December 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:1651-1: critical: Recommended update for systemd
by maintenance＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1651-1 Rating: critical References: #1193481 #1193521 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Revert "core: rework how we connect to the bus" (bsc#1193521 bsc#1193481) sleep-config: partitions can't be deleted, only files can shared/sleep-config: exclude zram devices from hibernation candidates This update was imported from the SUSE:SLE-15:Update update project. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1651=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsystemd0-234-lp152.31.40.1 libsystemd0-debuginfo-234-lp152.31.40.1 libsystemd0-mini-234-lp152.31.40.1 libsystemd0-mini-debuginfo-234-lp152.31.40.1 libudev-devel-234-lp152.31.40.1 libudev-mini-devel-234-lp152.31.40.1 libudev-mini1-234-lp152.31.40.1 libudev-mini1-debuginfo-234-lp152.31.40.1 libudev1-234-lp152.31.40.1 libudev1-debuginfo-234-lp152.31.40.1 nss-myhostname-234-lp152.31.40.1 nss-myhostname-debuginfo-234-lp152.31.40.1 nss-mymachines-234-lp152.31.40.1 nss-mymachines-debuginfo-234-lp152.31.40.1 nss-systemd-234-lp152.31.40.1 nss-systemd-debuginfo-234-lp152.31.40.1 systemd-234-lp152.31.40.1 systemd-container-234-lp152.31.40.1 systemd-container-debuginfo-234-lp152.31.40.1 systemd-coredump-234-lp152.31.40.1 systemd-coredump-debuginfo-234-lp152.31.40.1 systemd-debuginfo-234-lp152.31.40.1 systemd-debugsource-234-lp152.31.40.1 systemd-devel-234-lp152.31.40.1 systemd-journal-remote-234-lp152.31.40.1 systemd-journal-remote-debuginfo-234-lp152.31.40.1 systemd-logger-234-lp152.31.40.1 systemd-mini-234-lp152.31.40.1 systemd-mini-container-mini-234-lp152.31.40.1 systemd-mini-container-mini-debuginfo-234-lp152.31.40.1 systemd-mini-coredump-mini-234-lp152.31.40.1 systemd-mini-coredump-mini-debuginfo-234-lp152.31.40.1 systemd-mini-debuginfo-234-lp152.31.40.1 systemd-mini-debugsource-234-lp152.31.40.1 systemd-mini-devel-234-lp152.31.40.1 systemd-mini-sysvinit-234-lp152.31.40.1 systemd-network-234-lp152.31.40.1 systemd-network-debuginfo-234-lp152.31.40.1 systemd-sysvinit-234-lp152.31.40.1 udev-234-lp152.31.40.1 udev-debuginfo-234-lp152.31.40.1 udev-mini-234-lp152.31.40.1 udev-mini-debuginfo-234-lp152.31.40.1 - openSUSE Leap 15.2 (x86_64): libsystemd0-32bit-234-lp152.31.40.1 libsystemd0-32bit-debuginfo-234-lp152.31.40.1 libudev-devel-32bit-234-lp152.31.40.1 libudev1-32bit-234-lp152.31.40.1 libudev1-32bit-debuginfo-234-lp152.31.40.1 nss-myhostname-32bit-234-lp152.31.40.1 nss-myhostname-32bit-debuginfo-234-lp152.31.40.1 nss-mymachines-32bit-234-lp152.31.40.1 nss-mymachines-32bit-debuginfo-234-lp152.31.40.1 systemd-32bit-234-lp152.31.40.1 systemd-32bit-debuginfo-234-lp152.31.40.1 - openSUSE Leap 15.2 (noarch): systemd-bash-completion-234-lp152.31.40.1 systemd-mini-bash-completion-234-lp152.31.40.1 References: https://bugzilla.suse.com/1193481 https://bugzilla.suse.com/1193521

1 0

openSUSE-RU-2021:1652-1: fix for reporting error
by maintenance＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Recommended Update: fix for reporting error ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1652-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: fix for reporting error Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1652=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): gnuhealth-3.8.0-bp153.4.3.1 gnuhealth-orthanc-3.8.0-bp153.4.3.1 References:

1 0

openSUSE-RU-2021:1650-1: moderate: Recommended update for pptp
by maintenance＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Recommended Update: Recommended update for pptp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1650-1 Rating: moderate References: #1131960 #1191717 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for pptp fixes the following issues: - Fix issue when connecting to Microtic routers (bsc#1191717) - Remove UID related output from routing because not needed and prompts error (bsc#1131960) - Prevent pptpsetup creating world-readable peers file - Allow setting up passwords with quotes and trailing spaces - Fix tunnel file generation to make sure it can be used by a non-root user - Fix a memory leak in pqueue - Fix read and writes beyond allocated memory - Fix Use-After-Free in call close request handler - Allow missing window value to be specified in command line instead of being hardcoded - Randomise call-id to allow connecting with simultaneous pptp sessions - Fix file descriptor in call to ttyname. Resulting error was a common message: "pptp: GRE-to-PPP gateway on (null)" This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1650=1 Package List: - openSUSE Leap 15.2 (x86_64): pptp-1.10.0-lp152.4.3.1 pptp-debuginfo-1.10.0-lp152.4.3.1 pptp-debugsource-1.10.0-lp152.4.3.1 References: https://bugzilla.suse.com/1131960 https://bugzilla.suse.com/1191717

1 0

openSUSE-RU-2021:1649-1: moderate: Recommended update for proteus, trytond, trytond_account, trytond_account_invoice, trytond_company, trytond_product, trytond_purchase, trytond_stock
by maintenance＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Recommended Update: Recommended update for proteus, trytond, trytond_account, trytond_account_invoice, trytond_company, trytond_product, trytond_purchase, trytond_stock ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1649-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for proteus, trytond, trytond_account, trytond_account_invoice, trytond_company, trytond_product, trytond_purchase, trytond_stock fixes the following issues: Changes in proteus: - Version 5.0.10 - Bugfix Release Changes in trytond: - Version 5.0.42 - Bugfix Release Changes in trytond_account: - Version 5.0.19 - Bugfix Release Changes in trytond_stock: - Version 5.0.16 - Bugfix Release - Version 5.0.14 - Bugfix Release Changes in trytond_purchase: - Version 5.0.9 - Bugfix Release - Version 5.0.7 - Bugfix Release - Version 5.0.6 - Bugfix Release Changes in trytond_product: - Version 5.0.5 - Bugfix Release - Version 5.0.4 - Bugfix Release Changes in trytond_company: - Version 5.0.4 - Bugfix Release - Version 5.0.3 - Bugfix Release Changes in trytond_account_invoice: - Version 5.0.15 - Bugfix Release - Version 5.0.13 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1649=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): proteus-5.0.10-bp153.2.7.1 trytond-5.0.42-bp153.2.10.1 trytond_account-5.0.19-bp153.2.7.1 trytond_account_invoice-5.0.15-bp153.2.7.1 trytond_company-5.0.4-bp153.3.7.1 trytond_product-5.0.5-bp153.3.7.1 trytond_purchase-5.0.9-bp153.2.7.1 trytond_stock-5.0.16-bp153.2.7.1 References:

1 0

openSUSE-SU-2021:4209-1: important: Security update for gegl
by opensuse-security＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Security Update: Security update for gegl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4209-1 Rating: important References: #1194045 Cross-References: CVE-2021-45463 CVSS scores: CVE-2021-45463 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4209=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gegl-0.4.16-3.3.1 gegl-0_4-0.4.16-3.3.1 gegl-0_4-debuginfo-0.4.16-3.3.1 gegl-debuginfo-0.4.16-3.3.1 gegl-debugsource-0.4.16-3.3.1 gegl-devel-0.4.16-3.3.1 gegl-doc-0.4.16-3.3.1 libgegl-0_4-0-0.4.16-3.3.1 libgegl-0_4-0-debuginfo-0.4.16-3.3.1 typelib-1_0-Gegl-0_4-0.4.16-3.3.1 - openSUSE Leap 15.3 (x86_64): libgegl-0_4-0-32bit-0.4.16-3.3.1 libgegl-0_4-0-32bit-debuginfo-0.4.16-3.3.1 - openSUSE Leap 15.3 (noarch): gegl-0_4-lang-0.4.16-3.3.1 References: https://www.suse.com/security/cve/CVE-2021-45463.html https://bugzilla.suse.com/1194045

1 0

openSUSE-SU-2021:4210-1: important: Security update for gegl
by opensuse-security＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Security Update: Security update for gegl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4210-1 Rating: important References: #1194045 Cross-References: CVE-2021-45463 CVSS scores: CVE-2021-45463 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4210=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gegl-0_3-0.3.34-3.3.1 gegl-0_3-debuginfo-0.3.34-3.3.1 libgegl-0_3-0-0.3.34-3.3.1 libgegl-0_3-0-debuginfo-0.3.34-3.3.1 typelib-1_0-Gegl-0_3-0.3.34-3.3.1 - openSUSE Leap 15.3 (noarch): gegl-0_3-lang-0.3.34-3.3.1 References: https://www.suse.com/security/cve/CVE-2021-45463.html https://bugzilla.suse.com/1194045

1 0

openSUSE-SU-2021:1646-1: important: Security update for privoxy
by opensuse-security＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Security Update: Security update for privoxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1646-1 Rating: important References: #1193584 Cross-References: CVE-2021-44540 CVE-2021-44541 CVE-2021-44542 CVE-2021-44543 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for privoxy fixes the following issues: privoxy was updated to 3.0.33 (boo#1193584): * CVE-2021-44543: Encode the template name to prevent XSS (cross-side scripting) when Privoxy is configured to servce the user-manual itself * CVE-2021-44540: Free memory of compiled pattern spec before bailing * CVE-2021-44541: Free header memory when failing to get the request destination. * CVE-2021-44542: Prevent memory leaks when handling errors * Disable fast-redirects for a number of domains * Update default block lists * Many bug fixes and minor enhancements Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1646=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1646=1 Package List: - openSUSE Leap 15.2 (x86_64): privoxy-3.0.33-lp152.3.12.1 privoxy-debuginfo-3.0.33-lp152.3.12.1 privoxy-debugsource-3.0.33-lp152.3.12.1 - openSUSE Leap 15.2 (noarch): privoxy-doc-3.0.33-lp152.3.12.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): privoxy-3.0.33-bp153.2.3.1 - openSUSE Backports SLE-15-SP3 (noarch): privoxy-doc-3.0.33-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-44540.html https://www.suse.com/security/cve/CVE-2021-44541.html https://www.suse.com/security/cve/CVE-2021-44542.html https://www.suse.com/security/cve/CVE-2021-44543.html https://bugzilla.suse.com/1193584

1 0

openSUSE-RU-2021:1647-1: important: Recommended update for yast2-storage-ng
by maintenance＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Recommended Update: Recommended update for yast2-storage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1647-1 Rating: important References: #1170216 #1193450 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-storage-ng fixes the following issues: - AutoYaST: fixes for reusing encrypted devices, RAIDs and bcache devices (bsc#1193450) - Fix duplicate PV error detection with disabled multipath (bsc#1170216) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1647=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-storage-ng-4.2.121-lp152.2.18.1 References: https://bugzilla.suse.com/1170216 https://bugzilla.suse.com/1193450

1 0

openSUSE-SU-2021:1648-1: Security update for kernel-firmware
by opensuse-security＠opensuse.org 31 Dec '21

31 Dec '21

openSUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1648-1 Rating: low References: #1167162 Cross-References: CVE-2019-15126 CVSS scores: CVE-2019-15126 (NVD) : 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2019-15126 (SUSE): 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kernel-firmware fixes the following issues: - CVE-2019-15126: Updated Broadcom firmware to fix Kr00k bug (bsc#1167162). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1648=1 Package List: - openSUSE Leap 15.2 (noarch): kernel-firmware-20200107-lp152.2.9.1 ucode-amd-20200107-lp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-15126.html https://bugzilla.suse.com/1167162

1 0

openSUSE-RU-2021:1643-1: moderate: Recommended update for pam
by maintenance＠opensuse.org 30 Dec '21

30 Dec '21

openSUSE Recommended Update: Recommended update for pam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1643-1 Rating: moderate References: #1181443 #1184358 #1185562 Affected Products: openSUSE Leap 15.3 openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for pam fixes the following issues: - Fixed a bug, where the 'unlimited'/'-1' value was not interpreted correctly (bsc#1181443) - Fixed a bug, where pam_access interpreted the keyword 'LOCAL' incorrectly, leading to an attempt to resolve it as a hostname (bsc#1184358) - In the 32-bit compatibility package for 64-bit architectures, require "systemd-32bit" to be also installed as it contains pam_systemd.so for 32 bit applications. (bsc#1185562) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-1643=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1643=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): pam-1.3.0-6.38.1 pam-debuginfo-1.3.0-6.38.1 pam-debugsource-1.3.0-6.38.1 pam-devel-1.3.0-6.38.1 pam-extra-1.3.0-6.38.1 pam-extra-debuginfo-1.3.0-6.38.1 - openSUSE Leap 15.3 (x86_64): pam-32bit-1.3.0-6.38.1 pam-32bit-debuginfo-1.3.0-6.38.1 pam-devel-32bit-1.3.0-6.38.1 pam-extra-32bit-1.3.0-6.38.1 pam-extra-32bit-debuginfo-1.3.0-6.38.1 - openSUSE Leap 15.3 (noarch): pam-doc-1.3.0-6.38.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): parti-2.2-bp153.2.3.1 References: https://bugzilla.suse.com/1181443 https://bugzilla.suse.com/1184358 https://bugzilla.suse.com/1185562

1 0