March 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0419-1: moderate: Recommended update for drbd-utils
by maintenance＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Recommended Update: Recommended update for drbd-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0419-1 Rating: moderate References: #1182361 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd-utils fixes the following issues: - pacemaker2 compat issue for crm-fence-peer.9 use --xml format of crm_mon (bsc#1182361) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-419=1 Package List: - openSUSE Leap 15.2 (x86_64): drbd-utils-9.13.0-lp152.2.9.1 drbd-utils-debuginfo-9.13.0-lp152.2.9.1 drbd-utils-debugsource-9.13.0-lp152.2.9.1 References: https://bugzilla.suse.com/1182361

1 0

openSUSE-RU-2021:0420-1: moderate: Recommended update for sane-backends
by maintenance＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Recommended Update: Recommended update for sane-backends ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0420-1 Rating: moderate References: #1179065 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sane-backends fixes the following issues: - updated sane-backends to 1.0.32: * Fixed double height image with the avision backend (bsc#1179065) * Removed udev rules mangling for USB devices (ATTR vs ATTRS) * Does no longer add SCSI id twice for EPSON Perfection 1640SU Many more fixes came with this version bump. Please refer to the changelog file of this package. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-420=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): sane-backends-1.0.32-lp152.7.6.1 sane-backends-autoconfig-1.0.32-lp152.7.6.1 sane-backends-debuginfo-1.0.32-lp152.7.6.1 sane-backends-debugsource-1.0.32-lp152.7.6.1 sane-backends-devel-1.0.32-lp152.7.6.1 - openSUSE Leap 15.2 (x86_64): sane-backends-32bit-1.0.32-lp152.7.6.1 sane-backends-32bit-debuginfo-1.0.32-lp152.7.6.1 sane-backends-devel-32bit-1.0.32-lp152.7.6.1 References: https://bugzilla.suse.com/1179065

1 0

openSUSE-RU-2021:0424-1: moderate: Recommended update for yast2-bootloader
by maintenance＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Recommended Update: Recommended update for yast2-bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0424-1 Rating: moderate References: #1176970 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-bootloader fixes the following issues: - Drop the 'suse_btrfs' element from the AutoYaST schema. (bsc#1176970) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-424=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-bootloader-4.2.27-lp152.2.6.1 References: https://bugzilla.suse.com/1176970

1 0

openSUSE-SU-2021:0427-1: moderate: Security update for openssl-1_1
by opensuse-security＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Security Update: Security update for openssl-1_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0427-1 Rating: moderate References: #1182331 #1182333 #1182959 Cross-References: CVE-2021-23840 CVE-2021-23841 CVSS scores: CVE-2021-23840 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23840 (SUSE): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2021-23841 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23841 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for openssl-1_1 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331) - Fixed unresolved error codes in FIPS (bsc#1182959). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-427=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libopenssl-1_1-devel-1.1.1d-lp152.7.12.1 libopenssl1_1-1.1.1d-lp152.7.12.1 libopenssl1_1-debuginfo-1.1.1d-lp152.7.12.1 libopenssl1_1-hmac-1.1.1d-lp152.7.12.1 openssl-1_1-1.1.1d-lp152.7.12.1 openssl-1_1-debuginfo-1.1.1d-lp152.7.12.1 openssl-1_1-debugsource-1.1.1d-lp152.7.12.1 - openSUSE Leap 15.2 (x86_64): libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.12.1 libopenssl1_1-32bit-1.1.1d-lp152.7.12.1 libopenssl1_1-32bit-debuginfo-1.1.1d-lp152.7.12.1 libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.12.1 - openSUSE Leap 15.2 (noarch): openssl-1_1-doc-1.1.1d-lp152.7.12.1 References: https://www.suse.com/security/cve/CVE-2021-23840.html https://www.suse.com/security/cve/CVE-2021-23841.html https://bugzilla.suse.com/1182331 https://bugzilla.suse.com/1182333 https://bugzilla.suse.com/1182959

1 0

openSUSE-RU-2021:0421-1: moderate: Recommended update for systemd-rpm-macros
by maintenance＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Recommended Update: Recommended update for systemd-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0421-1 Rating: moderate References: #1177039 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemd-rpm-macros fixes the following issues: - Bump to version 6 - Make upstream '%systemd_{pre,post,preun,postun}' aliases to their SUSE counterparts. Packagers can now choose to use the upstream or the SUSE variants indifferently. For consistency the SUSE variants should be preferred since almost all SUSE packages already use them but the upstream versions might be usefull in certain cases where packages need to support multiple distros based on RPM. - Improve the logic used to apply the presets. (bsc#1177039) Before presests were applied at a) package installation b) new units introduced via a package update (but after making sure that it was not a SysV initscript being converted). The problem is that a) didn't handle package a renaming or split properly since the package with the new name is installed rather being updated and therefore the presets were applied even if they were already with the old name. We now cover this case (and the other ones) by applying presets only if the units are new and the services are not being migrated. This regardless of whether this happens during an install or an update. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-421=1 Package List: - openSUSE Leap 15.2 (noarch): systemd-rpm-macros-6-lp152.8.10.1 References: https://bugzilla.suse.com/1177039

1 0

openSUSE-SU-2021:0423-1: moderate: Security update for postgresql12
by opensuse-security＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Security Update: Security update for postgresql12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0423-1 Rating: moderate References: #1179765 #1182040 Cross-References: CVE-2021-3393 CVSS scores: CVE-2021-3393 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for postgresql12 fixes the following issues: Upgrade to version 12.6: - Reindexing might be needed after applying this update. - CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-423=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libecpg6-12.6-lp152.3.16.1 libecpg6-debuginfo-12.6-lp152.3.16.1 libpq5-12.6-lp152.3.16.1 libpq5-debuginfo-12.6-lp152.3.16.1 postgresql12-12.6-lp152.3.16.1 postgresql12-contrib-12.6-lp152.3.16.1 postgresql12-contrib-debuginfo-12.6-lp152.3.16.1 postgresql12-debuginfo-12.6-lp152.3.16.1 postgresql12-debugsource-12.6-lp152.3.16.1 postgresql12-devel-12.6-lp152.3.16.1 postgresql12-devel-debuginfo-12.6-lp152.3.16.1 postgresql12-llvmjit-12.6-lp152.3.16.1 postgresql12-llvmjit-debuginfo-12.6-lp152.3.16.1 postgresql12-plperl-12.6-lp152.3.16.1 postgresql12-plperl-debuginfo-12.6-lp152.3.16.1 postgresql12-plpython-12.6-lp152.3.16.1 postgresql12-plpython-debuginfo-12.6-lp152.3.16.1 postgresql12-pltcl-12.6-lp152.3.16.1 postgresql12-pltcl-debuginfo-12.6-lp152.3.16.1 postgresql12-server-12.6-lp152.3.16.1 postgresql12-server-debuginfo-12.6-lp152.3.16.1 postgresql12-server-devel-12.6-lp152.3.16.1 postgresql12-server-devel-debuginfo-12.6-lp152.3.16.1 postgresql12-test-12.6-lp152.3.16.1 - openSUSE Leap 15.2 (noarch): postgresql12-docs-12.6-lp152.3.16.1 - openSUSE Leap 15.2 (x86_64): libecpg6-32bit-12.6-lp152.3.16.1 libecpg6-32bit-debuginfo-12.6-lp152.3.16.1 libpq5-32bit-12.6-lp152.3.16.1 libpq5-32bit-debuginfo-12.6-lp152.3.16.1 References: https://www.suse.com/security/cve/CVE-2021-3393.html https://bugzilla.suse.com/1179765 https://bugzilla.suse.com/1182040

1 0

openSUSE-SU-2021:0429-1: moderate: Security update for python-markdown2
by opensuse-security＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Security Update: Security update for python-markdown2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0429-1 Rating: moderate References: #1171379 #1181270 #1183171 Cross-References: CVE-2021-26813 CVSS scores: CVE-2021-26813 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for python-markdown2 fixes the following issues: Update to 2.4.0 (boo#1181270): - [pull #377] Fixed bug breaking strings elements in metadata lists - [pull #380] When rendering fenced code blocks, also add the language-LANG class - [pull #387] Regex DoS fixes (CVE-2021-26813, boo#1183171) - Switch off failing tests (gh#trentm/python-markdown2#388), ignore failing test suite. update to 2.3.9: - [pull #335] Added header support for wiki tables - [pull #336] Reset _toc when convert is run - [pull #353] XSS fix - [pull #350] XSS fix - Add patch to fix unsanitized input for cross-site scripting (boo#1171379) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-429=1 Package List: - openSUSE Leap 15.2 (noarch): python2-markdown2-2.4.0-lp152.2.3.1 python3-markdown2-2.4.0-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-26813.html https://bugzilla.suse.com/1171379 https://bugzilla.suse.com/1181270 https://bugzilla.suse.com/1183171

1 0

openSUSE-RU-2021:0426-1: moderate: Recommended update for go
by maintenance＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Recommended Update: Recommended update for go ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0426-1 Rating: moderate References: #1182345 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go fixes the following issues: - Update to current stable go1.16 (bsc#1182345) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-426=1 Package List: - openSUSE Leap 15.2 (x86_64): go-1.16-lp152.2.6.1 go-doc-1.16-lp152.2.6.1 go-race-1.16-lp152.2.6.1 References: https://bugzilla.suse.com/1182345

1 0

openSUSE-SU-2021:0416-1: moderate: Security update for connman
by opensuse-security＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Security Update: Security update for connman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0416-1 Rating: moderate References: #1181751 Cross-References: CVE-2021-26675 CVE-2021-26676 CVSS scores: CVE-2021-26675 (NVD) : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-26676 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for connman fixes the following issues: Update to 1.39 (boo#1181751): * Fix issue with scanning state synchronization and iwd. * Fix issue with invalid key with 4-way handshake offloading. * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675) * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676) Update to 1.38: * Fix issue with online check on IP address update. * Fix issue with OpenVPN and encrypted private keys. * Fix issue with finishing of VPN connections. * Add support for updated stable iwd APIs. * Add support for WireGuard networks. Update to 1.37: * Fix issue with handling invalid gateway addresses. * Fix issue with handling updates of default gateway. * Fix issue with DHCP servers that require broadcast flag. * Add support for option to use gateways as time servers. * Add support for option to select default technology. * Add support for Address Conflict Detection (ACD). * Add support for IPv6 iptables management. Change in 1.36: * Fix issue with DNS short response on error handling. * Fix issue with handling incoming DNS requests. * Fix issue with handling empty timeserver list. * Fix issue with incorrect DHCP byte order. * Fix issue with AllowDomainnameUpdates handling. * Fix issue with IPv4 link-local IP conflict error. * Fix issue with handling WISPr over TLS connections. * Fix issue with WiFi background scanning handling. * Fix issue with WiFi disconnect+connect race condition. * Fix issue with WiFi scanning and tethering operation. * Fix issue with WiFi security change handling. * Fix issue with missing signal for WPS changes. * Fix issue with online check retry handling. * Add support for systemd-resolved backend. * Add support for mDNS configuration setup. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-416=1 Package List: - openSUSE Leap 15.2 (x86_64): connman-1.39-lp152.3.3.1 connman-client-1.39-lp152.3.3.1 connman-client-debuginfo-1.39-lp152.3.3.1 connman-debuginfo-1.39-lp152.3.3.1 connman-debugsource-1.39-lp152.3.3.1 connman-devel-1.39-lp152.3.3.1 connman-doc-1.39-lp152.3.3.1 connman-nmcompat-1.39-lp152.3.3.1 connman-plugin-hh2serial-gps-1.39-lp152.3.3.1 connman-plugin-hh2serial-gps-debuginfo-1.39-lp152.3.3.1 connman-plugin-iospm-1.39-lp152.3.3.1 connman-plugin-iospm-debuginfo-1.39-lp152.3.3.1 connman-plugin-l2tp-1.39-lp152.3.3.1 connman-plugin-l2tp-debuginfo-1.39-lp152.3.3.1 connman-plugin-openconnect-1.39-lp152.3.3.1 connman-plugin-openconnect-debuginfo-1.39-lp152.3.3.1 connman-plugin-openvpn-1.39-lp152.3.3.1 connman-plugin-openvpn-debuginfo-1.39-lp152.3.3.1 connman-plugin-polkit-1.39-lp152.3.3.1 connman-plugin-pptp-1.39-lp152.3.3.1 connman-plugin-pptp-debuginfo-1.39-lp152.3.3.1 connman-plugin-tist-1.39-lp152.3.3.1 connman-plugin-tist-debuginfo-1.39-lp152.3.3.1 connman-plugin-vpnc-1.39-lp152.3.3.1 connman-plugin-vpnc-debuginfo-1.39-lp152.3.3.1 connman-plugin-wireguard-1.39-lp152.3.3.1 connman-plugin-wireguard-debuginfo-1.39-lp152.3.3.1 connman-test-1.39-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-26675.html https://www.suse.com/security/cve/CVE-2021-26676.html https://bugzilla.suse.com/1181751

1 0

openSUSE-RU-2021:0422-1: moderate: Recommended update for libX11
by maintenance＠opensuse.org 16 Mar '21

16 Mar '21

openSUSE Recommended Update: Recommended update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0422-1 Rating: moderate References: #1181963 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libX11 fixes the following issues: - Fixes a race condition in 'libX11' that causes various applications to crash randomly. (bsc#1181963) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-422=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libX11-6-1.6.5-lp152.5.12.1 libX11-6-debuginfo-1.6.5-lp152.5.12.1 libX11-debugsource-1.6.5-lp152.5.12.1 libX11-devel-1.6.5-lp152.5.12.1 libX11-xcb1-1.6.5-lp152.5.12.1 libX11-xcb1-debuginfo-1.6.5-lp152.5.12.1 - openSUSE Leap 15.2 (noarch): libX11-data-1.6.5-lp152.5.12.1 - openSUSE Leap 15.2 (x86_64): libX11-6-32bit-1.6.5-lp152.5.12.1 libX11-6-32bit-debuginfo-1.6.5-lp152.5.12.1 libX11-devel-32bit-1.6.5-lp152.5.12.1 libX11-xcb1-32bit-1.6.5-lp152.5.12.1 libX11-xcb1-32bit-debuginfo-1.6.5-lp152.5.12.1 References: https://bugzilla.suse.com/1181963

1 0