March 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0367-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 01 Mar '21

01 Mar '21

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0367-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: - keepassxc was updated to 2.6.4 - Added - Automatically adapt to light/dark system theme changes (Windows/macOS only) [#6034] - Changed - Show window title as tooltip on system tray [#5948] - Compress Snap release as LZO for faster initial startup [#5877] - Password generator: Set maximum selectable password length to 999 [#5937] - Fixed - Fix crash on app close when using SSH agent [#5935] - Fix KDF selection showing wrong item when using Argon2id [#5923] - Automatically close About dialog on database lock if it is still open [#5947] - Linux: Fix automatic launch at system startup with AppImages [#5901] - Linux: Fix click-to-move on empty area activating when using menus [#5971] - Linux: Try multiple times to show tray icon if tray is not ready yet [#5948] - macOS: Fix KeePassXC blocking clean shutdown [#6002] - from version 2.6.3 - Added - Support Argon2id KDF [#5778] - Support XMLv2 key files [#5798] - Changed - Improve CSV Import/Export, include time fields and TOTP [#5346] - Support empty area dragging of the application window [#5860] - Display default Auto-Type sequence in preview pane [#5654] - Remove strict length limit on generated passwords [#5748] - Hide key file path by default when unlocking database [#5779] - Document browser extension use with Edge in managed mode [#5692] - Windows: Prevent clipboard history and cloud sync [#5853] - macOS: Update the application icon to Big Sur styling [#5851] - Fixed - Re-select previously selected entry on database unlock [#5559] - Properly save special character choice in password generator [#5610] - Fix crash in browser integration with multiple similar entries [#5653] - Remove offset on username field in classic theme [#5788] - Ensure entry history is copied when drag/dropping entries and groups [#5817] - Close modal dialogs when database is locked [#5820] - Prevent crash when KeeShare modifies an entry that is currently being edited [#5827] - Improve preview of entry attributes [#5834] - Always activate/focus database open dialog preventing mistype [#5878] - Reports: fix calculation of average password length [#5862] - Linux: Delay startup on login to correct tray icon issues [#5724] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-367=1 Package List: - openSUSE Leap 15.2 (x86_64): keepassxc-2.6.4-lp152.3.12.1 keepassxc-debuginfo-2.6.4-lp152.3.12.1 keepassxc-debugsource-2.6.4-lp152.3.12.1 - openSUSE Leap 15.2 (noarch): keepassxc-lang-2.6.4-lp152.3.12.1 References:

1 0

openSUSE-RU-2021:0366-1: moderate: Recommended update for yast2-packager
by maintenance＠opensuse.org 01 Mar '21

01 Mar '21

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0366-1 Rating: moderate References: #1180278 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-packager fixes the following issues: - Fixed a bug where the counting of the downloaded packages in log was wrong (bsc#1180278) - Fixed a crash when installation proposal require pattern and such pattern is not available in any repository This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-366=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-packager-4.2.69-lp152.2.15.1 References: https://bugzilla.suse.com/1180278

1 0

openSUSE-RU-2021:0364-1: moderate: Recommended update for yast2-security
by maintenance＠opensuse.org 01 Mar '21

01 Mar '21

openSUSE Recommended Update: Recommended update for yast2-security ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0364-1 Rating: moderate References: #1177778 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-security fixes the following issues: - AutoYaST: Added support for SELinux configuration (jsc#SLE-17342, jsc#SLE-17307) - Add to firewall/security proposal option to setup SELinux if the given product requires it. (jsc#SLE-17427) - Fixed an issue when firewall configuration was ignored. (bsc#1177778) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-364=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-firewall-4.2.6-lp152.2.6.1 yast2-security-4.2.19-lp152.2.12.1 References: https://bugzilla.suse.com/1177778

1 0

openSUSE-OU-2021:0365-1: Optional update for m4
by maintenance＠opensuse.org 01 Mar '21

01 Mar '21

openSUSE Optional Update: Optional update for m4 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2021:0365-1 Rating: low References: #1181571 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for m4 fixes the following issues: - Fixed an issue in building against newer glibc versions (bsc#1181571) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-365=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): m4-1.4.18-lp152.5.3.1 m4-debuginfo-1.4.18-lp152.5.3.1 m4-debugsource-1.4.18-lp152.5.3.1 References: https://bugzilla.suse.com/1181571

1 0

openSUSE-SU-2021:0363-1: important: Security update for qemu
by opensuse-security＠opensuse.org 01 Mar '21

01 Mar '21

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0363-1 Rating: important References: #1178049 #1178565 #1179717 #1179719 #1180523 #1181639 #1181933 #1182137 Cross-References: CVE-2020-11947 CVE-2021-20181 CVE-2021-20203 CVE-2021-20221 CVSS scores: CVE-2020-11947 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2020-11947 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20181 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-20203 (SUSE): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L CVE-2021-20221 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has four fixes is now available. Description: This update for qemu fixes the following issues: - Fixed potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137) - Fixed out-of-bound access in iscsi (CVE-2020-11947 bsc#1180523) - Fixed out-of-bound access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639) - Fixed out-of-bound access in ARM interrupt handling (CVE-2021-20221 bsc#1181933) - Fixed vfio-pci device on s390 enters error state (bsc#1179717 bsc#1179719) - Fixed "Failed to try-restart qemu-ga@.service" error while updating the qemu-guest-agent. (bsc#1178565) - Apply fixes to qemu scsi passthrough with respect to timeout and error conditions, including using more correct status codes. Add more qemu tracing which helped track down these issues (bsc#1178049) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-363=1 Package List: - openSUSE Leap 15.2 (noarch): qemu-ipxe-1.0.0+-lp152.9.9.2 qemu-microvm-4.2.1-lp152.9.9.2 qemu-seabios-1.12.1+-lp152.9.9.2 qemu-sgabios-8-lp152.9.9.2 qemu-vgabios-1.12.1+-lp152.9.9.2 - openSUSE Leap 15.2 (x86_64): qemu-4.2.1-lp152.9.9.2 qemu-arm-4.2.1-lp152.9.9.2 qemu-arm-debuginfo-4.2.1-lp152.9.9.2 qemu-audio-alsa-4.2.1-lp152.9.9.2 qemu-audio-alsa-debuginfo-4.2.1-lp152.9.9.2 qemu-audio-pa-4.2.1-lp152.9.9.2 qemu-audio-pa-debuginfo-4.2.1-lp152.9.9.2 qemu-audio-sdl-4.2.1-lp152.9.9.2 qemu-audio-sdl-debuginfo-4.2.1-lp152.9.9.2 qemu-block-curl-4.2.1-lp152.9.9.2 qemu-block-curl-debuginfo-4.2.1-lp152.9.9.2 qemu-block-dmg-4.2.1-lp152.9.9.2 qemu-block-dmg-debuginfo-4.2.1-lp152.9.9.2 qemu-block-gluster-4.2.1-lp152.9.9.2 qemu-block-gluster-debuginfo-4.2.1-lp152.9.9.2 qemu-block-iscsi-4.2.1-lp152.9.9.2 qemu-block-iscsi-debuginfo-4.2.1-lp152.9.9.2 qemu-block-nfs-4.2.1-lp152.9.9.2 qemu-block-nfs-debuginfo-4.2.1-lp152.9.9.2 qemu-block-rbd-4.2.1-lp152.9.9.2 qemu-block-rbd-debuginfo-4.2.1-lp152.9.9.2 qemu-block-ssh-4.2.1-lp152.9.9.2 qemu-block-ssh-debuginfo-4.2.1-lp152.9.9.2 qemu-debuginfo-4.2.1-lp152.9.9.2 qemu-debugsource-4.2.1-lp152.9.9.2 qemu-extra-4.2.1-lp152.9.9.2 qemu-extra-debuginfo-4.2.1-lp152.9.9.2 qemu-guest-agent-4.2.1-lp152.9.9.2 qemu-guest-agent-debuginfo-4.2.1-lp152.9.9.2 qemu-ksm-4.2.1-lp152.9.9.2 qemu-kvm-4.2.1-lp152.9.9.2 qemu-lang-4.2.1-lp152.9.9.2 qemu-linux-user-4.2.1-lp152.9.9.3 qemu-linux-user-debuginfo-4.2.1-lp152.9.9.3 qemu-linux-user-debugsource-4.2.1-lp152.9.9.3 qemu-ppc-4.2.1-lp152.9.9.2 qemu-ppc-debuginfo-4.2.1-lp152.9.9.2 qemu-s390-4.2.1-lp152.9.9.2 qemu-s390-debuginfo-4.2.1-lp152.9.9.2 qemu-testsuite-4.2.1-lp152.9.9.5 qemu-tools-4.2.1-lp152.9.9.2 qemu-tools-debuginfo-4.2.1-lp152.9.9.2 qemu-ui-curses-4.2.1-lp152.9.9.2 qemu-ui-curses-debuginfo-4.2.1-lp152.9.9.2 qemu-ui-gtk-4.2.1-lp152.9.9.2 qemu-ui-gtk-debuginfo-4.2.1-lp152.9.9.2 qemu-ui-sdl-4.2.1-lp152.9.9.2 qemu-ui-sdl-debuginfo-4.2.1-lp152.9.9.2 qemu-ui-spice-app-4.2.1-lp152.9.9.2 qemu-ui-spice-app-debuginfo-4.2.1-lp152.9.9.2 qemu-vhost-user-gpu-4.2.1-lp152.9.9.2 qemu-vhost-user-gpu-debuginfo-4.2.1-lp152.9.9.2 qemu-x86-4.2.1-lp152.9.9.2 qemu-x86-debuginfo-4.2.1-lp152.9.9.2 References: https://www.suse.com/security/cve/CVE-2020-11947.html https://www.suse.com/security/cve/CVE-2021-20181.html https://www.suse.com/security/cve/CVE-2021-20203.html https://www.suse.com/security/cve/CVE-2021-20221.html https://bugzilla.suse.com/1178049 https://bugzilla.suse.com/1178565 https://bugzilla.suse.com/1179717 https://bugzilla.suse.com/1179719 https://bugzilla.suse.com/1180523 https://bugzilla.suse.com/1181639 https://bugzilla.suse.com/1181933 https://bugzilla.suse.com/1182137

1 0