December 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:1631-1: important: Security update for kafka
by opensuse-security＠opensuse.org 28 Dec '21

28 Dec '21

openSUSE Security Update: Security update for kafka ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1631-1 Rating: important References: #1193662 Cross-References: CVE-2021-4104 CVSS scores: CVE-2021-4104 (SUSE): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This security update of kafka fixes the following issue: - CVE-2021-4104: Remove JMSAppender from log4j jars during build to prevent bsc#1193662, Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-1631=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): kafka-source-2.1.0-bp153.2.3.1 - openSUSE Backports SLE-15-SP3 (x86_64): kafka-kit-2.1.0-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-4104.html https://bugzilla.suse.com/1193662

1 0

openSUSE-RU-2021:1630-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 27 Dec '21

27 Dec '21

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1630-1 Rating: moderate References: #1178118 #1181906 #1183359 #1183654 #1183689 #1183883 #1185437 ECO-3319 ECO-3567 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 7 recommended fixes and contains two features can now be installed. Description: This update for crmsh fixes the following issues: - Update to version 4.3.0: * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906) * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437) * Dev: bootstrap: disable unnecessary warnings (bsc#1178118) * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359) * Dev: add "crm corosync status qdevice" sub-command * Dev: ui_cluster: add qdevice help info * Fix for bootstrap: parse space in sbd device correctly. (bsc#1183883) * Fix for bootstrap: get the peer node name correctly. (bsc#1183654) * Update version and author. (bsc#1183689) * Dev: bootstrap: enable configuring qdevice on interactive mode. (jsc#ECO-3567) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-1630=1 - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1630=1 Package List: - openSUSE Leap 15.3 (noarch): crmsh-4.3.0+20210507.bf02d791-5.50.1 crmsh-scripts-4.3.0+20210507.bf02d791-5.50.1 crmsh-test-4.3.0+20210507.bf02d791-5.50.1 - openSUSE Leap 15.2 (noarch): scap-security-guide-0.1.59-lp152.20.1 scap-security-guide-debian-0.1.59-lp152.20.1 scap-security-guide-redhat-0.1.59-lp152.20.1 scap-security-guide-ubuntu-0.1.59-lp152.20.1 References: https://bugzilla.suse.com/1178118 https://bugzilla.suse.com/1181906 https://bugzilla.suse.com/1183359 https://bugzilla.suse.com/1183654 https://bugzilla.suse.com/1183689 https://bugzilla.suse.com/1183883 https://bugzilla.suse.com/1185437

1 0

openSUSE-FU-2021:1627-1: moderate: Feature update for tboot
by maintenance＠opensuse.org 26 Dec '21

26 Dec '21

openSUSE Feature Update: Feature update for tboot ______________________________________________________________________________ Announcement ID: openSUSE-FU-2021:1627-1 Rating: moderate References: SLE-19516 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 feature fixes and contains one feature can now be installed. Description: This feature update for tboot fixes the following issues: Update to upstream version 1.10.2 of tboot to sync with SLE-15-SP4 status (jsc#SLE-19516) - `acminfo` and `parse_err` now are called `txt-acminfo` and `txt-parse_err` - lcptools are deprecated (tpm 1.2, TrouSerS dependency) and are no longer packaged - tpmnv_* binaries are deprecated and no longer packaged - lcptools-v2: implement SM2 signing and SM2 signature verification and add pconf2 policy element support - Add SHA256, SHA384 and SHA512 support in `tb_polgen` - Add Doxygen documentation - Add SHA384 and SHA512 digest algorithms - Add support for 64bit framebuffer address - Add warning when using SHA1 as hashing algorithm - Default to D/A mapping instead of legacy when TPM1.2 and CBnT platform - Enable VGA logging for EFI platforms - Ensure `txt-acminfo` does not print false information if msr module is not loaded - Fix ACM chipset/processor list validation - Fix a harmless overflow caused by wrong loop limits - Fix issue with TPM1.2 - invalid default policy - Fix issue with multiboot(1) booting - infinite loop during boot - Fix warnings after "Avoid unsafe functions" scan - Print latest tag in logs - README is now README.md - Replace VMAC with Poly1305 - Strip executable file before generating tboot.gz - Update GRUB scripts to use multiboot2 only - Use SHA256 as default hashing algorithm - Validate TPM NV index attributes This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1627=1 Package List: - openSUSE Leap 15.2 (x86_64): tboot-20170711_1.10.2-lp152.5.12.1 tboot-debuginfo-20170711_1.10.2-lp152.5.12.1 tboot-debugsource-20170711_1.10.2-lp152.5.12.1 References:

1 0

openSUSE-RU-2021:1629-1: moderate: Recommended update for cpuset
by maintenance＠opensuse.org 26 Dec '21

26 Dec '21

openSUSE Recommended Update: Recommended update for cpuset ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1629-1 Rating: moderate References: #1191418 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cpuset fixes the following issues: - Fix wrong parentheses in the code that lead to an unsupported operand error (bsc#1191418) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1629=1 Package List: - openSUSE Leap 15.2 (noarch): cpuset-1.6-lp152.3.3.1 References: https://bugzilla.suse.com/1191418

1 0

openSUSE-RU-2021:1628-1: moderate: Recommended update for zlib
by maintenance＠opensuse.org 26 Dec '21

26 Dec '21

openSUSE Recommended Update: Recommended update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1628-1 Rating: moderate References: #1192688 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for zlib fixes the following issues: - Fix hardware compression incorrect result on z15 hardware (bsc#1192688) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1628=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libminizip1-1.2.11-lp152.8.12.1 libminizip1-debuginfo-1.2.11-lp152.8.12.1 libz1-1.2.11-lp152.8.12.1 libz1-debuginfo-1.2.11-lp152.8.12.1 minizip-devel-1.2.11-lp152.8.12.1 zlib-debugsource-1.2.11-lp152.8.12.1 zlib-devel-1.2.11-lp152.8.12.1 zlib-devel-static-1.2.11-lp152.8.12.1 - openSUSE Leap 15.2 (x86_64): libminizip1-32bit-1.2.11-lp152.8.12.1 libminizip1-32bit-debuginfo-1.2.11-lp152.8.12.1 libz1-32bit-1.2.11-lp152.8.12.1 libz1-32bit-debuginfo-1.2.11-lp152.8.12.1 zlib-devel-32bit-1.2.11-lp152.8.12.1 zlib-devel-static-32bit-1.2.11-lp152.8.12.1 References: https://bugzilla.suse.com/1192688

1 0

openSUSE-RU-2021:1621-1: moderate: Recommended update for rmt-server
by maintenance＠opensuse.org 26 Dec '21

26 Dec '21

openSUSE Recommended Update: Recommended update for rmt-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1621-1 Rating: moderate References: #1176628 #1180018 #1184814 #1186798 #1188043 #1189805 #951189 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for rmt-server fixes the following issues: - Update to Version 2.7.0 - Allow to validate all versions when they are of the same product and arch. - De-register BYOS systems using RMT as a proxy from SCC. - De-activate a single product from a BYOS proxy system. - Add the handling of the BYOS systems that use RMT as a SCC proxy. - Add subscription support in RMT. RMT can now consume registration codes supplied when registering a system. - Add host's login header to API requests to SCC. If the information is available, RMT will send it on requests to attach the registration proxy to a host system in SCC. - Add extra check to product dependency on RMT API. Now, when a system tries to activate a module through RMT, if it requires a root product which is not activated, the activation will fail (bsc#951189). - Load global configuration only if it can be ready by the current process. - Fix: Don't append slash to custom repository urls . - Add enabled attribute to syncing process to fix wrong marked repositories when syncing. (bsc#1184814) - Enable 'Installer-Updates' repositories when enabling a product, so they can get used by the installer to patch the installation system itself. (bsc#1184814) - Do not raise an exception when mirroring. (bsc#1180018) - Handle special characters in package names (bsc#1189805) - Set 'cloud_povider' info when registering the instance. - Fix for Rails 6.1 Zeitwerk autoloading errors. (bsc#1186798) - Add release_stage to all api endpoints to allow external programm determine product stage. (bsc#1176628) - Fix broken links (bsc#1188043) - Additional debug output for mirroring subcommand with '--debug' flag. - Update translations. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1621=1 Package List: - openSUSE Leap 15.2 (x86_64): rmt-server-2.7.0-lp152.2.9.1 rmt-server-config-2.7.0-lp152.2.9.1 rmt-server-debuginfo-2.7.0-lp152.2.9.1 rmt-server-debugsource-2.7.0-lp152.2.9.1 rmt-server-pubcloud-2.7.0-lp152.2.9.1 References: https://bugzilla.suse.com/1176628 https://bugzilla.suse.com/1180018 https://bugzilla.suse.com/1184814 https://bugzilla.suse.com/1186798 https://bugzilla.suse.com/1188043 https://bugzilla.suse.com/1189805 https://bugzilla.suse.com/951189

1 0

openSUSE-RU-2021:1623-1: moderate: Recommended update for openSUSE-build-key
by maintenance＠opensuse.org 26 Dec '21

26 Dec '21

openSUSE Recommended Update: Recommended update for openSUSE-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1623-1 Rating: moderate References: #1193092 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openSUSE-build-key fixes the following issues: - refresh the openSUSE Backports key (boo#1193092) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2021-1623=1 Package List: - openSUSE Leap 15.3 (noarch): openSUSE-build-key-1.0-lp153.4.5.1 References: https://bugzilla.suse.com/1193092

1 0

openSUSE-RU-2021:1622-1: moderate: Recommended update for yast2-python-bindings
by maintenance＠opensuse.org 26 Dec '21

26 Dec '21

openSUSE Recommended Update: Recommended update for yast2-python-bindings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1622-1 Rating: moderate References: #1181595 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-python-bindings fixes the following issues: - Fix backtrace formatting for Python exceptions (bsc#1181595). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1622=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-python-bindings-4.2.0-lp152.2.3.1 yast2-python-bindings-debuginfo-4.2.0-lp152.2.3.1 yast2-python-bindings-debugsource-4.2.0-lp152.2.3.1 yast2-python3-bindings-4.2.0-lp152.2.3.1 yast2-python3-bindings-debuginfo-4.2.0-lp152.2.3.1 References: https://bugzilla.suse.com/1181595

1 0

openSUSE-SU-2021:1625-1: moderate: Security update for runc
by opensuse-security＠opensuse.org 26 Dec '21

26 Dec '21

openSUSE Security Update: Security update for runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1625-1 Rating: moderate References: #1193436 Cross-References: CVE-2021-43784 CVSS scores: CVE-2021-43784 (NVD) : 6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for runc fixes the following issues: Update to runc v1.0.3. * CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc (bsc#1193436) * Fixed inability to start a container with read-write bind mount of a read-only fuse host mount. * Fixed inability to start when read-only /dev in set in spec. * Fixed not removing sub-cgroups upon container delete, when rootless cgroup v2 is used with older systemd. * Fixed returning error from GetStats when hugetlb is unsupported (which causes excessive logging for kubernetes). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1625=1 Package List: - openSUSE Leap 15.2 (x86_64): runc-1.0.3-lp152.2.12.1 runc-debuginfo-1.0.3-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2021-43784.html https://bugzilla.suse.com/1193436

1 0

openSUSE-SU-2021:1626-1: moderate: Security update for go1.16
by opensuse-security＠opensuse.org 26 Dec '21

26 Dec '21

openSUSE Security Update: Security update for go1.16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1626-1 Rating: moderate References: #1182345 #1193597 #1193598 Cross-References: CVE-2021-44716 CVE-2021-44717 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for go1.16 fixes the following issues: Updated to upstream version 1.16.12 to include security fixes to the compiler, syscall, runtime, the net/http, net/http/httptest, and time packages (bsc#1182345) - CVE-2021-44717: syscall: don't close fd 0 on ForkExec error (bsc#1193598). - CVE-2021-44716: net/http: limit growth of header canonicalization cache (bsc#1193597). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1626=1 Package List: - openSUSE Leap 15.2 (x86_64): go1.16-1.16.12-lp152.20.1 go1.16-doc-1.16.12-lp152.20.1 go1.16-race-1.16.12-lp152.20.1 References: https://www.suse.com/security/cve/CVE-2021-44716.html https://www.suse.com/security/cve/CVE-2021-44717.html https://bugzilla.suse.com/1182345 https://bugzilla.suse.com/1193597 https://bugzilla.suse.com/1193598

1 0