December 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:4167-1: moderate: Recommended update for openscap
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for openscap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4167-1 Rating: moderate References: #1179314 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openscap fixes the following issues: - add SLES support to oscap-docker (bsc#1179314) Note that the oscap-docker currently requires python3-docker from PackageHub. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4167=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenscap25-1.3.5-3.10.1 libopenscap25-debuginfo-1.3.5-3.10.1 libopenscap_sce25-1.3.5-3.10.1 libopenscap_sce25-debuginfo-1.3.5-3.10.1 openscap-1.3.5-3.10.1 openscap-content-1.3.5-3.10.1 openscap-debuginfo-1.3.5-3.10.1 openscap-debugsource-1.3.5-3.10.1 openscap-devel-1.3.5-3.10.1 openscap-docker-1.3.5-3.10.1 openscap-utils-1.3.5-3.10.1 openscap-utils-debuginfo-1.3.5-3.10.1 References: https://bugzilla.suse.com/1179314

1 0

openSUSE-SU-2021:4186-1: moderate: Security update for go1.17
by opensuse-security＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Security Update: Security update for go1.17 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4186-1 Rating: moderate References: #1190649 #1193597 #1193598 Cross-References: CVE-2021-44716 CVE-2021-44717 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for go1.17 fixes the following issues: Updated to upstream version 1.17.5 to include fixes to the compiler, linker, syscall, runtime, the net/http, go/types, and time packages (bsc#1190649) - CVE-2021-44717: syscall: don't close fd 0 on ForkExec error (bsc#1193598). - CVE-2021-44716: net/http: limit growth of header canonicalization cache (bsc#1193597). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4186=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): go1.17-1.17.5-1.14.2 go1.17-doc-1.17.5-1.14.2 - openSUSE Leap 15.3 (aarch64 x86_64): go1.17-race-1.17.5-1.14.2 References: https://www.suse.com/security/cve/CVE-2021-44716.html https://www.suse.com/security/cve/CVE-2021-44717.html https://bugzilla.suse.com/1190649 https://bugzilla.suse.com/1193597 https://bugzilla.suse.com/1193598

1 0

openSUSE-RU-2021:4173-1: important: Recommended update for samba
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4173-1 Rating: important References: #1192849 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for samba fixes the following issues: The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails (bsc#1192849). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4173=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libndr0-4.11.14+git.313.d4e302805e1-4.32.1 libndr0-debuginfo-4.11.14+git.313.d4e302805e1-4.32.1 - openSUSE Leap 15.3 (x86_64): libndr0-32bit-4.11.14+git.313.d4e302805e1-4.32.1 libndr0-32bit-debuginfo-4.11.14+git.313.d4e302805e1-4.32.1 References: https://www.suse.com/security/cve/CVE-2020-25717.html https://bugzilla.suse.com/1192849

1 0

openSUSE-RU-2021:4175-1: important: Recommended update for systemd
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4175-1 Rating: important References: #1192423 #1192858 #1193759 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Bump the max number of inodes for /dev to a million (bsc#1192858) - sleep: don't skip resume device with low priority/available space (bsc#1192423) - test: use kbd-mode-map we ship in one more test case - test-keymap-util: always use kbd-model-map we ship - Add rules for virtual devices and enforce "none" for loop devices. (bsc#1193759) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4175=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-7.28.1 libsystemd0-debuginfo-246.16-7.28.1 libudev-devel-246.16-7.28.1 libudev1-246.16-7.28.1 libudev1-debuginfo-246.16-7.28.1 nss-myhostname-246.16-7.28.1 nss-myhostname-debuginfo-246.16-7.28.1 nss-mymachines-246.16-7.28.1 nss-mymachines-debuginfo-246.16-7.28.1 nss-resolve-246.16-7.28.1 nss-resolve-debuginfo-246.16-7.28.1 nss-systemd-246.16-7.28.1 nss-systemd-debuginfo-246.16-7.28.1 systemd-246.16-7.28.1 systemd-container-246.16-7.28.1 systemd-container-debuginfo-246.16-7.28.1 systemd-coredump-246.16-7.28.1 systemd-coredump-debuginfo-246.16-7.28.1 systemd-debuginfo-246.16-7.28.1 systemd-debugsource-246.16-7.28.1 systemd-devel-246.16-7.28.1 systemd-doc-246.16-7.28.1 systemd-journal-remote-246.16-7.28.1 systemd-journal-remote-debuginfo-246.16-7.28.1 systemd-logger-246.16-7.28.1 systemd-network-246.16-7.28.1 systemd-network-debuginfo-246.16-7.28.1 systemd-sysvinit-246.16-7.28.1 udev-246.16-7.28.1 udev-debuginfo-246.16-7.28.1 - openSUSE Leap 15.3 (noarch): systemd-lang-246.16-7.28.1 - openSUSE Leap 15.3 (x86_64): libsystemd0-32bit-246.16-7.28.1 libsystemd0-32bit-debuginfo-246.16-7.28.1 libudev-devel-32bit-246.16-7.28.1 libudev1-32bit-246.16-7.28.1 libudev1-32bit-debuginfo-246.16-7.28.1 nss-myhostname-32bit-246.16-7.28.1 nss-myhostname-32bit-debuginfo-246.16-7.28.1 nss-mymachines-32bit-246.16-7.28.1 nss-mymachines-32bit-debuginfo-246.16-7.28.1 systemd-32bit-246.16-7.28.1 systemd-32bit-debuginfo-246.16-7.28.1 References: https://bugzilla.suse.com/1192423 https://bugzilla.suse.com/1192858 https://bugzilla.suse.com/1193759

1 0

openSUSE-RU-2021:1608-1: moderate: Recommended update for corosync
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for corosync ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1608-1 Rating: moderate References: #1192467 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for corosync fixes the following issues: - Fix corosync not recognizing isolated nodes when interface is down (bsc#1192467) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1608=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): corosync-2.4.5-lp152.5.9.1 corosync-debuginfo-2.4.5-lp152.5.9.1 corosync-debugsource-2.4.5-lp152.5.9.1 corosync-qdevice-2.4.5-lp152.5.9.1 corosync-qdevice-debuginfo-2.4.5-lp152.5.9.1 corosync-qnetd-2.4.5-lp152.5.9.1 corosync-qnetd-debuginfo-2.4.5-lp152.5.9.1 corosync-testagents-2.4.5-lp152.5.9.1 corosync-testagents-debuginfo-2.4.5-lp152.5.9.1 libcfg6-2.4.5-lp152.5.9.1 libcfg6-debuginfo-2.4.5-lp152.5.9.1 libcmap4-2.4.5-lp152.5.9.1 libcmap4-debuginfo-2.4.5-lp152.5.9.1 libcorosync-devel-2.4.5-lp152.5.9.1 libcorosync_common4-2.4.5-lp152.5.9.1 libcorosync_common4-debuginfo-2.4.5-lp152.5.9.1 libcpg4-2.4.5-lp152.5.9.1 libcpg4-debuginfo-2.4.5-lp152.5.9.1 libquorum5-2.4.5-lp152.5.9.1 libquorum5-debuginfo-2.4.5-lp152.5.9.1 libsam4-2.4.5-lp152.5.9.1 libsam4-debuginfo-2.4.5-lp152.5.9.1 libtotem_pg5-2.4.5-lp152.5.9.1 libtotem_pg5-debuginfo-2.4.5-lp152.5.9.1 libvotequorum8-2.4.5-lp152.5.9.1 libvotequorum8-debuginfo-2.4.5-lp152.5.9.1 - openSUSE Leap 15.2 (x86_64): libcfg6-32bit-2.4.5-lp152.5.9.1 libcfg6-32bit-debuginfo-2.4.5-lp152.5.9.1 libcmap4-32bit-2.4.5-lp152.5.9.1 libcmap4-32bit-debuginfo-2.4.5-lp152.5.9.1 libcorosync_common4-32bit-2.4.5-lp152.5.9.1 libcorosync_common4-32bit-debuginfo-2.4.5-lp152.5.9.1 libcpg4-32bit-2.4.5-lp152.5.9.1 libcpg4-32bit-debuginfo-2.4.5-lp152.5.9.1 libquorum5-32bit-2.4.5-lp152.5.9.1 libquorum5-32bit-debuginfo-2.4.5-lp152.5.9.1 libsam4-32bit-2.4.5-lp152.5.9.1 libsam4-32bit-debuginfo-2.4.5-lp152.5.9.1 libtotem_pg5-32bit-2.4.5-lp152.5.9.1 libtotem_pg5-32bit-debuginfo-2.4.5-lp152.5.9.1 libvotequorum8-32bit-2.4.5-lp152.5.9.1 libvotequorum8-32bit-debuginfo-2.4.5-lp152.5.9.1 References: https://bugzilla.suse.com/1192467

1 0

openSUSE-RU-2021:4182-1: moderate: Recommended update for zlib
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4182-1 Rating: moderate References: #1192688 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for zlib fixes the following issues: - Fix hardware compression incorrect result on z15 hardware (bsc#1192688) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4182=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libminizip1-1.2.11-3.24.1 libminizip1-debuginfo-1.2.11-3.24.1 libz1-1.2.11-3.24.1 libz1-debuginfo-1.2.11-3.24.1 minizip-devel-1.2.11-3.24.1 zlib-debugsource-1.2.11-3.24.1 zlib-devel-1.2.11-3.24.1 zlib-devel-static-1.2.11-3.24.1 - openSUSE Leap 15.3 (x86_64): libminizip1-32bit-1.2.11-3.24.1 libminizip1-32bit-debuginfo-1.2.11-3.24.1 libz1-32bit-1.2.11-3.24.1 libz1-32bit-debuginfo-1.2.11-3.24.1 zlib-devel-32bit-1.2.11-3.24.1 zlib-devel-static-32bit-1.2.11-3.24.1 References: https://bugzilla.suse.com/1192688

1 0

openSUSE-RU-2021:4183-1: moderate: Recommended update for cpuset
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for cpuset ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4183-1 Rating: moderate References: #1191418 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cpuset fixes the following issues: - Fix wrong parentheses in the code that lead to an unsupported operand error (bsc#1191418) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4183=1 Package List: - openSUSE Leap 15.3 (noarch): cpuset-1.6-3.3.1 References: https://bugzilla.suse.com/1191418

1 0

openSUSE-RU-2021:4178-1: important: Recommended update for cpupower
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for cpupower ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4178-1 Rating: important References: #1193557 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cpupower fixes the following issues: - Fix `turbostat` immediately exiting on AMD Zen machines (bsc#1193557) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4178=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cpupower-5.10-3.6.1 cpupower-bench-5.10-3.6.1 cpupower-bench-debuginfo-5.10-3.6.1 cpupower-debuginfo-5.10-3.6.1 cpupower-debugsource-5.10-3.6.1 cpupower-devel-5.10-3.6.1 libcpupower0-5.10-3.6.1 libcpupower0-debuginfo-5.10-3.6.1 References: https://bugzilla.suse.com/1193557

1 0

openSUSE-SU-2021:4171-1: moderate: Security update for runc
by opensuse-security＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Security Update: Security update for runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4171-1 Rating: moderate References: #1193436 Cross-References: CVE-2021-43784 CVSS scores: CVE-2021-43784 (NVD) : 6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for runc fixes the following issues: Update to runc v1.0.3. * CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc (bsc#1193436) * Fixed inability to start a container with read-write bind mount of a read-only fuse host mount. * Fixed inability to start when read-only /dev in set in spec. * Fixed not removing sub-cgroups upon container delete, when rootless cgroup v2 is used with older systemd. * Fixed returning error from GetStats when hugetlb is unsupported (which causes excessive logging for kubernetes). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4171=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): runc-1.0.3-27.1 runc-debuginfo-1.0.3-27.1 References: https://www.suse.com/security/cve/CVE-2021-43784.html https://bugzilla.suse.com/1193436

1 0

openSUSE-RU-2021:4163-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 23 Dec '21

23 Dec '21

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:4163-1 Rating: moderate References: #1071559 #1189769 #1189874 #1191504 #1192522 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Fixed an issue when 'lvmid' disk cannot be found after second disk added to the root volume group. (bsc#1189874, bsc#1071559) - Fix for an error when '/boot/grub2/locale/POSIX.gmo' not found. (bsc#1189769) - Fix unknown TPM error on buggy uefi firmware. (bsc#1191504) - Fix arm64 kernel image not aligned on 64k boundary. (bsc#1192522) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4163=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): grub2-2.04-22.6.3 grub2-branding-upstream-2.04-22.6.3 grub2-debuginfo-2.04-22.6.3 - openSUSE Leap 15.3 (aarch64 s390x x86_64): grub2-debugsource-2.04-22.6.3 - openSUSE Leap 15.3 (noarch): grub2-arm64-efi-2.04-22.6.3 grub2-arm64-efi-debug-2.04-22.6.3 grub2-i386-pc-2.04-22.6.3 grub2-i386-pc-debug-2.04-22.6.3 grub2-powerpc-ieee1275-2.04-22.6.3 grub2-powerpc-ieee1275-debug-2.04-22.6.3 grub2-snapper-plugin-2.04-22.6.3 grub2-systemd-sleep-plugin-2.04-22.6.3 grub2-x86_64-efi-2.04-22.6.3 grub2-x86_64-efi-debug-2.04-22.6.3 grub2-x86_64-xen-2.04-22.6.3 - openSUSE Leap 15.3 (s390x): grub2-s390x-emu-2.04-22.6.3 grub2-s390x-emu-debug-2.04-22.6.3 References: https://bugzilla.suse.com/1071559 https://bugzilla.suse.com/1189769 https://bugzilla.suse.com/1189874 https://bugzilla.suse.com/1191504 https://bugzilla.suse.com/1192522

1 0