October 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:1408-1: important: Security update for busybox
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for busybox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1408-1 Rating: important References: #1099260 #1099263 #1121426 #1184522 #951562 Cross-References: CVE-2011-5325 CVE-2018-1000500 CVE-2018-1000517 CVE-2018-20679 CVE-2021-28831 CVSS scores: CVE-2011-5325 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2018-1000500 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-1000500 (SUSE): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2018-1000517 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-1000517 (SUSE): 5.6 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2018-20679 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2018-20679 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-28831 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-28831 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for busybox fixes the following issues: - CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522). - CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426). - CVE-2018-1000517: Fixed buffer overflow in the retrieve_file_data() (bsc#1099260). - CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562). - CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1408=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): busybox-1.26.2-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): busybox-static-1.26.2-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2011-5325.html https://www.suse.com/security/cve/CVE-2018-1000500.html https://www.suse.com/security/cve/CVE-2018-1000517.html https://www.suse.com/security/cve/CVE-2018-20679.html https://www.suse.com/security/cve/CVE-2021-28831.html https://bugzilla.suse.com/1099260 https://bugzilla.suse.com/1099263 https://bugzilla.suse.com/1121426 https://bugzilla.suse.com/1184522 https://bugzilla.suse.com/951562

1 0

openSUSE-RU-2021:1407-1: important: Recommended update for azure-cli, azure-cli-core, python-azure-mgmt, python-azure-mgmt-billing, python-azure-mgmt-cdn, python-azure-mgmt-hdinsight, python-azure-mgmt-netapp, python-azure-mgmt-resource, python-azure-mgmt-synapse
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for azure-cli, azure-cli-core, python-azure-mgmt, python-azure-mgmt-billing, python-azure-mgmt-cdn, python-azure-mgmt-hdinsight, python-azure-mgmt-netapp, python-azure-mgmt-resource, python-azure-mgmt-synapse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1407-1 Rating: important References: #1187880 #1188178 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for azure-cli, azure-cli-core, python-azure-mgmt, python-azure-mgmt-billing, python-azure-mgmt-cdn, python-azure-mgmt-hdinsight, python-azure-mgmt-netapp, python-azure-mgmt-resource, python-azure-mgmt-synapse contains the following fixes: Changes in python-azure-mgmt: - Remove all version constraints in Requires. (bsc#1187880, bsc#1188178) Changes in azure-cli-core: - Update in SLE-15 (bsc#1187880, bsc#1188178) - New upstream release + Version 2.16.0 + For detailed information about changes see the HISTORY.rst file provided with this package - Refresh patches for new version - Update Requires from setup.py + Temporarily use a vendored copy of azure-mgmt-resource - New upstream release + Version 2.15.0 + For detailed information about changes see the HISTORY.rst file provided with this package - Update Requires from setup.py Changes in azure-cli: - Update in SLE-15 (bsc#1187880, bsc#1188178) - Add missing python3-azure-mgmt-resource dependency to Requires - New upstream release + Version 2.16.0 + For detailed information about changes see the HISTORY.rst file provided with this package - Update Requires from setup.py - New upstream release + Version 2.15.0 + For detailed information about changes see the HISTORY.rst file provided with this package - Update Requires from setup.py Changes in python-azure-mgmt-billing: - Update in SLE-15 (bsc#1187880, bsc#1188178) - New upstream release + Version 1.0.0 + For detailed information about changes see the CHANGELOG.md file provided with this package - Update Requires from setup.py Changes in python-azure-mgmt-cdn: - Update in SLE-15 (bsc#1187880, bsc#1188178) - New upstream release + Version 5.2.0 + For detailed information about changes see the CHANGELOG.md file provided with this package Changes in python-azure-mgmt-hdinsight: - Update in SLE-15 (bsc#1187880, bsc#1188178) - New upstream release + Version 2.0.0 + For detailed information about changes see the CHANGELOG.md file provided with this package Changes in python-azure-mgmt-netapp: - Update in SLE-15 (bsc#1187880, bsc#1188178) - New upstream release + Version 0.14.0 + For detailed information about changes see the CHANGELOG.md file provided with this package Changes in python-azure-mgmt-resource: - Update in SLE-15 (bsc#1187880, bsc#1188178) - New upstream release + Version 15.0.0 + For detailed information about changes see the CHANGELOG.md file provided with this package - Update Requires from setup.py Changes in python-azure-mgmt-synapse: - Update in SLE-15 (bsc#1187880, bsc#1188178) - New upstream release + Version 0.5.0 + For detailed information about changes see the CHANGELOG.md file provided with this package This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1407=1 Package List: - openSUSE Leap 15.2 (noarch): azure-cli-2.16.0-lp152.3.6.1 azure-cli-core-2.16.0-lp152.4.6.1 python2-azure-mgmt-4.0.0-lp152.3.6.1 python2-azure-mgmt-billing-1.0.0-lp152.3.6.1 python2-azure-mgmt-cdn-5.2.0-lp152.3.6.1 python2-azure-mgmt-hdinsight-2.0.0-lp152.3.6.1 python2-azure-mgmt-netapp-0.14.0-lp152.5.1 python2-azure-mgmt-resource-15.0.0-lp152.3.6.1 python2-azure-mgmt-synapse-0.5.0-lp152.5.1 python3-azure-mgmt-4.0.0-lp152.3.6.1 python3-azure-mgmt-billing-1.0.0-lp152.3.6.1 python3-azure-mgmt-cdn-5.2.0-lp152.3.6.1 python3-azure-mgmt-hdinsight-2.0.0-lp152.3.6.1 python3-azure-mgmt-netapp-0.14.0-lp152.5.1 python3-azure-mgmt-resource-15.0.0-lp152.3.6.1 python3-azure-mgmt-synapse-0.5.0-lp152.5.1 - openSUSE Leap 15.2 (x86_64): azure-cli-test-2.16.0-lp152.3.6.1 References: https://bugzilla.suse.com/1187880 https://bugzilla.suse.com/1188178

1 0

openSUSE-SU-2021:1400-1: important: Security update for flatpak
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for flatpak ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1400-1 Rating: important References: #1191507 Cross-References: CVE-2021-41133 CVSS scores: CVE-2021-41133 (SUSE): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for flatpak fixes the following issues: - Update to version 1.10.5: - CVE-2021-41133: Fixed a bug that could lead to sandbox bypass via recent VFS-manipulating syscalls. (bsc#1191507) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1400=1 Package List: - openSUSE Leap 15.2 (x86_64): flatpak-1.10.5-lp152.3.9.1 flatpak-debuginfo-1.10.5-lp152.3.9.1 flatpak-debugsource-1.10.5-lp152.3.9.1 flatpak-devel-1.10.5-lp152.3.9.1 flatpak-zsh-completion-1.10.5-lp152.3.9.1 libflatpak0-1.10.5-lp152.3.9.1 libflatpak0-debuginfo-1.10.5-lp152.3.9.1 system-user-flatpak-1.10.5-lp152.3.9.1 typelib-1_0-Flatpak-1_0-1.10.5-lp152.3.9.1 References: https://www.suse.com/security/cve/CVE-2021-41133.html https://bugzilla.suse.com/1191507

1 0

openSUSE-SU-2021:1418-1: moderate: Security update for python
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1418-1 Rating: moderate References: #1189241 #1189287 Cross-References: CVE-2021-3733 CVE-2021-3737 CVSS scores: CVE-2021-3733 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-3737 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241) - CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1418=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpython2_7-1_0-2.7.18-lp152.3.21.1 libpython2_7-1_0-debuginfo-2.7.18-lp152.3.21.1 python-2.7.18-lp152.3.21.1 python-base-2.7.18-lp152.3.21.1 python-base-debuginfo-2.7.18-lp152.3.21.1 python-base-debugsource-2.7.18-lp152.3.21.1 python-curses-2.7.18-lp152.3.21.1 python-curses-debuginfo-2.7.18-lp152.3.21.1 python-debuginfo-2.7.18-lp152.3.21.1 python-debugsource-2.7.18-lp152.3.21.1 python-demo-2.7.18-lp152.3.21.1 python-devel-2.7.18-lp152.3.21.1 python-gdbm-2.7.18-lp152.3.21.1 python-gdbm-debuginfo-2.7.18-lp152.3.21.1 python-idle-2.7.18-lp152.3.21.1 python-tk-2.7.18-lp152.3.21.1 python-tk-debuginfo-2.7.18-lp152.3.21.1 python-xml-2.7.18-lp152.3.21.1 python-xml-debuginfo-2.7.18-lp152.3.21.1 - openSUSE Leap 15.2 (noarch): python-doc-2.7.18-lp152.3.21.1 python-doc-pdf-2.7.18-lp152.3.21.1 - openSUSE Leap 15.2 (x86_64): libpython2_7-1_0-32bit-2.7.18-lp152.3.21.1 libpython2_7-1_0-32bit-debuginfo-2.7.18-lp152.3.21.1 python-32bit-2.7.18-lp152.3.21.1 python-32bit-debuginfo-2.7.18-lp152.3.21.1 python-base-32bit-2.7.18-lp152.3.21.1 python-base-32bit-debuginfo-2.7.18-lp152.3.21.1 References: https://www.suse.com/security/cve/CVE-2021-3733.html https://www.suse.com/security/cve/CVE-2021-3737.html https://bugzilla.suse.com/1189241 https://bugzilla.suse.com/1189287

1 0

openSUSE-RU-2021:1430-1: moderate: Recommended update for yast2-add-on
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for yast2-add-on ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1430-1 Rating: moderate References: #1189154 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-add-on fixes the following issues: - Auto client does not crash when trying to import from an empty add-on section (bsc#1189154). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1430=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-add-on-4.2.18-lp152.2.6.1 References: https://bugzilla.suse.com/1189154

1 0

openSUSE-SU-2021:1424-1: moderate: Security update for civetweb
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for civetweb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1424-1 Rating: moderate References: #1191938 Cross-References: CVE-2020-27304 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for civetweb fixes the following issues: Version 1.15: * boo#1191938 / CVE-2020-27304: missing uploaded filepath validation in the default form-based file upload mechanism * New configuration for URL decoding * Sanitize filenames in handle form * Example ��embedded_c.c��: Do not overwrite files (possible security issue) * Remove obsolete examples * Remove ��experimental�� label for some features * Remove MG_LEGACY_INTERFACE that have been declared obsolete in 2017 or earlier * Modifications to build scripts, required due to changes in the test environment * Unix domain socket support fixed * Fixes for NO_SSL_DL * Fixes for some warnings / static code analysis Version 1.14: * Change SSL default setting to use TLS 1.2 as minimum (set config if you need an earlier version) * Add local_uri_raw field (not sanitized URI) to request_info * Additional API functions and a callback after closing connections * Allow mbedTLS as OpenSSL alternative (basic functionality) * Add OpenSSL 3.0 support (OpenSSL 3.0 Alpha 13) * Support UNIX/Linux domain sockets * Fuzz tests and ossfuzz integration * Compression for websockets * Restructure some source files * Improve documentation * Fix HTTP range requests * Add some functions for Lua scripts/LSP * Build system specific fixes (CMake, MinGW) * Update 3rd party components (Lua, lfs, sqlite) * Allow Lua background script to use timers, format and filter logs * Remove WinCE code * Update version number Version 1.13: * Add arguments for CGI interpreters * Support multiple CGi interpreters * Buffering HTTP response headers, including API functions mg_response_header_* in C and Lua * Additional C API functions * Fix some memory leaks * Extended use of atomic operations (e.g., for server stats) * Add fuzz tests * Set OpenSSL 1.1 API as default (from 1.0) * Add Lua 5.4 support and deprecate Lua 5.1 * Provide additional Lua API functions * Fix Lua websocket memory leak when closing the server * Remove obsolete "file in memory" implementation * Improvements and fixes in documentation * Fixes from static source code analysis * Additional unit tests * Various small bug fixes * Experimental support for some HTTP2 features (not ready for production) * Experimental support for websocket compression * Remove legacy interfaces declared obsolete since more than 3 years Version 1.12 * See https://github.com/civetweb/civetweb/releases/tag/v1.12 for detailed changelog Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1424=1 Package List: - openSUSE Leap 15.2 (x86_64): civetweb-1.15-lp152.2.3.1 civetweb-debuginfo-1.15-lp152.2.3.1 civetweb-debugsource-1.15-lp152.2.3.1 civetweb-devel-1.15-lp152.2.3.1 libcivetweb-cpp1_15_0-1.15-lp152.2.3.1 libcivetweb-cpp1_15_0-debuginfo-1.15-lp152.2.3.1 libcivetweb1_15_0-1.15-lp152.2.3.1 libcivetweb1_15_0-debuginfo-1.15-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-27304.html https://bugzilla.suse.com/1191938

1 0

openSUSE-RU-2021:1427-1: Recommended update for man-pages
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for man-pages ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1427-1 Rating: low References: #1185534 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for man-pages fixes the following issues: - install kernel_lockdown.7 man page. (bsc#1185534) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1427=1 Package List: - openSUSE Leap 15.2 (noarch): man-pages-4.16-lp152.7.3.1 References: https://bugzilla.suse.com/1185534

1 0

openSUSE-RU-2021:1414-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1414-1 Rating: moderate References: #1185016 #1185524 #1186910 #1187270 #1187512 #1188344 #1190645 #1190739 #1190915 #1190933 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Don't crash when the interfaces table contains a not configured one (bnc#1190645, bsc#1190915). - Fix the shown description using the interface friendly name when it is empty (bsc#1190933). - Consider aliases sections as case insensitive (bsc#1190739). - Display user defined device name in the devices overview (bnc#1190645). - Don't crash when defined aliases in AutoYaST profile are not defined as a map (bsc#1188344). - Support 'boot' and 'on' as aliases for the 'auto' startmode (bsc#1186910). - Fix desktop file so the control center tooltip is translated (bsc#1187270). - Use the linuxrc proxy settings for the HTTPS and FTP proxies (bsc#1185016). - Don't crash at the end of installation when storing wifi configuration for NetworkManager (bsc#1185524, bsc#1187512). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1414=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): augeas-1.10.1-lp152.4.3.1 augeas-debuginfo-1.10.1-lp152.4.3.1 augeas-debugsource-1.10.1-lp152.4.3.1 augeas-devel-1.10.1-lp152.4.3.1 augeas-lense-tests-1.10.1-lp152.4.3.1 augeas-lenses-1.10.1-lp152.4.3.1 libaugeas0-1.10.1-lp152.4.3.1 libaugeas0-debuginfo-1.10.1-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): augeas-devel-32bit-1.10.1-lp152.4.3.1 libaugeas0-32bit-1.10.1-lp152.4.3.1 libaugeas0-32bit-debuginfo-1.10.1-lp152.4.3.1 References: https://bugzilla.suse.com/1185016 https://bugzilla.suse.com/1185524 https://bugzilla.suse.com/1186910 https://bugzilla.suse.com/1187270 https://bugzilla.suse.com/1187512 https://bugzilla.suse.com/1188344 https://bugzilla.suse.com/1190645 https://bugzilla.suse.com/1190739 https://bugzilla.suse.com/1190915 https://bugzilla.suse.com/1190933

1 0

openSUSE-SU-2021:1425-1: moderate: Security update for wireguard-tools
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for wireguard-tools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1425-1 Rating: moderate References: #1191224 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for wireguard-tools fixes the following issues: - Removed world-readable permissions from /etc/wireguard (bsc#1191224) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1425=1 Package List: - openSUSE Leap 15.2 (x86_64): wireguard-tools-1.0.20200827-lp152.2.6.1 wireguard-tools-debuginfo-1.0.20200827-lp152.2.6.1 wireguard-tools-debugsource-1.0.20200827-lp152.2.6.1 References: https://bugzilla.suse.com/1191224

1 0

openSUSE-SU-2021:1419-1: moderate: Security update for squid
by opensuse-security＠opensuse.org 31 Oct '21

31 Oct '21

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1419-1 Rating: moderate References: #1189403 Cross-References: CVE-2021-28116 CVSS scores: CVE-2021-28116 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-28116 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for squid fixes the following issues: Update to version 4.17: - CVE-2021-28116: Fixed a out-of-bounds read in the WCCP protocol (bsc#1189403). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1419=1 Package List: - openSUSE Leap 15.2 (x86_64): squid-4.17-lp152.2.12.1 squid-debuginfo-4.17-lp152.2.12.1 squid-debugsource-4.17-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2021-28116.html https://bugzilla.suse.com/1189403

1 0