SUSE-IU-2022:659-1 SUSE Image security@suse.de SUSE Security Team SUSE Image SUSE-IU-2022:659-1 Interim 1 1 2023-01-19T08:50:54Z current 2022-06-02T01:00:00Z 2022-06-02T01:00:00Z cve-database/bin/generate-cvrf-publiccloud.pl 2021-02-18T01:00:00Z Image update for SUSE-IU-2022:659-1 / google/sles-15-sp2-sap-v20220602-x86-64 This image update for google/sles-15-sp2-sap-v20220602-x86-64 contains the following changes: Package HANA-Firewall was updated: - Adaption to new go compiler behavior regarding test and build (bsc#1197697) Package NetworkManager was updated: - Add 0001-supplicant-interface-Match-more-ciphers-to-determine.patch: supplicant/interface: Match more ciphers todetermine AP security (glfo#NetworkManager/NetworkManager/commit/e0191320, bsc#1198381); - Add 0001-rdisc-fix-parsing-ndp_msg_opt_dnssl_lifetime-from-IP.patch: rdisc: fix parsing ndp_msg_opt_dnssl_lifetime() from IPv6 RA (bsc#1195222). - Add 0001-ndisc-don-t-artificially-extend-the-lifetime-of-DNSS.patch: ndisc: don't artificially extend the lifetime of DNSSL/RDNSS options (bsc#1195222). - Add NetworkManager-RFC8106.patch: Backport upstream fixes to implement RFC 8106(glfo#NetworkManager/NetworkManager#874, bsc#1195173). Package SAPHanaSR was updated: - Version bump to 0.155.0- Add systemd support for the resource agent to interact with the new SAP unit files for sapstartsrv. As the new version of the SAP Startup Framework will use systemd unit files to control the sapstartsrv process instead of the previous used SysV init script, we need to adapt the handling of sapstartsrv inside the resource agents to support both ways. (bsc#1189530, bsc#1189531) - The resource start and stop timeout is now configurable by increasing the timeout for the action 'start' and/or 'stop'. We will use 95% of this action timeouts to calculate the new resource start and stop timeout for the 'WaitforStarted' and 'WaitforStopped' functions. If the new, calculated timeout value is less than '3600', it will be set to '3600', so that we do not decrease this timeout by accident (bsc#1182545) - change promotion scoring during maintenance procedure to prevent that both sides have an equal promotion scoring after refresh which might result in a critical promotion of the secondary. (bsc#1174557) - update of man page SAPHanaSR.py.7 - correct the supported HANA version. (bsc#1182201) - if the $hdbState command fails to retrieve the current state of the System Replication, the resource agent now uses the system_replication/actual_mode attribute (if available) from the global.ini file as a fallback. This should prevent some confusing and misleading log messages during a takeover and solves the problem of a not working takeover back (after a successful first takeover) (bsc#1181765) - add dedicated logging of HANA_CALL problems. So it will be now possible to identify, if the called hana command or the needed su command throws the error and for further hints we log the stderr output. Additional it is possible to get regular log messages for the used commands, their return code and their stderr output by enabling the 'debug' mode of the resource agents. (bsc#1182774) Package aaa_base was updated: - fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to allow ICMP ping - added patches + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch - Port change from Thu Sep 30 08:51:55 UTC 2022 forword to current version which includes a rename of patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch to git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch as otherwise autopatch macro does not work anymore - Include all fixes and changes for systemwide inputrc to remove the 8 bit escape sequence which interfere with UTF-8 multi byte characters as well as support the vi mode of readline library. This is done with the patches * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch before the changed patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch rename it to git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch and also add the patches * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch Package augeas was updated: - add augeas-sysctl_parsing.patch (bsc#1197443) * backport original patch and rebase - support new chrony 4.1 options (jsc#SLE-17334) augeas-new_options_for_chrony.patch Package autofs was updated: - autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch Fix problem with quote handling (bsc#1181715) - 0005-autofs-5.1.4-fix-incorrect-locking-in-sss-lookup.patch Fix locking problem that causes deadlock when sss used. (bsc#1196485) - 0004-autofs-5.1.3-add-port-parameter-to-rpc_ping.patch Suppress portmap calls when port explicitly given (bsc#1195697) Package avahi was updated: - Downgrade python3-Twisted to a Recommends. It is not available on SLED or PackageHub, and it is only needed by avahi-bookmarks (bsc#1196282). - Add avahi-bookmarks-import-warning.patch: fix warning when twisted is not available. - Replace avahi-0.6.31-systemd-order.patch with avahi-add-resolv-conf-to-inotify.patch: re-read configuration when resolv.conf changes, per discussion on the bug (boo#1194561). - Have python3-avahi require python3-dbus-python, not the python 2 dbus-1-python package (bsc#1195614). - Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561). This can probably go away if/when gh#lathiat/avahi#118 is fixed. - Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should no longer need this given the above patch. - Move sftp-ssh and ssh services to the doc directory. They allow a host's up/down status to be easily discovered and should not be enabled by default (boo#1179060). Package bind was updated: - When using forwarders, bogus NS records supplied by, or via, those forwarders may be cached and used by named if it needs to recurse for any reason, causing it to obtain and pass on potentially incorrect answers. [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch] Package binutils was updated: - Add binutils-add-z16-name.diff so that the now official name z16 for arch14 is recognized. [bsc#1198237] Package cifs-utils was updated: - CVE-2022-27239: mount.cifs: fix length check for ip option parsing; (bsc#1197216) (bso#15025); CVE-2022-27239. * add 0016-CVE-2022-27239-mount.cifs-fix-length-check-for-ip-op.patch Package cloud-regionsrv-client was updated: - Update to version 10.0.3 (bsc#1198389) - Descend into the extension tree even if top level module is recommended - Cache license state for AHB support to detect type switch - Properly clean suse.com credentials when switching from SCC to update infrastructure - New log message to indicate base product registration success - Update to version 10.0.2 + Fix name of logfile in error message + Fix variable scoping to properly detect registration error + Cleanup any artifacts on registration failure + Fix latent bug with /etc/hosts population + Do not throw error when attemting to unregister a system that is not registered + Skip extension registration if the extension is recommended by the baseproduct as it gets automatically installed - Update to version 10.0.1 (bsc#1197113) + Provide status feedback on registration, success or failure + Log warning message if data provider is configured but no data can be retrieved - Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564) + The repo enablement timer cannot depend on guestregister.service - Update -addon-azure to 1.0.2 (bsc#1196305) + The is-registered() function expects a string of the update server FQDN. The regionsrv-enabler-azure passed an Object of type SMT. Fix the call in regionsrv-enabler-azure. - Update -plugin-azure to 2.0.0 (bsc#1196146) + Lower case the region hint to reduce issues with Azure region name case inconsistencies - Update to version 10.0.0 (bsc#1195414, bsc#1195564) + Refactor removes check_registration() function in utils implementation + Only start the registration service for PAYG images - addon-azure sub-package to version 1.0.1 Package cluster-glue was updated: - Requesting cluster-glue bugfix (bsc#1197681) * Add upstream patch: 0002-bugfix-for-comment-in-external-ec2.patch - (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494) IMDSv2 support in ec2 stonith agent * add upstream patch: 0001-Update-external-ec2-to-support-IMDSv2.patch Package containerd was updated: - Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441 - Remove upstreamed patch: - CVE-2022-23648.patch [ This patch was only released in SLES and Leap. ] - Add patch for CVE-2022-23648. bsc#1196441 + CVE-2022-23648.patch - Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814 bsc#1193273 CVE-2021-41190 - Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355 - Switch to Go 1.16.x compiler, in line with upstream. Package coreutils was updated: - coreutils-df-fuse-portal-dummy.patch: df: Add &quot;/fuse.portal&quot;/ as a dummy file system (used in flatpak implementations). (bsc#1189152) Package crash was updated: - Fix module loading (bsc#1190743 ltc#194414). + crash-mod-fix-module-object-file-lookup.patch Package crmsh was updated: - Update to version 4.3.1+20220505.cf4ab649: * Fix: hb_report: Read data in a save way, to avoid UnicodeDecodeError (bsc#1198180) * Dev: ocfs2: Fix running ocfs2 stage on cluster with diskless-sbd * Fix: ui_configure: Give a deprecated warning when using &quot;/ms&quot;/ subcommand (bsc#1194125) * Fix: xmlutil: Parse promotable clone correctly and also consider compatibility (bsc#1194125) * Fix: bootstrap: Change default transport type as udpu(unicast) (bsc#1132375) - Update to version 4.3.1+20220321.bd33abac: * Dev: Parametrize the log dir * medium: utils: update detect_cloud pattern for aws (bsc#1197351) * Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726) - Update to version 4.3.1+20220208.73603501: * Fix: sbd: not overwrite SYSCONFIG_SBD and sbd-disk-metadata if input 'n'(bsc#1194870) * Fix: crash_test: Adjust help output of 'crm cluster crash_test -h'(bsc#1194615) * Fix: bootstrap: Change log info when need to change user login shell (bsc#1194026) Package cups was updated: - cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691 cups: authentication bypass and code execution (bsc#1199474) - SUSE_bsc_1189517.patch is https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79 which belongs to https://github.com/apple/cups/issues/5288 that fixes bsc#1189517 &quot;/cups printservice takes much longer than before with a big number of printers&quot;/ see in particular https://github.com/apple/cups/issues/5288#issuecomment-921626381 - SUSE_bsc_1195115.patch is https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44 which belongs to https://github.com/apple/cups/issues/5538 that fixes bsc#1195115 &quot;/CUPS PreserveJobHistory doesn't work with seconds&quot;/ Package curl was updated: - Securiy fix: [bsc#1199223, CVE-2022-27781] * CERTINFO never-ending busy-loop * Add curl-CVE-2022-27781.patch - Securiy fix: [bsc#1199224, CVE-2022-27782] * TLS and SSH connection too eager reuse * Add curl-CVE-2022-27782.patch - Security fix: [bsc#1198766, CVE-2022-27776] * Auth/cookie leak on redirect * Add backported curl-CVE-2022-27776.patch - Security fix: [bsc#1198723, CVE-2022-27775] * Bad local IPv6 connection reuse * Add backported curl-CVE-2022-27775.patch - Security fix: [bsc#1198614, CVE-2022-22576] * OAUTH2 bearer bypass in connection re-use * Add backported curl-CVE-2022-22576.patch Package cyrus-sasl was updated: - CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036) o add upstream patch: 0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch Package cyrus-sasl-saslauthd was updated: - CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036) o add upstream patch: 0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch Package dhcp was updated: Package docker was updated: - Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191. bsc#1193930 bsc#1197284 * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch - Update to Docker 20.10.14-ce. See upstream changelog online at &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517 CVE-2022-24769 - Update to Docker 20.10.12-ce. See upstream changelog online at &lt;https://docs.docker.com/engine/release-notes/#201012&gt;. - Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the changelogs are currently only available online. - Update to Docker 20.10.11-ce. See upstream changelog online at &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814 bsc#1193273 CVE-2021-41190 - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch - Remove upstreamed patches: - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch - Update to Docker 20.10.9-ce. See upstream changelog online at &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355 CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434 CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121 - Update to Docker 20.10.6-ce. See upstream changelog online at &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768 - Update to Docker 20.10.5-ce. See upstream changelog online at &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947 Package dracut was updated: - Update to version 049.1+suse.234.g902e489c: * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967) - Update to version 049.1+suse.232.g2ccee559: * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508) * fix(dracut-functions.sh): ip route parsing (bsc#1195011) - Update to version 049.1+suse.228.g07676562: * fix(network): consistent use of &quot;/$gw&quot;/ for gateway (bsc#1192685) * fix(install): handle builtin modules (bsc#1194716) Package e2fsprogs was updated: - libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add sanity check to extent manipulation (bsc#1198446 CVE-2022-1304) - libss-add-newer-libreadline.so.7-to-dlopen-path.patch: libss: Add support for libreadline.so.7 for Leap 15.3 (bsc#1196939) Package expat was updated: - Security fixes: * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236 breaks biboumi, ClairMeta, jxmlease, libwbxml, openleadr-python, rnv, xmltodict - Added expat-CVE-2022-25236-relax-fix.patch - Security fixes: * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs - Added expat-CVE-2022-25236.patch * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before 2.4.5 does not check whether a UTF-8 character is valid in a certain context. - Added expat-CVE-2022-25235.patch * (CVE-2022-25313, bsc#1196168) Stack exhaustion in build_model() via uncontrolled recursion - Added expat-CVE-2022-25313.patch - The fix upstream introduced a regression that was later amended in 2.4.6 version + Added expat-CVE-2022-25313-fix-regression.patch * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString - Added expat-CVE-2022-25314.patch * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames - Added expat-CVE-2022-25315.patch - Security fix (CVE-2022-23852, bsc#1195054) * Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES * Add tests for CVE-2022-23852. * Added expat-CVE-2022-23852.patch - Security fix (CVE-2022-23990, bsc#1195217) * Fix unsigned integer overflow in function doProlog triggered by large content in element type declarations when there is an element declaration handler present (from a prior call to XML_SetElementDeclHandler). * Add expat-CVE-2022-23990.patch * Added expat-CVE-2022-22827.patch Package fence-agents was updated: - (bsc#1196350) fence_gce updates pull from Clusterlabs repo - Apply proposed upstream patch 0001-fence_gce-Add-timeouts-and-failure-options-458.patch Package filesystem was updated: Package fribidi was updated: - Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147 CVE-2022-25308). - Add fribidi-CVE-2022-25309.patch: protect against garbage in the CapRTL encoder (boo#1196148 CVE-2022-25309). - Add fribidi-CVE-2022-25310.patch: fix a SEGV in fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310). Package gcc11 was updated: - Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from packages provided by older GCC work. Add a requires from that package to the corresponding libstc++6 package to keep those at the same version. [bsc#1196107] - Add gcc11-D-dependence-fix.patch to fix memory corruption when creating dependences with the D language frontend. - Sync cross.spec.in to avoid trying to build cross-aarch64-gcc1-bootstrap on aarch64 which is unresolvable. - Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628] - Put libstdc++6-pp Requires on the shared library and drop to Recommends. Package glib2 was updated: - Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153). Package glibc was updated: - pthread-rwlock-trylock-stalls.patch: nptl: Fix pthread_rwlock_try*lock stalls (bsc#1195560, BZ #23844) - clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create for &quot;/unix&quot;/ (CVE-2022-23219, bsc#1194768, BZ #22542) - svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create (CVE-2022-23218, bsc#1194770, BZ #28768) - getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1 (CVE-2021-3999, bsc#1194640, BZ #28769) - pop-fail-stack.patch: Assertion failure in pop_fail_stack when executing a malformed regexp (CVE-2015-8985, bsc#1193625, BZ #21163) Package gnutls was updated: - Security fix: [bsc#1196167, CVE-2021-4209] * Null pointer dereference in MD_UPDATE * Add gnutls-CVE-2021-4209.patch Package google-guest-agent was updated: - Update to version 20220204.00 (bsc#1195437, bsc#1195438) * remove han from owners (#154) * Remove extra slash from metadata URL. (#151) - from version 20220104.00 * List IPv6 routes (#150) - from version 20211228.00 * add add or remove route integration test, utils (#147) - from version 20211214.00 * add malformed ssh key unit test (#142) - Update to version 20211116.00 (bsc#1193257, bsc#1193258) * dont duplicate logs (#146) * Add WantedBy network dependencies to google-guest-agent service (#136) * dont try dhcpv6 when not needed (#145) * Integration tests: instance setup (#143) * Integration test: test create and remove google user (#128) * handle comm errors in script runner (#140) * enforce script ordering (#138) * enable ipv6 on secondary interfaces (#133) - from version 20211103.00 * Integration tests: instance setup (#143) - from version 20211027.00 * Integration test: test create and remove google user (#128) - Update to version 20211019.00 * handle comm errors in script runner (#140) - from version 20211015.00 * enforce script ordering (#138) - from version 20211014.00 * enable ipv6 on secondary interfaces (#133) - from version 20211013.00 * dont open ssh tempfile exclusively (#137) - from version 20211011.00 * correct linux startup script order (#135) * Emit sshable attribute (#123) - from version 20210908.1 * restore line (#127) - from version 20210908.00 * New integ test (#124) - from version 20210901.00 * support enable-oslogin-sk key (#120) * match script logging to guest agent (#125) - from version 20210804.00 * Debug logging (#122) - Refresh patches for new version * dont_overwrite_ifcfg.patch - Build with go1.15 for reproducible build results (boo#1102408) - Update to version 20210707.00 * Use IP address for calling the metadata server. (#116) - from version 20210629.00 * use IP for MDS (#115) - Update to version 20210603.00 * systemd-notify in agentInit (#113) * dont check status (#112) - from version 20210524.00 * more granular service restarts (#111) - from version 20210414.00 * (no functional changes) Package google-guest-configs was updated: - Update to version 20220211.00 (bsc#1195437, bsc#1195438) * Set NVMe-PD IO timeout to 4294967295. (#32) - Add missing pkg-config dependency to BuildRequires for SLE-12 - Install modprobe configuration files into /etc again on SLE-15-SP2 and older since that's stil the default location on these distributions - Probe udev directory using the &quot;/udevdir&quot;/ pkg-config variable on SLE-15-SP2 and older since the variable got renamed to &quot;/udev_dir&quot;/ in later versions - Remove redundant pkgconfig(udev) from BuildRequires for SLE-12 - Update to version 20211116.00 (bsc#1193257, bsc#1193258) * GCE supports up to 24 NVMe local SSDs, but the regex in the PROGRAM field only looks for the last digit of the given string causing issues when there are &gt;= 10 local SSDs. Changed REGEX to get the last number of the string instead to support the up to 24 local SSDs. (#30) * chmod+x google_nvme_id on EL (#31) - Fix duplicate installation of google_optimize_local_ssd and google_set_multiqueue - Install google_nvme_id into /usr/lib/udev (bsc#1192652, bsc#1192653) - Update to version 20210916.00 * Revert &quot;/dont set IP in etc/hosts; remove rsyslog (#26)&quot;/ (#28) - from version 20210831.00 * restore rsyslog (#27) - from version 20210830.00 * Fix NVMe partition names (#25) - from version 20210824.00 * dont set IP in etc/hosts; remove rsyslog (#26) * update OWNERS - Use %_modprobedir for modprobe.d files (out of /etc) - Use %_sysctldir for sysctl.d files (out of /etc) - Update to version 20210702.00 * use grep for hostname check (#23) - from version 20210629.00 * address set_hostname vuln (#22) - from version 20210324.00 * dracut.conf wants spaces around values (#19) Package google-guest-oslogin was updated: - Update to version 20220205.00 (bsc#1195437, bsc#1195438) * Fix build for EL9. (#82) - from version 20211213.00 * Reauth error (#81) - Rename Source0 field to Source - Update URL in Source field to point to upstream tarball - Update to version 20211013.00 (bsc#1193257, bsc#1193258) * remove deprecated binary (#79) - from version 20211001.00 * no message if no groups (#78) - from version 20210907.00 * use sigaction for signals (#76) - from version 20210906.00 * include cstdlib for exit (#75) * catch SIGPIPE in authorized_keys (#73) - from version 20210805.00 * fix double free in ParseJsonToKey (#70) - from version 20210804.00 * fix packaging for authorized_keys_sk (#68) * add authorized_keys_sk (#66) - Add google_authorized_keys_sk to %files section - Remove google_oslogin_control from %files section Package google-osconfig-agent was updated: - Update to version 20220209.00 (bsc#1195437, bsc#1195438) * Update licences, remove deprecated centos-8 tests (#414) - Update to version 20220204.00 * Add DisableLocalLogging option (#413) - from version 20220107.00 * OS assignment example: Copy file from bucket - Update to version 20211117.00 (bsc#1193257, bsc#1193258) * Add retry logic for RegisterAgent (#404) - from version 20211111.01 * e2e_test: drop ubuntu 1604 image as its EOL (#403) - from version 20211111.00 * e2e_test: move to V1 api for OSPolicies (#397) - from version 20211102.00 * Fix context logging and fix label names (#400) - from version 20211028.00 * Add cloudops example for gcloud (#399) - Update to version 20211021.00 * Added patch report logging for Zypper. (#395) - from version 20211012.00 * Replace deprecated instance filters with the new filters (#394) - from version 20211006.00 * Added patch report log messages for Yum and Apt (#392) - from version 20210930.00 * Config: Add package info caching (#391) - from version 20210928.00 * Fixed the runWithPty function to set ctty to child's filedesc (#389) - from version 20210927.00 * e2e_tests: fix a test output mismatch (#390) - from version 20210924.00 * Fix some e2e test failures (#388) - from version 20210923.02 * Correctly check for folder existance in package upgrade (#387) - from version 20210923.01 * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386) - from version 20210923.00 * Deprecate old config directory in favor of new cache directory (#385) - from version 20210922.02 * Fix rpm/deb package formating for inventory reporting (#384) - from version 20210922.01 * Add centos stream rocky linux and available package tests (#383) - from version 20210922.00 * Add more info logs, actually cleanup unmanaged repos (#382) - from version 20210901.00 * Add E2E tests for Windows Application (#379) * Return lower-case package name (#377) * Update Terraform scripts for multi-project deployments tutorial. (#378) - from version 20210811.00 * Support Windows Application Inventory (#371) - from version 20210723.00 * Send basic inventory with RegisterAgent (#373) - from version 20210722.1 * e2e_tests: move to manually generated osconfig library (#372) - from version 20210722.00 * Create OWNERS file for examples directory (#368) - from version 20210719.00 * Update Zypper patch info parsing (#370) - Build with go1.15 for reproducible build results (boo#1102408) - Update to version 20210712.1 * Skip getting patch info when no patches are found. (#369) - from version 20210712.00 * Add Terraform scripts for multi-project deployments (#367) - from version 20210709.00 * Add examples/Terraform directory. (#366) - from version 20210707.00 * Fix bug in printing packages to update, return error for zypper patch (#365) - from version 20210629.00 * Add CloudOps examples for CentOS (#364) - Update to version 20210621.00 * chore: Fixing a comment. (#363) - from version 20210617.00 * Use exec.CommandContext so that canceling the context also kills any running processes (#362) - from version 20210608.1 * e2e_tests: point to official osconfig client library (#359) - from version 20210608.00 * e2e_tests: deflake tests (#358) - from version 20210607.00 * Fix build on some architectures (#357) - from version 20210603.00 * Create win-validation-powershell.yaml (#356) - from version 20210602.00 * Agent efficiency improvements/bugfixes/logging updates (#355) * e2e_tests: add tests for ExecResource output (#354) - from version 20210525.00 * Run fieldalignment on all structs (#353) - from version 20210521.00 * Config Task: add error message and ExecResource output recording (#350) * e2e_tests: remove Windows server 1909 and add server 20h2 (#352) * Added a method for logging structured data (#349) Package grep was updated: Package grub2 was updated: - Fix grub-install error when efi system partition is created as mdadm software raid1 device (bsc#1179981) (bsc#1195204) * 0001-install-fix-software-raid1-on-esp.patch - Fix error in grub-install when linux root device is on lvm thin volume (bsc#1192622) (bsc#1191974) * 0001-grub-install-bailout-root-device-probing.patch - Fix error not a btrfs filesystem on s390x (bsc#1187645) * 80_suse_btrfs_snapshot - Add support for simplefb (boo#1193532). * grub2-simplefb.patch Package gzip was updated: - Add support to zstd in zgrep, fixes bsc#1198922 * xz_lzma.patch -&gt; xz_lzma_zstd.patch - Fix escaping of malicious filenames (CVE-2022-1271 bsc#1198062) * bsc1198062.patch * bsc1198062-2.patch Package icewm-theme-branding was updated: - Add fix-font-configuration.patch: Fix font configuration after google-droid-fonts update (boo#1195328 bsc#1196336) Package java-1_8_0-ibm was updated: - Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126] * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365] [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349] [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340] [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277] [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296] [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294] [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291] [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248] [CVE-2022-21271] - Fix a javaws broken symlink [bsc#1195146] Package kernel-default was updated: - drm: drm_file struct kABI compatibility workaround (bsc#1197914). - commit dd24982 - drm: use the lookup lock in drm_is_current_master (bsc#1197914). - drm: protect drm_master pointers in drm_lease.c (bsc#1197914). - drm: serialize drm_file.master with a new spinlock (bsc#1197914). - drm: add a locked version of drm_is_current_master (bsc#1197914). - commit 82a498a - blacklist.conf: Add reverted/reverting swiotlb change (CVE-2022-0854 bsc#1196823 bsc#1197460) - commit 8d52c36 - Reinstate some of &quot;/swiotlb: rework &quot;/fix info leak with DMA_FROM_DEVICE&quot;/&quot;/ (CVE-2022-0854 bsc#1196823). - swiotlb: fix info leak with DMA_FROM_DEVICE (CVE-2022-0854 bsc#1196823). - commit ff554b5 - netfilter: nf_tables: initialize registers in nft_do_chain() (CVE-2022-1016 bsc#1197227). - commit 7111961 - Delete patches.suse/net-tipc-validate-domain-record-count-on-input.patch. This was the original work-in-progress patch for CVE-2022-0435 / bsc#1195254. Later, a proper backport of mainline commit 9aa422ad3266 (&quot;/tipc: improve size validations for received domain records&quot;/) was added as patches.suse/tipc-improve-size-validations-for-received-domain-re.patch but this patch was left in place. As it adds the check a bit later than upstream fix, it did not cause a conflict so nobody noticed the duplicity. - commit ef08708 - llc: fix netdevice reference leaks in llc_ui_bind() (git-fixes). - commit 2237578 - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path (CVE-2022-28389 bsc#1198033). - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path (CVE-2022-28388 bsc#1198032). - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path (CVE-2022-28390 bsc#1198031). - commit d6e6523 - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (CVE-2022-1048 bsc#1197331). - Refresh patches.kabi/ALSA-kABI-workaround-for-snd_pcm_runtime-changes.patch. - commit db7647d - net: sched: fix use-after-free in tc_new_tfilter() (CVE-2022-1055 bsc#1197702). - commit 4c7dc78 - Add CVE tags to patches.suse/ext4-fix-kernel-infoleak-via-ext4_extent_header.patch (bsc#1189562 bsc#1196761 CVE-2022-0850). - commit f3cb08f - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() (bsc#1179639 ltc#189002 git-fixes). - commit 73583c9 - esp: Fix possible buffer overflow in ESP transformation (bsc#1197131 CVE-2022-0886 CVE-2022-27666). - commit 39a5891 - cifs: use the correct max-length for dentry_path_raw() (bsc1196196). - commit 10cddb2 - quota: check block number when reading the block in quota file (bsc#1197366 CVE-2021-45868). - commit a7d4915 - netfilter: conntrack: don't refresh sctp entries in closed state (bsc#1197389). - commit c3afd15 - ALSA: kABI workaround for snd_pcm_runtime changes (CVE-2022-1048 bsc#1197331). - commit 12628f8 - ALSA: pcm: Fix races among concurrent prealloc proc writes (CVE-2022-1048 bsc#1197331). - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (CVE-2022-1048 bsc#1197331). - ALSA: pcm: Fix races among concurrent read/write and buffer changes (CVE-2022-1048 bsc#1197331). - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (CVE-2022-1048 bsc#1197331). - commit aee063f - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (bsc#1196018). - commit 1580ab2 - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (bsc#1196018). - commit 1cdc779 - sr9700: sanity check for packet length (bsc#1196836 CVE-2022-26966). - commit edaafdd - rpm: SC2006: Use $(...) notation instead of legacy backticked `...`. - commit f0d0e90 - aio: fix use-after-free due to missing POLLFREE handling (CVE-2021-39698 bsc#1196956). - aio: keep poll requests on waitqueue until completed (CVE-2021-39698 bsc#1196956). - signalfd: use wake_up_pollfree() (CVE-2021-39698 bsc#1196956). - binder: use wake_up_pollfree() (CVE-2021-39698 bsc#1196956). - wait: add wake_up_pollfree() (CVE-2021-39698 bsc#1196956). - commit b026506 - rpm/kernel-source.spec.in: call fdupes per subpackage It is a waste of time to do a global fdupes when we have subpackages. - commit 1da8439 - af_unix: fix garbage collect vs MSG_PEEK (CVE-2021-0920 bsc#1193731). - commit 7040fdd - Refresh patches.suse/xfrm-fix-mtu-regression.patch. - commit 8d867d6 - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (bsc#1196488, XSA-396, CVE-2022-23042). - commit fe0a923 - xen/gnttab: fix gnttab_end_foreign_access() without page specified (bsc#1196488, XSA-396, CVE-2022-23041). - commit 58c801b - xen/pvcalls: use alloc/free_pages_exact() (bsc#1196488, XSA-396, CVE-2022-23041). - commit afb2dba - xen/9p: use alloc/free_pages_exact() (bsc#1196488, XSA-396, CVE-2022-23041). - commit cee63b9 - xen/usb: don't use gnttab_end_foreign_access() in xenhcd_gnttab_done() (bsc#1196488, XSA-396). - commit b1d434d - xen/gntalloc: don't use gnttab_query_foreign_access() (bsc#1196488, XSA-396, CVE-2022-23039). - commit a4ec4aa - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (bsc#1196488, XSA-396, CVE-2022-23038). - commit fd9cb30 - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1196488, XSA-396, CVE-2022-23037). - commit 4e33999 - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1196488, XSA-396, CVE-2022-23036). - commit 4334af7 - xen/grant-table: add gnttab_try_end_foreign_access() (bsc#1196488, XSA-396, CVE-2022-23036, CVE-2022-23038). - commit 19b769a - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (bsc#1196488, XSA-396, CVE-2022-23040). - commit 5aacf1f - rpm/arch-symbols,guards,*driver: Replace Novell with SUSE. - commit 174a64f - usb: host: xen-hcd: add missing unlock in error path (git-fixes). - commit daa9ea7 - Refresh patches.suse/0002-usb-Introduce-Xen-pvUSB-frontend-xen-hcd.patch. - commit d9066f6 - Refresh patches.suse/0001-usb-Add-Xen-pvUSB-protocol-description.patch. - commit 5c41eb3 - rpm/kernel-docs.spec.in: use %%license for license declarations Limited to SLE15+ to avoid compatibility nightmares. - commit 73d560e - rpm/*.spec.in: Use https:// urls - commit 77b5f8e - Hand over the maintainership to SLE15-SP3 maintainers - commit 0c92742 - SUNRPC: avoid race between mod_timer() and del_timer_sync() (bnc#1195403). - commit fffe0fc - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (CVE-2022-26490 bsc#1196830). - commit fd10ace - Update patch reference for iov security fix (CVE-2022-0847 bsc#1196584) - commit 1dafeb6 - net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468). - commit 8c8ae13 - kernel-binary.spec: Also exclude the kernel signing key from devel package. There is a check in OBS that fails when it is included. Also the key is not reproducible. Fixes: bb988d4625a3 (&quot;/kernel-binary: Do not include sourcedir in certificate path.&quot;/) - commit 68fa069 - rpm/check-for-config-changes: Ignore PAHOLE_VERSION. - commit 88ba5ec - lib/iov_iter: initialize &quot;/flags&quot;/ in new pipe_buffer (bsc#1196584). - commit 4f3bbf5 - x86/speculation: Use generic retpoline by default on AMD (bsc#1191580 CVE-2022-0001 CVE-2022-0002). - commit bed48b1 - gve: Recording rx queue before sending to napi (jsc#SLE-23652). - gve: fix the wrong AdminQ buffer queue index check (jsc#SLE-23652). - gve: Fix GFP flags when allocing pages (jsc#SLE-23652). - gve: Add consumed counts to ethtool stats (jsc#SLE-23652). - gve: Implement suspend/resume/shutdown (jsc#SLE-23652). - gve: Add optional metadata descriptor type GVE_TXD_MTD (jsc#SLE-23652). - gve: remove memory barrier around seqno (jsc#SLE-23652). - gve: Update gve_free_queue_page_list signature (jsc#SLE-23652). - gve: Move the irq db indexes out of the ntfy block struct (jsc#SLE-23652). - gve: Correct order of processing device options (jsc#SLE-23652). - gve: fix for null pointer dereference (jsc#SLE-23652). - gve: fix unmatched u64_stats_update_end() (jsc#SLE-23652). - gve: Add a jumbo-frame device option (jsc#SLE-23652). - gve: Implement packet continuation for RX (jsc#SLE-23652). - gve: Add RX context (jsc#SLE-23652). - gve: Use kvcalloc() instead of kvzalloc() (jsc#SLE-23652). - commit e1a9cfc - udf: Restore i_lenAlloc when inode expansion fails (bsc#1196079 CVE-2022-0617). - commit a1deb2a - udf: Fix NULL ptr deref when converting from inline format (bsc#1196079 CVE-2022-0617). - commit 43cd4ed - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (bsc#1191580 CVE-2022-0001 CVE-2022-0002). - commit d42fa20 - Documentation/hw-vuln: Update spectre doc (bsc#1191580 CVE-2022-0001 CVE-2022-0002). - commit a48cfcc - x86/speculation: Add eIBRS + Retpoline options (bsc#1191580 CVE-2022-0001 CVE-2022-0002). - commit 1a20a7e - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (bsc#1191580 CVE-2022-0001 CVE-2022-0002). - commit 80f47a3 - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd (bsc#1191580 CVE-2022-0001 CVE-2022-0002). - commit 1f9dd65 - usb: gadget: rndis: check size of RNDIS_MSG_SET command (CVE-2022-25375 bsc#1196235). - commit 4e7d746 - Update patch reference for vfs fix (CVE-2022-0644 bsc#1196155) - commit 900b4f0 - USB: gadget: validate interface OS descriptor requests (CVE-2022-25258 bsc#1196095). - commit 4c69367 - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (bsc#1189126). - commit 6aa037a - powerpc/pseries/ddw: Revert &quot;/Extend upper limit for huge DMA window for persistent memory&quot;/ (bsc#1195995 ltc#196394). - commit 7be7563 - f2fs: fix to do sanity check on inode type during garbage collection (CVE-2021-44879 bsc#1195987). - commit 139271b - tipc: improve size validations for received domain records (bsc#1195254, CVE-2022-0435). - commit 48911da - yam: fix a memory leak in yam_siocdevprivate() (CVE-2022-24959 bsc#1195897). - commit 60220af - usb: gadget: clear related members when goto fail (CVE-2022-24958 bsc#1195905). - usb: gadget: don't release an existing dev-&gt;buf (CVE-2022-24958 bsc#1195905). - commit 96dda76 - Update patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch (bsc#1194516 CVE-2022-0487). - commit f68f189 - nfsd: don't admin-revoke NSv4.0 state ids (bsc#1192483). - nfsd: allow delegation state ids to be revoked and then freed (bsc#1192483). - nfsd: allow lock state ids to be revoked and then freed (bsc#1192483). - nfsd: allow open state ids to be revoked and then freed (bsc#1192483). - nfsd: prepare for supporting admin-revocation of state (bsc#1192483). - commit 4fab2c0 - kernel-binary: Do not include sourcedir in certificate path. The certs macro runs before build directory is set up so it creates the aggregate of supplied certificates in the source directory. Using this file directly as the certificate in kernel config works but embeds the source directory path in the kernel config. To avoid this symlink the certificate to the build directory and use relative path to refer to it. Also fabricate a certificate in the same location in build directory when none is provided. - commit bb988d4 - constraints: Also adjust disk requirement for x86 and s390. - commit 9719db0 - constraints: Increase disk space for aarch64 - commit 09c2882 - KVM: s390: Return error on SIDA memop on normal guest (bsc#1195516 CVE-2022-0516). - commit d46602b - NFSv4: Handle case where the lookup of a directory fails (bsc#1195612 CVE-2022-24448). - commit 1023a28 - btrfs: check for missing device in btrfs_trim_fs (bsc#1195701). - commit be8e591 - cgroup-v1: Require capabilities to set release_agent (bsc#1195543 CVE-2022-0492). - commit 413d689 - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (bsc#1193864 CVE-2021-39657). - commit 5ec67f9 - scsi: target: iscsi: Fix cmd abort fabric stop race (bsc#1195286). - commit 79c1016 - Update kabi files. - update from February 2022 maintenance update submission (commit 49453fa0b26b) - commit 10d28a1 - kernel-obs-build: include 9p (boo#1195353) To be able to share files between host and the qemu vm of the build script, the 9p and 9p_virtio kernel modules need to be included in the initrd of kernel-obs-build. - commit 0cfe67a - net: tipc: validate domain record count on input (bsc#1195254). - commit 5e4e31e - series.conf: sort Fix patch ordering in sorted section. - commit f4bbbbf - fix patches metadata - fix Patch-mainline, mark partial backport, add a note to commit message - patches.suse/net-xdp-Introduce-xdp_init_buff-utility-routine.patch - patches.suse/net-xdp-Introduce-xdp_prepare_buff-utility-routine.patch - commit c8555c7 - Update kabi files. - update from out of order January 2022 maintenance update (commit 712a8e6dffc3) - commit d4e500b - update - commit 8000467 - phonet: refcount leak in pep_sock_accep (bsc#1193867, CVE-2021-45095). - commit 98c27cb - xfrm: fix MTU regression (bsc#1185377, bsc#1194048). - Delete patches.suse/xfrm-xfrm_state_mtu-should-return-at-least-1280-for-.patch. which caused a regression (bsc#1194048). - fix patches.kabi/revert-xfrm-xfrm_state_mtu-should-return-at-least-1280.patch fixes the resulting KABI change - Replace with an alternative fix for bsc#1185377 - commit ccdfbb9 - net: tipc: validate domain record count on input (bsc#1195254). - commit 96de11b - SLE15-SP2 went to LTSS, hand over to L3 - commit 1e60178 - drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942 bsc#1195065). - commit b93c2a4 - nvme: add 'iopolicy' module parameter (bsc#1177599 bsc#1193096). - commit 92fcdfb - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() (bsc#1194227). - commit bf95985 - net/packet: rx_owner_map depends on pg_vec (bsc#1195184 CVE-2021-22600). - commit ef975a8 - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (bsc#1193864 CVE-2021-39657). - commit a954734 - Update patches.suse/usb-gadget-configfs-Fix-use-after-free-issue-with-ud.patch (bsc#1193861 CVE-2021-39648). updated references for a CVE that became known after the fix had been applied for other reasons - commit 2372cca - net: mana: Add RX fencing (bsc#1193506). - commit 86ca026 - net: mana: Add XDP support (bsc#1193506). - commit 8a8d94e - hv_netvsc: Set needed_headroom according to VF (bsc#1193506). - commit 2ce60c3 - net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506). - commit f1f2607 - net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506). - commit d81f88a - btrfs: tree-checker: check for BTRFS_BLOCK_FLAG_FULL_BACKREF being set improperly (bsc#1195009). - commit 472ff50 - btrfs: tree-checker: annotate all error branches as unlikely (bsc#1195009). - commit ac668ff - btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check (bsc#1195009). - commit 38bf9aa - kernel-binary.spec.in: Move 20-kernel-default-extra.conf to the correctr directory (bsc#1195051). - commit c80b5de - drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330 bsc#1194880). - commit 34a8919 - net: allow retransmitting a TCP packet if original is still in queue (bsc#1188605 bsc#1187428). - commit 07dea3c - kernel-binary.spec: Do not use the default certificate path (bsc#1194943). Using the the default path is broken since Linux 5.17 - commit 68b36f0 - fix rpm build warning tumbleweed rpm is adding these warnings to the log: It's not recommended to have unversioned Obsoletes: Obsoletes: microcode_ctl - commit 3ba8941 - build initrd without systemd This reduces the size of the initrd by over 25%, which improves startup time of the virtual machine by 0.5-0.6s on very fast machines, more on slower ones. - commit ef4c569 - Revert &quot;/net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405)&quot;/ This reverts commit 3aa0c01fad38360cc9cd840d49bdfdc565e2e718. With the backport of the upstream fix for bsc#1183405 race, this workaround is no longer needed. - commit e063337 - net: sched: add barrier to ensure correct ordering for lockless qdisc (bsc#1183405). - net: sched: avoid unnecessary seqcount operation for lockless qdisc (bsc#1183405). - net: sched: fix tx action reschedule issue with stopped queue (bsc#1183405). - net: sched: fix tx action rescheduling issue during deactivation (bsc#1183405). - net: sched: fix packet stuck problem for lockless qdisc (bsc#1183405). - net: sched: replaced invalid qdisc tree flush helper in qdisc_replace (bsc#1183405). - net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc (bsc#1183405). - net_sched: get rid of unnecessary dev_qdisc_reset() (bsc#1183405). - net_sched: avoid resetting active qdisc for multiple times (bsc#1183405). - net_sched: use qdisc_reset() in qdisc_destroy() (bsc#1183405). - commit abc4d94 Package libinput was updated: - Add libinput-CVE_2022-1215.patch: strip the device name of format directives (boo#1198111 CVE-2022-1215). Package libpsl was updated: - fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4- added patches https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56 + libpsl-fix-test-data.patch Package libqb was updated: - IPC: server: avoid temporary channel priority loss, up to deadlock-worth (gh#ClusterLabs/libqb#352, rh#1718773, bsc#1188212) * bsc#1188212-0001-IPC-server-avoid-temporary-channel-priority-loss-up-.patch Package libqt5-qtbase was updated: - Update patch after it was merged to dev upstream and fix another place missed in the first version (boo#1195386, CVE-2022-23853, boo#1196501, CVE-2022-25255): * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch - Add patch to avoid unintentionally using binaries from CWD (boo#1195386, CVE-2022-23853, boo#1196501, CVE-2022-25255): * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch Package libsolv was updated: - reworked choice rule generation to cover more usecases- support SOLVABLE_PREREQ_IGNOREINST in the ordering code [bsc#1196514] - support parsing of Debian's Multi-Arch indicator - bump version to 0.7.22 - fix segfault on conflict resolution when using bindings - fix split provides not working if the update includes a forbidden vendor change - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY - support zstd compressed control files in debian packages - add an ifdef allowing to rename Solvable dependency members (&quot;/requires&quot;/ is a keyword in C++20) - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck - support solv files with an idarray block - allow accessing the toolversion at runtime - bump version to 0.7.21 Package libtirpc was updated: - fix memory leak in client protocol version 2 code (bsc#1193805) - update: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch Package libxml2 was updated: - Security fix: [bsc#1199132, CVE-2022-29824] * Integer overflow leading to out-of-bounds write in buf.c (xmlBuf*) and tree.c (xmlBuffer*) * Add libxml2-CVE-2022-29824.patch - Security fix: [bsc#1196490, CVE-2022-23308] * Use-after-free of ID and IDREF attributes. * Add libxml2-CVE-2022-23308.patch * Add libxml2-CVE-2021-3541.patch Package libzypp was updated: - ZConfig: Update solver settings if target changes (bsc#1196368)- version 17.30.0 (22) - Fix possible hang in singletrans mode (bsc#1197134) - Do 2 retries if mount is still busy. - version 17.29.7 (22) - Fix package signature check (bsc#1184501) Pay attention that header and payload are secured by a valid signature and report more detailed which signature is missing. - Retry umount if device is busy (bsc#1196061, closes #381) A previously released ISO image may need a bit more time to release it's loop device. So we wait a bit and retry. - Fix serializing/deserializing type mismatch in zypp-rpm protocol (bsc#1196925) - Fix handling of ISO media in releaseAll (bsc#1196061) - Hint on common ptf resolver conflicts (bsc#1194848) - version 17.29.6 (22) - Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848) - version 17.29.5 (22) - Fix handling of redirected command in-/output (bsc#1195326) This fixes delays at the end of zypper operations, where zypper unintentionally waits for appdata plugin scripts to complete. - version 17.29.4 (22) - Public header files on older distros must use c++11 (bsc#1194597) - Fix exception handling when reading or writing credentials (bsc#1194898) - version 17.29.3 (22) - Fix Legacy include (bsc#1194597) - version 17.29.2 (22) - Fix broken install path for parser compat headers (fixes #372, bsc#1194597) - RepoManager: remember exec errors in exception history (bsc#1193007) - version 17.29.1 (22) - Use the default zypp.conf settings if no zypp.conf exists (bsc#1193488) - Fix wrong encoding of iso: URL components (bsc#954813) - Handle armv8l as armv7hl compatible userland. - Introduce zypp-curl a sublibrary for CURL related code. - zypp-rpm: Increase rpm loglevel if ZYPP_RPM_DEBUG is set. - Save all signatures associated with a public key in its PublicKeyData. - version 17.29.0 (22) Package lifecycle-data-sle-module-live-patching was updated: - Added data for 4_12_14-150_83, 4_12_14-150_86, 4_12_14-197_105, 4_12_14-197_108, 5_3_18-150300_59_46, 5_3_18-150300_59_49, 5_3_18-150300_59_54, 5_3_18-24_102, 5_3_18-24_107. (bsc#1020320) - Added data for 5_3_18-150300_59_43, 5_3_18-24_99, 5_3_18-59_40. (bsc#1020320) Package lvm2 was updated: - udev: create symlinks and watch even in suspended state (bsc#1195231) + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch Package mlocate was updated: - require apparmor-abstractions, because apparmor.service fails with Could not open 'tunables/global' error otherwise (bsc#1195144) Package mozilla-nss was updated: - Mozilla NSS 3.68.3 (bsc#1197903) This release improves the stability of NSS when used in a multi-threaded environment. In particular, it fixes memory safety violations that can occur when PKCS#11 tokens are removed while in use (CVE-2022-1097). We presume that with enough effort these memory safety violations are exploitable. * Remove token member from NSSSlot struct (bmo#1756271). * Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots (bmo#1755555). * Check return value of PK11Slot_GetNSSToken (bmo#1370866). Package net-snmp was updated: - Decouple snmp-mibs from net-snmp version to allow major version upgrade (bsc#1196955). Package nfs-utils was updated: - Add 0023-cache.c-removed-a-couple-warning.patch Fix compilation with new glibc (SLE15-SP4) (bsc#1197788) - Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch Ensure &quot;/sloppy&quot;/ is added correctly for newer kernels. Particularly required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels. (boo#1197297) - Add 0020-mountd-Initialize-logging-early.patch If an error or warning message is produced before closeall() is called, mountd gets confused and doesn't work. (bsc#1194661) Package ocfs2-tools was updated: - fsck.ocfs2: do not try locking after replaying journals if -F is given (bsc#1196705) + fsck.ocfs2-do-not-try-locking-after-replaying-journa.patch Package openldap2 was updated: - bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql * 0242-ITS-9815-slapd-sql-escape-filter-values.patch - bsc#1191157 - Correct version specification in ppolicy to allow submission to SP3 for TLS1.3 - bsc#1191157 - allow specification of max/min TLS version with TLS1.3 * 0239-ITS-9422-Update-for-TLS-v1.3.patch * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch * 0241-TLS-set-protocol-version.patch - bsc#1197004 - libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol resolution failures. openldap2 and libldap now are locked to their related release versions. - jsc#PM-3288 - restore CLDAP functionality in CLI tools - Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression reporting is bsc#1197004 causing SSSD to have faults. - jsc#PM-3288 - restore CLDAP functionality in CLI tools Package openssh was updated: - Add openssh-do-not-send-empty-message.patch: Prevent empty messages from being sent. This avoids a superfluous new line (bsc#1192439). - Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh connections update their dbus environment (bsc#1179465). - Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch (bsc#1190975, CVE-2021-41617), backported from upstream by Ali Abdallah. Package openssl-1_1 was updated: - Security Fix: [bsc#1196877, CVE-2022-0778] * Infinite loop in BN_mod_sqrt() reachable when parsing certificates * Add openssl-CVE-2022-0778.patch openssl-CVE-2022-0778-tests.patch - Fix PAC pointer authentication in ARM [bsc#1195856] * PAC pointer authentication signs the return address against the value of the stack pointer, to prevent stack overrun exploits from corrupting the control flow. The Poly1305 armv8 code got this wrong, resulting in crashes on PAC capable hardware. * Add openssl-1_1-ARM-PAC.patch - Pull libopenssl-1_1 when updating openssl-1_1 with the same version. [bsc#1195792] - FIPS: Fix function and reason error codes [bsc#1182959] * Add openssl-1_1-FIPS-fix-error-reason-codes.patch - Enable zlib compression support [bsc#1195149] * Add openssl-fix-BIO_f_zlib.patch to fix BIO_f_zlib: Properly handle BIO_CTRL_PENDING and BIO_CTRL_WPENDING calls. Package pacemaker was updated: - attrd: check election status upon loss of a voter to prevent unexpected pending (bsc#1191676) * bsc#1191676-0001-Fix-attrd-check-election-status-upon-loss-of-a-voter.patch - stonith-ng's function cannot be blocked with CIB updates forever (bsc#1188212) Package pam was updated: - Do not include obsolete libselinux header files flask.h and av_permissions.h. [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch] - Between allocating the variable &quot;/ai&quot;/ and free'ing them, there are two &quot;/return NO&quot;/ were we don't free this variable. This patch inserts freaddrinfo() calls before the &quot;/return NO;&quot;/s. [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch] - Define _pam_vendordir as &quot;//%{_sysconfdir}/pam.d&quot;/ The variable is needed by systemd and others. [bsc#1196093, macros.pam] Package pcre2 was updated: - Added pcre2-10.31-bsc1199232-unicode-property-matching.patch * bsc#1199232 / CVE-2022-1586 * Fixes unicode property matching issue Package perl was updated: - Stabilize Socket::VERSION comparisons [bnc#1193489] new patch: perl-Stabilize-Socket-VERSION-comparisons.patch Package perl-XML-LibXML was updated: - (bsc#1197798) FTBFS: compile against latest version available of libxml in SP4 so perl-XML-LibXSLT compiles cleanly. Package polkit was updated: - CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542) added CVE-2021-4115.patch Package procps was updated: - Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is ignore SIGURG Package protobuf was updated: - Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570, bsc#1195258 * Add protobuf-CVE-2021-22570.patch Package psmisc was updated: * Add a fallback if the system call name_to_handle_at() is not supported by the used file system. - Add patch psmisc-22.21-semaphores.patch * Replace the synchronizing over pipes of the sub process for the stat(2) system call with mutex and conditions from pthreads(7) (bsc#1194172) - Add patch psmisc-22.21-statx.patch * Use statx(2) or SYS_statx system call to replace the stat(2) system call and avoid the sub process at all (bsc#1194172) - Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch * Determine the namespace of a process only once to speed up the parsing of fdinfo (bsc#1194172). - Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch Package python-base was updated: - Update bundled pip wheel to the latest SLE version patched against bsc#1186819 (CVE-2021-3572). - Recover again proper value of %python2_package_prefix (bsc#1175619). - BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation. - Older SLE versions should use old OpenSSL. - Add CVE-2022-0391-urllib_parse-newline-parsing.patch (bsc#1195396, CVE-2022-0391, bpo#43882) sanitizing URLs containing ASCII newline and tabs in urlparse. - Add CVE-2021-4189-ftplib-trust-PASV-resp.patch (bsc#1194146, bpo#43285, CVE-2021-4189, gh#python/cpython#24838) make ftplib not trust the PASV response. - build against openssl 1.1.x (incompatible with openssl 3.0x) for now. - on sle12, python2 modules will still be called python-xxxx until EOL, for newer SLE versions they will be python2-xxxx - BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation. Package python-lxml was updated: - With the new update to 4.7.1, the old Bugzilla entries are also fixed: - bsc#1118088 (related to CVE-2018-19787) - bsc#1184177 (related to CVE-2021-28957) - Update to 4.7.1 (officially released 2021-12-13) Features added - Chunked Unicode string parsing via parser.feed() now encodes the input data to the native UTF-8 encoding directly, instead of going through Py_UNICODE / wchar_t encoding first, which previously required duplicate recoding in most cases. Bugs fixed - The standard namespace prefixes were mishandled during &quot;/C14N2&quot;/ serialisation on Python 3. See https://mail.python.org/archives/list/lxml@python.org/thread/ 6ZFBHFOVHOS5GFDOAMPCT6HM5HZPWQ4Q/ - lxml.objectify previously accepted non-XML numbers with underscores (like &quot;/1_000&quot;/) as integers or float values in Python 3.6 and later. It now adheres to the number format of the XML spec again. - LP#1939031: Static wheels of lxml now contain the header files of zlib and libiconv (in addition to the already provided headers of libxml2/libxslt/libexslt). Other changes - Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows). - Update to 4.7.0 (2021-12-13) - Release retracted due to missing files in lxml/includes/. - UPdate to 4.6.5 (2021-12-12) Bugs fixed - A vulnerability (GHSL-2021-1038) in the HTML cleaner - allowed sneaking script content through SVG images - (bnc#1193752, CVE-2021-43818). - A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed - sneaking script content through CSS imports and other crafted - constructs (CVE-2021-43818). - Update 4.6.4 (2021-11-01) Features added - GH#317: A new property system_url was added to DTD entities. - Patch by Thirdegree. - GH#314: The STATIC_* variables in setup.py can now be passed - via env vars. - Patch by Isaac Jurado. - Update 4.6.3 (2021-03-21) Bugs fixed - A vulnerability (CVE-2021-28957) was discovered in the HTML - Cleaner by Kevin Chung, which allowed JavaScript to pass through. - The cleaner now removes the HTML5 formaction attribute. - Update 4.6.2 (2020-11-26) Bugs fixed - A vulnerability (bnc#1179534, CVE-2020-27783) was discovered in the HTML Cleaner - by Yaniv Nizry, which allowed JavaScript to pass through. The cleaner - now removes more sneaky &quot;/style&quot;/ content. - Update 4.6.1 (2020-10-18) Bugs fixed - A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry, - which allowed JavaScript to pass through. The cleaner now removes - more sneaky &quot;/style&quot;/ content. - Update 4.6.0 (2020-10-17) Features added - GH#310: lxml.html.InputGetter supports __len__() to count the number - of input fields. Patch by Aidan Woolley. - lxml.html.InputGetter has a new .items() method to ease processing - all input fields. - lxml.html.InputGetter.keys() now returns the field names in document - order. - GH-309: The API documentation is now generated using sphinx-apidoc. - Patch by Chris Mayo. Bugs fixed - LP#1869455: C14N 2.0 serialisation failed for unprefixed attributes - when a default namespace was defined. - TreeBuilder.close() raised AssertionError in some error cases where - it should have raised XMLSyntaxError. It now raises a combined - exception to keep up backwards compatibility, while switching to - XMLSyntaxError as an interface. - Update 4.5.2 (2020-07-09) Bugs fixed - Cleaner() now validates that only known configuration options - can be set. - LP#1882606: Cleaner.clean_html() discarded comments and PIs - regardless of the corresponding configuration option, if - remove_unknown_tags was set. - LP#1880251: Instead of globally overwriting the document loader - in libxml2, lxml now sets it per parser run, which improves the - interoperability with other users of libxml2 such as libxmlsec. - LP#1881960: Fix build in CPython 3.10 by using Cython 0.29.21. - The setup options &quot;/--with-xml2-config&quot;/ and &quot;/--with-xslt-config&quot;/ - were accidentally renamed to &quot;/--xml2-config&quot;/ and &quot;/--xslt-config&quot;/ - in 4.5.1 and are now available again. - Update 4.5.1 (2020-05-19) Bugs fixed - LP#1570388: Fix failures when serialising documents larger than - 2GB in some cases. - LP#1865141, GH#298: QName values were not accepted by the - el.iter() method. Patch by xmo-odoo. - LP#1863413, GH#297: The build failed to detect libraries on Linux - that are only configured via pkg-config. Patch by Hugh McMaster. - Update 4.5.0 (2020-01-29) Features added - A new function indent() was added to insert tail whitespace for - pretty-printing an XML tree. Bugs fixed - LP#1857794: Tail text of nodes that get removed from a document using item deletion disappeared silently instead of sticking with the node that was removed. Other changes - MacOS builds are 64-bit-only by default. Set CFLAGS and LDFLAGS explicitly to override it. - Linux/MacOS Binary wheels now use libxml2 2.9.10 and libxslt 1.1.34. - LP#1840234: The package version number is now available as lxml.__version__. - Update 4.4.3 (2020-01-28) Bugs fixed - LP#1844674: itertext() was missing tail text of comments and PIs since 4.4.0. Package release-notes-sles-for-sap was updated: - 15.2.20220202 (tracked in bsc#933411)- Added Trento disclaimer (jsc#SLE-22809) - Updated support length to 3.5 years (bsc#1188003) Package resource-agents was updated: - RA reports &quot;/string indices must be integers&quot;/ to stderr after &quot;/WARNING: Failed to reach the server: Gone&quot;/ (bsc#1194502) Add upstream patch: 0001-azure-events-report-error-if-jsondata-not-received.patch Package rsyslog was updated: - (CVE-2022-24903) fix potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061) * add CVE-2022-24903.patch - add service dependencies for remote logging (bsc#1194669) - update config example in remote.conf to match upstream documentation Package ruby2 was updated: - Update suse.patch: - backport fix for CVE-2022-28739: ruby: Buffer overrun in String-to-Float conversion (boo#1198441) - back port date 2.0.3 CVE-2021-41817 (boo#1193035) - merge the previous bug fixes into suse.patch - CVE-2021-32066.patch - CVE-2021-31810.patch - CVE-2021-31799.patch - Add Requires to make and gcc to ruby-devel to make the default extconf.rb work Package rubygem-puma was updated: - updated to version 4.3.11 * fix bsc#1196222, CVE-2022-23634 rubygem-puma: puma would not always call 'close' on the response body * fix bsc#1191681, CVE-2021-41136 * fix bsc#1188527, CVE-2021-29509 Package samba was updated: - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1134046); - CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bsc#1194859); (bso#14914). Package sapconf was updated: - version update from 5.0.3 to 5.0.4- change block device handling to handle multipath devices correctly. Only the DM multipath devices (mpath) will be used for the settings, but not its paths. (bsc#1188743) - fixed wrong comparison used for setting force_latency (bsc#1185702) - SAP Note 1771258 v6 updates nofile values to 1048576 (bsc#1192841) Package saptune was updated: - update package version of saptune to 3.0.2- avoid excluding LVM slaves when getting valid block devices (bsc#1194299) - fix 'not compliant' state for energy_perf_bias on Power systems and suppress misleading error message regarding missing 'mokutil' (bsc#1193435) - fix wrong behaviour of 'saptune revert all', if the saptune service was stopped between the two commands 'apply' and 'revert all' - 'saptune service enablestart|disablestop' now always perform both actions and does no longer stop working, if the service is already started|stopped. (bsc#1193241) - restrict the sys section of the AWS note 1656250 to the availability of a nvme block device to support AWS x1e instances too. sys section definition of Note 1656250 changed. (bsc#1192029) - abandon the dependency to 'mokutil' by relying on sysfs to detect a secure boot environment. Related to bsc#1193435 - support /etc/fstab entries with 4 instead of 6 fields as these are valid entries. Change error handling from 'panic' to error log messages. (bsc#1193580) - enhance man page 'saptune.8'. Add entry 'configured Note' and some more descriptions of the entries from 'saptune service status' (bsc#1192697) - as the Power systems (hardware architecture 'ppc64le') does not support files in '/sys/class/dmi' (this directory is not available on the 'ppc64le' hardware architecture) some of our section 'tags' will not work. Add some additional log messages to identify the cause and add a hint to the man page. - fix block device settings (e.g. NRREQ) for multipath devices (bsc#1193576) - 'saptune verify' will now report a non existing sysctl or sys parameter as 'not available on the system' (footnote) and this parameter will not affect the compliance state. But a warning is displayed to raise attention to may be typos in the parameter name. - 'saptune status' now reports the 'real' unit state, no mapping of not running (inactive) service to simply 'stopped' any more. (bsc#1194334) Package sle-module-containers-release was updated: Package sle-module-legacy-release was updated: Package sle-module-python2-release was updated: Package sudo was updated: - Add support in the LDAP filter for negated users, patch taken from upstream (jsc#20068) * Adds sudo-feature-negated-LDAP-users.patch - Restrict use of sudo -U other -l to people who have permission to run commands as that user (bsc#1181703, jsc#SLE-22569) * feature-upstream-restrict-sudo-U-other-l.patch Package supportutils was updated: - Spec file adjusted for usr-merge- Changes to version 3.1.20 + Added command blkid #114 + Added s390x specific files and output #115 + Fix for invalid argument during updates (bsc#1193204) + Optimized conf_files, conf_files_text and log_cmd functions #118 + Fixed iscsi initiator name (bsc#1195797) + Added rpcinfo -p output #116 + Included /etc/sssd/conf.d configuration files #100 - Changes to version 3.1.19 + Made /proc directory and network names spaces configurable (bsc#1193868) - Changes to version 3.1.19 + Removed chronyc DNS lookups with -n switch (bsc#1193732) - Merged Include udev rules in /lib/udev/rules.d/ #113 - Merged Move localmessage/warm logs out of messages.txt to new localwarn.txt #87 - getappcore identifies compressed core files (bsc#1191794) - Installing to /usr/sbin instead of /sbin (bsc#1191096) - Added shared memory as a log directory for emergency use (bsc#1190943) - Fixed cron package for RPM validation (bsc#1190315) - Updated spec file with correct URL - Changes to version 3.1.18 + Added email.txt based on OPTION_EMAIL #108 (bsc#1189028) + Include 'multipath -t' output in mpio.txt #105 + Improved lsblk readability with --ascsi #106 + Removed duplicate commands in network.txt + Remove duplicate firewalld status output #109 Package supportutils-plugin-suse-public-cloud was updated: - Update to version 1.0.6 (bsc#1195095, bsc#1195096) + Include cloud-init logs whenever they are present + Update the packages we track in AWS, Azure, and Google + Include the ecs logs for AWS ECS instances Package suse-build-key was updated: - still ship the old ptf key (was not added to documentation by mistake). (bsc#1198504) - No longer install 1024bit keys by default. (bsc#1197293) - SLE11 key moved to documentation - old PTF (pre March 2022) moved to documentation only - extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc - added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494) - extended expiry of SUSE SLES11 key (bsc#1194845) - added SUSE Contaner signing key in PEM format for use e.g. by cosign. - SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495) Package sysstat was updated: - Fix possible segfault in read_task_stats() [bsc#1194679]- Add sysstat-fix-segfault-in-read_task_stats.patch Package systemd was updated: - Import commit 5e7db68eb43ec3733c56e98262973431f57e2265 4f00efadc7 systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23868 jsc#SLE-23870) - Import commit c46bcb2df93c802f43e240ceb96eaf28027808a8 28e379cc21 systemctl: exit with 1 if no unit files found (bsc#1193841) * 60-io-scheduler.rules: add rules for virtual devices (boo#1193759) * 60-io-scheduler.rules: enforce &quot;/none&quot;/ for loop devices (boo#1193759) Package systemd-presets-common-SUSE was updated: Package tar was updated: - tests-skip-time01-on-32bit-time_t.patch: Add patch to skip test 'tests/time01.at' on platforms with 32-bit time_t for now. - tar.spec: Reference it. (%check): Output the testsuite.log in case the testsuite failed. - The following issues have already been fixed in this package but weren't previously mentioned in the changes file: * bsc#1181131, CVE-2021-20193 * bsc#1120610 - GNU tar 1.34: * Fix extraction over pipe * Fix memory leak in read_header * Fix extraction when . and .. are unreadable * Gracefully handle duplicate symlinks when extracting * Re-initialize supplementary groups when switching to user privileges - GNU tar 1.33: * POSIX extended format headers do not include PID by default * --delay-directory-restore works for archives with reversed member ordering * Fix extraction of a symbolic link hardlinked to another symbolic link * Wildcards in exclude-vcs-ignore mode don't match slash * Fix the --no-overwrite-dir option * Fix handling of chained renames in incremental backups * Link counting works for file names supplied with -T * Accept only position-sensitive (file-selection) options in file list files - remove deprecated texinfo packaging macros - prepare usrmerge (boo#1029961) - Drop Requires(pre) info in the preamble: the main package does not contain any info files, and has not even a pre script. The - doc subpackage already has the correct deps. - No longer recommend -lang: supplements are in use. - update to version 1.32 * Fix the use of --checkpoint without explicit --checkpoint-action * Fix extraction with the -U option * Fix iconv usage on BSD-based systems * Fix possible NULL dereference (savannah bug #55369) [bsc#1130496] [CVE-2019-9923] * Improve the testsuite - remove tar-1.31-tests_dirrem.patch and tar-1.31-racy_compress_tests.patch that are no longer needed (applied usptream) - Remove libattr-devel from buildrequires, tar no longer uses it but finds xattr functions in libc. - update to version 1.31 * Fix heap-buffer-overrun with --one-top-level, bug introduced with the addition of that option in 1.28 * Support for zstd compression * New option '--zstd' instructs tar to use zstd as compression program. When listing, extractng and comparing, zstd compressed archives are recognized automatically. When '-a' option is in effect, zstd compression is selected if the destination archive name ends in '.zst' or '.tzst'. * The -K option interacts properly with member names given in the command line. Names of members to extract can be specified along with the &quot;/-K NAME&quot;/ option. In this case, tar will extract NAME and those of named members that appear in the archive after it, which is consistent with the semantics of the option. Previous versions of tar extracted NAME, those of named members that appeared before it, and everything after it. * Fix CVE-2018-20482 - When creating archives with the --sparse option, previous versions of tar would loop endlessly if a sparse file had been truncated while being archived. - remove the following patches (upstreamed) * tar-1.30-tests-difflink.patch * tar-1.30-tests_dirrem_race.patch - refresh add_readme-tests.patch - add tar-1.31-tests_dirrem.patch to fix expected output in dirrem tests - add tar-1.31-racy_compress_tests.patch to fix compression tests Package tcpdump was updated: - Security fix: [bsc#1195825, CVE-2018-16301] * Fix segfault when handling large files * Add tcpdump-CVE-2018-16301.patch Package tiff was updated: - security update * CVE-2022-0561 [bsc#1195964] + tiff-CVE-2022-0561.patch * CVE-2022-0562 [bsc#1195965] + tiff-CVE-2022-0562.patch * CVE-2022-0865 [bsc#1197066] + tiff-CVE-2022-0865.patch * CVE-2022-0909 [bsc#1197072] + tiff-CVE-2022-0909.patch * CVE-2022-0924 [bsc#1197073] + tiff-CVE-2022-0924.patch * CVE-2022-0908 [bsc#1197074] + tiff-CVE-2022-0908.patch - security update * CVE-2022-1056 [bsc#1197631] * CVE-2022-0891 [bsc#1197068] + tiff-CVE-2022-1056,CVE-2022-0891.patch - security update: Fix buffer overwrite * CVE-2019-17546[bsc#1154365] + tiff-CVE-2019-17546.patch - security update: Fix heap based buffer overflow in pal2rgb * CVE-2017-17095[bsc#1071031] + tiff-CVE-2017-17095.patch - security update: Fix OOB in _TIFFmemcpy * CVE-2022-22844[bsc#1194539] + tiff-CVE-2022-22844.patch - security update: Fix memory allocation failure in tif_read.c * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809] + tiff-CVE-2020-35521,CVE-2020-35522.patch - security update: Fix DOS via invertImage() * CVE-2020-19131[bsc#1190312] + tiff-CVE-2020-19131.patch - security update: Fix heap-based buffer overflow in TIFF2PDF tool * CVE-2020-35524[bsc#1182812] + tiff-CVE-2020-35524.patch - security update: Fix integer overflow in tif_getimage * CVE-2020-35523 [bsc#1182811] + tiff-CVE-2020-35523.patch Package tigervnc was updated: - U_0003-Fix-rendering-on-big-endian-system.patch * Patch now handles properly endianness. * Patch modified from: 7ab92639848a6059e2b6b88499b008b9606f3af6 * bsc#1197119 - U_0003-Fix-rendering-on-big-endian-system.patch * Backport to fix rendering on big endian systems. * bsc#1177758 Package timezone was updated: - timezone update 2022a (bsc#1177460): * Palestine will spring forward on 2022-03-27, not -03-26* * zdump -v now outputs better failure indications * Bug fixes for code that reads corrupted TZif data Package update-alternatives was updated: - break bash &lt;-&gt; update-alternatives cycle by coolo's rewrite of %post in lua [bsc#1195654] Package util-linux was updated: - Extend cache in uuid_generate_time_generic() (bsc#1194642#c51, util-linux-libuuid-extend-cache.patch). - Prevent root owning of /var/lib/libuuid/clock.txt (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch). - Warn if uuidd lock state is not usable (bsc#1194642, util-linux-uuidd-check-lock-state.patch). - Fix &quot;/su -s&quot;/ bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). Package util-linux-systemd was updated: - Extend cache in uuid_generate_time_generic() (bsc#1194642#c51, util-linux-libuuid-extend-cache.patch). - Prevent root owning of /var/lib/libuuid/clock.txt (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch). - Warn if uuidd lock state is not usable (bsc#1194642, util-linux-uuidd-check-lock-state.patch). - Fix &quot;/su -s&quot;/ bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). Package vim was updated: - Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in vim prior to 8.2. / vim-8.0.1568-CVE-2022-0413.patch - Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in normal.c / vim-8.0.1568-CVE-2021-3796.patch - Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch - Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch - Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch - Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch - Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch - Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c / vim-8.0.1568-CVE-2021-3778.patch - Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read / vim-8.0.1568-CVE-2021-4193.patch - Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch - Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch - Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7() / vim-8.0.1568-CVE-2022-0351.patch - Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch - Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c / vim-8.0.1568-CVE-2022-0413.patch Package wicked was updated: - fsm: fix device rename via yast (bsc#1194392) Reset worker config instead to reject a NULL/empty config xml node -- introduced in wicked 0.6.67 by commit c2a0385. [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch] - version 0.6.68 - sysctl: process sysctl.d directories as in sysctl --system - sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357) - dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353) - cleanup: warnings, time calculations and dhcp fixes (bsc#1188019) - wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495) - tuntap: avoid sysfs attr read error (bsc#1192311) - ifstatus: fix warning of unexpected interface flag combination (bsc#1192164) - dbus: config files in /usr shouldn't be marked as config in spec - version 0.6.67 - dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750) - logging: log reaped sub-process command and as debug, not error - ifstatus: Don't show link as &quot;/up&quot;/ without RUNNING flag set - firewalld: Make the zone assignment permanent (boo#1189560) - fsm: cleanup and improve ifconfig and ifpolicy access utils - dbus: cleanup the dbus-service.h file and unused property makros - cleanup: applied code-spell run typo corrections - dracut: initial fixes and improved option handling (boo#1182227) - version 0.6.66 - wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920) - support multiple networks configurations per interface - show connection status and scan-results (bsc#1160654) - corrected eap-tls,ttls cetificate handling and open vs. shared wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592) - cleanups and several other improvements, see changes - updated man ifcfg-wireless manual pages - nanny: fix identify node owner exit condition - schema: several xml-schema and dbus/property improvements - utils: format/parse bitmap to array and string alternatives - client: expose ethtool --get-permanent-address option - removed sle15-sp3 patches included in the master sources (bsc#1181812) [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch] [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch] - dhcp4: discover on reboot timeout after start-delay (bsc#1181812) [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch] - dhcp6: request nis options on sle15 by default (bsc#1181812) [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch] - version 0.6.65 - ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215) - client: parse sysctl files in the correct order (bsc#1181186) - ifup: fix for set up with unenslave from unconfigured master (boo#954329) - rpm: prepare for new builds using usrmerged rpm macro (boo#1029961) - rpm: Let wicked-service also provide service(network) - cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815) - dbus: add variant container, generic object-path and uint32 array macros Package xen was updated: - bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch - bsc#1197423 - VUL-0: CVE-2022-26356: xen: Racy interactions between dirty vram tracking and paging log dirty hypercalls (XSA-397) xsa397.patch - bsc#1197425 - VUL-0: CVE-2022-26357: xen: race in VT-d domain ID cleanup (XSA-399) xsa399.patch - bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) xsa400-00.patch xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch - bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401: xen: BHB speculation issues (XSA-398) xsa398-1.patch xsa398-2.patch xsa398-3.patch xsa398-4.patch xsa398-5.patch xsa398-6.patch - bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393) xsa393.patch - bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS Xen while unmapping a grant (XSA-394) xsa394.patch - bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of passed-through device IRQs (XSA-395) xsa395.patch - bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output (see also bsc#1194267) libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch - Collect active VM config files in the supportconfig plugin xen-supportconfig - bsc#1191510 - [UEFI]15sp4 uefi fv guest on 12sp5 host unable to bootup with sriov pci device plugin 5e15e174-libxl-dont-needlessly-report-highmem-in-use.patch - Upstream bug fixes (bsc#1027519) 616d66bd-x86-HVM-cleanup-after-failed-viridian_vcpu_init.patch 616e7cfe-x86-paging-restrict-paddr-width-reported.patch 619b7ac9-harden-assign_pages.patch 619b8cb0-x86-PoD-misaligned-GFNs.patch 619b8cb1-x86-PoD-intermediate-page-orders.patch 619b8cb2-x86-P2M-set-partial-success.patch - Drop xsa patches in favor of upstream versions xsa385.patch xsa388-1.patch xsa388-2.patch xsa389.patch Package xkeyboard-config was updated: - U_Add-the-new-AZERTY-layout-norm-NF-Z71-300.patch * Backport French standardized AZERTY layout (AFNOR: NF Z71-300) (bsc#1188867) Package xz was updated: - Fix ZDI-CAN-16587 Fix escaping of malicious filenames (ZDI-CAN-16587 bsc#1198062 CVE-2022-1271) * bsc1198062.patch Package yaml-cpp was updated: - Fix CVE-2018-20573 The Scanner:EnsureTokensInQueue function in yaml-cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2018-20573, bsc#1121227) - Fix CVE-2018-20574 The SingleDocParser:HandleFlowMap function in yaml-cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2018-20574, bsc#1121230) - Fix CVE-2019-6285 The SingleDocParser::HandleFlowSequence function in cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2019-6285, bsc#1122004) - Fix CVE-2019-6292 An issue was discovered in singledocparser.cpp in yaml-cpp which cause DOS by stack consumption (CVE-2019-6292, bsc#1122021) - Added patch cve-2018-20574.patch Package yast2-add-on was updated: - Restore the repo unexpanded URL to get it properly saved in the /etc/zypp/repos.d file (bsc#972046, bsc#1194851). - 4.2.19 Package yast2-storage-ng was updated: - Fix fstab entry filesystem matching allowing the use of quotes surrounding the device UUID or label (bsc#1197692) - 4.2.122 Package zlib was updated: - CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459 * bsc1197459.patch Package zsh was updated: - Added CVE-2019-20044.patch: fixes insecure dropping of privileges when unsetting PRIVILEGED option (CVE-2019-20044 bsc#1163882) - Added CVE-2021-45444.patch: fixes a vulnerability in prompt expansion which could be exploited through e.g. VCS_Info to execute arbitrary shell commands (CVE-2021-45444 bsc#1196435) Package zypper was updated: - info: print the packages upstream URL if available (fixes #426)- info: Fix SEGV with not installed PTFs (bsc#1196317) - Don't prevent less restrictive umasks (bsc#1195999) - version 1.14.52 - Singletrans: handle fatal and non-fatal script errors properly. - Add SingleTransReportReceiver. - Immediately write out additional rpm output. - BuildRequires: libzypp-devel &gt;= 17.29.0. Need SingleTransReport and immediate rpm script output reports. - version 1.14.51 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://publiccloudimagechangeinfo.suse.com/google/sles-15-sp2-sap-v20220602-x86-64/ Public Cloud Image Info https://www.suse.com/support/security/rating/ SUSE Security Ratings Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 HANA-Firewall-2.0.2-150000.3.3.1 SAPHanaSR-0.155.0-4.17.1 SAPHanaSR-doc-0.155.0-4.17.1 aaa_base-84.87+git20180409.04c9dae-3.57.1 aaa_base-extras-84.87+git20180409.04c9dae-3.57.1 augeas-1.10.1-150000.3.12.1 augeas-lenses-1.10.1-150000.3.12.1 autofs-5.1.3-150000.7.11.1 bind-utils-9.16.6-150000.12.60.1 binutils-2.37-150100.7.29.1 boost-license1_66_0-1.66.0-12.3.1 cifs-utils-6.9-150100.5.15.1 cloud-regionsrv-client-10.0.3-150000.6.70.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.70.1 cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 cluster-md-kmp-default-5.3.18-150200.24.112.1 containerd-1.5.11-150000.68.1 coreutils-8.29-4.3.1 crash-7.2.8-18.10.2 crmsh-4.3.1+20220505.cf4ab649-150200.5.80.1 crmsh-scripts-4.3.1+20220505.cf4ab649-150200.5.80.1 ctdb-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 cups-config-2.2.7-150000.3.32.1 curl-7.66.0-150200.4.33.1 cyrus-sasl-2.1.26-5.10.1 cyrus-sasl-digestmd5-2.1.26-5.10.1 cyrus-sasl-gssapi-2.1.26-5.10.1 cyrus-sasl-plain-2.1.26-5.10.1 cyrus-sasl-saslauthd-2.1.26-5.10.1 device-mapper-1.02.163-8.42.1 dhcp-4.3.6.P1-150000.6.14.1 dhcp-client-4.3.6.P1-150000.6.14.1 dlm-kmp-default-5.3.18-150200.24.112.1 docker-20.10.14_ce-150000.163.1 dracut-049.1+suse.234.g902e489c-150200.3.57.1 e2fsprogs-1.43.8-150000.4.33.1 expat-2.2.5-3.19.1 fence-agents-4.9.0+git.1624456340.8d746be9-150100.7.32.1 filesystem-15.0-11.8.1 gfs2-kmp-default-5.3.18-150200.24.112.1 glib2-tools-2.62.6-150200.3.9.1 glibc-2.26-13.65.1 glibc-i18ndata-2.26-13.65.1 glibc-locale-2.26-13.65.1 glibc-locale-base-2.26-13.65.1 gnutls-3.6.7-14.16.1 google-guest-agent-20220204.0-150000.1.26.1 google-guest-configs-20220211.0-150000.1.19.1 google-guest-oslogin-20220205.0-150000.1.27.1 google-osconfig-agent-20220209.0-150000.1.17.1 grep-3.1-150000.4.6.1 grub2-2.04-150200.9.58.3 grub2-i386-pc-2.04-150200.9.58.3 grub2-x86_64-efi-2.04-150200.9.58.3 gzip-1.1-150200.10.1 icewm-theme-branding-1.2.4-3.15.1 java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 kernel-default-5.3.18-150200.24.112.1 ldirectord-4.4.0+git57.70549516-3.46.1 libQt5Core5-5.12.7-4.17.1 libQt5DBus5-5.12.7-4.17.1 libQt5Gui5-5.12.7-4.17.1 libQt5Network5-5.12.7-4.17.1 libQt5Widgets5-5.12.7-4.17.1 libXvnc1-1.9.0-150100.19.17.1 libatomic1-11.2.1+git610-150000.1.6.6 libaugeas0-1.10.1-150000.3.12.1 libavahi-client3-0.7-3.18.1 libavahi-common3-0.7-3.18.1 libbind9-1600-9.16.6-150000.12.60.1 libblkid1-2.33.2-150100.4.21.1 libboost_regex1_66_0-1.66.0-12.3.1 libboost_system1_66_0-1.66.0-12.3.1 libboost_thread1_66_0-1.66.0-12.3.1 libcom_err2-1.43.8-150000.4.33.1 libctf-nobfd0-2.37-150100.7.29.1 libctf0-2.37-150100.7.29.1 libcups2-2.2.7-150000.3.32.1 libcurl4-7.66.0-150200.4.33.1 libdcerpc-binding0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libdcerpc0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libdevmapper-event1_03-1.02.163-8.42.1 libdevmapper1_03-1.02.163-8.42.1 libdns1605-9.16.6-150000.12.60.1 libexpat1-2.2.5-3.19.1 libext2fs2-1.43.8-150000.4.33.1 libfdisk1-2.33.2-150100.4.21.1 libfreebl3-3.68.3-150000.3.67.1 libfribidi0-1.0.5-150200.3.6.1 libgcc_s1-11.2.1+git610-150000.1.6.6 libgio-2_0-0-2.62.6-150200.3.9.1 libglib-2_0-0-2.62.6-150200.3.9.1 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 libgmodule-2_0-0-2.62.6-150200.3.9.1 libgnutls30-3.6.7-14.16.1 libgobject-2_0-0-2.62.6-150200.3.9.1 libgthread-2_0-0-2.62.6-150200.3.9.1 libinput10-1.10.5-150000.3.3.1 libirs1601-9.16.6-150000.12.60.1 libisc1606-9.16.6-150000.12.60.1 libisccc1600-9.16.6-150000.12.60.1 libisccfg1600-9.16.6-150000.12.60.1 libldap-2_4-2-2.4.46-150200.14.8.1 libldap-data-2.4.46-150200.14.8.1 liblvm2cmd2_03-2.03.05-8.42.1 liblzma5-5.2.3-150000.4.7.1 libmount1-2.33.2-150100.4.21.1 libndr-krb5pac0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libndr-nbt0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libndr-standard0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libndr0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libnetapi0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libnm0-1.22.10-150200.3.18.1 libns1604-9.16.6-150000.12.60.1 libopenssl1_1-1.1.1d-11.43.1 libpacemaker3-2.0.4+20200616.2deceaa3a-3.15.1 libpcre2-16-0-10.31-150000.3.7.1 libpcre2-8-0-10.31-150000.3.7.1 libpolkit0-0.116-3.9.1 libprocps7-3.3.15-7.22.1 libprotobuf-lite20-3.9.2-4.12.1 libpsl5-0.20.1-150000.3.3.1 libpython2_7-1_0-2.7.18-150000.38.2 libqb20-1.0.3+20190326.a521604-3.6.1 libruby2_5-2_5-2.5.9-150000.4.23.1 libsamba-credentials0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libsamba-errors0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libsamba-hostconfig0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libsamba-passdb0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libsamba-util0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libsamdb0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libsasl2-3-2.1.26-5.10.1 libsmartcols1-2.33.2-150100.4.21.1 libsmbconf0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libsmbldap2-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libsnmp30-5.7.3-10.12.1 libsoftokn3-3.68.3-150000.3.67.1 libsolv-tools-0.7.22-150200.12.1 libstdc++6-11.2.1+git610-150000.1.6.6 libsystemd0-234-24.108.1 libtevent-util0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libtiff5-4.0.9-150000.45.8.1 libtirpc-netconfig-1.0.2-3.11.1 libtirpc3-1.0.2-3.11.1 libudev1-234-24.108.1 libuuid1-2.33.2-150100.4.21.1 libwbclient0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 libxml2-2-2.9.7-150000.3.46.1 libyaml-cpp0_6-0.6.1-4.5.1 libz1-1.2.11-150000.3.30.1 libzypp-17.30.0-150200.36.1 lifecycle-data-sle-module-live-patching-15-150000.4.72.1 lvm2-2.03.05-8.42.1 lvm2-lockd-2.03.05-8.42.1 mlocate-0.26-150100.7.3.2 mozilla-nss-3.68.3-150000.3.67.1 mozilla-nss-certs-3.68.3-150000.3.67.1 mozilla-nss-tools-3.68.3-150000.3.67.1 net-snmp-5.7.3-10.12.1 nfs-client-2.1.1-150100.10.24.1 nfs-kernel-server-2.1.1-150100.10.24.1 nscd-2.26-13.65.1 ocfs2-kmp-default-5.3.18-150200.24.112.1 ocfs2-tools-1.8.5-150100.12.14.1 openldap2-client-2.4.46-150200.14.8.1 openssh-8.1p1-150200.5.28.1 openssl-1_1-1.1.1d-11.43.1 pacemaker-2.0.4+20200616.2deceaa3a-3.15.1 pacemaker-cli-2.0.4+20200616.2deceaa3a-3.15.1 pam-1.3.0-150000.6.58.3 perl-5.26.1-150000.7.15.1 perl-SNMP-5.7.3-10.12.1 perl-XML-LibXML-2.0132-150000.3.3.1 perl-base-5.26.1-150000.7.15.1 polkit-0.116-3.9.1 procps-3.3.15-7.22.1 psmisc-23.0-150000.6.22.1 python-base-2.7.18-150000.38.2 python-xml-2.7.18-150000.38.2 python3-bind-9.16.6-150000.12.60.1 python3-lxml-4.7.1-3.7.1 python3-six-1.14.0-12.1 python3-solv-0.7.22-150200.12.1 release-notes-sles-for-sap-15.2.20220202-3.10.1 resource-agents-4.4.0+git57.70549516-3.46.1 rsyslog-8.2106.0-150200.4.26.1 ruby-solv-0.7.22-150200.12.1 ruby2.5-2.5.9-150000.4.23.1 ruby2.5-rubygem-puma-4.3.11-150000.3.6.2 ruby2.5-stdlib-2.5.9-150000.4.23.1 samba-libs-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 samba-libs-python3-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 sapconf-5.0.4-150000.7.21.1 saptune-3.0.2-8.22.2 sle-module-containers-release-15.2-54.1 sle-module-legacy-release-15.2-119.8.1 sle-module-python2-release-15.2-55.1 snmp-mibs-5.7.3-10.12.1 sudo-1.8.27-4.24.1 supportutils-3.1.20-150000.5.39.1 supportutils-plugin-suse-public-cloud-1.0.6-3.9.1 suse-build-key-12.0-150000.8.25.1 sysstat-12.0.2-3.33.1 systemd-234-24.108.1 systemd-presets-common-SUSE-15-150100.8.12.1 systemd-sysvinit-234-24.108.1 tar-1.34-150000.3.12.1 tcpdump-4.9.2-3.18.1 timezone-2022a-150000.75.7.1 typelib-1_0-NM-1_0-1.22.10-150200.3.18.1 udev-234-24.108.1 update-alternatives-1.19.0.4-4.3.1 util-linux-2.33.2-150100.4.21.1 util-linux-systemd-2.33.2-150100.4.21.1 uuidd-2.33.2-150100.4.21.1 vim-8.0.1568-5.17.1 vim-data-common-8.0.1568-5.17.1 wicked-0.6.68-3.8.1 wicked-service-0.6.68-3.8.1 xen-libs-4.13.4_08-150200.3.50.1 xkeyboard-config-2.23.1-150000.3.12.1 xorg-x11-Xvnc-1.9.0-150100.19.17.1 xz-5.2.3-150000.4.7.1 yast2-add-on-4.2.19-3.9.1 yast2-storage-ng-4.2.122-150200.3.30.1 zsh-5.6-7.5.1 zypper-1.14.52-150200.30.2 HANA-Firewall-2.0.2-150000.3.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 SAPHanaSR-0.155.0-4.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 SAPHanaSR-doc-0.155.0-4.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 aaa_base-84.87+git20180409.04c9dae-3.57.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 aaa_base-extras-84.87+git20180409.04c9dae-3.57.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 augeas-1.10.1-150000.3.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 augeas-lenses-1.10.1-150000.3.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 autofs-5.1.3-150000.7.11.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 bind-utils-9.16.6-150000.12.60.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 binutils-2.37-150100.7.29.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 boost-license1_66_0-1.66.0-12.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cifs-utils-6.9-150100.5.15.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cloud-regionsrv-client-10.0.3-150000.6.70.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.70.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cluster-glue-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cluster-md-kmp-default-5.3.18-150200.24.112.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 containerd-1.5.11-150000.68.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 coreutils-8.29-4.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 crash-7.2.8-18.10.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 crmsh-4.3.1+20220505.cf4ab649-150200.5.80.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 crmsh-scripts-4.3.1+20220505.cf4ab649-150200.5.80.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 ctdb-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cups-config-2.2.7-150000.3.32.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 curl-7.66.0-150200.4.33.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cyrus-sasl-2.1.26-5.10.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cyrus-sasl-digestmd5-2.1.26-5.10.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cyrus-sasl-gssapi-2.1.26-5.10.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cyrus-sasl-plain-2.1.26-5.10.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 cyrus-sasl-saslauthd-2.1.26-5.10.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 device-mapper-1.02.163-8.42.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 dhcp-4.3.6.P1-150000.6.14.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 dhcp-client-4.3.6.P1-150000.6.14.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 dlm-kmp-default-5.3.18-150200.24.112.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 docker-20.10.14_ce-150000.163.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 dracut-049.1+suse.234.g902e489c-150200.3.57.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 e2fsprogs-1.43.8-150000.4.33.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 expat-2.2.5-3.19.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 fence-agents-4.9.0+git.1624456340.8d746be9-150100.7.32.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 filesystem-15.0-11.8.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 gfs2-kmp-default-5.3.18-150200.24.112.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 glib2-tools-2.62.6-150200.3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 glibc-2.26-13.65.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 glibc-i18ndata-2.26-13.65.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 glibc-locale-2.26-13.65.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 glibc-locale-base-2.26-13.65.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 gnutls-3.6.7-14.16.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 google-guest-agent-20220204.0-150000.1.26.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 google-guest-configs-20220211.0-150000.1.19.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 google-guest-oslogin-20220205.0-150000.1.27.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 google-osconfig-agent-20220209.0-150000.1.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 grep-3.1-150000.4.6.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 grub2-2.04-150200.9.58.3 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 grub2-i386-pc-2.04-150200.9.58.3 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 grub2-x86_64-efi-2.04-150200.9.58.3 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 gzip-1.1-150200.10.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 icewm-theme-branding-1.2.4-3.15.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 kernel-default-5.3.18-150200.24.112.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 ldirectord-4.4.0+git57.70549516-3.46.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libQt5Core5-5.12.7-4.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libQt5DBus5-5.12.7-4.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libQt5Gui5-5.12.7-4.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libQt5Network5-5.12.7-4.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libQt5Widgets5-5.12.7-4.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libXvnc1-1.9.0-150100.19.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libatomic1-11.2.1+git610-150000.1.6.6 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libaugeas0-1.10.1-150000.3.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libavahi-client3-0.7-3.18.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libavahi-common3-0.7-3.18.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libbind9-1600-9.16.6-150000.12.60.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libblkid1-2.33.2-150100.4.21.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libboost_regex1_66_0-1.66.0-12.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libboost_system1_66_0-1.66.0-12.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libboost_thread1_66_0-1.66.0-12.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libcom_err2-1.43.8-150000.4.33.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libctf-nobfd0-2.37-150100.7.29.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libctf0-2.37-150100.7.29.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libcups2-2.2.7-150000.3.32.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libcurl4-7.66.0-150200.4.33.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libdcerpc-binding0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libdcerpc0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libdevmapper-event1_03-1.02.163-8.42.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libdevmapper1_03-1.02.163-8.42.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libdns1605-9.16.6-150000.12.60.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libexpat1-2.2.5-3.19.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libext2fs2-1.43.8-150000.4.33.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libfdisk1-2.33.2-150100.4.21.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libfreebl3-3.68.3-150000.3.67.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libfribidi0-1.0.5-150200.3.6.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libgcc_s1-11.2.1+git610-150000.1.6.6 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libgio-2_0-0-2.62.6-150200.3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libglib-2_0-0-2.62.6-150200.3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libglue2-1.0.12+v1.git.1587474580.a5fda2bc-150000.3.14.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libgmodule-2_0-0-2.62.6-150200.3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libgnutls30-3.6.7-14.16.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libgobject-2_0-0-2.62.6-150200.3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libgthread-2_0-0-2.62.6-150200.3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libinput10-1.10.5-150000.3.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libirs1601-9.16.6-150000.12.60.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libisc1606-9.16.6-150000.12.60.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libisccc1600-9.16.6-150000.12.60.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libisccfg1600-9.16.6-150000.12.60.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libldap-2_4-2-2.4.46-150200.14.8.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libldap-data-2.4.46-150200.14.8.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 liblvm2cmd2_03-2.03.05-8.42.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 liblzma5-5.2.3-150000.4.7.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libmount1-2.33.2-150100.4.21.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libndr-krb5pac0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libndr-nbt0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libndr-standard0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libndr0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libnetapi0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libnm0-1.22.10-150200.3.18.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libns1604-9.16.6-150000.12.60.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libopenssl1_1-1.1.1d-11.43.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libpacemaker3-2.0.4+20200616.2deceaa3a-3.15.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libpcre2-16-0-10.31-150000.3.7.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libpcre2-8-0-10.31-150000.3.7.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libpolkit0-0.116-3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libprocps7-3.3.15-7.22.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libprotobuf-lite20-3.9.2-4.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libpsl5-0.20.1-150000.3.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libpython2_7-1_0-2.7.18-150000.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libqb20-1.0.3+20190326.a521604-3.6.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libruby2_5-2_5-2.5.9-150000.4.23.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsamba-credentials0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsamba-errors0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsamba-hostconfig0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsamba-passdb0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsamba-util0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsamdb0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsasl2-3-2.1.26-5.10.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsmartcols1-2.33.2-150100.4.21.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsmbconf0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsmbldap2-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsnmp30-5.7.3-10.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsoftokn3-3.68.3-150000.3.67.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsolv-tools-0.7.22-150200.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libstdc++6-11.2.1+git610-150000.1.6.6 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libsystemd0-234-24.108.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libtevent-util0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libtiff5-4.0.9-150000.45.8.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libtirpc-netconfig-1.0.2-3.11.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libtirpc3-1.0.2-3.11.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libudev1-234-24.108.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libuuid1-2.33.2-150100.4.21.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libwbclient0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libxml2-2-2.9.7-150000.3.46.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libyaml-cpp0_6-0.6.1-4.5.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libz1-1.2.11-150000.3.30.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 libzypp-17.30.0-150200.36.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 lifecycle-data-sle-module-live-patching-15-150000.4.72.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 lvm2-2.03.05-8.42.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 lvm2-lockd-2.03.05-8.42.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 mlocate-0.26-150100.7.3.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 mozilla-nss-3.68.3-150000.3.67.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 mozilla-nss-certs-3.68.3-150000.3.67.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 mozilla-nss-tools-3.68.3-150000.3.67.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 net-snmp-5.7.3-10.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 nfs-client-2.1.1-150100.10.24.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 nfs-kernel-server-2.1.1-150100.10.24.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 nscd-2.26-13.65.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 ocfs2-kmp-default-5.3.18-150200.24.112.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 ocfs2-tools-1.8.5-150100.12.14.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 openldap2-client-2.4.46-150200.14.8.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 openssh-8.1p1-150200.5.28.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 openssl-1_1-1.1.1d-11.43.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 pacemaker-2.0.4+20200616.2deceaa3a-3.15.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 pacemaker-cli-2.0.4+20200616.2deceaa3a-3.15.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 pam-1.3.0-150000.6.58.3 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 perl-5.26.1-150000.7.15.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 perl-SNMP-5.7.3-10.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 perl-XML-LibXML-2.0132-150000.3.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 perl-base-5.26.1-150000.7.15.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 polkit-0.116-3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 procps-3.3.15-7.22.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 psmisc-23.0-150000.6.22.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 python-base-2.7.18-150000.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 python-xml-2.7.18-150000.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 python3-bind-9.16.6-150000.12.60.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 python3-lxml-4.7.1-3.7.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 python3-six-1.14.0-12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 python3-solv-0.7.22-150200.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 release-notes-sles-for-sap-15.2.20220202-3.10.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 resource-agents-4.4.0+git57.70549516-3.46.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 rsyslog-8.2106.0-150200.4.26.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 ruby-solv-0.7.22-150200.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 ruby2.5-2.5.9-150000.4.23.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 ruby2.5-rubygem-puma-4.3.11-150000.3.6.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 ruby2.5-stdlib-2.5.9-150000.4.23.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 samba-libs-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 samba-libs-python3-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 sapconf-5.0.4-150000.7.21.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 saptune-3.0.2-8.22.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 sle-module-containers-release-15.2-54.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 sle-module-legacy-release-15.2-119.8.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 sle-module-python2-release-15.2-55.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 snmp-mibs-5.7.3-10.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 sudo-1.8.27-4.24.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 supportutils-3.1.20-150000.5.39.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 supportutils-plugin-suse-public-cloud-1.0.6-3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 suse-build-key-12.0-150000.8.25.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 sysstat-12.0.2-3.33.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 systemd-234-24.108.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 systemd-presets-common-SUSE-15-150100.8.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 systemd-sysvinit-234-24.108.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 tar-1.34-150000.3.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 tcpdump-4.9.2-3.18.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 timezone-2022a-150000.75.7.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 typelib-1_0-NM-1_0-1.22.10-150200.3.18.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 udev-234-24.108.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 update-alternatives-1.19.0.4-4.3.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 util-linux-2.33.2-150100.4.21.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 util-linux-systemd-2.33.2-150100.4.21.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 uuidd-2.33.2-150100.4.21.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 vim-8.0.1568-5.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 vim-data-common-8.0.1568-5.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 wicked-0.6.68-3.8.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 wicked-service-0.6.68-3.8.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 xen-libs-4.13.4_08-150200.3.50.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 xkeyboard-config-2.23.1-150000.3.12.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 xorg-x11-Xvnc-1.9.0-150100.19.17.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 xz-5.2.3-150000.4.7.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 yast2-add-on-4.2.19-3.9.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 yast2-storage-ng-4.2.122-150200.3.30.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 zsh-5.6-7.5.1 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 zypper-1.14.52-150200.30.2 as a component of Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64 The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing. CVE-2015-8985 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-i18ndata-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-locale-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-locale-base-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:nscd-2.26-13.65.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file. CVE-2017-17095 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump. CVE-2018-16301 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:tcpdump-4.9.2-3.18.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146. CVE-2018-19787 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python3-lxml-4.7.1-3.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root). CVE-2018-20482 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:tar-1.34-150000.3.12.1 moderate 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. CVE-2018-20573 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libyaml-cpp0_6-0.6.1-4.5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. CVE-2018-20574 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libyaml-cpp0_6-0.6.1-4.5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. CVE-2018-25032 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libz1-1.2.11-150000.3.30.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition. CVE-2019-17546 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid(). CVE-2019-20044 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:zsh-5.6-7.5.1 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. CVE-2019-6285 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libyaml-cpp0_6-0.6.1-4.5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote attackers could leverage this vulnerability to cause a denial-of-service via a cpp file. CVE-2019-6292 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libyaml-cpp0_6-0.6.1-4.5.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers. CVE-2019-9923 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:tar-1.34-150000.3.12.1 low 5 AV:N/AC:L/Au:N/C:N/I:N/A:P Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop". CVE-2020-19131 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. CVE-2020-27783 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python3-lxml-4.7.1-3.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service. CVE-2020-35521 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-35523 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-35524 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel CVE-2021-0920 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability. CVE-2021-20193 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:tar-1.34-150000.3.12.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater. CVE-2021-22570 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libprotobuf-lite20-3.9.2-4.12.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 CVE-2021-22600 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients. CVE-2021-25220 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:bind-utils-9.16.6-150000.12.60.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libbind9-1600-9.16.6-150000.12.60.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libdns1605-9.16.6-150000.12.60.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libirs1601-9.16.6-150000.12.60.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libisc1606-9.16.6-150000.12.60.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libisccc1600-9.16.6-150000.12.60.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libisccfg1600-9.16.6-150000.12.60.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libns1604-9.16.6-150000.12.60.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python3-bind-9.16.6-150000.12.60.1 moderate 4 AV:N/AC:L/Au:S/C:N/I:P/A:N An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.) CVE-2021-28153 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glib2-tools-2.62.6-150200.3.9.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libgio-2_0-0-2.62.6-150200.3.9.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libglib-2_0-0-2.62.6-150200.3.9.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libgmodule-2_0-0-2.62.6-150200.3.9.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libgobject-2_0-0-2.62.6-150200.3.9.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libgthread-2_0-0-2.62.6-150200.3.9.1 low 5 AV:N/AC:L/Au:N/C:N/I:P/A:N An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3. CVE-2021-28957 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python3-lxml-4.7.1-3.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starved by greedy persistent-connections saturating all threads in the same process. However, new connections may still be starved by greedy persistent-connections saturating all threads in all processes in the cluster. A `puma` server which received more concurrent `keep-alive` connections than the server had threads in its threadpool would service only a subset of connections, denying service to the unserved connections. This problem has been fixed in `puma` 4.3.8 and 5.3.1. Setting `queue_requests false` also fixes the issue. This is not advised when using `puma` without a reverse proxy, such as `nginx` or `apache`, because you will open yourself to slow client attacks (e.g. slowloris). The fix is very small and a git patch is available for those using unsupported versions of Puma. CVE-2021-29509 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ruby2.5-rubygem-puma-4.3.11-150000.3.6.2 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. CVE-2021-31799 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port. This potentially makes curl extract information about services that are otherwise private and not disclosed (e.g., the attacker can conduct port scans and service banner extractions). CVE-2021-31810 important 5 AV:N/AC:L/Au:N/C:P/I:N/A:N An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." CVE-2021-32066 important 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service. CVE-2021-3541 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libxml2-2-2.9.7-150000.3.46.1 moderate 4 AV:N/AC:L/Au:S/C:N/I:N/A:P A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1. CVE-2021-3572 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libpython2_7-1_0-2.7.18-150000.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python-base-2.7.18-150000.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python-xml-2.7.18-150000.38.2 moderate 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P vim is vulnerable to Use After Free CVE-2021-3796 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3872 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3927 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P vim is vulnerable to Use of Uninitialized Variable CVE-2021-3928 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-160822094References: Upstream kernel CVE-2021-39648 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194696049References: Upstream kernel CVE-2021-39657 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 low 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-185125206References: Upstream kernel CVE-2021-39698 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3984 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system. CVE-2021-3999 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-i18ndata-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-locale-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-locale-base-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:nscd-2.26-13.65.1 important vim is vulnerable to Heap-based Buffer Overflow CVE-2021-4019 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted. CVE-2021-41089 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:docker-20.10.14_ce-150000.163.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH. CVE-2021-41092 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:docker-20.10.14_ce-150000.163.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories. CVE-2021-41103 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:containerd-1.5.11-150000.68.1 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to versions 5.5.1 and 4.3.9, using `puma` with a proxy which forwards HTTP header values which contain the LF character could allow HTTP request smugggling. A client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. The only proxy which has this behavior, as far as the Puma team is aware of, is Apache Traffic Server. If the proxy uses persistent connections and the client adds another request in via HTTP pipelining, the proxy may mistake it as the first request's body. Puma, however, would see it as two requests, and when processing the second request, send back a response that the proxy does not expect. If the proxy has reused the persistent connection to Puma to send another request for a different client, the second response from the first client will be sent to the second client. This vulnerability was patched in Puma 5.5.1 and 4.3.9. As a workaround, do not use Apache Traffic Server with `puma`. CVE-2021-41136 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ruby2.5-rubygem-puma-4.3.11-150000.3.6.2 low 3.6 AV:N/AC:H/Au:S/C:P/I:P/A:N There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned CVE-2021-4115 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libpolkit0-0.116-3.9.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:polkit-0.116-3.9.1 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both “manifests” and “layers” fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both “manifests” and “layers” fields or “manifests” and “config” fields if they are unable to update to version 1.0.1 of the spec. CVE-2021-41190 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:containerd-1.5.11-150000.68.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:docker-20.10.14_ce-150000.163.1 moderate sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. CVE-2021-41617 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:openssh-8.1p1-150200.5.28.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1. CVE-2021-41817 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible. CVE-2021-4189 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libpython2_7-1_0-2.7.18-150000.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python-base-2.7.18-150000.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python-xml-2.7.18-150000.38.2 moderate vim is vulnerable to Out-of-bounds Read CVE-2021-4193 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 low 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances. CVE-2021-4209 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gnutls-3.6.7-14.16.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libgnutls30-3.6.7-14.16.1 moderate The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server. CVE-2021-43565 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:docker-20.10.14_ce-150000.163.1 important lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available. CVE-2021-43818 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python3-lxml-4.7.1-3.7.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root. CVE-2021-44142 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ctdb-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libdcerpc-binding0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libdcerpc0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libndr-krb5pac0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libndr-nbt0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libndr-standard0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libndr0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libnetapi0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsamba-credentials0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsamba-errors0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsamba-hostconfig0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsamba-passdb0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsamba-util0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsamdb0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsmbconf0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsmbldap2-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtevent-util0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libwbclient0-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:samba-libs-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:samba-libs-python3-4.11.14+git.322.4d2b83a55cc-150200.4.38.2 critical 9 AV:N/AC:L/Au:S/C:C/I:C/A:C In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. CVE-2021-44879 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak. CVE-2021-45095 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion. CVE-2021-45444 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:zsh-5.6-7.5.1 moderate 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file. CVE-2021-45868 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. CVE-2021-46059 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 moderate Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. CVE-2022-0001 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:xen-libs-4.13.4_08-150200.3.50.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N Heap-based Buffer Overflow in vim/vim prior to 8.2. CVE-2022-0318 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Out-of-bounds Read in vim/vim prior to 8.2. CVE-2022-0319 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 low 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system. CVE-2022-0330 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2. CVE-2022-0351 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 low 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0361 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14. CVE-2022-0391 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libpython2_7-1_0-2.7.18-150000.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python-base-2.7.18-150000.38.2 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:python-xml-2.7.18-150000.38.2 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-0413 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-8.0.1568-5.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:vim-data-common-8.0.1568-5.17.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network. CVE-2022-0435 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 9 AV:N/AC:L/Au:S/C:C/I:C/A:C A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1. CVE-2022-0487 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly. CVE-2022-0492 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4. CVE-2022-0516 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712. CVE-2022-0561 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c. CVE-2022-0562 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2. CVE-2022-0617 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. CVE-2022-0644 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc). CVE-2022-0778 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libopenssl1_1-1.1.1d-11.43.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:openssl-1_1-1.1.1d-11.43.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system. CVE-2022-0847 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace. CVE-2022-0850 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space. CVE-2022-0854 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045. CVE-2022-0865 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27666. Reason: This candidate is a reservation duplicate of CVE-2022-27666. Notes: All CVE users should reference CVE-2022-27666 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-2022-0886 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact CVE-2022-0891 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 important 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file. CVE-2022-0908 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa. CVE-2022-0909 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4. CVE-2022-0924 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker. CVE-2022-1016 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-1048 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 CVE-2022-1055 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd. CVE-2022-1056 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P <code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8. CVE-2022-1097 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libfreebl3-3.68.3-150000.3.67.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsoftokn3-3.68.3-150000.3.67.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:mozilla-nss-3.68.3-150000.3.67.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:mozilla-nss-certs-3.68.3-150000.3.67.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:mozilla-nss-tools-3.68.3-150000.3.67.1 important A format string vulnerability was found in libinput CVE-2022-1215 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libinput10-1.10.5-150000.3.3.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system. CVE-2022-1271 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gzip-1.1-150200.10.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:liblzma5-5.2.3-150000.4.7.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:xz-5.2.3-150000.4.7.1 important An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. CVE-2022-1304 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:e2fsprogs-1.43.8-150000.4.33.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libcom_err2-1.43.8-150000.4.33.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libext2fs2-1.43.8-150000.4.33.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT. CVE-2022-1586 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libpcre2-16-0-10.31-150000.3.7.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libpcre2-8-0-10.31-150000.3.7.1 important 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2022-21271 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). CVE-2022-21282 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2022-21283 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2022-21293 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2022-21299 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N). CVE-2022-21305 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2022-21341 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2022-21360 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2022-21366 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only). CVE-2022-22576 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:curl-7.66.0-150200.4.33.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libcurl4-7.66.0-150200.4.33.1 moderate 5.5 AV:N/AC:L/Au:S/C:P/I:P/A:N storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. CVE-2022-22827 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:expat-2.2.5-3.19.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libexpat1-2.2.5-3.19.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field. CVE-2022-22844 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libtiff5-4.0.9-150000.45.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. CVE-2022-22942 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm (p2m_remove_mapping, guest_physmap_remove_page, and p2m_set_entry with mfn set to INVALID_MFN) do not actually clear the pagetable entry if the entry doesn't have the valid bit set. It is possible to have a valid pagetable entry without the valid bit set when a guest operating system uses set/way cache maintenance instructions. For instance, a guest issuing a set/way cache maintenance instruction, then calling the XENMEM_decrease_reservation hypercall to give back memory pages to Xen, might be able to retain access to those pages even after Xen started reusing them for other purposes. CVE-2022-23033 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:xen-libs-4.13.4_08-150200.3.50.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check. CVE-2022-23034 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:xen-libs-4.13.4_08-150200.3.50.1 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time this cleanup gets invoked, the cleanup attempt may be scheduled to be retried. When multiple interrupts are involved, this scheduling of a retry may get erroneously skipped. At the same time pointers may get cleared (resulting in a de-reference of NULL) and freed (resulting in a use-after-free), while other code would continue to assume them to be valid. CVE-2022-23035 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:xen-libs-4.13.4_08-150200.3.50.1 moderate 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042 CVE-2022-23036 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042 CVE-2022-23037 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042 CVE-2022-23038 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042 CVE-2022-23039 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042 CVE-2022-23040 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042 CVE-2022-23041 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042 CVE-2022-23042 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution. CVE-2022-23218 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-i18ndata-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-locale-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-locale-base-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:nscd-2.26-13.65.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution. CVE-2022-23219 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-i18ndata-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-locale-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:glibc-locale-base-2.26-13.65.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:nscd-2.26-13.65.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. CVE-2022-23308 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libxml2-2-2.9.7-150000.3.46.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Puma is a Ruby/Rack web server built for parallelism. Prior to `puma` version `5.6.2`, `puma` may not always call `close` on the response body. Rails, prior to version `7.0.2.2`, depended on the response body being closed in order for its `CurrentAttributes` implementation to work correctly. The combination of these two behaviors (Puma not closing the body + Rails' Executor implementation) causes information leakage. This problem is fixed in Puma versions 5.6.2 and 4.3.11. This problem is fixed in Rails versions 7.02.2, 6.1.4.6, 6.0.4.6, and 5.2.6.2. Upgrading to a patched Rails _or_ Puma version fixes the vulnerability. CVE-2022-23634 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ruby2.5-rubygem-puma-4.3.11-150000.3.6.2 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue. CVE-2022-23648 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:containerd-1.5.11-150000.68.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES. CVE-2022-23852 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:expat-2.2.5-3.19.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libexpat1-2.2.5-3.19.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory. CVE-2022-23853 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5Core5-5.12.7-4.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5DBus5-5.12.7-4.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5Gui5-5.12.7-4.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5Network5-5.12.7-4.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5Widgets5-5.12.7-4.17.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:expat-2.2.5-3.19.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libexpat1-2.2.5-3.19.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. CVE-2022-24407 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cyrus-sasl-2.1.26-5.10.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cyrus-sasl-digestmd5-2.1.26-5.10.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cyrus-sasl-gssapi-2.1.26-5.10.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cyrus-sasl-plain-2.1.26-5.10.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cyrus-sasl-saslauthd-2.1.26-5.10.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libsasl2-3-2.1.26-5.10.1 important 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor. CVE-2022-24448 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 20.10.14 where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during `execve(2)`. Normally, when executable programs have specified permitted file capabilities, otherwise unprivileged users and processes can execute those programs and gain the specified file capabilities up to the bounding set. Due to this bug, containers which included executable programs with inheritable file capabilities allowed otherwise unprivileged users and processes to additionally gain these inheritable file capabilities up to the container's bounding set. Containers which use Linux users and groups to perform privilege separation inside the container are most directly impacted. This bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container's bounding set. This bug has been fixed in Moby (Docker Engine) 20.10.14. Running containers should be stopped, deleted, and recreated for the inheritable capabilities to be reset. This fix changes Moby (Docker Engine) behavior such that containers are started with a more typical Linux environment. As a workaround, the entry point of a container can be modified to use a utility like `capsh(1)` to drop inheritable capabilities prior to the primary process starting. CVE-2022-24769 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:containerd-1.5.11-150000.68.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:docker-20.10.14_ce-150000.163.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code execution. But there may still be a slight chance for experts to do that. The bug occurs when the octet count is read. While there is a check for the maximum number of octets, digits are written to a heap buffer even when the octet count is over the maximum, This can be used to overrun the memory buffer. However, once the sequence of digits stop, no additional characters can be added to the buffer. In our opinion, this makes remote exploits impossible or at least highly complex. Octet-counted framing is one of two potential framing modes. It is relatively uncommon, but enabled by default on receivers. Modules `imtcp`, `imptcp`, `imgssapi`, and `imhttp` are used for regular syslog message reception. It is best practice not to directly expose them to the public. When this practice is followed, the risk is considerably lower. Module `imdiag` is a diagnostics module primarily intended for testbench runs. We do not expect it to be present on any production installation. Octet-counted framing is not very common. Usually, it needs to be specifically enabled at senders. If users do not need it, they can turn it off for the most important modules. This will mitigate the vulnerability. CVE-2022-24903 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:rsyslog-8.2106.0-150200.4.26.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release. CVE-2022-24958 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c. CVE-2022-24959 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. CVE-2022-25235 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:expat-2.2.5-3.19.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libexpat1-2.2.5-3.19.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs. CVE-2022-25236 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:expat-2.2.5-3.19.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libexpat1-2.2.5-3.19.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH. CVE-2022-25255 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5Core5-5.12.7-4.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5DBus5-5.12.7-4.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5Gui5-5.12.7-4.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5Network5-5.12.7-4.17.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libQt5Widgets5-5.12.7-4.17.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NULL function pointer retrieval). Memory corruption might occur. CVE-2022-25258 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. CVE-2022-25308 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libfribidi0-1.0.5-150200.3.6.1 moderate A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service. CVE-2022-25309 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libfribidi0-1.0.5-150200.3.6.1 moderate A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service. CVE-2022-25310 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libfribidi0-1.0.5-150200.3.6.1 moderate In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element. CVE-2022-25313 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:expat-2.2.5-3.19.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libexpat1-2.2.5-3.19.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. CVE-2022-25314 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:expat-2.2.5-3.19.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libexpat1-2.2.5-3.19.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. CVE-2022-25315 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:expat-2.2.5-3.19.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libexpat1-2.2.5-3.19.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory. CVE-2022-25375 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram (was named HVMOP_track_dirty_vram before Xen 4.9) is racy with ongoing log dirty hypercalls. A suitably timed call to XEN_DMOP_track_dirty_vram can enable log dirty while another CPU is still in the process of tearing down the structures related to a previously enabled log dirty mode (XEN_DOMCTL_SHADOW_OP_OFF). This is due to lack of mutually exclusive locking between both operations and can lead to entries being added in already freed slots, resulting in a memory leak. CVE-2022-26356 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:xen-libs-4.13.4_08-150200.3.50.1 moderate 4 AV:L/AC:H/Au:N/C:N/I:N/A:C race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed. CVE-2022-26357 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:xen-libs-4.13.4_08-150200.3.50.1 moderate 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with such a region is active, the mappings of these regions need to remain continuouly accessible by the device. This requirement has been violated. Subsequent DMA or interrupts from the device may have unpredictable behaviour, ranging from IOMMU faults to memory corruption. CVE-2022-26358 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:xen-libs-4.13.4_08-150200.3.50.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with such a region is active, the mappings of these regions need to remain continuouly accessible by the device. This requirement has been violated. Subsequent DMA or interrupts from the device may have unpredictable behaviour, ranging from IOMMU faults to memory corruption. CVE-2022-26360 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:xen-libs-4.13.4_08-150200.3.50.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters. CVE-2022-26490 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges. CVE-2022-26691 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cups-config-2.2.7-150000.3.32.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libcups2-2.2.7-150000.3.32.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device. CVE-2022-26966 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges. CVE-2022-27239 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cifs-utils-6.9-150100.5.15.1 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead. CVE-2022-27775 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:curl-7.66.0-150200.4.33.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libcurl4-7.66.0-150200.4.33.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number. CVE-2022-27776 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:curl-7.66.0-150200.4.33.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libcurl4-7.66.0-150200.4.33.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation. CVE-2022-27781 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:curl-7.66.0-150200.4.33.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libcurl4-7.66.0-150200.4.33.1 low 5 AV:N/AC:L/Au:N/C:N/I:N/A:P libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily. CVE-2022-27782 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:curl-7.66.0-150200.4.33.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libcurl4-7.66.0-150200.4.33.1 important 5 AV:N/AC:L/Au:N/C:N/I:P/A:N usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free. CVE-2022-28388 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free. CVE-2022-28389 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. CVE-2022-28390 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:cluster-md-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:dlm-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:gfs2-kmp-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:kernel-default-5.3.18-150200.24.112.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:ocfs2-kmp-default-5.3.18-150200.24.112.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. CVE-2022-28739 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping. CVE-2022-29155 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libldap-2_4-2-2.4.46-150200.14.8.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libldap-data-2.4.46-150200.14.8.1 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:openldap2-client-2.4.46-150200.14.8.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well. CVE-2022-29824 Public Cloud Image google/sles-15-sp2-sap-v20220602-x86-64:libxml2-2-2.9.7-150000.3.46.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P