December 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:4189-1: moderate: Recommended update for scap-security-guide
by maintenance＠opensuse.org 24 Dec '21

24 Dec '21

openSUSE Recommended Update: Recommended update for scap-security-guide ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4189-1 Rating: moderate References: ECO-3319 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for scap-security-guide fixes the following issues: - updated to 0.1.59 release (jsc#ECO-3319) - Support for Debian 11 - NERC CIP profiles for OCP4 and RHCOS - HIPAA profile for SLE15 - Delta Tailoring Files for STIG profiles Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4189=1 Package List: - openSUSE Leap 15.3 (noarch): scap-security-guide-0.1.59-1.24.3 scap-security-guide-debian-0.1.59-1.24.3 scap-security-guide-redhat-0.1.59-1.24.3 scap-security-guide-ubuntu-0.1.59-1.24.3 References:

1 0

openSUSE-RU-2021:1609-1: important: Recommended update for xdg-desktop-portal-gtk
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for xdg-desktop-portal-gtk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1609-1 Rating: important References: #1179465 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xdg-desktop-portal-gtk fixes the following issues: - Fix xdg-desktop-portal-gtk process hanging the logout. Make the process exit after one second unless it has active sessions (bsc#1179465) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1609=1 Package List: - openSUSE Leap 15.2 (x86_64): xdg-desktop-portal-gtk-1.8.0-lp152.2.6.1 xdg-desktop-portal-gtk-debuginfo-1.8.0-lp152.2.6.1 xdg-desktop-portal-gtk-debugsource-1.8.0-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): xdg-desktop-portal-gtk-lang-1.8.0-lp152.2.6.1 References: https://bugzilla.suse.com/1179465

1 0

openSUSE-RU-2021:1610-1: important: Recommended update for dracut
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1610-1 Rating: important References: #1193512 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dracut fixes the following issues: - Add iscsi-init.service requirements (bsc#1193512) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1610=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-049.1+suse.218.gca24e614-lp152.2.39.1 dracut-debuginfo-049.1+suse.218.gca24e614-lp152.2.39.1 dracut-debugsource-049.1+suse.218.gca24e614-lp152.2.39.1 dracut-extra-049.1+suse.218.gca24e614-lp152.2.39.1 dracut-fips-049.1+suse.218.gca24e614-lp152.2.39.1 dracut-ima-049.1+suse.218.gca24e614-lp152.2.39.1 dracut-tools-049.1+suse.218.gca24e614-lp152.2.39.1 References: https://bugzilla.suse.com/1193512

1 0

openSUSE-SU-2021:1611-1: important: Security update for p11-kit
by opensuse-security＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Security Update: Security update for p11-kit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1611-1 Rating: important References: #1180064 #1187993 Cross-References: CVE-2020-29361 CVSS scores: CVE-2020-29361 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-29361 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for p11-kit fixes the following issues: - CVE-2020-29361: Fixed multiple integer overflows in rpc code (bsc#1180064) - Add support for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER (bsc#1187993). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1611=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libp11-kit0-0.23.2-lp152.7.3.1 libp11-kit0-debuginfo-0.23.2-lp152.7.3.1 p11-kit-0.23.2-lp152.7.3.1 p11-kit-debuginfo-0.23.2-lp152.7.3.1 p11-kit-debugsource-0.23.2-lp152.7.3.1 p11-kit-devel-0.23.2-lp152.7.3.1 p11-kit-nss-trust-0.23.2-lp152.7.3.1 p11-kit-tools-0.23.2-lp152.7.3.1 p11-kit-tools-debuginfo-0.23.2-lp152.7.3.1 - openSUSE Leap 15.2 (x86_64): libp11-kit0-32bit-0.23.2-lp152.7.3.1 libp11-kit0-32bit-debuginfo-0.23.2-lp152.7.3.1 p11-kit-32bit-0.23.2-lp152.7.3.1 p11-kit-32bit-debuginfo-0.23.2-lp152.7.3.1 p11-kit-nss-trust-32bit-0.23.2-lp152.7.3.1 References: https://www.suse.com/security/cve/CVE-2020-29361.html https://bugzilla.suse.com/1180064 https://bugzilla.suse.com/1187993

1 0

openSUSE-SU-2021:4170-1: moderate: Security update for libaom
by opensuse-security＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Security Update: Security update for libaom ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4170-1 Rating: moderate References: #1193356 #1193365 #1193366 #1193369 Cross-References: CVE-2020-36129 CVE-2020-36130 CVE-2020-36131 CVE-2020-36135 CVSS scores: CVE-2020-36129 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36130 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36131 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36135 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for libaom fixes the following issues: - CVE-2020-36129: Fixed stack buffer overflow via the component src/aom_image.c (bsc#1193356). - CVE-2020-36131: Fixed stack buffer overflow via the component stats/rate_hist.c (bsc#1193365). - CVE-2020-36135: Fixed NULL pointer dereference via the component rate_hist.c (bsc#1193366). - CVE-2020-36130: Fixed NULL pointer dereference via the component av1/av1_dx_iface.c (bsc#1193369). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4170=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): aom-tools-1.0.0-3.9.1 aom-tools-debuginfo-1.0.0-3.9.1 libaom-debugsource-1.0.0-3.9.1 libaom-devel-1.0.0-3.9.1 libaom0-1.0.0-3.9.1 libaom0-debuginfo-1.0.0-3.9.1 - openSUSE Leap 15.3 (noarch): libaom-devel-doc-1.0.0-3.9.1 - openSUSE Leap 15.3 (x86_64): libaom0-32bit-1.0.0-3.9.1 libaom0-32bit-debuginfo-1.0.0-3.9.1 References: https://www.suse.com/security/cve/CVE-2020-36129.html https://www.suse.com/security/cve/CVE-2020-36130.html https://www.suse.com/security/cve/CVE-2020-36131.html https://www.suse.com/security/cve/CVE-2020-36135.html https://bugzilla.suse.com/1193356 https://bugzilla.suse.com/1193365 https://bugzilla.suse.com/1193366 https://bugzilla.suse.com/1193369

1 0

openSUSE-FU-2021:4184-1: moderate: Feature update for tboot
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Feature Update: Feature update for tboot ______________________________________________________________________________ Announcement ID: openSUSE-FU-2021:4184-1 Rating: moderate References: SLE-19516 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 feature fixes and contains one feature can now be installed. Description: This feature update for tboot fixes the following issues: Update to upstream version 1.10.2 of tboot to sync with SLE-15-SP4 status (jsc#SLE-19516) - `acminfo` and `parse_err` now are called `txt-acminfo` and `txt-parse_err` - lcptools are deprecated (tpm 1.2, TrouSerS dependency) and are no longer packaged - tpmnv_* binaries are deprecated and no longer packaged - lcptools-v2: implement SM2 signing and SM2 signature verification and add pconf2 policy element support - Add SHA256, SHA384 and SHA512 support in `tb_polgen` - Add Doxygen documentation - Add SHA384 and SHA512 digest algorithms - Add support for 64bit framebuffer address - Add warning when using SHA1 as hashing algorithm - Default to D/A mapping instead of legacy when TPM1.2 and CBnT platform - Enable VGA logging for EFI platforms - Ensure `txt-acminfo` does not print false information if msr module is not loaded - Fix ACM chipset/processor list validation - Fix a harmless overflow caused by wrong loop limits - Fix issue with TPM1.2 - invalid default policy - Fix issue with multiboot(1) booting - infinite loop during boot - Fix warnings after "Avoid unsafe functions" scan - Print latest tag in logs - README is now README.md - Replace VMAC with Poly1305 - Strip executable file before generating tboot.gz - Update GRUB scripts to use multiboot2 only - Use SHA256 as default hashing algorithm - Validate TPM NV index attributes Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4184=1 Package List: - openSUSE Leap 15.3 (x86_64): tboot-20170711_1.10.2-15.12.1 tboot-debuginfo-20170711_1.10.2-15.12.1 tboot-debugsource-20170711_1.10.2-15.12.1 References:

1 0

openSUSE-SU-2021:4169-1: moderate: Security update for go1.16
by opensuse-security＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Security Update: Security update for go1.16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4169-1 Rating: moderate References: #1182345 #1193597 #1193598 Cross-References: CVE-2021-44716 CVE-2021-44717 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for go1.16 fixes the following issues: Updated to upstream version 1.16.12 to include security fixes to the compiler, syscall, runtime, the net/http, net/http/httptest, and time packages (bsc#1182345) - CVE-2021-44717: syscall: don't close fd 0 on ForkExec error (bsc#1193598). - CVE-2021-44716: net/http: limit growth of header canonicalization cache (bsc#1193597). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4169=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): go1.16-1.16.12-1.37.2 go1.16-doc-1.16.12-1.37.2 - openSUSE Leap 15.3 (aarch64 x86_64): go1.16-race-1.16.12-1.37.2 References: https://www.suse.com/security/cve/CVE-2021-44716.html https://www.suse.com/security/cve/CVE-2021-44717.html https://bugzilla.suse.com/1182345 https://bugzilla.suse.com/1193597 https://bugzilla.suse.com/1193598

1 0

openSUSE-RU-2021:4174-1: moderate: Recommended update for gnu-compilers-hpc
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for gnu-compilers-hpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4174-1 Rating: moderate References: SLE-18780 SLE-18781 SLE-18782 SLE-18806 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains four features can now be installed. Description: This update for gnu-compilers-hpc fixes the following issues: - Add build support for gcc11 to HPC build. (jsc#SLE-18780, jsc#SLE-18781, jsc#SLE-18782, jsc#SLE-18806) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4174=1 Package List: - openSUSE Leap 15.3 (noarch): gnu-compilers-hpc-1.4-3.14.3 gnu-compilers-hpc-devel-1.4-3.14.3 gnu-compilers-hpc-macros-devel-1.4-3.14.3 gnu10-compilers-hpc-1.4-3.14.3 gnu10-compilers-hpc-devel-1.4-3.14.3 gnu10-compilers-hpc-macros-devel-1.4-3.14.3 gnu11-compilers-hpc-1.4-3.14.2 gnu11-compilers-hpc-devel-1.4-3.14.2 gnu11-compilers-hpc-macros-devel-1.4-3.14.2 gnu8-compilers-hpc-1.4-3.14.3 gnu8-compilers-hpc-devel-1.4-3.14.3 gnu8-compilers-hpc-macros-devel-1.4-3.14.3 gnu9-compilers-hpc-1.4-3.14.3 gnu9-compilers-hpc-devel-1.4-3.14.3 gnu9-compilers-hpc-macros-devel-1.4-3.14.3 References:

1 0

openSUSE-RU-2021:4177-1: important: Recommended update for ServiceReport
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for ServiceReport ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4177-1 Rating: important References: #1193718 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ServiceReport fixes the following issues: - Fix build to require python-rpm-macros (bsc#1193718) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4177=1 Package List: - openSUSE Leap 15.3 (noarch): ServiceReport-2.2.3+git1.55a13db1c256-3.6.1 References: https://bugzilla.suse.com/1193718

1 0

openSUSE-RU-2021:4179-1: moderate: Recommended update for corosync
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for corosync ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4179-1 Rating: moderate References: #1192467 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for corosync fixes the following issues: - Fix corosync not recognizing isolated nodes when interface is down (bsc#1192467) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4179=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): corosync-2.4.5-12.7.1 corosync-debuginfo-2.4.5-12.7.1 corosync-debugsource-2.4.5-12.7.1 corosync-qdevice-2.4.5-12.7.1 corosync-qdevice-debuginfo-2.4.5-12.7.1 corosync-qnetd-2.4.5-12.7.1 corosync-qnetd-debuginfo-2.4.5-12.7.1 corosync-testagents-2.4.5-12.7.1 corosync-testagents-debuginfo-2.4.5-12.7.1 libcfg6-2.4.5-12.7.1 libcfg6-debuginfo-2.4.5-12.7.1 libcmap4-2.4.5-12.7.1 libcmap4-debuginfo-2.4.5-12.7.1 libcorosync-devel-2.4.5-12.7.1 libcorosync_common4-2.4.5-12.7.1 libcorosync_common4-debuginfo-2.4.5-12.7.1 libcpg4-2.4.5-12.7.1 libcpg4-debuginfo-2.4.5-12.7.1 libquorum5-2.4.5-12.7.1 libquorum5-debuginfo-2.4.5-12.7.1 libsam4-2.4.5-12.7.1 libsam4-debuginfo-2.4.5-12.7.1 libtotem_pg5-2.4.5-12.7.1 libtotem_pg5-debuginfo-2.4.5-12.7.1 libvotequorum8-2.4.5-12.7.1 libvotequorum8-debuginfo-2.4.5-12.7.1 - openSUSE Leap 15.3 (x86_64): libcfg6-32bit-2.4.5-12.7.1 libcfg6-32bit-debuginfo-2.4.5-12.7.1 libcmap4-32bit-2.4.5-12.7.1 libcmap4-32bit-debuginfo-2.4.5-12.7.1 libcorosync_common4-32bit-2.4.5-12.7.1 libcorosync_common4-32bit-debuginfo-2.4.5-12.7.1 libcpg4-32bit-2.4.5-12.7.1 libcpg4-32bit-debuginfo-2.4.5-12.7.1 libquorum5-32bit-2.4.5-12.7.1 libquorum5-32bit-debuginfo-2.4.5-12.7.1 libsam4-32bit-2.4.5-12.7.1 libsam4-32bit-debuginfo-2.4.5-12.7.1 libtotem_pg5-32bit-2.4.5-12.7.1 libtotem_pg5-32bit-debuginfo-2.4.5-12.7.1 libvotequorum8-32bit-2.4.5-12.7.1 libvotequorum8-32bit-debuginfo-2.4.5-12.7.1 References: https://bugzilla.suse.com/1192467

1 0