November 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:3600-1: moderate: Recommended update for postgresql
by maintenance＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Recommended Update: Recommended update for postgresql ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3600-1 Rating: moderate References: SLE-20676 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for postgresql fixes the following issues: - Bump version to 14, leave default at 13. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3600=1 Package List: - openSUSE Leap 15.3 (noarch): postgresql-14-10.6.2 postgresql-contrib-14-10.6.2 postgresql-devel-14-10.6.2 postgresql-docs-14-10.6.2 postgresql-llvmjit-14-10.6.2 postgresql-plperl-14-10.6.2 postgresql-plpython-14-10.6.2 postgresql-pltcl-14-10.6.2 postgresql-server-14-10.6.2 postgresql-server-devel-14-10.6.2 postgresql-test-14-10.6.2 References:

1 0

openSUSE-RU-2021:3599-1: moderate: Recommended update for postgresql, postgresql13, postgresql14
by maintenance＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Recommended Update: Recommended update for postgresql, postgresql13, postgresql14 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3599-1 Rating: moderate References: SLE-20675 SLE-20676 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains two features can now be installed. Description: This update for postgresql, postgresql13, postgresql14 fixes the following issues: This update ships postgresql14. (jsc#SLE-20675 jsc#SLE-20676) Feature changes in postgresql14: - https://www.postgresql.org/about/news/postgresql-14-released-2318/ - https://www.postgresql.org/docs/14/release-14.html Changes in postgresql13: - Stop building the mini and lib packages as they are now coming from postgresql14. Changes in postgresql: - Bump version to 14, leave default at 12. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3599=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libecpg6-14.0-5.3.1 libecpg6-debuginfo-14.0-5.3.1 libpq5-14.0-5.3.1 libpq5-debuginfo-14.0-5.3.1 postgresql13-13.4-5.19.1 postgresql13-contrib-13.4-5.19.1 postgresql13-contrib-debuginfo-13.4-5.19.1 postgresql13-debuginfo-13.4-5.19.1 postgresql13-debugsource-13.4-5.19.1 postgresql13-devel-13.4-5.19.1 postgresql13-devel-debuginfo-13.4-5.19.1 postgresql13-llvmjit-13.4-5.19.1 postgresql13-llvmjit-debuginfo-13.4-5.19.1 postgresql13-plperl-13.4-5.19.1 postgresql13-plperl-debuginfo-13.4-5.19.1 postgresql13-plpython-13.4-5.19.1 postgresql13-plpython-debuginfo-13.4-5.19.1 postgresql13-pltcl-13.4-5.19.1 postgresql13-pltcl-debuginfo-13.4-5.19.1 postgresql13-server-13.4-5.19.1 postgresql13-server-debuginfo-13.4-5.19.1 postgresql13-server-devel-13.4-5.19.1 postgresql13-server-devel-debuginfo-13.4-5.19.1 postgresql13-test-13.4-5.19.1 postgresql14-14.0-5.3.1 postgresql14-contrib-14.0-5.3.1 postgresql14-contrib-debuginfo-14.0-5.3.1 postgresql14-debuginfo-14.0-5.3.1 postgresql14-debugsource-14.0-5.3.1 postgresql14-devel-14.0-5.3.1 postgresql14-devel-debuginfo-14.0-5.3.1 postgresql14-devel-mini-14.0-5.3.1 postgresql14-devel-mini-debuginfo-14.0-5.3.1 postgresql14-llvmjit-14.0-5.3.1 postgresql14-llvmjit-debuginfo-14.0-5.3.1 postgresql14-plperl-14.0-5.3.1 postgresql14-plperl-debuginfo-14.0-5.3.1 postgresql14-plpython-14.0-5.3.1 postgresql14-plpython-debuginfo-14.0-5.3.1 postgresql14-pltcl-14.0-5.3.1 postgresql14-pltcl-debuginfo-14.0-5.3.1 postgresql14-server-14.0-5.3.1 postgresql14-server-debuginfo-14.0-5.3.1 postgresql14-server-devel-14.0-5.3.1 postgresql14-server-devel-debuginfo-14.0-5.3.1 postgresql14-test-14.0-5.3.1 - openSUSE Leap 15.3 (x86_64): libecpg6-32bit-14.0-5.3.1 libecpg6-32bit-debuginfo-14.0-5.3.1 libpq5-32bit-14.0-5.3.1 libpq5-32bit-debuginfo-14.0-5.3.1 - openSUSE Leap 15.3 (noarch): postgresql13-docs-13.4-5.19.1 postgresql14-docs-14.0-5.3.1 References:

1 0

openSUSE-RU-2021:3596-1: moderate: Recommended update for libyui-ncurses-pkg
by maintenance＠opensuse.org 03 Nov '21

03 Nov '21

openSUSE Recommended Update: Recommended update for libyui-ncurses-pkg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3596-1 Rating: moderate References: #1191130 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libyui-ncurses-pkg fixes the following issues: - Fixed crash in NCurses online update when retracted packages are present (bsc#1191130) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3596=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libyui-ncurses-pkg11-2.50.8-3.3.1 libyui-ncurses-pkg11-debuginfo-2.50.8-3.3.1 - openSUSE Leap 15.3 (noarch): libyui-ncurses-pkg-doc-2.50.8-3.3.1 References: https://bugzilla.suse.com/1191130

1 0

openSUSE-SU-2021:1438-1: important: Security update for apache2
by opensuse-security＠opensuse.org 02 Nov '21

02 Nov '21

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1438-1 Rating: important References: #1190666 #1190669 #1190702 #1190703 Cross-References: CVE-2021-34798 CVE-2021-36160 CVE-2021-39275 CVE-2021-40438 CVSS scores: CVE-2021-34798 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-36160 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-39275 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-40438 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1438=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-2.4.43-lp152.2.21.1 apache2-debuginfo-2.4.43-lp152.2.21.1 apache2-debugsource-2.4.43-lp152.2.21.1 apache2-devel-2.4.43-lp152.2.21.1 apache2-event-2.4.43-lp152.2.21.1 apache2-event-debuginfo-2.4.43-lp152.2.21.1 apache2-example-pages-2.4.43-lp152.2.21.1 apache2-prefork-2.4.43-lp152.2.21.1 apache2-prefork-debuginfo-2.4.43-lp152.2.21.1 apache2-utils-2.4.43-lp152.2.21.1 apache2-utils-debuginfo-2.4.43-lp152.2.21.1 apache2-worker-2.4.43-lp152.2.21.1 apache2-worker-debuginfo-2.4.43-lp152.2.21.1 - openSUSE Leap 15.2 (noarch): apache2-doc-2.4.43-lp152.2.21.1 References: https://www.suse.com/security/cve/CVE-2021-34798.html https://www.suse.com/security/cve/CVE-2021-36160.html https://www.suse.com/security/cve/CVE-2021-39275.html https://www.suse.com/security/cve/CVE-2021-40438.html https://bugzilla.suse.com/1190666 https://bugzilla.suse.com/1190669 https://bugzilla.suse.com/1190702 https://bugzilla.suse.com/1190703

1 0

openSUSE-SU-2021:1440-1: moderate: Security update for util-linux
by opensuse-security＠opensuse.org 02 Nov '21

02 Nov '21

openSUSE Security Update: Security update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1440-1 Rating: moderate References: #1122417 #1125886 #1178236 #1188921 Cross-References: CVE-2021-37600 CVSS scores: CVE-2021-37600 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-37600 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for util-linux fixes the following issues: Update to version 2.33.2 to provide seamless update from SLE12 SP5 to SLE15 SP2: - CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in get_sem_elements() in sys-utils/ipcutils.c (bsc#1188921). - agetty: Fix 8-bit processing in get_logname() (bsc#1125886). - mount: Fix "mount" output for net file systems (bsc#1122417). - ipcs: Avoid overflows (bsc#1178236) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1440=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libblkid-devel-2.33.2-lp152.5.9.1 libblkid-devel-static-2.33.2-lp152.5.9.1 libblkid1-2.33.2-lp152.5.9.1 libblkid1-debuginfo-2.33.2-lp152.5.9.1 libfdisk-devel-2.33.2-lp152.5.9.1 libfdisk-devel-static-2.33.2-lp152.5.9.1 libfdisk1-2.33.2-lp152.5.9.1 libfdisk1-debuginfo-2.33.2-lp152.5.9.1 libmount-devel-2.33.2-lp152.5.9.1 libmount-devel-static-2.33.2-lp152.5.9.1 libmount1-2.33.2-lp152.5.9.1 libmount1-debuginfo-2.33.2-lp152.5.9.1 libsmartcols-devel-2.33.2-lp152.5.9.1 libsmartcols-devel-static-2.33.2-lp152.5.9.1 libsmartcols1-2.33.2-lp152.5.9.1 libsmartcols1-debuginfo-2.33.2-lp152.5.9.1 libuuid-devel-2.33.2-lp152.5.9.1 libuuid-devel-static-2.33.2-lp152.5.9.1 libuuid1-2.33.2-lp152.5.9.1 libuuid1-debuginfo-2.33.2-lp152.5.9.1 util-linux-2.33.2-lp152.5.9.1 util-linux-debuginfo-2.33.2-lp152.5.9.1 util-linux-debugsource-2.33.2-lp152.5.9.1 util-linux-systemd-2.33.2-lp152.5.9.1 util-linux-systemd-debuginfo-2.33.2-lp152.5.9.1 util-linux-systemd-debugsource-2.33.2-lp152.5.9.1 uuidd-2.33.2-lp152.5.9.1 uuidd-debuginfo-2.33.2-lp152.5.9.1 - openSUSE Leap 15.2 (noarch): util-linux-lang-2.33.2-lp152.5.9.1 - openSUSE Leap 15.2 (x86_64): libblkid-devel-32bit-2.33.2-lp152.5.9.1 libblkid1-32bit-2.33.2-lp152.5.9.1 libblkid1-32bit-debuginfo-2.33.2-lp152.5.9.1 libmount-devel-32bit-2.33.2-lp152.5.9.1 libmount1-32bit-2.33.2-lp152.5.9.1 libmount1-32bit-debuginfo-2.33.2-lp152.5.9.1 libuuid-devel-32bit-2.33.2-lp152.5.9.1 libuuid1-32bit-2.33.2-lp152.5.9.1 libuuid1-32bit-debuginfo-2.33.2-lp152.5.9.1 python3-libmount-2.33.2-lp152.5.9.1 python3-libmount-debuginfo-2.33.2-lp152.5.9.1 python3-libmount-debugsource-2.33.2-lp152.5.9.1 References: https://www.suse.com/security/cve/CVE-2021-37600.html https://bugzilla.suse.com/1122417 https://bugzilla.suse.com/1125886 https://bugzilla.suse.com/1178236 https://bugzilla.suse.com/1188921

1 0

openSUSE-RU-2021:1442-1: moderate: Recommended update for yast2-registration
by maintenance＠opensuse.org 02 Nov '21

02 Nov '21

openSUSE Recommended Update: Recommended update for yast2-registration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1442-1 Rating: moderate References: #1188717 #1191376 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-registration fixes the following issues: - Fixed evaluating the update repositories the SUSE Manager update repositories were not disabled when installing the system without updates (bsc#1188717, bsc#1191376) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1442=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-registration-4.2.47-lp152.2.12.1 References: https://bugzilla.suse.com/1188717 https://bugzilla.suse.com/1191376

1 0

openSUSE-SU-2021:1439-1: important: Security update for transfig
by opensuse-security＠opensuse.org 02 Nov '21

02 Nov '21

openSUSE Security Update: Security update for transfig ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1439-1 Rating: important References: #1189325 #1189343 #1189345 #1189346 #1190607 #1190611 #1190612 #1190615 #1190616 #1190617 #1190618 #1192019 Cross-References: CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-21532 CVE-2020-21533 CVE-2020-21534 CVE-2020-21535 CVE-2020-21680 CVE-2020-21681 CVE-2020-21682 CVE-2020-21683 CVE-2021-32280 CVSS scores: CVE-2020-21529 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-21530 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-21531 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-21532 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-21533 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-21534 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-21535 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-21680 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-21681 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-21682 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-21683 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-32280 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for transfig fixes the following issues: Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021) - bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c. - bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c. - bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c. - bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c. - bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c. - bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c. - bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c. - bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1439=1 Package List: - openSUSE Leap 15.2 (x86_64): transfig-3.2.8b-lp152.6.9.1 transfig-debuginfo-3.2.8b-lp152.6.9.1 transfig-debugsource-3.2.8b-lp152.6.9.1 References: https://www.suse.com/security/cve/CVE-2020-21529.html https://www.suse.com/security/cve/CVE-2020-21530.html https://www.suse.com/security/cve/CVE-2020-21531.html https://www.suse.com/security/cve/CVE-2020-21532.html https://www.suse.com/security/cve/CVE-2020-21533.html https://www.suse.com/security/cve/CVE-2020-21534.html https://www.suse.com/security/cve/CVE-2020-21535.html https://www.suse.com/security/cve/CVE-2020-21680.html https://www.suse.com/security/cve/CVE-2020-21681.html https://www.suse.com/security/cve/CVE-2020-21682.html https://www.suse.com/security/cve/CVE-2020-21683.html https://www.suse.com/security/cve/CVE-2021-32280.html https://bugzilla.suse.com/1189325 https://bugzilla.suse.com/1189343 https://bugzilla.suse.com/1189345 https://bugzilla.suse.com/1189346 https://bugzilla.suse.com/1190607 https://bugzilla.suse.com/1190611 https://bugzilla.suse.com/1190612 https://bugzilla.suse.com/1190615 https://bugzilla.suse.com/1190616 https://bugzilla.suse.com/1190617 https://bugzilla.suse.com/1190618 https://bugzilla.suse.com/1192019

1 0

openSUSE-SU-2021:1441-1: moderate: Security update for pcre
by opensuse-security＠opensuse.org 02 Nov '21

02 Nov '21

openSUSE Security Update: Security update for pcre ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1441-1 Rating: moderate References: #1172973 #1172974 Cross-References: CVE-2019-20838 CVE-2020-14155 CVSS scores: CVE-2019-20838 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-20838 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-14155 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2020-14155 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for pcre fixes the following issues: Update pcre to version 8.45: - CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974). - CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1441=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpcre1-8.45-lp152.7.6.1 libpcre1-debuginfo-8.45-lp152.7.6.1 libpcre16-0-8.45-lp152.7.6.1 libpcre16-0-debuginfo-8.45-lp152.7.6.1 libpcrecpp0-8.45-lp152.7.6.1 libpcrecpp0-debuginfo-8.45-lp152.7.6.1 libpcreposix0-8.45-lp152.7.6.1 libpcreposix0-debuginfo-8.45-lp152.7.6.1 pcre-debugsource-8.45-lp152.7.6.1 pcre-devel-8.45-lp152.7.6.1 pcre-devel-static-8.45-lp152.7.6.1 pcre-tools-8.45-lp152.7.6.1 pcre-tools-debuginfo-8.45-lp152.7.6.1 - openSUSE Leap 15.2 (noarch): pcre-doc-8.45-lp152.7.6.1 - openSUSE Leap 15.2 (x86_64): libpcre1-32bit-8.45-lp152.7.6.1 libpcre1-32bit-debuginfo-8.45-lp152.7.6.1 libpcre16-0-32bit-8.45-lp152.7.6.1 libpcre16-0-32bit-debuginfo-8.45-lp152.7.6.1 libpcrecpp0-32bit-8.45-lp152.7.6.1 libpcrecpp0-32bit-debuginfo-8.45-lp152.7.6.1 libpcreposix0-32bit-8.45-lp152.7.6.1 libpcreposix0-32bit-debuginfo-8.45-lp152.7.6.1 References: https://www.suse.com/security/cve/CVE-2019-20838.html https://www.suse.com/security/cve/CVE-2020-14155.html https://bugzilla.suse.com/1172973 https://bugzilla.suse.com/1172974

1 0

openSUSE-RU-2021:1444-1: moderate: Recommended update for apparmor
by maintenance＠opensuse.org 02 Nov '21

02 Nov '21

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1444-1 Rating: moderate References: #1191690 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apparmor fixes the following issues: - Fixed an issue when apparmor provides python2 and python3 libraries with the same name. (bsc#1191690) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1444=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): apache2-mod_apparmor-2.13.4-lp152.2.6.1 apache2-mod_apparmor-debuginfo-2.13.4-lp152.2.6.1 apparmor-debugsource-2.13.4-lp152.2.6.1 apparmor-parser-2.13.4-lp152.2.6.1 apparmor-parser-debuginfo-2.13.4-lp152.2.6.1 libapparmor-debugsource-2.13.4-lp152.2.6.1 libapparmor-devel-2.13.4-lp152.2.6.1 libapparmor1-2.13.4-lp152.2.6.1 libapparmor1-debuginfo-2.13.4-lp152.2.6.1 pam_apparmor-2.13.4-lp152.2.6.1 pam_apparmor-debuginfo-2.13.4-lp152.2.6.1 perl-apparmor-2.13.4-lp152.2.6.1 perl-apparmor-debuginfo-2.13.4-lp152.2.6.1 python3-apparmor-2.13.4-lp152.2.6.1 python3-apparmor-debuginfo-2.13.4-lp152.2.6.1 ruby-apparmor-2.13.4-lp152.2.6.1 ruby-apparmor-debuginfo-2.13.4-lp152.2.6.1 - openSUSE Leap 15.2 (x86_64): libapparmor1-32bit-2.13.4-lp152.2.6.1 libapparmor1-32bit-debuginfo-2.13.4-lp152.2.6.1 pam_apparmor-32bit-2.13.4-lp152.2.6.1 pam_apparmor-32bit-debuginfo-2.13.4-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): apparmor-abstractions-2.13.4-lp152.2.6.1 apparmor-docs-2.13.4-lp152.2.6.1 apparmor-parser-lang-2.13.4-lp152.2.6.1 apparmor-profiles-2.13.4-lp152.2.6.1 apparmor-utils-2.13.4-lp152.2.6.1 apparmor-utils-lang-2.13.4-lp152.2.6.1 References: https://bugzilla.suse.com/1191690

1 0

openSUSE-SU-2021:1443-1: moderate: Security update for salt
by opensuse-security＠opensuse.org 02 Nov '21

02 Nov '21

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1443-1 Rating: moderate References: #1190265 Cross-References: CVE-2021-21996 CVSS scores: CVE-2021-21996 (SUSE): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for salt fixes the following issues: - Support querying for JSON data in external sql pillar. - Exclude the full path of a download URL to prevent injection of malicious code. (bsc#1190265, CVE-2021-21996) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1443=1 Package List: - openSUSE Leap 15.2 (x86_64): python3-salt-3002.2-lp152.3.45.1 salt-3002.2-lp152.3.45.1 salt-api-3002.2-lp152.3.45.1 salt-cloud-3002.2-lp152.3.45.1 salt-doc-3002.2-lp152.3.45.1 salt-master-3002.2-lp152.3.45.1 salt-minion-3002.2-lp152.3.45.1 salt-proxy-3002.2-lp152.3.45.1 salt-ssh-3002.2-lp152.3.45.1 salt-standalone-formulas-configuration-3002.2-lp152.3.45.1 salt-syndic-3002.2-lp152.3.45.1 salt-transactional-update-3002.2-lp152.3.45.1 - openSUSE Leap 15.2 (noarch): salt-bash-completion-3002.2-lp152.3.45.1 salt-fish-completion-3002.2-lp152.3.45.1 salt-zsh-completion-3002.2-lp152.3.45.1 References: https://www.suse.com/security/cve/CVE-2021-21996.html https://bugzilla.suse.com/1190265

1 0