October 2021 - openSUSE Security Announce

openSUSE-SU-2021:3530-1: moderate: Security update for dnsmasq
by opensuse-security＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Security Update: Security update for dnsmasq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3530-1 Rating: moderate References: #1173646 #1180914 #1183709 SLE-17936 Cross-References: CVE-2020-14312 CVE-2021-3448 CVSS scores: CVE-2020-14312 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-14312 (SUSE): 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L CVE-2021-3448 (NVD) : 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N CVE-2021-3448 (SUSE): 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities, contains one feature and has one errata is now available. Description: This update for dnsmasq fixes the following issues: Update to version 2.86 - CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709) - CVE-2020-14312: Set --local-service by default (bsc#1173646). - Open inotify socket only when used (bsc#1180914). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3530=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dnsmasq-2.86-7.14.1 dnsmasq-debuginfo-2.86-7.14.1 dnsmasq-debugsource-2.86-7.14.1 dnsmasq-utils-2.86-7.14.1 dnsmasq-utils-debuginfo-2.86-7.14.1 References: https://www.suse.com/security/cve/CVE-2020-14312.html https://www.suse.com/security/cve/CVE-2021-3448.html https://bugzilla.suse.com/1173646 https://bugzilla.suse.com/1180914 https://bugzilla.suse.com/1183709

1 0

openSUSE-SU-2021:3531-1: important: Security update for busybox
by opensuse-security＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Security Update: Security update for busybox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3531-1 Rating: important References: #1099260 #1099263 #1121426 #1184522 #951562 Cross-References: CVE-2011-5325 CVE-2018-1000500 CVE-2018-1000517 CVE-2018-20679 CVE-2021-28831 CVSS scores: CVE-2011-5325 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2018-1000500 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-1000500 (SUSE): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2018-1000517 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-1000517 (SUSE): 5.6 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2018-20679 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2018-20679 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-28831 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28831 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for busybox fixes the following issues: - CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522). - CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426). - CVE-2018-1000517: Fixed buffer overflow in the retrieve_file_data() (bsc#1099260). - CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562). - CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3531=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): busybox-1.26.2-4.5.1 busybox-static-1.26.2-4.5.1 References: https://www.suse.com/security/cve/CVE-2011-5325.html https://www.suse.com/security/cve/CVE-2018-1000500.html https://www.suse.com/security/cve/CVE-2018-1000517.html https://www.suse.com/security/cve/CVE-2018-20679.html https://www.suse.com/security/cve/CVE-2021-28831.html https://bugzilla.suse.com/1099260 https://bugzilla.suse.com/1099263 https://bugzilla.suse.com/1121426 https://bugzilla.suse.com/1184522 https://bugzilla.suse.com/951562

1 0

openSUSE-SU-2021:3521-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 26 Oct '21

26 Oct '21

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3521-1 Rating: moderate References: #1186756 #1187852 #1189166 #1190718 #1190719 #1190722 #1190723 #1190726 #1190729 #1190733 #1190734 #1190735 Cross-References: CVE-2020-20891 CVE-2020-20892 CVE-2020-20895 CVE-2020-20896 CVE-2020-20899 CVE-2020-20902 CVE-2020-22037 CVE-2020-35965 CVE-2021-3566 CVE-2021-38092 CVE-2021-38093 CVE-2021-38094 CVSS scores: CVE-2020-20891 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-20892 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-20895 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-20896 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-20899 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-20902 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-22037 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-22037 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-35965 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-35965 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3566 (SUSE): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-38092 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-38093 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-38094 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for ffmpeg fixes the following issues: - CVE-2021-3566: Fixed information leak (bsc#1189166). - CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734) - CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733) - CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735) - CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3() (bsc#1186756) - CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852) - CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719) - CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718) - CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name (bsc#1190722) - CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723) - CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props() (bsc#1190726) - CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit long_term_filter() (bsc#1190729) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3521=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ffmpeg-3.4.2-11.17.1 ffmpeg-debuginfo-3.4.2-11.17.1 ffmpeg-debugsource-3.4.2-11.17.1 ffmpeg-private-devel-3.4.2-11.17.1 libavcodec-devel-3.4.2-11.17.1 libavcodec57-3.4.2-11.17.1 libavcodec57-debuginfo-3.4.2-11.17.1 libavdevice-devel-3.4.2-11.17.1 libavdevice57-3.4.2-11.17.1 libavdevice57-debuginfo-3.4.2-11.17.1 libavfilter-devel-3.4.2-11.17.1 libavfilter6-3.4.2-11.17.1 libavfilter6-debuginfo-3.4.2-11.17.1 libavformat-devel-3.4.2-11.17.1 libavformat57-3.4.2-11.17.1 libavformat57-debuginfo-3.4.2-11.17.1 libavresample-devel-3.4.2-11.17.1 libavresample3-3.4.2-11.17.1 libavresample3-debuginfo-3.4.2-11.17.1 libavutil-devel-3.4.2-11.17.1 libavutil55-3.4.2-11.17.1 libavutil55-debuginfo-3.4.2-11.17.1 libpostproc-devel-3.4.2-11.17.1 libpostproc54-3.4.2-11.17.1 libpostproc54-debuginfo-3.4.2-11.17.1 libswresample-devel-3.4.2-11.17.1 libswresample2-3.4.2-11.17.1 libswresample2-debuginfo-3.4.2-11.17.1 libswscale-devel-3.4.2-11.17.1 libswscale4-3.4.2-11.17.1 libswscale4-debuginfo-3.4.2-11.17.1 - openSUSE Leap 15.3 (x86_64): libavcodec57-32bit-3.4.2-11.17.1 libavcodec57-32bit-debuginfo-3.4.2-11.17.1 libavdevice57-32bit-3.4.2-11.17.1 libavdevice57-32bit-debuginfo-3.4.2-11.17.1 libavfilter6-32bit-3.4.2-11.17.1 libavfilter6-32bit-debuginfo-3.4.2-11.17.1 libavformat57-32bit-3.4.2-11.17.1 libavformat57-32bit-debuginfo-3.4.2-11.17.1 libavresample3-32bit-3.4.2-11.17.1 libavresample3-32bit-debuginfo-3.4.2-11.17.1 libavutil55-32bit-3.4.2-11.17.1 libavutil55-32bit-debuginfo-3.4.2-11.17.1 libpostproc54-32bit-3.4.2-11.17.1 libpostproc54-32bit-debuginfo-3.4.2-11.17.1 libswresample2-32bit-3.4.2-11.17.1 libswresample2-32bit-debuginfo-3.4.2-11.17.1 libswscale4-32bit-3.4.2-11.17.1 libswscale4-32bit-debuginfo-3.4.2-11.17.1 References: https://www.suse.com/security/cve/CVE-2020-20891.html https://www.suse.com/security/cve/CVE-2020-20892.html https://www.suse.com/security/cve/CVE-2020-20895.html https://www.suse.com/security/cve/CVE-2020-20896.html https://www.suse.com/security/cve/CVE-2020-20899.html https://www.suse.com/security/cve/CVE-2020-20902.html https://www.suse.com/security/cve/CVE-2020-22037.html https://www.suse.com/security/cve/CVE-2020-35965.html https://www.suse.com/security/cve/CVE-2021-3566.html https://www.suse.com/security/cve/CVE-2021-38092.html https://www.suse.com/security/cve/CVE-2021-38093.html https://www.suse.com/security/cve/CVE-2021-38094.html https://bugzilla.suse.com/1186756 https://bugzilla.suse.com/1187852 https://bugzilla.suse.com/1189166 https://bugzilla.suse.com/1190718 https://bugzilla.suse.com/1190719 https://bugzilla.suse.com/1190722 https://bugzilla.suse.com/1190723 https://bugzilla.suse.com/1190726 https://bugzilla.suse.com/1190729 https://bugzilla.suse.com/1190733 https://bugzilla.suse.com/1190734 https://bugzilla.suse.com/1190735

1 0

openSUSE-SU-2021:3527-1: moderate: Security update for wireguard-tools
by opensuse-security＠opensuse.org 26 Oct '21

26 Oct '21

openSUSE Security Update: Security update for wireguard-tools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3527-1 Rating: moderate References: #1191224 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for wireguard-tools fixes the following issues: - Removed world-readable permissions from /etc/wireguard (bsc#1191224) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3527=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): wireguard-tools-1.0.20200827-5.9.1 wireguard-tools-debuginfo-1.0.20200827-5.9.1 wireguard-tools-debugsource-1.0.20200827-5.9.1 References: https://bugzilla.suse.com/1191224

1 0

openSUSE-SU-2021:3522-1: important: Security update for apache2
by opensuse-security＠opensuse.org 26 Oct '21

26 Oct '21

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3522-1 Rating: important References: #1190666 #1190669 #1190702 #1190703 Cross-References: CVE-2021-34798 CVE-2021-36160 CVE-2021-39275 CVE-2021-40438 CVSS scores: CVE-2021-34798 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-36160 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-39275 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-40438 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3522=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-2.4.43-3.32.1 apache2-debuginfo-2.4.43-3.32.1 apache2-debugsource-2.4.43-3.32.1 apache2-devel-2.4.43-3.32.1 apache2-event-2.4.43-3.32.1 apache2-event-debuginfo-2.4.43-3.32.1 apache2-example-pages-2.4.43-3.32.1 apache2-prefork-2.4.43-3.32.1 apache2-prefork-debuginfo-2.4.43-3.32.1 apache2-utils-2.4.43-3.32.1 apache2-utils-debuginfo-2.4.43-3.32.1 apache2-worker-2.4.43-3.32.1 apache2-worker-debuginfo-2.4.43-3.32.1 - openSUSE Leap 15.3 (noarch): apache2-doc-2.4.43-3.32.1 References: https://www.suse.com/security/cve/CVE-2021-34798.html https://www.suse.com/security/cve/CVE-2021-36160.html https://www.suse.com/security/cve/CVE-2021-39275.html https://www.suse.com/security/cve/CVE-2021-40438.html https://bugzilla.suse.com/1190666 https://bugzilla.suse.com/1190669 https://bugzilla.suse.com/1190702 https://bugzilla.suse.com/1190703

1 0

openSUSE-SU-2021:1392-1: important: Security update for chromium
by opensuse-security＠opensuse.org 26 Oct '21

26 Oct '21

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1392-1 Rating: important References: #1191844 Cross-References: CVE-2021-37981 CVE-2021-37982 CVE-2021-37983 CVE-2021-37984 CVE-2021-37985 CVE-2021-37986 CVE-2021-37987 CVE-2021-37988 CVE-2021-37989 CVE-2021-37990 CVE-2021-37991 CVE-2021-37992 CVE-2021-37993 CVE-2021-37994 CVE-2021-37995 CVE-2021-37996 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 95.0.4638.54 (boo#1191844): * CVE-2021-37981: Heap buffer overflow in Skia * CVE-2021-37982: Use after free in Incognito * CVE-2021-37983: Use after free in Dev Tools * CVE-2021-37984: Heap buffer overflow in PDFium * CVE-2021-37985: Use after free in V8 * CVE-2021-37986: Heap buffer overflow in Settings * CVE-2021-37987: Use after free in Network APIs * CVE-2021-37988: Use after free in Profiles * CVE-2021-37989: Inappropriate implementation in Blink * CVE-2021-37990: Inappropriate implementation in WebView * CVE-2021-37991: Race in V8 * CVE-2021-37992: Out of bounds read in WebAudio * CVE-2021-37993: Use after free in PDF Accessibility * CVE-2021-37996: Insufficient validation of untrusted input in Downloads * CVE-2021-37994: Inappropriate implementation in iFrame Sandbox * CVE-2021-37995: Inappropriate implementation in WebApp Installer Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1392=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-95.0.4638.54-bp153.2.37.1 chromium-95.0.4638.54-bp153.2.37.1 References: https://www.suse.com/security/cve/CVE-2021-37981.html https://www.suse.com/security/cve/CVE-2021-37982.html https://www.suse.com/security/cve/CVE-2021-37983.html https://www.suse.com/security/cve/CVE-2021-37984.html https://www.suse.com/security/cve/CVE-2021-37985.html https://www.suse.com/security/cve/CVE-2021-37986.html https://www.suse.com/security/cve/CVE-2021-37987.html https://www.suse.com/security/cve/CVE-2021-37988.html https://www.suse.com/security/cve/CVE-2021-37989.html https://www.suse.com/security/cve/CVE-2021-37990.html https://www.suse.com/security/cve/CVE-2021-37991.html https://www.suse.com/security/cve/CVE-2021-37992.html https://www.suse.com/security/cve/CVE-2021-37993.html https://www.suse.com/security/cve/CVE-2021-37994.html https://www.suse.com/security/cve/CVE-2021-37995.html https://www.suse.com/security/cve/CVE-2021-37996.html https://bugzilla.suse.com/1191844

1 0

openSUSE-SU-2021:1393-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 26 Oct '21

26 Oct '21

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1393-1 Rating: important References: #1191104 #1191526 #1191869 Cross-References: CVE-2021-2475 CVE-2021-35538 CVE-2021-35540 CVE-2021-35542 CVE-2021-35545 CVSS scores: CVE-2021-2475 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2021-35538 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-35540 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-35542 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2021-35545 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for virtualbox fixes the following issues: Version bump to 6.1.28 (released October 19 2021 by Oracle) This is a maintenance release. The following items were fixed and/or added: - VMM: Fixed guru meditation while booting nested-guests accessing debug registers under certain conditions - UI: Bug fixes for touchpad-based scrolling - VMSVGA: Fixed VM black screen issue on first resize after restoring from saved state (bug #20067) - VMSVGA: Fixed display corruption on Linux Mint (bug #20513) - Storage: Fixed a possible write error under certain circumstances when using VHD images (bug #20512) - Network: Multiple updates in virtio-net device support - Network: Disconnecting cable in saved VM state now is handled properly by virtio-net - Network: More administrative control over network ranges, see user manual - NAT: Fixed not rejecting TFTP requests with absolute pathnames (bug #20589) - Audio: Fixed VM session aborting after PC hibernation (bug #20516) - Audio: Fixed setting the line-in volume of the HDA emulation on modern Linux guests - Audio: Fixed resuming playback of the AC'97 emulation while a snapshot has been taken - API: Added bindings support for Python 3.9 (bug #20252) - API: Fixed rare hang of VM when changing settings at runtime - Linux host: Improved kernel modules installation detection which prevents unnecessary modules rebuild - Host Services: Shared Clipboard: Prevent guest clipboard reset when clipboard sharing is disabled (bug #20487) - Host Services: Shared Clipboard over VRDP: Fixed to continue working when guest service reconnects to host (bug #20366) - Host Services: Shared Clipboard over VRDP: Fixed preventing remote RDP client to hang when guest has no clipboard data to report - Linux Host and Guest: Introduced initial support for kernels 5.14 and 5.15 - Linux Host and Guest: Introduced initial support for RHEL 8.5 kernel - Windows Guest: Introduced Windows 11 guest support, including unattended installation - Fixes CVE-2021-35538, CVE-2021-35545, CVE-2021-35540, CVE-2021-35542, and CVE-2021-2475 (boo#1191869) - Use kernel_module_directory macro for kernel modules (boo#1191526) - Finish UsrMerge for VirtualBox components (boo#1191104). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2021-1393=1 Package List: - openSUSE Leap 15.3 (noarch): virtualbox-guest-desktop-icons-6.1.28-lp153.2.12.1 virtualbox-guest-source-6.1.28-lp153.2.12.1 virtualbox-host-source-6.1.28-lp153.2.12.1 - openSUSE Leap 15.3 (x86_64): python3-virtualbox-6.1.28-lp153.2.12.1 python3-virtualbox-debuginfo-6.1.28-lp153.2.12.1 virtualbox-6.1.28-lp153.2.12.1 virtualbox-debuginfo-6.1.28-lp153.2.12.1 virtualbox-debugsource-6.1.28-lp153.2.12.1 virtualbox-devel-6.1.28-lp153.2.12.1 virtualbox-guest-tools-6.1.28-lp153.2.12.1 virtualbox-guest-tools-debuginfo-6.1.28-lp153.2.12.1 virtualbox-guest-x11-6.1.28-lp153.2.12.1 virtualbox-guest-x11-debuginfo-6.1.28-lp153.2.12.1 virtualbox-kmp-debugsource-6.1.28-lp153.2.12.1 virtualbox-kmp-default-6.1.28_k5.3.18_59.27-lp153.2.12.1 virtualbox-kmp-default-debuginfo-6.1.28_k5.3.18_59.27-lp153.2.12.1 virtualbox-kmp-preempt-6.1.28_k5.3.18_59.27-lp153.2.12.1 virtualbox-kmp-preempt-debuginfo-6.1.28_k5.3.18_59.27-lp153.2.12.1 virtualbox-qt-6.1.28-lp153.2.12.1 virtualbox-qt-debuginfo-6.1.28-lp153.2.12.1 virtualbox-vnc-6.1.28-lp153.2.12.1 virtualbox-websrv-6.1.28-lp153.2.12.1 virtualbox-websrv-debuginfo-6.1.28-lp153.2.12.1 References: https://www.suse.com/security/cve/CVE-2021-2475.html https://www.suse.com/security/cve/CVE-2021-35538.html https://www.suse.com/security/cve/CVE-2021-35540.html https://www.suse.com/security/cve/CVE-2021-35542.html https://www.suse.com/security/cve/CVE-2021-35545.html https://bugzilla.suse.com/1191104 https://bugzilla.suse.com/1191526 https://bugzilla.suse.com/1191869

1 0

openSUSE-SU-2021:3506-1: important: Security update for containerd, docker, runc
by opensuse-security＠opensuse.org 25 Oct '21

25 Oct '21

openSUSE Security Update: Security update for containerd, docker, runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3506-1 Rating: important References: #1102408 #1185405 #1187704 #1188282 #1190826 #1191015 #1191121 #1191334 #1191355 #1191434 Cross-References: CVE-2021-30465 CVE-2021-32760 CVE-2021-41089 CVE-2021-41091 CVE-2021-41092 CVE-2021-41103 CVSS scores: CVE-2021-30465 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-30465 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-32760 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2021-32760 (SUSE): 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:L CVE-2021-41089 (NVD) : 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2021-41089 (SUSE): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-41091 (NVD) : 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L CVE-2021-41091 (SUSE): 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L CVE-2021-41092 (NVD) : 5.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N CVE-2021-41092 (SUSE): 5.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N CVE-2021-41103 (SUSE): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has four fixes is now available. Description: This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.9-ce. (bsc#1191355) See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103 container was updated to v1.4.11, to fix CVE-2021-41103. bsc#1191355 - CVE-2021-32760: Fixed that a archive package allows chmod of file outside of unpack target directory (bsc#1188282) - Install systemd service file as well (bsc#1190826) Update to runc v1.0.2. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.2 * Fixed a failure to set CPU quota period in some cases on cgroup v1. * Fixed the inability to start a container with the "adding seccomp filter rule for syscall ..." error, caused by redundant seccomp rules (i.e. those that has action equal to the default one). Such redundant rules are now skipped. * Made release builds reproducible from now on. * Fixed a rare debug log race in runc init, which can result in occasional harmful "failed to decode ..." errors from runc run or exec. * Fixed the check in cgroup v1 systemd manager if a container needs to be frozen before Set, and add a setting to skip such freeze unconditionally. The previous fix for that issue, done in runc 1.0.1, was not working. Update to runc v1.0.1. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.1 * Fixed occasional runc exec/run failure ("interrupted system call") on an Azure volume. * Fixed "unable to find groups ... token too long" error with /etc/group containing lines longer than 64K characters. * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is frozen. This is a regression in 1.0.0, not affecting runc itself but some of libcontainer users (e.g Kubernetes). * cgroupv2: bpf: Ignore inaccessible existing programs in case of permission error when handling replacement of existing bpf cgroup programs. This fixes a regression in 1.0.0, where some SELinux policies would block runc from being able to run entirely. * cgroup/systemd/v2: don't freeze cgroup on Set. * cgroup/systemd/v1: avoid unnecessary freeze on Set. - fix issues with runc under openSUSE MicroOS's SELinux policy. bsc#1187704 Update to runc v1.0.0. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0 ! The usage of relative paths for mountpoints will now produce a warning (such configurations are outside of the spec, and in future runc will produce an error when given such configurations). * cgroupv2: devices: rework the filter generation to produce consistent results with cgroupv1, and always clobber any existing eBPF program(s) to fix runc update and avoid leaking eBPF programs (resulting in errors when managing containers). * cgroupv2: correctly convert "number of IOs" statistics in a cgroupv1-compatible way. * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures. * cgroupv2: wait for freeze to finish before returning from the freezing code, optimize the method for checking whether a cgroup is frozen. * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94 * cgroups/systemd: fixed returning "unit already exists" error from a systemd cgroup manager (regression in rc94) + cgroupv2: support SkipDevices with systemd driver + cgroup/systemd: return, not ignore, stop unit error from Destroy + Make "runc --version" output sane even when built with go get or otherwise outside of our build scripts. + cgroups: set SkipDevices during runc update (so we don't modify cgroups at all during runc update). + cgroup1: blkio: support BFQ weights. + cgroupv2: set per-device io weights if BFQ IO scheduler is available. Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95 This release of runc contains a fix for CVE-2021-30465, and users are strongly recommended to update (especially if you are providing semi-limited access to spawn containers to untrusted users). (bsc#1185405) Update to runc v1.0.0~rc94. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94 Breaking Changes: * cgroupv1: kernel memory limits are now always ignored, as kmemcg has been effectively deprecated by the kernel. Users should make use of regular memory cgroup controls. Regression Fixes: * seccomp: fix 32-bit compilation errors * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code * runc start: fix "chdir to cwd: permission denied" for some setups Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3506=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): containerd-1.4.11-56.1 containerd-ctr-1.4.11-56.1 docker-20.10.9_ce-156.1 docker-debuginfo-20.10.9_ce-156.1 docker-kubic-20.10.9_ce-156.1 docker-kubic-debuginfo-20.10.9_ce-156.1 docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1 runc-1.0.2-23.1 runc-debuginfo-1.0.2-23.1 - openSUSE Leap 15.3 (noarch): docker-bash-completion-20.10.9_ce-156.1 docker-fish-completion-20.10.9_ce-156.1 docker-kubic-bash-completion-20.10.9_ce-156.1 docker-kubic-fish-completion-20.10.9_ce-156.1 docker-kubic-zsh-completion-20.10.9_ce-156.1 docker-zsh-completion-20.10.9_ce-156.1 References: https://www.suse.com/security/cve/CVE-2021-30465.html https://www.suse.com/security/cve/CVE-2021-32760.html https://www.suse.com/security/cve/CVE-2021-41089.html https://www.suse.com/security/cve/CVE-2021-41091.html https://www.suse.com/security/cve/CVE-2021-41092.html https://www.suse.com/security/cve/CVE-2021-41103.html https://bugzilla.suse.com/1102408 https://bugzilla.suse.com/1185405 https://bugzilla.suse.com/1187704 https://bugzilla.suse.com/1188282 https://bugzilla.suse.com/1190826 https://bugzilla.suse.com/1191015 https://bugzilla.suse.com/1191121 https://bugzilla.suse.com/1191334 https://bugzilla.suse.com/1191355 https://bugzilla.suse.com/1191434

1 0

openSUSE-SU-2021:1389-1: moderate: Security update for mbedtls
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1389-1 Rating: moderate References: #1189589 Cross-References: CVE-2021-24119 CVSS scores: CVE-2021-24119 (NVD) : 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mbedtls fixes the following issues: * CVE-2021-24119: Fixed side-channel vulnerability in base64 PEM [boo#1189589] Guard against strong local side channel attack against base64 tables by making access aceess to them use constant flow code. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1389=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): libmbedcrypto3-2.16.9-bp153.2.5.1 libmbedtls12-2.16.9-bp153.2.5.1 libmbedx509-0-2.16.9-bp153.2.5.1 mbedtls-devel-2.16.9-bp153.2.5.1 - openSUSE Backports SLE-15-SP3 (aarch64_ilp32): libmbedcrypto3-64bit-2.16.9-bp153.2.5.1 libmbedtls12-64bit-2.16.9-bp153.2.5.1 libmbedx509-0-64bit-2.16.9-bp153.2.5.1 - openSUSE Backports SLE-15-SP3 (x86_64): libmbedcrypto3-32bit-2.16.9-bp153.2.5.1 libmbedtls12-32bit-2.16.9-bp153.2.5.1 libmbedx509-0-32bit-2.16.9-bp153.2.5.1 References: https://www.suse.com/security/cve/CVE-2021-24119.html https://bugzilla.suse.com/1189589

1 0

openSUSE-SU-2021:1390-1: moderate: Security update for ssh-audit
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for ssh-audit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1390-1 Rating: moderate References: Cross-References: CVE-2018-15473 CVSS scores: CVE-2018-15473 (NVD) : 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2018-15473 (SUSE): 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ssh-audit fixes the following issues: ssh-audit was updated to version 2.5.0 * Fixed crash when running host key tests. * Handles server connection failures more gracefully. * Now prints JSON with indents when -jj is used (useful for debugging). * Added MD5 fingerprints to verbose output. * Added -d/--debug option for getting debugging output. * Updated JSON output to include MD5 fingerprints. Note that this results in a breaking change in the 'fingerprints' dictionary format. * Updated OpenSSH 8.1 (and earlier) policies to include rsa-sha2-512 and rsa-sha2-256. * Added OpenSSH v8.6 & v8.7 policies. * Added 3 new key exchanges: + gss-gex-sha1-eipGX3TCiQSrx573bT1o1Q== + gss-group1-sha1-eipGX3TCiQSrx573bT1o1Q== + gss-group14-sha1-eipGX3TCiQSrx573bT1o1Q== * Added 3 new MACs: + hmac-ripemd160-96 + AEAD_AES_128_GCM + AEAD_AES_256_GCM Update to version 2.4.0 * Added multi-threaded scanning support. * Added version check for OpenSSH user enumeration (CVE-2018-15473). * Added deprecation note to host key types based on SHA-1. * Added extra warnings for SSHv1. * Added built-in hardened OpenSSH v8.5 policy. * Upgraded warnings to failures for host key types based on SHA-1 * Fixed crash when receiving unexpected response during host key test. * Fixed hang against older Cisco devices during host key test & gex test. * Fixed improper termination while scanning multiple targets when one target returns an error. * Dropped support for Python 3.5 (which reached EOL in Sept.2020) * Added 1 new key exchange: sntrup761x25519-sha512(a)openssh.com. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1390=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): ssh-audit-2.5.0-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-15473.html

1 0