openSUSE Updates

updates@lists.opensuse.org

2 participants
17158 discussions

Start a nNew thread

SUSE-OU-2022:1705-1: moderate: Optional update for SUSE Package Hub

by maintenance＠opensuse.org

4 hours, 44 minutes

SUSE-RU-2022:1709-1: important: Recommended update for libcbor

by maintenance＠opensuse.org

SUSE Recommended Update: Recommended update for libcbor ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1709-1 Rating: important References: #1197743 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libcbor fixes the following issues: - Fix build errors occuring on SUSE Linux Enterprise 15 Service Pack 4 Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1709=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1709=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1709=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1709=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1709=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1709=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1709=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-1709=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-1709=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libcbor-debugsource-0.5.0-150100.4.6.1 libcbor-devel-0.5.0-150100.4.6.1 libcbor0-0.5.0-150100.4.6.1 libcbor0-debuginfo-0.5.0-150100.4.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libcbor-debugsource-0.5.0-150100.4.6.1 libcbor-devel-0.5.0-150100.4.6.1 libcbor0-0.5.0-150100.4.6.1 libcbor0-debuginfo-0.5.0-150100.4.6.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): libcbor-debugsource-0.5.0-150100.4.6.1 libcbor-devel-0.5.0-150100.4.6.1 libcbor0-0.5.0-150100.4.6.1 libcbor0-debuginfo-0.5.0-150100.4.6.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): libcbor-debugsource-0.5.0-150100.4.6.1 libcbor-devel-0.5.0-150100.4.6.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): libcbor-debugsource-0.5.0-150100.4.6.1 libcbor-devel-0.5.0-150100.4.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libcbor-debugsource-0.5.0-150100.4.6.1 libcbor0-0.5.0-150100.4.6.1 libcbor0-debuginfo-0.5.0-150100.4.6.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libcbor-debugsource-0.5.0-150100.4.6.1 libcbor0-0.5.0-150100.4.6.1 libcbor0-debuginfo-0.5.0-150100.4.6.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libcbor-debugsource-0.5.0-150100.4.6.1 libcbor0-0.5.0-150100.4.6.1 libcbor0-debuginfo-0.5.0-150100.4.6.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libcbor-debugsource-0.5.0-150100.4.6.1 libcbor0-0.5.0-150100.4.6.1 libcbor0-debuginfo-0.5.0-150100.4.6.1 References: https://bugzilla.suse.com/1197743

4 hours, 45 minutes

SUSE-RU-2022:1720-1: important: Recommended update for python-rtslib-fb

by maintenance＠opensuse.org

SUSE Recommended Update: Recommended update for python-rtslib-fb ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1720-1 Rating: important References: #1199090 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rtslib-fb fixes the following issues: - Update parameters description. - Enable the 'disable_emulate_legacy_capacity' parameter. (bsc#1199090) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1720=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1720=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-1720=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1720=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-1720=1 Package List: - openSUSE Leap 15.4 (noarch): python-rtslib-fb-common-2.1.74-150300.3.3.1 python2-rtslib-fb-2.1.74-150300.3.3.1 python3-rtslib-fb-2.1.74-150300.3.3.1 - openSUSE Leap 15.3 (noarch): python-rtslib-fb-common-2.1.74-150300.3.3.1 python2-rtslib-fb-2.1.74-150300.3.3.1 python3-rtslib-fb-2.1.74-150300.3.3.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (noarch): python2-rtslib-fb-2.1.74-150300.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python-rtslib-fb-common-2.1.74-150300.3.3.1 python3-rtslib-fb-2.1.74-150300.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): python-rtslib-fb-common-2.1.74-150300.3.3.1 python3-rtslib-fb-2.1.74-150300.3.3.1 References: https://bugzilla.suse.com/1199090

4 hours, 45 minutes

SUSE-OU-2022:1712-1: moderate: Optional update for SUSE Package Hub

by maintenance＠opensuse.org

SUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: SUSE-OU-2022:1712-1 Rating: moderate References: MSC-303 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 optional fixes and contains one feature can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: libchamplain cogl clutter clutter-gtk Patch Instructions: To install this SUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1712=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1712=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-1712=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-1712=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1712=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1712=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-1712=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gstreamer-plugins-cogl-1.22.2-150200.10.2.1 gstreamer-plugins-cogl-debuginfo-1.22.2-150200.10.2.1 libchamplain-0_12-0-0.12.20-150200.3.2.1 libchamplain-0_12-0-debuginfo-0.12.20-150200.3.2.1 libchamplain-debugsource-0.12.20-150200.3.2.1 libchamplain-devel-0.12.20-150200.3.2.1 typelib-1_0-Champlain-0_12-0.12.20-150200.3.2.1 typelib-1_0-CoglGst-2_0-1.22.2-150200.10.2.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): clutter-debugsource-1.26.2-150000.4.2.1 clutter-devel-1.26.2-150000.4.2.1 clutter-gtk-debugsource-1.8.4-150000.4.2.1 clutter-gtk-devel-1.8.4-150000.4.2.1 cogl-debugsource-1.22.2-150200.10.2.1 cogl-devel-1.22.2-150200.10.2.1 gstreamer-plugins-cogl-1.22.2-150200.10.2.1 gstreamer-plugins-cogl-debuginfo-1.22.2-150200.10.2.1 libchamplain-0_12-0-0.12.20-150200.3.2.1 libchamplain-0_12-0-debuginfo-0.12.20-150200.3.2.1 libchamplain-debugsource-0.12.20-150200.3.2.1 libchamplain-devel-0.12.20-150200.3.2.1 libclutter-1_0-0-1.26.2-150000.4.2.1 libclutter-1_0-0-debuginfo-1.26.2-150000.4.2.1 libclutter-gtk-1_0-0-1.8.4-150000.4.2.1 libclutter-gtk-1_0-0-debuginfo-1.8.4-150000.4.2.1 libcogl-gles2-20-1.22.2-150200.10.2.1 libcogl-gles2-20-debuginfo-1.22.2-150200.10.2.1 libcogl-pango20-1.22.2-150200.10.2.1 libcogl-pango20-debuginfo-1.22.2-150200.10.2.1 libcogl20-1.22.2-150200.10.2.1 libcogl20-debuginfo-1.22.2-150200.10.2.1 typelib-1_0-Champlain-0_12-0.12.20-150200.3.2.1 typelib-1_0-Clutter-1_0-1.26.2-150000.4.2.1 typelib-1_0-Cogl-1_0-1.22.2-150200.10.2.1 typelib-1_0-Cogl-2_0-1.22.2-150200.10.2.1 typelib-1_0-CoglGst-2_0-1.22.2-150200.10.2.1 typelib-1_0-CoglPango-1_0-1.22.2-150200.10.2.1 typelib-1_0-CoglPango-2_0-1.22.2-150200.10.2.1 typelib-1_0-GtkClutter-1_0-1.8.4-150000.4.2.1 - openSUSE Leap 15.3 (x86_64): libclutter-1_0-0-32bit-1.26.2-150000.4.2.1 libclutter-1_0-0-32bit-debuginfo-1.26.2-150000.4.2.1 libclutter-gtk-1_0-0-32bit-1.8.4-150000.4.2.1 libclutter-gtk-1_0-0-32bit-debuginfo-1.8.4-150000.4.2.1 libcogl-pango20-32bit-1.22.2-150200.10.2.1 libcogl-pango20-32bit-debuginfo-1.22.2-150200.10.2.1 libcogl20-32bit-1.22.2-150200.10.2.1 libcogl20-32bit-debuginfo-1.22.2-150200.10.2.1 - openSUSE Leap 15.3 (noarch): clutter-gtk-lang-1.8.4-150000.4.2.1 clutter-lang-1.26.2-150000.4.2.1 cogl-lang-1.22.2-150200.10.2.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): libchamplain-0_12-0-0.12.20-150200.3.2.1 libchamplain-0_12-0-debuginfo-0.12.20-150200.3.2.1 libchamplain-debugsource-0.12.20-150200.3.2.1 typelib-1_0-Champlain-0_12-0.12.20-150200.3.2.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): libchamplain-0_12-0-0.12.20-150200.3.2.1 libchamplain-0_12-0-debuginfo-0.12.20-150200.3.2.1 libchamplain-debugsource-0.12.20-150200.3.2.1 typelib-1_0-Champlain-0_12-0.12.20-150200.3.2.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): libchamplain-0_12-0-0.12.20-150200.3.2.1 libchamplain-0_12-0-debuginfo-0.12.20-150200.3.2.1 libchamplain-debugsource-0.12.20-150200.3.2.1 typelib-1_0-Champlain-0_12-0.12.20-150200.3.2.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x): libchamplain-0_12-0-0.12.20-150200.3.2.1 libchamplain-0_12-0-debuginfo-0.12.20-150200.3.2.1 libchamplain-debugsource-0.12.20-150200.3.2.1 libclutter-1_0-0-1.26.2-150000.4.2.1 libclutter-1_0-0-debuginfo-1.26.2-150000.4.2.1 libclutter-gtk-1_0-0-1.8.4-150000.4.2.1 libclutter-gtk-1_0-0-debuginfo-1.8.4-150000.4.2.1 libcogl-pango20-1.22.2-150200.10.2.1 libcogl-pango20-debuginfo-1.22.2-150200.10.2.1 libcogl20-1.22.2-150200.10.2.1 libcogl20-debuginfo-1.22.2-150200.10.2.1 typelib-1_0-Champlain-0_12-0.12.20-150200.3.2.1 typelib-1_0-Clutter-1_0-1.26.2-150000.4.2.1 typelib-1_0-Cogl-1_0-1.22.2-150200.10.2.1 typelib-1_0-CoglPango-1_0-1.22.2-150200.10.2.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): clutter-debugsource-1.26.2-150000.4.2.1 clutter-devel-1.26.2-150000.4.2.1 clutter-gtk-debugsource-1.8.4-150000.4.2.1 clutter-gtk-devel-1.8.4-150000.4.2.1 cogl-debugsource-1.22.2-150200.10.2.1 cogl-devel-1.22.2-150200.10.2.1 gstreamer-plugins-cogl-1.22.2-150200.10.2.1 gstreamer-plugins-cogl-debuginfo-1.22.2-150200.10.2.1 libclutter-1_0-0-1.26.2-150000.4.2.1 libclutter-1_0-0-debuginfo-1.26.2-150000.4.2.1 libclutter-gtk-1_0-0-1.8.4-150000.4.2.1 libclutter-gtk-1_0-0-debuginfo-1.8.4-150000.4.2.1 libcogl-gles2-20-1.22.2-150200.10.2.1 libcogl-gles2-20-debuginfo-1.22.2-150200.10.2.1 libcogl-pango20-1.22.2-150200.10.2.1 libcogl-pango20-debuginfo-1.22.2-150200.10.2.1 libcogl20-1.22.2-150200.10.2.1 libcogl20-debuginfo-1.22.2-150200.10.2.1 typelib-1_0-Clutter-1_0-1.26.2-150000.4.2.1 typelib-1_0-Cogl-1_0-1.22.2-150200.10.2.1 typelib-1_0-Cogl-2_0-1.22.2-150200.10.2.1 typelib-1_0-CoglGst-2_0-1.22.2-150200.10.2.1 typelib-1_0-CoglPango-1_0-1.22.2-150200.10.2.1 typelib-1_0-CoglPango-2_0-1.22.2-150200.10.2.1 typelib-1_0-GtkClutter-1_0-1.8.4-150000.4.2.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (noarch): clutter-gtk-lang-1.8.4-150000.4.2.1 clutter-lang-1.26.2-150000.4.2.1 cogl-lang-1.22.2-150200.10.2.1 References:

4 hours, 46 minutes

SUSE-SU-2022:1718-1: important: Security update for e2fsprogs

by opensuse-security＠opensuse.org

SUSE Security Update: Security update for e2fsprogs ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1718-1 Rating: important References: #1198446 Cross-References: CVE-2022-1304 CVSS scores: CVE-2022-1304 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-1304 (SUSE): 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for e2fsprogs fixes the following issues: - CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1718=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1718=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): e2fsprogs-1.46.4-150400.3.3.1 e2fsprogs-debuginfo-1.46.4-150400.3.3.1 e2fsprogs-debugsource-1.46.4-150400.3.3.1 e2fsprogs-devel-1.46.4-150400.3.3.1 e2fsprogs-scrub-1.46.4-150400.3.3.1 libcom_err-devel-1.46.4-150400.3.3.1 libcom_err-devel-static-1.46.4-150400.3.3.1 libcom_err2-1.46.4-150400.3.3.1 libcom_err2-debuginfo-1.46.4-150400.3.3.1 libext2fs-devel-1.46.4-150400.3.3.1 libext2fs-devel-static-1.46.4-150400.3.3.1 libext2fs2-1.46.4-150400.3.3.1 libext2fs2-debuginfo-1.46.4-150400.3.3.1 - openSUSE Leap 15.4 (x86_64): e2fsprogs-32bit-debuginfo-1.46.4-150400.3.3.1 libcom_err-devel-32bit-1.46.4-150400.3.3.1 libcom_err2-32bit-1.46.4-150400.3.3.1 libcom_err2-32bit-debuginfo-1.46.4-150400.3.3.1 libext2fs-devel-32bit-1.46.4-150400.3.3.1 libext2fs2-32bit-1.46.4-150400.3.3.1 libext2fs2-32bit-debuginfo-1.46.4-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): e2fsprogs-1.46.4-150400.3.3.1 e2fsprogs-debuginfo-1.46.4-150400.3.3.1 e2fsprogs-debugsource-1.46.4-150400.3.3.1 e2fsprogs-devel-1.46.4-150400.3.3.1 libcom_err-devel-1.46.4-150400.3.3.1 libcom_err-devel-static-1.46.4-150400.3.3.1 libcom_err2-1.46.4-150400.3.3.1 libcom_err2-debuginfo-1.46.4-150400.3.3.1 libext2fs-devel-1.46.4-150400.3.3.1 libext2fs-devel-static-1.46.4-150400.3.3.1 libext2fs2-1.46.4-150400.3.3.1 libext2fs2-debuginfo-1.46.4-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): e2fsprogs-32bit-debuginfo-1.46.4-150400.3.3.1 libcom_err2-32bit-1.46.4-150400.3.3.1 libcom_err2-32bit-debuginfo-1.46.4-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-1304.html https://bugzilla.suse.com/1198446

4 hours, 47 minutes

SUSE-RU-2022:1713-1: Recommended update for libreiserfs

by maintenance＠opensuse.org

SUSE Recommended Update: Recommended update for libreiserfs ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1713-1 Rating: low References: Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for libreiserfs fixes the following issues: - Resolve autoreconf issue. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1713=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1713=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libreiserfs-0_3-0-0.3.0.5-150000.3.3.1 libreiserfs-0_3-0-debuginfo-0.3.0.5-150000.3.3.1 libreiserfs-debugsource-0.3.0.5-150000.3.3.1 libreiserfs-devel-0.3.0.5-150000.3.3.1 libreiserfs-progs-0.3.0.5-150000.3.3.1 libreiserfs-progs-debuginfo-0.3.0.5-150000.3.3.1 - openSUSE Leap 15.4 (x86_64): libreiserfs-0_3-0-32bit-0.3.0.5-150000.3.3.1 libreiserfs-0_3-0-32bit-debuginfo-0.3.0.5-150000.3.3.1 libreiserfs-devel-32bit-0.3.0.5-150000.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libreiserfs-0_3-0-0.3.0.5-150000.3.3.1 libreiserfs-0_3-0-debuginfo-0.3.0.5-150000.3.3.1 libreiserfs-debugsource-0.3.0.5-150000.3.3.1 libreiserfs-devel-0.3.0.5-150000.3.3.1 libreiserfs-progs-0.3.0.5-150000.3.3.1 libreiserfs-progs-debuginfo-0.3.0.5-150000.3.3.1 - openSUSE Leap 15.3 (x86_64): libreiserfs-0_3-0-32bit-0.3.0.5-150000.3.3.1 libreiserfs-0_3-0-32bit-debuginfo-0.3.0.5-150000.3.3.1 libreiserfs-devel-32bit-0.3.0.5-150000.3.3.1 References:

4 hours, 47 minutes

SUSE-SU-2022:1719-1: important: Security update for MozillaThunderbird

by opensuse-security＠opensuse.org

SUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1719-1 Rating: important References: #1198970 Cross-References: CVE-2022-1520 CVE-2022-29909 CVE-2022-29911 CVE-2022-29912 CVE-2022-29913 CVE-2022-29914 CVE-2022-29916 CVE-2022-29917 CVSS scores: CVE-2022-1520 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2022-29909 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-29911 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-29912 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-29913 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-29914 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-29916 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-29917 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: Various security fixes MFSA 2022-18 (bsc#1198970): - CVE-2022-1520: Incorrect security status shown after viewing an attached email (bmo#1745019). - CVE-2022-29914: Fullscreen notification bypass using popups (bmo#1746448). - CVE-2022-29909: Bypassing permission prompt in nested browsing contexts (bmo#1755081). - CVE-2022-29916: Leaking browser history with CSS variables (bmo#1760674). - CVE-2022-29911: iframe sandbox bypass (bmo#1761981). - CVE-2022-29912: Reader mode bypassed SameSite cookies (bmo#1692655). - CVE-2022-29913: Speech Synthesis feature not properly disabled (bmo#1764778). - CVE-2022-29917: Memory safety bugs fixed in Thunderbird 91.9 (bmo#1684739, bmo#1706441, bmo#1753298, bmo#1762614, bmo#1762620). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1719=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1719=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-1719=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-1719=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1719=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1719=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.9.0-150200.8.68.2 MozillaThunderbird-debuginfo-91.9.0-150200.8.68.2 MozillaThunderbird-debugsource-91.9.0-150200.8.68.2 MozillaThunderbird-translations-common-91.9.0-150200.8.68.2 MozillaThunderbird-translations-other-91.9.0-150200.8.68.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.9.0-150200.8.68.2 MozillaThunderbird-debuginfo-91.9.0-150200.8.68.2 MozillaThunderbird-debugsource-91.9.0-150200.8.68.2 MozillaThunderbird-translations-common-91.9.0-150200.8.68.2 MozillaThunderbird-translations-other-91.9.0-150200.8.68.2 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): MozillaThunderbird-91.9.0-150200.8.68.2 MozillaThunderbird-debuginfo-91.9.0-150200.8.68.2 MozillaThunderbird-debugsource-91.9.0-150200.8.68.2 MozillaThunderbird-translations-common-91.9.0-150200.8.68.2 MozillaThunderbird-translations-other-91.9.0-150200.8.68.2 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): MozillaThunderbird-91.9.0-150200.8.68.2 MozillaThunderbird-debuginfo-91.9.0-150200.8.68.2 MozillaThunderbird-debugsource-91.9.0-150200.8.68.2 MozillaThunderbird-translations-common-91.9.0-150200.8.68.2 MozillaThunderbird-translations-other-91.9.0-150200.8.68.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): MozillaThunderbird-91.9.0-150200.8.68.2 MozillaThunderbird-debuginfo-91.9.0-150200.8.68.2 MozillaThunderbird-debugsource-91.9.0-150200.8.68.2 MozillaThunderbird-translations-common-91.9.0-150200.8.68.2 MozillaThunderbird-translations-other-91.9.0-150200.8.68.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x): MozillaThunderbird-91.9.0-150200.8.68.2 MozillaThunderbird-debuginfo-91.9.0-150200.8.68.2 MozillaThunderbird-debugsource-91.9.0-150200.8.68.2 MozillaThunderbird-translations-common-91.9.0-150200.8.68.2 MozillaThunderbird-translations-other-91.9.0-150200.8.68.2 References: https://www.suse.com/security/cve/CVE-2022-1520.html https://www.suse.com/security/cve/CVE-2022-29909.html https://www.suse.com/security/cve/CVE-2022-29911.html https://www.suse.com/security/cve/CVE-2022-29912.html https://www.suse.com/security/cve/CVE-2022-29913.html https://www.suse.com/security/cve/CVE-2022-29914.html https://www.suse.com/security/cve/CVE-2022-29916.html https://www.suse.com/security/cve/CVE-2022-29917.html https://bugzilla.suse.com/1198970

4 hours, 48 minutes

SUSE-SU-2022:1717-1: important: Security update for nodejs10

by opensuse-security＠opensuse.org

SUSE Security Update: Security update for nodejs10 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1717-1 Rating: important References: #1191962 #1191963 #1192153 #1192154 #1192696 #1194514 #1194819 #1197283 #1198247 Cross-References: CVE-2021-23343 CVE-2021-32803 CVE-2021-32804 CVE-2021-3807 CVE-2021-3918 CVE-2021-44906 CVE-2021-44907 CVE-2022-0235 CVE-2022-21824 CVSS scores: CVE-2021-23343 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23343 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-32803 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32803 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-3807 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3807 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3918 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-3918 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-44906 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-44906 (SUSE): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2021-44907 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-44907 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2022-0235 (SUSE): 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2022-21824 (NVD) : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2022-21824 (SUSE): 4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for nodejs10 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963). - CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962). - CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696). - CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154). - CVE-2022-21824: Fixed prototype pollution via console.table (bsc#1194514). - CVE-2021-44906: Fixed prototype pollution in npm dependency (bsc#1198247). - CVE-2021-44907: Fixed insuficient sanitation in npm dependency (bsc#1197283). - CVE-2022-0235: Fixed passing of cookie data and sensitive headers to different hostnames in node-fetch-npm (bsc#1194819). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1717=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1717=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1717=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1717=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1717=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1717=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-1717=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-1717=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1717=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1717=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-1717=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-1717=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-1717=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1717=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1717=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-1717=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-1717=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1717=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-1717=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1717=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-1717=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - openSUSE Leap 15.4 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - openSUSE Leap 15.3 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Manager Server 4.1 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Manager Retail Branch Server 4.1 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Manager Proxy 4.1 (x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Manager Proxy 4.1 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server for SAP 15 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise Server 15-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Enterprise Storage 7 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE Enterprise Storage 6 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 - SUSE CaaS Platform 4.0 (x86_64): nodejs10-10.24.1-150000.1.44.1 nodejs10-debuginfo-10.24.1-150000.1.44.1 nodejs10-debugsource-10.24.1-150000.1.44.1 nodejs10-devel-10.24.1-150000.1.44.1 npm10-10.24.1-150000.1.44.1 - SUSE CaaS Platform 4.0 (noarch): nodejs10-docs-10.24.1-150000.1.44.1 References: https://www.suse.com/security/cve/CVE-2021-23343.html https://www.suse.com/security/cve/CVE-2021-32803.html https://www.suse.com/security/cve/CVE-2021-32804.html https://www.suse.com/security/cve/CVE-2021-3807.html https://www.suse.com/security/cve/CVE-2021-3918.html https://www.suse.com/security/cve/CVE-2021-44906.html https://www.suse.com/security/cve/CVE-2021-44907.html https://www.suse.com/security/cve/CVE-2022-0235.html https://www.suse.com/security/cve/CVE-2022-21824.html https://bugzilla.suse.com/1191962 https://bugzilla.suse.com/1191963 https://bugzilla.suse.com/1192153 https://bugzilla.suse.com/1192154 https://bugzilla.suse.com/1192696 https://bugzilla.suse.com/1194514 https://bugzilla.suse.com/1194819 https://bugzilla.suse.com/1197283 https://bugzilla.suse.com/1198247

4 hours, 51 minutes

SUSE-RU-2022:1715-1: Recommended update for python-configparser

by maintenance＠opensuse.org

SUSE Recommended Update: Recommended update for python-configparser ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:1715-1 Rating: low References: Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-configparser fixes the following issues: - Fixed issue on Python 2.x when future is present had unintended consequences. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1715=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1715=1 Package List: - openSUSE Leap 15.4 (noarch): python2-configparser-3.7.3-150100.3.3.1 - openSUSE Leap 15.3 (noarch): python2-configparser-3.7.3-150100.3.3.1 References:

4 hours, 52 minutes

openSUSE-SU-2022:0134-1: important: Security update for python-numpy

by opensuse-security＠opensuse.org

openSUSE Security Update: Security update for python-numpy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0134-1 Rating: important References: #1190345 #1193907 #1193913 Cross-References: CVE-2021-21897 CVE-2021-33430 CVE-2021-41496 CVSS scores: CVE-2021-21897 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21897 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-33430 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-33430 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-41496 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-41496 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-134=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-134=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-numpy-debugsource-1.17.3-10.1 python-numpy_1_17_3-gnu-hpc-debugsource-1.17.3-10.1 python3-numpy-1.17.3-10.1 python3-numpy-debuginfo-1.17.3-10.1 python3-numpy-devel-1.17.3-10.1 python3-numpy-gnu-hpc-1.17.3-10.1 python3-numpy-gnu-hpc-devel-1.17.3-10.1 python3-numpy_1_17_3-gnu-hpc-1.17.3-10.1 python3-numpy_1_17_3-gnu-hpc-debuginfo-1.17.3-10.1 python3-numpy_1_17_3-gnu-hpc-devel-1.17.3-10.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): dxflib-devel-3.17.0-bp153.2.3.1 libdxflib-3_17_0-1-3.17.0-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-21897.html https://www.suse.com/security/cve/CVE-2021-33430.html https://www.suse.com/security/cve/CVE-2021-41496.html https://bugzilla.suse.com/1190345 https://bugzilla.suse.com/1193907 https://bugzilla.suse.com/1193913

4 hours, 53 minutes

Jump to page:

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

openSUSE Updates