October 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:1426-1: moderate: Security update for dnsmasq
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for dnsmasq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1426-1 Rating: moderate References: #1173646 #1180914 #1183709 SLE-17936 Cross-References: CVE-2020-14312 CVE-2021-3448 CVSS scores: CVE-2020-14312 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-14312 (SUSE): 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L CVE-2021-3448 (NVD) : 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N CVE-2021-3448 (SUSE): 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities, contains one feature and has one errata is now available. Description: This update for dnsmasq fixes the following issues: Update to version 2.86 - CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709) - CVE-2020-14312: Set --local-service by default (bsc#1173646). - Open inotify socket only when used (bsc#1180914). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1426=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dnsmasq-2.86-lp152.7.6.1 dnsmasq-debuginfo-2.86-lp152.7.6.1 dnsmasq-debugsource-2.86-lp152.7.6.1 dnsmasq-utils-2.86-lp152.7.6.1 dnsmasq-utils-debuginfo-2.86-lp152.7.6.1 References: https://www.suse.com/security/cve/CVE-2020-14312.html https://www.suse.com/security/cve/CVE-2021-3448.html https://bugzilla.suse.com/1173646 https://bugzilla.suse.com/1180914 https://bugzilla.suse.com/1183709

1 0

openSUSE-SU-2021:1416-1: moderate: Security update for fetchmail
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for fetchmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1416-1 Rating: moderate References: #1190069 Cross-References: CVE-2021-39272 CVSS scores: CVE-2021-39272 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for fetchmail fixes the following issues: - CVE-2021-39272: Fix failure to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH. (bsc#1190069) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1416=1 Package List: - openSUSE Leap 15.2 (x86_64): fetchmail-6.3.26-lp152.6.9.1 fetchmail-debuginfo-6.3.26-lp152.6.9.1 fetchmail-debugsource-6.3.26-lp152.6.9.1 fetchmailconf-6.3.26-lp152.6.9.1 References: https://www.suse.com/security/cve/CVE-2021-39272.html https://bugzilla.suse.com/1190069

1 0

openSUSE-SU-2021:1417-1: moderate: Security update for ncurses
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for ncurses ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1417-1 Rating: moderate References: #1190793 Cross-References: CVE-2021-39537 CVSS scores: CVE-2021-39537 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ncurses fixes the following issues: - CVE-2021-39537: Fixed an heap-based buffer overflow in _nc_captoinfo. (bsc#1190793) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1417=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libncurses5-6.1-lp152.8.3.1 libncurses5-debuginfo-6.1-lp152.8.3.1 libncurses6-6.1-lp152.8.3.1 libncurses6-debuginfo-6.1-lp152.8.3.1 ncurses-debugsource-6.1-lp152.8.3.1 ncurses-devel-6.1-lp152.8.3.1 ncurses-devel-debuginfo-6.1-lp152.8.3.1 ncurses-utils-6.1-lp152.8.3.1 ncurses-utils-debuginfo-6.1-lp152.8.3.1 ncurses5-devel-6.1-lp152.8.3.1 tack-6.1-lp152.8.3.1 tack-debuginfo-6.1-lp152.8.3.1 terminfo-6.1-lp152.8.3.1 terminfo-base-6.1-lp152.8.3.1 terminfo-iterm-6.1-lp152.8.3.1 terminfo-screen-6.1-lp152.8.3.1 - openSUSE Leap 15.2 (x86_64): libncurses5-32bit-6.1-lp152.8.3.1 libncurses5-32bit-debuginfo-6.1-lp152.8.3.1 libncurses6-32bit-6.1-lp152.8.3.1 libncurses6-32bit-debuginfo-6.1-lp152.8.3.1 ncurses-devel-32bit-6.1-lp152.8.3.1 ncurses-devel-32bit-debuginfo-6.1-lp152.8.3.1 ncurses5-devel-32bit-6.1-lp152.8.3.1 References: https://www.suse.com/security/cve/CVE-2021-39537.html https://bugzilla.suse.com/1190793

1 0

openSUSE-RU-2021:1413-1: moderate: Recommended update for 2ping
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for 2ping ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1413-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for 2ping fixes the following issues: Update to version 4.5.1: * 2ping.bash_completion: Make more resilient to failure / missing features. * Minimum Python version changed from 3.5 to 3.6. * Minor no-op code and distribution updates. Update to version 4.5: * Added PyCryptodome support (recommended over PyCrypto, though the latter is still detected/supported). * Replaced best_poller module with Python native selectors module. * Changed --flood output: dots/backspaces are no longer printed, and loss results / errors display full details. * --audible tones will only occur if stdout is a TTY. * Improved hostname/IP display edge cases. * Added an AF_UNIX --loopback test mode. * Listener sockets are added and removed as needed, instead of being re-created on each rescan. * Listener sockets are automatically rescanned periodically. * Multiple systemd sockets are now allowed. * A run can be both a listener and a client at the same time (mainly useful for smoke testing). * Other socket handling refactoring. * Other code refactoring. * Listener statistics are displayer per-bind. * Many, many testing/CI improvements. Update to version 4.3: * Add --srv-service * Change --adaptive behavior to better match ping -A * Fix typos in manpage Update to version 4.2: * Added SIGHUP handling of listener processes * Added an example bash_completion script * Better cleanup handling of peer information Update to version 4.1.2: * Fix UTF-8 tests when run with invalid locale. * Fix cleanup on non-encrypted sessions. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1413=1 Package List: - openSUSE Leap 15.2 (noarch): 2ping-4.5.1-lp152.4.3.1 References:

1 0

openSUSE-RU-2021:1412-1: Recommended update for fwts
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1412-1 Rating: low References: Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fwts fixes the following issue: Update to version 21.09.00: * snapcraft: Fix incorrect core20 library path * snapcraft: fix path to fwts * lib: fwts_version.h - update to V21.09.00 * debian: update changelog * acpi: replace fwts_firmware_detect() by fw->firmware_type * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect * uefi: uefirtmisc: reduce scope of some variables * uefi: securebootcert: make some function arguments const * src/pci/smccc: reduce scope of variable ret * bios: smm: remove redundant variable n * acpi: iort: constify some function arguments * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope * acpi: cstates: remove redundant null check on entry * smccc_test: fix missing ) in pr_info call * opal: clean up some coding style issues * opal: Fix a few memory leaks on asprint allocated buffers * acpi: s3power: clean up pedantic static analysis warnings * uefirtvariable: clean up pedantic static analysis warnings * opal: mem_info: clean up pedantic static analysis warnings * fwts_devicetree: clean up static analysis warning * fwts_acpi_tables: NULLify table pointers * snapcraft: update to use core20 * lib: use <poll.h> rather than <sys/poll.h> Update to version 21.08.00: * Manual: update number of tests, date and remove double spaces * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64 * fwts_firmware: Rework Devicetree firmware detection * Enable dt_sysinfo test for Power only Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1412=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1412=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1412=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-1412=1 Package List: - openSUSE Leap 15.2 (x86_64): fwts-21.09.00-lp152.3.21.1 fwts-debuginfo-21.09.00-lp152.3.21.1 fwts-debugsource-21.09.00-lp152.3.21.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 x86_64): fwts-21.09.00-bp153.2.9.1 fwts-debuginfo-21.09.00-bp153.2.9.1 fwts-debugsource-21.09.00-bp153.2.9.1 - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): fwts-21.09.00-bp152.4.21.1 fwts-debuginfo-21.09.00-bp152.4.21.1 fwts-debugsource-21.09.00-bp152.4.21.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): fwts-21.09.00-bp151.4.21.1 References:

1 0

openSUSE-RU-2021:1432-1: moderate: Recommended update for rpmlint
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1432-1 Rating: moderate References: #1190790 #1191821 SLE-21888 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for rpmlint fixes the following issues: - whitelisting of systemd-od (bsc#1191821) and pam_u2f (bsc#1190790 jsc#SLE-21888) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1432=1 Package List: - openSUSE Leap 15.2 (noarch): rpmlint-1.10-lp152.12.12.1 - openSUSE Leap 15.2 (x86_64): rpmlint-tests-debugsource-84.87+git20181018.60e0249-lp152.12.12.1 References: https://bugzilla.suse.com/1190790 https://bugzilla.suse.com/1191821

1 0

openSUSE-RU-2021:1421-1: moderate: Recommended update for hylafax+
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1421-1 Rating: moderate References: #1181400 #1191571 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for hylafax+ fixes the following issues: Version 7.0.4 * README.SUSE renamed * hylafax.diff added for boo#1191571 (pre-correction) * Dependencies on systemd-services adjusted * retry training twice at the same bitrate unless FTT (26 Aug 2021) * add missing reason messages for session failures (21 Aug 2021) * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021) * add Class1HasRMHookIndication (16 Aug 2021) * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021) * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021) * fix some behavior following frame reception timeouts (13 Aug 2021) * improve behavior if procedural interrupt fails (12 Aug 2021) * handle sender repeating RR after we transmit MCF (10 Aug 2021) * add session logging of receipt of CFR/FTT signals (3 Aug 2021) * cope with receipt of PPR following CTC (3 Aug 2021) * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021) * identify DCN after PPS as a receiver abort (2 Aug 2021) * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021) * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021) * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021) * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021) * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021) * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021) * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021) * decouple session logging from direct filesystem I/O (15 Jul 2021) * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021) * improve tenacity of "persistent" ECM (26 Jun 2021) * maintain the same SSL Fax passcode during a single session (20 May 2021) * log detection of binary file transfer support in receivers (1 Apr 2021) * add support for SiLabs Si2417/Si2435 (5 Feb 2021) Added hardening to systemd service(s) (boo#1181400). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1421=1 Package List: - openSUSE Leap 15.2 (x86_64): hylafax+-7.0.4-lp152.3.12.1 hylafax+-client-7.0.4-lp152.3.12.1 hylafax+-client-debuginfo-7.0.4-lp152.3.12.1 hylafax+-debuginfo-7.0.4-lp152.3.12.1 hylafax+-debugsource-7.0.4-lp152.3.12.1 libfaxutil7_0_4-7.0.4-lp152.3.12.1 libfaxutil7_0_4-debuginfo-7.0.4-lp152.3.12.1 References: https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1191571

1 0

openSUSE-SU-2021:1404-1: important: Security update for containerd, docker, runc
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for containerd, docker, runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1404-1 Rating: important References: #1102408 #1185405 #1187704 #1188282 #1190826 #1191015 #1191121 #1191334 #1191355 #1191434 Cross-References: CVE-2021-30465 CVE-2021-32760 CVE-2021-41089 CVE-2021-41091 CVE-2021-41092 CVE-2021-41103 CVSS scores: CVE-2021-30465 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-30465 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-32760 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2021-32760 (SUSE): 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:L CVE-2021-41089 (NVD) : 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2021-41089 (SUSE): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-41091 (NVD) : 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L CVE-2021-41091 (SUSE): 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L CVE-2021-41092 (NVD) : 5.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N CVE-2021-41092 (SUSE): 5.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N CVE-2021-41103 (SUSE): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has four fixes is now available. Description: This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.9-ce. (bsc#1191355) See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103 container was updated to v1.4.11, to fix CVE-2021-41103. bsc#1191355 - CVE-2021-32760: Fixed that a archive package allows chmod of file outside of unpack target directory (bsc#1188282) - Install systemd service file as well (bsc#1190826) Update to runc v1.0.2. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.2 * Fixed a failure to set CPU quota period in some cases on cgroup v1. * Fixed the inability to start a container with the "adding seccomp filter rule for syscall ..." error, caused by redundant seccomp rules (i.e. those that has action equal to the default one). Such redundant rules are now skipped. * Made release builds reproducible from now on. * Fixed a rare debug log race in runc init, which can result in occasional harmful "failed to decode ..." errors from runc run or exec. * Fixed the check in cgroup v1 systemd manager if a container needs to be frozen before Set, and add a setting to skip such freeze unconditionally. The previous fix for that issue, done in runc 1.0.1, was not working. Update to runc v1.0.1. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.1 * Fixed occasional runc exec/run failure ("interrupted system call") on an Azure volume. * Fixed "unable to find groups ... token too long" error with /etc/group containing lines longer than 64K characters. * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is frozen. This is a regression in 1.0.0, not affecting runc itself but some of libcontainer users (e.g Kubernetes). * cgroupv2: bpf: Ignore inaccessible existing programs in case of permission error when handling replacement of existing bpf cgroup programs. This fixes a regression in 1.0.0, where some SELinux policies would block runc from being able to run entirely. * cgroup/systemd/v2: don't freeze cgroup on Set. * cgroup/systemd/v1: avoid unnecessary freeze on Set. - fix issues with runc under openSUSE MicroOS's SELinux policy. bsc#1187704 Update to runc v1.0.0. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0 ! The usage of relative paths for mountpoints will now produce a warning (such configurations are outside of the spec, and in future runc will produce an error when given such configurations). * cgroupv2: devices: rework the filter generation to produce consistent results with cgroupv1, and always clobber any existing eBPF program(s) to fix runc update and avoid leaking eBPF programs (resulting in errors when managing containers). * cgroupv2: correctly convert "number of IOs" statistics in a cgroupv1-compatible way. * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures. * cgroupv2: wait for freeze to finish before returning from the freezing code, optimize the method for checking whether a cgroup is frozen. * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94 * cgroups/systemd: fixed returning "unit already exists" error from a systemd cgroup manager (regression in rc94) + cgroupv2: support SkipDevices with systemd driver + cgroup/systemd: return, not ignore, stop unit error from Destroy + Make "runc --version" output sane even when built with go get or otherwise outside of our build scripts. + cgroups: set SkipDevices during runc update (so we don't modify cgroups at all during runc update). + cgroup1: blkio: support BFQ weights. + cgroupv2: set per-device io weights if BFQ IO scheduler is available. Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95 This release of runc contains a fix for CVE-2021-30465, and users are strongly recommended to update (especially if you are providing semi-limited access to spawn containers to untrusted users). (bsc#1185405) Update to runc v1.0.0~rc94. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94 Breaking Changes: * cgroupv1: kernel memory limits are now always ignored, as kmemcg has been effectively deprecated by the kernel. Users should make use of regular memory cgroup controls. Regression Fixes: * seccomp: fix 32-bit compilation errors * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code * runc start: fix "chdir to cwd: permission denied" for some setups This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1404=1 Package List: - openSUSE Leap 15.2 (noarch): docker-bash-completion-20.10.9_ce-lp152.2.18.1 docker-fish-completion-20.10.9_ce-lp152.2.18.1 docker-zsh-completion-20.10.9_ce-lp152.2.18.1 - openSUSE Leap 15.2 (x86_64): containerd-1.4.11-lp152.2.12.1 containerd-ctr-1.4.11-lp152.2.12.1 docker-20.10.9_ce-lp152.2.18.1 docker-debuginfo-20.10.9_ce-lp152.2.18.1 runc-1.0.2-lp152.2.9.1 runc-debuginfo-1.0.2-lp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2021-30465.html https://www.suse.com/security/cve/CVE-2021-32760.html https://www.suse.com/security/cve/CVE-2021-41089.html https://www.suse.com/security/cve/CVE-2021-41091.html https://www.suse.com/security/cve/CVE-2021-41092.html https://www.suse.com/security/cve/CVE-2021-41103.html https://bugzilla.suse.com/1102408 https://bugzilla.suse.com/1185405 https://bugzilla.suse.com/1187704 https://bugzilla.suse.com/1188282 https://bugzilla.suse.com/1190826 https://bugzilla.suse.com/1191015 https://bugzilla.suse.com/1191121 https://bugzilla.suse.com/1191334 https://bugzilla.suse.com/1191355 https://bugzilla.suse.com/1191434

1 0

openSUSE-RU-2021:1423-1: Recommended update for bash-completion
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for bash-completion ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1423-1 Rating: low References: #1190929 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bash-completion fixes the following issue: - modinfo completion fails to recognize .ko.xz (bsc#1190929) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1423=1 Package List: - openSUSE Leap 15.2 (noarch): bash-completion-2.7-lp152.6.3.1 bash-completion-devel-2.7-lp152.6.3.1 bash-completion-doc-2.7-lp152.6.3.1 References: https://bugzilla.suse.com/1190929

1 0

openSUSE-RU-2021:1429-1: Recommended update for less
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for less ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1429-1 Rating: low References: #1190552 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for less fixes the following issues: - Add missing runtime dependency on package "which", that is used by lessopen.sh (bsc#1190552) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1429=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): less-530-lp152.4.3.1 less-debuginfo-530-lp152.4.3.1 less-debugsource-530-lp152.4.3.1 References: https://bugzilla.suse.com/1190552

1 0