May 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:0668-1: important: Security update for bind
by opensuse-security＠opensuse.org 04 May '21

04 May '21

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0668-1 Rating: important References: #1183453 #1185345 Cross-References: CVE-2021-25214 CVE-2021-25215 CVSS scores: CVE-2021-25214 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-25215 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for bind fixes the following issues: - CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345). - CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that required the DNAME to be processed to resolve itself (bsc#1185345). - make /usr/bin/delv in bind-tools position independent (bsc#1183453). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-668=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): bind-9.16.6-lp152.14.19.1 bind-chrootenv-9.16.6-lp152.14.19.1 bind-debuginfo-9.16.6-lp152.14.19.1 bind-debugsource-9.16.6-lp152.14.19.1 bind-devel-9.16.6-lp152.14.19.1 bind-utils-9.16.6-lp152.14.19.1 bind-utils-debuginfo-9.16.6-lp152.14.19.1 libbind9-1600-9.16.6-lp152.14.19.1 libbind9-1600-debuginfo-9.16.6-lp152.14.19.1 libdns1605-9.16.6-lp152.14.19.1 libdns1605-debuginfo-9.16.6-lp152.14.19.1 libirs-devel-9.16.6-lp152.14.19.1 libirs1601-9.16.6-lp152.14.19.1 libirs1601-debuginfo-9.16.6-lp152.14.19.1 libisc1606-9.16.6-lp152.14.19.1 libisc1606-debuginfo-9.16.6-lp152.14.19.1 libisccc1600-9.16.6-lp152.14.19.1 libisccc1600-debuginfo-9.16.6-lp152.14.19.1 libisccfg1600-9.16.6-lp152.14.19.1 libisccfg1600-debuginfo-9.16.6-lp152.14.19.1 libns1604-9.16.6-lp152.14.19.1 libns1604-debuginfo-9.16.6-lp152.14.19.1 - openSUSE Leap 15.2 (noarch): bind-doc-9.16.6-lp152.14.19.1 python3-bind-9.16.6-lp152.14.19.1 - openSUSE Leap 15.2 (x86_64): bind-devel-32bit-9.16.6-lp152.14.19.1 libbind9-1600-32bit-9.16.6-lp152.14.19.1 libbind9-1600-32bit-debuginfo-9.16.6-lp152.14.19.1 libdns1605-32bit-9.16.6-lp152.14.19.1 libdns1605-32bit-debuginfo-9.16.6-lp152.14.19.1 libirs1601-32bit-9.16.6-lp152.14.19.1 libirs1601-32bit-debuginfo-9.16.6-lp152.14.19.1 libisc1606-32bit-9.16.6-lp152.14.19.1 libisc1606-32bit-debuginfo-9.16.6-lp152.14.19.1 libisccc1600-32bit-9.16.6-lp152.14.19.1 libisccc1600-32bit-debuginfo-9.16.6-lp152.14.19.1 libisccfg1600-32bit-9.16.6-lp152.14.19.1 libisccfg1600-32bit-debuginfo-9.16.6-lp152.14.19.1 libns1604-32bit-9.16.6-lp152.14.19.1 libns1604-32bit-debuginfo-9.16.6-lp152.14.19.1 References: https://www.suse.com/security/cve/CVE-2021-25214.html https://www.suse.com/security/cve/CVE-2021-25215.html https://bugzilla.suse.com/1183453 https://bugzilla.suse.com/1185345

1 0

openSUSE-SU-2021:0664-1: important: Security update for gsoap
by opensuse-security＠opensuse.org 04 May '21

04 May '21

openSUSE Security Update: Security update for gsoap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0664-1 Rating: important References: #1182098 Cross-References: CVE-2020-13576 CVSS scores: CVE-2020-13576 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gsoap fixes the following issues: - CVE-2020-13576: Fixed a remote code execution via specially crafted SOAP request inside the WS-Addressing plugin (boo#1182098) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-664=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): gsoap-devel-2.8.102-bp152.2.4.1 libgsoap-2_8_102-2.8.102-bp152.2.4.1 - openSUSE Backports SLE-15-SP2 (noarch): gsoap-doc-2.8.102-bp152.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-13576.html https://bugzilla.suse.com/1182098

1 0

openSUSE-RU-2021:0667-1: moderate: Recommended update for librepo
by maintenance＠opensuse.org 04 May '21

04 May '21

openSUSE Recommended Update: Recommended update for librepo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0667-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for librepo fixes the following issues: - Updated librepo to version 1.13.0 * Dropped support for python2 * Fixed a memory leak * Support was added for pkcs11 certificate and key for repository authorization * Fixed a bug where the cpu consumption went up to 100% * Added support when working with certificates used in combination with a proxy This update was imported from the SUSE:SLE-15-SP2:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-667=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): librepo-devel-1.13.0-bp152.2.9.1 librepo0-1.13.0-bp152.2.9.1 python3-librepo-1.13.0-bp152.2.9.1 References:

1 0

openSUSE-RU-2021:0663-1: moderate: Recommended update for scap-security-guide
by maintenance＠opensuse.org 03 May '21

03 May '21

openSUSE Recommended Update: Recommended update for scap-security-guide ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0663-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for scap-security-guide fixes the following issues: This update ships the ComplianceAsCode build version 0.1.55+git containing the following supported file: - SCAP STIG automation for SUSE Linux Enterprise 12 (SUSE supplied, more rules added compared to 0.1.54) - SCAP STIG automation for SUSE Linux Enterprise 15 (SUSE supplied, new, first rules added) - CIS automation for SUSE Linux Enterprise 15 (community supplied) It can be evaluated using "oscap" from "openscap-utils", e.g. by doing on SUSE Linux Enterprise 12: - oscap xccdf eval --profile stig /usr/share/xml/scap/ssg/content/ssg-sle12-ds.xml On SUSE Linux Enterprise 15: - oscap xccdf eval --profile stig /usr/share/xml/scap/ssg/content/ssg-sle15-ds.xml or the community supplied CIS on SUSE Linux Enterprise 15: - oscap xccdf eval --profile cis /usr/share/xml/scap/ssg/content/ssg-sle15-ds.xml More content will be added in future updates. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-663=1 Package List: - openSUSE Leap 15.2 (noarch): scap-security-guide-0.1.55git20210323-lp152.8.1 scap-security-guide-debian-0.1.55git20210323-lp152.8.1 scap-security-guide-redhat-0.1.55git20210323-lp152.8.1 scap-security-guide-ubuntu-0.1.55git20210323-lp152.8.1 References:

1 0

openSUSE-RU-2021:0661-1: moderate: Recommended update for dhcp
by maintenance＠opensuse.org 03 May '21

03 May '21

openSUSE Recommended Update: Recommended update for dhcp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0661-1 Rating: moderate References: #1185157 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dhcp fixes the following issues: - Use '/run' instead of '/var/run' for PIDFile in 'dhcrelay.service'. (bsc#1185157) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-661=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dhcp-4.3.5-lp152.8.3.1 dhcp-client-4.3.5-lp152.8.3.1 dhcp-client-debuginfo-4.3.5-lp152.8.3.1 dhcp-debuginfo-4.3.5-lp152.8.3.1 dhcp-debugsource-4.3.5-lp152.8.3.1 dhcp-devel-4.3.5-lp152.8.3.1 dhcp-doc-4.3.5-lp152.8.3.1 dhcp-relay-4.3.5-lp152.8.3.1 dhcp-relay-debuginfo-4.3.5-lp152.8.3.1 dhcp-server-4.3.5-lp152.8.3.1 dhcp-server-debuginfo-4.3.5-lp152.8.3.1 References: https://bugzilla.suse.com/1185157

1 0

openSUSE-RU-2021:0662-1: moderate: Recommended update for pidentd
by maintenance＠opensuse.org 03 May '21

03 May '21

openSUSE Recommended Update: Recommended update for pidentd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0662-1 Rating: moderate References: #1185070 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pidentd fixes the following issues: - Use '/run' instead of '/var/run'. (bsc#1185070) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-662=1 Package List: - openSUSE Leap 15.2 (x86_64): pidentd-3.0.19-lp152.6.3.1 pidentd-debuginfo-3.0.19-lp152.6.3.1 pidentd-debugsource-3.0.19-lp152.6.3.1 References: https://bugzilla.suse.com/1185070

1 0

openSUSE-RU-2021:0660-1: moderate: Recommended update for libsolv
by maintenance＠opensuse.org 02 May '21

02 May '21

openSUSE Recommended Update: Recommended update for libsolv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0660-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for libsolv fixes the following issues: - Fix rare segfault in resolve_jobrules() that could happen if new rules are learnt. - Fix a couple of memory leaks in error cases. - Fix error handling in solv_xfopen_fd() - Fixed 'regex' code on win32. - Fixed memory leak in choice rule generation This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-660=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsolv-debuginfo-0.7.19-lp152.2.19.1 libsolv-debugsource-0.7.19-lp152.2.19.1 libsolv-demo-0.7.19-lp152.2.19.1 libsolv-demo-debuginfo-0.7.19-lp152.2.19.1 libsolv-devel-0.7.19-lp152.2.19.1 libsolv-devel-debuginfo-0.7.19-lp152.2.19.1 libsolv-tools-0.7.19-lp152.2.19.1 libsolv-tools-debuginfo-0.7.19-lp152.2.19.1 libzypp-17.25.8-lp152.2.25.1 libzypp-debuginfo-17.25.8-lp152.2.25.1 libzypp-debugsource-17.25.8-lp152.2.25.1 libzypp-devel-17.25.8-lp152.2.25.1 libzypp-devel-doc-17.25.8-lp152.2.25.1 perl-solv-0.7.19-lp152.2.19.1 perl-solv-debuginfo-0.7.19-lp152.2.19.1 python-solv-0.7.19-lp152.2.19.1 python-solv-debuginfo-0.7.19-lp152.2.19.1 python3-solv-0.7.19-lp152.2.19.1 python3-solv-debuginfo-0.7.19-lp152.2.19.1 ruby-solv-0.7.19-lp152.2.19.1 ruby-solv-debuginfo-0.7.19-lp152.2.19.1 References:

1 0

openSUSE-OU-2021:0659-1: Optional update for tcpdump
by maintenance＠opensuse.org 02 May '21

02 May '21

openSUSE Optional Update: Optional update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-OU-2021:0659-1 Rating: low References: #1183800 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for tcpdump fixes the following issues: - Disabled five regression tests that fail with libpcap > 1.8.1 (bsc#1183800) This patch does not fix any user visible issues and is therefore optional to install. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-659=1 Package List: - openSUSE Leap 15.2 (x86_64): tcpdump-4.9.2-lp152.7.6.1 tcpdump-debuginfo-4.9.2-lp152.7.6.1 tcpdump-debugsource-4.9.2-lp152.7.6.1 References: https://bugzilla.suse.com/1183800

1 0

openSUSE-RU-2021:0655-1: moderate: Recommended update for openslp
by maintenance＠opensuse.org 02 May '21

02 May '21

openSUSE Recommended Update: Recommended update for openslp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0655-1 Rating: moderate References: #1166637 #1184008 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openslp fixes the following issues: - Added automated active discovery retries so that DAs do not get dropped, if they are not reachable for some time (bsc#1166637, bsc#1184008) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-655=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): openslp-2.0.0-lp152.11.3.1 openslp-debuginfo-2.0.0-lp152.11.3.1 openslp-debugsource-2.0.0-lp152.11.3.1 openslp-devel-2.0.0-lp152.11.3.1 openslp-server-2.0.0-lp152.11.3.1 openslp-server-debuginfo-2.0.0-lp152.11.3.1 - openSUSE Leap 15.2 (x86_64): openslp-32bit-2.0.0-lp152.11.3.1 openslp-32bit-debuginfo-2.0.0-lp152.11.3.1 References: https://bugzilla.suse.com/1166637 https://bugzilla.suse.com/1184008

1 0

openSUSE-RU-2021:0658-1: moderate: Recommended update for ntp
by maintenance＠opensuse.org 02 May '21

02 May '21

openSUSE Recommended Update: Recommended update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0658-1 Rating: moderate References: #1185171 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ntp fixes the following issues: - Use '/run' instead of '/var/run' for PIDFile in 'ntpd.service'. (bsc#1185171) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-658=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ntp-4.2.8p15-lp152.3.6.1 ntp-debuginfo-4.2.8p15-lp152.3.6.1 ntp-debugsource-4.2.8p15-lp152.3.6.1 ntp-doc-4.2.8p15-lp152.3.6.1 References: https://bugzilla.suse.com/1185171

1 0