October 2021 - openSUSE Security Announce

openSUSE-SU-2021:1339-1: important: Security update for chromium
by opensuse-security＠opensuse.org 11 Oct '21

11 Oct '21

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1339-1 Rating: important References: #1190765 #1191166 #1191204 Cross-References: CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963 CVE-2021-37964 CVE-2021-37965 CVE-2021-37966 CVE-2021-37967 CVE-2021-37968 CVE-2021-37969 CVE-2021-37970 CVE-2021-37971 CVE-2021-37972 CVE-2021-37973 CVE-2021-37974 CVE-2021-37975 CVE-2021-37976 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 94.0.4606.54 (boo#1190765): * CVE-2021-37956: Use after free in Offline use * CVE-2021-37957: Use after free in WebGPU * CVE-2021-37958: Inappropriate implementation in Navigation * CVE-2021-37959: Use after free in Task Manager * CVE-2021-37960: Inappropriate implementation in Blink graphics * CVE-2021-37961: Use after free in Tab Strip * CVE-2021-37962: Use after free in Performance Manager * CVE-2021-37963: Side-channel information leakage in DevTools * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking * CVE-2021-37965: Inappropriate implementation in Background Fetch API * CVE-2021-37966: Inappropriate implementation in Compositing * CVE-2021-37967: Inappropriate implementation in Background Fetch API * CVE-2021-37968: Inappropriate implementation in Background Fetch API * CVE-2021-37969: Inappropriate implementation in Google Updater * CVE-2021-37970: Use after free in File System API * CVE-2021-37971: Incorrect security UI in Web Browser UI * CVE-2021-37972: Out of bounds read in libjpeg-turbo Chromium 94.0.4606.61 (boo#1191166): * CVE-2021-37973: Use after free in Portals Chromium 94.0.4606.71 (boo#1191204): * CVE-2021-37974 : Use after free in Safe Browsing * CVE-2021-37975 : Use after free in V8 * CVE-2021-37976 : Information leak in core Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1339=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-94.0.4606.71-bp153.2.31.1 chromium-94.0.4606.71-bp153.2.31.1 References: https://www.suse.com/security/cve/CVE-2021-37956.html https://www.suse.com/security/cve/CVE-2021-37957.html https://www.suse.com/security/cve/CVE-2021-37958.html https://www.suse.com/security/cve/CVE-2021-37959.html https://www.suse.com/security/cve/CVE-2021-37960.html https://www.suse.com/security/cve/CVE-2021-37961.html https://www.suse.com/security/cve/CVE-2021-37962.html https://www.suse.com/security/cve/CVE-2021-37963.html https://www.suse.com/security/cve/CVE-2021-37964.html https://www.suse.com/security/cve/CVE-2021-37965.html https://www.suse.com/security/cve/CVE-2021-37966.html https://www.suse.com/security/cve/CVE-2021-37967.html https://www.suse.com/security/cve/CVE-2021-37968.html https://www.suse.com/security/cve/CVE-2021-37969.html https://www.suse.com/security/cve/CVE-2021-37970.html https://www.suse.com/security/cve/CVE-2021-37971.html https://www.suse.com/security/cve/CVE-2021-37972.html https://www.suse.com/security/cve/CVE-2021-37973.html https://www.suse.com/security/cve/CVE-2021-37974.html https://www.suse.com/security/cve/CVE-2021-37975.html https://www.suse.com/security/cve/CVE-2021-37976.html https://bugzilla.suse.com/1190765 https://bugzilla.suse.com/1191166 https://bugzilla.suse.com/1191204

1 0

openSUSE-SU-2021:3325-1: moderate: Security update for rabbitmq-server
by opensuse-security＠opensuse.org 09 Oct '21

09 Oct '21

openSUSE Security Update: Security update for rabbitmq-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3325-1 Rating: moderate References: #1185075 #1186203 #1187818 #1187819 Cross-References: CVE-2021-22116 CVE-2021-32718 CVE-2021-32719 CVSS scores: CVE-2021-22116 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-22116 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-32718 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N CVE-2021-32719 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for rabbitmq-server fixes the following issues: - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI (bsc#1187818). - CVE-2021-32719: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in federation management plugin (bsc#1187819). - CVE-2021-22116: Fixed improper input validation may lead to DoS (bsc#1186203). - Use /run instead of /var/run in tmpfiles.d configuration (bsc#1185075). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3325=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): erlang-rabbitmq-client-3.8.11-3.3.3 rabbitmq-server-3.8.11-3.3.3 rabbitmq-server-plugins-3.8.11-3.3.3 References: https://www.suse.com/security/cve/CVE-2021-22116.html https://www.suse.com/security/cve/CVE-2021-32718.html https://www.suse.com/security/cve/CVE-2021-32719.html https://bugzilla.suse.com/1185075 https://bugzilla.suse.com/1186203 https://bugzilla.suse.com/1187818 https://bugzilla.suse.com/1187819

1 0

openSUSE-SU-2021:3301-1: moderate: Security update for libcryptopp
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for libcryptopp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3301-1 Rating: moderate References: #1015243 Cross-References: CVE-2016-9939 CVSS scores: CVE-2016-9939 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcryptopp fixes the following issues: - CVE-2016-9939: Fixed potential DoS in Crypto++ (libcryptopp) ASN.1 parser (bsc#1015243). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3301=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libcryptopp-debugsource-5.6.5-1.6.1 libcryptopp-devel-5.6.5-1.6.1 libcryptopp5_6_5-5.6.5-1.6.1 libcryptopp5_6_5-debuginfo-5.6.5-1.6.1 - openSUSE Leap 15.3 (x86_64): libcryptopp5_6_5-32bit-5.6.5-1.6.1 libcryptopp5_6_5-32bit-debuginfo-5.6.5-1.6.1 References: https://www.suse.com/security/cve/CVE-2016-9939.html https://bugzilla.suse.com/1015243

1 0

openSUSE-SU-2021:3291-1: moderate: Security update for glibc
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3291-1 Rating: moderate References: #1186489 #1187911 Cross-References: CVE-2021-33574 CVE-2021-35942 CVSS scores: CVE-2021-33574 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-33574 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-35942 (SUSE): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for glibc fixes the following issues: - CVE-2021-33574: Fixed use __pthread_attr_copy in mq_notify (bsc#1186489). - CVE-2021-35942: Fixed wordexp handle overflow in positional parameter number (bsc#1187911). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3291=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): glibc-2.31-9.3.2 glibc-debuginfo-2.31-9.3.2 glibc-debugsource-2.31-9.3.2 glibc-devel-2.31-9.3.2 glibc-devel-debuginfo-2.31-9.3.2 glibc-devel-static-2.31-9.3.2 glibc-extra-2.31-9.3.2 glibc-extra-debuginfo-2.31-9.3.2 glibc-locale-2.31-9.3.2 glibc-locale-base-2.31-9.3.2 glibc-locale-base-debuginfo-2.31-9.3.2 glibc-profile-2.31-9.3.2 glibc-utils-2.31-9.3.2 glibc-utils-debuginfo-2.31-9.3.2 glibc-utils-src-debugsource-2.31-9.3.2 nscd-2.31-9.3.2 nscd-debuginfo-2.31-9.3.2 - openSUSE Leap 15.3 (noarch): glibc-html-2.31-9.3.2 glibc-i18ndata-2.31-9.3.2 glibc-info-2.31-9.3.2 glibc-lang-2.31-9.3.2 - openSUSE Leap 15.3 (x86_64): glibc-32bit-2.31-9.3.2 glibc-32bit-debuginfo-2.31-9.3.2 glibc-devel-32bit-2.31-9.3.2 glibc-devel-32bit-debuginfo-2.31-9.3.2 glibc-devel-static-32bit-2.31-9.3.2 glibc-locale-base-32bit-2.31-9.3.2 glibc-locale-base-32bit-debuginfo-2.31-9.3.2 glibc-profile-32bit-2.31-9.3.2 glibc-utils-32bit-2.31-9.3.2 glibc-utils-32bit-debuginfo-2.31-9.3.2 References: https://www.suse.com/security/cve/CVE-2021-33574.html https://www.suse.com/security/cve/CVE-2021-35942.html https://bugzilla.suse.com/1186489 https://bugzilla.suse.com/1187911

1 0

openSUSE-SU-2021:3293-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3293-1 Rating: moderate References: #1186761 Cross-References: CVE-2020-22042 CVSS scores: CVE-2020-22042 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-22042 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ffmpeg fixes the following issues: - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavfilter/graphparser.c. (bsc#1186761) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3293=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ffmpeg-3.4.2-11.14.1 ffmpeg-debuginfo-3.4.2-11.14.1 ffmpeg-debugsource-3.4.2-11.14.1 ffmpeg-private-devel-3.4.2-11.14.1 libavcodec-devel-3.4.2-11.14.1 libavcodec57-3.4.2-11.14.1 libavcodec57-debuginfo-3.4.2-11.14.1 libavdevice-devel-3.4.2-11.14.1 libavdevice57-3.4.2-11.14.1 libavdevice57-debuginfo-3.4.2-11.14.1 libavfilter-devel-3.4.2-11.14.1 libavfilter6-3.4.2-11.14.1 libavfilter6-debuginfo-3.4.2-11.14.1 libavformat-devel-3.4.2-11.14.1 libavformat57-3.4.2-11.14.1 libavformat57-debuginfo-3.4.2-11.14.1 libavresample-devel-3.4.2-11.14.1 libavresample3-3.4.2-11.14.1 libavresample3-debuginfo-3.4.2-11.14.1 libavutil-devel-3.4.2-11.14.1 libavutil55-3.4.2-11.14.1 libavutil55-debuginfo-3.4.2-11.14.1 libpostproc-devel-3.4.2-11.14.1 libpostproc54-3.4.2-11.14.1 libpostproc54-debuginfo-3.4.2-11.14.1 libswresample-devel-3.4.2-11.14.1 libswresample2-3.4.2-11.14.1 libswresample2-debuginfo-3.4.2-11.14.1 libswscale-devel-3.4.2-11.14.1 libswscale4-3.4.2-11.14.1 libswscale4-debuginfo-3.4.2-11.14.1 - openSUSE Leap 15.3 (x86_64): libavcodec57-32bit-3.4.2-11.14.1 libavcodec57-32bit-debuginfo-3.4.2-11.14.1 libavdevice57-32bit-3.4.2-11.14.1 libavdevice57-32bit-debuginfo-3.4.2-11.14.1 libavfilter6-32bit-3.4.2-11.14.1 libavfilter6-32bit-debuginfo-3.4.2-11.14.1 libavformat57-32bit-3.4.2-11.14.1 libavformat57-32bit-debuginfo-3.4.2-11.14.1 libavresample3-32bit-3.4.2-11.14.1 libavresample3-32bit-debuginfo-3.4.2-11.14.1 libavutil55-32bit-3.4.2-11.14.1 libavutil55-32bit-debuginfo-3.4.2-11.14.1 libpostproc54-32bit-3.4.2-11.14.1 libpostproc54-32bit-debuginfo-3.4.2-11.14.1 libswresample2-32bit-3.4.2-11.14.1 libswresample2-32bit-debuginfo-3.4.2-11.14.1 libswscale4-32bit-3.4.2-11.14.1 libswscale4-32bit-debuginfo-3.4.2-11.14.1 References: https://www.suse.com/security/cve/CVE-2020-22042.html https://bugzilla.suse.com/1186761

1 0

openSUSE-SU-2021:3292-1: important: Security update for go1.16
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for go1.16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3292-1 Rating: important References: #1182345 #1190589 Cross-References: CVE-2021-39293 CVSS scores: CVE-2021-39293 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.16 fixes the following issues: - Update to go 1.16.8 - CVE-2021-39293: Fixed a buffer overflow issue in preallocation check that can cause OOM panic. (bas#) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3292=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): go1.16-1.16.8-1.26.1 go1.16-doc-1.16.8-1.26.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.16-race-1.16.8-1.26.1 References: https://www.suse.com/security/cve/CVE-2021-39293.html https://bugzilla.suse.com/1182345 https://bugzilla.suse.com/1190589

1 0

openSUSE-SU-2021:3300-1: Security update for git
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3300-1 Rating: low References: #1189992 Cross-References: CVE-2021-40330 CVSS scores: CVE-2021-40330 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git fixes the following issues: - CVE-2021-40330: Fixed unexpected cross-protocol requests via newline character in git_connect_git repository path (bsc#1189992). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3300=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): git-svn-debuginfo-2.26.2-33.1 References: https://www.suse.com/security/cve/CVE-2021-40330.html https://bugzilla.suse.com/1189992

1 0

openSUSE-SU-2021:3294-1: important: Security update for nodejs8
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for nodejs8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3294-1 Rating: important References: #1188917 Cross-References: CVE-2021-22930 CVSS scores: CVE-2021-22930 (SUSE): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: nodejs8 was updated to fix the following security issues: - CVE-2021-22930: http2: fixes use after free on close in stream canceling (bsc#1188917) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3294=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs8-8.17.0-10.15.11 nodejs8-debuginfo-8.17.0-10.15.11 nodejs8-debugsource-8.17.0-10.15.11 nodejs8-devel-8.17.0-10.15.11 npm8-8.17.0-10.15.11 - openSUSE Leap 15.3 (noarch): nodejs8-docs-8.17.0-10.15.11 References: https://www.suse.com/security/cve/CVE-2021-22930.html https://bugzilla.suse.com/1188917

1 0

openSUSE-SU-2021:3298-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3298-1 Rating: moderate References: #1190373 #1190374 Cross-References: CVE-2021-22946 CVE-2021-22947 CVSS scores: CVE-2021-22946 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-22947 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for curl fixes the following issues: - CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3298=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): curl-7.66.0-4.27.1 curl-debuginfo-7.66.0-4.27.1 curl-debugsource-7.66.0-4.27.1 libcurl-devel-7.66.0-4.27.1 libcurl4-7.66.0-4.27.1 libcurl4-debuginfo-7.66.0-4.27.1 - openSUSE Leap 15.3 (x86_64): libcurl-devel-32bit-7.66.0-4.27.1 libcurl4-32bit-7.66.0-4.27.1 libcurl4-32bit-debuginfo-7.66.0-4.27.1 References: https://www.suse.com/security/cve/CVE-2021-22946.html https://www.suse.com/security/cve/CVE-2021-22947.html https://bugzilla.suse.com/1190373 https://bugzilla.suse.com/1190374

1 0

openSUSE-SU-2021:1334-1: moderate: Security update for rabbitmq-server
by opensuse-security＠opensuse.org 04 Oct '21

04 Oct '21

openSUSE Security Update: Security update for rabbitmq-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1334-1 Rating: moderate References: #1185075 #1186203 #1187818 #1187819 Cross-References: CVE-2021-22116 CVE-2021-32718 CVE-2021-32719 CVSS scores: CVE-2021-22116 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-22116 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-32718 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N CVE-2021-32719 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for rabbitmq-server fixes the following issues: - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI (bsc#1187818). - CVE-2021-32719: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in federation management plugin (bsc#1187819). - CVE-2021-22116: Fixed improper input validation may lead to DoS (bsc#1186203). - Use /run instead of /var/run in tmpfiles.d configuration (bsc#1185075). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1334=1 Package List: - openSUSE Leap 15.2 (x86_64): erlang-rabbitmq-client-3.8.3-lp152.2.3.1 rabbitmq-server-3.8.3-lp152.2.3.1 rabbitmq-server-plugins-3.8.3-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-22116.html https://www.suse.com/security/cve/CVE-2021-32718.html https://www.suse.com/security/cve/CVE-2021-32719.html https://bugzilla.suse.com/1185075 https://bugzilla.suse.com/1186203 https://bugzilla.suse.com/1187818 https://bugzilla.suse.com/1187819

1 0