October 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:3321-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 07 Oct '21

07 Oct '21

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3321-1 Rating: moderate References: #1176089 #1188153 #1190696 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for autoyast2 fixes the following issues: - Update elements on rules.xml schema: Add the "hostname" (bsc#1190696). Add Installed_product and installed_product_version (boo#1176089). Add Dialog section (bsc#1188153). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3321=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): yast2-schema-4.3.25-3.6.1 - openSUSE Leap 15.3 (noarch): autoyast2-4.3.90-3.25.1 autoyast2-installation-4.3.90-3.25.1 References: https://bugzilla.suse.com/1176089 https://bugzilla.suse.com/1188153 https://bugzilla.suse.com/1190696

1 0

openSUSE-RU-2021:3317-1: moderate: Recommended update for postgresql10
by maintenance＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Recommended Update: Recommended update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3317-1 Rating: moderate References: #1179945 #1185952 #1187751 #1190177 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for postgresql10 fixes the following issues: - Upgrade to version 10.18. (bsc#1190177) - A dump/restore is not required for those running 10.X. - if you are upgrading from a version older than 10.16 a reindexing of indexes after the upgrade may be advisable. - Allow PostgreSQL version 10 to build with ICU 69 and newer - Clarify error messages referring to 'non-negative' values - Fix incorrect log message when 'point-in-time' recovery stops at a 'ROLLBACK PREPARED' record - In 'contrib/postgres_fdw', avoid attempting catalog lookups after an error - Messages about data conversion errors will now mention the query's table and column aliases (if used) rather than the true underlying name of a foreign table or column. - Avoid problems when 'switching pg_receivewal' between compressed and non-compressed 'WAL' storage - Extend 'pg_upgrade' to detect and warn about extensions that should be upgraded. - Make 'pg_upgrade' carry forward the old installation's 'oldestXID' value. - This solves unwanted forced shutdowns happening soon after an upgrade in particular on installations using large values of 'autovacuum_freeze_max_age'. - Avoid 'invalid creation date in header' warnings observed when running 'pg_restore' on an archive file created in a different time zone. - In psql and other client programs, avoid overrunning the ends of strings when dealing with invalidly-encoded data. - Don't abort the process for an out-of-memory failure in libpq's printing functions - Fix uninitialized-variable bug that could cause 'PL/pgSQL' to act as though an 'INTO' clause specified 'STRICT', even though it didn't. - Fix latent crash in sorting code - Fix possible race condition when releasing BackgroundWorkerSlots - Solve a build issue fix build with 'llvm12' on s390x. (bsc#1185952) - Re-enable 'icu' for 'PostgreSQL 10'. (bsc#1179945) - Relax the dependency of 'postgresqlXX-server-devel' on 'llvm' and 'clang'. (bsc#1187751) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3317=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postgresql10-10.18-8.38.1 postgresql10-contrib-10.18-8.38.1 postgresql10-contrib-debuginfo-10.18-8.38.1 postgresql10-debuginfo-10.18-8.38.1 postgresql10-debugsource-10.18-8.38.1 postgresql10-plperl-10.18-8.38.1 postgresql10-plperl-debuginfo-10.18-8.38.1 postgresql10-plpython-10.18-8.38.1 postgresql10-plpython-debuginfo-10.18-8.38.1 postgresql10-pltcl-10.18-8.38.1 postgresql10-pltcl-debuginfo-10.18-8.38.1 postgresql10-server-10.18-8.38.1 postgresql10-server-debuginfo-10.18-8.38.1 postgresql10-test-10.18-8.38.1 - openSUSE Leap 15.3 (noarch): postgresql10-docs-10.18-8.38.1 References: https://bugzilla.suse.com/1179945 https://bugzilla.suse.com/1185952 https://bugzilla.suse.com/1187751 https://bugzilla.suse.com/1190177

1 0

openSUSE-RU-2021:3315-1: moderate: Recommended update for go1.17
by maintenance＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Recommended Update: Recommended update for go1.17 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3315-1 Rating: moderate References: #1190589 #1190649 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.17 fixes the following issues: This is the initial go 1.17 shipment. go1.17.1 (released 2021-09-09) includes a security fix to the archive/zip package, as well as bug fixes to the compiler, linker, the go command, and to the crypto/rand, embed, go/types, html/template, and net/http packages. (bsc#1190649) CVE-2021-39293: Fixed an overflow in preallocation check that can cause OOM panic in archive/zip (bsc#1190589) go1.17 (released 2021-08-16) is a major release of Go. go1.17.x minor releases will be provided through August 2022. See https://github.com/golang/go/wiki/Go-Release-Cycle Most changes are in the implementation of the toolchain, runtime, and libraries. As always, the release maintains the Go 1 promise of compatibility. We expect almost all Go programs to continue to compile and run as before. (bsc#1190649) * See release notes https://golang.org/doc/go1.17. Excerpts relevant to OBS environment and for SUSE/openSUSE follow: * The compiler now implements a new way of passing function arguments and results using registers instead of the stack. Benchmarks for a representative set of Go packages and programs show performance improvements of about 5%, and a typical reduction in binary size of about 2%. This is currently enabled for Linux, macOS, and Windows on the 64-bit x86 architecture (the linux/amd64, darwin/amd64, and windows/amd64 ports). This change does not affect the functionality of any safe Go code and is designed to have no impact on most assembly code. * When the linker uses external linking mode, which is the default when linking a program that uses cgo, and the linker is invoked with a -I option, the option will now be passed to the external linker as a -Wl,--dynamic-linker option. * The runtime/cgo package now provides a new facility that allows to turn any Go values to a safe representation that can be used to pass values between C and Go safely. See runtime/cgo.Handle for more information. * ARM64 Go programs now maintain stack frame pointers on the 64-bit ARM architecture on all operating systems. Previously, stack frame pointers were only enabled on Linux, macOS, and iOS. * Pruned module graphs in go 1.17 modules: If a module specifies go 1.17 or higher, the module graph includes only the immediate dependencies of other go 1.17 modules, not their full transitive dependencies. To convert the go.mod file for an existing module to Go 1.17 without changing the selected versions of its dependencies, run: go mod tidy -go=1.17 By default, go mod tidy verifies that the selected versions of dependencies relevant to the main module are the same versions that would be used by the prior Go release (Go 1.16 for a module that specifies go 1.17), and preserves the go.sum entries needed by that release even for dependencies that are not normally needed by other commands. The -compat flag allows that version to be overridden to support older (or only newer) versions, up to the version specified by the go directive in the go.mod file. To tidy a go 1.17 module for Go 1.17 only, without saving checksums for (or checking for consistency with) Go 1.16: go mod tidy -compat=1.17 Note that even if the main module is tidied with -compat=1.17, users who require the module from a go 1.16 or earlier module will still be able to use it, provided that the packages use only compatible language and library features. The go mod graph subcommand also supports the -go flag, which causes it to report the graph as seen by the indicated Go version, showing dependencies that may otherwise be pruned out. * Module deprecation comments: Module authors may deprecate a module by adding a // Deprecated: comment to go.mod, then tagging a new version. go get now prints a warning if a module needed to build packages named on the command line is deprecated. go list -m -u prints deprecations for all dependencies (use -f or -json to show the full message). The go command considers different major versions to be distinct modules, so this mechanism may be used, for example, to provide users with migration instructions for a new major version. * go get -insecure flag is deprecated and has been removed. To permit the use of insecure schemes when fetching dependencies, please use the GOINSECURE environment variable. The -insecure flag also bypassed module sum validation, use GOPRIVATE or GONOSUMDB if you need that functionality. See go help environment for details. * go get prints a deprecation warning when installing commands outside the main module (without the -d flag). go install cmd@version should be used instead to install a command at a specific version, using a suffix like @latest or @v1.2.3. In Go 1.18, the -d flag will always be enabled, and go get will only be used to change dependencies in go.mod. * go.mod files missing go directives: If the main module's go.mod file does not contain a go directive and the go command cannot update the go.mod file, the go command now assumes go 1.11 instead of the current release. (go mod init has added go directives automatically since Go 1.12.) If a module dependency lacks an explicit go.mod file, or its go.mod file does not contain a go directive, the go command now assumes go 1.16 for that dependency instead of the current release. (Dependencies developed in GOPATH mode may lack a go.mod file, and the vendor/modules.txt has to date never recorded the go versions indicated by dependencies' go.mod files.) * vendor contents: If the main module specifies go 1.17 or higher, go mod vendor now annotates vendor/modules.txt with the go version indicated by each vendored module in its own go.mod file. The annotated version is used when building the module's packages from vendored source code. If the main module specifies go 1.17 or higher, go mod vendor now omits go.mod and go.sum files for vendored dependencies, which can otherwise interfere with the ability of the go command to identify the correct module root when invoked within the vendor tree. * Password prompts: The go command by default now suppresses SSH password prompts and Git Credential Manager prompts when fetching Git repositories using SSH, as it already did previously for other Git password prompts. Users authenticating to private Git repos with password-protected SSH may configure an ssh-agent to enable the go command to use password-protected SSH keys. * go mod download: When go mod download is invoked without arguments, it will no longer save sums for downloaded module content to go.sum. It may still make changes to go.mod and go.sum needed to load the build list. This is the same as the behavior in Go 1.15. To save sums for all modules, use: go mod download all * The go command now understands //go:build lines and prefers them over // +build lines. The new syntax uses boolean expressions, just like Go, and should be less error-prone. As of this release, the new syntax is fully supported, and all Go files should be updated to have both forms with the same meaning. To aid in migration, gofmt now automatically synchronizes the two forms. For more details on the syntax and migration plan, see https://golang.org/design/draft-gobuild. * go run now accepts arguments with version suffixes (for example, go run example.com/cmd@v1.0.0). This causes go run to build and run packages in module-aware mode, ignoring the go.mod file in the current directory or any parent directory, if there is one. This is useful for running executables without installing them or without changing dependencies of the current module. * The format of stack traces from the runtime (printed when an uncaught panic occurs, or when runtime.Stack is called) is improved. * TLS strict ALPN: When Config.NextProtos is set, servers now enforce that there is an overlap between the configured protocols and the ALPN protocols advertised by the client, if any. If there is no mutually supported protocol, the connection is closed with the no_application_protocol alert, as required by RFC 7301. This helps mitigate the ALPACA cross-protocol attack. As an exception, when the value "h2" is included in the server's Config.NextProtos, HTTP/1.1 clients will be allowed to connect as if they didn't support ALPN. See issue go#46310 for more information. * crypto/ed25519: The crypto/ed25519 package has been rewritten, and all operations are now approximately twice as fast on amd64 and arm64. The observable behavior has not otherwise changed. * crypto/elliptic: CurveParams methods now automatically invoke faster and safer dedicated implementations for known curves (P-224, P-256, and P-521) when available. Note that this is a best-effort approach and applications should avoid using the generic, not constant-time CurveParams methods and instead use dedicated Curve implementations such as P256. The P521 curve implementation has been rewritten using code generated by the fiat-crypto project, which is based on a formally-verified model of the arithmetic operations. It is now constant-time and three times faster on amd64 and arm64. The observable behavior has not otherwise changed. * crypto/tls: The new Conn.HandshakeContext method allows the user to control cancellation of an in-progress TLS handshake. The provided context is accessible from various callbacks through the new ClientHelloInfo.Context and CertificateRequestInfo.Context methods. Canceling the context after the handshake has finished has no effect. Cipher suite ordering is now handled entirely by the crypto/tls package. Currently, cipher suites are sorted based on their security, performance, and hardware support taking into account both the local and peer's hardware. The order of the Config.CipherSuites field is now ignored, as well as the Config.PreferServerCipherSuites field. Note that Config.CipherSuites still allows applications to choose what TLS 1.0��1.2 cipher suites to enable. The 3DES cipher suites have been moved to InsecureCipherSuites due to fundamental block size-related weakness. They are still enabled by default but only as a last resort, thanks to the cipher suite ordering change above. Beginning in the next release, Go 1.18, the Config.MinVersion for crypto/tls clients will default to TLS 1.2, disabling TLS 1.0 and TLS 1.1 by default. Applications will be able to override the change by explicitly setting Config.MinVersion. This will not affect crypto/tls servers. * crypto/x509: CreateCertificate now returns an error if the provided private key doesn't match the parent's public key, if any. The resulting certificate would have failed to verify. * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been removed. * crypto/x509: ParseCertificate has been rewritten, and now consumes ~70% fewer resources. The observable behavior has not otherwise changed, except for error messages. * crypto/x509: Beginning in the next release, Go 1.18, crypto/x509 will reject certificates signed with the SHA-1 hash function. This doesn't apply to self-signed root certificates. Practical attacks against SHA-1 have been demonstrated in 2017 and publicly trusted Certificate Authorities have not issued SHA-1 certificates since 2015. * go/build: The new Context.ToolTags field holds the build tags appropriate to the current Go toolchain configuration. * net/http package now uses the new (*tls.Conn).HandshakeContext with the Request context when performing TLS handshakes in the client or server. * syscall: On Unix-like systems, the process group of a child process is now set with signals blocked. This avoids sending a SIGTTOU to the child when the parent is in a background process group. * time: The new Time.IsDST method can be used to check whether the time is in Daylight Savings Time in its configured location. * time: The new Time.UnixMilli and Time.UnixMicro methods return the number of milliseconds and microseconds elapsed since January 1, 1970 UTC respectively. * time: The new UnixMilli and UnixMicro functions return the local Time corresponding to the given Unix time. - Add bash scripts used by go tool commands to provide a more complete cross-compiling go toolchain install. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3315=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): go1.17-1.17.1-1.3.1 go1.17-doc-1.17.1-1.3.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.17-race-1.17.1-1.3.1 References: https://www.suse.com/security/cve/CVE-2021-39293.html https://bugzilla.suse.com/1190589 https://bugzilla.suse.com/1190649

1 0

openSUSE-SU-2021:3301-1: moderate: Security update for libcryptopp
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for libcryptopp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3301-1 Rating: moderate References: #1015243 Cross-References: CVE-2016-9939 CVSS scores: CVE-2016-9939 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcryptopp fixes the following issues: - CVE-2016-9939: Fixed potential DoS in Crypto++ (libcryptopp) ASN.1 parser (bsc#1015243). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3301=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libcryptopp-debugsource-5.6.5-1.6.1 libcryptopp-devel-5.6.5-1.6.1 libcryptopp5_6_5-5.6.5-1.6.1 libcryptopp5_6_5-debuginfo-5.6.5-1.6.1 - openSUSE Leap 15.3 (x86_64): libcryptopp5_6_5-32bit-5.6.5-1.6.1 libcryptopp5_6_5-32bit-debuginfo-5.6.5-1.6.1 References: https://www.suse.com/security/cve/CVE-2016-9939.html https://bugzilla.suse.com/1015243

1 0

openSUSE-SU-2021:3291-1: moderate: Security update for glibc
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3291-1 Rating: moderate References: #1186489 #1187911 Cross-References: CVE-2021-33574 CVE-2021-35942 CVSS scores: CVE-2021-33574 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-33574 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-35942 (SUSE): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for glibc fixes the following issues: - CVE-2021-33574: Fixed use __pthread_attr_copy in mq_notify (bsc#1186489). - CVE-2021-35942: Fixed wordexp handle overflow in positional parameter number (bsc#1187911). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3291=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): glibc-2.31-9.3.2 glibc-debuginfo-2.31-9.3.2 glibc-debugsource-2.31-9.3.2 glibc-devel-2.31-9.3.2 glibc-devel-debuginfo-2.31-9.3.2 glibc-devel-static-2.31-9.3.2 glibc-extra-2.31-9.3.2 glibc-extra-debuginfo-2.31-9.3.2 glibc-locale-2.31-9.3.2 glibc-locale-base-2.31-9.3.2 glibc-locale-base-debuginfo-2.31-9.3.2 glibc-profile-2.31-9.3.2 glibc-utils-2.31-9.3.2 glibc-utils-debuginfo-2.31-9.3.2 glibc-utils-src-debugsource-2.31-9.3.2 nscd-2.31-9.3.2 nscd-debuginfo-2.31-9.3.2 - openSUSE Leap 15.3 (noarch): glibc-html-2.31-9.3.2 glibc-i18ndata-2.31-9.3.2 glibc-info-2.31-9.3.2 glibc-lang-2.31-9.3.2 - openSUSE Leap 15.3 (x86_64): glibc-32bit-2.31-9.3.2 glibc-32bit-debuginfo-2.31-9.3.2 glibc-devel-32bit-2.31-9.3.2 glibc-devel-32bit-debuginfo-2.31-9.3.2 glibc-devel-static-32bit-2.31-9.3.2 glibc-locale-base-32bit-2.31-9.3.2 glibc-locale-base-32bit-debuginfo-2.31-9.3.2 glibc-profile-32bit-2.31-9.3.2 glibc-utils-32bit-2.31-9.3.2 glibc-utils-32bit-debuginfo-2.31-9.3.2 References: https://www.suse.com/security/cve/CVE-2021-33574.html https://www.suse.com/security/cve/CVE-2021-35942.html https://bugzilla.suse.com/1186489 https://bugzilla.suse.com/1187911

1 0

openSUSE-RU-2021:3312-1: moderate: Recommended update for yast2-installation
by maintenance＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Recommended Update: Recommended update for yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3312-1 Rating: moderate References: #1186044 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-installation fixes the following issues: - Display release notes during upgrade. (bsc#1186044) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3312=1 Package List: - openSUSE Leap 15.3 (noarch): yast2-installation-4.3.42-3.10.1 References: https://bugzilla.suse.com/1186044

1 0

openSUSE-SU-2021:3293-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3293-1 Rating: moderate References: #1186761 Cross-References: CVE-2020-22042 CVSS scores: CVE-2020-22042 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-22042 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ffmpeg fixes the following issues: - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavfilter/graphparser.c. (bsc#1186761) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3293=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ffmpeg-3.4.2-11.14.1 ffmpeg-debuginfo-3.4.2-11.14.1 ffmpeg-debugsource-3.4.2-11.14.1 ffmpeg-private-devel-3.4.2-11.14.1 libavcodec-devel-3.4.2-11.14.1 libavcodec57-3.4.2-11.14.1 libavcodec57-debuginfo-3.4.2-11.14.1 libavdevice-devel-3.4.2-11.14.1 libavdevice57-3.4.2-11.14.1 libavdevice57-debuginfo-3.4.2-11.14.1 libavfilter-devel-3.4.2-11.14.1 libavfilter6-3.4.2-11.14.1 libavfilter6-debuginfo-3.4.2-11.14.1 libavformat-devel-3.4.2-11.14.1 libavformat57-3.4.2-11.14.1 libavformat57-debuginfo-3.4.2-11.14.1 libavresample-devel-3.4.2-11.14.1 libavresample3-3.4.2-11.14.1 libavresample3-debuginfo-3.4.2-11.14.1 libavutil-devel-3.4.2-11.14.1 libavutil55-3.4.2-11.14.1 libavutil55-debuginfo-3.4.2-11.14.1 libpostproc-devel-3.4.2-11.14.1 libpostproc54-3.4.2-11.14.1 libpostproc54-debuginfo-3.4.2-11.14.1 libswresample-devel-3.4.2-11.14.1 libswresample2-3.4.2-11.14.1 libswresample2-debuginfo-3.4.2-11.14.1 libswscale-devel-3.4.2-11.14.1 libswscale4-3.4.2-11.14.1 libswscale4-debuginfo-3.4.2-11.14.1 - openSUSE Leap 15.3 (x86_64): libavcodec57-32bit-3.4.2-11.14.1 libavcodec57-32bit-debuginfo-3.4.2-11.14.1 libavdevice57-32bit-3.4.2-11.14.1 libavdevice57-32bit-debuginfo-3.4.2-11.14.1 libavfilter6-32bit-3.4.2-11.14.1 libavfilter6-32bit-debuginfo-3.4.2-11.14.1 libavformat57-32bit-3.4.2-11.14.1 libavformat57-32bit-debuginfo-3.4.2-11.14.1 libavresample3-32bit-3.4.2-11.14.1 libavresample3-32bit-debuginfo-3.4.2-11.14.1 libavutil55-32bit-3.4.2-11.14.1 libavutil55-32bit-debuginfo-3.4.2-11.14.1 libpostproc54-32bit-3.4.2-11.14.1 libpostproc54-32bit-debuginfo-3.4.2-11.14.1 libswresample2-32bit-3.4.2-11.14.1 libswresample2-32bit-debuginfo-3.4.2-11.14.1 libswscale4-32bit-3.4.2-11.14.1 libswscale4-32bit-debuginfo-3.4.2-11.14.1 References: https://www.suse.com/security/cve/CVE-2020-22042.html https://bugzilla.suse.com/1186761

1 0

openSUSE-RU-2021:3311-1: moderate: Recommended update for perl-Bootloader
by maintenance＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Recommended Update: Recommended update for perl-Bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3311-1 Rating: moderate References: #1188768 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-Bootloader fixes the following issues: - Report error if config file could not be updated (bsc#1188768). - Fix typo in update-bootloader. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3311=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): perl-Bootloader-0.936-3.3.1 perl-Bootloader-YAML-0.936-3.3.1 References: https://bugzilla.suse.com/1188768

1 0

openSUSE-RU-2021:3304-1: moderate: Recommended update for kdump
by maintenance＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Recommended Update: Recommended update for kdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3304-1 Rating: moderate References: #1172670 #1183070 #1184616 #1186037 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for kdump fixes the following issues: - Do not iterate past end of string (bsc#1186037). - Fix incorrect exit code checking after "local" with assignment (bsc#1184616). - Avoid an endless loop when resolving a hostname fails with EAI_AGAIN (bsc#1183070). - Install /etc/resolv.conf using its resolved path (bsc#1183070). - Make sure that initrd.target.wants directory exists (bsc#1172670). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3304=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): kdump-0.9.0-18.3.1 kdump-debuginfo-0.9.0-18.3.1 kdump-debugsource-0.9.0-18.3.1 References: https://bugzilla.suse.com/1172670 https://bugzilla.suse.com/1183070 https://bugzilla.suse.com/1184616 https://bugzilla.suse.com/1186037

1 0

openSUSE-RU-2021:3310-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 06 Oct '21

06 Oct '21

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3310-1 Rating: moderate References: #1134353 #1184994 #1188291 #1188588 #1188713 #1189446 #1189480 SLE-21032 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 7 recommended fixes and contains one feature can now be installed. Description: This update for systemd fixes the following issues: - Switch I/O scheduler from 'mq-deadline' to 'bfq' for rotating disks(HD's) (jsc#SLE-21032, bsc#1134353). - Multipath: Rules weren't applied to dm devices (bsc#1188713). - Ignore obsolete "elevator" kernel parameter (bsc#1184994). - Remove kernel unsupported single-queue block I/O. - Make sure the versions of both udev and systemd packages are always the same (bsc#1189480). - Avoid error message when updating active udev on sockets restart (bsc#1188291). - Merge of v246.16, for a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/8d8f5fc31eece95644b299b784bbfb8 f836d0108...f5c33d9f82d3d782d28938df9ff09484360c540d - Drop 1007-tmpfiles-follow-SUSE-policies.patch: Since most of the tmpfiles config files shipped by upstream are ignored (see previous commit "Drop most of the tmpfiles that deal with generic paths"), this patch is no more relevant. Additional fixes: - core: make sure cgroup_oom_queue is flushed on manager exit. - cgroup: do 'catchup' for unit cgroup inotify watch files. - journalctl: never fail at flushing when the flushed flag is set (bsc#1188588). - manager: reexecute on SIGRTMIN+25, user instances only. - manager: fix HW watchdog when systemd starts before driver loaded (bsc#1189446). - pid1: watchdog modernizations. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3310=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-7.14.1 libsystemd0-debuginfo-246.16-7.14.1 libudev-devel-246.16-7.14.1 libudev1-246.16-7.14.1 libudev1-debuginfo-246.16-7.14.1 nss-myhostname-246.16-7.14.1 nss-myhostname-debuginfo-246.16-7.14.1 nss-mymachines-246.16-7.14.1 nss-mymachines-debuginfo-246.16-7.14.1 nss-resolve-246.16-7.14.1 nss-resolve-debuginfo-246.16-7.14.1 nss-systemd-246.16-7.14.1 nss-systemd-debuginfo-246.16-7.14.1 systemd-246.16-7.14.1 systemd-container-246.16-7.14.1 systemd-container-debuginfo-246.16-7.14.1 systemd-coredump-246.16-7.14.1 systemd-coredump-debuginfo-246.16-7.14.1 systemd-debuginfo-246.16-7.14.1 systemd-debugsource-246.16-7.14.1 systemd-devel-246.16-7.14.1 systemd-doc-246.16-7.14.1 systemd-journal-remote-246.16-7.14.1 systemd-journal-remote-debuginfo-246.16-7.14.1 systemd-logger-246.16-7.14.1 systemd-network-246.16-7.14.1 systemd-network-debuginfo-246.16-7.14.1 systemd-sysvinit-246.16-7.14.1 udev-246.16-7.14.1 udev-debuginfo-246.16-7.14.1 - openSUSE Leap 15.3 (noarch): systemd-lang-246.16-7.14.1 - openSUSE Leap 15.3 (x86_64): libsystemd0-32bit-246.16-7.14.1 libsystemd0-32bit-debuginfo-246.16-7.14.1 libudev-devel-32bit-246.16-7.14.1 libudev1-32bit-246.16-7.14.1 libudev1-32bit-debuginfo-246.16-7.14.1 nss-myhostname-32bit-246.16-7.14.1 nss-myhostname-32bit-debuginfo-246.16-7.14.1 nss-mymachines-32bit-246.16-7.14.1 nss-mymachines-32bit-debuginfo-246.16-7.14.1 systemd-32bit-246.16-7.14.1 systemd-32bit-debuginfo-246.16-7.14.1 References: https://bugzilla.suse.com/1134353 https://bugzilla.suse.com/1184994 https://bugzilla.suse.com/1188291 https://bugzilla.suse.com/1188588 https://bugzilla.suse.com/1188713 https://bugzilla.suse.com/1189446 https://bugzilla.suse.com/1189480

1 0