Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2023.3669
Security update for the Linux Kernel
28 June 2023
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Linux Kernel
Publisher: SUSE
Operating System: SUSE
Resolution: Patch/Upgrade
CVE Names: CVE-2023-33288 CVE-2023-32269 CVE-2023-32233
CVE-2023-31436 CVE-2023-31084 CVE-2023-23586
CVE-2023-2513 CVE-2023-2483 CVE-2023-2194
CVE-2023-2124 CVE-2023-1637 CVE-2023-1380
CVE-2023-1079 CVE-2022-45919 CVE-2022-45887
CVE-2022-45886 CVE-2022-45885 CVE-2022-45884
CVE-2022-4269 CVE-2022-3566 CVE-2021-29650
CVE-2020-36694
Original Bulletin:
https://www.suse.com/support/update/announcement/2023/suse-su-20232651-1
Comment: CVSS (Max): 7.8 CVE-2023-32233 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS Source: SUSE
Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- --------------------------BEGIN INCLUDED TEXT--------------------
Security update for the Linux Kernel
Announcement ID: SUSE-SU-2023:2651-1
Rating: important
o #1172073
o #1184208
o #1191731
o #1199046
o #1204405
o #1205756
o #1205758
o #1205760
o #1205762
o #1205803
o #1206024
o #1208474
o #1208604
o #1209287
o #1209779
o #1210498
References: o #1210715
o #1210783
o #1210791
o #1210940
o #1211037
o #1211043
o #1211089
o #1211105
o #1211186
o #1211187
o #1211260
o #1211590
o #1211592
o #1211596
o #1211622
o #1211796
o CVE-2020-36694
o CVE-2021-29650
o CVE-2022-3566
o CVE-2022-4269
o CVE-2022-45884
o CVE-2022-45885
o CVE-2022-45886
o CVE-2022-45887
o CVE-2022-45919
o CVE-2023-1079
o CVE-2023-1380
Cross-References: o CVE-2023-1637
o CVE-2023-2124
o CVE-2023-2194
o CVE-2023-23586
o CVE-2023-2483
o CVE-2023-2513
o CVE-2023-31084
o CVE-2023-31436
o CVE-2023-32233
o CVE-2023-32269
o CVE-2023-33288
o CVE-2020-36694 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N
/S:U/C:L/I:L/A:H
o CVE-2020-36694 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/
S:U/C:H/I:H/A:H
o CVE-2021-29650 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N
/S:U/C:N/I:N/A:H
o CVE-2021-29650 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:N/I:N/A:H
o CVE-2022-3566 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/
S:U/C:N/I:N/A:H
o CVE-2022-3566 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2022-4269 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:N/I:N/A:H
o CVE-2022-4269 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:N/I:N/A:H
o CVE-2022-45884 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N
/S:U/C:N/I:N/A:H
o CVE-2022-45884 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2022-45885 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N
/S:U/C:N/I:N/A:H
o CVE-2022-45885 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2022-45886 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N
/S:U/C:N/I:N/A:H
o CVE-2022-45886 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2022-45887 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N
/S:U/C:N/I:N/A:H
o CVE-2022-45887 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/
S:U/C:N/I:N/A:H
o CVE-2022-45919 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N
/S:U/C:H/I:H/A:H
o CVE-2022-45919 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-1079 ( SUSE ): 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-1079 ( NVD ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-1380 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:L/I:N/A:N
o CVE-2023-1380 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
CVSS scores: S:U/C:H/I:N/A:H
o CVE-2023-1637 ( SUSE ): 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/
S:U/C:L/I:L/A:L
o CVE-2023-1637 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:H/I:N/A:N
o CVE-2023-2124 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-2124 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-2194 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:N/I:H/A:L
o CVE-2023-2194 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-23586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N
/S:U/C:H/I:N/A:N
o CVE-2023-23586 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:H/I:N/A:N
o CVE-2023-2483 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-2513 ( SUSE ): 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-2513 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-31084 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N
/S:U/C:N/I:N/A:H
o CVE-2023-31084 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:N/I:N/A:H
o CVE-2023-31436 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N
/S:U/C:H/I:H/A:H
o CVE-2023-31436 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-32233 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N
/S:U/C:H/I:H/A:H
o CVE-2023-32233 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-32269 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N
/S:U/C:N/I:N/A:H
o CVE-2023-32269 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/
S:U/C:H/I:H/A:H
o CVE-2023-33288 ( SUSE ): 4.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:N
/S:U/C:N/I:L/A:H
o CVE-2023-33288 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/
S:U/C:N/I:N/A:H
o SUSE Enterprise Storage 7
o SUSE Linux Enterprise High Availability Extension 15 SP2
o SUSE Linux Enterprise High Performance Computing 15 SP2
o SUSE Linux Enterprise High Performance Computing 15 SP2
LTSS 15-SP2
o SUSE Linux Enterprise Live Patching 15-SP2
Affected o SUSE Linux Enterprise Server 15 SP2
Products: o SUSE Linux Enterprise Server 15 SP2 Business Critical
Linux 15-SP2
o SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2
o SUSE Linux Enterprise Server for SAP Applications 15 SP2
o SUSE Manager Proxy 4.1
o SUSE Manager Retail Branch Server 4.1
o SUSE Manager Server 4.1
An update that solves 22 vulnerabilities and has 10 fixes can now be installed.
Description:
The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various
security and bugfixes.
The following security bugs were fixed:
o CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access
to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
o CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405).
o CVE-2021-29650: Fixed an issue where the netfilter subsystem allowed
attackers to cause a denial of service (bsc#1184208).
o CVE-2020-36694: Fixed an use-after-free issue in netfilter in the packet
processing context (bsc#1211596).
o CVE-2023-1079: Fixed a use-after-free problem that could have been
triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious
USB device (bsc#1208604).
o CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/
supply/bq24190_charger.c (bsc#1211590).
o CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition
in dvb_net.c that lead to a use-after-free (bsc#1205760).
o CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a
use-after-free when a device is disconnected (bsc#1205758).
o CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a
dvb_frontend_detach call (bsc#1205762).
o CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur
if there is a disconnect after an open, because of the lack of a wait_event
(bsc#1205803).
o CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to
dvb_register_device dynamically allocating fops (bsc#1205756).
o CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/
dvb_frontend.c (bsc#1210783).
o CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because
lmax can exceed QFQ_MIN_LMAX (bsc#1210940 bsc#1211260).
o CVE-2023-2194: Fixed an out-of-bounds write vulnerability in the SLIMpro
I2C device driver (bsc#1210715).
o CVE-2023-32269: Fixed a use-after-free in af_netrom.c, related to the fact
that accept() was also allowed for a successfully connected AF_NETROM
socket (bsc#1211186).
o CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when
processing batch requests (bsc#1211043).
o CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC)
subsystem (bsc#1206024).
o CVE-2023-1380: Fixed a slab-out-of-bound read problem in
brcmf_get_assoc_ies() (bsc#1209287).
o CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem
(bsc#1211105).
o CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race
condition (bsc#1211037).
o CVE-2023-23586: Fixed a memory information leak in the io_uring subsystem
(bsc#1208474).
o CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could
have lead to denial-of-service or potentially privilege escalation (bsc#
1210498).
The following non-security bugs were fixed:
o Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
o Fix usrmerge error (boo#1211796)
o ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
o kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
o kernel-source: Remove unused macro variant_symbols
o kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate
obsoletes correctly (boo#1172073 bsc#1191731).
o rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB
o rpm/kernel-binary.spec.in: Fix missing kernel-preempt-devel and KMP
Provides (bsc#1199046)
o scsi: storvsc: Parameterize number hardware queues (bsc#1211622).
o usrmerge: Compatibility with earlier rpm (boo#1211796)
Special Instructions and Notes:
o Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Important update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE Linux Enterprise High Availability Extension 15 SP2
zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2023-2651=1
o SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2
zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-2651=1
o SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2
zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-2651=1
o SUSE Linux Enterprise Server for SAP Applications 15 SP2
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-2651=1
o SUSE Enterprise Storage 7
zypper in -t patch SUSE-Storage-7-2023-2651=1
o SUSE Linux Enterprise Live Patching 15-SP2
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2023-2651=1
Package List:
o SUSE Linux Enterprise High Availability Extension 15 SP2 (aarch64 ppc64le
s390x x86_64)
cluster-md-kmp-default-5.3.18-150200.24.154.1
gfs2-kmp-default-5.3.18-150200.24.154.1
ocfs2-kmp-default-5.3.18-150200.24.154.1
cluster-md-kmp-default-debuginfo-5.3.18-150200.24.154.1
dlm-kmp-default-debuginfo-5.3.18-150200.24.154.1
gfs2-kmp-default-debuginfo-5.3.18-150200.24.154.1
kernel-default-debuginfo-5.3.18-150200.24.154.1
ocfs2-kmp-default-debuginfo-5.3.18-150200.24.154.1
dlm-kmp-default-5.3.18-150200.24.154.1
kernel-default-debugsource-5.3.18-150200.24.154.1
o SUSE Linux Enterprise High Availability Extension 15 SP2 (nosrc)
kernel-default-5.3.18-150200.24.154.1
o SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2
(aarch64 nosrc x86_64)
kernel-preempt-5.3.18-150200.24.154.1
kernel-default-5.3.18-150200.24.154.1
o SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2
(aarch64 x86_64)
kernel-obs-build-5.3.18-150200.24.154.1
kernel-preempt-debugsource-5.3.18-150200.24.154.1
kernel-default-devel-debuginfo-5.3.18-150200.24.154.1
kernel-syms-5.3.18-150200.24.154.1
kernel-default-debuginfo-5.3.18-150200.24.154.1
kernel-obs-build-debugsource-5.3.18-150200.24.154.1
kernel-default-devel-5.3.18-150200.24.154.1
kernel-default-base-5.3.18-150200.24.154.1.150200.9.75.1
kernel-preempt-devel-5.3.18-150200.24.154.1
kernel-preempt-debuginfo-5.3.18-150200.24.154.1
kernel-preempt-devel-debuginfo-5.3.18-150200.24.154.1
kernel-default-debugsource-5.3.18-150200.24.154.1
o SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2
(noarch)
kernel-macros-5.3.18-150200.24.154.1
kernel-source-5.3.18-150200.24.154.1
kernel-devel-5.3.18-150200.24.154.1
o SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch
nosrc)
kernel-docs-5.3.18-150200.24.154.2
o SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x
x86_64 nosrc)
kernel-default-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x
x86_64)
kernel-obs-build-5.3.18-150200.24.154.1
kernel-default-devel-debuginfo-5.3.18-150200.24.154.1
kernel-syms-5.3.18-150200.24.154.1
kernel-default-debuginfo-5.3.18-150200.24.154.1
kernel-obs-build-debugsource-5.3.18-150200.24.154.1
kernel-default-devel-5.3.18-150200.24.154.1
kernel-default-base-5.3.18-150200.24.154.1.150200.9.75.1
reiserfs-kmp-default-5.3.18-150200.24.154.1
reiserfs-kmp-default-debuginfo-5.3.18-150200.24.154.1
kernel-default-debugsource-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch)
kernel-macros-5.3.18-150200.24.154.1
kernel-source-5.3.18-150200.24.154.1
kernel-devel-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch nosrc)
kernel-docs-5.3.18-150200.24.154.2
o SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 nosrc x86_64)
kernel-preempt-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 x86_64)
kernel-preempt-devel-debuginfo-5.3.18-150200.24.154.1
kernel-preempt-devel-5.3.18-150200.24.154.1
kernel-preempt-debugsource-5.3.18-150200.24.154.1
kernel-preempt-debuginfo-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc ppc64le
x86_64)
kernel-default-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)
kernel-obs-build-5.3.18-150200.24.154.1
kernel-default-devel-debuginfo-5.3.18-150200.24.154.1
kernel-syms-5.3.18-150200.24.154.1
kernel-default-debuginfo-5.3.18-150200.24.154.1
kernel-obs-build-debugsource-5.3.18-150200.24.154.1
kernel-default-devel-5.3.18-150200.24.154.1
kernel-default-base-5.3.18-150200.24.154.1.150200.9.75.1
reiserfs-kmp-default-5.3.18-150200.24.154.1
reiserfs-kmp-default-debuginfo-5.3.18-150200.24.154.1
kernel-default-debugsource-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch)
kernel-macros-5.3.18-150200.24.154.1
kernel-source-5.3.18-150200.24.154.1
kernel-devel-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch nosrc)
kernel-docs-5.3.18-150200.24.154.2
o SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc x86_64)
kernel-preempt-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64)
kernel-preempt-devel-debuginfo-5.3.18-150200.24.154.1
kernel-preempt-devel-5.3.18-150200.24.154.1
kernel-preempt-debugsource-5.3.18-150200.24.154.1
kernel-preempt-debuginfo-5.3.18-150200.24.154.1
o SUSE Enterprise Storage 7 (aarch64 nosrc x86_64)
kernel-preempt-5.3.18-150200.24.154.1
kernel-default-5.3.18-150200.24.154.1
o SUSE Enterprise Storage 7 (aarch64 x86_64)
kernel-obs-build-5.3.18-150200.24.154.1
kernel-preempt-debugsource-5.3.18-150200.24.154.1
kernel-default-devel-debuginfo-5.3.18-150200.24.154.1
kernel-syms-5.3.18-150200.24.154.1
kernel-default-debuginfo-5.3.18-150200.24.154.1
kernel-obs-build-debugsource-5.3.18-150200.24.154.1
kernel-default-devel-5.3.18-150200.24.154.1
kernel-default-base-5.3.18-150200.24.154.1.150200.9.75.1
kernel-preempt-devel-5.3.18-150200.24.154.1
kernel-preempt-debuginfo-5.3.18-150200.24.154.1
reiserfs-kmp-default-5.3.18-150200.24.154.1
reiserfs-kmp-default-debuginfo-5.3.18-150200.24.154.1
kernel-preempt-devel-debuginfo-5.3.18-150200.24.154.1
kernel-default-debugsource-5.3.18-150200.24.154.1
o SUSE Enterprise Storage 7 (noarch)
kernel-macros-5.3.18-150200.24.154.1
kernel-source-5.3.18-150200.24.154.1
kernel-devel-5.3.18-150200.24.154.1
o SUSE Enterprise Storage 7 (noarch nosrc)
kernel-docs-5.3.18-150200.24.154.2
o SUSE Linux Enterprise Live Patching 15-SP2 (nosrc)
kernel-default-5.3.18-150200.24.154.1
o SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64)
kernel-livepatch-5_3_18-150200_24_154-default-1-150200.5.3.1
kernel-default-livepatch-devel-5.3.18-150200.24.154.1
kernel-livepatch-5_3_18-150200_24_154-default-debuginfo-1-150200.5.3.1
kernel-default-debuginfo-5.3.18-150200.24.154.1
kernel-default-livepatch-5.3.18-150200.24.154.1
kernel-livepatch-SLE15-SP2_Update_37-debugsource-1-150200.5.3.1
kernel-default-debugsource-5.3.18-150200.24.154.1
References:
o https://www.suse.com/security/cve/CVE-2020-36694.html
o https://www.suse.com/security/cve/CVE-2021-29650.html
o https://www.suse.com/security/cve/CVE-2022-3566.html
o https://www.suse.com/security/cve/CVE-2022-4269.html
o https://www.suse.com/security/cve/CVE-2022-45884.html
o https://www.suse.com/security/cve/CVE-2022-45885.html
o https://www.suse.com/security/cve/CVE-2022-45886.html
o https://www.suse.com/security/cve/CVE-2022-45887.html
o https://www.suse.com/security/cve/CVE-2022-45919.html
o https://www.suse.com/security/cve/CVE-2023-1079.html
o https://www.suse.com/security/cve/CVE-2023-1380.html
o https://www.suse.com/security/cve/CVE-2023-1637.html
o https://www.suse.com/security/cve/CVE-2023-2124.html
o https://www.suse.com/security/cve/CVE-2023-2194.html
o https://www.suse.com/security/cve/CVE-2023-23586.html
o https://www.suse.com/security/cve/CVE-2023-2483.html
o https://www.suse.com/security/cve/CVE-2023-2513.html
o https://www.suse.com/security/cve/CVE-2023-31084.html
o https://www.suse.com/security/cve/CVE-2023-31436.html
o https://www.suse.com/security/cve/CVE-2023-32233.html
o https://www.suse.com/security/cve/CVE-2023-32269.html
o https://www.suse.com/security/cve/CVE-2023-33288.html
o https://bugzilla.suse.com/show_bug.cgiid=1172073
o https://bugzilla.suse.com/show_bug.cgiid=1184208
o https://bugzilla.suse.com/show_bug.cgiid=1191731
o https://bugzilla.suse.com/show_bug.cgiid=1199046
o https://bugzilla.suse.com/show_bug.cgiid=1204405
o https://bugzilla.suse.com/show_bug.cgiid=1205756
o https://bugzilla.suse.com/show_bug.cgiid=1205758
o https://bugzilla.suse.com/show_bug.cgiid=1205760
o https://bugzilla.suse.com/show_bug.cgiid=1205762
o https://bugzilla.suse.com/show_bug.cgiid=1205803
o https://bugzilla.suse.com/show_bug.cgiid=1206024
o https://bugzilla.suse.com/show_bug.cgiid=1208474
o https://bugzilla.suse.com/show_bug.cgiid=1208604
o https://bugzilla.suse.com/show_bug.cgiid=1209287
o https://bugzilla.suse.com/show_bug.cgiid=1209779
o https://bugzilla.suse.com/show_bug.cgiid=1210498
o https://bugzilla.suse.com/show_bug.cgiid=1210715
o https://bugzilla.suse.com/show_bug.cgiid=1210783
o https://bugzilla.suse.com/show_bug.cgiid=1210791
o https://bugzilla.suse.com/show_bug.cgiid=1210940
o https://bugzilla.suse.com/show_bug.cgiid=1211037
o https://bugzilla.suse.com/show_bug.cgiid=1211043
o https://bugzilla.suse.com/show_bug.cgiid=1211089
o https://bugzilla.suse.com/show_bug.cgiid=1211105
o https://bugzilla.suse.com/show_bug.cgiid=1211186
o https://bugzilla.suse.com/show_bug.cgiid=1211187
o https://bugzilla.suse.com/show_bug.cgiid=1211260
o https://bugzilla.suse.com/show_bug.cgiid=1211590
o https://bugzilla.suse.com/show_bug.cgiid=1211592
o https://bugzilla.suse.com/show_bug.cgiid=1211596
o https://bugzilla.suse.com/show_bug.cgiid=1211622
o https://bugzilla.suse.com/show_bug.cgiid=1211796
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: https://auscert.org.au/gpg-key/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=EaPe
-----END PGP SIGNATURE-----