February 2023 - openSUSE Updates - openSUSE Mailing Lists

SUSE-RU-2023:0464-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: SUSE-RU-2023:0464-1 Rating: moderate References: Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Merge of v249.15 - Drop workaround related to systemd-timesyncd that addressed a Factory issue. - Conditionalize the use of /lib/modprobe.d only on systems with split usr support enabled (i.e. SLE). - Make use of the %systemd_* rpm macros consistently. Using the upstream variants will ease the backports of Factory changes to SLE since Factory systemd uses the upstream variants exclusively. - machines.target belongs to systemd-container, do its init/cleanup steps from the scriptlets of this sub-package. - Make sure we apply the presets on units shipped by systemd package. - systemd-testsuite: move the integration tests in a dedicated sub directory. - Move systemd-cryptenroll into udev package. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2023-464=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-464=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-464=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2023-464=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libsystemd0-249.15-150400.8.22.1 libsystemd0-debuginfo-249.15-150400.8.22.1 libudev1-249.15-150400.8.22.1 libudev1-debuginfo-249.15-150400.8.22.1 systemd-249.15-150400.8.22.1 systemd-container-249.15-150400.8.22.1 systemd-container-debuginfo-249.15-150400.8.22.1 systemd-debuginfo-249.15-150400.8.22.1 systemd-debugsource-249.15-150400.8.22.1 systemd-journal-remote-249.15-150400.8.22.1 systemd-journal-remote-debuginfo-249.15-150400.8.22.1 systemd-sysvinit-249.15-150400.8.22.1 udev-249.15-150400.8.22.1 udev-debuginfo-249.15-150400.8.22.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.15-150400.8.22.1 libsystemd0-debuginfo-249.15-150400.8.22.1 libudev1-249.15-150400.8.22.1 libudev1-debuginfo-249.15-150400.8.22.1 nss-myhostname-249.15-150400.8.22.1 nss-myhostname-debuginfo-249.15-150400.8.22.1 nss-systemd-249.15-150400.8.22.1 nss-systemd-debuginfo-249.15-150400.8.22.1 systemd-249.15-150400.8.22.1 systemd-container-249.15-150400.8.22.1 systemd-container-debuginfo-249.15-150400.8.22.1 systemd-coredump-249.15-150400.8.22.1 systemd-coredump-debuginfo-249.15-150400.8.22.1 systemd-debuginfo-249.15-150400.8.22.1 systemd-debugsource-249.15-150400.8.22.1 systemd-devel-249.15-150400.8.22.1 systemd-doc-249.15-150400.8.22.1 systemd-experimental-249.15-150400.8.22.1 systemd-experimental-debuginfo-249.15-150400.8.22.1 systemd-journal-remote-249.15-150400.8.22.1 systemd-journal-remote-debuginfo-249.15-150400.8.22.1 systemd-network-249.15-150400.8.22.1 systemd-network-debuginfo-249.15-150400.8.22.1 systemd-portable-249.15-150400.8.22.1 systemd-portable-debuginfo-249.15-150400.8.22.1 systemd-sysvinit-249.15-150400.8.22.1 systemd-testsuite-249.15-150400.8.22.1 systemd-testsuite-debuginfo-249.15-150400.8.22.1 udev-249.15-150400.8.22.1 udev-debuginfo-249.15-150400.8.22.1 - openSUSE Leap 15.4 (noarch): systemd-lang-249.15-150400.8.22.1 - openSUSE Leap 15.4 (x86_64): libsystemd0-32bit-249.15-150400.8.22.1 libsystemd0-32bit-debuginfo-249.15-150400.8.22.1 libudev1-32bit-249.15-150400.8.22.1 libudev1-32bit-debuginfo-249.15-150400.8.22.1 nss-myhostname-32bit-249.15-150400.8.22.1 nss-myhostname-32bit-debuginfo-249.15-150400.8.22.1 systemd-32bit-249.15-150400.8.22.1 systemd-32bit-debuginfo-249.15-150400.8.22.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.15-150400.8.22.1 libsystemd0-debuginfo-249.15-150400.8.22.1 libudev1-249.15-150400.8.22.1 libudev1-debuginfo-249.15-150400.8.22.1 systemd-249.15-150400.8.22.1 systemd-container-249.15-150400.8.22.1 systemd-container-debuginfo-249.15-150400.8.22.1 systemd-coredump-249.15-150400.8.22.1 systemd-coredump-debuginfo-249.15-150400.8.22.1 systemd-debuginfo-249.15-150400.8.22.1 systemd-debugsource-249.15-150400.8.22.1 systemd-devel-249.15-150400.8.22.1 systemd-doc-249.15-150400.8.22.1 systemd-sysvinit-249.15-150400.8.22.1 udev-249.15-150400.8.22.1 udev-debuginfo-249.15-150400.8.22.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): systemd-lang-249.15-150400.8.22.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libsystemd0-32bit-249.15-150400.8.22.1 libsystemd0-32bit-debuginfo-249.15-150400.8.22.1 libudev1-32bit-249.15-150400.8.22.1 libudev1-32bit-debuginfo-249.15-150400.8.22.1 systemd-32bit-249.15-150400.8.22.1 systemd-32bit-debuginfo-249.15-150400.8.22.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libsystemd0-249.15-150400.8.22.1 libsystemd0-debuginfo-249.15-150400.8.22.1 libudev1-249.15-150400.8.22.1 libudev1-debuginfo-249.15-150400.8.22.1 systemd-249.15-150400.8.22.1 systemd-container-249.15-150400.8.22.1 systemd-container-debuginfo-249.15-150400.8.22.1 systemd-debuginfo-249.15-150400.8.22.1 systemd-debugsource-249.15-150400.8.22.1 systemd-journal-remote-249.15-150400.8.22.1 systemd-journal-remote-debuginfo-249.15-150400.8.22.1 systemd-sysvinit-249.15-150400.8.22.1 udev-249.15-150400.8.22.1 udev-debuginfo-249.15-150400.8.22.1 References:

1 0

SUSE-SU-2023:0463-1: moderate: Security update for tar
by opensuse-security＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Security Update: Security update for tar ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0463-1 Rating: moderate References: #1202436 #1207753 Cross-References: CVE-2022-48303 CVSS scores: CVE-2022-48303 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-48303 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for tar fixes the following issues: - CVE-2022-48303: Fixed a one-byte out-of-bounds read that resulted in use of uninitialized memory for a conditional jump (bsc#1207753). Bug fixes: - Fix hang when unpacking test tarball (bsc#1202436). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2023-463=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2023-463=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-463=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-463=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-463=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2023-463=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-463=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-463=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 - openSUSE Leap Micro 5.2 (aarch64 x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 tar-rmt-1.34-150000.3.31.1 tar-rmt-debuginfo-1.34-150000.3.31.1 tar-tests-1.34-150000.3.31.1 tar-tests-debuginfo-1.34-150000.3.31.1 - openSUSE Leap 15.4 (noarch): tar-backup-scripts-1.34-150000.3.31.1 tar-doc-1.34-150000.3.31.1 tar-lang-1.34-150000.3.31.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): tar-lang-1.34-150000.3.31.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 tar-rmt-1.34-150000.3.31.1 tar-rmt-debuginfo-1.34-150000.3.31.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 tar-rmt-1.34-150000.3.31.1 tar-rmt-debuginfo-1.34-150000.3.31.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): tar-lang-1.34-150000.3.31.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): tar-1.34-150000.3.31.1 tar-debuginfo-1.34-150000.3.31.1 tar-debugsource-1.34-150000.3.31.1 References: https://www.suse.com/security/cve/CVE-2022-48303.html https://bugzilla.suse.com/1202436 https://bugzilla.suse.com/1207753

1 0

SUSE-RU-2023:0457-1: moderate: Recommended update for scap-security-guide
by maintenance＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Recommended Update: Recommended update for scap-security-guide ______________________________________________________________________________ Announcement ID: SUSE-RU-2023:0457-1 Rating: moderate References: ECO-3319 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 SUSE Manager Tools for SLE Micro 5 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for scap-security-guide fixes the following issues: scap-security-guide was updated to 0.1.66 (jsc#ECO-3319) - Ubuntu 22.04 CIS - OL7 stig v2r9 update - Bump OL8 STIG version to V1R4 - Update RHEL7 STIG to V3R10 - Update RHEL8 STIG to V1R9 - Introduce CIS RHEL9 profiles - also various SUSE profile fixes were done Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-457=1 - SUSE Manager Tools for SLE Micro 5: zypper in -t patch SUSE-SLE-Manager-Tools-For-Micro-5-2023-457=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-457=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-457=1 Package List: - openSUSE Leap 15.4 (noarch): scap-security-guide-0.1.66-150000.1.56.1 scap-security-guide-debian-0.1.66-150000.1.56.1 scap-security-guide-redhat-0.1.66-150000.1.56.1 scap-security-guide-ubuntu-0.1.66-150000.1.56.1 - SUSE Manager Tools for SLE Micro 5 (noarch): scap-security-guide-0.1.66-150000.1.56.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): scap-security-guide-0.1.66-150000.1.56.1 scap-security-guide-debian-0.1.66-150000.1.56.1 scap-security-guide-redhat-0.1.66-150000.1.56.1 scap-security-guide-ubuntu-0.1.66-150000.1.56.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): scap-security-guide-0.1.66-150000.1.56.1 scap-security-guide-debian-0.1.66-150000.1.56.1 scap-security-guide-redhat-0.1.66-150000.1.56.1 scap-security-guide-ubuntu-0.1.66-150000.1.56.1 References:

1 0

SUSE-SU-2023:0461-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0461-1 Rating: important References: #1208138 #1208144 Cross-References: CVE-2023-0767 CVE-2023-25728 CVE-2023-25729 CVE-2023-25730 CVE-2023-25732 CVE-2023-25734 CVE-2023-25735 CVE-2023-25737 CVE-2023-25738 CVE-2023-25739 CVE-2023-25742 CVE-2023-25743 CVE-2023-25744 CVE-2023-25746 CVSS scores: CVE-2023-0767 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Updated to version 102.8.0 ESR (bsc#1208144): - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes. - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode. - CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus. - CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS. - CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey. - CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry. - CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers. - CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext. - CVE-2023-25729: Fixed extensions opening external schemes without user knowledge. - CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream. - CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads. - CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey. - CVE-2023-25744: Fixed Memory safety bugs. - CVE-2023-25746: Fixed Memory safety bugs. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-461=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-461=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-461=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-461=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-461=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-461=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-461=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-461=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-461=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-461=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-461=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2023-461=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-branding-upstream-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le x86_64): MozillaFirefox-devel-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le x86_64): MozillaFirefox-devel-102.8.0-150200.152.78.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): MozillaFirefox-102.8.0-150200.152.78.1 MozillaFirefox-debuginfo-102.8.0-150200.152.78.1 MozillaFirefox-debugsource-102.8.0-150200.152.78.1 MozillaFirefox-devel-102.8.0-150200.152.78.1 MozillaFirefox-translations-common-102.8.0-150200.152.78.1 MozillaFirefox-translations-other-102.8.0-150200.152.78.1 References: https://www.suse.com/security/cve/CVE-2023-0767.html https://www.suse.com/security/cve/CVE-2023-25728.html https://www.suse.com/security/cve/CVE-2023-25729.html https://www.suse.com/security/cve/CVE-2023-25730.html https://www.suse.com/security/cve/CVE-2023-25732.html https://www.suse.com/security/cve/CVE-2023-25734.html https://www.suse.com/security/cve/CVE-2023-25735.html https://www.suse.com/security/cve/CVE-2023-25737.html https://www.suse.com/security/cve/CVE-2023-25738.html https://www.suse.com/security/cve/CVE-2023-25739.html https://www.suse.com/security/cve/CVE-2023-25742.html https://www.suse.com/security/cve/CVE-2023-25743.html https://www.suse.com/security/cve/CVE-2023-25744.html https://www.suse.com/security/cve/CVE-2023-25746.html https://bugzilla.suse.com/1208138 https://bugzilla.suse.com/1208144

1 0

SUSE-RU-2023:0452-1: moderate: Recommended update for build
by maintenance＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Recommended Update: Recommended update for build ______________________________________________________________________________ Announcement ID: SUSE-RU-2023:0452-1 Rating: moderate References: PED-3410 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for build fixes the following issues: build was updated to the current version: - CycloneDX SBOM support added - added support for generating VCS url information into rpms - SPDX SBOM generation for container and product builds - Revert & Redo "Better filetype detection for temp changes files" - Fix typo in glibc hwcaps supplements - Implement lua string macros - configure mkbaselibs to create glibc-hwcaps baselibs as well - Better filetype detection for temp changes files - Add hook to run checks after mkbaselibs run - Delete leftover multilinedefine variable definition - Support multiline macros in the config's macro sections - Support #!BuildConstraint lines - Support #!BuildTarget in spec files to set the build target (as workaround of broken BuildArch in rpm since 2001) - Support a regexp for file renames - Set home to /root when running build time services - INCOMPATIBLE CHANGE: get rid off the power8 cpu limitation (#889) on powerpc - Add handling of non-compressed tar when creating Debian archive for DSC 3.0 - Add automatic build-in-place detection - Support dist/package subdir builds in pbuild - Skip iothreads on QEMU 7.1.0 - Fix permissions of /dev/pts/ptmx - Add license to container package list output - initial SP5 build configurations - vm-type:qemu use virtio on x86_64 - Improve installation of obs-docker-support for multi-stage builds - Tweak ARG handling in dockerfile parser - fixed Undefined subroutine &PBuild::Job::ls issue - Add missing dependencies from vc as Recommends - sync factory build config - build-recipe-livebuild: run as root - vm_kill_kvm: Use SIGKILL after 3 minutes if the kvm process is not going away - Zip: Allow extraction of symlink targets - Convert obsolete egrep/fgrep calls to grep -E/-F - Add RemoteAsset support for Dockerfile based builds - new image format: mkosi - Support stacked container builds - Revert "build-vm-kvm: enable l3-cache on i386/x86_64 builds" - handling of non-compressed tar when creating Debian archive for DSC 3.0 - kvm: exclude powerpc from io_uring, enable iothreads always (#829) - kvm: enable more performant I/O also for s390(x) (#828) - Changelog patching when building DSC format 3.0. (#831) - support for building from slsa provenance files Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-452=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-452=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-452=1 Package List: - openSUSE Leap 15.4 (noarch): build-20230215-150200.15.1 build-initvm-aarch64-20230215-150200.15.1 build-initvm-powerpc64le-20230215-150200.15.1 build-initvm-s390x-20230215-150200.15.1 build-initvm-x86_64-20230215-150200.15.1 build-mkbaselibs-20230215-150200.15.1 build-mkdrpms-20230215-150200.15.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): build-20230215-150200.15.1 build-mkbaselibs-20230215-150200.15.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): build-20230215-150200.15.1 build-mkbaselibs-20230215-150200.15.1 References:

1 0

SUSE-SU-2023:0450-1: important: Security update for postgresql12
by opensuse-security＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Security Update: Security update for postgresql12 ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0450-1 Rating: important References: #1208102 Cross-References: CVE-2022-41862 CVSS scores: CVE-2022-41862 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for postgresql12 fixes the following issues: Update to 12.14: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-450=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-450=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-450=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-450=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-450=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-450=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-450=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-450=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-450=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2023-450=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-llvmjit-12.14-150200.8.41.1 postgresql12-llvmjit-debuginfo-12.14-150200.8.41.1 postgresql12-llvmjit-devel-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 postgresql12-test-12.14-150200.8.41.1 - openSUSE Leap 15.4 (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Enterprise Storage 7.1 (noarch): postgresql12-docs-12.14-150200.8.41.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): postgresql12-12.14-150200.8.41.1 postgresql12-contrib-12.14-150200.8.41.1 postgresql12-contrib-debuginfo-12.14-150200.8.41.1 postgresql12-debuginfo-12.14-150200.8.41.1 postgresql12-debugsource-12.14-150200.8.41.1 postgresql12-devel-12.14-150200.8.41.1 postgresql12-devel-debuginfo-12.14-150200.8.41.1 postgresql12-plperl-12.14-150200.8.41.1 postgresql12-plperl-debuginfo-12.14-150200.8.41.1 postgresql12-plpython-12.14-150200.8.41.1 postgresql12-plpython-debuginfo-12.14-150200.8.41.1 postgresql12-pltcl-12.14-150200.8.41.1 postgresql12-pltcl-debuginfo-12.14-150200.8.41.1 postgresql12-server-12.14-150200.8.41.1 postgresql12-server-debuginfo-12.14-150200.8.41.1 postgresql12-server-devel-12.14-150200.8.41.1 postgresql12-server-devel-debuginfo-12.14-150200.8.41.1 - SUSE Enterprise Storage 7 (noarch): postgresql12-docs-12.14-150200.8.41.1 References: https://www.suse.com/security/cve/CVE-2022-41862.html https://bugzilla.suse.com/1208102

1 0

SUSE-RU-2023:0449-1: important: Recommended update for python-pylint
by maintenance＠opensuse.org 20 Feb '23

20 Feb '23

SUSE Recommended Update: Recommended update for python-pylint ______________________________________________________________________________ Announcement ID: SUSE-RU-2023:0449-1 Rating: important References: #1206991 MSC-556 Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update releases the python-pylint to the PackageHub Subpackages. (bsc#1206991, ijsc#MSC-556) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-449=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-449=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-editdistance-debuginfo-0.3.1-150000.3.2.1 python-editdistance-debugsource-0.3.1-150000.3.2.1 python3-editdistance-0.3.1-150000.3.2.1 python3-editdistance-debuginfo-0.3.1-150000.3.2.1 - openSUSE Leap 15.4 (noarch): python3-mccabe-0.6.1-150000.3.2.1 python3-pylint-1.8.2-150000.3.5.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x x86_64): python3-editdistance-0.3.1-150000.3.2.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (noarch): python3-mccabe-0.6.1-150000.3.2.1 python3-pylint-1.8.2-150000.3.5.2 References: https://bugzilla.suse.com/1206991

1 0

openSUSE-SU-2023:0053-1: moderate: Security update for timescaledb
by opensuse-security＠opensuse.org 19 Feb '23

19 Feb '23

openSUSE Security Update: Security update for timescaledb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0053-1 Rating: moderate References: #1197063 Cross-References: CVE-2022-24128 CVSS scores: CVE-2022-24128 (NVD) : 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for timescaledb fixes the following issues: timescaledb was updated to version 2.9.3 - https://github.com/timescale/timescaledb/releases/tag/2.9.3 - enable postgresql15 build - https://github.com/timescale/timescaledb/releases/tag/2.9.2 - https://github.com/timescale/timescaledb/releases/tag/2.9.1 - https://github.com/timescale/timescaledb/releases/tag/2.9.0 - https://github.com/timescale/timescaledb/releases/tag/2.8.1 - https://github.com/timescale/timescaledb/releases/tag/2.8.0 - https://github.com/timescale/timescaledb/releases/tag/2.7.1 - https://github.com/timescale/timescaledb/releases/tag/2.7.2 - https://github.com/timescale/timescaledb/releases/tag/2.7.0 - https://github.com/timescale/timescaledb/releases/tag/2.6.1 - CVE-2022-24128: Fixed privilege escalation during extension installation (boo#1197063) - https://github.com/timescale/timescaledb/releases/tag/2.6.0 - https://github.com/timescale/timescaledb/releases/tag/2.5.2 - https://github.com/timescale/timescaledb/releases/tag/2.5.1 - switch to %{pg_name}-server-devel - https://github.com/timescale/timescaledb/releases/tag/1.7.5 - https://github.com/timescale/timescaledb/releases/tag/2.0.0 - https://github.com/timescale/timescaledb/releases/tag/2.0.1 - https://github.com/timescale/timescaledb/releases/tag/2.0.2 - https://github.com/timescale/timescaledb/releases/tag/2.1.0 - https://github.com/timescale/timescaledb/releases/tag/2.1.1 - https://github.com/timescale/timescaledb/releases/tag/2.2.0 - https://github.com/timescale/timescaledb/releases/tag/2.2.1 - https://github.com/timescale/timescaledb/releases/tag/2.3.0 - https://github.com/timescale/timescaledb/releases/tag/2.3.1 - https://github.com/timescale/timescaledb/releases/tag/2.4.0 - https://github.com/timescale/timescaledb/releases/tag/2.4.1 - https://github.com/timescale/timescaledb/releases/tag/2.4.2 - https://github.com/timescale/timescaledb/releases/tag/2.5.0 - enable postgresql14 - https://github.com/timescale/timescaledb/releases/tag/1.7.2 - https://github.com/timescale/timescaledb/releases/tag/1.7.3 - https://github.com/timescale/timescaledb/releases/tag/1.7.4 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2023-53=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): postgresql12-timescaledb-2.9.3-bp153.2.3.1 postgresql13-timescaledb-2.9.3-bp153.2.3.1 postgresql14-timescaledb-2.9.3-bp153.2.3.1 postgresql15-timescaledb-2.9.3-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-24128.html https://bugzilla.suse.com/1197063

1 0

openSUSE-RU-2023:0051-1: moderate: Recommended update for pgloader
by maintenance＠opensuse.org 19 Feb '23

19 Feb '23

openSUSE Recommended Update: Recommended update for pgloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0051-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for pgloader fixes the following issues: pgloader is shipped in version 3.6.9. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-51=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le x86_64): pgloader-3.6.9-bp154.2.1 References:

1 0

openSUSE-RU-2023:0050-1: moderate: Recommended update for orafce
by maintenance＠opensuse.org 19 Feb '23

19 Feb '23

openSUSE Recommended Update: Recommended update for orafce ______________________________________________________________________________ Announcement ID: openSUSE-RU-2023:0050-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for orafce fixes the following issues: This update provides orafce in version 4.1.1+git0.519b5b5: Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2023-50=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): postgresql12-orafce-4.1.1+git0.519b5b5-bp153.3.1 postgresql13-orafce-4.1.1+git0.519b5b5-bp153.3.1 postgresql14-orafce-4.1.1+git0.519b5b5-bp153.3.1 postgresql15-orafce-4.1.1+git0.519b5b5-bp153.3.1 - openSUSE Backports SLE-15-SP3 (i586): postgresql12-orafce-4.1.1+git0.519b5b5-bp153.2.1 postgresql13-orafce-4.1.1+git0.519b5b5-bp153.2.1 References:

1 0