March 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:0443-1: moderate: Security update for privoxy
by opensuse-security＠opensuse.org 18 Mar '21

18 Mar '21

openSUSE Security Update: Security update for privoxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0443-1 Rating: moderate References: #1183129 Cross-References: CVE-2021-20272 CVE-2021-20273 CVE-2021-20274 CVE-2021-20275 CVE-2021-20276 CVSS scores: CVE-2021-20272 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-20273 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-20274 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-20275 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-20276 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for privoxy fixes the following issues: Update to version 3.0.32: - Security/Reliability (boo#1183129) - ssplit(): Remove an assertion that could be triggered with a crafted CGI request. Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272 Reported by: Joshua Rogers (Opera) - cgi_send_banner(): Overrule invalid image types. Prevents a crash with a crafted CGI request if Privoxy is toggled off. Commit e711c505c48. OVE-20210206-0001. CVE-2021-20273 Reported by: Joshua Rogers (Opera) - socks5_connect(): Don't try to send credentials when none are configured. Fixes a crash due to a NULL-pointer dereference when the socks server misbehaves. Commit 85817cc55b9. OVE-20210207-0001. CVE-2021-20274 Reported by: Joshua Rogers (Opera) - chunked_body_is_complete(): Prevent an invalid read of size two. Commit a912ba7bc9c. OVE-20210205-0001. CVE-2021-20275 Reported by: Joshua Rogers (Opera) - Obsolete pcre: Prevent invalid memory accesses with an invalid pattern passed to pcre_compile(). Note that the obsolete pcre code is scheduled to be removed before the 3.0.33 release. There has been a warning since 2008 already. Commit 28512e5b624. OVE-20210222-0001. CVE-2021-20276 Reported by: Joshua Rogers (Opera) - Bug fixes: - Properly parse the client-tag-lifetime directive. Previously it was not accepted as an obsolete hash value was being used. Reported by: Joshua Rogers (Opera) - decompress_iob(): Prevent reading of uninitialized data. Reported by: Joshua Rogers (Opera). - decompress_iob(): Don't advance cur past eod when looking for the end of the file name and comment. - decompress_iob(): Cast value to unsigned char before shifting. Prevents a left-shift of a negative value which is undefined behaviour. Reported by: Joshua Rogers (Opera) - gif_deanimate(): Confirm that that we have enough data before doing any work. Fixes a crash when fuzzing with an empty document. Reported by: Joshua Rogers (Opera). - buf_copy(): Fail if there's no data to write or nothing to do. Prevents undefined behaviour "applying zero offset to null pointer". Reported by: Joshua Rogers (Opera) - log_error(): Treat LOG_LEVEL_FATAL as fatal even when --stfu is being used while fuzzing. Reported by: Joshua Rogers (Opera). - Respect DESTDIR when considering whether or not to install config files with ".new" extension. - OpenSSL ssl_store_cert(): Fix two error messages. - Fix a couple of format specifiers. - Silence compiler warnings when compiling with NDEBUG. - fuzz_server_header(): Fix compiler warning. - fuzz_client_header(): Fix compiler warning. - cgi_send_user_manual(): Also reject requests if the user-manual directive specifies a https:// URL. Previously Privoxy would try and fail to open a local file. - General improvements: - Log the TLS version and the the cipher when debug 2 is enabled. - ssl_send_certificate_error(): Respect HEAD requests by not sending a body. - ssl_send_certificate_error(): End the body with a single new line. - serve(): Increase the chances that the host is logged when closing a server socket. - handle_established_connection(): Add parentheses to clarify an expression Suggested by: David Binderman - continue_https_chat(): Explicitly unset CSP_FLAG_CLIENT_CONNECTION_KEEP_ALIVE if process_encrypted_request() fails. This makes it more obvious that the connection will not be reused. Previously serve() relied on CSP_FLAG_SERVER_CONTENT_LENGTH_SET and CSP_FLAG_CHUNKED being unset. Inspired by a patch from Joshua Rogers (Opera). - decompress_iob(): Add periods to a couple of log messages - Terminate the body of the HTTP snipplets with a single new line instead of "\r\n". - configure: Add --with-assertions option and only enable assertions when it is used - windows build: Use --with-brotli and --with-mbedtls by default and enable dynamic error checking. - gif_deanimate(): Confirm we've got an image before trying to write it Saves a pointless buf_copy() call. - OpenSSL ssl_store_cert(): Remove a superfluous space before the serial number. - Action file improvements: - Disable fast-redirects for .golem.de/ - Unblock requests to adri*. - Block requests for trc*.taboola.com/ - Disable fast-redirects for .linkedin.com/ - Filter file improvements: - Make the second pcrs job of the img-reorder filter greedy again. The ungreedy version broke the img tags on: https://bulk.fefe.de/scalability/. - Privoxy-Log-Parser: - Highlight a few more messages. - Clarify the --statistics output. The shown "Reused connections" are server connections so name them appropriately. - Bump version to 0.9.3. - Privoxy-Regression-Test: - Add the --check-bad-ssl option to the --help output. - Bump version to 0.7.3. - Documentation: - Add pushing the created tag to the release steps in the developer manual. - Clarify that 'debug 32768' should be used in addition to the other debug directives when reporting problems. - Add a 'Third-party licenses and copyrights' section to the user manual. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-443=1 Package List: - openSUSE Leap 15.2 (x86_64): privoxy-3.0.32-lp152.3.9.1 privoxy-debuginfo-3.0.32-lp152.3.9.1 privoxy-debugsource-3.0.32-lp152.3.9.1 - openSUSE Leap 15.2 (noarch): privoxy-doc-3.0.32-lp152.3.9.1 References: https://www.suse.com/security/cve/CVE-2021-20272.html https://www.suse.com/security/cve/CVE-2021-20273.html https://www.suse.com/security/cve/CVE-2021-20274.html https://www.suse.com/security/cve/CVE-2021-20275.html https://www.suse.com/security/cve/CVE-2021-20276.html https://bugzilla.suse.com/1183129

1 0

openSUSE-SU-2021:0436-1: important: Security update for chromium
by opensuse-security＠opensuse.org 17 Mar '21

17 Mar '21

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0436-1 Rating: important References: #1183515 Cross-References: CVE-2021-21191 CVE-2021-21192 CVE-2021-21193 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium was updated to 89.0.4389.90 (boo#1183515) - CVE-2021-21191: Use after free in WebRTC. - CVE-2021-21192: Heap buffer overflow in tab groups. - CVE-2021-21193: Use after free in Blink. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-436=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-89.0.4389.90-lp152.2.80.1 chromedriver-debuginfo-89.0.4389.90-lp152.2.80.1 chromium-89.0.4389.90-lp152.2.80.1 chromium-debuginfo-89.0.4389.90-lp152.2.80.1 References: https://www.suse.com/security/cve/CVE-2021-21191.html https://www.suse.com/security/cve/CVE-2021-21192.html https://www.suse.com/security/cve/CVE-2021-21193.html https://bugzilla.suse.com/1183515

1 0

openSUSE-SU-2021:0435-1: moderate: Security update for python
by opensuse-security＠opensuse.org 17 Mar '21

17 Mar '21

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0435-1 Rating: moderate References: #1182379 Cross-References: CVE-2021-23336 CVSS scores: CVE-2021-23336 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2021-23336 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - python27 was upgraded to 2.7.18 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-435=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpython2_7-1_0-2.7.18-lp152.3.15.1 libpython2_7-1_0-debuginfo-2.7.18-lp152.3.15.1 python-2.7.18-lp152.3.15.1 python-base-2.7.18-lp152.3.15.1 python-base-debuginfo-2.7.18-lp152.3.15.1 python-base-debugsource-2.7.18-lp152.3.15.1 python-curses-2.7.18-lp152.3.15.1 python-curses-debuginfo-2.7.18-lp152.3.15.1 python-debuginfo-2.7.18-lp152.3.15.1 python-debugsource-2.7.18-lp152.3.15.1 python-demo-2.7.18-lp152.3.15.1 python-devel-2.7.18-lp152.3.15.1 python-gdbm-2.7.18-lp152.3.15.1 python-gdbm-debuginfo-2.7.18-lp152.3.15.1 python-idle-2.7.18-lp152.3.15.1 python-tk-2.7.18-lp152.3.15.1 python-tk-debuginfo-2.7.18-lp152.3.15.1 python-xml-2.7.18-lp152.3.15.1 python-xml-debuginfo-2.7.18-lp152.3.15.1 - openSUSE Leap 15.2 (noarch): python-doc-2.7.18-lp152.3.15.1 python-doc-pdf-2.7.18-lp152.3.15.1 - openSUSE Leap 15.2 (x86_64): libpython2_7-1_0-32bit-2.7.18-lp152.3.15.1 libpython2_7-1_0-32bit-debuginfo-2.7.18-lp152.3.15.1 python-32bit-2.7.18-lp152.3.15.1 python-32bit-debuginfo-2.7.18-lp152.3.15.1 python-base-32bit-2.7.18-lp152.3.15.1 python-base-32bit-debuginfo-2.7.18-lp152.3.15.1 References: https://www.suse.com/security/cve/CVE-2021-23336.html https://bugzilla.suse.com/1182379

1 0

openSUSE-RU-2021:0432-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 17 Mar '21

17 Mar '21

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0432-1 Rating: moderate References: #1182884 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Fix for build issues with armv7. (bsc#1182884) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-432=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xorg-x11-server-1.20.3-lp152.8.15.1 xorg-x11-server-debuginfo-1.20.3-lp152.8.15.1 xorg-x11-server-debugsource-1.20.3-lp152.8.15.1 xorg-x11-server-extra-1.20.3-lp152.8.15.1 xorg-x11-server-extra-debuginfo-1.20.3-lp152.8.15.1 xorg-x11-server-sdk-1.20.3-lp152.8.15.1 xorg-x11-server-source-1.20.3-lp152.8.15.1 xorg-x11-server-wayland-1.20.3-lp152.8.15.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp152.8.15.1 References: https://bugzilla.suse.com/1182884

1 0

openSUSE-RU-2021:0433-1: moderate: Recommended update for yast2-storage-ng
by maintenance＠opensuse.org 17 Mar '21

17 Mar '21

openSUSE Recommended Update: Recommended update for yast2-storage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0433-1 Rating: moderate References: #1176140 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-storage-ng fixes the following issues: - Improved mechanism to detect whether a network is needed for a given disk and use its driver as extra criteria. (bsc#1176140) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-433=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-storage-ng-4.2.115-lp152.2.12.1 References: https://bugzilla.suse.com/1176140

1 0

openSUSE-RU-2021:0434-1: moderate: Recommended update for yast2-security
by maintenance＠opensuse.org 17 Mar '21

17 Mar '21

openSUSE Recommended Update: Recommended update for yast2-security ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0434-1 Rating: moderate References: #1182543 #1182894 #1182940 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-security fixes the following issues: - Make SELinux not configurable when running on WSL. (bsc#1182940) - Ensure defined SELinux patterns are set. (bsc#1182543) - Do not write bootloader in 'insts-sys'. (bsc#1182894) - Change the SELinux resolvable unique id used in auto-installation to be consistent with the one used by normal installation. (related to jsc#SLE-17342) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-434=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-security-4.2.23-lp152.2.15.1 References: https://bugzilla.suse.com/1182543 https://bugzilla.suse.com/1182894 https://bugzilla.suse.com/1182940

1 0

openSUSE-RU-2021:0431-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0431-1 Rating: moderate References: #1182688 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dracut fixes the following issues: - network-legacy: fix route parsing issues in ifup. (bsc#1182688) -0kernel-modules: arm/arm64: Add reset controllers - Prevent creating unexpected files on the host when running dracut - As of 'v246' of systemd 'syslog' and 'syslog-console' switches have been deprecated. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-431=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dracut-049.1+suse.186.g320cc3d1-lp152.2.21.1 dracut-debuginfo-049.1+suse.186.g320cc3d1-lp152.2.21.1 dracut-debugsource-049.1+suse.186.g320cc3d1-lp152.2.21.1 dracut-extra-049.1+suse.186.g320cc3d1-lp152.2.21.1 dracut-fips-049.1+suse.186.g320cc3d1-lp152.2.21.1 dracut-ima-049.1+suse.186.g320cc3d1-lp152.2.21.1 dracut-tools-049.1+suse.186.g320cc3d1-lp152.2.21.1 References: https://bugzilla.suse.com/1182688

1 0

openSUSE-SU-2021:0430-1: moderate: Security update for openssl-1_0_0
by opensuse-security＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Security Update: Security update for openssl-1_0_0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0430-1 Rating: moderate References: #1182331 #1182333 Cross-References: CVE-2021-23840 CVE-2021-23841 CVSS scores: CVE-2021-23840 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23840 (SUSE): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2021-23841 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23841 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openssl-1_0_0 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-430=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libopenssl-1_0_0-devel-1.0.2p-lp152.8.12.1 libopenssl10-1.0.2p-lp152.8.12.1 libopenssl10-debuginfo-1.0.2p-lp152.8.12.1 libopenssl1_0_0-1.0.2p-lp152.8.12.1 libopenssl1_0_0-debuginfo-1.0.2p-lp152.8.12.1 libopenssl1_0_0-hmac-1.0.2p-lp152.8.12.1 libopenssl1_0_0-steam-1.0.2p-lp152.8.12.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-lp152.8.12.1 openssl-1_0_0-1.0.2p-lp152.8.12.1 openssl-1_0_0-cavs-1.0.2p-lp152.8.12.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-lp152.8.12.1 openssl-1_0_0-debuginfo-1.0.2p-lp152.8.12.1 openssl-1_0_0-debugsource-1.0.2p-lp152.8.12.1 - openSUSE Leap 15.2 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.12.1 libopenssl1_0_0-32bit-1.0.2p-lp152.8.12.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-lp152.8.12.1 libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.12.1 libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.12.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-lp152.8.12.1 - openSUSE Leap 15.2 (noarch): openssl-1_0_0-doc-1.0.2p-lp152.8.12.1 References: https://www.suse.com/security/cve/CVE-2021-23840.html https://www.suse.com/security/cve/CVE-2021-23841.html https://bugzilla.suse.com/1182331 https://bugzilla.suse.com/1182333

1 0

openSUSE-SU-2021:0418-1: moderate: Security update for 389-ds
by opensuse-security＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Security Update: Security update for 389-ds ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0418-1 Rating: moderate References: #1181159 Cross-References: CVE-2020-35518 CVSS scores: CVE-2020-35518 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for 389-ds fixes the following issues: - 389-ds was updated to version 1.4.3.19 - CVE-2020-35518: Fixed an information disclosure during the binding of a DN (bsc#1181159). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-418=1 Package List: - openSUSE Leap 15.2 (x86_64): 389-ds-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 389-ds-debuginfo-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 389-ds-debugsource-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 389-ds-devel-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 389-ds-snmp-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 389-ds-snmp-debuginfo-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 lib389-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 libsvrcore0-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 libsvrcore0-debuginfo-1.4.3.19~git0.bef0b5bed-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2020-35518.html https://bugzilla.suse.com/1181159

1 0

openSUSE-RU-2021:0417-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0417-1 Rating: moderate References: #1177834 #1178260 #1180944 #1182781 #1182818 #1182911 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Support both 'bridge_forwarddelay' and 'bridge_forward_delay'. The latter takes precedence. (bsc#1180944) - Fixes some usability issues (bsc#1177834, bsc#1182781): - Disable "Edit" and "Delete" buttons when no interfaces are detected. - Disable the "Scan Network" button when the interface does not exist. - Do not consider proposing 'nfsroot' as startmode when running on installation. (bsc#1182818) - Do not filter ethernet cards when configuring a bond in s390. (bsc#1182911) - Only propose a 1492 'MTU' size when configuring an LCS interface. - Fixed writing a record into /etc/hosts for static ips during autoyast installation. (bsc#1178260) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-417=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-network-4.2.96-lp152.2.30.1 References: https://bugzilla.suse.com/1177834 https://bugzilla.suse.com/1178260 https://bugzilla.suse.com/1180944 https://bugzilla.suse.com/1182781 https://bugzilla.suse.com/1182818 https://bugzilla.suse.com/1182911

1 0