October 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:3490-1: moderate: Security update for ncurses
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for ncurses ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3490-1 Rating: moderate References: #1190793 Cross-References: CVE-2021-39537 CVSS scores: CVE-2021-39537 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ncurses fixes the following issues: - CVE-2021-39537: Fixed an heap-based buffer overflow in _nc_captoinfo. (bsc#1190793) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3490=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libncurses5-6.1-5.9.1 libncurses5-debuginfo-6.1-5.9.1 libncurses6-6.1-5.9.1 libncurses6-debuginfo-6.1-5.9.1 ncurses-debugsource-6.1-5.9.1 ncurses-devel-6.1-5.9.1 ncurses-devel-debuginfo-6.1-5.9.1 ncurses-utils-6.1-5.9.1 ncurses-utils-debuginfo-6.1-5.9.1 ncurses5-devel-6.1-5.9.1 tack-6.1-5.9.1 tack-debuginfo-6.1-5.9.1 terminfo-6.1-5.9.1 terminfo-base-6.1-5.9.1 terminfo-iterm-6.1-5.9.1 terminfo-screen-6.1-5.9.1 - openSUSE Leap 15.3 (x86_64): libncurses5-32bit-6.1-5.9.1 libncurses5-32bit-debuginfo-6.1-5.9.1 libncurses6-32bit-6.1-5.9.1 libncurses6-32bit-debuginfo-6.1-5.9.1 ncurses-devel-32bit-6.1-5.9.1 ncurses-devel-32bit-debuginfo-6.1-5.9.1 ncurses5-devel-32bit-6.1-5.9.1 References: https://www.suse.com/security/cve/CVE-2021-39537.html https://bugzilla.suse.com/1190793

1 0

openSUSE-RU-2021:1388-1: moderate: Recommended update for obs-service-extract_file
by maintenance＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Recommended Update: Recommended update for obs-service-extract_file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1388-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for obs-service-extract_file fixes the following issues: Update to version 0.4: * add support for obscpio archives from obs_scm * Add README.md file Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1388=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): obs-service-extract_file-0.4-bp153.2.3.1 References:

1 0

openSUSE-RU-2021:3479-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3479-1 Rating: moderate References: #1184970 #1186260 #1187115 #1187470 #1187774 #1190845 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Fix usage information for -f parameter. (bsc#1187470) - Fix obsolete reference to 96insmodpost in manpage. (bsc#1187774) - Remove references to INITRD_MODULES. (bsc#1187115) - Multipath FCoE configurations may not boot when using only one path. (bsc#1186260) - Adjust path for SUSE: /var/lib/nfs/statd/sm to /var/lib/nfs/sm. (bsc#1184970) - Systemd coredump unit files are missing in initrd. (1190845) - Use $kernel rather than $(uname -r). - Exclude modules that are built-in. - Restore INITRD_MODULES in mkinitrd script. - Call dracut_instmods with hostonly. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3479=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dracut-049.1+suse.209.gebcf4f33-3.40.1 dracut-debuginfo-049.1+suse.209.gebcf4f33-3.40.1 dracut-debugsource-049.1+suse.209.gebcf4f33-3.40.1 dracut-extra-049.1+suse.209.gebcf4f33-3.40.1 dracut-fips-049.1+suse.209.gebcf4f33-3.40.1 dracut-ima-049.1+suse.209.gebcf4f33-3.40.1 dracut-tools-049.1+suse.209.gebcf4f33-3.40.1 References: https://bugzilla.suse.com/1184970 https://bugzilla.suse.com/1186260 https://bugzilla.suse.com/1187115 https://bugzilla.suse.com/1187470 https://bugzilla.suse.com/1187774 https://bugzilla.suse.com/1190845

1 0

openSUSE-RU-2021:3480-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3480-1 Rating: moderate References: #1185016 #1185524 #1186910 #1187270 #1187512 #1188344 #1190645 #1190739 #1190915 #1190933 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Don't crash when the interfaces table contains a not configured one (bnc#1190645, bsc#1190915). - Fix the shown description using the interface friendly name when it is empty (bsc#1190933). - Consider aliases sections as case insensitive (bsc#1190739). - Display user defined device name in the devices overview (bnc#1190645). - Don't crash when defined aliases in AutoYaST profile are not defined as a map (bsc#1188344). - Support 'boot' and 'on' as aliases for the 'auto' startmode (bsc#1186910). - Fix desktop file so the control center tooltip is translated (bsc#1187270). - Use the linuxrc proxy settings for the HTTPS and FTP proxies (bsc#1185016). - Don't crash at the end of installation when storing wifi configuration for NetworkManager (bsc#1185524, bsc#1187512). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3480=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): augeas-1.10.1-3.3.1 augeas-debuginfo-1.10.1-3.3.1 augeas-debugsource-1.10.1-3.3.1 augeas-devel-1.10.1-3.3.1 augeas-lense-tests-1.10.1-3.3.1 augeas-lenses-1.10.1-3.3.1 libaugeas0-1.10.1-3.3.1 libaugeas0-debuginfo-1.10.1-3.3.1 - openSUSE Leap 15.3 (noarch): yast2-network-4.3.77-3.16.1 - openSUSE Leap 15.3 (x86_64): augeas-devel-32bit-1.10.1-3.3.1 libaugeas0-32bit-1.10.1-3.3.1 libaugeas0-32bit-debuginfo-1.10.1-3.3.1 References: https://bugzilla.suse.com/1185016 https://bugzilla.suse.com/1185524 https://bugzilla.suse.com/1186910 https://bugzilla.suse.com/1187270 https://bugzilla.suse.com/1187512 https://bugzilla.suse.com/1188344 https://bugzilla.suse.com/1190645 https://bugzilla.suse.com/1190739 https://bugzilla.suse.com/1190915 https://bugzilla.suse.com/1190933

1 0

openSUSE-SU-2021:3472-1: important: Security update for flatpak
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for flatpak ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3472-1 Rating: important References: #1191507 Cross-References: CVE-2021-41133 CVSS scores: CVE-2021-41133 (SUSE): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for flatpak fixes the following issues: - Update to version 1.10.5: - CVE-2021-41133: Fixed a bug that could lead to sandbox bypass via recent VFS-manipulating syscalls. (bsc#1191507) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3472=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): flatpak-1.10.5-4.9.1 flatpak-debuginfo-1.10.5-4.9.1 flatpak-debugsource-1.10.5-4.9.1 flatpak-devel-1.10.5-4.9.1 flatpak-zsh-completion-1.10.5-4.9.1 libflatpak0-1.10.5-4.9.1 libflatpak0-debuginfo-1.10.5-4.9.1 system-user-flatpak-1.10.5-4.9.1 typelib-1_0-Flatpak-1_0-1.10.5-4.9.1 References: https://www.suse.com/security/cve/CVE-2021-41133.html https://bugzilla.suse.com/1191507

1 0

openSUSE-SU-2021:3474-1: moderate: Security update for util-linux
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3474-1 Rating: moderate References: #1178236 #1188921 Cross-References: CVE-2021-37600 CVSS scores: CVE-2021-37600 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-37600 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for util-linux fixes the following issues: - CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in get_sem_elements() in sys-utils/ipcutils.c. (bsc#1188921) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3474=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libblkid-devel-2.36.2-4.5.1 libblkid-devel-static-2.36.2-4.5.1 libblkid1-2.36.2-4.5.1 libblkid1-debuginfo-2.36.2-4.5.1 libfdisk-devel-2.36.2-4.5.1 libfdisk-devel-static-2.36.2-4.5.1 libfdisk1-2.36.2-4.5.1 libfdisk1-debuginfo-2.36.2-4.5.1 libmount-devel-2.36.2-4.5.1 libmount-devel-static-2.36.2-4.5.1 libmount1-2.36.2-4.5.1 libmount1-debuginfo-2.36.2-4.5.1 libsmartcols-devel-2.36.2-4.5.1 libsmartcols-devel-static-2.36.2-4.5.1 libsmartcols1-2.36.2-4.5.1 libsmartcols1-debuginfo-2.36.2-4.5.1 libuuid-devel-2.36.2-4.5.1 libuuid-devel-static-2.36.2-4.5.1 libuuid1-2.36.2-4.5.1 libuuid1-debuginfo-2.36.2-4.5.1 python3-libmount-2.36.2-4.5.1 python3-libmount-debuginfo-2.36.2-4.5.1 python3-libmount-debugsource-2.36.2-4.5.1 util-linux-2.36.2-4.5.1 util-linux-debuginfo-2.36.2-4.5.1 util-linux-debugsource-2.36.2-4.5.1 util-linux-systemd-2.36.2-4.5.1 util-linux-systemd-debuginfo-2.36.2-4.5.1 util-linux-systemd-debugsource-2.36.2-4.5.1 uuidd-2.36.2-4.5.1 uuidd-debuginfo-2.36.2-4.5.1 - openSUSE Leap 15.3 (x86_64): libblkid-devel-32bit-2.36.2-4.5.1 libblkid1-32bit-2.36.2-4.5.1 libblkid1-32bit-debuginfo-2.36.2-4.5.1 libfdisk-devel-32bit-2.36.2-4.5.1 libfdisk1-32bit-2.36.2-4.5.1 libfdisk1-32bit-debuginfo-2.36.2-4.5.1 libmount-devel-32bit-2.36.2-4.5.1 libmount1-32bit-2.36.2-4.5.1 libmount1-32bit-debuginfo-2.36.2-4.5.1 libsmartcols-devel-32bit-2.36.2-4.5.1 libsmartcols1-32bit-2.36.2-4.5.1 libsmartcols1-32bit-debuginfo-2.36.2-4.5.1 libuuid-devel-32bit-2.36.2-4.5.1 libuuid1-32bit-2.36.2-4.5.1 libuuid1-32bit-debuginfo-2.36.2-4.5.1 - openSUSE Leap 15.3 (noarch): util-linux-lang-2.36.2-4.5.1 References: https://www.suse.com/security/cve/CVE-2021-37600.html https://bugzilla.suse.com/1178236 https://bugzilla.suse.com/1188921

1 0

openSUSE-RU-2021:3471-1: moderate: Recommended update for habootstrap-formula
by maintenance＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Recommended Update: Recommended update for habootstrap-formula ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3471-1 Rating: moderate References: #1190940 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for habootstrap-formula fixes the following issues: Update to version 0.4.4 - Wait for cluster startup after a 'corosync' restart. (bsc#1190940) - Add support for The Oracle Cluster File System v2 (OCFS2) - Enable native fencing for 'microsoft-azure' - Add documentation on how to enable native fencing Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3471=1 Package List: - openSUSE Leap 15.3 (noarch): habootstrap-formula-0.4.4+git.1632747498.2caa677-3.20.1 References: https://bugzilla.suse.com/1190940

1 0

openSUSE-SU-2021:3476-1: important: Security update for xstream
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for xstream ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3476-1 Rating: important References: #1189798 Cross-References: CVE-2021-39139 CVE-2021-39140 CVE-2021-39141 CVE-2021-39144 CVE-2021-39145 CVE-2021-39146 CVE-2021-39147 CVE-2021-39148 CVE-2021-39149 CVE-2021-39150 CVE-2021-39151 CVE-2021-39152 CVE-2021-39153 CVE-2021-39154 CVSS scores: CVE-2021-39139 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39139 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39140 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-39141 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39141 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39144 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39144 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39145 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39145 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39146 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39146 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39147 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39147 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39148 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39148 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39149 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39149 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39150 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39150 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-39151 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39151 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39152 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39152 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-39153 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39153 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-39154 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-39154 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39140: Fixed an issue that allowed an attacker to execute a DoS attack by manipulating the processed input stream. (bsc#1189798) - CVE-2021-39141: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39144: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39145: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39146: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39147: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39148: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39149: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39150: Fixed an issue that allowed an attacker to access protected resources hosted within the intranet or in the host itself. (bsc#1189798) - CVE-2021-39151: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39152: Fixed an issue that allowed an attacker to access protected resources hosted within the intranet or in the host itself. (bsc#1189798) - CVE-2021-39153: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39154: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3476=1 Package List: - openSUSE Leap 15.3 (noarch): xstream-1.4.18-3.14.1 xstream-benchmark-1.4.18-3.14.1 xstream-javadoc-1.4.18-3.14.1 xstream-parent-1.4.18-3.14.1 References: https://www.suse.com/security/cve/CVE-2021-39139.html https://www.suse.com/security/cve/CVE-2021-39140.html https://www.suse.com/security/cve/CVE-2021-39141.html https://www.suse.com/security/cve/CVE-2021-39144.html https://www.suse.com/security/cve/CVE-2021-39145.html https://www.suse.com/security/cve/CVE-2021-39146.html https://www.suse.com/security/cve/CVE-2021-39147.html https://www.suse.com/security/cve/CVE-2021-39148.html https://www.suse.com/security/cve/CVE-2021-39149.html https://www.suse.com/security/cve/CVE-2021-39150.html https://www.suse.com/security/cve/CVE-2021-39151.html https://www.suse.com/security/cve/CVE-2021-39152.html https://www.suse.com/security/cve/CVE-2021-39153.html https://www.suse.com/security/cve/CVE-2021-39154.html https://bugzilla.suse.com/1189798

1 0

openSUSE-SU-2021:3467-1: important: Security update for strongswan
by opensuse-security＠opensuse.org 19 Oct '21

19 Oct '21

openSUSE Security Update: Security update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3467-1 Rating: important References: #1191367 #1191435 SLE-20151 Cross-References: CVE-2021-41990 CVE-2021-41991 CVSS scores: CVE-2021-41990 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-41991 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities, contains one feature is now available. Description: This update for strongswan fixes the following issues: A feature was added: - Add auth_els plugin to support Marvell FC-SP encryption (jsc#SLE-20151) Security issues fixed: - CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435) - CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3467=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): strongswan-5.8.2-11.21.1 strongswan-debuginfo-5.8.2-11.21.1 strongswan-debugsource-5.8.2-11.21.1 strongswan-hmac-5.8.2-11.21.1 strongswan-ipsec-5.8.2-11.21.1 strongswan-ipsec-debuginfo-5.8.2-11.21.1 strongswan-libs0-5.8.2-11.21.1 strongswan-libs0-debuginfo-5.8.2-11.21.1 strongswan-mysql-5.8.2-11.21.1 strongswan-mysql-debuginfo-5.8.2-11.21.1 strongswan-nm-5.8.2-11.21.1 strongswan-nm-debuginfo-5.8.2-11.21.1 strongswan-sqlite-5.8.2-11.21.1 strongswan-sqlite-debuginfo-5.8.2-11.21.1 - openSUSE Leap 15.3 (noarch): strongswan-doc-5.8.2-11.21.1 References: https://www.suse.com/security/cve/CVE-2021-41990.html https://www.suse.com/security/cve/CVE-2021-41991.html https://bugzilla.suse.com/1191367 https://bugzilla.suse.com/1191435

1 0

openSUSE-RU-2021:3465-1: moderate: Recommended update for cloud-regionsrv
by maintenance＠opensuse.org 19 Oct '21

19 Oct '21

openSUSE Recommended Update: Recommended update for cloud-regionsrv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3465-1 Rating: moderate References: #1190250 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-regionsrv contains the following fixes: - Update to version 8.1.2 (bsc#1190250) + Place certificate key in proper destination - Update to version 8.1.1 (bsc#1190250) + Use a cross-filesystem compatible method to move certificates Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3465=1 Package List: - openSUSE Leap 15.3 (noarch): cloud-regionsrv-8.1.2-11.6.1 cloud-regionsrv-generic-config-1.0.0-11.6.1 References: https://bugzilla.suse.com/1190250

1 0