November 2021 - openSUSE Security Announce

openSUSE-SU-2021:3634-1: moderate: Security update for rubygem-activerecord-5_1
by opensuse-security＠opensuse.org 09 Nov '21

09 Nov '21

openSUSE Security Update: Security update for rubygem-activerecord-5_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3634-1 Rating: moderate References: #1182169 Cross-References: CVE-2021-22880 CVSS scores: CVE-2021-22880 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-22880 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-activerecord-5_1 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type (bsc#1182169). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3634=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-activerecord-5_1-5.1.4-5.3.3 References: https://www.suse.com/security/cve/CVE-2021-22880.html https://bugzilla.suse.com/1182169

1 0

openSUSE-SU-2021:1462-1: important: Security update for chromium
by opensuse-security＠opensuse.org 08 Nov '21

08 Nov '21

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1462-1 Rating: important References: #1192184 Cross-References: CVE-2021-37997 CVE-2021-37998 CVE-2021-37999 CVE-2021-38000 CVE-2021-38001 CVE-2021-38002 CVE-2021-38003 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 95.0.4638.69 (boo#1192184): * CVE-2021-37997: Use after free in Sign-In * CVE-2021-37998: Use after free in Garbage Collection * CVE-2021-37999: Insufficient data validation in New Tab Page * CVE-2021-38000: Insufficient validation of untrusted input in Intents * CVE-2021-38001: Type Confusion in V8 * CVE-2021-38002: Use after free in Web Transport * CVE-2021-38003: Inappropriate implementation in V8 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1462=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1462=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-95.0.4638.69-lp152.2.138.1 chromedriver-debuginfo-95.0.4638.69-lp152.2.138.1 chromium-95.0.4638.69-lp152.2.138.1 chromium-debuginfo-95.0.4638.69-lp152.2.138.1 - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-95.0.4638.69-bp153.2.40.3 chromium-95.0.4638.69-bp153.2.40.3 References: https://www.suse.com/security/cve/CVE-2021-37997.html https://www.suse.com/security/cve/CVE-2021-37998.html https://www.suse.com/security/cve/CVE-2021-37999.html https://www.suse.com/security/cve/CVE-2021-38000.html https://www.suse.com/security/cve/CVE-2021-38001.html https://www.suse.com/security/cve/CVE-2021-38002.html https://www.suse.com/security/cve/CVE-2021-38003.html https://bugzilla.suse.com/1192184

1 0

openSUSE-SU-2021:1460-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 08 Nov '21

08 Nov '21

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1460-1 Rating: important References: #1065729 #1085030 #1100416 #1129735 #1152489 #1154353 #1156395 #1157177 #1167773 #1172073 #1173604 #1176940 #1184673 #1185762 #1186109 #1187167 #1188563 #1188876 #1188983 #1188985 #1189841 #1190006 #1190067 #1190349 #1190351 #1190479 #1190620 #1190642 #1190795 #1190941 #1191229 #1191238 #1191241 #1191315 #1191317 #1191343 #1191349 #1191384 #1191449 #1191450 #1191451 #1191452 #1191455 #1191456 #1191628 #1191731 #1191800 #1191934 #1191958 #1192036 #1192040 #1192041 #1192107 #1192145 #1192267 Cross-References: CVE-2018-13405 CVE-2021-33033 CVE-2021-34556 CVE-2021-3542 CVE-2021-35477 CVE-2021-3655 CVE-2021-3715 CVE-2021-3760 CVE-2021-3772 CVE-2021-3896 CVE-2021-41864 CVE-2021-42008 CVE-2021-42252 CVE-2021-42739 CVE-2021-43056 CVSS scores: CVE-2018-13405 (NVD) : 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2018-13405 (SUSE): 4.4 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-33033 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-33033 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-34556 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-3542 (SUSE): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-35477 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2021-3655 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-3715 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-3760 (SUSE): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-3772 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3896 (SUSE): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-41864 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-42008 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-42008 (SUSE): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-42252 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-42739 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-43056 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-43056 (SUSE): 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has 40 fixes is now available. Description: The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13405: The inode_init_owner function in fs/inode.c allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735). - CVE-2021-33033: The Linux kernel had a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1188876). - CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983). - CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985). - CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563 bnc#1192267). - CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349). - CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067). - CVE-2021-3772: Invalid chunks may be used to remotely remove existing associations (bsc#1190351). - CVE-2021-3896: Fixed a array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c (bsc#1191958). - CVE-2021-41864: prealloc_elems_and_freelist in kernel/bpf/stackmap.c allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317). - CVE-2021-42008: The decode_data function in drivers/net/hamradio/6pack.c had a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access (bnc#1191315). - CVE-2021-42252: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c where local attackers were able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes (bnc#1190479). - CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673 bnc#1192036). - CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673). - CVE-2021-43056: It allowed a malicious KVM guest to crash the host, when the host is running on Power8, due to an arch/powerpc/kvm/book3s_hv_rmhandlers.S implementation bug in the handling of the SRR1 register values (bnc#1192107). The following non-security bugs were fixed: - acpi/arm64: fix next_platform_timer() section mismatch error (git-fixes). - ACPI: bgrt: Fix CFI violation (git-fixes). - ACPI: fix NULL pointer dereference (git-fixes). - ACPI: Use DEVICE_ATTR_<RW|RO|WO> macros (git-fixes). - Add cherry-picked commit id to the usb hso fix (git-fixes) - Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731). - ALSA: hda: avoid write to STATESTS if controller is in reset (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo PC50HS (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo X170KM-G (git-fixes). - ALSA: hda/realtek - ALC236 headset MIC recording issue (git-fixes). - ALSA: hda/realtek: Complete partial device name to avoid ambiguity (git-fixes). - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (git-fixes). - ALSA: seq: Fix a potential UAF by wrong private_free call order (git-fixes). - ALSA: usb-audio: Add quirk for VF0770 (git-fixes). - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (git-fixes). - ASoC: DAPM: Fix missing kctl change notifications (git-fixes). - ASoC: wm8960: Fix clock configuration on slave mode (git-fixes). - ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() (git-fixes). - ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() (git-fixes). - audit: fix possible null-pointer dereference in audit_filter_rules (git-fixes). - bfq: Remove merged request already in bfq_requests_merged() (bsc#1191456). - blk: Fix lock inversion between ioc lock and bfqd lock (bsc#1191456). - blktrace: Fix uaf in blk_trace access after removing by sysfs (bsc#1191452). - block: bfq: fix bfq_set_next_ioprio_data() (bsc#1191451). - bnxt_en: Fix TX timeout when TX ring size is set to the smallest (git-fixes). - bpf: Add bpf_patch_call_args prototype to include/linux/bpf.h (git-fixes). - bpf: Fix a typo of reuseport map in bpf.h (git-fixes). - bpf: Fix up bpf_skb_adjust_room helper's skb csum setting (git-fixes). - can: dev: can_restart: fix use after free bug (git-fixes). - can: peak_pci: peak_pci_remove(): fix UAF (git-fixes). - can: peak_usb: fix use after free bugs (git-fixes). - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification (git-fixes). - can: rcar_can: fix suspend/resume (git-fixes). - can: ti_hecc: ti_hecc_probe(): add missed clk_disable_unprepare() in error path (git-fixes). - can: xilinx_can: handle failure cases of pm_runtime_get_sync (git-fixes). - cb710: avoid NULL pointer subtraction (git-fixes). - ceph: fix handling of "meta" errors (bsc#1192041). - ceph: skip existing superblocks that are blocklisted or shut down when mounting (bsc#1192040). - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() (git-fixes). - drm/amd/display: Pass PCI deviceid into DC (git-fixes). - drm/amdgpu: fix gart.bo pin_count leak (git-fixes). - drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() (git-fixes). - drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (git-fixes). - drm/msm: Fix null pointer dereference on pointer edp (git-fixes). - drm/nouveau/debugfs: fix file release memory leak (git-fixes). - drm/panel: olimex-lcd-olinuxino: select CRC32 (git-fixes). - e1000e: Fix packet loss on Tiger Lake and later (git-fixes). - e100: fix buffer overrun in e100_get_regs (git-fixes). - e100: fix length calculation in e100_get_regs_len (git-fixes). - e100: handle eeprom as little endian (git-fixes). - ext4: fix reserved space counter leakage (bsc#1191450). - ext4: report correct st_size for encrypted symlinks (bsc#1191449). - fscrypt: add fscrypt_symlink_getattr() for computing st_size (bsc#1191449). - fs, mm: fix race in unlinking swapfile (bsc#1191455). - gpio: pca953x: Improve bias setting (git-fixes). - gve: Avoid freeing NULL pointer (git-fixes). - gve: Correct available tx qpl check (git-fixes). - gve: fix gve_get_stats() (git-fixes). - gve: Properly handle errors in gve_assign_qpl (bsc#1176940). - gve: report 64bit tx_bytes counter from gve_handle_report_stats() (bsc#1176940). - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (git-fixes). - HID: betop: fix slab-out-of-bounds Write in betop_probe (git-fixes). - HID: u2fzero: ignore incomplete packets without data (git-fixes). - HID: usbhid: free raw_report buffers in usbhid_stop (git-fixes). - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (git-fixes). - hso: fix bailout in error case of probe (git-fixes). - i2c: acpi: fix resource leak in reconfiguration device addition (git-fixes). - i40e: Fix ATR queue selection (git-fixes). - i40e: fix endless loop under rtnl (git-fixes). - i40e: Fix freeing of uninitialized misc IRQ vector (git-fixes). - iavf: fix double unlock of crit_lock (git-fixes). - ice: Add missing E810 device ids (jsc#SLE-7966 bsc#1157177). - ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition (bsc#1191241). - iio: adc128s052: Fix the error handling path of 'adc128_probe()' (git-fixes). - iio: adc: aspeed: set driver data when adc probe (git-fixes). - iio: dac: ti-dac5571: fix an error code in probe() (git-fixes). - iio: light: opt3001: Fixed timeout error when 0 lux (git-fixes). - iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (git-fixes). - iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (git-fixes). - iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (git-fixes). - Input: snvs_pwrkey - add clk handling (git-fixes). - Input: xpad - add support for another USB ID of Nacon GC-100 (git-fixes). - ionic: do not remove netdev->dev_addr when syncing uc list (bsc#1167773). - ipv6/netfilter: Discard first fragment not including all headers (bsc#1191241). - IPv6: reply ICMP error if the first fragment do not include all headers (bsc#1191241). - isdn: cpai: check ctr->cnr to avoid array index out of bound (git-fixes). - isdn: mISDN: Fix sleeping function called from invalid context (git-fixes). - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup (git-fixes). - kabi: block: Fix kabi of blk_mq_sched_try_insert_merge() (bsc#1191456). - kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167). - KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live (bsc#1156395). - KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state (bsc#1156395). - KVM: PPC: Book3S HV: Save host FSCR in the P7/8 path (bsc#1065729). - KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (bsc#1156395). - KVM: PPC: Fix clearing never mapped TCEs in realmode (bsc#1156395). - KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (bsc#1156395). - lan78xx: select CRC32 (git-fixes). - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD (git-fixes). - mac80211: check return value of rhashtable_init (git-fixes). - mac80211: Drop frames from invalid MAC address in ad-hoc mode (git-fixes). - mei: me: add Ice Lake-N device id (git-fixes). - mlx5: count all link events (git-fixes). - mlxsw: thermal: Fix out-of-bounds memory accesses (git-fixes). - mmc: dw_mmc: exynos: fix the finding clock sample value (git-fixes). - mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (git-fixes). - mmc: vub300: fix control-message timeouts (git-fixes). - net/af_unix: fix a data-race in unix_dgram_poll (bsc#1154353). - net: batman-adv: fix error handling (git-fixes). - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (git-fixes). - net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (git-fixes). - net: cdc_eem: fix tx fixup skb leak (git-fixes). - net: cdc_ncm: correct overhead in delayed_ndp_size (git-fixes). - netfilter: conntrack: collect all entries in one cycle (bsc#1173604). - net: hns3: fix vf reset workqueue cannot exit (bsc#1154353). - net: hso: add failure handler for add_net_device (git-fixes). - net: hso: fix NULL-deref on disconnect regression (git-fixes). - net: hso: fix null-ptr-deref during tty device unregistration (git-fixes). - net: ipv6: Discard next-hop MTU less than minimum link MTU (bsc#1191241). - net: lan78xx: fix division by zero in send path (git-fixes). - net: mana: Fix error handling in mana_create_rxq() (git-fixes, bsc#1191800). - net/mlx4_en: Do not allow aRFS for encapsulated packets (git-fixes). - net/mlx4_en: Resolve bad operstate value (git-fixes). - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (git-fixes). - net/mlx5: Fix unpublish devlink parameters (jsc#SLE-8464). - net/mlx5: FWTrace, cancel work on alloc pd error flow (git-fixes). - net: usb: Fix uninit-was-stored issue in asix_read_phy_addr() (git-fixes). - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (git-fixes). - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (git-fixes). - nfc: fix error handling of nfc_proto_register() (git-fixes). - nfc: port100: fix using -ERRNO as command type mask (git-fixes). - NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628). - nvme: add command id quirk for apple controllers (git-fixes). - nvme-fc: avoid race between time out and tear down (bsc#1185762). - nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (bsc#1185762). - nvme-fc: update hardware queues before using them (bsc#1185762). - nvme-pci: Fix abort command id (git-fixes). - nvme-pci: fix error unwind in nvme_map_data (bsc#1191934). - nvme-pci: refactor nvme_unmap_data (bsc#1191934). - ocfs2: fix data corruption after conversion from inline format (bsc#1190795). - pata_legacy: fix a couple uninitialized variable bugs (git-fixes). - PCI: Fix pci_host_bridge struct device release/free handling (git-fixes). - phy: mdio: fix memory leak (git-fixes). - platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (git-fixes). - platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call (git-fixes). - platform/x86: intel_scu_ipc: Update timeout value in comment (git-fixes). - powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1065729). - powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1065729). - powerpc/bpf: Use bctrl for making function calls (bsc#1065729). - powerpc/lib: Fix emulate_step() std test (bsc#1065729). - powerpc/pseries: Fix build error when NUMA=n (bsc#1190620 ltc#194498 git-fixes). - powerpc/xive: Discard disabled interrupts in get_irqchip_state() (bsc#1085030 git-fixes). - pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init (git-fixes). - ptp_pch: Load module automatically if ID matches (git-fixes). - ptp_pch: Restore dependency on PCI (git-fixes). - qed: Fix missing error code in qed_slowpath_start() (git-fixes). - qed: Handle management FW error (git-fixes). - qed: rdma - do not wait for resources under hw error recovery flow (git-fixes). - regmap: Fix possible double-free in regcache_rbtree_exit() (git-fixes). - rpm: use _rpmmacrodir (boo#1191384) - scsi: lpfc: Allow fabric node recovery if recovery is in progress before devloss (bsc#1192145). - scsi: lpfc: Allow PLOGI retry if previous PLOGI was aborted (bsc#1192145). - scsi: lpfc: Correct sysfs reporting of loop support after SFP status change (bsc#1192145). - scsi: lpfc: Fix link down processing to address NULL pointer dereference (bsc#1192145). - scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (bsc#1191349). - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine (bsc#1192145). - scsi: lpfc: Revert LOG_TRACE_EVENT back to LOG_INIT prior to driver_resource_setup() (bsc#1192145). - scsi: lpfc: Update lpfc version to 14.0.0.3 (bsc#1192145). - scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset (bsc#1192145). - scsi: qla2xxx: Add debug print of 64G link speed (bsc#1190941). - scsi: qla2xxx: Add host attribute to trigger MPI hang (bsc#1190941). - scsi: qla2xxx: Add support for mailbox passthru (bsc#1190941). - scsi: qla2xxx: Adjust request/response queue size for 28xx (bsc#1190941). - scsi: qla2xxx: Call process_response_queue() in Tx path (bsc#1190941). - scsi: qla2xxx: Changes to support FCP2 Target (bsc#1190941). - scsi: qla2xxx: Changes to support kdump kernel (bsc#1190941). - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS (bsc#1190941). - scsi: qla2xxx: Check for firmware capability before creating QPair (bsc#1190941). - scsi: qla2xxx: Display 16G only as supported speeds for 3830c card (bsc#1190941). - scsi: qla2xxx: Do not call fc_block_scsi_eh() during bus reset (bsc#1190941). - scsi: qla2xxx: edif: Add N2N support for EDIF (bsc#1190941). - scsi: qla2xxx: edif: Do secure PLOGI when auth app is present (bsc#1190941). - scsi: qla2xxx: edif: Fix EDIF enable flag (bsc#1190941). - scsi: qla2xxx: edif: Fix returnvar.cocci warnings (bsc#1190941). - scsi: qla2xxx: edif: Fix stale session (bsc#1190941). - scsi: qla2xxx: edif: Reject AUTH ELS on session down (bsc#1190941). - scsi: qla2xxx: edif: Use link event to wake up app (bsc#1190941). - scsi: qla2xxx: Fix crash in NVMe abort path (bsc#1190941). - scsi: qla2xxx: Fix excessive messages during device logout (bsc#1190941). - scsi: qla2xxx: Fix hang during NVMe session tear down (bsc#1190941). - scsi: qla2xxx: Fix hang on NVMe command timeouts (bsc#1190941). - scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (bsc#1190941). - scsi: qla2xxx: Fix NPIV create erroneous error (bsc#1190941). - scsi: qla2xxx: Fix NVMe | FCP personality change (bsc#1190941). - scsi: qla2xxx: Fix NVMe retry (bsc#1190941). - scsi: qla2xxx: Fix NVMe session down detection (bsc#1190941). - scsi: qla2xxx: Fix port type info (bsc#1190941). - scsi: qla2xxx: Fix unsafe removal from linked list (bsc#1190941). - scsi: qla2xxx: Fix use after free in eh_abort path (bsc#1190941). - scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue (bsc#1190941). - scsi: qla2xxx: Open-code qla2xxx_eh_device_reset() (bsc#1190941). - scsi: qla2xxx: Open-code qla2xxx_eh_target_reset() (bsc#1190941). - scsi: qla2xxx: Remove redundant initialization of pointer req (bsc#1190941). - scsi: qla2xxx: Restore initiator in dual mode (bsc#1190941). - scsi: qla2xxx: Show OS name and version in FDMI-1 (bsc#1190941). - scsi: qla2xxx: Suppress unnecessary log messages during login (bsc#1190941). - scsi: qla2xxx: Sync queue idx with queue_pair_map idx (bsc#1190941). - scsi: qla2xxx: Update version to 10.02.06.100-k (bsc#1190941). - scsi: qla2xxx: Update version to 10.02.06.200-k (bsc#1190941). - scsi: qla2xxx: Update version to 10.02.07.100-k (bsc#1190941). - scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (bsc#1190941). - sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351). - soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment (git-fixes). - spi: spi-nxp-fspi: do not depend on a specific node name erratum workaround (git-fixes). - tpm: ibmvtpm: Avoid error message when process gets signal while waiting (bsc#1065729). - USB: cdc-acm: clean up probe error labels (git-fixes). - USB: cdc-acm: fix minor-number release (git-fixes). - usb: hso: fix error handling code of hso_create_net_device (git-fixes). - usb: hso: remove the bailout parameter (git-fixes). - usb: musb: dsps: Fix the probe error path (git-fixes). - USB: serial: option: add prod. id for Quectel EG91 (git-fixes). - USB: serial: option: add Quectel EC200S-CN module support (git-fixes). - USB: serial: option: add Telit LE910Cx composition 0x1204 (git-fixes). - USB: serial: qcserial: add EM9191 QDL support (git-fixes). - USB: xhci: dbc: fix tty registration race (git-fixes). - video: fbdev: gbefb: Only instantiate device when built for IP32 (git-fixes). - virtio: write back F_VERSION_1 before validate (git-fixes). - watchdog: orion: use 0 for unset heartbeat (git-fixes). - x86/pat: Pass valid address to sanitize_phys() (bsc#1152489). - x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions (bsc#1152489). - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (bsc#1152489). - xen: fix setting of max_pfn in shared_info (git-fixes). - xen: reset legacy rtc flag for PV domU (git-fixes). - xfs: ensure that the inode uid/gid match values match the icdinode ones (bsc#1190006). - xfs: fix log intent recovery ENOSPC shutdowns when inactivating inodes (bsc#1190642). - xfs: merge the projid fields in struct xfs_icdinode (bsc#1190006). - xfs: remove the icdinode di_uid/di_gid members (bsc#1190006). - xhci: Enable trust tx length quirk for Fresco FL11 USB controller (git-fixes). - xhci: Fix command ring pointer corruption while aborting a command (git-fixes). - xhci: guard accesses to ep_state in xhci_endpoint_reset() (git-fixes). - xhci: guard accesses to ep_state in xhci_endpoint_reset() (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1460=1 Package List: - openSUSE Leap 15.2 (noarch): kernel-devel-5.3.18-lp152.98.1 kernel-docs-5.3.18-lp152.98.1 kernel-docs-html-5.3.18-lp152.98.1 kernel-macros-5.3.18-lp152.98.1 kernel-source-5.3.18-lp152.98.1 kernel-source-vanilla-5.3.18-lp152.98.1 - openSUSE Leap 15.2 (x86_64): kernel-debug-5.3.18-lp152.98.1 kernel-debug-debuginfo-5.3.18-lp152.98.1 kernel-debug-debugsource-5.3.18-lp152.98.1 kernel-debug-devel-5.3.18-lp152.98.1 kernel-debug-devel-debuginfo-5.3.18-lp152.98.1 kernel-default-5.3.18-lp152.98.1 kernel-default-base-5.3.18-lp152.98.1.lp152.8.46.1 kernel-default-base-rebuild-5.3.18-lp152.98.1.lp152.8.46.1 kernel-default-debuginfo-5.3.18-lp152.98.1 kernel-default-debugsource-5.3.18-lp152.98.1 kernel-default-devel-5.3.18-lp152.98.1 kernel-default-devel-debuginfo-5.3.18-lp152.98.1 kernel-kvmsmall-5.3.18-lp152.98.1 kernel-kvmsmall-debuginfo-5.3.18-lp152.98.1 kernel-kvmsmall-debugsource-5.3.18-lp152.98.1 kernel-kvmsmall-devel-5.3.18-lp152.98.1 kernel-kvmsmall-devel-debuginfo-5.3.18-lp152.98.1 kernel-obs-build-5.3.18-lp152.98.1 kernel-obs-build-debugsource-5.3.18-lp152.98.1 kernel-obs-qa-5.3.18-lp152.98.1 kernel-preempt-5.3.18-lp152.98.1 kernel-preempt-debuginfo-5.3.18-lp152.98.1 kernel-preempt-debugsource-5.3.18-lp152.98.1 kernel-preempt-devel-5.3.18-lp152.98.1 kernel-preempt-devel-debuginfo-5.3.18-lp152.98.1 kernel-syms-5.3.18-lp152.98.1 References: https://www.suse.com/security/cve/CVE-2018-13405.html https://www.suse.com/security/cve/CVE-2021-33033.html https://www.suse.com/security/cve/CVE-2021-34556.html https://www.suse.com/security/cve/CVE-2021-3542.html https://www.suse.com/security/cve/CVE-2021-35477.html https://www.suse.com/security/cve/CVE-2021-3655.html https://www.suse.com/security/cve/CVE-2021-3715.html https://www.suse.com/security/cve/CVE-2021-3760.html https://www.suse.com/security/cve/CVE-2021-3772.html https://www.suse.com/security/cve/CVE-2021-3896.html https://www.suse.com/security/cve/CVE-2021-41864.html https://www.suse.com/security/cve/CVE-2021-42008.html https://www.suse.com/security/cve/CVE-2021-42252.html https://www.suse.com/security/cve/CVE-2021-42739.html https://www.suse.com/security/cve/CVE-2021-43056.html https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1085030 https://bugzilla.suse.com/1100416 https://bugzilla.suse.com/1129735 https://bugzilla.suse.com/1152489 https://bugzilla.suse.com/1154353 https://bugzilla.suse.com/1156395 https://bugzilla.suse.com/1157177 https://bugzilla.suse.com/1167773 https://bugzilla.suse.com/1172073 https://bugzilla.suse.com/1173604 https://bugzilla.suse.com/1176940 https://bugzilla.suse.com/1184673 https://bugzilla.suse.com/1185762 https://bugzilla.suse.com/1186109 https://bugzilla.suse.com/1187167 https://bugzilla.suse.com/1188563 https://bugzilla.suse.com/1188876 https://bugzilla.suse.com/1188983 https://bugzilla.suse.com/1188985 https://bugzilla.suse.com/1189841 https://bugzilla.suse.com/1190006 https://bugzilla.suse.com/1190067 https://bugzilla.suse.com/1190349 https://bugzilla.suse.com/1190351 https://bugzilla.suse.com/1190479 https://bugzilla.suse.com/1190620 https://bugzilla.suse.com/1190642 https://bugzilla.suse.com/1190795 https://bugzilla.suse.com/1190941 https://bugzilla.suse.com/1191229 https://bugzilla.suse.com/1191238 https://bugzilla.suse.com/1191241 https://bugzilla.suse.com/1191315 https://bugzilla.suse.com/1191317 https://bugzilla.suse.com/1191343 https://bugzilla.suse.com/1191349 https://bugzilla.suse.com/1191384 https://bugzilla.suse.com/1191449 https://bugzilla.suse.com/1191450 https://bugzilla.suse.com/1191451 https://bugzilla.suse.com/1191452 https://bugzilla.suse.com/1191455 https://bugzilla.suse.com/1191456 https://bugzilla.suse.com/1191628 https://bugzilla.suse.com/1191731 https://bugzilla.suse.com/1191800 https://bugzilla.suse.com/1191934 https://bugzilla.suse.com/1191958 https://bugzilla.suse.com/1192036 https://bugzilla.suse.com/1192040 https://bugzilla.suse.com/1192041 https://bugzilla.suse.com/1192107 https://bugzilla.suse.com/1192145 https://bugzilla.suse.com/1192267

1 0

openSUSE-SU-2021:1461-1: important: Security update for qemu
by opensuse-security＠opensuse.org 08 Nov '21

08 Nov '21

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1461-1 Rating: important References: #1189234 #1189702 #1189938 #1190425 Cross-References: CVE-2021-3713 CVE-2021-3748 CVSS scores: CVE-2021-3713 (SUSE): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-3748 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702) - CVE-2021-3748: Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938) Non-security issues fixed: - Add transfer length item in block limits page of scsi vpd (bsc#1190425) - Fix qemu crash while deleting xen-block (bsc#1189234) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1461=1 Package List: - openSUSE Leap 15.2 (x86_64): qemu-4.2.1-lp152.9.23.1 qemu-arm-4.2.1-lp152.9.23.1 qemu-arm-debuginfo-4.2.1-lp152.9.23.1 qemu-audio-alsa-4.2.1-lp152.9.23.1 qemu-audio-alsa-debuginfo-4.2.1-lp152.9.23.1 qemu-audio-pa-4.2.1-lp152.9.23.1 qemu-audio-pa-debuginfo-4.2.1-lp152.9.23.1 qemu-audio-sdl-4.2.1-lp152.9.23.1 qemu-audio-sdl-debuginfo-4.2.1-lp152.9.23.1 qemu-block-curl-4.2.1-lp152.9.23.1 qemu-block-curl-debuginfo-4.2.1-lp152.9.23.1 qemu-block-dmg-4.2.1-lp152.9.23.1 qemu-block-dmg-debuginfo-4.2.1-lp152.9.23.1 qemu-block-gluster-4.2.1-lp152.9.23.1 qemu-block-gluster-debuginfo-4.2.1-lp152.9.23.1 qemu-block-iscsi-4.2.1-lp152.9.23.1 qemu-block-iscsi-debuginfo-4.2.1-lp152.9.23.1 qemu-block-nfs-4.2.1-lp152.9.23.1 qemu-block-nfs-debuginfo-4.2.1-lp152.9.23.1 qemu-block-rbd-4.2.1-lp152.9.23.1 qemu-block-rbd-debuginfo-4.2.1-lp152.9.23.1 qemu-block-ssh-4.2.1-lp152.9.23.1 qemu-block-ssh-debuginfo-4.2.1-lp152.9.23.1 qemu-debuginfo-4.2.1-lp152.9.23.1 qemu-debugsource-4.2.1-lp152.9.23.1 qemu-extra-4.2.1-lp152.9.23.1 qemu-extra-debuginfo-4.2.1-lp152.9.23.1 qemu-guest-agent-4.2.1-lp152.9.23.1 qemu-guest-agent-debuginfo-4.2.1-lp152.9.23.1 qemu-ksm-4.2.1-lp152.9.23.1 qemu-kvm-4.2.1-lp152.9.23.1 qemu-lang-4.2.1-lp152.9.23.1 qemu-linux-user-4.2.1-lp152.9.23.1 qemu-linux-user-debuginfo-4.2.1-lp152.9.23.1 qemu-linux-user-debugsource-4.2.1-lp152.9.23.1 qemu-ppc-4.2.1-lp152.9.23.1 qemu-ppc-debuginfo-4.2.1-lp152.9.23.1 qemu-s390-4.2.1-lp152.9.23.1 qemu-s390-debuginfo-4.2.1-lp152.9.23.1 qemu-testsuite-4.2.1-lp152.9.23.1 qemu-tools-4.2.1-lp152.9.23.1 qemu-tools-debuginfo-4.2.1-lp152.9.23.1 qemu-ui-curses-4.2.1-lp152.9.23.1 qemu-ui-curses-debuginfo-4.2.1-lp152.9.23.1 qemu-ui-gtk-4.2.1-lp152.9.23.1 qemu-ui-gtk-debuginfo-4.2.1-lp152.9.23.1 qemu-ui-sdl-4.2.1-lp152.9.23.1 qemu-ui-sdl-debuginfo-4.2.1-lp152.9.23.1 qemu-ui-spice-app-4.2.1-lp152.9.23.1 qemu-ui-spice-app-debuginfo-4.2.1-lp152.9.23.1 qemu-vhost-user-gpu-4.2.1-lp152.9.23.1 qemu-vhost-user-gpu-debuginfo-4.2.1-lp152.9.23.1 qemu-x86-4.2.1-lp152.9.23.1 qemu-x86-debuginfo-4.2.1-lp152.9.23.1 - openSUSE Leap 15.2 (noarch): qemu-ipxe-1.0.0+-lp152.9.23.1 qemu-microvm-4.2.1-lp152.9.23.1 qemu-seabios-1.12.1+-lp152.9.23.1 qemu-sgabios-8-lp152.9.23.1 qemu-vgabios-1.12.1+-lp152.9.23.1 References: https://www.suse.com/security/cve/CVE-2021-3713.html https://www.suse.com/security/cve/CVE-2021-3748.html https://bugzilla.suse.com/1189234 https://bugzilla.suse.com/1189702 https://bugzilla.suse.com/1189938 https://bugzilla.suse.com/1190425

1 0

openSUSE-SU-2021:1458-1: important: Security update for transfig
by opensuse-security＠opensuse.org 07 Nov '21

07 Nov '21

openSUSE Security Update: Security update for transfig ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1458-1 Rating: important References: #1189325 #1189343 #1189345 #1189346 #1190607 #1190611 #1190612 #1190615 #1190616 #1190617 #1190618 #1192019 Cross-References: CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-21532 CVE-2020-21533 CVE-2020-21534 CVE-2020-21535 CVE-2020-21680 CVE-2020-21681 CVE-2020-21682 CVE-2020-21683 CVE-2021-32280 CVSS scores: CVE-2020-21529 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-21530 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-21531 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-21532 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-21533 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-21534 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-21535 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-21680 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-21681 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-21682 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-21683 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-32280 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for transfig fixes the following issues: Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021) - bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c. - bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c. - bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c. - bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c. - bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c. - bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c. - bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c. - bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1458=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x): transfig-3.2.8b-bp152.3.6.2 References: https://www.suse.com/security/cve/CVE-2020-21529.html https://www.suse.com/security/cve/CVE-2020-21530.html https://www.suse.com/security/cve/CVE-2020-21531.html https://www.suse.com/security/cve/CVE-2020-21532.html https://www.suse.com/security/cve/CVE-2020-21533.html https://www.suse.com/security/cve/CVE-2020-21534.html https://www.suse.com/security/cve/CVE-2020-21535.html https://www.suse.com/security/cve/CVE-2020-21680.html https://www.suse.com/security/cve/CVE-2020-21681.html https://www.suse.com/security/cve/CVE-2020-21682.html https://www.suse.com/security/cve/CVE-2020-21683.html https://www.suse.com/security/cve/CVE-2021-32280.html https://bugzilla.suse.com/1189325 https://bugzilla.suse.com/1189343 https://bugzilla.suse.com/1189345 https://bugzilla.suse.com/1189346 https://bugzilla.suse.com/1190607 https://bugzilla.suse.com/1190611 https://bugzilla.suse.com/1190612 https://bugzilla.suse.com/1190615 https://bugzilla.suse.com/1190616 https://bugzilla.suse.com/1190617 https://bugzilla.suse.com/1190618 https://bugzilla.suse.com/1192019

1 0

openSUSE-SU-2021:1454-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 06 Nov '21

06 Nov '21

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1454-1 Rating: important References: #1191937 Cross-References: CVE-2021-42762 CVSS scores: CVE-2021-42762 (SUSE): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for webkit2gtk3 fixes the following issues: - CVE-2021-42762: Updated seccomp rules with latest changes from flatpak (bsc#1191937). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1454=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.32.4-lp152.2.22.1 libjavascriptcoregtk-4_0-18-debuginfo-2.32.4-lp152.2.22.1 libwebkit2gtk-4_0-37-2.32.4-lp152.2.22.1 libwebkit2gtk-4_0-37-debuginfo-2.32.4-lp152.2.22.1 typelib-1_0-JavaScriptCore-4_0-2.32.4-lp152.2.22.1 typelib-1_0-WebKit2-4_0-2.32.4-lp152.2.22.1 typelib-1_0-WebKit2WebExtension-4_0-2.32.4-lp152.2.22.1 webkit-jsc-4-2.32.4-lp152.2.22.1 webkit-jsc-4-debuginfo-2.32.4-lp152.2.22.1 webkit2gtk-4_0-injected-bundles-2.32.4-lp152.2.22.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.32.4-lp152.2.22.1 webkit2gtk3-debugsource-2.32.4-lp152.2.22.1 webkit2gtk3-devel-2.32.4-lp152.2.22.1 webkit2gtk3-minibrowser-2.32.4-lp152.2.22.1 webkit2gtk3-minibrowser-debuginfo-2.32.4-lp152.2.22.1 - openSUSE Leap 15.2 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.32.4-lp152.2.22.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.32.4-lp152.2.22.1 libwebkit2gtk-4_0-37-32bit-2.32.4-lp152.2.22.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.32.4-lp152.2.22.1 - openSUSE Leap 15.2 (noarch): libwebkit2gtk3-lang-2.32.4-lp152.2.22.1 References: https://www.suse.com/security/cve/CVE-2021-42762.html https://bugzilla.suse.com/1191937

1 0

openSUSE-SU-2021:1455-1: important: Security update for java-1_8_0-openj9
by opensuse-security＠opensuse.org 06 Nov '21

06 Nov '21

openSUSE Security Update: Security update for java-1_8_0-openj9 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1455-1 Rating: important References: #1185055 #1185056 #1188564 #1188565 #1188566 #1191901 #1191903 #1191904 #1191906 #1191909 #1191910 #1191911 #1191912 #1191913 #1191914 Cross-References: CVE-2021-2161 CVE-2021-2163 CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 CVE-2021-35550 CVE-2021-35556 CVE-2021-35559 CVE-2021-35561 CVE-2021-35564 CVE-2021-35565 CVE-2021-35567 CVE-2021-35578 CVE-2021-35586 CVE-2021-35603 CVSS scores: CVE-2021-2161 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-2161 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-2163 (NVD) : 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-2163 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-2341 (NVD) : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2021-2341 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2021-2369 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2021-2369 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2021-2388 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-2388 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-35550 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-35550 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-35556 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35556 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35559 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35561 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35561 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35564 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-35564 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-35565 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35565 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35567 (NVD) : 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N CVE-2021-35567 (SUSE): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N CVE-2021-35578 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35578 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35586 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35586 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35603 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-35603 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual machine including Oracle July 2021 and October 2021 CPU changes - CVE-2021-2161: Fixed incorrect handling of partially quoted arguments in ProcessBuilder on Windows (bsc#1185056). - CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055). - CVE-2021-2341: Fixed flaw inside the FtpClient (bsc#1188564). - CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files (bsc#1188565). - CVE-2021-2388: Fixed flaw inside the Hotspot component performed range check elimination (bsc#1188566). - CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901). - CVE-2021-35556: Fixed excessive memory allocation in RTFParser (bsc#1191910). - CVE-2021-35559: Fixed excessive memory allocation in RTFReader (bsc#1191911). - CVE-2021-35561: Fixed excessive memory allocation in HashMap and HashSet (bsc#1191912). - CVE-2021-35564: Fixed certificates with end dates too far in the future can corrupt keystore (bsc#1191913). - CVE-2021-35565: Fixed loop in HttpsServer triggered during TLS session close (bsc#1191909). - CVE-2021-35567: Fixed incorrect principal selection when using Kerberos Constrained Delegation (bsc#1191903). - CVE-2021-35578: Fixed unexpected exception raised during TLS handshake (bsc#1191904). - CVE-2021-35586: Fixed excessive memory allocation in BMPImageReader (bsc#1191914). - CVE-2021-35603: Fixed non-constant comparison during TLS handshakes (bsc#1191906). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1455=1 Package List: - openSUSE Leap 15.2 (noarch): java-1_8_0-openj9-javadoc-1.8.0.312-lp152.3.12.1 - openSUSE Leap 15.2 (x86_64): java-1_8_0-openj9-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-accessibility-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-debuginfo-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-debugsource-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-demo-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-demo-debuginfo-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-devel-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-devel-debuginfo-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-headless-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-headless-debuginfo-1.8.0.312-lp152.3.12.1 java-1_8_0-openj9-src-1.8.0.312-lp152.3.12.1 References: https://www.suse.com/security/cve/CVE-2021-2161.html https://www.suse.com/security/cve/CVE-2021-2163.html https://www.suse.com/security/cve/CVE-2021-2341.html https://www.suse.com/security/cve/CVE-2021-2369.html https://www.suse.com/security/cve/CVE-2021-2388.html https://www.suse.com/security/cve/CVE-2021-35550.html https://www.suse.com/security/cve/CVE-2021-35556.html https://www.suse.com/security/cve/CVE-2021-35559.html https://www.suse.com/security/cve/CVE-2021-35561.html https://www.suse.com/security/cve/CVE-2021-35564.html https://www.suse.com/security/cve/CVE-2021-35565.html https://www.suse.com/security/cve/CVE-2021-35567.html https://www.suse.com/security/cve/CVE-2021-35578.html https://www.suse.com/security/cve/CVE-2021-35586.html https://www.suse.com/security/cve/CVE-2021-35603.html https://bugzilla.suse.com/1185055 https://bugzilla.suse.com/1185056 https://bugzilla.suse.com/1188564 https://bugzilla.suse.com/1188565 https://bugzilla.suse.com/1188566 https://bugzilla.suse.com/1191901 https://bugzilla.suse.com/1191903 https://bugzilla.suse.com/1191904 https://bugzilla.suse.com/1191906 https://bugzilla.suse.com/1191909 https://bugzilla.suse.com/1191910 https://bugzilla.suse.com/1191911 https://bugzilla.suse.com/1191912 https://bugzilla.suse.com/1191913 https://bugzilla.suse.com/1191914

1 0

openSUSE-SU-2021:1452-1: important: Security update for mailman
by opensuse-security＠opensuse.org 05 Nov '21

05 Nov '21

openSUSE Security Update: Security update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1452-1 Rating: important References: #1047218 #1191959 #1191960 Cross-References: CVE-2021-42096 CVE-2021-42097 CVSS scores: CVE-2021-42096 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-42097 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for mailman fixes the following issues: Update to 2.1.35 to fix 2 security issues: - A potential for for a list member to carry out an off-line brute force attack to obtain the list admin password has been reported by Andre Protas, Richard Cloke and Andy Nuttall of Apple. This is fixed. CVE-2021-42096 (boo#1191959, LP:#1947639) - A CSRF attack via the user options page could allow takeover of a users account. This is fixed. CVE-2021-42097 (boo#1191960, LP:#1947640) - make package build reproducible (boo#1047218) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1452=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): mailman-2.1.35-bp152.7.6.1 References: https://www.suse.com/security/cve/CVE-2021-42096.html https://www.suse.com/security/cve/CVE-2021-42097.html https://bugzilla.suse.com/1047218 https://bugzilla.suse.com/1191959 https://bugzilla.suse.com/1191960

1 0

openSUSE-SU-2021:1451-1: moderate: Security update for libvirt
by opensuse-security＠opensuse.org 05 Nov '21

05 Nov '21

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1451-1 Rating: moderate References: #1177902 #1186398 #1188232 #1188843 #1190420 #1190693 #1190695 Cross-References: CVE-2021-3667 CVSS scores: CVE-2021-3667 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for libvirt fixes the following issues: - CVE-2021-3667: Fixed a DoS vulnerability in the libvirt virStoragePoolLookupByTargetPath API. (bsc#1188843) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1451=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libvirt-6.0.0-lp152.9.15.1 libvirt-admin-6.0.0-lp152.9.15.1 libvirt-admin-debuginfo-6.0.0-lp152.9.15.1 libvirt-client-6.0.0-lp152.9.15.1 libvirt-client-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-6.0.0-lp152.9.15.1 libvirt-daemon-config-network-6.0.0-lp152.9.15.1 libvirt-daemon-config-nwfilter-6.0.0-lp152.9.15.1 libvirt-daemon-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-interface-6.0.0-lp152.9.15.1 libvirt-daemon-driver-interface-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-lxc-6.0.0-lp152.9.15.1 libvirt-daemon-driver-lxc-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-network-6.0.0-lp152.9.15.1 libvirt-daemon-driver-network-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-nodedev-6.0.0-lp152.9.15.1 libvirt-daemon-driver-nodedev-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-nwfilter-6.0.0-lp152.9.15.1 libvirt-daemon-driver-nwfilter-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-qemu-6.0.0-lp152.9.15.1 libvirt-daemon-driver-qemu-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-secret-6.0.0-lp152.9.15.1 libvirt-daemon-driver-secret-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-core-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-core-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-disk-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-disk-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-gluster-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-gluster-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-iscsi-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-iscsi-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-logical-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-logical-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-mpath-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-mpath-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-scsi-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-scsi-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-hooks-6.0.0-lp152.9.15.1 libvirt-daemon-lxc-6.0.0-lp152.9.15.1 libvirt-daemon-qemu-6.0.0-lp152.9.15.1 libvirt-debugsource-6.0.0-lp152.9.15.1 libvirt-devel-6.0.0-lp152.9.15.1 libvirt-libs-6.0.0-lp152.9.15.1 libvirt-libs-debuginfo-6.0.0-lp152.9.15.1 libvirt-lock-sanlock-6.0.0-lp152.9.15.1 libvirt-lock-sanlock-debuginfo-6.0.0-lp152.9.15.1 libvirt-nss-6.0.0-lp152.9.15.1 libvirt-nss-debuginfo-6.0.0-lp152.9.15.1 wireshark-plugin-libvirt-6.0.0-lp152.9.15.1 wireshark-plugin-libvirt-debuginfo-6.0.0-lp152.9.15.1 - openSUSE Leap 15.2 (noarch): libvirt-bash-completion-6.0.0-lp152.9.15.1 libvirt-doc-6.0.0-lp152.9.15.1 - openSUSE Leap 15.2 (x86_64): libvirt-client-32bit-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-libxl-6.0.0-lp152.9.15.1 libvirt-daemon-driver-libxl-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-rbd-6.0.0-lp152.9.15.1 libvirt-daemon-driver-storage-rbd-debuginfo-6.0.0-lp152.9.15.1 libvirt-daemon-xen-6.0.0-lp152.9.15.1 libvirt-devel-32bit-6.0.0-lp152.9.15.1 References: https://www.suse.com/security/cve/CVE-2021-3667.html https://bugzilla.suse.com/1177902 https://bugzilla.suse.com/1186398 https://bugzilla.suse.com/1188232 https://bugzilla.suse.com/1188843 https://bugzilla.suse.com/1190420 https://bugzilla.suse.com/1190693 https://bugzilla.suse.com/1190695

1 0

openSUSE-SU-2021:3619-1: moderate: Security update for libvirt
by opensuse-security＠opensuse.org 05 Nov '21

05 Nov '21

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3619-1 Rating: moderate References: #1177902 #1183247 #1186398 #1190420 #1190493 #1190693 #1190695 #1190917 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libvirt fixes the following issues: - lxc: controller: Fix container launch on cgroup v1. (bsc#1183247) - supportconfig: Use systemctl command 'is-active' instead of 'is-enabled' when checking if libvirtd is active. - qemu: Do not report error in the logs when processing monitor IO. (bsc#1190917) - spec: Fix an issue when package update hangs (bsc#1177902, bsc#1190693) - spec: Don't add '--timeout' argument to '/etc/sysconfig/libvirtd' when running in traditional mode without socket activation. (bsc#1190695) - libxl: Improve reporting of 'die_id' in capabilities. (bsc#1190493) - libxl: Fix driver reload. (bsc#1190420) - qemu: Set label on virtual host network device when hotplugging. (bsc#1186398) - supportconfig: When checking for installed hypervisor drivers, use the libvirtr-daemon-driver-<hypervisor> package instead of libvirt-daemon-<hypervisor>. The latter are not required packages for a functioning hypervisor driver. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3619=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirt-7.1.0-6.8.1 libvirt-admin-7.1.0-6.8.1 libvirt-admin-debuginfo-7.1.0-6.8.1 libvirt-client-7.1.0-6.8.1 libvirt-client-debuginfo-7.1.0-6.8.1 libvirt-daemon-7.1.0-6.8.1 libvirt-daemon-config-network-7.1.0-6.8.1 libvirt-daemon-config-nwfilter-7.1.0-6.8.1 libvirt-daemon-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-interface-7.1.0-6.8.1 libvirt-daemon-driver-interface-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-lxc-7.1.0-6.8.1 libvirt-daemon-driver-lxc-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-network-7.1.0-6.8.1 libvirt-daemon-driver-network-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-nodedev-7.1.0-6.8.1 libvirt-daemon-driver-nodedev-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-nwfilter-7.1.0-6.8.1 libvirt-daemon-driver-nwfilter-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-qemu-7.1.0-6.8.1 libvirt-daemon-driver-qemu-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-secret-7.1.0-6.8.1 libvirt-daemon-driver-secret-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-storage-7.1.0-6.8.1 libvirt-daemon-driver-storage-core-7.1.0-6.8.1 libvirt-daemon-driver-storage-core-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-storage-disk-7.1.0-6.8.1 libvirt-daemon-driver-storage-disk-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-storage-gluster-7.1.0-6.8.1 libvirt-daemon-driver-storage-gluster-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-storage-iscsi-7.1.0-6.8.1 libvirt-daemon-driver-storage-iscsi-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-6.8.1 libvirt-daemon-driver-storage-iscsi-direct-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-storage-logical-7.1.0-6.8.1 libvirt-daemon-driver-storage-logical-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-storage-mpath-7.1.0-6.8.1 libvirt-daemon-driver-storage-mpath-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-storage-scsi-7.1.0-6.8.1 libvirt-daemon-driver-storage-scsi-debuginfo-7.1.0-6.8.1 libvirt-daemon-hooks-7.1.0-6.8.1 libvirt-daemon-lxc-7.1.0-6.8.1 libvirt-daemon-qemu-7.1.0-6.8.1 libvirt-debugsource-7.1.0-6.8.1 libvirt-devel-7.1.0-6.8.1 libvirt-libs-7.1.0-6.8.1 libvirt-libs-debuginfo-7.1.0-6.8.1 libvirt-lock-sanlock-7.1.0-6.8.1 libvirt-lock-sanlock-debuginfo-7.1.0-6.8.1 libvirt-nss-7.1.0-6.8.1 libvirt-nss-debuginfo-7.1.0-6.8.1 wireshark-plugin-libvirt-7.1.0-6.8.1 wireshark-plugin-libvirt-debuginfo-7.1.0-6.8.1 - openSUSE Leap 15.3 (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-7.1.0-6.8.1 libvirt-daemon-driver-storage-rbd-debuginfo-7.1.0-6.8.1 - openSUSE Leap 15.3 (noarch): libvirt-bash-completion-7.1.0-6.8.1 libvirt-doc-7.1.0-6.8.1 - openSUSE Leap 15.3 (x86_64): libvirt-client-32bit-debuginfo-7.1.0-6.8.1 libvirt-daemon-driver-libxl-7.1.0-6.8.1 libvirt-daemon-driver-libxl-debuginfo-7.1.0-6.8.1 libvirt-daemon-xen-7.1.0-6.8.1 libvirt-devel-32bit-7.1.0-6.8.1 References: https://bugzilla.suse.com/1177902 https://bugzilla.suse.com/1183247 https://bugzilla.suse.com/1186398 https://bugzilla.suse.com/1190420 https://bugzilla.suse.com/1190493 https://bugzilla.suse.com/1190693 https://bugzilla.suse.com/1190695 https://bugzilla.suse.com/1190917

1 0