SUSE-SU-2022:4393-1

Details

Description of the patch:

This update for nautilus fixes the following issues:

CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives (bsc#1205418).

Affected Packages

gnome-shell-search-provider-nautilus

SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise Module for Desktop Applications 15 SP3SUSE Linux Enterprise Server 15 SP3

Fixed in:

3.34.3-150200.4.6.1

libnautilus-extension1

SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise Module for Desktop Applications 15 SP3SUSE Linux Enterprise Server 15 SP3

Fixed in:

3.34.3-150200.4.6.1

nautilus

SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise Module for Desktop Applications 15 SP3SUSE Linux Enterprise Server 15 SP3

Fixed in:

3.34.3-150200.4.6.1

nautilus-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise Module for Desktop Applications 15 SP3SUSE Linux Enterprise Server 15 SP3

Fixed in:

3.34.3-150200.4.6.1

nautilus-lang

SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise Module for Desktop Applications 15 SP3SUSE Linux Enterprise Server 15 SP3

Fixed in:

3.34.3-150200.4.6.1

typelib-1_0-Nautilus-3_0

SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise Module for Desktop Applications 15 SP3SUSE Linux Enterprise Server 15 SP3

Fixed in:

3.34.3-150200.4.6.1

libnautilus-extension1-32bit

openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

3.34.3-150200.4.6.1

References

ADVISORY

https://bugzilla.suse.com/1205418

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-December/013210.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-37290/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20224393-1/