October 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:3564-1: moderate: Recommended update for rpm-config-SUSE
by maintenance＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Recommended Update: Recommended update for rpm-config-SUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3564-1 Rating: moderate References: #1190850 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpm-config-SUSE fixes the following issues: - Support ZSTD compressed kernel modules. (bsc#1190850) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3564=1 Package List: - openSUSE Leap 15.3 (noarch): rpm-config-SUSE-1-5.3.1 References: https://bugzilla.suse.com/1190850

1 0

openSUSE-RU-2021:3558-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Recommended Update: Recommended update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3558-1 Rating: moderate References: #1181223 #1188977 #1190512 #1191448 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues: koan: - Readding the requires for runtime dependencies on python3-netifaces and python3-distro (bsc#1191448) spacecmd: - Version 4.2.13-1 * Update translation strings * configchannel_updatefile handles directory properly (bsc#1190512) * Add schedule_archivecompleted to mass archive actions (bsc#1181223) * Remove whoami from the list of unauthenticated commands (bsc#1188977) spacewalk-client-tools: - Version 4.2.14-1 * Update translation strings Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3558=1 Package List: - openSUSE Leap 15.3 (noarch): koan-3.0.1-4.23.1 spacecmd-4.2.13-3.68.1 References: https://bugzilla.suse.com/1181223 https://bugzilla.suse.com/1188977 https://bugzilla.suse.com/1190512 https://bugzilla.suse.com/1191448

1 0

openSUSE-RU-2021:3543-1: moderate: Recommended update for system-role-common-criteria
by maintenance＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Recommended Update: Recommended update for system-role-common-criteria ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3543-1 Rating: moderate References: SLE-12227 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for system-role-common-criteria ships it to the Server Applications Module. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3543=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): system-role-common-criteria-15.2.1-8.1 References:

1 0

openSUSE-RU-2021:3545-1: Recommended update for less
by maintenance＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Recommended Update: Recommended update for less ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3545-1 Rating: low References: #1190552 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for less fixes the following issues: - Add missing runtime dependency on package "which", that is used by lessopen.sh (bsc#1190552) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3545=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): less-530-3.3.2 less-debuginfo-530-3.3.2 less-debugsource-530-3.3.2 References: https://bugzilla.suse.com/1190552

1 0

openSUSE-RU-2021:3536-1: Recommended update for yast2-storage-ng
by maintenance＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Recommended Update: Recommended update for yast2-storage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3536-1 Rating: low References: #1187270 #1191109 #1191347 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-storage-ng fixes the following issues: - Fix desktop file so the control center tooltip is translated. (bsc#1187270) - Recommend to install libyui-qt-graph package in order to offer the View/Device Graphs menu option. (bsc#1191109) - Fix (un)masking systemd units by using the systemctl --plain flag. (bsc#1191347). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3536=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): yast2-storage-ng-4.3.56-3.12.1 References: https://bugzilla.suse.com/1187270 https://bugzilla.suse.com/1191109 https://bugzilla.suse.com/1191347

1 0

openSUSE-RU-2021:3542-1: moderate: Recommended update for openscap
by maintenance＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Recommended Update: Recommended update for openscap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3542-1 Rating: moderate References: #1186735 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openscap fixes the following issues: - Since upstream has moved to Python 3, switch the BuildRequires from 'python-devel' to 'python3-devel'. - Add definitions for SUSE Linux Enterprise Server, SUSE Linux Enterprise Desktop, openSUSE Tumbleweed, openSUSE Leap and Fedora to the CPE dictionary. (bsc#1186735) - Add updated definitions for openSUSE Tumbleweed, openSUSE Leap and Wind River Linux using the Open Vulnerability and Assessment Language. (bsc#1186735) - openscap 1.3.5 - New features - Made 'schematron-based' validation enabled by default for validate command of 'oval' and 'xccdf' modules - Added SCAP 1.3 source data stream Schematron - Added XML Signature Validation - Added '--enforce-signature' option for eval, guide, and fix modules - Added <content> entity support (OVAL/yamlfilecontent) - Allowed to clamp mtime to SOURCE_DATE_EPOCH - Added severity and role attributes - Added support for requires/conflicts elements of the Rule and Group (XCCDF) - Added Kubernetes remediation to HTML report - Maintenance, bug fix - Fixed CMake warnings - Made 'gpfs', 'proc' and 'sysfs' filesystems non-local - Fixed handling of '--arg=val'-styled common options - Documented used environment variables - Updated man page and help texts - Added '--skip-validation' option synonym for '--skip-valid' - Fixed behavior of StateType operator - Fixed coverity warnings - Ignoring namespace in XPath expressions - Fixed how 'oval_probe_ext_eval' checks absence of the response from the probe (obtrusive data warning) - Described SWID tags detection - Improved documentation about '--stig-viewer' option - File probe behaviour fixed (symlink traversal now behaves as defined by OVAL) - Fixed multiple segfaults and broken test in '--stig-viewer' feature - Added dpkg version comparison algorithm - Fixed 'TestResult/benchmark/@href' attribute - Fixed memory allocation - Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent) - Changing hard coded libperl path in favor of FindPerlLibs method - Check local filesystems when using 'filepath' element Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3542=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenscap25-1.3.5-3.6.1 libopenscap25-debuginfo-1.3.5-3.6.1 libopenscap_sce25-1.3.5-3.6.1 libopenscap_sce25-debuginfo-1.3.5-3.6.1 openscap-1.3.5-3.6.1 openscap-content-1.3.5-3.6.1 openscap-debuginfo-1.3.5-3.6.1 openscap-debugsource-1.3.5-3.6.1 openscap-devel-1.3.5-3.6.1 openscap-docker-1.3.5-3.6.1 openscap-utils-1.3.5-3.6.1 openscap-utils-debuginfo-1.3.5-3.6.1 References: https://bugzilla.suse.com/1186735

1 0

openSUSE-RU-2021:3534-1: moderate: Recommended update for pacemaker
by maintenance＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3534-1 Rating: moderate References: #1190821 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pacemaker fixes the following issues: - Drop unformatted log message about log permissions. (bsc#1190821) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3534=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpacemaker-devel-2.0.5+20201202.ba59be712-4.13.1 libpacemaker3-2.0.5+20201202.ba59be712-4.13.1 libpacemaker3-debuginfo-2.0.5+20201202.ba59be712-4.13.1 pacemaker-2.0.5+20201202.ba59be712-4.13.1 pacemaker-cli-2.0.5+20201202.ba59be712-4.13.1 pacemaker-cli-debuginfo-2.0.5+20201202.ba59be712-4.13.1 pacemaker-debuginfo-2.0.5+20201202.ba59be712-4.13.1 pacemaker-debugsource-2.0.5+20201202.ba59be712-4.13.1 pacemaker-remote-2.0.5+20201202.ba59be712-4.13.1 pacemaker-remote-debuginfo-2.0.5+20201202.ba59be712-4.13.1 - openSUSE Leap 15.3 (noarch): pacemaker-cts-2.0.5+20201202.ba59be712-4.13.1 References: https://bugzilla.suse.com/1190821

1 0

openSUSE-SU-2021:3529-1: moderate: Security update for pcre
by opensuse-security＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Security Update: Security update for pcre ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3529-1 Rating: moderate References: #1172973 #1172974 Cross-References: CVE-2019-20838 CVE-2020-14155 CVSS scores: CVE-2019-20838 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-20838 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-14155 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2020-14155 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for pcre fixes the following issues: Update pcre to version 8.45: - CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974). - CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3529=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpcre1-8.45-20.10.1 libpcre1-debuginfo-8.45-20.10.1 libpcre16-0-8.45-20.10.1 libpcre16-0-debuginfo-8.45-20.10.1 libpcrecpp0-8.45-20.10.1 libpcrecpp0-debuginfo-8.45-20.10.1 libpcreposix0-8.45-20.10.1 libpcreposix0-debuginfo-8.45-20.10.1 pcre-debugsource-8.45-20.10.1 pcre-devel-8.45-20.10.1 pcre-devel-static-8.45-20.10.1 pcre-tools-8.45-20.10.1 pcre-tools-debuginfo-8.45-20.10.1 - openSUSE Leap 15.3 (noarch): pcre-doc-8.45-20.10.1 - openSUSE Leap 15.3 (x86_64): libpcre1-32bit-8.45-20.10.1 libpcre1-32bit-debuginfo-8.45-20.10.1 libpcre16-0-32bit-8.45-20.10.1 libpcre16-0-32bit-debuginfo-8.45-20.10.1 libpcrecpp0-32bit-8.45-20.10.1 libpcrecpp0-32bit-debuginfo-8.45-20.10.1 libpcreposix0-32bit-8.45-20.10.1 libpcreposix0-32bit-debuginfo-8.45-20.10.1 References: https://www.suse.com/security/cve/CVE-2019-20838.html https://www.suse.com/security/cve/CVE-2020-14155.html https://bugzilla.suse.com/1172973 https://bugzilla.suse.com/1172974

1 0

openSUSE-SU-2021:3530-1: moderate: Security update for dnsmasq
by opensuse-security＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Security Update: Security update for dnsmasq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3530-1 Rating: moderate References: #1173646 #1180914 #1183709 SLE-17936 Cross-References: CVE-2020-14312 CVE-2021-3448 CVSS scores: CVE-2020-14312 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-14312 (SUSE): 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L CVE-2021-3448 (NVD) : 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N CVE-2021-3448 (SUSE): 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities, contains one feature and has one errata is now available. Description: This update for dnsmasq fixes the following issues: Update to version 2.86 - CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709) - CVE-2020-14312: Set --local-service by default (bsc#1173646). - Open inotify socket only when used (bsc#1180914). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3530=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dnsmasq-2.86-7.14.1 dnsmasq-debuginfo-2.86-7.14.1 dnsmasq-debugsource-2.86-7.14.1 dnsmasq-utils-2.86-7.14.1 dnsmasq-utils-debuginfo-2.86-7.14.1 References: https://www.suse.com/security/cve/CVE-2020-14312.html https://www.suse.com/security/cve/CVE-2021-3448.html https://bugzilla.suse.com/1173646 https://bugzilla.suse.com/1180914 https://bugzilla.suse.com/1183709

1 0

openSUSE-SU-2021:3531-1: important: Security update for busybox
by opensuse-security＠opensuse.org 27 Oct '21

27 Oct '21

openSUSE Security Update: Security update for busybox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3531-1 Rating: important References: #1099260 #1099263 #1121426 #1184522 #951562 Cross-References: CVE-2011-5325 CVE-2018-1000500 CVE-2018-1000517 CVE-2018-20679 CVE-2021-28831 CVSS scores: CVE-2011-5325 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2018-1000500 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-1000500 (SUSE): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2018-1000517 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-1000517 (SUSE): 5.6 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2018-20679 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2018-20679 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-28831 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28831 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for busybox fixes the following issues: - CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522). - CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426). - CVE-2018-1000517: Fixed buffer overflow in the retrieve_file_data() (bsc#1099260). - CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562). - CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3531=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): busybox-1.26.2-4.5.1 busybox-static-1.26.2-4.5.1 References: https://www.suse.com/security/cve/CVE-2011-5325.html https://www.suse.com/security/cve/CVE-2018-1000500.html https://www.suse.com/security/cve/CVE-2018-1000517.html https://www.suse.com/security/cve/CVE-2018-20679.html https://www.suse.com/security/cve/CVE-2021-28831.html https://bugzilla.suse.com/1099260 https://bugzilla.suse.com/1099263 https://bugzilla.suse.com/1121426 https://bugzilla.suse.com/1184522 https://bugzilla.suse.com/951562

1 0