October 2021 - openSUSE Updates - openSUSE Mailing Lists

update of glibc
by christian hartig 20 Oct '21

20 Oct '21

To whom it may concern: The installation of the updates of the following package list causes a complete system failure: S | Repository | Name | Current Version | Available Version | Arch --+------------------------------------+----------------------------+-----------------------+-----------------------+------- v | Hauptaktualisierungs-Repository | device-mapper | 1.02.163-lp152.7.27.1 | 1.02.163-lp152.7.30.1 | x86_64 v | Hauptaktualisierungs-Repository | glibc | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 v | Hauptaktualisierungs-Repository | glibc-32bit | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 v | Aktualisierungs-Repository (Debug) | glibc-debuginfo | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 v | Aktualisierungs-Repository (Debug) | glibc-debugsource | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 v | Hauptaktualisierungs-Repository | glibc-devel | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 v | Hauptaktualisierungs-Repository | glibc-devel-static | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 v | Hauptaktualisierungs-Repository | glibc-extra | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 v | Hauptaktualisierungs-Repository | glibc-info | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | noarch v | Hauptaktualisierungs-Repository | glibc-locale | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 v | Hauptaktualisierungs-Repository | glibc-locale-base | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 v | Hauptaktualisierungs-Repository | grub2 | 2.04-lp152.7.28.1 | 2.04-lp152.7.31.3 | x86_64 v | Hauptaktualisierungs-Repository | grub2-i386-pc | 2.04-lp152.7.28.1 | 2.04-lp152.7.31.3 | noarch v | Hauptaktualisierungs-Repository | grub2-snapper-plugin | 2.04-lp152.7.28.1 | 2.04-lp152.7.31.3 | noarch v | Hauptaktualisierungs-Repository | grub2-systemd-sleep-plugin | 2.04-lp152.7.28.1 | 2.04-lp152.7.31.3 | noarch v | Hauptaktualisierungs-Repository | grub2-x86_64-efi | 2.04-lp152.7.28.1 | 2.04-lp152.7.31.3 | noarch v | Hauptaktualisierungs-Repository | libdevmapper-event1_03 | 1.02.163-lp152.7.27.1 | 1.02.163-lp152.7.30.1 | x86_64 v | Hauptaktualisierungs-Repository | libdevmapper1_03 | 1.02.163-lp152.7.27.1 | 1.02.163-lp152.7.30.1 | x86_64 v | Hauptaktualisierungs-Repository | libdevmapper1_03-32bit | 1.02.163-lp152.7.27.1 | 1.02.163-lp152.7.30.1 | x86_64 v | Hauptaktualisierungs-Repository | liblvm2cmd2_03 | 2.03.05-lp152.7.27.1 | 2.03.05-lp152.7.30.1 | x86_64 v | Hauptaktualisierungs-Repository | lvm2 | 2.03.05-lp152.7.27.1 | 2.03.05-lp152.7.30.1 | x86_64 v | Hauptaktualisierungs-Repository | nscd | 2.26-lp152.26.6.1 | 2.26-lp152.26.9.1 | x86_64 There occurs the folllowing error-message: relocation error: /lib/librt.so.1: symbol --pthread_attr_copy, version GLIBC_PRIVATE not defined in file libpthread.so.0 with link time reference Therefore I am quite sure, the system failure is caused either: 1) by a bug in the glibc-*packages (Version 2.26-lp152.26.9.1) or 2) by inconsistencies in the update system. I had to reinstall my opensuse 15.2 completely several times from an image of my linux system partition, until I could limit the reasons for the failure to these 2 possibilities (an expert may find some more). With best regards Sincerely yours Ch. Hartig

1 0

openSUSE-RU-2021:1386-1: moderate: Recommended update for grub2, efibootmgr
by maintenance＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Recommended Update: Recommended update for grub2, efibootmgr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1386-1 Rating: moderate References: #1186565 #1186975 #1187565 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for grub2, efibootmgr provides the following fixes: - Ship package grub2-arm64-efi and the required efibootmgr also to ppc64le, s390x and x86_64 (bsc#1186565) - Fix error gfxterm isn't found with multiple terminals (bsc#1187565) - Fix ocasional boot failure after kdump procedure when using XFS (bsc#1186975) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1386=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): grub2-2.04-lp152.7.31.3 grub2-branding-upstream-2.04-lp152.7.31.3 grub2-debuginfo-2.04-lp152.7.31.3 grub2-debugsource-2.04-lp152.7.31.3 - openSUSE Leap 15.2 (noarch): grub2-i386-efi-2.04-lp152.7.31.3 grub2-i386-efi-debug-2.04-lp152.7.31.3 grub2-i386-pc-2.04-lp152.7.31.3 grub2-i386-pc-debug-2.04-lp152.7.31.3 grub2-i386-xen-2.04-lp152.7.31.3 grub2-snapper-plugin-2.04-lp152.7.31.3 grub2-systemd-sleep-plugin-2.04-lp152.7.31.3 grub2-x86_64-efi-2.04-lp152.7.31.3 grub2-x86_64-efi-debug-2.04-lp152.7.31.3 grub2-x86_64-xen-2.04-lp152.7.31.3 References: https://bugzilla.suse.com/1186565 https://bugzilla.suse.com/1186975 https://bugzilla.suse.com/1187565

1 0

openSUSE-FU-2021:3483-1: moderate: Feature update for saptune
by maintenance＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Feature Update: Feature update for saptune ______________________________________________________________________________ Announcement ID: openSUSE-FU-2021:3483-1 Rating: moderate References: #1149205 #1164720 #1167213 #1167416 #1167618 #1170672 #1176243 #1178207 #1179275 #1182009 #1182287 #1182289 #1185702 SLE-10823 SLE-10842 SLE-13245 SLE-13246 SLE-16972 SLE-20985 SLE-5588 SLE-5589 SLE-6457 TEAM-1679 TEAM-1696 TEAM-1699 TEAM-1700 TEAM-1701 TEAM-1702 TEAM-1705 TEAM-1706 TEAM-1707 TEAM-1728 TEAM-1754 TEAM-1755 TEAM-1844 TEAM-2675 TEAM-2676 TEAM-3154 TEAM-3342 TEAM-3454 TEAM-4093 TEAM-4260 TEAM-4386 TEAM-825 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 13 feature fixes and contains 31 features can now be installed. Description: This update for saptune fixes the following issues: Update saptune from version 2.0.3 to version 3.0.0 (jsc#SLE-20985) - This will be additional reflected in the saptune version found in '/etc/sysconfig/saptune' '(SAPTUNE_VERSION)' - Strengthen configuration process with staging, checks of external changes and expansion of automation to new platforms (Azure, AWS) and hardware specifics (jsc#SLE-20985) - Remove saptune version 1 (jsc#SLE-10823, jsc#SLE-10842) - Remove usage of 'tuned' from saptune - Add an own systemd service file for saptune to 'start/stop' tuning of parameter values during a reboot of the system. - Add a new saptune action 'service' to handle the 'saptune.service' supporting 'start/stop/enable/disable/status'. - The saptune action 'daemon', which handled 'tuned.service' in the past, is now flagged as 'deprecated' and internally linked to the new action 'service'. (jsc#SLE-5589, jsc#SLE-5588, jsc#SLE-6457) - Add a sanity check to detect Note definition files which do not exist anymore. (bsc#1149205) This can happen when a Note is renamed or deleted, but without reverting the Note before. saptune will now print an error message, remove the Note from the tracking variables in '/etc/sysconfig/saptune' and try to revert the related parameter settings. - Validate if the json input file is empty and handle left-over files from the migration from saptune v1 to saptune v2 (bsc#1167618) - To support system parameters only relevant for specific SUSE Linux Enterprise Server releases, service packs and/or hardware architectures saptune now supports 'tagged' sections inside the Note definition files. (jsc#SLE-13246, jsc#SLE-13245) - New kernel requirement for Power added to SAP-Note 2205917 and 2684254 (bsc#1167416) SAP Note 2205917 updated to Version 61 SAP Note 2684254 updated to Version 15 - SAP Note 2382421 updated to Version 37 (bsc#1170672) - Move all 'not-well-defined' parameters from the 'reminder' section into the 'sysctl' section, but with 'empty' values. - Use an override file to define the values fitting your system requirements - Support empty parameter values in the Note definition files and not only in the override file. (bsc#1170672, jsc#TEAM-1702) - This is needed for the support of SAP Notes like 2382421, so that the customer is able to simply use an override file to define some special parameters instead of using a customer specific Note definition file. - Report an 'error' instead of 'info' and set the exit code to '1', if we reject the apply of a solution (bsc#1167213) - Skip perf bias change if secure boot is enabled. (bsc#1176243) - When a system is in lockdown mode, i.e., Secure Boot is enabled, MSR cannot be altered in user-space. So check, if Secure Boot is enabled using the mokutil utility and skip setting the perf bias in case it is. - Rework the internal block device handling to speed up the apply of block device related tunings on systems with a high number of block devices. (bsc#1178207) - Change block device handling to handle multipath devices correctly. Only the DM multipath devices will be used for the settings, but not its paths. (bsc#1179275) - fixed wrong comparison used for setting FORCE_LATENCY (bsc#1185702) - add keyword 'all' to the 'rpm' section description in the man page saptune-note(5). (bsc#1182287) - support note definition versions containing digits, upper-case and lower-case letters, dots, underscores, minus and plus signs. (bsc#1182289) - fixed issue with 'verify' operation and parameter 'VSZ_TMPFS_PERCENT'. As this parameter is only used to calculate the value of 'ShmFileSystemSizeMB' (if it is not set to a value >0 in the Note definition file) it will not be checked and compared during the saptune operation 'verify'. A footnote is pointing this out. (bsc#1182009) - SAP Note 1771258 update nofile values (bsc#1164720) - SAP Note 2684254 updated to Version 20 SAP Note 2578899 updated to Version 39 SAP Note 1680803 updated to Version 26 - enhancements for saptune version 3 (jsc#SLE-16972) - Implement a lock to avoid multiple instances of saptune running in parallel. (jsc#TEAM-1700) - Support for non-colorized output (jsc#TEAM-1679) - If redirecting the output from saptune to a pipe, you no longer need to deal with the 'ugly' control sequences for the colorized output. - Add enable/disable for systemd units and support all systemd unit types in section [service] (jsc#TEAM-1701) - remove script '/usr/share/doc/packages/saptune/sapconf2saptune' and the associated man page (jsc#TEAM-1707) - implement staging of Note definition file and solution definitions. (jsc#TEAM-1844) - The idea is to freeze the saptune configuration to avoid config changes on package update when adding/removing/changing notes or solutions within the package - support custom solutions and override files for solutions. (jsc#TEAM-1706) - Partners and customers will now be able to define their own solution definitions by using files in '/etc/saptune/extra' or to override the shipped solution definitions by using override files in '/etc/saptune/override' - support for device specific configurations (jsc#TEAM-1728) - only supported for the [block] section, tags are 'vendor' and 'model' to support special block devices of a dedicated hardware vendor or a dedicated hardware model - add support for AZURE cloud (SAP Note 2993054) (jsc#TEAM-2676) - add support for AWS cloud (SAP Note 1656250) (jsc#TEAM-1754, jsc#TEAM-1755) - add NVMe support to the block device handling to support AWS (jsc#TEAM-2675) - add SAP Note 3024346 (a NetApp note) (jsc#TEAM-3454) - rework daemon and service actions (jsc#TEAM-3154) - add support for 'read_ahead_kb' and 'max_sectors_kb' to the [block] section (jsc#TEAM-1699) - add a warning to the reminder section of SAP Note 2382421 regarding iSCSI devices and setting of 'net.ipv4.tcp_syn_retries' (jsc#TEAM-1705) - For the actions 'note customise' and 'note create' check, if the customer has changed something during the editor session. If not, remove the temporary created note definition file. (jsc#TEAM-825) - add support for [sys] section and handle double configurations for parameters defined in the [sys] section (jsc#TEAM-3342) - check system sysctl config files as mentioned in the comments of '/etc/sysctl.conf' and in man page 'sysctl.conf(5)' for 'sysctl' parameters currently set by saptune notes. Print a warning and a footnote for 'verify' and 'customize'. (jsc#TEAM-1696) - add support for [filesystem] section only check filesystem mount options, not modify. Starting with filesystem type 'xfs' (jsc#TEAM-4093) - add SAP Note 900929 for SAP Netweaver workloads. (jsc#TEAM-4386) - It's the equivalent to the HANA Note 1980196. - move state files from '/var/lib/saptune' to '/run/saptune' to solve the problem of state files surviving a reboot. - add '/sbin/saptune_check' - add the description of the solution definitions shipped with saptune to the man page saptune(8) (jsc#TEAM-4260) Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3483=1 Package List: - openSUSE Leap 15.3 (ppc64le x86_64): saptune-3.0.0-8.16.1 saptune-debuginfo-3.0.0-8.16.1 References: https://bugzilla.suse.com/1149205 https://bugzilla.suse.com/1164720 https://bugzilla.suse.com/1167213 https://bugzilla.suse.com/1167416 https://bugzilla.suse.com/1167618 https://bugzilla.suse.com/1170672 https://bugzilla.suse.com/1176243 https://bugzilla.suse.com/1178207 https://bugzilla.suse.com/1179275 https://bugzilla.suse.com/1182009 https://bugzilla.suse.com/1182287 https://bugzilla.suse.com/1182289 https://bugzilla.suse.com/1185702

1 0

openSUSE-SU-2021:3488-1: moderate: Security update for go1.17
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for go1.17 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3488-1 Rating: moderate References: #1190649 #1191468 Cross-References: CVE-2021-38297 CVSS scores: CVE-2021-38297 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.17 fixes the following issues: Update to go1.17.2 - CVE-2021-38297: misc/wasm, cmd/link: do not let command line args overwrite global data (bsc#1191468) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3488=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): go1.17-1.17.2-1.6.2 go1.17-doc-1.17.2-1.6.2 - openSUSE Leap 15.3 (aarch64 x86_64): go1.17-race-1.17.2-1.6.2 References: https://www.suse.com/security/cve/CVE-2021-38297.html https://bugzilla.suse.com/1190649 https://bugzilla.suse.com/1191468

1 0

openSUSE-RU-2021:3494-1: moderate: Recommended update for pam
by maintenance＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Recommended Update: Recommended update for pam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3494-1 Rating: moderate References: #1190052 SLE-20638 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for pam fixes the following issues: - Added pam_faillock to the set of available PAM modules. (jsc#SLE-20638) - Added new file macros.pam on request of systemd. (bsc#1190052) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3494=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): pam-1.3.0-6.47.1 pam-debuginfo-1.3.0-6.47.1 pam-debugsource-1.3.0-6.47.1 pam-devel-1.3.0-6.47.1 pam-extra-1.3.0-6.47.1 pam-extra-debuginfo-1.3.0-6.47.1 - openSUSE Leap 15.3 (noarch): pam-doc-1.3.0-6.47.1 - openSUSE Leap 15.3 (x86_64): pam-32bit-1.3.0-6.47.1 pam-32bit-debuginfo-1.3.0-6.47.1 pam-devel-32bit-1.3.0-6.47.1 pam-extra-32bit-1.3.0-6.47.1 pam-extra-32bit-debuginfo-1.3.0-6.47.1 References: https://bugzilla.suse.com/1190052

1 0

openSUSE-SU-2021:3487-1: moderate: Security update for go1.16
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for go1.16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3487-1 Rating: moderate References: #1182345 #1191468 Cross-References: CVE-2021-38297 CVSS scores: CVE-2021-38297 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.16 fixes the following issues: Update to go1.16.9 - CVE-2021-38297: misc/wasm, cmd/link: do not let command line args overwrite global data (bsc#1191468) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3487=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): go1.16-1.16.9-1.29.1 go1.16-doc-1.16.9-1.29.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.16-race-1.16.9-1.29.1 References: https://www.suse.com/security/cve/CVE-2021-38297.html https://bugzilla.suse.com/1182345 https://bugzilla.suse.com/1191468

1 0

openSUSE-SU-2021:3485-1: moderate: Security update for squid
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3485-1 Rating: moderate References: #1189403 Cross-References: CVE-2021-28116 CVSS scores: CVE-2021-28116 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-28116 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for squid fixes the following issues: Update to version 4.17: - CVE-2021-28116: Fixed a out-of-bounds read in the WCCP protocol (bsc#1189403). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3485=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): squid-4.17-5.29.1 squid-debuginfo-4.17-5.29.1 squid-debugsource-4.17-5.29.1 References: https://www.suse.com/security/cve/CVE-2021-28116.html https://bugzilla.suse.com/1189403

1 0

openSUSE-SU-2021:3489-1: moderate: Security update for python
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3489-1 Rating: moderate References: #1189241 #1189287 Cross-References: CVE-2021-3733 CVE-2021-3737 CVSS scores: CVE-2021-3733 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-3737 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241) - CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3489=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-33.1 libpython2_7-1_0-debuginfo-2.7.18-33.1 python-2.7.18-33.1 python-base-2.7.18-33.1 python-base-debuginfo-2.7.18-33.1 python-base-debugsource-2.7.18-33.1 python-curses-2.7.18-33.1 python-curses-debuginfo-2.7.18-33.1 python-debuginfo-2.7.18-33.1 python-debugsource-2.7.18-33.1 python-demo-2.7.18-33.1 python-devel-2.7.18-33.1 python-gdbm-2.7.18-33.1 python-gdbm-debuginfo-2.7.18-33.1 python-idle-2.7.18-33.1 python-tk-2.7.18-33.1 python-tk-debuginfo-2.7.18-33.1 python-xml-2.7.18-33.1 python-xml-debuginfo-2.7.18-33.1 - openSUSE Leap 15.3 (noarch): python-doc-2.7.18-33.1 python-doc-pdf-2.7.18-33.1 - openSUSE Leap 15.3 (x86_64): libpython2_7-1_0-32bit-2.7.18-33.1 libpython2_7-1_0-32bit-debuginfo-2.7.18-33.1 python-32bit-2.7.18-33.1 python-32bit-debuginfo-2.7.18-33.1 python-base-32bit-2.7.18-33.1 python-base-32bit-debuginfo-2.7.18-33.1 References: https://www.suse.com/security/cve/CVE-2021-3733.html https://www.suse.com/security/cve/CVE-2021-3737.html https://bugzilla.suse.com/1189241 https://bugzilla.suse.com/1189287

1 0

openSUSE-RU-2021:1387-1: Recommended update for ipxe
by maintenance＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Recommended Update: Recommended update for ipxe ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1387-1 Rating: low References: #1090355 #1105510 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ipxe fixes the following issues: - Backport a set of fixes and features that had been added to this version of iPXE in oS:Factory. Make sure correct cross-gcc version is picked: * For Leap15/SLE15: gcc7 * For oS Factory and TW: gcc8 - This allows to boot an arm box from an x86_64 system. - Fixes aarch64 build error with inline assembly output modifier - Add snp-i386.efi and snp-x86_64.efi to package for using EFI's network drivers (e.g. used by warewulf) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1387=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): ipxe-bootimgs-1.0.0+git20180203.546dd51d-bp153.2.3.1 References: https://bugzilla.suse.com/1090355 https://bugzilla.suse.com/1105510

1 0

openSUSE-SU-2021:3493-1: moderate: Security update for fetchmail
by opensuse-security＠opensuse.org 20 Oct '21

20 Oct '21

openSUSE Security Update: Security update for fetchmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3493-1 Rating: moderate References: #1190069 Cross-References: CVE-2021-39272 CVSS scores: CVE-2021-39272 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for fetchmail fixes the following issues: - CVE-2021-39272: Fix failure to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH. (bsc#1190069) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3493=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): fetchmail-6.3.26-20.17.1 fetchmail-debuginfo-6.3.26-20.17.1 fetchmail-debugsource-6.3.26-20.17.1 fetchmailconf-6.3.26-20.17.1 References: https://www.suse.com/security/cve/CVE-2021-39272.html https://bugzilla.suse.com/1190069

1 0