SUSE-CU-2022:2209-1: Security update of suse/sle15

[sle-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle15
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2022:2209-1
Container Tags        : suse/sle15:15.2 , suse/sle15:15.2.9.5.195
Container Release     : 9.5.195
Severity              : important
Type                  : security
References            : 1197178 1198731 1199140 1199895 1200842 1200993 1201092 1201225
                        1201576 1201638 CVE-2022-34903 
-----------------------------------------------------------------

The container suse/sle15 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:3129-1
Released:    Wed Sep  7 04:42:53 2022
Summary:     Recommended update for util-linux
Type:        recommended
Severity:    moderate
References:  1197178,1198731,1200842
This update for util-linux fixes the following issues:

- su: Change owner and mode for pty (bsc#1200842)
- agetty: Resolve tty name even if stdin is specified (bsc#1197178)
- libmount: When moving a mount point, update all sub mount entries in utab (bsc#1198731)
- mesg: use only stat() to get the current terminal status (bsc#1200842)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2022:3144-1
Released:    Wed Sep  7 11:04:23 2022
Summary:     Security update for gpg2
Type:        security
Severity:    important
References:  1201225,CVE-2022-34903
This update for gpg2 fixes the following issues:

- CVE-2022-34903: Fixed a potential signature forgery via injection
  into the status line when certain unusual conditions are met (bsc#1201225).

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:3223-1
Released:    Fri Sep  9 04:33:35 2022
Summary:     Recommended update for libzypp, zypper
Type:        recommended
Severity:    moderate
References:  1199895,1200993,1201092,1201576,1201638
This update for libzypp, zypper fixes the following issues:

libzypp:

- Improve handling of package locks, allowing to reset the status of its initial state (bsc#1199895)
- Fix issues when receiving exceptions from curl_easy_cleanup (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and its dependent code. First reason for this is that MediaNetwork was just meant as a way to test
  the new CURL based downloaded. Second the Provide API is going to completely replace the current media backend.

zypper:

- Truncate the 'Name' column when using `zypper lr`, if the table is wider than the terminal (bsc#1201638)
- Reject install/remove modifier without argument (bsc#1201576)
- zypper-download: Handle unresolvable arguments as errors
- Put signing key supplying repository name in quotes

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2022:3262-1
Released:    Tue Sep 13 15:34:29 2022
Summary:     Recommended update for gcc11
Type:        recommended
Severity:    moderate
References:  1199140

This update for gcc11 ships some missing 32bit libraries for s390x. (bsc#1199140)


The following package changes have been done:

- gpg2-2.2.5-150000.4.22.1 updated
- libblkid1-2.33.2-150100.4.24.1 updated
- libfdisk1-2.33.2-150100.4.24.1 updated
- libgcc_s1-11.3.0+git1637-150000.1.11.2 updated
- libmount1-2.33.2-150100.4.24.1 updated
- libsmartcols1-2.33.2-150100.4.24.1 updated
- libstdc++6-11.3.0+git1637-150000.1.11.2 updated
- libuuid1-2.33.2-150100.4.24.1 updated
- libzypp-17.31.0-150200.42.1 updated
- util-linux-2.33.2-150100.4.24.1 updated
- zypper-1.14.55-150200.36.1 updated