November 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:1447-1: moderate: Recommended update for hylafax+
by maintenance＠opensuse.org 04 Nov '21

04 Nov '21

openSUSE Recommended Update: Recommended update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1447-1 Rating: moderate References: #1181400 #1191571 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for hylafax+ fixes the following issues: Version 7.0.4 * README.SUSE renamed * hylafax.diff added for boo#1191571 (pre-correction) * Dependencies on systemd-services adjusted * retry training twice at the same bitrate unless FTT (26 Aug 2021) * add missing reason messages for session failures (21 Aug 2021) * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021) * add Class1HasRMHookIndication (16 Aug 2021) * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021) * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021) * fix some behavior following frame reception timeouts (13 Aug 2021) * improve behavior if procedural interrupt fails (12 Aug 2021) * handle sender repeating RR after we transmit MCF (10 Aug 2021) * add session logging of receipt of CFR/FTT signals (3 Aug 2021) * cope with receipt of PPR following CTC (3 Aug 2021) * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021) * identify DCN after PPS as a receiver abort (2 Aug 2021) * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021) * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021) * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021) * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021) * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021) * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021) * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021) * decouple session logging from direct filesystem I/O (15 Jul 2021) * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021) * improve tenacity of "persistent" ECM (26 Jun 2021) * maintain the same SSL Fax passcode during a single session (20 May 2021) * log detection of binary file transfer support in receivers (1 Apr 2021) * add support for SiLabs Si2417/Si2435 (5 Feb 2021) Added hardening to systemd service(s) (boo#1181400). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1447=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): hylafax+-7.0.4-bp152.3.12.1 hylafax+-client-7.0.4-bp152.3.12.1 libfaxutil7_0_4-7.0.4-bp152.3.12.1 References: https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1191571

1 0

openSUSE-RU-2021:1449-1: moderate: Recommended update for rpmlint
by maintenance＠opensuse.org 04 Nov '21

04 Nov '21

openSUSE Recommended Update: Recommended update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1449-1 Rating: moderate References: #1190790 #1191821 SLE-21888 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for rpmlint fixes the following issues: - whitelisting of systemd-od (bsc#1191821) and pam_u2f (bsc#1190790 jsc#SLE-21888) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1449=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): rpmlint-1.10-bp152.4.16.1 References: https://bugzilla.suse.com/1190790 https://bugzilla.suse.com/1191821

1 0

openSUSE-RU-2021:1448-1: moderate: Recommended update for python-bugzilla
by maintenance＠opensuse.org 04 Nov '21

04 Nov '21

openSUSE Recommended Update: Recommended update for python-bugzilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1448-1 Rating: moderate References: #1098219 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-bugzilla fixes the following issues: - Fix HTTP Basic authentication for python3 (boo#1098219) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1448=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python2-bugzilla-2.3.0-bp152.2.3.1 python3-bugzilla-2.3.0-bp152.2.3.1 References: https://bugzilla.suse.com/1098219

1 0

openSUSE-RU-2021:1446-1: Recommended update for jxrlib
by maintenance＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Recommended Update: Recommended update for jxrlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1446-1 Rating: low References: #1183052 #1183053 #1191565 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for jxrlib provides 32bit packages for use by Wine. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1446=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): jxrlib-1.1-bp152.4.3.1 jxrlib-devel-1.1-bp152.4.3.1 libjpegxr0-1.1-bp152.4.3.1 libjxrglue0-1.1-bp152.4.3.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): jxrlib-devel-64bit-1.1-bp152.4.3.1 libjpegxr0-64bit-1.1-bp152.4.3.1 libjxrglue0-64bit-1.1-bp152.4.3.1 References: https://bugzilla.suse.com/1183052 https://bugzilla.suse.com/1183053 https://bugzilla.suse.com/1191565

1 0

openSUSE-RU-2021:1445-1: moderate: Recommended update for 2ping
by maintenance＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Recommended Update: Recommended update for 2ping ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1445-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for 2ping fixes the following issues: Update to version 4.5.1: * 2ping.bash_completion: Make more resilient to failure / missing features. * Minimum Python version changed from 3.5 to 3.6. * Minor no-op code and distribution updates. Update to version 4.5: * Added PyCryptodome support (recommended over PyCrypto, though the latter is still detected/supported). * Replaced best_poller module with Python native selectors module. * Changed --flood output: dots/backspaces are no longer printed, and loss results / errors display full details. * --audible tones will only occur if stdout is a TTY. * Improved hostname/IP display edge cases. * Added an AF_UNIX --loopback test mode. * Listener sockets are added and removed as needed, instead of being re-created on each rescan. * Listener sockets are automatically rescanned periodically. * Multiple systemd sockets are now allowed. * A run can be both a listener and a client at the same time (mainly useful for smoke testing). * Other socket handling refactoring. * Other code refactoring. * Listener statistics are displayer per-bind. * Many, many testing/CI improvements. Update to version 4.3: * Add --srv-service * Change --adaptive behavior to better match ping -A * Fix typos in manpage Update to version 4.2: * Added SIGHUP handling of listener processes * Added an example bash_completion script * Better cleanup handling of peer information Update to version 4.1.2: * Fix UTF-8 tests when run with invalid locale. * Fix cleanup on non-encrypted sessions. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1445=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): 2ping-4.5.1-bp152.4.3.1 References:

1 0

openSUSE-RU-2021:3609-1: Recommended update for autoyast2
by maintenance＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3609-1 Rating: low References: #1191968 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for autoyast2 fixes the following issues: - Add the "keep_unknown_lv" element to the partitioning schema. (bsc#1191968) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3609=1 Package List: - openSUSE Leap 15.3 (noarch): autoyast2-4.3.91-3.28.1 autoyast2-installation-4.3.91-3.28.1 References: https://bugzilla.suse.com/1191968

1 0

openSUSE-SU-2021:3605-1: important: Security update for qemu
by opensuse-security＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3605-1 Rating: important References: #1189234 #1189702 #1189938 #1190425 Cross-References: CVE-2021-3713 CVE-2021-3748 CVSS scores: CVE-2021-3713 (SUSE): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-3748 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702) - CVE-2021-3748: Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938) Non-security issues fixed: - Add transfer length item in block limits page of scsi vpd (bsc#1190425) - Fix qemu crash while deleting xen-block (bsc#1189234) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3605=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-5.2.0-106.4 qemu-arm-5.2.0-106.4 qemu-arm-debuginfo-5.2.0-106.4 qemu-audio-alsa-5.2.0-106.4 qemu-audio-alsa-debuginfo-5.2.0-106.4 qemu-audio-pa-5.2.0-106.4 qemu-audio-pa-debuginfo-5.2.0-106.4 qemu-audio-spice-5.2.0-106.4 qemu-audio-spice-debuginfo-5.2.0-106.4 qemu-block-curl-5.2.0-106.4 qemu-block-curl-debuginfo-5.2.0-106.4 qemu-block-dmg-5.2.0-106.4 qemu-block-dmg-debuginfo-5.2.0-106.4 qemu-block-gluster-5.2.0-106.4 qemu-block-gluster-debuginfo-5.2.0-106.4 qemu-block-iscsi-5.2.0-106.4 qemu-block-iscsi-debuginfo-5.2.0-106.4 qemu-block-nfs-5.2.0-106.4 qemu-block-nfs-debuginfo-5.2.0-106.4 qemu-block-rbd-5.2.0-106.4 qemu-block-rbd-debuginfo-5.2.0-106.4 qemu-block-ssh-5.2.0-106.4 qemu-block-ssh-debuginfo-5.2.0-106.4 qemu-chardev-baum-5.2.0-106.4 qemu-chardev-baum-debuginfo-5.2.0-106.4 qemu-chardev-spice-5.2.0-106.4 qemu-chardev-spice-debuginfo-5.2.0-106.4 qemu-debuginfo-5.2.0-106.4 qemu-debugsource-5.2.0-106.4 qemu-extra-5.2.0-106.4 qemu-extra-debuginfo-5.2.0-106.4 qemu-guest-agent-5.2.0-106.4 qemu-guest-agent-debuginfo-5.2.0-106.4 qemu-hw-display-qxl-5.2.0-106.4 qemu-hw-display-qxl-debuginfo-5.2.0-106.4 qemu-hw-display-virtio-gpu-5.2.0-106.4 qemu-hw-display-virtio-gpu-debuginfo-5.2.0-106.4 qemu-hw-display-virtio-gpu-pci-5.2.0-106.4 qemu-hw-display-virtio-gpu-pci-debuginfo-5.2.0-106.4 qemu-hw-display-virtio-vga-5.2.0-106.4 qemu-hw-display-virtio-vga-debuginfo-5.2.0-106.4 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-106.4 qemu-hw-s390x-virtio-gpu-ccw-debuginfo-5.2.0-106.4 qemu-hw-usb-redirect-5.2.0-106.4 qemu-hw-usb-redirect-debuginfo-5.2.0-106.4 qemu-hw-usb-smartcard-5.2.0-106.4 qemu-hw-usb-smartcard-debuginfo-5.2.0-106.4 qemu-ivshmem-tools-5.2.0-106.4 qemu-ivshmem-tools-debuginfo-5.2.0-106.4 qemu-ksm-5.2.0-106.4 qemu-lang-5.2.0-106.4 qemu-linux-user-5.2.0-106.3 qemu-linux-user-debuginfo-5.2.0-106.3 qemu-linux-user-debugsource-5.2.0-106.3 qemu-ppc-5.2.0-106.4 qemu-ppc-debuginfo-5.2.0-106.4 qemu-s390x-5.2.0-106.4 qemu-s390x-debuginfo-5.2.0-106.4 qemu-testsuite-5.2.0-106.3 qemu-tools-5.2.0-106.4 qemu-tools-debuginfo-5.2.0-106.4 qemu-ui-curses-5.2.0-106.4 qemu-ui-curses-debuginfo-5.2.0-106.4 qemu-ui-gtk-5.2.0-106.4 qemu-ui-gtk-debuginfo-5.2.0-106.4 qemu-ui-opengl-5.2.0-106.4 qemu-ui-opengl-debuginfo-5.2.0-106.4 qemu-ui-spice-app-5.2.0-106.4 qemu-ui-spice-app-debuginfo-5.2.0-106.4 qemu-ui-spice-core-5.2.0-106.4 qemu-ui-spice-core-debuginfo-5.2.0-106.4 qemu-vhost-user-gpu-5.2.0-106.4 qemu-vhost-user-gpu-debuginfo-5.2.0-106.4 qemu-x86-5.2.0-106.4 qemu-x86-debuginfo-5.2.0-106.4 - openSUSE Leap 15.3 (s390x x86_64): qemu-kvm-5.2.0-106.4 - openSUSE Leap 15.3 (noarch): qemu-ipxe-1.0.0+-106.4 qemu-microvm-5.2.0-106.4 qemu-seabios-1.14.0_0_g155821a-106.4 qemu-sgabios-8-106.4 qemu-skiboot-5.2.0-106.4 qemu-vgabios-1.14.0_0_g155821a-106.4 References: https://www.suse.com/security/cve/CVE-2021-3713.html https://www.suse.com/security/cve/CVE-2021-3748.html https://bugzilla.suse.com/1189234 https://bugzilla.suse.com/1189702 https://bugzilla.suse.com/1189938 https://bugzilla.suse.com/1190425

1 0

openSUSE-SU-2021:3603-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3603-1 Rating: important References: #1191937 Cross-References: CVE-2021-42762 CVSS scores: CVE-2021-42762 (SUSE): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for webkit2gtk3 fixes the following issues: - CVE-2021-42762: Updated seccomp rules with latest changes from flatpak (bsc#1191937). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3603=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.32.4-15.1 libjavascriptcoregtk-4_0-18-debuginfo-2.32.4-15.1 libwebkit2gtk-4_0-37-2.32.4-15.1 libwebkit2gtk-4_0-37-debuginfo-2.32.4-15.1 typelib-1_0-JavaScriptCore-4_0-2.32.4-15.1 typelib-1_0-WebKit2-4_0-2.32.4-15.1 typelib-1_0-WebKit2WebExtension-4_0-2.32.4-15.1 webkit-jsc-4-2.32.4-15.1 webkit-jsc-4-debuginfo-2.32.4-15.1 webkit2gtk-4_0-injected-bundles-2.32.4-15.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.32.4-15.1 webkit2gtk3-debugsource-2.32.4-15.1 webkit2gtk3-devel-2.32.4-15.1 webkit2gtk3-minibrowser-2.32.4-15.1 webkit2gtk3-minibrowser-debuginfo-2.32.4-15.1 - openSUSE Leap 15.3 (noarch): libwebkit2gtk3-lang-2.32.4-15.1 - openSUSE Leap 15.3 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.32.4-15.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.32.4-15.1 libwebkit2gtk-4_0-37-32bit-2.32.4-15.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.32.4-15.1 References: https://www.suse.com/security/cve/CVE-2021-42762.html https://bugzilla.suse.com/1191937

1 0

openSUSE-SU-2021:3604-1: important: Security update for qemu
by opensuse-security＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3604-1 Rating: important References: #1189234 #1189702 #1189938 #1190425 Cross-References: CVE-2021-3713 CVE-2021-3748 CVSS scores: CVE-2021-3713 (SUSE): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-3748 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702) - CVE-2021-3748: Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938) Non-security issues fixed: - Add transfer length item in block limits page of scsi vpd (bsc#1190425) - Fix qemu crash while deleting xen-block (bsc#1189234) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3604=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-s390-4.2.1-11.31.3 qemu-s390-debuginfo-4.2.1-11.31.3 References: https://www.suse.com/security/cve/CVE-2021-3713.html https://www.suse.com/security/cve/CVE-2021-3748.html https://bugzilla.suse.com/1189234 https://bugzilla.suse.com/1189702 https://bugzilla.suse.com/1189938 https://bugzilla.suse.com/1190425

1 0

openSUSE-RU-2021:3606-1: moderate: Recommended update for release-notes-sles
by maintenance＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Recommended Update: Recommended update for release-notes-sles ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3606-1 Rating: moderate References: #1183906 #1186099 #1188302 #1189989 #1190394 #933411 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for release-notes-sles fixes the following issues: - 15.3.20211025 (tracked in bsc#933411) - Added note about NVMe-oF TCP support (bsc#1190394) - Added note about manual pages (bsc#1188302) - Added keepalived to support exceptions (bsc#1183906) - Updated note about support information (bsc#1189989) - Updated SELinux note to include warning (bsc#1186099) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3606=1 Package List: - openSUSE Leap 15.3 (noarch): release-notes-sles-15.3.20211025-3.12.2 References: https://bugzilla.suse.com/1183906 https://bugzilla.suse.com/1186099 https://bugzilla.suse.com/1188302 https://bugzilla.suse.com/1189989 https://bugzilla.suse.com/1190394 https://bugzilla.suse.com/933411

1 0