April 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0599-1: important: Recommended update for grub2
by maintenance＠opensuse.org 23 Apr '21

23 Apr '21

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0599-1 Rating: important References: #1174166 #1181696 #1182012 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Fix error `grub_file_filters not found` in Azure virtual machine. (bsc#1182012) - Fix executable stack marking in `grub-emu`. (bsc#1181696) - Remove `95_textmode` for PowerPC given that there's no efi port on that architecture. (bsc#1174166) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-599=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): grub2-2.04-lp152.7.25.1 grub2-branding-upstream-2.04-lp152.7.25.1 grub2-debuginfo-2.04-lp152.7.25.1 grub2-debugsource-2.04-lp152.7.25.1 - openSUSE Leap 15.2 (noarch): grub2-i386-efi-2.04-lp152.7.25.1 grub2-i386-efi-debug-2.04-lp152.7.25.1 grub2-i386-pc-2.04-lp152.7.25.1 grub2-i386-pc-debug-2.04-lp152.7.25.1 grub2-i386-xen-2.04-lp152.7.25.1 grub2-snapper-plugin-2.04-lp152.7.25.1 grub2-systemd-sleep-plugin-2.04-lp152.7.25.1 grub2-x86_64-efi-2.04-lp152.7.25.1 grub2-x86_64-efi-debug-2.04-lp152.7.25.1 grub2-x86_64-xen-2.04-lp152.7.25.1 References: https://bugzilla.suse.com/1174166 https://bugzilla.suse.com/1181696 https://bugzilla.suse.com/1182012

1 0

openSUSE-RU-2021:0596-1: moderate: Recommended update for kgeography
by maintenance＠opensuse.org 23 Apr '21

23 Apr '21

openSUSE Recommended Update: Recommended update for kgeography ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0596-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kgeography fixes the following issues: - Fixed a crash when the user disables the "Wait for validation" option (kde#435555): This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-596=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): kgeography-20.04.2-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): kgeography-lang-20.04.2-bp152.2.3.1 References:

1 0

openSUSE-SU-2021:0595-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 23 Apr '21

23 Apr '21

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0595-1 Rating: moderate References: #1184848 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for irssi fixes the following issues: irssi was updated to 1.2.3 (boo#1184848) - Fix the compilation of utf8proc (#1021) - Fix wrong call to free. By Zero King (#1076) - Fix a colour reset in true colour themes when encountering mIRC colours (#1059) - Fix memory leak on malformed CAP requests (#1120) - Fix an erroneous free of SASL data. Credit to Oss-Fuzz (#1128, #1130) - Re-set the TLS flag when reconnecting (#1027, #1134) - Fix the scrollback getting stuck after /clear (#1115, #1136) - Fix the input of Ctrl+C as the first character (#1153, #1154) - Fix crash on quit during unloading of modules on certain platforms (#1167) - Fix Irssi freezing input after Ctrl+Space on GLib >2.62 (#1180, #1183) - Fix layout of IDCHANs. By Lauri Tirkkonen (#1197) - Fix crash when server got reconnected before it was properly connected (#1210, #1211) - Fix multiple identical active caps (#1249) - Minor help corrections (#1156, #1213, #1214, #1255) - Remove erroneous colour in the colorless theme. Reported and fixed by Nutchanon Wetchasit (#1220, #1221) - Fix invalid bounds calculation when editing the text entry. Found and fixed by Sergey Valentey (#1269) - Fix passing of negative size in buffer writes. Found and fixed by Sergey Valentey (#1270) - Fix Irssi freezing on slow hardware and fast DCC transfers (#159, #1271) - Fix compilation on Solaris (#1291) - Fix null pointer dereference when receiving broken JOIN record. Credit to Oss-Fuzz (#1292) - Fix crash on /connect to some sockets (#1239, #1298) - Fix Irssi rendering on Apple ARM. By Misty De M��o (#1267, #1268, #1290) - Fix crash on /lastlog with broken lines (#1281, #1299) - Fix memory leak when receiving bogus SASL authentication data. Found and fixed by Sergey Valentey (#1293) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-595=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): irssi-1.2.3-bp152.5.4.1 irssi-devel-1.2.3-bp152.5.4.1 References: https://bugzilla.suse.com/1184848

1 0

openSUSE-SU-2021:0597-1: moderate: Security update for python-django-registration
by opensuse-security＠opensuse.org 23 Apr '21

23 Apr '21

openSUSE Security Update: Security update for python-django-registration ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0597-1 Rating: moderate References: #1184427 Cross-References: CVE-2021-21416 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-django-registration fixes the following issues: Update to 3.1.2 (boo#1184427, CVE-2021-21416) * Filter sensitive POST parameters in error reports * Fix RemovedInDjango40Warning from Signal arguments This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-597=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python3-django-registration-3.1.2-bp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-21416.html https://bugzilla.suse.com/1184427

1 0

openSUSE-SU-2021:0594-1: moderate: Security update for jhead
by opensuse-security＠opensuse.org 22 Apr '21

22 Apr '21

openSUSE Security Update: Security update for jhead ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0594-1 Rating: moderate References: #1184756 Cross-References: CVE-2021-3496 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jhead fixes the following issues: - CVE-2021-3496: Fixed heap-based buffer overflow in Get16u() in exif.c (bsc#1184756) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-594=1 Package List: - openSUSE Leap 15.2 (x86_64): jhead-3.00-lp152.7.3.1 jhead-debuginfo-3.00-lp152.7.3.1 jhead-debugsource-3.00-lp152.7.3.1 References: https://www.suse.com/security/cve/CVE-2021-3496.html https://bugzilla.suse.com/1184756

1 0

openSUSE-SU-2021:0592-1: important: Security update for opera
by opensuse-security＠opensuse.org 22 Apr '21

22 Apr '21

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0592-1 Rating: important References: #1184256 Cross-References: CVE-2021-21191 CVE-2021-21192 CVE-2021-21193 CVE-2021-21194 CVE-2021-21195 CVE-2021-21196 CVE-2021-21197 CVE-2021-21198 CVE-2021-21199 CVSS scores: CVE-2021-21191 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21192 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21193 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21194 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21195 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21196 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21197 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21198 (NVD) : 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-21199 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2:NonFree ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Opera was updated to version 75.0.3969.171 (boo#1184256) CVE-2021-21194, CVE-2021-21195, CVE-2021-21196, CVE-2021-21197, CVE-2021-21198, CVE-2021-21199, CVE-2021-21191, CVE-2021-21192, CVE-2021-21193 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2021-592=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-75.0.3969.171-lp152.2.40.1 References: https://www.suse.com/security/cve/CVE-2021-21191.html https://www.suse.com/security/cve/CVE-2021-21192.html https://www.suse.com/security/cve/CVE-2021-21193.html https://www.suse.com/security/cve/CVE-2021-21194.html https://www.suse.com/security/cve/CVE-2021-21195.html https://www.suse.com/security/cve/CVE-2021-21196.html https://www.suse.com/security/cve/CVE-2021-21197.html https://www.suse.com/security/cve/CVE-2021-21198.html https://www.suse.com/security/cve/CVE-2021-21199.html https://bugzilla.suse.com/1184256

1 0

openSUSE-RU-2021:0593-1: important: Recommended update for drbd
by maintenance＠opensuse.org 22 Apr '21

22 Apr '21

openSUSE Recommended Update: Recommended update for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0593-1 Rating: important References: #1183970 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd fixes the following issue: - drbd failed to detect a loss of synchronization under certain conditions, which meant that a "split brain" condition would not be recognized. This issue could potentially have lead to data loss. [bsc#1183970] This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-593=1 Package List: - openSUSE Leap 15.2 (x86_64): drbd-9.0.22~1+git.fe2b5983-lp152.2.12.2 drbd-debugsource-9.0.22~1+git.fe2b5983-lp152.2.12.2 drbd-kmp-default-9.0.22~1+git.fe2b5983_k5.3.18_lp152.72-lp152.2.12.2 drbd-kmp-default-debuginfo-9.0.22~1+git.fe2b5983_k5.3.18_lp152.72-lp152.2.12.2 drbd-kmp-preempt-9.0.22~1+git.fe2b5983_k5.3.18_lp152.72-lp152.2.12.2 drbd-kmp-preempt-debuginfo-9.0.22~1+git.fe2b5983_k5.3.18_lp152.72-lp152.2.12.2 References: https://bugzilla.suse.com/1183970

1 0

openSUSE-RU-2021:0591-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 22 Apr '21

22 Apr '21

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0591-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fwts fixes the following issues: Update to version 21.03.00: * See provided changelog for detailed list of changes This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-591=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): fwts-21.03.00-bp152.4.9.1 References:

1 0

openSUSE-RU-2021:0590-1: important: Recommended update for rmt-server
by maintenance＠opensuse.org 21 Apr '21

21 Apr '21

openSUSE Recommended Update: Recommended update for rmt-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0590-1 Rating: important References: #1179523 #1180018 #1182736 #1183615 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for rmt-server fixes the following issues: Update from version 2.6.5 to version 2.6.8 - Fixing wrong handling of `ids` starting with numeric characters. (bsc#1182736) - Clean out `subscriptions` table only if the replacement data is already available. (bsc#1183615) - Raise an error when there is an extension activated which has no migration successor (like LTSS). - Include installed modules to the solution tree when doing an offline migration. (bsc#1179523) - Do not raise an exception when mirroring if some information missing is in alpha or beta stage. (bsc#1180018) - Fix `rpath` build issues. - Add filter options for product listing and bash completion for new flags This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-590=1 Package List: - openSUSE Leap 15.2 (x86_64): rmt-server-2.6.8-lp152.2.6.1 rmt-server-config-2.6.8-lp152.2.6.1 rmt-server-debuginfo-2.6.8-lp152.2.6.1 rmt-server-debugsource-2.6.8-lp152.2.6.1 rmt-server-pubcloud-2.6.8-lp152.2.6.1 References: https://bugzilla.suse.com/1179523 https://bugzilla.suse.com/1180018 https://bugzilla.suse.com/1182736 https://bugzilla.suse.com/1183615

1 0

openSUSE-RU-2021:0585-1: moderate: Recommended update for numactl
by maintenance＠opensuse.org 19 Apr '21

19 Apr '21

openSUSE Recommended Update: Recommended update for numactl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0585-1 Rating: moderate References: #1133098 #1181571 #1183796 #955334 #976199 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for numactl fixes the following issues: - Enabled LTO (bsc#1133098) - Dropped the dependency from perl - it was no longer in use - Included sys/sysmacros.h to fix an issue when building this package from source (bsc#1181571, bsc#1183796) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-585=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libnuma-devel-2.0.14-lp152.5.3.1 libnuma1-2.0.14-lp152.5.3.1 libnuma1-debuginfo-2.0.14-lp152.5.3.1 numactl-2.0.14-lp152.5.3.1 numactl-debuginfo-2.0.14-lp152.5.3.1 numactl-debugsource-2.0.14-lp152.5.3.1 - openSUSE Leap 15.2 (x86_64): libnuma1-32bit-2.0.14-lp152.5.3.1 libnuma1-32bit-debuginfo-2.0.14-lp152.5.3.1 References: https://bugzilla.suse.com/1133098 https://bugzilla.suse.com/1181571 https://bugzilla.suse.com/1183796 https://bugzilla.suse.com/955334 https://bugzilla.suse.com/976199

1 0