February 2021 - openSUSE Security Announce

openSUSE-SU-2021:0303-1: important: Security update for jasper
by opensuse-security＠opensuse.org 18 Feb '21

18 Feb '21

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0303-1 Rating: important References: #1179748 #1181483 Cross-References: CVE-2020-27828 CVE-2021-3272 CVSS scores: CVE-2020-27828 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-27828 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3272 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-3272 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for jasper fixes the following issues: - bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls - bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-303=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): jasper-2.0.14-lp152.7.6.1 jasper-debuginfo-2.0.14-lp152.7.6.1 jasper-debugsource-2.0.14-lp152.7.6.1 libjasper-devel-2.0.14-lp152.7.6.1 libjasper4-2.0.14-lp152.7.6.1 libjasper4-debuginfo-2.0.14-lp152.7.6.1 - openSUSE Leap 15.2 (x86_64): libjasper4-32bit-2.0.14-lp152.7.6.1 libjasper4-32bit-debuginfo-2.0.14-lp152.7.6.1 References: https://www.suse.com/security/cve/CVE-2020-27828.html https://www.suse.com/security/cve/CVE-2021-3272.html https://bugzilla.suse.com/1179748 https://bugzilla.suse.com/1181483

1 0

openSUSE-SU-2021:0302-1: important: Security update for python-bottle
by opensuse-security＠opensuse.org 16 Feb '21

16 Feb '21

openSUSE Security Update: Security update for python-bottle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0302-1 Rating: important References: #1182181 Cross-References: CVE-2020-28473 CVSS scores: CVE-2020-28473 (NVD) : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2020-28473 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-bottle fixes the following issues: - CVE-2020-28473: Fixed Web Cache Poisoning vulnerability using parameter cloaking (bsc#1182181). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-302=1 Package List: - openSUSE Leap 15.2 (noarch): python-bottle-doc-0.12.13-lp152.4.3.1 python2-bottle-0.12.13-lp152.4.3.1 python3-bottle-0.12.13-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-28473.html https://bugzilla.suse.com/1182181

1 0

openSUSE-SU-2021:0300-1: moderate: Security update for mumble
by opensuse-security＠opensuse.org 16 Feb '21

16 Feb '21

openSUSE Security Update: Security update for mumble ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0300-1 Rating: moderate References: #1180068 #1182123 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for mumble fixes the following issues: mumble was updated to 1.3.4: * Fix use of outdated (non-existent) notification icon names * Fix Security vulnerability caused by allowing non http/https URL schemes in public server list (boo#1182123) * Server: Fix Exit status for actions like --version or --supw * Fix packet loss & audio artifacts caused by OCB2 XEX* mitigation - update apparmor profiles to get warning free again on 15.2 - use abstractions for ssl files - allow inet dgram sockets as mumble can also work via udp - allow netlink socket (probably for dbus) - properly allow lsb_release again - add support for optional local include - start murmurd directly as user mumble-server it gets rid of the dac_override/setgid/setuid/chown permissions Update to upstream version 1.3.3 Client: * Fixed: Chatbox invisble (zero height) (#4388) * Fixed: Handling of invalid packet sizes (#4394) * Fixed: Race-condition leading to loss of shortcuts (#4430) * Fixed: Link in About dialog is now clickable again (#4454) * Fixed: Sizing issues in ACL-Editor (#4455) * Improved: PulseAudio now always samples at 48 kHz (#4449) Server: * Fixed: Crash due to problems when using PostgreSQL (#4370) * Fixed: Handling of invalid package sizes (#4392) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-300=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): mumble-1.3.4-lp152.2.6.1 mumble-debuginfo-1.3.4-lp152.2.6.1 mumble-debugsource-1.3.4-lp152.2.6.1 mumble-server-1.3.4-lp152.2.6.1 mumble-server-debuginfo-1.3.4-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): mumble-32bit-1.3.4-lp152.2.6.1 mumble-32bit-debuginfo-1.3.4-lp152.2.6.1 References: https://bugzilla.suse.com/1180068 https://bugzilla.suse.com/1182123

1 0

openSUSE-SU-2021:0296-1: important: Security update for opera
by opensuse-security＠opensuse.org 15 Feb '21

15 Feb '21

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0296-1 Rating: important References: #1181827 Cross-References: CVE-2021-21148 Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opera fixes the following issues: - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement client_capabilities negotiation for Flow / Sync - DNA-90560 [Search Tabs] Open Tabs On Top - DNA-90620 Add opauto tests for tab snoozing - DNA-90628 Update opauto tests after design changes - DNA-90818 Only 3 recently closed tabs are shown in a search mode - DNA-90911 Enable search-tabs-open-tabs-on-top on developer - DNA-90990 Crash at opera::AddressBarView::NotifyBoundsChanged() - DNA-90991 Opera doesn��t show version and ��Relaunch�� button despite update is ready - DNA-91097 Crash at extensions::BrowserSidebarPrivateGetPremium ExtensionsInfoFunction::Run() - DNA-91163 [Win] ��URL navigation filters�� subpage doesn��t react on actions - DNA-91196 [Flow] Device capabilities is not properly saved in Local State - DNA-91276 Sidebar setup wont open - The update to chromium 88.0.4324.150 fixes following issues: - CVE-2021-21148 (1181827) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2021-296=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-74.0.3911.107-lp152.2.34.1 References: https://www.suse.com/security/cve/CVE-2021-21148.html https://bugzilla.suse.com/1181827

1 0

openSUSE-SU-2021:0295-1: important: Security update for librepo
by opensuse-security＠opensuse.org 15 Feb '21

15 Feb '21

openSUSE Security Update: Security update for librepo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0295-1 Rating: important References: #1175475 Cross-References: CVE-2020-14352 CVSS scores: CVE-2020-14352 (NVD) : 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2020-14352 (SUSE): 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for librepo fixes the following issues: - Upgrade to 1.12.1 + Validate path read from repomd.xml (bsc#1175475, CVE-2020-14352) - Changes from 1.12.0 + Prefer mirrorlist/metalink over baseurl (rh#1775184) + Decode package URL when using for local filename (rh#1817130) + Fix memory leak in lr_download_metadata() and lr_yum_download_remote() + Download sources work when at least one of specified is working (rh#1775184) This update was imported from the SUSE:SLE-15-SP2:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-295=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): librepo-devel-1.12.1-bp152.2.6.1 librepo0-1.12.1-bp152.2.6.1 python3-librepo-1.12.1-bp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-14352.html https://bugzilla.suse.com/1175475

1 0

openSUSE-SU-2021:0284-1: important: Security update for wpa_supplicant
by opensuse-security＠opensuse.org 13 Feb '21

13 Feb '21

openSUSE Security Update: Security update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0284-1 Rating: important References: #1181777 Cross-References: CVE-2021-0326 CVSS scores: CVE-2021-0326 (SUSE): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wpa_supplicant fixes the following issues: - CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-284=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): wpa_supplicant-2.9-lp152.8.6.1 wpa_supplicant-debuginfo-2.9-lp152.8.6.1 wpa_supplicant-debugsource-2.9-lp152.8.6.1 wpa_supplicant-gui-2.9-lp152.8.6.1 wpa_supplicant-gui-debuginfo-2.9-lp152.8.6.1 References: https://www.suse.com/security/cve/CVE-2021-0326.html https://bugzilla.suse.com/1181777

1 0

openSUSE-SU-2021:0283-1: important: Security update for openvswitch
by opensuse-security＠opensuse.org 13 Feb '21

13 Feb '21

openSUSE Security Update: Security update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0283-1 Rating: important References: #1181742 Cross-References: CVE-2020-35498 CVSS scores: CVE-2020-35498 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openvswitch fixes the following issues: - CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-283=1 Package List: - openSUSE Leap 15.2 (x86_64): libopenvswitch-2_13-0-2.13.2-lp152.3.12.1 libopenvswitch-2_13-0-debuginfo-2.13.2-lp152.3.12.1 libovn-20_03-0-20.03.1-lp152.3.12.1 libovn-20_03-0-debuginfo-20.03.1-lp152.3.12.1 openvswitch-2.13.2-lp152.3.12.1 openvswitch-debuginfo-2.13.2-lp152.3.12.1 openvswitch-debugsource-2.13.2-lp152.3.12.1 openvswitch-devel-2.13.2-lp152.3.12.1 openvswitch-ipsec-2.13.2-lp152.3.12.1 openvswitch-pki-2.13.2-lp152.3.12.1 openvswitch-test-2.13.2-lp152.3.12.1 openvswitch-test-debuginfo-2.13.2-lp152.3.12.1 openvswitch-vtep-2.13.2-lp152.3.12.1 openvswitch-vtep-debuginfo-2.13.2-lp152.3.12.1 ovn-20.03.1-lp152.3.12.1 ovn-central-20.03.1-lp152.3.12.1 ovn-central-debuginfo-20.03.1-lp152.3.12.1 ovn-debuginfo-20.03.1-lp152.3.12.1 ovn-devel-20.03.1-lp152.3.12.1 ovn-docker-20.03.1-lp152.3.12.1 ovn-host-20.03.1-lp152.3.12.1 ovn-host-debuginfo-20.03.1-lp152.3.12.1 ovn-vtep-20.03.1-lp152.3.12.1 ovn-vtep-debuginfo-20.03.1-lp152.3.12.1 python3-ovs-2.13.2-lp152.3.12.1 - openSUSE Leap 15.2 (noarch): openvswitch-doc-2.13.2-lp152.3.12.1 ovn-doc-20.03.1-lp152.3.12.1 References: https://www.suse.com/security/cve/CVE-2020-35498.html https://bugzilla.suse.com/1181742

1 0

openSUSE-SU-2021:0280-1: important: Security update for subversion
by opensuse-security＠opensuse.org 12 Feb '21

12 Feb '21

openSUSE Security Update: Security update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0280-1 Rating: important References: #1181687 Cross-References: CVE-2020-17525 CVSS scores: CVE-2020-17525 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for subversion fixes the following issues: - CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-280=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.10.6-lp152.2.9.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.10.6-lp152.2.9.1 libsvn_auth_kwallet-1-0-1.10.6-lp152.2.9.1 libsvn_auth_kwallet-1-0-debuginfo-1.10.6-lp152.2.9.1 subversion-1.10.6-lp152.2.9.1 subversion-debuginfo-1.10.6-lp152.2.9.1 subversion-debugsource-1.10.6-lp152.2.9.1 subversion-devel-1.10.6-lp152.2.9.1 subversion-perl-1.10.6-lp152.2.9.1 subversion-perl-debuginfo-1.10.6-lp152.2.9.1 subversion-python-1.10.6-lp152.2.9.1 subversion-python-ctypes-1.10.6-lp152.2.9.1 subversion-python-debuginfo-1.10.6-lp152.2.9.1 subversion-ruby-1.10.6-lp152.2.9.1 subversion-ruby-debuginfo-1.10.6-lp152.2.9.1 subversion-server-1.10.6-lp152.2.9.1 subversion-server-debuginfo-1.10.6-lp152.2.9.1 subversion-tools-1.10.6-lp152.2.9.1 subversion-tools-debuginfo-1.10.6-lp152.2.9.1 - openSUSE Leap 15.2 (noarch): subversion-bash-completion-1.10.6-lp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-17525.html https://bugzilla.suse.com/1181687

1 0

openSUSE-SU-2021:0279-1: moderate: Security update for privoxy
by opensuse-security＠opensuse.org 12 Feb '21

12 Feb '21

openSUSE Security Update: Security update for privoxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0279-1 Rating: moderate References: #1181650 Cross-References: CVE-2021-20216 CVE-2021-20217 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for privoxy fixes the following issues: - Update to version 3.0.31: - Security/Reliability (boo#1181650) - Prevent an assertion from getting triggered by a crafted CGI request. Commit 5bba5b89193fa. OVE-20210130-0001. CVE-2021-20217 Reported by: Joshua Rogers (Opera) - Fixed a memory leak when decompression fails "unexpectedly". Commit f431d61740cc0. OVE-20210128-0001. CVE-2021-20216 - Bug fixes: - Fixed detection of insufficient data for decompression. Previously Privoxy could try to decompress a partly uninitialized buffer. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-279=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): privoxy-3.0.31-bp152.4.6.1 - openSUSE Backports SLE-15-SP2 (noarch): privoxy-doc-3.0.31-bp152.4.6.1 References: https://www.suse.com/security/cve/CVE-2021-20216.html https://www.suse.com/security/cve/CVE-2021-20217.html https://bugzilla.suse.com/1181650

1 0

openSUSE-SU-2021:0278-1: important: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
by opensuse-security＠opensuse.org 12 Feb '21

12 Feb '21

openSUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0278-1 Rating: important References: #1174075 #1176708 #1178801 #1178969 #1180243 #1180401 #1181730 #1181732 Cross-References: CVE-2020-15257 CVE-2021-21284 CVE-2021-21285 CVSS scores: CVE-2020-15257 (NVD) : 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N CVE-2020-15257 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-21284 (NVD) : 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N CVE-2021-21284 (SUSE): 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N CVE-2021-21285 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-21285 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has 5 fixes is now available. Description: This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2020-15257: Fixed a privilege escalation in containerd (bsc#1178969). - CVE-2021-21284: potential privilege escalation when the root user in the remapped namespace has access to the host filesystem (bsc#1181732) - CVE-2021-21285: pulling a malformed Docker image manifest crashes the dockerd daemon (bsc#1181730) Non-security issues fixed: - Update Docker to 19.03.15-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285). - Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE. It appears that SLES doesn't like the patch. (bsc#1180401) - Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and fixes CVE-2020-15257. bsc#1180243 - Update to containerd v1.3.7, which is required for Docker 19.03.13-ce. bsc#1176708 - Update to Docker 19.03.14-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243 https://github.com/docker/docker-ce/releases/tag/v19.03.14 - Enable fish-completion - Add a patch which makes Docker compatible with firewalld with nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548 (bsc#1178801, SLE-16460) - Update to Docker 19.03.13-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708 - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075) - Emergency fix: %requires_eq does not work with provide symbols, only effective package names. Convert back to regular Requires. - Update to Docker 19.03.12-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. - Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of spurrious errors due to Go returning -EINTR from I/O syscalls much more often (due to Go 1.14's pre-emptive goroutine support). - Add BuildRequires for all -git dependencies so that we catch missing dependencies much more quickly. - Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce. bsc#1180243 - Add patch which makes libnetwork compatible with firewalld with nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548 (bsc#1178801, SLE-16460) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-278=1 Package List: - openSUSE Leap 15.2 (x86_64): containerd-1.3.9-lp152.2.3.1 containerd-ctr-1.3.9-lp152.2.3.1 docker-19.03.15_ce-lp152.2.3.1 docker-debuginfo-19.03.15_ce-lp152.2.3.1 docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-lp152.2.3.1 docker-libnetwork-debuginfo-0.7.0.1+gitr2908_55e924b8a842-lp152.2.3.1 docker-runc-1.0.0rc10+gitr3981_dc9208a3303f-lp152.2.3.1 docker-runc-debuginfo-1.0.0rc10+gitr3981_dc9208a3303f-lp152.2.3.1 docker-test-19.03.15_ce-lp152.2.3.1 docker-test-debuginfo-19.03.15_ce-lp152.2.3.1 fish-2.7.1-lp152.5.3.1 fish-debuginfo-2.7.1-lp152.5.3.1 fish-debugsource-2.7.1-lp152.5.3.1 fish-devel-2.7.1-lp152.5.3.1 golang-github-docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): docker-bash-completion-19.03.15_ce-lp152.2.3.1 docker-fish-completion-19.03.15_ce-lp152.2.3.1 docker-zsh-completion-19.03.15_ce-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-15257.html https://www.suse.com/security/cve/CVE-2021-21284.html https://www.suse.com/security/cve/CVE-2021-21285.html https://bugzilla.suse.com/1174075 https://bugzilla.suse.com/1176708 https://bugzilla.suse.com/1178801 https://bugzilla.suse.com/1178969 https://bugzilla.suse.com/1180243 https://bugzilla.suse.com/1180401 https://bugzilla.suse.com/1181730 https://bugzilla.suse.com/1181732

1 0