CVE-2022-2874 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2874 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2889 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2889 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2923 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-2923 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-2946 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-2946 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-3016 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-3016 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that solves 40 vulnerabilities and has two fixes is now available. Description: This update for vim fixes the following issues: Updated to version 9.0 with patch level 0313: - CVE-2022-2183: Fixed out-of-bounds read through get_lisp_indent() (bsc#1200902). - CVE-2022-2182: Fixed heap-based buffer overflow through parse_cmd_address() (bsc#1200903). - CVE-2022-2175: Fixed buffer over-read through cmdline_insert_reg() (bsc#1200904). - CVE-2022-2304: Fixed stack buffer overflow in spell_dump_compl() (bsc#1201249). - CVE-2022-2343: Fixed heap-based buffer overflow in GitHub repository vim prior to 9.0.0044 (bsc#1201356). - CVE-2022-2344: Fixed another heap-based buffer overflow vim prior to 9.0.0045 (bsc#1201359). - CVE-2022-2345: Fixed use after free in GitHub repository vim prior to 9.0.0046. (bsc#1201363). - CVE-2022-2819: Fixed heap-based Buffer Overflow in compile_lock_unlock() (bsc#1202414). - CVE-2022-2874: Fixed NULL Pointer Dereference in generate_loadvar() (bsc#1202552). - CVE-2022-1968: Fixed use after free in utf_ptr2char (bsc#1200270). - CVE-2022-2124: Fixed out of bounds read in current_quote() (bsc#1200697). - CVE-2022-2125: Fixed out of bounds read in get_lisp_indent() (bsc#1200698). - CVE-2022-2126: Fixed out of bounds read in suggest_trie_walk() (bsc#1200700). - CVE-2022-2129: Fixed out of bounds write in vim_regsub_both() (bsc#1200701). - CVE-2022-1720: Fixed out of bounds read in grab_file_name() (bsc#1200732). - CVE-2022-2264: Fixed out of bounds read in inc() (bsc#1201132). - CVE-2022-2284: Fixed out of bounds read in utfc_ptr2len() (bsc#1201133). - CVE-2022-2285: Fixed negative size passed to memmove() due to integer overflow (bsc#1201134). - CVE-2022-2286: Fixed out of bounds read in ins_bytes() (bsc#1201135). - CVE-2022-2287: Fixed out of bounds read in suggest_trie_walk() (bsc#1201136). - CVE-2022-2231: Fixed null pointer dereference skipwhite() (bsc#1201150). - CVE-2022-2210: Fixed out of bounds read in ml_append_int() (bsc#1201151). - CVE-2022-2208: Fixed null pointer dereference in diff_check() (bsc#1201152). - CVE-2022-2207: Fixed out of bounds read in ins_bs() (bsc#1201153). - CVE-2022-2257: Fixed out of bounds read in msg_outtrans_special() (bsc#1201154). - CVE-2022-2206: Fixed out of bounds read in msg_outtrans_attr() (bsc#1201155). - CVE-2022-2522: Fixed out of bounds read via nested autocommand (bsc#1201863). - CVE-2022-2571: Fixed heap-based buffer overflow related to ins_comp_get_next_word_or_line() (bsc#1202046). - CVE-2022-2580: Fixed heap-based buffer overflow related to eval_string() (bsc#1202049). - CVE-2022-2581: Fixed out-of-bounds read related to cstrchr() (bsc#1202050). - CVE-2022-2598: Fixed undefined behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput() (bsc#1202051). - CVE-2022-2817: Fixed use after gree in f_assert_fails() (bsc#1202420). - CVE-2022-2816: Fixed out-of-bounds Read in check_vim9_unlet() (bsc#1202421). - CVE-2022-2862: Fixed use-after-free in compile_nested_function() (bsc#1202511). - CVE-2022-2849: Fixed invalid memory access related to mb_ptr2len() (bsc#1202512). - CVE-2022-2845: Fixed buffer Over-read related to display_dollar() (bsc#1202515). - CVE-2022-2889: Fixed use-after-free in find_var_also_in_script() in evalvars.c (bsc#1202599). - CVE-2022-2923: Fixed NULL pointer dereference in GitHub repository vim/vim prior to 9.0.0240 (bsc#1202687). - CVE-2022-2946: Fixed use after free in function vim_vsnprintf_typval (bsc#1202689). - CVE-2022-3016: Fixed use after free in vim prior to 9.0.0285 (bsc#1202862). Bugfixes: - Fixing vim error on startup (bsc#1200884). - Fixing vim SUSE Linux Enterprise Server 15 SP4 Basesystem plugin-tlib issue (bsc#1201620). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3229=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3229=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3229=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3229=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3229=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3229=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3229=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3229=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-3229=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3229=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3229=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3229=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3229=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-3229=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3229=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3229=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3229=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3229=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3229=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3229=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3229=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3229=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3229=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3229=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3229=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3229=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3229=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3229=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 vim-small-9.0.0313-150000.5.25.1 vim-small-debuginfo-9.0.0313-150000.5.25.1 - openSUSE Leap Micro 5.2 (noarch): vim-data-common-9.0.0313-150000.5.25.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 vim-small-9.0.0313-150000.5.25.1 vim-small-debuginfo-9.0.0313-150000.5.25.1 - openSUSE Leap 15.4 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 vim-small-9.0.0313-150000.5.25.1 vim-small-debuginfo-9.0.0313-150000.5.25.1 - openSUSE Leap 15.3 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Manager Server 4.1 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Manager Retail Branch Server 4.1 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Manager Proxy 4.1 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Manager Proxy 4.1 (x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server for SAP 15 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Server 15-LTSS (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 vim-small-9.0.0313-150000.5.25.1 vim-small-debuginfo-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 vim-small-9.0.0313-150000.5.25.1 vim-small-debuginfo-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 vim-small-9.0.0313-150000.5.25.1 vim-small-debuginfo-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Micro 5.2 (noarch): vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 vim-small-9.0.0313-150000.5.25.1 vim-small-debuginfo-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise Micro 5.1 (noarch): vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Enterprise Storage 7 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 - SUSE Enterprise Storage 6 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE CaaS Platform 4.0 (noarch): vim-data-9.0.0313-150000.5.25.1 vim-data-common-9.0.0313-150000.5.25.1 - SUSE CaaS Platform 4.0 (x86_64): gvim-9.0.0313-150000.5.25.1 gvim-debuginfo-9.0.0313-150000.5.25.1 vim-9.0.0313-150000.5.25.1 vim-debuginfo-9.0.0313-150000.5.25.1 vim-debugsource-9.0.0313-150000.5.25.1 References: https://www.suse.com/security/cve/CVE-2022-1720.html https://www.suse.com/security/cve/CVE-2022-1968.html https://www.suse.com/security/cve/CVE-2022-2124.html https://www.suse.com/security/cve/CVE-2022-2125.html https://www.suse.com/security/cve/CVE-2022-2126.html https://www.suse.com/security/cve/CVE-2022-2129.html https://www.suse.com/security/cve/CVE-2022-2175.html https://www.suse.com/security/cve/CVE-2022-2182.html https://www.suse.com/security/cve/CVE-2022-2183.html https://www.suse.com/security/cve/CVE-2022-2206.html https://www.suse.com/security/cve/CVE-2022-2207.html https://www.suse.com/security/cve/CVE-2022-2208.html https://www.suse.com/security/cve/CVE-2022-2210.html https://www.suse.com/security/cve/CVE-2022-2231.html https://www.suse.com/security/cve/CVE-2022-2257.html https://www.suse.com/security/cve/CVE-2022-2264.html https://www.suse.com/security/cve/CVE-2022-2284.html https://www.suse.com/security/cve/CVE-2022-2285.html https://www.suse.com/security/cve/CVE-2022-2286.html https://www.suse.com/security/cve/CVE-2022-2287.html https://www.suse.com/security/cve/CVE-2022-2304.html https://www.suse.com/security/cve/CVE-2022-2343.html https://www.suse.com/security/cve/CVE-2022-2344.html https://www.suse.com/security/cve/CVE-2022-2345.html https://www.suse.com/security/cve/CVE-2022-2522.html https://www.suse.com/security/cve/CVE-2022-2571.html https://www.suse.com/security/cve/CVE-2022-2580.html https://www.suse.com/security/cve/CVE-2022-2581.html https://www.suse.com/security/cve/CVE-2022-2598.html https://www.suse.com/security/cve/CVE-2022-2816.html https://www.suse.com/security/cve/CVE-2022-2817.html https://www.suse.com/security/cve/CVE-2022-2819.html https://www.suse.com/security/cve/CVE-2022-2845.html https://www.suse.com/security/cve/CVE-2022-2849.html https://www.suse.com/security/cve/CVE-2022-2862.html https://www.suse.com/security/cve/CVE-2022-2874.html https://www.suse.com/security/cve/CVE-2022-2889.html https://www.suse.com/security/cve/CVE-2022-2923.html https://www.suse.com/security/cve/CVE-2022-2946.html https://www.suse.com/security/cve/CVE-2022-3016.html https://bugzilla.suse.com/1200270 https://bugzilla.suse.com/1200697 https://bugzilla.suse.com/1200698 https://bugzilla.suse.com/1200700 https://bugzilla.suse.com/1200701 https://bugzilla.suse.com/1200732 https://bugzilla.suse.com/1200884 https://bugzilla.suse.com/1200902 https://bugzilla.suse.com/1200903 https://bugzilla.suse.com/1200904 https://bugzilla.suse.com/1201132 https://bugzilla.suse.com/1201133 https://bugzilla.suse.com/1201134 https://bugzilla.suse.com/1201135 https://bugzilla.suse.com/1201136 https://bugzilla.suse.com/1201150 https://bugzilla.suse.com/1201151 https://bugzilla.suse.com/1201152 https://bugzilla.suse.com/1201153 https://bugzilla.suse.com/1201154 https://bugzilla.suse.com/1201155 https://bugzilla.suse.com/1201249 https://bugzilla.suse.com/1201356 https://bugzilla.suse.com/1201359 https://bugzilla.suse.com/1201363 https://bugzilla.suse.com/1201620 https://bugzilla.suse.com/1201863 https://bugzilla.suse.com/1202046 https://bugzilla.suse.com/1202049 https://bugzilla.suse.com/1202050 https://bugzilla.suse.com/1202051 https://bugzilla.suse.com/1202414 https://bugzilla.suse.com/1202420 https://bugzilla.suse.com/1202421 https://bugzilla.suse.com/1202511 https://bugzilla.suse.com/1202512 https://bugzilla.suse.com/1202515 https://bugzilla.suse.com/1202552 https://bugzilla.suse.com/1202599 https://bugzilla.suse.com/1202687 https://bugzilla.suse.com/1202689 https://bugzilla.suse.com/1202862

1 0

SUSE-SU-2022:3230-1: important: Security update for gdk-pixbuf
by opensuse-security＠opensuse.org 09 Sep '22

09 Sep '22

SUSE Security Update: Security update for gdk-pixbuf ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3230-1 Rating: important References: #1194633 Cross-References: CVE-2021-44648 CVSS scores: CVE-2021-44648 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-44648 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gdk-pixbuf fixes the following issues: - CVE-2021-44648: Fixed overflow vulnerability in lzw code size (bsc#1194633). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3230=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3230=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3230=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3230=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3230=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3230=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3230=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3230=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3230=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3230=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3230=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3230=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3230=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3230=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - openSUSE Leap 15.3 (x86_64): gdk-pixbuf-devel-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-devel-32bit-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 - openSUSE Leap 15.3 (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Manager Server 4.1 (x86_64): gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 - SUSE Manager Server 4.1 (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Manager Retail Branch Server 4.1 (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Manager Proxy 4.1 (x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Manager Proxy 4.1 (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64): gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (x86_64): gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (x86_64): gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (x86_64): gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): gdk-pixbuf-debugsource-2.40.0-150200.3.9.1 gdk-pixbuf-devel-2.40.0-150200.3.9.1 gdk-pixbuf-devel-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-debuginfo-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-2.40.0-150200.3.9.1 gdk-pixbuf-thumbnailer-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-debuginfo-2.40.0-150200.3.9.1 typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1 typelib-1_0-GdkPixdata-2_0-2.40.0-150200.3.9.1 - SUSE Enterprise Storage 7 (x86_64): gdk-pixbuf-query-loaders-32bit-2.40.0-150200.3.9.1 gdk-pixbuf-query-loaders-32bit-debuginfo-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-2.40.0-150200.3.9.1 libgdk_pixbuf-2_0-0-32bit-debuginfo-2.40.0-150200.3.9.1 - SUSE Enterprise Storage 7 (noarch): gdk-pixbuf-lang-2.40.0-150200.3.9.1 References: https://www.suse.com/security/cve/CVE-2021-44648.html https://bugzilla.suse.com/1194633

1 0

SUSE-RU-2022:3228-1: critical: Recommended update for regionServiceClientConfigEC2
by maintenance＠opensuse.org 09 Sep '22

09 Sep '22

SUSE Recommended Update: Recommended update for regionServiceClientConfigEC2 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3228-1 Rating: critical References: #1203215 Affected Products: SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Public Cloud 15-SP1 SUSE Linux Enterprise Module for Public Cloud 15-SP2 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for regionServiceClientConfigEC2 fixes the following issues: - Update to version 4.1.0 (bsc#1203215) + New certs for 52.79.82.165 and 54.247.166.75 Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3228=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3228=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-3228=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-3228=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2022-3228=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2022-3228=1 - SUSE Linux Enterprise Module for Public Cloud 15: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-2022-3228=1 SUSE-SLE-Module-Public-Cloud-Unrestricted-15-2022-3228=1 Package List: - openSUSE Leap 15.4 (noarch): regionServiceClientConfigEC2-4.1.0-150000.3.24.1 - openSUSE Leap 15.3 (noarch): regionServiceClientConfigEC2-4.1.0-150000.3.24.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (noarch): regionServiceClientConfigEC2-4.1.0-150000.3.24.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (noarch): regionServiceClientConfigEC2-4.1.0-150000.3.24.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch): regionServiceClientConfigEC2-4.1.0-150000.3.24.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP1 (noarch): regionServiceClientConfigEC2-4.1.0-150000.3.24.1 - SUSE Linux Enterprise Module for Public Cloud 15 (noarch): regionServiceClientConfigEC2-4.1.0-150000.3.24.1 References: https://bugzilla.suse.com/1203215

1 0

openSUSE-RU-2022:10116-1: important: Recommended update for gtk3-branding
by maintenance＠opensuse.org 09 Sep '22

09 Sep '22

openSUSE Recommended Update: Recommended update for gtk3-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10116-1 Rating: important References: #1203192 #1203195 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gtk3-branding matches the recent gtk3 library update. (bsc#1203192 bsc#1203195) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2022-10116=1 Package List: - openSUSE Leap 15.4 (noarch): gtk3-branding-openSUSE-15.0-lp154.2.4.1 References: https://bugzilla.suse.com/1203192 https://bugzilla.suse.com/1203195

1 0

SUSE-RU-2022:3224-1: Recommended update for jeos-firstboot
by maintenance＠opensuse.org 09 Sep '22

09 Sep '22

SUSE Recommended Update: Recommended update for jeos-firstboot ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3224-1 Rating: low References: #1198940 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for jeos-firstboot fixes the following issue: - Add jeos-firstboot-rpiwifi to SLE-15-SP4-aarch64 on Module-Development-Tools. (bsc#1198940) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3224=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3224=1 Package List: - openSUSE Leap 15.4 (noarch): jeos-firstboot-1.1.1.0-150400.3.2.1 jeos-firstboot-rpiwifi-1.1.1.0-150400.3.2.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): jeos-firstboot-1.1.1.0-150400.3.2.1 jeos-firstboot-rpiwifi-1.1.1.0-150400.3.2.1 References: https://bugzilla.suse.com/1198940

1 0

SUSE-RU-2022:3223-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 09 Sep '22

09 Sep '22

SUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3223-1 Rating: moderate References: #1199895 #1200993 #1201092 #1201576 #1201638 Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP2 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Installer 15-SP2 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libzypp, zypper fixes the following issues: libzypp: - Improve handling of package locks, allowing to reset the status of its initial state (bsc#1199895) - Fix issues when receiving exceptions from curl_easy_cleanup (bsc#1201092) - Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993) - Remove Medianetwork and its dependent code. First reason for this is that MediaNetwork was just meant as a way to test the new CURL based downloaded. Second the Provide API is going to completely replace the current media backend. zypper: - Truncate the 'Name' column when using `zypper lr`, if the table is wider than the terminal (bsc#1201638) - Reject install/remove modifier without argument (bsc#1201576) - zypper-download: Handle unresolvable arguments as errors - Put signing key supplying repository name in quotes Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3223=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3223=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3223=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3223=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3223=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3223=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3223=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3223=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3223=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3223=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3223=1 - SUSE Linux Enterprise Installer 15-SP2: zypper in -t patch SUSE-SLE-INSTALLER-15-SP2-2022-3223=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3223=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3223=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3223=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - openSUSE Leap Micro 5.2 (noarch): zypper-needs-restarting-1.14.55-150200.36.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 libzypp-devel-doc-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - openSUSE Leap 15.3 (noarch): zypper-aptitude-1.14.55-150200.36.1 zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Manager Server 4.1 (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Manager Retail Branch Server 4.1 (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Manager Proxy 4.1 (x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Manager Proxy 4.1 (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Linux Enterprise Micro 5.2 (noarch): zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Linux Enterprise Micro 5.1 (noarch): zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Linux Enterprise Installer 15-SP2 (aarch64 ppc64le s390x x86_64): libzypp-17.31.0-150200.42.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libzypp-17.31.0-150200.42.1 libzypp-debuginfo-17.31.0-150200.42.1 libzypp-debugsource-17.31.0-150200.42.1 libzypp-devel-17.31.0-150200.42.1 zypper-1.14.55-150200.36.1 zypper-debuginfo-1.14.55-150200.36.1 zypper-debugsource-1.14.55-150200.36.1 - SUSE Enterprise Storage 7 (noarch): zypper-log-1.14.55-150200.36.1 zypper-needs-restarting-1.14.55-150200.36.1 References: https://bugzilla.suse.com/1199895 https://bugzilla.suse.com/1200993 https://bugzilla.suse.com/1201092 https://bugzilla.suse.com/1201576 https://bugzilla.suse.com/1201638

1 0

SUSE-RU-2022:3220-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 09 Sep '22

09 Sep '22

SUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3220-1 Rating: moderate References: #1199895 #1200993 #1201092 #1201576 #1201638 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libzypp, zypper fixes the following issues: libzypp: - Improve handling of package locks, allowing to reset the status of its initial state (bsc#1199895) - Fix issues when receiving exceptions from curl_easy_cleanup (bsc#1201092) - Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993) - Remove Medianetwork and its dependent code. First reason for this is that MediaNetwork was just meant as a way to test the new CURL based downloaded. Second the Provide API is going to completely replace the current media backend. zypper: - Truncate the 'Name' column when using `zypper lr`, if the table is wider than the terminal (bsc#1201638) - Reject install/remove modifier without argument (bsc#1201576) - zypper-download: Handle unresolvable arguments as errors - Put signing key supplying repository name in quotes Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3220=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3220=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libzypp-17.31.0-150400.3.6.1 libzypp-debuginfo-17.31.0-150400.3.6.1 libzypp-debugsource-17.31.0-150400.3.6.1 libzypp-devel-17.31.0-150400.3.6.1 libzypp-devel-doc-17.31.0-150400.3.6.1 zypper-1.14.55-150400.3.6.1 zypper-debuginfo-1.14.55-150400.3.6.1 zypper-debugsource-1.14.55-150400.3.6.1 - openSUSE Leap 15.4 (noarch): zypper-aptitude-1.14.55-150400.3.6.1 zypper-log-1.14.55-150400.3.6.1 zypper-needs-restarting-1.14.55-150400.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libzypp-17.31.0-150400.3.6.1 libzypp-debuginfo-17.31.0-150400.3.6.1 libzypp-debugsource-17.31.0-150400.3.6.1 libzypp-devel-17.31.0-150400.3.6.1 zypper-1.14.55-150400.3.6.1 zypper-debuginfo-1.14.55-150400.3.6.1 zypper-debugsource-1.14.55-150400.3.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): zypper-log-1.14.55-150400.3.6.1 zypper-needs-restarting-1.14.55-150400.3.6.1 References: https://bugzilla.suse.com/1199895 https://bugzilla.suse.com/1200993 https://bugzilla.suse.com/1201092 https://bugzilla.suse.com/1201576 https://bugzilla.suse.com/1201638

1 0

SUSE-RU-2022:3218-1: important: Recommended update for nbdkit
by maintenance＠opensuse.org 08 Sep '22

08 Sep '22

SUSE Recommended Update: Recommended update for nbdkit ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3218-1 Rating: important References: ECO-3633 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for nbdkit fixes the following issues: - Update to version 1.30.7 (jsc#ECO-3633) * configure: Use printf to print $ISOPROG * configure: Print the version of curl, libnbd and libssh * configure: Make the 'feature' function print the dots * tests/test-protect.c: Fix typo in previous commit * tests/test-protect.c: Skip test if "disk" was not created * common/include: Rename BUILD_BUG_ON_ZERO to something more meaningful * common/include/test-array-size.c: Avoid Clang warning * vddk: Demote another "phone home" error message to debug * Use ARRAY_SIZE macro in various places in nbdkit * common/include: Add ARRAY_SIZE macro * tests/test-parallel-sh.sh: Skip test under valgrind + debuginfod * tests/test-parallel-sh.sh: Small cleanups * server: Work around incorrect include in gnutls/socket.h * server: Display kTLS setting in debug output * exitwhen: Check nbdkit doesn't exit before the pipe is closed * valgrind: Update comment about valgrind bug affecting OCaml * ocaml: Add further valgrind suppression * ocaml: Add valgrind suppression for OCaml 4.14 bug * perl: Move GCC diagnostic ignored earlier * docs/nbdkit-protocol.pod: block size support was added in 1.30 - Enable linuxdisk plugin Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3218=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nbdkit-1.30.7-150300.8.9.1 nbdkit-basic-filters-1.30.7-150300.8.9.1 nbdkit-basic-filters-debuginfo-1.30.7-150300.8.9.1 nbdkit-basic-plugins-1.30.7-150300.8.9.1 nbdkit-basic-plugins-debuginfo-1.30.7-150300.8.9.1 nbdkit-curl-plugin-1.30.7-150300.8.9.1 nbdkit-curl-plugin-debuginfo-1.30.7-150300.8.9.1 nbdkit-debuginfo-1.30.7-150300.8.9.1 nbdkit-debugsource-1.30.7-150300.8.9.1 nbdkit-devel-1.30.7-150300.8.9.1 nbdkit-example-plugins-1.30.7-150300.8.9.1 nbdkit-example-plugins-debuginfo-1.30.7-150300.8.9.1 nbdkit-gzip-filter-1.30.7-150300.8.9.1 nbdkit-gzip-filter-debuginfo-1.30.7-150300.8.9.1 nbdkit-nbd-plugin-1.30.7-150300.8.9.1 nbdkit-nbd-plugin-debuginfo-1.30.7-150300.8.9.1 nbdkit-python-plugin-1.30.7-150300.8.9.1 nbdkit-python-plugin-debuginfo-1.30.7-150300.8.9.1 nbdkit-server-1.30.7-150300.8.9.1 nbdkit-server-debuginfo-1.30.7-150300.8.9.1 nbdkit-ssh-plugin-1.30.7-150300.8.9.1 nbdkit-ssh-plugin-debuginfo-1.30.7-150300.8.9.1 nbdkit-tar-filter-1.30.7-150300.8.9.1 nbdkit-tar-filter-debuginfo-1.30.7-150300.8.9.1 nbdkit-tmpdisk-plugin-1.30.7-150300.8.9.1 nbdkit-tmpdisk-plugin-debuginfo-1.30.7-150300.8.9.1 nbdkit-xz-filter-1.30.7-150300.8.9.1 nbdkit-xz-filter-debuginfo-1.30.7-150300.8.9.1 - openSUSE Leap 15.3 (x86_64): nbdkit-vddk-plugin-1.30.7-150300.8.9.1 nbdkit-vddk-plugin-debuginfo-1.30.7-150300.8.9.1 - openSUSE Leap 15.3 (noarch): nbdkit-bash-completion-1.30.7-150300.8.9.1 References:

1 0

SUSE-RU-2022:3217-1: important: Recommended update for nbdkit
by maintenance＠opensuse.org 08 Sep '22

08 Sep '22

SUSE Recommended Update: Recommended update for nbdkit ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3217-1 Rating: important References: ECO-3633 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for nbdkit fixes the following issues: - Update to version 1.30.7 (jsc#ECO-3633) * configure: Use printf to print $ISOPROG * configure: Print the version of curl, libnbd and libssh * configure: Make the 'feature' function print the dots * tests/test-protect.c: Fix typo in previous commit * tests/test-protect.c: Skip test if "disk" was not created * common/include: Rename BUILD_BUG_ON_ZERO to something more meaningful * common/include/test-array-size.c: Avoid Clang warning * vddk: Demote another "phone home" error message to debug * Use ARRAY_SIZE macro in various places in nbdkit * common/include: Add ARRAY_SIZE macro * tests/test-parallel-sh.sh: Skip test under valgrind + debuginfod * tests/test-parallel-sh.sh: Small cleanups * server: Work around incorrect include in gnutls/socket.h * server: Display kTLS setting in debug output * exitwhen: Check nbdkit doesn't exit before the pipe is closed * valgrind: Update comment about valgrind bug affecting OCaml * ocaml: Add further valgrind suppression * ocaml: Add valgrind suppression for OCaml 4.14 bug * perl: Move GCC diagnostic ignored earlier * docs/nbdkit-protocol.pod: block size support was added in 1.30 - Enable linuxdisk plugin Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3217=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nbdkit-1.30.7-150400.3.3.1 nbdkit-basic-filters-1.30.7-150400.3.3.1 nbdkit-basic-filters-debuginfo-1.30.7-150400.3.3.1 nbdkit-basic-plugins-1.30.7-150400.3.3.1 nbdkit-basic-plugins-debuginfo-1.30.7-150400.3.3.1 nbdkit-curl-plugin-1.30.7-150400.3.3.1 nbdkit-curl-plugin-debuginfo-1.30.7-150400.3.3.1 nbdkit-debuginfo-1.30.7-150400.3.3.1 nbdkit-debugsource-1.30.7-150400.3.3.1 nbdkit-devel-1.30.7-150400.3.3.1 nbdkit-example-plugins-1.30.7-150400.3.3.1 nbdkit-example-plugins-debuginfo-1.30.7-150400.3.3.1 nbdkit-gzip-filter-1.30.7-150400.3.3.1 nbdkit-gzip-filter-debuginfo-1.30.7-150400.3.3.1 nbdkit-nbd-plugin-1.30.7-150400.3.3.1 nbdkit-nbd-plugin-debuginfo-1.30.7-150400.3.3.1 nbdkit-python-plugin-1.30.7-150400.3.3.1 nbdkit-python-plugin-debuginfo-1.30.7-150400.3.3.1 nbdkit-server-1.30.7-150400.3.3.1 nbdkit-server-debuginfo-1.30.7-150400.3.3.1 nbdkit-ssh-plugin-1.30.7-150400.3.3.1 nbdkit-ssh-plugin-debuginfo-1.30.7-150400.3.3.1 nbdkit-tar-filter-1.30.7-150400.3.3.1 nbdkit-tar-filter-debuginfo-1.30.7-150400.3.3.1 nbdkit-tmpdisk-plugin-1.30.7-150400.3.3.1 nbdkit-tmpdisk-plugin-debuginfo-1.30.7-150400.3.3.1 nbdkit-xz-filter-1.30.7-150400.3.3.1 nbdkit-xz-filter-debuginfo-1.30.7-150400.3.3.1 - openSUSE Leap 15.4 (x86_64): nbdkit-vddk-plugin-1.30.7-150400.3.3.1 nbdkit-vddk-plugin-debuginfo-1.30.7-150400.3.3.1 - openSUSE Leap 15.4 (noarch): nbdkit-bash-completion-1.30.7-150400.3.3.1 References:

1 0

SUSE-RU-2022:3219-1: moderate: Recommended update for sysconfig
by maintenance＠opensuse.org 08 Sep '22

08 Sep '22

SUSE Recommended Update: Recommended update for sysconfig ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3219-1 Rating: moderate References: #1185882 #1194557 #1199093 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sysconfig fixes the following issues: - netconfig: remove sed dependency - netconfig/dns-resolver: remove search limit of 6 domains (bsc#1199093) - netconfig: cleanup /var/run leftovers (bsc#1194557) - netconfig: update ntp man page documentation, fix typos - netconfig: revert NM default policy change change (bsc#1185882) With the change to the default policy, netconfig with NetworkManager as network.service accepted settings from all services/programs directly instead only from NetworkManager, where plugins/services have to deliver their settings to apply them. - Also support service(network) provides Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3219=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3219=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3219=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3219=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3219=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3219=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3219=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): sysconfig-0.85.9-150200.12.1 sysconfig-debuginfo-0.85.9-150200.12.1 sysconfig-debugsource-0.85.9-150200.12.1 sysconfig-netconfig-0.85.9-150200.12.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): sysconfig-0.85.9-150200.12.1 sysconfig-debuginfo-0.85.9-150200.12.1 sysconfig-debugsource-0.85.9-150200.12.1 sysconfig-netconfig-0.85.9-150200.12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): sysconfig-0.85.9-150200.12.1 sysconfig-debuginfo-0.85.9-150200.12.1 sysconfig-debugsource-0.85.9-150200.12.1 sysconfig-netconfig-0.85.9-150200.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): sysconfig-0.85.9-150200.12.1 sysconfig-debuginfo-0.85.9-150200.12.1 sysconfig-debugsource-0.85.9-150200.12.1 sysconfig-netconfig-0.85.9-150200.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): sysconfig-0.85.9-150200.12.1 sysconfig-debuginfo-0.85.9-150200.12.1 sysconfig-debugsource-0.85.9-150200.12.1 sysconfig-netconfig-0.85.9-150200.12.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): sysconfig-0.85.9-150200.12.1 sysconfig-debuginfo-0.85.9-150200.12.1 sysconfig-debugsource-0.85.9-150200.12.1 sysconfig-netconfig-0.85.9-150200.12.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): sysconfig-0.85.9-150200.12.1 sysconfig-debuginfo-0.85.9-150200.12.1 sysconfig-debugsource-0.85.9-150200.12.1 sysconfig-netconfig-0.85.9-150200.12.1 References: https://bugzilla.suse.com/1185882 https://bugzilla.suse.com/1194557 https://bugzilla.suse.com/1199093

1 0

SUSE-RU-2022:3214-1: Recommended update for wpa_supplicant
by maintenance＠opensuse.org 08 Sep '22

08 Sep '22

SUSE Recommended Update: Recommended update for wpa_supplicant ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3214-1 Rating: low References: SLE-14992 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for wpa_supplicant fixes the following issues: - Enable WPA3-Enterprise (SuiteB-192) support. (jsc#SLE-14992) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3214=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3214=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3214=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3214=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3214=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3214=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): wpa_supplicant-2.9-150000.4.36.1 wpa_supplicant-debuginfo-2.9-150000.4.36.1 wpa_supplicant-debugsource-2.9-150000.4.36.1 wpa_supplicant-gui-2.9-150000.4.36.1 wpa_supplicant-gui-debuginfo-2.9-150000.4.36.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): wpa_supplicant-2.9-150000.4.36.1 wpa_supplicant-debuginfo-2.9-150000.4.36.1 wpa_supplicant-debugsource-2.9-150000.4.36.1 wpa_supplicant-gui-2.9-150000.4.36.1 wpa_supplicant-gui-debuginfo-2.9-150000.4.36.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): wpa_supplicant-2.9-150000.4.36.1 wpa_supplicant-debuginfo-2.9-150000.4.36.1 wpa_supplicant-debugsource-2.9-150000.4.36.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): wpa_supplicant-2.9-150000.4.36.1 wpa_supplicant-debuginfo-2.9-150000.4.36.1 wpa_supplicant-debugsource-2.9-150000.4.36.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): wpa_supplicant-2.9-150000.4.36.1 wpa_supplicant-debuginfo-2.9-150000.4.36.1 wpa_supplicant-debugsource-2.9-150000.4.36.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): wpa_supplicant-2.9-150000.4.36.1 wpa_supplicant-debuginfo-2.9-150000.4.36.1 wpa_supplicant-debugsource-2.9-150000.4.36.1 References:

1 0

SUSE-RU-2022:3215-1: moderate: Recommended update for rpm
by maintenance＠opensuse.org 08 Sep '22

08 Sep '22

SUSE Recommended Update: Recommended update for rpm ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3215-1 Rating: moderate References: SLE-24714 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15-SP3 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 SUSE Linux Enterprise Module for SUSE Manager Server 4.2 SUSE Linux Enterprise Module for SUSE Manager Server 4.3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for rpm fixes the following issues: - Support Ed25519 RPM signatures [jsc#SLE-24714] Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3215=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3215=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3215=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2022-3215=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.2-2022-3215=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-3215=1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2022-3215=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-3215=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2022-3215=1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-3215=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3215=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3215=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3215=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3215=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3215=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3215=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): python-rpm-debugsource-4.14.3-150300.49.1 python3-rpm-4.14.3-150300.49.1 python3-rpm-debuginfo-4.14.3-150300.49.1 rpm-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 rpm-ndb-4.14.3-150300.49.1 rpm-ndb-debuginfo-4.14.3-150300.49.1 rpm-ndb-debugsource-4.14.3-150300.49.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.49.1 python3-rpm-4.14.3-150300.49.1 python3-rpm-debuginfo-4.14.3-150300.49.1 rpm-4.14.3-150300.49.1 rpm-build-4.14.3-150300.49.1 rpm-build-debuginfo-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 rpm-devel-4.14.3-150300.49.1 rpm-ndb-4.14.3-150300.49.1 rpm-ndb-debuginfo-4.14.3-150300.49.1 rpm-ndb-debugsource-4.14.3-150300.49.1 - openSUSE Leap 15.4 (x86_64): rpm-32bit-4.14.3-150300.49.1 rpm-32bit-debuginfo-4.14.3-150300.49.1 rpm-ndb-32bit-4.14.3-150300.49.1 rpm-ndb-32bit-debuginfo-4.14.3-150300.49.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.49.1 python2-rpm-4.14.3-150300.49.1 python2-rpm-debuginfo-4.14.3-150300.49.1 python3-rpm-4.14.3-150300.49.1 python3-rpm-debuginfo-4.14.3-150300.49.1 rpm-4.14.3-150300.49.1 rpm-build-4.14.3-150300.49.1 rpm-build-debuginfo-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 rpm-devel-4.14.3-150300.49.1 rpm-ndb-4.14.3-150300.49.1 rpm-ndb-debuginfo-4.14.3-150300.49.1 rpm-ndb-debugsource-4.14.3-150300.49.1 - openSUSE Leap 15.3 (x86_64): rpm-32bit-4.14.3-150300.49.1 rpm-32bit-debuginfo-4.14.3-150300.49.1 rpm-ndb-32bit-4.14.3-150300.49.1 rpm-ndb-32bit-debuginfo-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.49.1 rpm-build-debuginfo-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.2 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.49.1 rpm-build-debuginfo-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.3 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.49.1 rpm-build-debuginfo-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for SUSE Manager Proxy 4.2 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.49.1 rpm-build-debuginfo-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.49.1 python2-rpm-4.14.3-150300.49.1 python2-rpm-debuginfo-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP4 (aarch64 ppc64le s390x x86_64): rpm-ndb-4.14.3-150300.49.1 rpm-ndb-debuginfo-4.14.3-150300.49.1 rpm-ndb-debugsource-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (aarch64 ppc64le s390x x86_64): rpm-ndb-4.14.3-150300.49.1 rpm-ndb-debuginfo-4.14.3-150300.49.1 rpm-ndb-debugsource-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.49.1 rpm-build-debuginfo-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): rpm-build-4.14.3-150300.49.1 rpm-build-debuginfo-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.49.1 python3-rpm-4.14.3-150300.49.1 python3-rpm-debuginfo-4.14.3-150300.49.1 rpm-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 rpm-devel-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): rpm-32bit-4.14.3-150300.49.1 rpm-32bit-debuginfo-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.49.1 python3-rpm-4.14.3-150300.49.1 python3-rpm-debuginfo-4.14.3-150300.49.1 rpm-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 rpm-devel-4.14.3-150300.49.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): rpm-32bit-4.14.3-150300.49.1 rpm-32bit-debuginfo-4.14.3-150300.49.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): python-rpm-debugsource-4.14.3-150300.49.1 python3-rpm-4.14.3-150300.49.1 python3-rpm-debuginfo-4.14.3-150300.49.1 rpm-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 rpm-ndb-4.14.3-150300.49.1 rpm-ndb-debuginfo-4.14.3-150300.49.1 rpm-ndb-debugsource-4.14.3-150300.49.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): python-rpm-debugsource-4.14.3-150300.49.1 python3-rpm-4.14.3-150300.49.1 python3-rpm-debuginfo-4.14.3-150300.49.1 rpm-4.14.3-150300.49.1 rpm-debuginfo-4.14.3-150300.49.1 rpm-debugsource-4.14.3-150300.49.1 References:

1 0

SUSE-RU-2022:3179-1: moderate: Recommended update for golang-github-prometheus-node_exporter
by maintenance＠opensuse.org 08 Sep '22

08 Sep '22

SUSE Recommended Update: Recommended update for golang-github-prometheus-node_exporter ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3179-1 Rating: moderate References: #1196652 Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-github-prometheus-node_exporter fixes the following issues: - Exclude s390 arch. - Update spec file in order to make --version work (bsc#1196652) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3179=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3179=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3179=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3179=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3179=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3179=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3179=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3179=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3179=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3179=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3179=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3179=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3179=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3179=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3179=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3179=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3179=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3179=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3179=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Manager Proxy 4.1 (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 - SUSE CaaS Platform 4.0 (x86_64): golang-github-prometheus-node_exporter-1.3.0-150100.3.15.1 References: https://bugzilla.suse.com/1196652

1 0

SUSE-SU-2022:3191-1: moderate: Security update for libEMF
by opensuse-security＠opensuse.org 08 Sep '22

08 Sep '22

SUSE Security Update: Security update for libEMF ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3191-1 Rating: moderate References: #1173070 Cross-References: CVE-2020-13999 CVSS scores: CVE-2020-13999 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-13999 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libEMF fixes the following issues: - CVE-2020-13999: Fixed an integer overflow that could lead to denial of service via a crafted file (bsc#1173070). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3191=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-3191=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libEMF-debuginfo-1.0.7-150000.3.6.1 libEMF-debugsource-1.0.7-150000.3.6.1 libEMF-devel-1.0.7-150000.3.6.1 libEMF-utils-1.0.7-150000.3.6.1 libEMF-utils-debuginfo-1.0.7-150000.3.6.1 libEMF1-1.0.7-150000.3.6.1 libEMF1-debuginfo-1.0.7-150000.3.6.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): libEMF-debuginfo-1.0.7-150000.3.6.1 libEMF-debugsource-1.0.7-150000.3.6.1 libEMF1-1.0.7-150000.3.6.1 libEMF1-debuginfo-1.0.7-150000.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-13999.html https://bugzilla.suse.com/1173070

1 0

SUSE-RU-2022:3209-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 08 Sep '22

08 Sep '22

SUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3209-1 Rating: moderate References: #1200570 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-iscsi fixes the following issues: - Set the systemd unit files as non executable. (bsc#1200570) - For openSUSE Tumbleweed, moved logrotate files from user-specific directory `/etc/logrotate.d` to vendor-specific `/usr/etc/logrotate.d` Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3209=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3209=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): iscsiuio-0.7.8.6-150400.39.8.1 iscsiuio-debuginfo-0.7.8.6-150400.39.8.1 libopeniscsiusr0_2_0-2.1.7-150400.39.8.1 libopeniscsiusr0_2_0-debuginfo-2.1.7-150400.39.8.1 open-iscsi-2.1.7-150400.39.8.1 open-iscsi-debuginfo-2.1.7-150400.39.8.1 open-iscsi-debugsource-2.1.7-150400.39.8.1 open-iscsi-devel-2.1.7-150400.39.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): iscsiuio-0.7.8.6-150400.39.8.1 iscsiuio-debuginfo-0.7.8.6-150400.39.8.1 libopeniscsiusr0_2_0-2.1.7-150400.39.8.1 libopeniscsiusr0_2_0-debuginfo-2.1.7-150400.39.8.1 open-iscsi-2.1.7-150400.39.8.1 open-iscsi-debuginfo-2.1.7-150400.39.8.1 open-iscsi-debugsource-2.1.7-150400.39.8.1 open-iscsi-devel-2.1.7-150400.39.8.1 References: https://bugzilla.suse.com/1200570

1 0

SUSE-RU-2022:3200-1: moderate: Recommended update for rpmlint
by maintenance＠opensuse.org 08 Sep '22

08 Sep '22

SUSE Recommended Update: Recommended update for rpmlint ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:3200-1 Rating: moderate References: #1188680 #1201207 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rpmlint fixes the following issues: - Add oddjob-gpupdate whitelisting for D-Bus (bsc#1188680) - Adjust NetworkManager priv helper spelling in whitelisting (bsc#1201207) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3200=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3200=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3200=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3200=1 Package List: - openSUSE Leap 15.4 (noarch): rpmlint-1.10-150000.7.58.1 - openSUSE Leap 15.3 (noarch): rpmlint-1.10-150000.7.58.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): rpmlint-1.10-150000.7.58.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): rpmlint-1.10-150000.7.58.1 References: https://bugzilla.suse.com/1188680 https://bugzilla.suse.com/1201207

1 0