May 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:0728-1: important: Security update for prosody
by opensuse-security＠opensuse.org 15 May '21

15 May '21

openSUSE Security Update: Security update for prosody ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0728-1 Rating: important References: #1186027 Cross-References: CVE-2021-32917 CVE-2021-32918 CVE-2021-32919 CVE-2021-32920 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for prosody fixes the following issues: prosody was updated to 0.11.9: Security: * mod_limits, prosody.cfg.lua: Enable rate limits by default * certmanager: Disable renegotiation by default * mod_proxy65: Restrict access to local c2s connections by default * util.startup: Set more aggressive defaults for GC * mod_c2s, mod_s2s, mod_component, mod_bosh, mod_websockets: Set default stanza size limits * mod_authinternal{plain,hashed}: Use constant-time string comparison for secrets * mod_dialback: Remove dialback-without-dialback feature * mod_dialback: Use constant-time comparison with hmac Minor changes: * util.hashes: Add constant-time string comparison (binding to CRYPTO_memcmp) * mod_c2s: Don��t throw errors in async code when connections are gone * mod_c2s: Fix traceback in session close when conn is nil * core.certmanager: Improve detection of LuaSec/OpenSSL capabilities * mod_saslauth: Use a defined SASL error * MUC: Add support for advertising muc#roomconfig_allowinvites in room disco#info * mod_saslauth: Don��t throw errors in async code when connections are gone * mod_pep: Advertise base pubsub feature (fixes #1632: mod_pep missing pubsub feature in disco) * prosodyctl check config: Add ��gc�� to list of global options * prosodyctl about: Report libexpat version if known * util.xmppstream: Add API to dynamically configure the stanza size limit for a stream * util.set: Add is_set() to test if an object is a set * mod_http: Skip IP resolution in non-proxied case * mod_c2s: Log about missing conn on async state changes * util.xmppstream: Reduce internal default xmppstream limit to 1MB Relevant: https://prosody.im/security/advisory_20210512 * boo#1186027: Prosody XMPP server advisory 2021-05-12 * CVE-2021-32919 * CVE-2021-32917 * CVE-2021-32917 * CVE-2021-32920 * CVE-2021-32918 Update to 0.11.8: Security: * mod_saslauth: Disable ��tls-unique�� channel binding with TLS 1.3 (#1542) Fixes and improvements: * net.websocket.frames: Improve websocket masking performance by using the new util.strbitop * util.strbitop: Library for efficient bitwise operations on strings Minor changes: * MUC: Correctly advertise whether the subject can be changed (#1155) * MUC: Preserve disco ��node�� attribute (or lack thereof) in responses (#1595) * MUC: Fix logic bug causing unnecessary presence to be sent (#1615) * mod_bosh: Fix error if client tries to connect to component (#425) * mod_bosh: Pick out the ��wait�� before checking it instead of earlier * mod_pep: Advertise base PubSub feature (#1632) * mod_pubsub: Fix notification stanza type setting (#1605) * mod_s2s: Prevent keepalives before client has established a stream * net.adns: Fix bug that sent empty DNS packets (#1619) * net.http.server: Don��t send Content-Length on 1xx/204 responses (#1596) * net.websocket.frames: Fix length calculation bug (#1598) * util.dbuffer: Make length API in line with Lua strings * util.dbuffer: Optimize substring operations * util.debug: Fix locals being reported under wrong stack frame in some cases * util.dependencies: Fix check for Lua bitwise operations library (#1594) * util.interpolation: Fix combination of filters and fallback values #1623 * util.promise: Preserve tracebacks * util.stanza: Reject ASCII control characters (#1606) * timers: Ensure timers can��t block other processing (#1620) Update to 0.11.7: Security: * mod_websocket: Enforce size limits on received frames (fixes #1593) Fixes and improvements: * mod_c2s, mod_s2s: Make stanza size limits configurable * Add configuration options to control Lua garbage collection parameters * net.http: Backport SNI support for outgoing HTTP requests (#409) * mod_websocket: Process all data in the buffer on close frame and connection errors (fixes #1474, #1234) * util.indexedbheap: Fix heap data structure corruption, causing some timers to fail after a reschedule (fixes #1572) Update to 0.11.6: Fixes and improvements: * mod_storage_internal: Fix error in time limited queries on items without ��when�� field, fixes #1557 * mod_carbons: Fix handling of incoming MUC PMs #1540 * mod_csi_simple: Consider XEP-0353: Jingle Message Initiation important * mod_http_files: Avoid using inode in etag, fixes #1498: Fail to download file on FreeBSD * mod_admin_telnet: Create a DNS resolver per console session (fixes #1492: Telnet console DNS commands reduced usefulness) * core.certmanager: Move EECDH ciphers before EDH in default cipherstring (fixes #1513) * mod_s2s: Escape invalid XML in loggin (same way as mod_c2s) (fixes #1574: Invalid XML input on s2s connection is logged unescaped) * mod_muc: Allow control over the server-admins-are-room-owners feature (see #1174) * mod_muc_mam: Remove spoofed archive IDs before archiving (fixes #1552: MUC MAM may strip its own archive id) * mod_muc_mam: Fix stanza id filter event name, fixes #1546: mod_muc_mam does not strip spoofed stanza ids * mod_muc_mam: Fix missing advertising of XEP-0359, fixes #1547: mod_muc_mam does not advertise stanza-id Minor changes: * net.http API: Add request:cancel() method * net.http API: Fix traceback on invalid URL passed to request() * MUC: Persist affiliation_data in new MUC format * mod_websocket: Fire event on session creation (thanks Aaron van Meerten) * MUC: Always include ��affiliation��/��role�� attributes, defaulting to ��none�� if nil * mod_tls: Log when certificates are (re)loaded * mod_vcard4: Report correct error condition (fixes #1521: mod_vcard4 reports wrong error) * net.http: Re-expose destroy_request() function (fixes unintentional API breakage) * net.http.server: Strip port from Host header in IPv6 friendly way (fix #1302) * util.prosodyctl: Tell prosody do daemonize via command line flag (fixes #1514) * SASL: Apply saslprep where necessary, fixes #1560: Login fails if password contains special chars * net.http.server: Fix reporting of missing Host header * util.datamanager API: Fix iterating over ��users�� (thanks marc0s) * net.resolvers.basic: Default conn_type to ��tcp�� consistently if unspecified (thanks marc0s) * mod_storage_sql: Fix check for deletion limits (fixes #1494) * mod_admin_telnet: Handle unavailable cipher info (fixes #1510: mod_admin_telnet backtrace) * Log warning when using prosodyctl start/stop/restart * core.certmanager: Look for privkey.pem to go with fullchain.pem (fixes #1526) * mod_storage_sql: Add index covering sort_id to improve performance (fixes #1505) * mod_mam,mod_muc_mam: Allow other work to be performed during archive cleanup (fixes #1504) * mod_muc_mam: Don��t strip MUC tags, fix #1567: MUC tags stripped by mod_muc_mam * mod_pubsub, mod_pep: Ensure correct number of children of (fixes #1496) * mod_register_ibr: Add FORM_TYPE as required by XEP-0077 (fixes #1511) * mod_muc_mam: Fix traceback saving message from non-occupant (fixes #1497) * util.startup: Remove duplicated initialization of logging (fix #1527: startup: Logging initialized twice) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-728=1 Package List: - openSUSE Leap 15.2 (x86_64): prosody-0.11.9-lp152.2.3.1 prosody-debuginfo-0.11.9-lp152.2.3.1 prosody-debugsource-0.11.9-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-32917.html https://www.suse.com/security/cve/CVE-2021-32918.html https://www.suse.com/security/cve/CVE-2021-32919.html https://www.suse.com/security/cve/CVE-2021-32920.html https://bugzilla.suse.com/1186027

1 0

openSUSE-RU-2021:0727-1: moderate: Recommended update for krb5
by maintenance＠opensuse.org 14 May '21

14 May '21

openSUSE Recommended Update: Recommended update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0727-1 Rating: moderate References: #1185163 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krb5 fixes the following issues: - Use '/run' instead of '/var/run' for daemon PID files. (bsc#1185163); This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-727=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): krb5-1.16.3-lp152.5.16.1 krb5-client-1.16.3-lp152.5.16.1 krb5-client-debuginfo-1.16.3-lp152.5.16.1 krb5-debuginfo-1.16.3-lp152.5.16.1 krb5-debugsource-1.16.3-lp152.5.16.1 krb5-devel-1.16.3-lp152.5.16.1 krb5-mini-1.16.3-lp152.5.16.1 krb5-mini-debuginfo-1.16.3-lp152.5.16.1 krb5-mini-debugsource-1.16.3-lp152.5.16.1 krb5-mini-devel-1.16.3-lp152.5.16.1 krb5-plugin-kdb-ldap-1.16.3-lp152.5.16.1 krb5-plugin-kdb-ldap-debuginfo-1.16.3-lp152.5.16.1 krb5-plugin-preauth-otp-1.16.3-lp152.5.16.1 krb5-plugin-preauth-otp-debuginfo-1.16.3-lp152.5.16.1 krb5-plugin-preauth-pkinit-1.16.3-lp152.5.16.1 krb5-plugin-preauth-pkinit-debuginfo-1.16.3-lp152.5.16.1 krb5-server-1.16.3-lp152.5.16.1 krb5-server-debuginfo-1.16.3-lp152.5.16.1 - openSUSE Leap 15.2 (x86_64): krb5-32bit-1.16.3-lp152.5.16.1 krb5-32bit-debuginfo-1.16.3-lp152.5.16.1 krb5-devel-32bit-1.16.3-lp152.5.16.1 References: https://bugzilla.suse.com/1185163

1 0

openSUSE-RU-2021:0726-1: moderate: Recommended update for the Azure SDK and CLI
by maintenance＠opensuse.org 14 May '21

14 May '21

openSUSE Recommended Update: Recommended update for the Azure SDK and CLI ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0726-1 Rating: moderate References: #1125671 #1140565 #1154393 #1174514 #1175289 #1176784 #1176785 #1178168 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 6 fixes is now available. Description: This update for the Azure SDK and CLI adds support for the AHB (Azure Hybrid Benefit). (bsc#1176784, jsc#ECO=3105) This update was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-726=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): python-aiohttp-debugsource-3.4.4-bp152.2.3.1 python-aiohttp-doc-3.4.4-bp152.2.3.1 python-brotlipy-debuginfo-0.7.0-bp152.6.3.1 python-brotlipy-debugsource-0.7.0-bp152.6.3.1 python-multidict-debugsource-4.5.2-bp152.2.3.1 python-yarl-debugsource-1.3.0-bp152.2.3.1 python2-brotlipy-0.7.0-bp152.6.3.1 python2-brotlipy-debuginfo-0.7.0-bp152.6.3.1 python3-aiohttp-3.4.4-bp152.2.3.1 python3-aiohttp-debuginfo-3.4.4-bp152.2.3.1 python3-brotlipy-0.7.0-bp152.6.3.1 python3-brotlipy-debuginfo-0.7.0-bp152.6.3.1 python3-multidict-4.5.2-bp152.2.3.1 python3-multidict-debuginfo-4.5.2-bp152.2.3.1 python3-yarl-1.3.0-bp152.2.3.1 python3-yarl-debuginfo-1.3.0-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): python2-Fabric-2.5.0-bp152.4.3.1 python2-aiohttp-theme-0.1.4-bp152.2.3.1 python2-blockdiag-1.5.3-bp152.3.3.1 python2-fluidity-sm-0.2.0-bp152.4.3.1 python2-funcparserlib-0.3.6+repack-bp152.5.3.1 python2-invoke-1.3.0-bp152.2.3.1 python2-jsondiff-1.2.0-bp152.2.1 python2-lexicon-1.0.0-bp152.5.3.1 python2-pytest-timeout-1.3.3-bp152.2.3.1 python2-spec-1.4.1-bp152.5.3.1 python2-sphinxcontrib-asyncio-0.2.0-bp152.5.3.1 python2-sphinxcontrib-blockdiag-1.5.5-bp152.5.3.1 python2-sphinxcontrib-newsfeed-0.1.4-bp152.5.3.1 python2-vcrpy-2.1.1-bp152.2.3.1 python2-webcolors-1.7-bp152.3.3.1 python3-Fabric-2.5.0-bp152.4.3.1 python3-aiohttp-theme-0.1.4-bp152.2.3.1 python3-async_generator-1.9-bp152.2.3.1 python3-async_timeout-3.0.0-bp152.4.3.1 python3-blockdiag-1.5.3-bp152.3.3.1 python3-fluidity-sm-0.2.0-bp152.4.3.1 python3-funcparserlib-0.3.6+repack-bp152.5.3.1 python3-idna_ssl-1.0.0-bp152.2.3.1 python3-invoke-1.3.0-bp152.2.3.1 python3-jsondiff-1.2.0-bp152.2.1 python3-lexicon-1.0.0-bp152.5.3.1 python3-pytest-timeout-1.3.3-bp152.2.3.1 python3-spec-1.4.1-bp152.5.3.1 python3-sphinxcontrib-asyncio-0.2.0-bp152.5.3.1 python3-sphinxcontrib-blockdiag-1.5.5-bp152.5.3.1 python3-sphinxcontrib-newsfeed-0.1.4-bp152.5.3.1 python3-vcrpy-2.1.1-bp152.2.3.1 python3-webcolors-1.7-bp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-14343.html https://www.suse.com/security/cve/CVE-2020-25659.html https://bugzilla.suse.com/1125671 https://bugzilla.suse.com/1140565 https://bugzilla.suse.com/1154393 https://bugzilla.suse.com/1174514 https://bugzilla.suse.com/1175289 https://bugzilla.suse.com/1176784 https://bugzilla.suse.com/1176785 https://bugzilla.suse.com/1178168

1 0

openSUSE-RU-2021:0725-1: moderate: Recommended update for amazon-ecs-init
by maintenance＠opensuse.org 14 May '21

14 May '21

openSUSE Recommended Update: Recommended update for amazon-ecs-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0725-1 Rating: moderate References: #1182343 #1182344 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for amazon-ecs-init contains the following fixes: - Fix for an issue where no restart happens when ECS Agent exits with exit code 5 (bsc#1182343, bsc#1182344) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-725=1 Package List: - openSUSE Leap 15.2 (x86_64): amazon-ecs-init-1.50.1-lp152.4.3.1 References: https://bugzilla.suse.com/1182343 https://bugzilla.suse.com/1182344

1 0

openSUSE-SU-2021:0723-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 14 May '21

14 May '21

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0723-1 Rating: important References: #1182918 Cross-References: CVE-2021-2145 CVE-2021-2250 CVE-2021-2264 CVE-2021-2266 CVE-2021-2279 CVE-2021-2280 CVE-2021-2281 CVE-2021-2282 CVE-2021-2283 CVE-2021-2284 CVE-2021-2285 CVE-2021-2286 CVE-2021-2287 CVE-2021-2291 CVE-2021-2296 CVE-2021-2297 CVE-2021-2306 CVE-2021-2309 CVE-2021-2310 CVE-2021-2312 CVSS scores: CVE-2021-2145 (NVD) : 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-2250 (NVD) : 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-2264 (NVD) : 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N CVE-2021-2266 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2021-2279 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-2280 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2281 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2021-2282 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2283 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2284 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2021-2285 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2286 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2021-2287 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2291 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-2296 (NVD) : 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2021-2297 (NVD) : 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2021-2306 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2021-2309 (NVD) : 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-2310 (NVD) : 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-2312 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. Description: This update for virtualbox fixes the following issues: virtualbox was updated to 6.1.22 (released April 29 2021 by Oracle) This is a maintenance release. The following items were fixed and/or added: - VMM: Improved performance of 64-bit Windows and Solaris guests when Hyper-V is used on recent Windows 10 hosts - VMM: Fixed frequent crashes of 64-bit Windows Vista and Server 2003 guests when Hyper-V is used - GUI: Fixed regression where user was not able to save unset default shortcuts (bug #20305) - Storage: Fixed regression in LsiLogic SAS controller emulation caused VM crash (bug #20323) - Linux Guest Additions: Fixed issue when it was not possible to run executables from mounted share (bug #20320) - Fixes for CVE-2021-2145 CVE-2021-2250 CVE-2021-2264 CVE-2021-2266 CVE-2021-2279 CVE-2021-2280 CVE-2021-2281 CVE-2021-2282 CVE-2021-2283 CVE-2021-2284 CVE-2021-2285 CVE-2021-2286 CVE-2021-2287 CVE-2021-2291 CVE-2021-2296 CVE-2021-2297 CVE-2021-2306 CVE-2021-2309 CVE-2021-2310 CVE-2021-2312 - Version bump to (released April 20 2021 by Oracle) File "virtualbox-kmp-files-leap" is deleted. - Use distconfdir for xinitrc.d files on TW - Improve autostart security boo#1182918. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-723=1 Package List: - openSUSE Leap 15.2 (noarch): virtualbox-guest-desktop-icons-6.1.22-lp152.2.24.2 virtualbox-guest-source-6.1.22-lp152.2.24.2 virtualbox-host-source-6.1.22-lp152.2.24.2 - openSUSE Leap 15.2 (x86_64): python3-virtualbox-6.1.22-lp152.2.24.2 python3-virtualbox-debuginfo-6.1.22-lp152.2.24.2 virtualbox-6.1.22-lp152.2.24.2 virtualbox-debuginfo-6.1.22-lp152.2.24.2 virtualbox-debugsource-6.1.22-lp152.2.24.2 virtualbox-devel-6.1.22-lp152.2.24.2 virtualbox-guest-tools-6.1.22-lp152.2.24.2 virtualbox-guest-tools-debuginfo-6.1.22-lp152.2.24.2 virtualbox-guest-x11-6.1.22-lp152.2.24.2 virtualbox-guest-x11-debuginfo-6.1.22-lp152.2.24.2 virtualbox-kmp-debugsource-6.1.22-lp152.2.24.2 virtualbox-kmp-default-6.1.22_k5.3.18_lp152.75-lp152.2.24.2 virtualbox-kmp-default-debuginfo-6.1.22_k5.3.18_lp152.75-lp152.2.24.2 virtualbox-kmp-preempt-6.1.22_k5.3.18_lp152.75-lp152.2.24.2 virtualbox-kmp-preempt-debuginfo-6.1.22_k5.3.18_lp152.75-lp152.2.24.2 virtualbox-qt-6.1.22-lp152.2.24.2 virtualbox-qt-debuginfo-6.1.22-lp152.2.24.2 virtualbox-vnc-6.1.22-lp152.2.24.2 virtualbox-websrv-6.1.22-lp152.2.24.2 virtualbox-websrv-debuginfo-6.1.22-lp152.2.24.2 References: https://www.suse.com/security/cve/CVE-2021-2145.html https://www.suse.com/security/cve/CVE-2021-2250.html https://www.suse.com/security/cve/CVE-2021-2264.html https://www.suse.com/security/cve/CVE-2021-2266.html https://www.suse.com/security/cve/CVE-2021-2279.html https://www.suse.com/security/cve/CVE-2021-2280.html https://www.suse.com/security/cve/CVE-2021-2281.html https://www.suse.com/security/cve/CVE-2021-2282.html https://www.suse.com/security/cve/CVE-2021-2283.html https://www.suse.com/security/cve/CVE-2021-2284.html https://www.suse.com/security/cve/CVE-2021-2285.html https://www.suse.com/security/cve/CVE-2021-2286.html https://www.suse.com/security/cve/CVE-2021-2287.html https://www.suse.com/security/cve/CVE-2021-2291.html https://www.suse.com/security/cve/CVE-2021-2296.html https://www.suse.com/security/cve/CVE-2021-2297.html https://www.suse.com/security/cve/CVE-2021-2306.html https://www.suse.com/security/cve/CVE-2021-2309.html https://www.suse.com/security/cve/CVE-2021-2310.html https://www.suse.com/security/cve/CVE-2021-2312.html https://bugzilla.suse.com/1182918

1 0

openSUSE-SU-2021:0724-1: Security update for drbd-utils
by opensuse-security＠opensuse.org 14 May '21

14 May '21

openSUSE Security Update: Security update for drbd-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0724-1 Rating: low References: #1185132 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for drbd-utils fixes the following issues: - make all binaries in position independent (bsc#1185132). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-724=1 Package List: - openSUSE Leap 15.2 (x86_64): drbd-utils-9.13.0-lp152.2.12.1 drbd-utils-debuginfo-9.13.0-lp152.2.12.1 drbd-utils-debugsource-9.13.0-lp152.2.12.1 References: https://bugzilla.suse.com/1185132

1 0

openSUSE-RU-2021:0722-1: Recommended update for gdm
by maintenance＠opensuse.org 14 May '21

14 May '21

openSUSE Recommended Update: Recommended update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0722-1 Rating: low References: #1185146 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gdm fixes the following issues: - Removed deprecated StandardOutput=syslog in gdm.service file (bsc#1185146) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-722=1 Package List: - openSUSE Leap 15.2 (noarch): gdm-branding-upstream-3.34.1-lp152.6.18.1 gdm-lang-3.34.1-lp152.6.18.1 gdm-systemd-3.34.1-lp152.6.18.1 gdmflexiserver-3.34.1-lp152.6.18.1 - openSUSE Leap 15.2 (x86_64): gdm-3.34.1-lp152.6.18.1 gdm-debuginfo-3.34.1-lp152.6.18.1 gdm-debugsource-3.34.1-lp152.6.18.1 gdm-devel-3.34.1-lp152.6.18.1 libgdm1-3.34.1-lp152.6.18.1 libgdm1-debuginfo-3.34.1-lp152.6.18.1 typelib-1_0-Gdm-1_0-3.34.1-lp152.6.18.1 References: https://bugzilla.suse.com/1185146

1 0

openSUSE-RU-2021:0721-1: moderate: Recommended update for strongswan
by maintenance＠opensuse.org 14 May '21

14 May '21

openSUSE Recommended Update: Recommended update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0721-1 Rating: moderate References: #1185363 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for strongswan fixes the following issues: - Added support for AES CCM aead algorithms to openssl plugin (bsc#1185363) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-721=1 Package List: - openSUSE Leap 15.2 (noarch): strongswan-doc-5.8.2-lp152.2.9.1 - openSUSE Leap 15.2 (x86_64): strongswan-5.8.2-lp152.2.9.1 strongswan-debuginfo-5.8.2-lp152.2.9.1 strongswan-debugsource-5.8.2-lp152.2.9.1 strongswan-hmac-5.8.2-lp152.2.9.1 strongswan-ipsec-5.8.2-lp152.2.9.1 strongswan-ipsec-debuginfo-5.8.2-lp152.2.9.1 strongswan-libs0-5.8.2-lp152.2.9.1 strongswan-libs0-debuginfo-5.8.2-lp152.2.9.1 strongswan-mysql-5.8.2-lp152.2.9.1 strongswan-mysql-debuginfo-5.8.2-lp152.2.9.1 strongswan-nm-5.8.2-lp152.2.9.1 strongswan-nm-debuginfo-5.8.2-lp152.2.9.1 strongswan-sqlite-5.8.2-lp152.2.9.1 strongswan-sqlite-debuginfo-5.8.2-lp152.2.9.1 References: https://bugzilla.suse.com/1185363

1 0

openSUSE-RU-2021:0720-1: important: Recommended update for libreoffice
by maintenance＠opensuse.org 13 May '21

13 May '21

openSUSE Recommended Update: Recommended update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0720-1 Rating: important References: #1182970 #1184527 #1184596 #1184961 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for libreoffice fixes the following issues: Update from version 7.1.2.2 to version 7.1.3.2 - Fix a potential dataloss in LibreOffice Math. (bsc#1184961, bsc#1184527) The issue occurred only while trying to close the document via shortcuts. In this case LibreOffice Math was closed without asking to save the document. - Install `qt5 plugin` only when the desktop environment needs it. (bsc#1184596) Updated libreoffice to version 7.1.2.2 * Import graphics cropped into custom geometry as custom shapes (bsc#1182970) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-720=1 Package List: - openSUSE Leap 15.2 (noarch): libreoffice-branding-upstream-7.1.3.2-lp152.2.10.1 libreoffice-gdb-pretty-printers-7.1.3.2-lp152.2.10.1 libreoffice-glade-7.1.3.2-lp152.2.10.1 libreoffice-icon-themes-7.1.3.2-lp152.2.10.1 libreoffice-l10n-af-7.1.3.2-lp152.2.10.1 libreoffice-l10n-am-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ar-7.1.3.2-lp152.2.10.1 libreoffice-l10n-as-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ast-7.1.3.2-lp152.2.10.1 libreoffice-l10n-be-7.1.3.2-lp152.2.10.1 libreoffice-l10n-bg-7.1.3.2-lp152.2.10.1 libreoffice-l10n-bn-7.1.3.2-lp152.2.10.1 libreoffice-l10n-bn_IN-7.1.3.2-lp152.2.10.1 libreoffice-l10n-bo-7.1.3.2-lp152.2.10.1 libreoffice-l10n-br-7.1.3.2-lp152.2.10.1 libreoffice-l10n-brx-7.1.3.2-lp152.2.10.1 libreoffice-l10n-bs-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ca-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ca_valencia-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ckb-7.1.3.2-lp152.2.10.1 libreoffice-l10n-cs-7.1.3.2-lp152.2.10.1 libreoffice-l10n-cy-7.1.3.2-lp152.2.10.1 libreoffice-l10n-da-7.1.3.2-lp152.2.10.1 libreoffice-l10n-de-7.1.3.2-lp152.2.10.1 libreoffice-l10n-dgo-7.1.3.2-lp152.2.10.1 libreoffice-l10n-dsb-7.1.3.2-lp152.2.10.1 libreoffice-l10n-dz-7.1.3.2-lp152.2.10.1 libreoffice-l10n-el-7.1.3.2-lp152.2.10.1 libreoffice-l10n-en-7.1.3.2-lp152.2.10.1 libreoffice-l10n-en_GB-7.1.3.2-lp152.2.10.1 libreoffice-l10n-en_ZA-7.1.3.2-lp152.2.10.1 libreoffice-l10n-eo-7.1.3.2-lp152.2.10.1 libreoffice-l10n-es-7.1.3.2-lp152.2.10.1 libreoffice-l10n-et-7.1.3.2-lp152.2.10.1 libreoffice-l10n-eu-7.1.3.2-lp152.2.10.1 libreoffice-l10n-fa-7.1.3.2-lp152.2.10.1 libreoffice-l10n-fi-7.1.3.2-lp152.2.10.1 libreoffice-l10n-fr-7.1.3.2-lp152.2.10.1 libreoffice-l10n-fur-7.1.3.2-lp152.2.10.1 libreoffice-l10n-fy-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ga-7.1.3.2-lp152.2.10.1 libreoffice-l10n-gd-7.1.3.2-lp152.2.10.1 libreoffice-l10n-gl-7.1.3.2-lp152.2.10.1 libreoffice-l10n-gu-7.1.3.2-lp152.2.10.1 libreoffice-l10n-gug-7.1.3.2-lp152.2.10.1 libreoffice-l10n-he-7.1.3.2-lp152.2.10.1 libreoffice-l10n-hi-7.1.3.2-lp152.2.10.1 libreoffice-l10n-hr-7.1.3.2-lp152.2.10.1 libreoffice-l10n-hsb-7.1.3.2-lp152.2.10.1 libreoffice-l10n-hu-7.1.3.2-lp152.2.10.1 libreoffice-l10n-id-7.1.3.2-lp152.2.10.1 libreoffice-l10n-is-7.1.3.2-lp152.2.10.1 libreoffice-l10n-it-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ja-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ka-7.1.3.2-lp152.2.10.1 libreoffice-l10n-kab-7.1.3.2-lp152.2.10.1 libreoffice-l10n-kk-7.1.3.2-lp152.2.10.1 libreoffice-l10n-km-7.1.3.2-lp152.2.10.1 libreoffice-l10n-kmr_Latn-7.1.3.2-lp152.2.10.1 libreoffice-l10n-kn-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ko-7.1.3.2-lp152.2.10.1 libreoffice-l10n-kok-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ks-7.1.3.2-lp152.2.10.1 libreoffice-l10n-lb-7.1.3.2-lp152.2.10.1 libreoffice-l10n-lo-7.1.3.2-lp152.2.10.1 libreoffice-l10n-lt-7.1.3.2-lp152.2.10.1 libreoffice-l10n-lv-7.1.3.2-lp152.2.10.1 libreoffice-l10n-mai-7.1.3.2-lp152.2.10.1 libreoffice-l10n-mk-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ml-7.1.3.2-lp152.2.10.1 libreoffice-l10n-mn-7.1.3.2-lp152.2.10.1 libreoffice-l10n-mni-7.1.3.2-lp152.2.10.1 libreoffice-l10n-mr-7.1.3.2-lp152.2.10.1 libreoffice-l10n-my-7.1.3.2-lp152.2.10.1 libreoffice-l10n-nb-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ne-7.1.3.2-lp152.2.10.1 libreoffice-l10n-nl-7.1.3.2-lp152.2.10.1 libreoffice-l10n-nn-7.1.3.2-lp152.2.10.1 libreoffice-l10n-nr-7.1.3.2-lp152.2.10.1 libreoffice-l10n-nso-7.1.3.2-lp152.2.10.1 libreoffice-l10n-oc-7.1.3.2-lp152.2.10.1 libreoffice-l10n-om-7.1.3.2-lp152.2.10.1 libreoffice-l10n-or-7.1.3.2-lp152.2.10.1 libreoffice-l10n-pa-7.1.3.2-lp152.2.10.1 libreoffice-l10n-pl-7.1.3.2-lp152.2.10.1 libreoffice-l10n-pt_BR-7.1.3.2-lp152.2.10.1 libreoffice-l10n-pt_PT-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ro-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ru-7.1.3.2-lp152.2.10.1 libreoffice-l10n-rw-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sa_IN-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sat-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sd-7.1.3.2-lp152.2.10.1 libreoffice-l10n-si-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sid-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sk-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sl-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sq-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sr-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ss-7.1.3.2-lp152.2.10.1 libreoffice-l10n-st-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sv-7.1.3.2-lp152.2.10.1 libreoffice-l10n-sw_TZ-7.1.3.2-lp152.2.10.1 libreoffice-l10n-szl-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ta-7.1.3.2-lp152.2.10.1 libreoffice-l10n-te-7.1.3.2-lp152.2.10.1 libreoffice-l10n-tg-7.1.3.2-lp152.2.10.1 libreoffice-l10n-th-7.1.3.2-lp152.2.10.1 libreoffice-l10n-tn-7.1.3.2-lp152.2.10.1 libreoffice-l10n-tr-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ts-7.1.3.2-lp152.2.10.1 libreoffice-l10n-tt-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ug-7.1.3.2-lp152.2.10.1 libreoffice-l10n-uk-7.1.3.2-lp152.2.10.1 libreoffice-l10n-uz-7.1.3.2-lp152.2.10.1 libreoffice-l10n-ve-7.1.3.2-lp152.2.10.1 libreoffice-l10n-vec-7.1.3.2-lp152.2.10.1 libreoffice-l10n-vi-7.1.3.2-lp152.2.10.1 libreoffice-l10n-xh-7.1.3.2-lp152.2.10.1 libreoffice-l10n-zh_CN-7.1.3.2-lp152.2.10.1 libreoffice-l10n-zh_TW-7.1.3.2-lp152.2.10.1 libreoffice-l10n-zu-7.1.3.2-lp152.2.10.1 - openSUSE Leap 15.2 (x86_64): libreoffice-7.1.3.2-lp152.2.10.1 libreoffice-base-7.1.3.2-lp152.2.10.1 libreoffice-base-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-base-drivers-postgresql-7.1.3.2-lp152.2.10.1 libreoffice-base-drivers-postgresql-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-calc-7.1.3.2-lp152.2.10.1 libreoffice-calc-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-calc-extensions-7.1.3.2-lp152.2.10.1 libreoffice-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-debugsource-7.1.3.2-lp152.2.10.1 libreoffice-draw-7.1.3.2-lp152.2.10.1 libreoffice-draw-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-filters-optional-7.1.3.2-lp152.2.10.1 libreoffice-gnome-7.1.3.2-lp152.2.10.1 libreoffice-gnome-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-gtk3-7.1.3.2-lp152.2.10.1 libreoffice-gtk3-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-impress-7.1.3.2-lp152.2.10.1 libreoffice-impress-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-librelogo-7.1.3.2-lp152.2.10.1 libreoffice-mailmerge-7.1.3.2-lp152.2.10.1 libreoffice-math-7.1.3.2-lp152.2.10.1 libreoffice-math-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-officebean-7.1.3.2-lp152.2.10.1 libreoffice-officebean-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-pyuno-7.1.3.2-lp152.2.10.1 libreoffice-pyuno-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-qt5-7.1.3.2-lp152.2.10.1 libreoffice-qt5-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-sdk-7.1.3.2-lp152.2.10.1 libreoffice-sdk-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-sdk-doc-7.1.3.2-lp152.2.10.1 libreoffice-writer-7.1.3.2-lp152.2.10.1 libreoffice-writer-debuginfo-7.1.3.2-lp152.2.10.1 libreoffice-writer-extensions-7.1.3.2-lp152.2.10.1 libreofficekit-7.1.3.2-lp152.2.10.1 libreofficekit-devel-7.1.3.2-lp152.2.10.1 References: https://bugzilla.suse.com/1182970 https://bugzilla.suse.com/1184527 https://bugzilla.suse.com/1184596 https://bugzilla.suse.com/1184961

1 0

openSUSE-SU-2021:0719-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 13 May '21

13 May '21

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0719-1 Rating: important References: #1184606 #1185055 #1185056 Cross-References: CVE-2021-2161 CVE-2021-2163 CVSS scores: CVE-2021-2161 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-2161 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-2163 (NVD) : 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-2163 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.11+9 (April 2021 CPU) * CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055) * CVE-2021-2161: Fixed incorrect handling of partially quoted arguments in ProcessBuilder (bsc#1185056) - moved mozilla-nss dependency to java-11-openjdk-headless package, this is necessary to be able to do crypto with just java-11-openjdk-headless installed (bsc#1184606). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-719=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): java-11-openjdk-11.0.11.0-lp152.2.12.1 java-11-openjdk-accessibility-11.0.11.0-lp152.2.12.1 java-11-openjdk-accessibility-debuginfo-11.0.11.0-lp152.2.12.1 java-11-openjdk-debuginfo-11.0.11.0-lp152.2.12.1 java-11-openjdk-debugsource-11.0.11.0-lp152.2.12.1 java-11-openjdk-demo-11.0.11.0-lp152.2.12.1 java-11-openjdk-devel-11.0.11.0-lp152.2.12.1 java-11-openjdk-headless-11.0.11.0-lp152.2.12.1 java-11-openjdk-jmods-11.0.11.0-lp152.2.12.1 java-11-openjdk-src-11.0.11.0-lp152.2.12.1 - openSUSE Leap 15.2 (noarch): java-11-openjdk-javadoc-11.0.11.0-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2021-2161.html https://www.suse.com/security/cve/CVE-2021-2163.html https://bugzilla.suse.com/1184606 https://bugzilla.suse.com/1185055 https://bugzilla.suse.com/1185056

1 0