February 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0352-1: moderate: Recommended update for fio
by maintenance＠opensuse.org 27 Feb '21

27 Feb '21

openSUSE Recommended Update: Recommended update for fio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0352-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fio fixes the following issues: - Fixes for several bug fixes and issues. - Added support for NBD and ZBD For a full list of changes, please refer to this rpm's changelog. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-352=1 Package List: - openSUSE Leap 15.2 (x86_64): fio-3.23-lp152.6.3.1 fio-debuginfo-3.23-lp152.6.3.1 fio-debugsource-3.23-lp152.6.3.1 gfio-3.23-lp152.6.3.1 gfio-debuginfo-3.23-lp152.6.3.1 References:

1 0

openSUSE-RU-2021:0351-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 27 Feb '21

27 Feb '21

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0351-1 Rating: moderate References: #1176171 #1180336 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - arm/arm64: Add reset controllers (bsc#1180336) - Prevent creating unexpected files on the host when running dracut (bsc#1176171) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-351=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-049.1+suse.185.g9324648a-lp152.2.18.1 dracut-debuginfo-049.1+suse.185.g9324648a-lp152.2.18.1 dracut-debugsource-049.1+suse.185.g9324648a-lp152.2.18.1 dracut-extra-049.1+suse.185.g9324648a-lp152.2.18.1 dracut-fips-049.1+suse.185.g9324648a-lp152.2.18.1 dracut-ima-049.1+suse.185.g9324648a-lp152.2.18.1 dracut-tools-049.1+suse.185.g9324648a-lp152.2.18.1 References: https://bugzilla.suse.com/1176171 https://bugzilla.suse.com/1180336

1 0

openSUSE-RU-2021:0353-1: moderate: Recommended update for gcc7
by maintenance＠opensuse.org 27 Feb '21

27 Feb '21

openSUSE Recommended Update: Recommended update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0353-1 Rating: moderate References: #1181618 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gcc7 fixes the following issues: - Fixed webkit2gtk3 build (bsc#1181618) - Change GCC exception licenses to SPDX format - Remove include-fixed/pthread.h This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-353=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): cpp7-7.5.0+r278197-lp152.3.9.1 cpp7-debuginfo-7.5.0+r278197-lp152.3.9.1 gcc7-7.5.0+r278197-lp152.3.9.1 gcc7-ada-7.5.0+r278197-lp152.3.9.1 gcc7-ada-debuginfo-7.5.0+r278197-lp152.3.9.1 gcc7-c++-7.5.0+r278197-lp152.3.9.1 gcc7-c++-debuginfo-7.5.0+r278197-lp152.3.9.1 gcc7-debuginfo-7.5.0+r278197-lp152.3.9.1 gcc7-debugsource-7.5.0+r278197-lp152.3.9.1 gcc7-fortran-7.5.0+r278197-lp152.3.9.1 gcc7-fortran-debuginfo-7.5.0+r278197-lp152.3.9.1 gcc7-go-7.5.0+r278197-lp152.3.9.1 gcc7-go-debuginfo-7.5.0+r278197-lp152.3.9.1 gcc7-locale-7.5.0+r278197-lp152.3.9.1 gcc7-obj-c++-7.5.0+r278197-lp152.3.9.1 gcc7-obj-c++-debuginfo-7.5.0+r278197-lp152.3.9.1 gcc7-objc-7.5.0+r278197-lp152.3.9.1 gcc7-objc-debuginfo-7.5.0+r278197-lp152.3.9.1 libada7-7.5.0+r278197-lp152.3.9.1 libada7-debuginfo-7.5.0+r278197-lp152.3.9.1 libasan4-7.5.0+r278197-lp152.3.9.1 libasan4-debuginfo-7.5.0+r278197-lp152.3.9.1 libcilkrts5-7.5.0+r278197-lp152.3.9.1 libcilkrts5-debuginfo-7.5.0+r278197-lp152.3.9.1 libgfortran4-7.5.0+r278197-lp152.3.9.1 libgfortran4-debuginfo-7.5.0+r278197-lp152.3.9.1 libgo11-7.5.0+r278197-lp152.3.9.1 libgo11-debuginfo-7.5.0+r278197-lp152.3.9.1 libstdc++6-devel-gcc7-7.5.0+r278197-lp152.3.9.1 libubsan0-7.5.0+r278197-lp152.3.9.1 libubsan0-debuginfo-7.5.0+r278197-lp152.3.9.1 - openSUSE Leap 15.2 (x86_64): gcc7-32bit-7.5.0+r278197-lp152.3.9.1 gcc7-ada-32bit-7.5.0+r278197-lp152.3.9.1 gcc7-c++-32bit-7.5.0+r278197-lp152.3.9.1 gcc7-fortran-32bit-7.5.0+r278197-lp152.3.9.1 gcc7-go-32bit-7.5.0+r278197-lp152.3.9.1 gcc7-obj-c++-32bit-7.5.0+r278197-lp152.3.9.1 gcc7-objc-32bit-7.5.0+r278197-lp152.3.9.1 libada7-32bit-7.5.0+r278197-lp152.3.9.1 libada7-32bit-debuginfo-7.5.0+r278197-lp152.3.9.1 libasan4-32bit-7.5.0+r278197-lp152.3.9.1 libasan4-32bit-debuginfo-7.5.0+r278197-lp152.3.9.1 libcilkrts5-32bit-7.5.0+r278197-lp152.3.9.1 libcilkrts5-32bit-debuginfo-7.5.0+r278197-lp152.3.9.1 libgfortran4-32bit-7.5.0+r278197-lp152.3.9.1 libgfortran4-32bit-debuginfo-7.5.0+r278197-lp152.3.9.1 libgo11-32bit-7.5.0+r278197-lp152.3.9.1 libgo11-32bit-debuginfo-7.5.0+r278197-lp152.3.9.1 libstdc++6-devel-gcc7-32bit-7.5.0+r278197-lp152.3.9.1 libubsan0-32bit-7.5.0+r278197-lp152.3.9.1 libubsan0-32bit-debuginfo-7.5.0+r278197-lp152.3.9.1 - openSUSE Leap 15.2 (noarch): gcc7-info-7.5.0+r278197-lp152.3.9.1 References: https://bugzilla.suse.com/1181618

1 0

openSUSE-SU-2021:0349-1: important: Security update for python-cryptography
by opensuse-security＠opensuse.org 26 Feb '21

26 Feb '21

openSUSE Security Update: Security update for python-cryptography ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0349-1 Rating: important References: #1182066 Cross-References: CVE-2020-36242 CVSS scores: CVE-2020-36242 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2020-36242 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow (bsc#1182066). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-349=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): python-cryptography-debuginfo-2.8-lp152.2.6.1 python-cryptography-debugsource-2.8-lp152.2.6.1 python2-cryptography-2.8-lp152.2.6.1 python2-cryptography-debuginfo-2.8-lp152.2.6.1 python3-cryptography-2.8-lp152.2.6.1 python3-cryptography-debuginfo-2.8-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-36242.html https://bugzilla.suse.com/1182066

1 0

openSUSE-SU-2021:0348-1: moderate: Security update for pcp
by opensuse-security＠opensuse.org 26 Feb '21

26 Feb '21

openSUSE Security Update: Security update for pcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0348-1 Rating: moderate References: #1152533 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for pcp fixes the following issues: - Drop unnecessary %pre/%post recursive chown calls (bsc#1152533) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-348=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpcp-devel-4.3.1-lp152.5.3.1 libpcp3-4.3.1-lp152.5.3.1 libpcp3-debuginfo-4.3.1-lp152.5.3.1 libpcp_gui2-4.3.1-lp152.5.3.1 libpcp_gui2-debuginfo-4.3.1-lp152.5.3.1 libpcp_import1-4.3.1-lp152.5.3.1 libpcp_import1-debuginfo-4.3.1-lp152.5.3.1 libpcp_mmv1-4.3.1-lp152.5.3.1 libpcp_mmv1-debuginfo-4.3.1-lp152.5.3.1 libpcp_trace2-4.3.1-lp152.5.3.1 libpcp_trace2-debuginfo-4.3.1-lp152.5.3.1 libpcp_web1-4.3.1-lp152.5.3.1 libpcp_web1-debuginfo-4.3.1-lp152.5.3.1 pcp-4.3.1-lp152.5.3.1 pcp-conf-4.3.1-lp152.5.3.1 pcp-debuginfo-4.3.1-lp152.5.3.1 pcp-debugsource-4.3.1-lp152.5.3.1 pcp-devel-4.3.1-lp152.5.3.1 pcp-devel-debuginfo-4.3.1-lp152.5.3.1 pcp-export-pcp2elasticsearch-4.3.1-lp152.5.3.1 pcp-export-pcp2graphite-4.3.1-lp152.5.3.1 pcp-export-pcp2influxdb-4.3.1-lp152.5.3.1 pcp-export-pcp2json-4.3.1-lp152.5.3.1 pcp-export-pcp2spark-4.3.1-lp152.5.3.1 pcp-export-pcp2xml-4.3.1-lp152.5.3.1 pcp-export-pcp2zabbix-4.3.1-lp152.5.3.1 pcp-export-zabbix-agent-4.3.1-lp152.5.3.1 pcp-export-zabbix-agent-debuginfo-4.3.1-lp152.5.3.1 pcp-gui-4.3.1-lp152.5.3.1 pcp-gui-debuginfo-4.3.1-lp152.5.3.1 pcp-import-collectl2pcp-4.3.1-lp152.5.3.1 pcp-import-collectl2pcp-debuginfo-4.3.1-lp152.5.3.1 pcp-import-ganglia2pcp-4.3.1-lp152.5.3.1 pcp-import-iostat2pcp-4.3.1-lp152.5.3.1 pcp-import-mrtg2pcp-4.3.1-lp152.5.3.1 pcp-import-sar2pcp-4.3.1-lp152.5.3.1 pcp-manager-4.3.1-lp152.5.3.1 pcp-manager-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-activemq-4.3.1-lp152.5.3.1 pcp-pmda-apache-4.3.1-lp152.5.3.1 pcp-pmda-apache-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-bash-4.3.1-lp152.5.3.1 pcp-pmda-bash-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-bind2-4.3.1-lp152.5.3.1 pcp-pmda-bonding-4.3.1-lp152.5.3.1 pcp-pmda-cifs-4.3.1-lp152.5.3.1 pcp-pmda-cifs-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-cisco-4.3.1-lp152.5.3.1 pcp-pmda-cisco-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-dbping-4.3.1-lp152.5.3.1 pcp-pmda-dm-4.3.1-lp152.5.3.1 pcp-pmda-dm-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-docker-4.3.1-lp152.5.3.1 pcp-pmda-docker-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-ds389-4.3.1-lp152.5.3.1 pcp-pmda-ds389log-4.3.1-lp152.5.3.1 pcp-pmda-elasticsearch-4.3.1-lp152.5.3.1 pcp-pmda-gfs2-4.3.1-lp152.5.3.1 pcp-pmda-gfs2-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-gluster-4.3.1-lp152.5.3.1 pcp-pmda-gpfs-4.3.1-lp152.5.3.1 pcp-pmda-gpsd-4.3.1-lp152.5.3.1 pcp-pmda-haproxy-4.3.1-lp152.5.3.1 pcp-pmda-infiniband-4.3.1-lp152.5.3.1 pcp-pmda-infiniband-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-json-4.3.1-lp152.5.3.1 pcp-pmda-lmsensors-4.3.1-lp152.5.3.1 pcp-pmda-logger-4.3.1-lp152.5.3.1 pcp-pmda-logger-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-lustre-4.3.1-lp152.5.3.1 pcp-pmda-lustrecomm-4.3.1-lp152.5.3.1 pcp-pmda-lustrecomm-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-mailq-4.3.1-lp152.5.3.1 pcp-pmda-mailq-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-memcache-4.3.1-lp152.5.3.1 pcp-pmda-mic-4.3.1-lp152.5.3.1 pcp-pmda-mounts-4.3.1-lp152.5.3.1 pcp-pmda-mounts-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-mysql-4.3.1-lp152.5.3.1 pcp-pmda-named-4.3.1-lp152.5.3.1 pcp-pmda-netfilter-4.3.1-lp152.5.3.1 pcp-pmda-news-4.3.1-lp152.5.3.1 pcp-pmda-nfsclient-4.3.1-lp152.5.3.1 pcp-pmda-nginx-4.3.1-lp152.5.3.1 pcp-pmda-nutcracker-4.3.1-lp152.5.3.1 pcp-pmda-nvidia-gpu-4.3.1-lp152.5.3.1 pcp-pmda-nvidia-gpu-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-oracle-4.3.1-lp152.5.3.1 pcp-pmda-papi-4.3.1-lp152.5.3.1 pcp-pmda-papi-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-pdns-4.3.1-lp152.5.3.1 pcp-pmda-perfevent-4.3.1-lp152.5.3.1 pcp-pmda-perfevent-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-postfix-4.3.1-lp152.5.3.1 pcp-pmda-prometheus-4.3.1-lp152.5.3.1 pcp-pmda-redis-4.3.1-lp152.5.3.1 pcp-pmda-roomtemp-4.3.1-lp152.5.3.1 pcp-pmda-roomtemp-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-rpm-4.3.1-lp152.5.3.1 pcp-pmda-rpm-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-rsyslog-4.3.1-lp152.5.3.1 pcp-pmda-samba-4.3.1-lp152.5.3.1 pcp-pmda-sendmail-4.3.1-lp152.5.3.1 pcp-pmda-sendmail-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-shping-4.3.1-lp152.5.3.1 pcp-pmda-shping-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-slurm-4.3.1-lp152.5.3.1 pcp-pmda-smart-4.3.1-lp152.5.3.1 pcp-pmda-smart-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-snmp-4.3.1-lp152.5.3.1 pcp-pmda-summary-4.3.1-lp152.5.3.1 pcp-pmda-summary-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-systemd-4.3.1-lp152.5.3.1 pcp-pmda-systemd-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-trace-4.3.1-lp152.5.3.1 pcp-pmda-trace-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-unbound-4.3.1-lp152.5.3.1 pcp-pmda-vmware-4.3.1-lp152.5.3.1 pcp-pmda-weblog-4.3.1-lp152.5.3.1 pcp-pmda-weblog-debuginfo-4.3.1-lp152.5.3.1 pcp-pmda-zimbra-4.3.1-lp152.5.3.1 pcp-pmda-zswap-4.3.1-lp152.5.3.1 pcp-system-tools-4.3.1-lp152.5.3.1 pcp-system-tools-debuginfo-4.3.1-lp152.5.3.1 pcp-testsuite-4.3.1-lp152.5.3.1 pcp-testsuite-debuginfo-4.3.1-lp152.5.3.1 pcp-webapi-4.3.1-lp152.5.3.1 pcp-webapi-debuginfo-4.3.1-lp152.5.3.1 pcp-zeroconf-4.3.1-lp152.5.3.1 perl-PCP-LogImport-4.3.1-lp152.5.3.1 perl-PCP-LogImport-debuginfo-4.3.1-lp152.5.3.1 perl-PCP-LogSummary-4.3.1-lp152.5.3.1 perl-PCP-MMV-4.3.1-lp152.5.3.1 perl-PCP-MMV-debuginfo-4.3.1-lp152.5.3.1 perl-PCP-PMDA-4.3.1-lp152.5.3.1 perl-PCP-PMDA-debuginfo-4.3.1-lp152.5.3.1 python3-pcp-4.3.1-lp152.5.3.1 python3-pcp-debuginfo-4.3.1-lp152.5.3.1 - openSUSE Leap 15.2 (noarch): pcp-doc-4.3.1-lp152.5.3.1 References: https://bugzilla.suse.com/1152533

1 0

openSUSE-SU-2021:0347-1: critical: Security update for salt
by opensuse-security＠opensuse.org 26 Feb '21

26 Feb '21

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0347-1 Rating: critical References: #1181550 #1181556 #1181557 #1181558 #1181559 #1181560 #1181561 #1181562 #1181563 #1181564 #1181565 #1182740 Cross-References: CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-25281 CVE-2021-25282 CVE-2021-25283 CVE-2021-25284 CVE-2021-3144 CVE-2021-3148 CVE-2021-3197 CVSS scores: CVE-2020-28243 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-28972 (SUSE): 7.3 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2020-35662 (SUSE): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L CVE-2021-25281 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-25282 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-25283 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-25284 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-3144 (SUSE): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2021-3148 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-3197 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has two fixes is now available. Description: This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow `extra_filerefs` as sanitized `kwargs` for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197) (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560) (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565) - virt: search for `grub.xen` path - Xen spicevmc, DNS SRV records backports: - Fix virtual network generated DNS XML for SRV records - Don't add spicevmc channel to xen VMs - virt UEFI fix: virt.update when `efi=True` This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-347=1 Package List: - openSUSE Leap 15.2 (noarch): salt-bash-completion-3000-lp152.3.27.1 salt-fish-completion-3000-lp152.3.27.1 salt-zsh-completion-3000-lp152.3.27.1 - openSUSE Leap 15.2 (x86_64): python2-salt-3000-lp152.3.27.1 python3-salt-3000-lp152.3.27.1 salt-3000-lp152.3.27.1 salt-api-3000-lp152.3.27.1 salt-cloud-3000-lp152.3.27.1 salt-doc-3000-lp152.3.27.1 salt-master-3000-lp152.3.27.1 salt-minion-3000-lp152.3.27.1 salt-proxy-3000-lp152.3.27.1 salt-ssh-3000-lp152.3.27.1 salt-standalone-formulas-configuration-3000-lp152.3.27.1 salt-syndic-3000-lp152.3.27.1 References: https://www.suse.com/security/cve/CVE-2020-28243.html https://www.suse.com/security/cve/CVE-2020-28972.html https://www.suse.com/security/cve/CVE-2020-35662.html https://www.suse.com/security/cve/CVE-2021-25281.html https://www.suse.com/security/cve/CVE-2021-25282.html https://www.suse.com/security/cve/CVE-2021-25283.html https://www.suse.com/security/cve/CVE-2021-25284.html https://www.suse.com/security/cve/CVE-2021-3144.html https://www.suse.com/security/cve/CVE-2021-3148.html https://www.suse.com/security/cve/CVE-2021-3197.html https://bugzilla.suse.com/1181550 https://bugzilla.suse.com/1181556 https://bugzilla.suse.com/1181557 https://bugzilla.suse.com/1181558 https://bugzilla.suse.com/1181559 https://bugzilla.suse.com/1181560 https://bugzilla.suse.com/1181561 https://bugzilla.suse.com/1181562 https://bugzilla.suse.com/1181563 https://bugzilla.suse.com/1181564 https://bugzilla.suse.com/1181565 https://bugzilla.suse.com/1182740

1 0

openSUSE-RU-2021:0346-1: moderate: Recommended update for open-lldp
by maintenance＠opensuse.org 26 Feb '21

26 Feb '21

openSUSE Recommended Update: Recommended update for open-lldp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0346-1 Rating: moderate References: #1175570 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-lldp fixes the following issue: Update to version v1.0.1+65.f3b70663b55e - Event interface: only set receive buffer size if too small (bsc#1175570) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-346=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): liblldp_clif1-1.0.1+65.f3b70663b55e-lp152.3.7.1 liblldp_clif1-debuginfo-1.0.1+65.f3b70663b55e-lp152.3.7.1 open-lldp-1.0.1+65.f3b70663b55e-lp152.3.7.1 open-lldp-debuginfo-1.0.1+65.f3b70663b55e-lp152.3.7.1 open-lldp-debugsource-1.0.1+65.f3b70663b55e-lp152.3.7.1 open-lldp-devel-1.0.1+65.f3b70663b55e-lp152.3.7.1 References: https://bugzilla.suse.com/1175570

1 0

openSUSE-SU-2021:0345-1: moderate: Security update for gnuplot
by opensuse-security＠opensuse.org 26 Feb '21

26 Feb '21

openSUSE Security Update: Security update for gnuplot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0345-1 Rating: moderate References: #1176689 Cross-References: CVE-2020-25559 CVSS scores: CVE-2020-25559 (SUSE): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gnuplot fixes the following issues: - CVE-2020-25559: Fixed double free when executing print_set_output() (bsc#1176689). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-345=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gnuplot-5.2.2-lp152.6.3.1 gnuplot-debuginfo-5.2.2-lp152.6.3.1 gnuplot-debugsource-5.2.2-lp152.6.3.1 - openSUSE Leap 15.2 (noarch): gnuplot-doc-5.2.2-lp152.6.3.1 References: https://www.suse.com/security/cve/CVE-2020-25559.html https://bugzilla.suse.com/1176689

1 0

openSUSE-SU-2021:0341-1: moderate: Security update for nghttp2
by opensuse-security＠opensuse.org 25 Feb '21

25 Feb '21

openSUSE Security Update: Security update for nghttp2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0341-1 Rating: moderate References: #1159003 #1166481 Cross-References: CVE-2019-18802 CVSS scores: CVE-2019-18802 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-18802 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for nghttp2 fixes the following issues: nghttp2 was update to version 1.40.0 (bsc#1166481) - lib: Add nghttp2_check_authority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static and dynamic lib - build: Add new flag ENABLE_STATIC_CRT for Windows - build: cmake: Support building nghttpx with systemd - third-party: Update neverbleed to fix memory leak - nghttpx: Fix bug that mruby is incorrectly shared between backends - nghttpx: Reconnect h1 backend if it lost connection before sending headers - nghttpx: Returns 408 if backend timed out before sending headers - nghttpx: Fix request stal This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-341=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libnghttp2-14-1.40.0-lp152.2.3.1 libnghttp2-14-debuginfo-1.40.0-lp152.2.3.1 libnghttp2-devel-1.40.0-lp152.2.3.1 libnghttp2_asio-devel-1.40.0-lp152.2.3.1 libnghttp2_asio1-1.40.0-lp152.2.3.1 libnghttp2_asio1-debuginfo-1.40.0-lp152.2.3.1 nghttp2-1.40.0-lp152.2.3.1 nghttp2-debuginfo-1.40.0-lp152.2.3.1 nghttp2-debugsource-1.40.0-lp152.2.3.1 nghttp2-python-debugsource-1.40.0-lp152.2.3.1 python3-nghttp2-1.40.0-lp152.2.3.1 python3-nghttp2-debuginfo-1.40.0-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libnghttp2-14-32bit-1.40.0-lp152.2.3.1 libnghttp2-14-32bit-debuginfo-1.40.0-lp152.2.3.1 libnghttp2_asio1-32bit-1.40.0-lp152.2.3.1 libnghttp2_asio1-32bit-debuginfo-1.40.0-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-18802.html https://bugzilla.suse.com/1159003 https://bugzilla.suse.com/1166481

1 0

openSUSE-RU-2021:0340-1: moderate: Recommended update for poppler
by maintenance＠opensuse.org 25 Feb '21

25 Feb '21

openSUSE Recommended Update: Recommended update for poppler ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0340-1 Rating: moderate References: #1181551 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for poppler fixes the following issues: - Fixed an issue where it was not possible to open signed DocuSign documents with poppler (bsc#1181551) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-340=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpoppler-cpp0-0.79.0-lp152.2.3.1 libpoppler-cpp0-debuginfo-0.79.0-lp152.2.3.1 libpoppler-devel-0.79.0-lp152.2.3.1 libpoppler-glib-devel-0.79.0-lp152.2.3.1 libpoppler-glib8-0.79.0-lp152.2.3.1 libpoppler-glib8-debuginfo-0.79.0-lp152.2.3.1 libpoppler-qt5-1-0.79.0-lp152.2.3.1 libpoppler-qt5-1-debuginfo-0.79.0-lp152.2.3.1 libpoppler-qt5-devel-0.79.0-lp152.2.3.1 libpoppler89-0.79.0-lp152.2.3.1 libpoppler89-debuginfo-0.79.0-lp152.2.3.1 poppler-debugsource-0.79.0-lp152.2.3.1 poppler-qt5-debugsource-0.79.0-lp152.2.3.1 poppler-tools-0.79.0-lp152.2.3.1 poppler-tools-debuginfo-0.79.0-lp152.2.3.1 typelib-1_0-Poppler-0_18-0.79.0-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libpoppler-cpp0-32bit-0.79.0-lp152.2.3.1 libpoppler-cpp0-32bit-debuginfo-0.79.0-lp152.2.3.1 libpoppler-glib8-32bit-0.79.0-lp152.2.3.1 libpoppler-glib8-32bit-debuginfo-0.79.0-lp152.2.3.1 libpoppler-qt5-1-32bit-0.79.0-lp152.2.3.1 libpoppler-qt5-1-32bit-debuginfo-0.79.0-lp152.2.3.1 libpoppler89-32bit-0.79.0-lp152.2.3.1 libpoppler89-32bit-debuginfo-0.79.0-lp152.2.3.1 References: https://bugzilla.suse.com/1181551

1 0