<updates>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4081</id>
    <title>Security update for dpkg</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1668782590"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1664" id="CVE-2022-1664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1664" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199944" id="1199944" title="VUL-1: CVE-2022-1664: dpkg: dpkg -- security update" type="bugzilla"/>
    </references>
    <description>This update for dpkg fixes the following issues:

- CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944).
</description>
    <pkglist>
      <collection>
        <package name="update-alternatives" epoch="0" version="1.19.0.4" release="150000.4.4.1" arch="src" src="src/update-alternatives-1.19.0.4-150000.4.4.1.src.rpm">
          <filename>update-alternatives-1.19.0.4-150000.4.4.1.src.rpm</filename>
        </package>
        <package name="update-alternatives" epoch="0" version="1.19.0.4" release="150000.4.4.1" arch="x86_64" src="x86_64/update-alternatives-1.19.0.4-150000.4.4.1.x86_64.rpm">
          <filename>update-alternatives-1.19.0.4-150000.4.4.1.x86_64.rpm</filename>
        </package>
        <package name="update-alternatives" epoch="0" version="1.19.0.4" release="150000.4.4.1" arch="aarch64" src="aarch64/update-alternatives-1.19.0.4-150000.4.4.1.aarch64.rpm">
          <filename>update-alternatives-1.19.0.4-150000.4.4.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4226</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669396630"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204821" id="1204821" title="Release with version 1.0.0 so to not clash with future SUSEConnect ruby releases" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200803" id="1200803" title="'zypper targetos' fails in Autoyast installation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196076" id="1196076" title="SUSE Connect: periodically check status" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200994" id="1200994" title="service suseconnect-keepalive.service  does not recognize a configured proxy." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198625" id="1198625" title="Migration from SLE Micro 5.1 to 5.2 fails if registered to SMT server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203341" id="1203341" title="libsuseconnect update causes core dump" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Fix System-Token support in ruby binding (bsc#1203341)
- Use system-wide proxy settings (bsc#1200994)
- Add timer for SUSEConnect --keepalive (bsc#1196076)
- Added support for the System-Token header
- Add Keepalive command line option
- Print nested zypper errors (bsc#1200803)
- Fix migration json error with SMT (bsc#1198625)
- Packaging adjustments (bsc#1204821)
- Add option to run local scc tests
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.0.0~git0.faee7c196dc1" release="150400.3.7.3" arch="src" src="src/suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.src.rpm">
          <filename>suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.0.0~git0.faee7c196dc1" release="150400.3.7.3" arch="x86_64" src="x86_64/suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.x86_64.rpm">
          <filename>suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.0.0~git0.faee7c196dc1" release="150400.3.7.3" arch="aarch64" src="aarch64/suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.aarch64.rpm">
          <filename>suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4205</id>
    <title>Security update for net-snmp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670932158"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201103" id="1201103" title="VUL-0: CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809, CVE-2022-24810: net-snmp: multiple memory handling issues" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SLE-11203" id="SLE-11203" title="https://jira.suse.com/browse/SLE-11203" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24805" id="CVE-2022-24805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24810" id="CVE-2022-24810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24810" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24806" id="CVE-2022-24806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24809" id="CVE-2022-24809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24808" id="CVE-2022-24808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24808" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24807" id="CVE-2022-24807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24807" type="cve"/>
    </references>
    <description>This update for net-snmp fixes the following issues:

  Updated to version 5.9.3 (bsc#1201103, jsc#SLE-11203):

  - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access.
  - CVE-2022-24809: Fixed a malformed OID in a GET-NEXT to the nsVacmAccessTable that can cause a NULL pointer dereference.
  - CVE-2022-24806: Fixed an improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously.
  - CVE-2022-24807: Fixed a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access.
  - CVE-2022-24808: Fixed a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference.
  - CVE-2022-24810: Fixed a malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.
</description>
    <pkglist>
      <collection>
        <package name="libsnmp40" epoch="0" version="5.9.3" release="150300.15.3.1" arch="x86_64" src="x86_64/libsnmp40-5.9.3-150300.15.3.1.x86_64.rpm">
          <filename>libsnmp40-5.9.3-150300.15.3.1.x86_64.rpm</filename>
        </package>
        <package name="net-snmp" epoch="0" version="5.9.3" release="150300.15.3.1" arch="src" src="src/net-snmp-5.9.3-150300.15.3.1.src.rpm">
          <filename>net-snmp-5.9.3-150300.15.3.1.src.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.3" release="150300.15.3.1" arch="x86_64" src="x86_64/snmp-mibs-5.9.3-150300.15.3.1.x86_64.rpm">
          <filename>snmp-mibs-5.9.3-150300.15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsnmp40" epoch="0" version="5.9.3" release="150300.15.3.1" arch="aarch64" src="aarch64/libsnmp40-5.9.3-150300.15.3.1.aarch64.rpm">
          <filename>libsnmp40-5.9.3-150300.15.3.1.aarch64.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.3" release="150300.15.3.1" arch="aarch64" src="aarch64/snmp-mibs-5.9.3-150300.15.3.1.aarch64.rpm">
          <filename>snmp-mibs-5.9.3-150300.15.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4256</id>
    <title>Recommended update for gcc12</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669635534"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2030" id="PED-2030" title="https://jira.suse.com/browse/PED-2030" type="jira"/>
    </references>
    <description>This update for gcc12 fixes the following issues:

This update ship the GCC 12 compiler suite and its base libraries.

The compiler baselibraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 11 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP3 and SP4, and provided in the &quot;Development Tools&quot; module.

The Go, D and Ada language compiler parts are available unsupported via the
PackageHub repositories.

To use gcc12 compilers use:

- install &quot;gcc12&quot; or &quot;gcc12-c++&quot; or one of the other &quot;gcc12-COMPILER&quot; frontend packages.
- override your Makefile to use CC=gcc12, CXX=g++12 and similar overrides for the other languages.

For a full changelog with all new GCC12 features, check out

	https://gcc.gnu.org/gcc-12/changes.html

</description>
    <pkglist>
      <collection>
        <package name="gcc12" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="src" src="src/gcc12-12.2.1+git416-150000.1.5.1.src.rpm">
          <filename>gcc12-12.2.1+git416-150000.1.5.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="x86_64" src="x86_64/libgcc_s1-12.2.1+git416-150000.1.5.1.x86_64.rpm">
          <filename>libgcc_s1-12.2.1+git416-150000.1.5.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="x86_64" src="x86_64/libstdc++6-12.2.1+git416-150000.1.5.1.x86_64.rpm">
          <filename>libstdc++6-12.2.1+git416-150000.1.5.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="aarch64" src="aarch64/libgcc_s1-12.2.1+git416-150000.1.5.1.aarch64.rpm">
          <filename>libgcc_s1-12.2.1+git416-150000.1.5.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="aarch64" src="aarch64/libstdc++6-12.2.1+git416-150000.1.5.1.aarch64.rpm">
          <filename>libstdc++6-12.2.1+git416-150000.1.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4262</id>
    <title>Recommended update for lvm2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669697146"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203482" id="1203482" title="lvmlockd is not supporting sanlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199074" id="1199074" title="dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le - ref:_00D1igLOd._5005q4wDqx:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203216" id="1203216" title="killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group" type="bugzilla"/>
    </references>
    <description>This update for lvm2 fixes the following issues:

- Fix terminated lvmlockd not clearing/adopting locks, leading to inability to start volume group (bsc#1203216)
- Fix device-mapper rpm package versioning to prevent migration issues (bsc#1199074)
- Fix lvmlockd to support sanlock (bsc#1203482)
</description>
    <pkglist>
      <collection>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="x86_64" src="x86_64/device-mapper-2.03.05_1.02.163-150400.185.1.x86_64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="x86_64" src="x86_64/libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="x86_64" src="x86_64/libdevmapper1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.185.1" arch="x86_64" src="x86_64/liblvm2cmd2_03-2.03.05-150400.185.1.x86_64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.185.1" arch="src" src="src/lvm2-2.03.05-150400.185.1.src.rpm">
          <filename>lvm2-2.03.05-150400.185.1.src.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.185.1" arch="x86_64" src="x86_64/lvm2-2.03.05-150400.185.1.x86_64.rpm">
          <filename>lvm2-2.03.05-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2-device-mapper" epoch="0" version="2.03.05" release="150400.185.1" arch="src" src="src/lvm2-device-mapper-2.03.05-150400.185.1.src.rpm">
          <filename>lvm2-device-mapper-2.03.05-150400.185.1.src.rpm</filename>
        </package>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="aarch64" src="aarch64/device-mapper-2.03.05_1.02.163-150400.185.1.aarch64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="aarch64" src="aarch64/libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="aarch64" src="aarch64/libdevmapper1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.185.1" arch="aarch64" src="aarch64/liblvm2cmd2_03-2.03.05-150400.185.1.aarch64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.185.1" arch="aarch64" src="aarch64/lvm2-2.03.05-150400.185.1.aarch64.rpm">
          <filename>lvm2-2.03.05-150400.185.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4281</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669733223"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188607" id="1188607" title="segfault in Python 3.6 GC module" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18348" id="CVE-2019-18348" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18348" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8492" id="CVE-2020-8492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735" id="CVE-2020-10735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37454" id="CVE-2022-37454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37454" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203125" id="1203125" title="VUL-0: CVE-2020-10735: python27,python,python310,python3,python39,python36: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204577" id="1204577" title="VUL-0: CVE-2022-37454: python,php7,php8: SHA-3 Buffer Overflow" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577)
- CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)

The following non-security bug was fixed:

- Fixed a crash in the garbage collection (bsc#1188607).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.37.2" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.37.2.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.37.2.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.37.2" arch="src" src="src/python3-3.6.15-150300.10.37.2.src.rpm">
          <filename>python3-3.6.15-150300.10.37.2.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.37.2" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.37.2.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.37.2.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.37.2" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.37.2.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.37.2.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.37.2" arch="src" src="src/python3-core-3.6.15-150300.10.37.2.src.rpm">
          <filename>python3-core-3.6.15-150300.10.37.2.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.37.2" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.37.2.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.37.2.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.37.2" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.37.2.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.37.2.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.37.2" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.37.2.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.37.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4312</id>
    <title>Recommended update for tar</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669976305"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203600" id="1203600" title="tar extract fails with Unexpected inconsistency when making directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200657" id="1200657" title="tar-1.34-150000.3.12.1 failed to extract due to race condition in creating directories" type="bugzilla"/>
    </references>
    <description>This update for tar fixes the following issues:

- Fix unexpected inconsistency when making directory (bsc#1203600)
- Update race condition fix (bsc#1200657)
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.34" release="150000.3.22.3" arch="src" src="src/tar-1.34-150000.3.22.3.src.rpm">
          <filename>tar-1.34-150000.3.22.3.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.22.3" arch="x86_64" src="x86_64/tar-1.34-150000.3.22.3.x86_64.rpm">
          <filename>tar-1.34-150000.3.22.3.x86_64.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.22.3" arch="aarch64" src="aarch64/tar-1.34-150000.3.22.3.aarch64.rpm">
          <filename>tar-1.34-150000.3.22.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4153</id>
    <title>Security update for krb5</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669037673"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898" id="CVE-2022-42898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205126" id="1205126" title="VUL-0: EMBARGOED:  CVE-2022-42898: krb5: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems" type="bugzilla"/>
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.3.1" arch="src" src="src/krb5-1.19.2-150400.3.3.1.src.rpm">
          <filename>krb5-1.19.2-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.3.1" arch="x86_64" src="x86_64/krb5-1.19.2-150400.3.3.1.x86_64.rpm">
          <filename>krb5-1.19.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.3.1" arch="aarch64" src="aarch64/krb5-1.19.2-150400.3.3.1.aarch64.rpm">
          <filename>krb5-1.19.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4206</id>
    <title>Security update for pixman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669221327"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44638" id="CVE-2022-44638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44638" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205033" id="1205033" title="VUL-0: CVE-2022-44638: pixman: integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write" type="bugzilla"/>
    </references>
    <description>This update for pixman fixes the following issues:

- CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).
</description>
    <pkglist>
      <collection>
        <package name="libpixman-1-0" epoch="0" version="0.40.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libpixman-1-0-0.40.0-150400.3.3.1.x86_64.rpm">
          <filename>libpixman-1-0-0.40.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="pixman" epoch="0" version="0.40.0" release="150400.3.3.1" arch="src" src="src/pixman-0.40.0-150400.3.3.1.src.rpm">
          <filename>pixman-0.40.0-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libpixman-1-0" epoch="0" version="0.40.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libpixman-1-0-0.40.0-150400.3.3.1.aarch64.rpm">
          <filename>libpixman-1-0-0.40.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4141</id>
    <title>Security update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669019313"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775" id="CVE-2022-3775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601" id="CVE-2022-2601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205178" id="1205178" title="VUL-0: EMBARGOED: CVE-2022-2601: grub2: buffer overflow in grub_font_construct_glyph" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205182" id="1205182" title="VUL-0: EMBARGOED: CVE-2022-3775: grub2: font: Fix an integer underflow in blit_comb()" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
- CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).
    
Other:

- Bump upstream SBAT generation to 3
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.17.1" arch="src" src="src/grub2-2.06-150400.11.17.1.src.rpm">
          <filename>grub2-2.06-150400.11.17.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.17.1" arch="x86_64" src="x86_64/grub2-2.06-150400.11.17.1.x86_64.rpm">
          <filename>grub2-2.06-150400.11.17.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.17.1" arch="aarch64" src="aarch64/grub2-2.06-150400.11.17.1.aarch64.rpm">
          <filename>grub2-2.06-150400.11.17.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4278</id>
    <title>Security update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669733061"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188086" id="1188086" title="&quot;#includedir /etc/sudoers.d&quot; in sudoers file is skipped by supportutils" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197428" id="1197428" title="supportconfig not collecting power management information (supportutils)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203818" id="1203818" title="Some passwords are not censored in supportconfig files." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184689" id="1184689" title="supportconfig reporting bare metal systems as KVM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200330" id="1200330" title="Xorg does not log messages in /var/log/Xorg.[0,1].log" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192252" id="1192252" title="Improve collection of multipath related information with supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202337" id="1202337" title="Supportconfig's updates.txt does not show the system registration status" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192648" id="1192648" title="Request from IBM to add current day's sar data to supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202417" id="1202417" title="Need to include nvmf specific commands/logs in supportconfig (nvme_core/nvmf/Sles)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202269" id="1202269" title="supportconfig does not include expected YaST logs" type="bugzilla"/>
    </references>
    <description>This update for supportutils fixes the following issues:

Security issues fixed:

- Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)

Bug fixes:

- Added lifecycle information
- Fixed KVM virtualization detection on bare metal (bsc#1184689)
- Added logging using journalctl (bsc#1200330)
- Get current sar data before collecting files (bsc#1192648)
- Collects everything in /etc/multipath/ (bsc#1192252)
- Collects power management information in hardware.txt (bsc#1197428)
- Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
- Fixed conf_files and conf_text_files so y2log is gathered (bsc#1202269)
- Update to nvme_info and block_info (bsc#1202417)
- Added includedir directories from /etc/sudoers (bsc#1188086)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.15.1" arch="noarch" src="noarch/supportutils-3.1.21-150300.7.35.15.1.noarch.rpm">
          <filename>supportutils-3.1.21-150300.7.35.15.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.15.1" arch="src" src="src/supportutils-3.1.21-150300.7.35.15.1.src.rpm">
          <filename>supportutils-3.1.21-150300.7.35.15.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4147</id>
    <title>Security update for kubevirt stack</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669022654"/>
    <references/>
    <description>
This update provides rebuilds of the kubevirt containers with up to date base images,
fixing various security issues.
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.7.1" arch="src" src="src/kubevirt-0.54.0-150400.3.7.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.7.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.7.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.7.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.7.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.7.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.7.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4138</id>
    <title>Recommended update for python-msgpack</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1668993707"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203743" id="1203743" title="FTBFS: python-msgpack won't compile on SP5" type="bugzilla"/>
    </references>
    <description>This update for python-msgpack fixes the following issues:

- Fix build failures on SUSE Linux Enterprise 15 Service Pack 5 (bsc#1203743)
</description>
    <pkglist>
      <collection>
        <package name="python-msgpack" epoch="0" version="0.5.6" release="150100.3.3.1" arch="src" src="src/python-msgpack-0.5.6-150100.3.3.1.src.rpm">
          <filename>python-msgpack-0.5.6-150100.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-msgpack" epoch="0" version="0.5.6" release="150100.3.3.1" arch="x86_64" src="x86_64/python3-msgpack-0.5.6-150100.3.3.1.x86_64.rpm">
          <filename>python3-msgpack-0.5.6-150100.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-msgpack" epoch="0" version="0.5.6" release="150100.3.3.1" arch="aarch64" src="aarch64/python3-msgpack-0.5.6-150100.3.3.1.aarch64.rpm">
          <filename>python3-msgpack-0.5.6-150100.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4466</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670994002"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203896" id="1203896" title="kexec fail in selfinstall with secureboot" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

Version update from 9.24.36 to 9.24.43:

- Add example aarch64 integration test for Ubuntu
- Add option '--target-arch' for image info to allow cross architecture dependency solving
- Add support for group id in users setting
- Fix error handling for setfiles policy lookup and ensure the path to run scandir is properly created
- Fix handling of signing_keys in cmdline options
- Fix helper method to detect dracut outfile format
- Fix 'kexec' options setup in kiwi-dump-reboot
- Fix issues with the setfiles SELinux relabel command
- Prefer file based syscall in kexec when possible, needed to support boot on a secure boot enabled system (bsc#1203896)
- Setup SELinux on every system prepare / build
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.56.3" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.56.3.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.56.3.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.56.3" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.56.3" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.56.3" arch="src" src="src/python-kiwi-9.24.43-150100.3.56.3.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.56.3.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.56.3" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.56.3.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.56.3.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.56.3" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.56.3" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4191</id>
    <title>Security update for containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669196195"/>
    <references/>
    <description>
This update rebuilds the current containeried data importer images against
current base images, to fix security issues.
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.7.1" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.7.1.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.7.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.7.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.7.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4328</id>
    <title>Recommended update for audit-secondary</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670325919"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204844" id="1204844" title="&quot;systemctl restart auditd.service&quot; will not reload audit rules" type="bugzilla"/>
    </references>
    <description>This update for audit-secondary fixes the following issues:

- Fix rules not loaded when restarting auditd.service (bsc#1204844)
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/audit-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>audit-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/audit-audispd-plugins-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-secondary" epoch="0" version="3.0.6" release="150400.4.6.1" arch="src" src="src/audit-secondary-3.0.6-150400.4.6.1.src.rpm">
          <filename>audit-secondary-3.0.6-150400.4.6.1.src.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/python3-audit-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>python3-audit-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/system-group-audit-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/audit-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>audit-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/audit-audispd-plugins-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/python3-audit-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>python3-audit-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/system-group-audit-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4214</id>
    <title>Security update for libdb-4_8</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669303095"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174414" id="1174414" title="VUL-1: CVE-2019-2708: libdb-4_5,libdb-4_8: libdb: data store execution leads to partial DoS" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2708" id="CVE-2019-2708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2708" type="cve"/>
    </references>
    <description>This update for libdb-4_8 fixes the following issues:

- CVE-2019-2708: Fixed partial DoS due to data store execution (bsc#1174414).
</description>
    <pkglist>
      <collection>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.6.1" arch="x86_64" src="x86_64/db48-utils-4.8.30-150000.7.6.1.x86_64.rpm">
          <filename>db48-utils-4.8.30-150000.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.6.1" arch="src" src="src/libdb-4_8-4.8.30-150000.7.6.1.src.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.6.1.src.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.6.1" arch="x86_64" src="x86_64/libdb-4_8-4.8.30-150000.7.6.1.x86_64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.6.1" arch="aarch64" src="aarch64/db48-utils-4.8.30-150000.7.6.1.aarch64.rpm">
          <filename>db48-utils-4.8.30-150000.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.6.1" arch="aarch64" src="aarch64/libdb-4_8-4.8.30-150000.7.6.1.aarch64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4259</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669646632"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3970" id="CVE-2022-3970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3970" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3599" id="CVE-2022-3599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3626" id="CVE-2022-3626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3626" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3627" id="CVE-2022-3627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3597" id="CVE-2022-3597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3597" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204643" id="1204643" title="VUL-0: CVE-2022-3599: tiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205392" id="1205392" title="VUL-0: CVE-2022-3970: tiff: unsigned integer overflow in TIFFReadRGBATileExt()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204644" id="1204644" title="VUL-0: CVE-2022-3626: tiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204645" id="1204645" title="VUL-0: CVE-2022-3627: tiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204641" id="1204641" title="VUL-0: CVE-2022-3597: tiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641).
- CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643).
- CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644)
- CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645).
- CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.19.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.19.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.19.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.19.1" arch="src" src="src/tiff-4.0.9-150000.45.19.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.19.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.19.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.19.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4420</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670916345"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203886" id="1203886" title="L3: Exclude with extend function not working as expected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203834" id="1203834" title="files.py:385: RuntimeWarning: line buffering (buffering=1) isn't supported in binary mode, the default buffer size will be used" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203685" id="1203685" title="Amazon EC2 instances using Nitro Hypervisor are not detected as virtual machines with SP4 Clients" type="bugzilla"/>
    </references>
    <description>This update for salt fixes the following issues:

- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/python3-salt-3004-150400.8.17.7.x86_64.rpm">
          <filename>python3-salt-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.17.7" arch="src" src="src/salt-3004-150400.8.17.7.src.rpm">
          <filename>salt-3004-150400.8.17.7.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/salt-3004-150400.8.17.7.x86_64.rpm">
          <filename>salt-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/salt-minion-3004-150400.8.17.7.x86_64.rpm">
          <filename>salt-minion-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/salt-transactional-update-3004-150400.8.17.7.x86_64.rpm">
          <filename>salt-transactional-update-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/python3-salt-3004-150400.8.17.7.aarch64.rpm">
          <filename>python3-salt-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/salt-3004-150400.8.17.7.aarch64.rpm">
          <filename>salt-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/salt-minion-3004-150400.8.17.7.aarch64.rpm">
          <filename>salt-minion-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/salt-transactional-update-3004-150400.8.17.7.aarch64.rpm">
          <filename>salt-transactional-update-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4382</id>
    <title>Recommended update for libnvme</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670554847"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205019" id="1205019" title="[NetApp SLES15 SP4 Bug] nvme connect-all crash due to double free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203163" id="1203163" title="[NetApp SLES15 SP4 RFE] NVMe/FC auto-connect scripts should leverage the config JSON file for connect-all" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200089" id="1200089" title="[NetApp SLES15 SP4 RFE]: New command to display entire NVMe topology" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203204" id="1203204" title="[NetApp SLES15 SP4 Bug] nvme connect-all still relies on discovery.conf even for a target that is TP 8013/8014 compliant" type="bugzilla"/>
    </references>
    <description>This update for libnvme fixes the following issues:

libnvme:

- Fix 'connect-all' failures when handling JSON configuration file (bsc#1205019)

nvme-cli:

- Honor JSON config file in 'connect-all' command (bsc#1203204 bsc#1203163)
- Add 'show-topology' command (bsc#1200089)
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.0" release="150400.3.9.3" arch="src" src="src/libnvme-1.0-150400.3.9.3.src.rpm">
          <filename>libnvme-1.0-150400.3.9.3.src.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.9.3" arch="x86_64" src="x86_64/libnvme1-1.0-150400.3.9.3.x86_64.rpm">
          <filename>libnvme1-1.0-150400.3.9.3.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.9.3" arch="src" src="src/nvme-cli-2.0-150400.3.9.3.src.rpm">
          <filename>nvme-cli-2.0-150400.3.9.3.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.9.3" arch="x86_64" src="x86_64/nvme-cli-2.0-150400.3.9.3.x86_64.rpm">
          <filename>nvme-cli-2.0-150400.3.9.3.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.9.3" arch="aarch64" src="aarch64/libnvme1-1.0-150400.3.9.3.aarch64.rpm">
          <filename>libnvme1-1.0-150400.3.9.3.aarch64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.9.3" arch="aarch64" src="aarch64/nvme-cli-2.0-150400.3.9.3.aarch64.rpm">
          <filename>nvme-cli-2.0-150400.3.9.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4499</id>
    <title>Recommended update for openssh</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671097779"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179465" id="1179465" title="L3: dbus not available when logged over ssh (ssh -X: GTK apps timeout on flatpak initialization)" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- Make ssh connections update their dbus environment (bsc#1179465):
  * Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish 
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.15.4" arch="src" src="src/openssh-8.4p1-150300.3.15.4.src.rpm">
          <filename>openssh-8.4p1-150300.3.15.4.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4383</id>
    <title>Recommended update for iputils</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670554925"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203957" id="1203957" title="[aarch64] ping (iputils): Occasional segfault" type="bugzilla"/>
    </references>
    <description>This update for iputils fixes the following issues:

- Fix occasional memory access violation when using `ping` (bsc#1203957)
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.3.2" arch="src" src="src/iputils-20211215-150400.3.3.2.src.rpm">
          <filename>iputils-20211215-150400.3.3.2.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.3.2" arch="x86_64" src="x86_64/iputils-20211215-150400.3.3.2.x86_64.rpm">
          <filename>iputils-20211215-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.3.2" arch="aarch64" src="aarch64/iputils-20211215-150400.3.3.2.aarch64.rpm">
          <filename>iputils-20211215-150400.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4380</id>
    <title>Feature update for ipset</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670554708"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1116432" id="1116432" title="ipset save -file &lt;filename&gt; produces empty files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1122853" id="1122853" title="ipset error with /etc/services in SLE 15" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2086" id="PED-2086" title="https://jira.suse.com/browse/PED-2086" type="jira"/>
    </references>
    <description>This update for ipset fixes the following issues:

Version update from 6.36 to 7.15 (jsc#PED-2086):

- Update needed to match kernel protocol version
- Fix bug with 'ipset save -file &lt;filename&gt;' that wrongly produced empty files (bsc#1116432)
- A new internal protocol version between the kernel and userspace is used. This is required in order to support two
  new functions and the extendend LIST operation, which makes possible to run ipset in every case entirely over netlink
  without the need to use getsockopt()
- Allow specifying protocols by number
- Enable memory accounting for ipset allocations
- Fix argument parsing buffer overflow in ipset_parse_argv
- Fix parsing the service names for ports
- Fix memory accounting for hash types on resize
- Fix rename concurrency with listing, which can result broken list/save results
- Fix to list/save into file specified by option
- Implement sorting for hash types in the ipset tool
- Limit the maximum range of consecutive elements to add/delete
- Support the '-exist' flag with the destroy command
- For the full list of changes please consult the changelog at https://ipset.netfilter.org/changelog.html
</description>
    <pkglist>
      <collection>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="src" src="src/ipset-7.15-150400.12.3.2.src.rpm">
          <filename>ipset-7.15-150400.12.3.2.src.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="x86_64" src="x86_64/ipset-7.15-150400.12.3.2.x86_64.rpm">
          <filename>ipset-7.15-150400.12.3.2.x86_64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="x86_64" src="x86_64/libipset13-7.15-150400.12.3.2.x86_64.rpm">
          <filename>libipset13-7.15-150400.12.3.2.x86_64.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="s390x" src="s390x/ipset-7.15-150400.12.3.2.s390x.rpm">
          <filename>ipset-7.15-150400.12.3.2.s390x.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="s390x" src="s390x/libipset13-7.15-150400.12.3.2.s390x.rpm">
          <filename>libipset13-7.15-150400.12.3.2.s390x.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="ppc64le" src="ppc64le/ipset-7.15-150400.12.3.2.ppc64le.rpm">
          <filename>ipset-7.15-150400.12.3.2.ppc64le.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="ppc64le" src="ppc64le/libipset13-7.15-150400.12.3.2.ppc64le.rpm">
          <filename>libipset13-7.15-150400.12.3.2.ppc64le.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="aarch64" src="aarch64/ipset-7.15-150400.12.3.2.aarch64.rpm">
          <filename>ipset-7.15-150400.12.3.2.aarch64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="aarch64" src="aarch64/libipset13-7.15-150400.12.3.2.aarch64.rpm">
          <filename>libipset13-7.15-150400.12.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4212</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669301641"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190651" id="1190651" title="FIPS: OpenSSL Provide a service-level indicator" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- FIPS: Mark PBKDF2 with key shorter than 112 bits as non-approved (bsc#1190651)
- FIPS: Consider RSA siggen/sigver with PKCS1 padding also approved (bsc#1190651)
- FIPS: Return the correct indicator for a given EC group order bits (bsc#1190651)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.16.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.16.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4209</id>
    <title>Security update for libarchive</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669221418"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36227" id="CVE-2022-36227" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36227" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205629" id="1205629" title="VUL-0: CVE-2022-36227: libarchive,bsdtar: potential NULL pointer dereference in __archive_write_allocate_filter()" type="bugzilla"/>
    </references>
    <description>This update for libarchive fixes the following issues:

- CVE-2022-36227: Fixed potential NULL pointer dereference in __archive_write_allocate_filter() (bsc#1205629).
</description>
    <pkglist>
      <collection>
        <package name="libarchive" epoch="0" version="3.5.1" release="150400.3.12.1" arch="src" src="src/libarchive-3.5.1-150400.3.12.1.src.rpm">
          <filename>libarchive-3.5.1-150400.3.12.1.src.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.12.1" arch="x86_64" src="x86_64/libarchive13-3.5.1-150400.3.12.1.x86_64.rpm">
          <filename>libarchive13-3.5.1-150400.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.12.1" arch="aarch64" src="aarch64/libarchive13-3.5.1-150400.3.12.1.aarch64.rpm">
          <filename>libarchive13-3.5.1-150400.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4282</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669733470"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203152" id="1203152" title="VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203820" id="1203820" title="VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203272" id="1203272" title="VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203799" id="1203799" title="VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204779" id="1204779" title="VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203796" id="1203796" title="VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203110" id="1203110" title="VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203924" id="1203924" title="VUL-1: CVE-2022-3352: vim: vim: use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203797" id="1203797" title="VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203155" id="1203155" title="VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202962" id="1202962" title="VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203509" id="1203509" title="VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203508" id="1203508" title="VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192478" id="1192478" title="VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203194" id="1203194" title="VUL-1: CVE-2022-3134: vim: use after free in do_tag()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3278" id="CVE-2022-3278" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3278" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3324" id="CVE-2022-3324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3324" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2980" id="CVE-2022-2980" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2980" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3297" id="CVE-2022-3297" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3297" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3235" id="CVE-2022-3235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3235" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3296" id="CVE-2022-3296" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3296" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3099" id="CVE-2022-3099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3928" id="CVE-2021-3928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3134" id="CVE-2022-3134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3134" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3153" id="CVE-2022-3153" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3153" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2982" id="CVE-2022-2982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3352" id="CVE-2022-3352" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3352" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3705" id="CVE-2022-3705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3705" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3037" id="CVE-2022-3037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3037" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3234" id="CVE-2022-3234" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3234" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0814:

- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2022-3234: Fixed heap-based buffer overflow (bsc#1203508).
- CVE-2022-3235: Fixed use-after-free (bsc#1203509).
- CVE-2022-3324: Fixed stack-based buffer overflow (bsc#1203820).
- CVE-2022-3705: Fixed use-after-free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
- CVE-2022-2982: Fixed use-after-free in qf_fill_buffer() (bsc#1203152).
- CVE-2022-3296: Fixed stack out of bounds read in ex_finally() in ex_eval.c (bsc#1203796).
- CVE-2022-3297: Fixed use-after-free in process_next_cpt_value() at insexpand.c (bsc#1203797).
- CVE-2022-3099: Fixed use-after-free in ex_docmd.c (bsc#1203110).
- CVE-2022-3134: Fixed use-after-free in do_tag() (bsc#1203194).
- CVE-2022-3153: Fixed NULL pointer dereference (bsc#1203272).
- CVE-2022-3278: Fixed NULL pointer dereference in eval_next_non_blank() in eval.c (bsc#1203799).
- CVE-2022-3352: Fixed use-after-free (bsc#1203924).
- CVE-2022-2980: Fixed NULL pointer dereference in do_mouse() (bsc#1203155).
- CVE-2022-3037: Fixed use-after-free (bsc#1202962).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="src" src="src/vim-9.0.0814-150000.5.28.1.src.rpm">
          <filename>vim-9.0.0814-150000.5.28.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="noarch" src="noarch/vim-data-common-9.0.0814-150000.5.28.1.noarch.rpm">
          <filename>vim-data-common-9.0.0814-150000.5.28.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="x86_64" src="x86_64/vim-small-9.0.0814-150000.5.28.1.x86_64.rpm">
          <filename>vim-small-9.0.0814-150000.5.28.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="aarch64" src="aarch64/vim-small-9.0.0814-150000.5.28.1.aarch64.rpm">
          <filename>vim-small-9.0.0814-150000.5.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4311</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669975376"/>
    <references>
      <reference href="https://jira.suse.com/browse/SLE-22385" id="SLE-22385" title="https://jira.suse.com/browse/SLE-22385" type="jira"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Include binaries of open-vm-tools for ARM architecture aarch64 in SUSE Linux Enterprise 15 Service Pack 4
  (jsc#SLE-22385)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.1.0" release="150300.21.2" arch="x86_64" src="x86_64/libvmtools0-12.1.0-150300.21.2.x86_64.rpm">
          <filename>libvmtools0-12.1.0-150300.21.2.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.21.2" arch="src" src="src/open-vm-tools-12.1.0-150300.21.2.src.rpm">
          <filename>open-vm-tools-12.1.0-150300.21.2.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.21.2" arch="x86_64" src="x86_64/open-vm-tools-12.1.0-150300.21.2.x86_64.rpm">
          <filename>open-vm-tools-12.1.0-150300.21.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4457</id>
    <title>Security update for libtpms</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670933470"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204556" id="1204556" title="libtpms failing to build on ppc64le" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187767" id="1187767" title="VUL-0: CVE-2021-3623: libtpms: out-of-bounds access when trying to resume the state of the vTPM" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3623" id="CVE-2021-3623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3623" type="cve"/>
    </references>
    <description>This update for libtpms fixes the following issues:

- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)
</description>
    <pkglist>
      <collection>
        <package name="libtpms" epoch="0" version="0.8.2" release="150300.3.6.1" arch="src" src="src/libtpms-0.8.2-150300.3.6.1.src.rpm">
          <filename>libtpms-0.8.2-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.6.1" arch="x86_64" src="x86_64/libtpms0-0.8.2-150300.3.6.1.x86_64.rpm">
          <filename>libtpms0-0.8.2-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.6.1" arch="aarch64" src="aarch64/libtpms0-0.8.2-150300.3.6.1.aarch64.rpm">
          <filename>libtpms0-0.8.2-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4411</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670901727"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3598" id="CVE-2022-3598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3570" id="CVE-2022-3570" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3570" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204642" id="1204642" title="VUL-0: CVE-2022-3598: tiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205422" id="1205422" title="VUL-0: CVE-2022-3570: tiff: libtiff: heap buffer overflows in tiffcrop.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2022-3570: Fixed heap buffer overflows in tiffcrop.c (bsc#1205422).
- CVE-2022-3598: Fixed out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c [bsc#1204642]
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.22.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.22.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.22.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.22.1" arch="src" src="src/tiff-4.0.9-150000.45.22.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.22.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.22.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.22.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4367</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670514999"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205089" id="1205089" title="RMT 2.9 breaks cloud client system registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195925" id="1195925" title="cloud-regionsrv-client needs cert check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191880" id="1191880" title="self signed cert replacement" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195924" id="1195924" title="cloud-regionsrv-client needs cert check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203382" id="1203382" title="AWS Update Infrastructure - No response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206082" id="1206082" title="remove dmidecode dependencies on s390/ppc64_le" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924) 
- Implement functionality to detect if an update server has a new cert. 
Import the new cert when it is detected. 
- From 10.0.6 (bsc#1205089) 
- Credentials are equal when username and password are the same ignore 
other entries in the credentials file 
- Handle multiple zypper names in process table, zypper and Zypp-main 
to properly detect the running process
- Require dmidecode only on supported archs (bsc#1206082)
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.7" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-10.0.7-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-10.0.7-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.7" release="150000.6.83.2" arch="src" src="src/cloud-regionsrv-client-10.0.7-150000.6.83.2.src.rpm">
          <filename>cloud-regionsrv-client-10.0.7-150000.6.83.2.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.83.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4469</id>
    <title>Recommended update for sudo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670994330"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197998" id="1197998" title="sudo maintenance update to sudo-1.8.27-4.18.1 broke LDAP query sudo rules for windbind connected AD user." type="bugzilla"/>
    </references>
    <description>This update for sudo fixes the following issues:

- Change sudo-ldap schema from ASCII to UTF8 to fix a regression introduced in a previous maintenance update
  (bsc#1197998)
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.9.1" arch="src" src="src/sudo-1.9.9-150400.4.9.1.src.rpm">
          <filename>sudo-1.9.9-150400.4.9.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.9.1" arch="x86_64" src="x86_64/sudo-1.9.9-150400.4.9.1.x86_64.rpm">
          <filename>sudo-1.9.9-150400.4.9.1.x86_64.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.9.1" arch="aarch64" src="aarch64/sudo-1.9.9-150400.4.9.1.aarch64.rpm">
          <filename>sudo-1.9.9-150400.4.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4489</id>
    <title>Recommended update for keepalived</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671020914"/>
    <references>
      <reference href="https://jira.suse.com/browse/SLE-11203" id="SLE-11203" title="https://jira.suse.com/browse/SLE-11203" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2086" id="PED-2086" title="https://jira.suse.com/browse/PED-2086" type="jira"/>
    </references>
    <description>
This update of keepalived fixes the following issues:

- rebuild against the new net-snmp (jsc#SLE-11203).
- rebuild against the new libipset (jsc#PED-2086).
</description>
    <pkglist>
      <collection>
        <package name="keepalived" epoch="0" version="2.2.2" release="150400.3.7.2" arch="src" src="src/keepalived-2.2.2-150400.3.7.2.src.rpm">
          <filename>keepalived-2.2.2-150400.3.7.2.src.rpm</filename>
        </package>
        <package name="keepalived" epoch="0" version="2.2.2" release="150400.3.7.2" arch="x86_64" src="x86_64/keepalived-2.2.2-150400.3.7.2.x86_64.rpm">
          <filename>keepalived-2.2.2-150400.3.7.2.x86_64.rpm</filename>
        </package>
        <package name="keepalived" epoch="0" version="2.2.2" release="150400.3.7.2" arch="aarch64" src="aarch64/keepalived-2.2.2-150400.3.7.2.aarch64.rpm">
          <filename>keepalived-2.2.2-150400.3.7.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4463</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670947527"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27191" id="CVE-2022-27191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27191" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23471" id="CVE-2022-23471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23471" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206065" id="1206065" title="[trackerbug] Docker 20.10.21-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197284" id="1197284" title="VUL-0: CVE-2022-27191: docker, containerd, kubernetes, helm, helm3, etcd: crash in a golang.org/x/crypto/ssh server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206235" id="1206235" title="VUL-0: CVE-2022-23471: containerd, kubernetes, kubernetes1.18, kubernetes1.23: host memory exhaustion through Terminal resize goroutine leak" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). 

Also includes the following fix:

- CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).
- CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.12" release="150000.79.1" arch="src" src="src/containerd-1.6.12-150000.79.1.src.rpm">
          <filename>containerd-1.6.12-150000.79.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.12" release="150000.79.1" arch="x86_64" src="x86_64/containerd-1.6.12-150000.79.1.x86_64.rpm">
          <filename>containerd-1.6.12-150000.79.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.12" release="150000.79.1" arch="aarch64" src="aarch64/containerd-1.6.12-150000.79.1.aarch64.rpm">
          <filename>containerd-1.6.12-150000.79.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4492</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671022372"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201298" id="1201298" title="FIPS: NSS uses DSA for shared library integrity checking, mark DSA sigverify as APPROVED, rest as NOT-APPROVED in the SLI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198980" id="1198980" title="FIPS: NSS on-demand integrity tests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191546" id="1191546" title="FIPS: mozilla-nss: service level indicator" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- FIPS: Disapprove the creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)
- FIPS: Allow the use SHA keygen mechs (bsc#1191546).
- FIPS: ensure abort() is called when the repeat integrity check fails (bsc#1198980).
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libfreebl3-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libfreebl3-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libsoftokn3-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libsoftokn3-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.2" release="150400.3.18.1" arch="src" src="src/mozilla-nss-3.79.2-150400.3.18.1.src.rpm">
          <filename>mozilla-nss-3.79.2-150400.3.18.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/mozilla-nss-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>mozilla-nss-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libfreebl3-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libfreebl3-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libsoftokn3-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libsoftokn3-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/mozilla-nss-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>mozilla-nss-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>
