May 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0645-1: moderate: Recommended update for f2fs-tools
by maintenance＠opensuse.org 01 May '21

01 May '21

openSUSE Recommended Update: Recommended update for f2fs-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0645-1 Rating: moderate References: #1029961 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for f2fs-tools fixes the following issues: - prepare package for usrmerge (boo#1029961) Update to release 1.14 * f2fs_io: add copy command * fsck: Check fsync data always for zoned block devices * fsck: Check write pointer consistency of open zones * fsck: Check write pointer consistency of non-open zones * fsck.f2fs: Enable user-space cache * f2fs-tools: support data compression * dump.f2fs: print more info of inode layout * resize.f2fs: add option for large_nat_bitmap feature * f2fs-tools: Casefolded Encryption support * mkfs.f2fs: allow setting volume UUID manually * f2fs-tools: zns zone-capacity support * mkfs.f2fs: add -T flag * mkfs.f2fs: add -r (fake_seed) flag Update to release 1.13 * introduce some preen mode in fsck.f2fs * add f2fs_io tool * add casefolding support Update to new upstream release 1.12 * resize.f2fs: fix access out-of memory boundary * mkfs.f2fs: support fsverity feature * fsck.f2fs: fix stack overflow when reading out nat block * mkfs.f2fs: avoid selinux denial for unnecessary sysfs node * fsck.f2fs: allow -p without value * mkfs.f2fs: support multiple features with one "-O" * f2fs-tools: add -g to give default options Update to version 1.10.0 * f2fs-tools: support inode creation time * fsck.f2fs: add -y for generic fsck * fsck.f2fs: support quota * mkfs.f2fs: support quota option in mkfs * f2fs-tools: support flexible inline xattr size * add sparse support for f2fs * f2fscrypt: add a tool for encryption management in f2fs Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-645=1 Package List: - openSUSE Leap 15.2 (x86_64): f2fs-tools-1.14.0-lp152.4.3.1 f2fs-tools-debuginfo-1.14.0-lp152.4.3.1 f2fs-tools-debugsource-1.14.0-lp152.4.3.1 f2fs-tools-devel-1.14.0-lp152.4.3.1 libf2fs8-1.14.0-lp152.4.3.1 libf2fs8-debuginfo-1.14.0-lp152.4.3.1 libf2fs_format7-1.14.0-lp152.4.3.1 libf2fs_format7-debuginfo-1.14.0-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): f2fs-tools-compat-1.14.0-lp152.4.3.1 References: https://bugzilla.suse.com/1029961

1 0

openSUSE-SU-2021:0646-1: moderate: Security update for postsrsd
by opensuse-security＠opensuse.org 01 May '21

01 May '21

openSUSE Security Update: Security update for postsrsd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0646-1 Rating: moderate References: #1180251 Cross-References: CVE-2020-35573 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for postsrsd fixes the following issues: Update to release 1.11 [boo#1180251] * Drop group privileges as well as user privileges * Fixed: The subprocess that talks to Postfix could be caused to hang with a very long email address. [CVE-2020-35573] Update to release 1.6 * Fix endianness issue with SHA-1 implementation * Add dual stack support * Make SRS separator configurable Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-646=1 Package List: - openSUSE Leap 15.2 (x86_64): postsrsd-1.11-lp152.4.3.1 postsrsd-debuginfo-1.11-lp152.4.3.1 postsrsd-debugsource-1.11-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-35573.html https://bugzilla.suse.com/1180251

1 0

openSUSE-SU-2021:0644-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 01 May '21

01 May '21

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0644-1 Rating: important References: #1184960 Cross-References: CVE-2021-23961 CVE-2021-23994 CVE-2021-23995 CVE-2021-23998 CVE-2021-23999 CVE-2021-24002 CVE-2021-29945 CVE-2021-29946 CVE-2021-29948 CVSS scores: CVE-2021-23961 (NVD) : 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-23961 (SUSE): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-23994 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-23995 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-23998 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-23999 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-24002 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-29945 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-29946 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2021-29948 (SUSE): 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Firefox was updated to 78.10.0 ESR (bsc#1184960) * CVE-2021-23994: Out of bound write due to lazy initialization * CVE-2021-23995: Use-after-free in Responsive Design Mode * CVE-2021-23998: Secure Lock icon could have been spoofed * CVE-2021-23961: More internal network hosts could have been probed by a malicious webpage * CVE-2021-23999: Blob URLs may have been granted additional privileges * CVE-2021-24002: Arbitrary FTP command execution on FTP servers using an encoded URL * CVE-2021-29945: Incorrect size computation in WebAssembly JIT could lead to null-reads * CVE-2021-29946: Port blocking could be bypassed * CVE-2021-29948: Race condition when reading from disk while verifying signatures This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-644=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-78.10.0-lp152.2.41.1 MozillaThunderbird-debuginfo-78.10.0-lp152.2.41.1 MozillaThunderbird-debugsource-78.10.0-lp152.2.41.1 MozillaThunderbird-translations-common-78.10.0-lp152.2.41.1 MozillaThunderbird-translations-other-78.10.0-lp152.2.41.1 References: https://www.suse.com/security/cve/CVE-2021-23961.html https://www.suse.com/security/cve/CVE-2021-23994.html https://www.suse.com/security/cve/CVE-2021-23995.html https://www.suse.com/security/cve/CVE-2021-23998.html https://www.suse.com/security/cve/CVE-2021-23999.html https://www.suse.com/security/cve/CVE-2021-24002.html https://www.suse.com/security/cve/CVE-2021-29945.html https://www.suse.com/security/cve/CVE-2021-29946.html https://www.suse.com/security/cve/CVE-2021-29948.html https://bugzilla.suse.com/1184960

1 0

openSUSE-SU-2021:0636-1: important: Security update for samba
by opensuse-security＠opensuse.org 01 May '21

01 May '21

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0636-1 Rating: important References: #1178469 #1179156 #1183572 #1183574 #1184310 #1184677 Cross-References: CVE-2020-27840 CVE-2021-20254 CVE-2021-20277 CVSS scores: CVE-2020-27840 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-20254 (SUSE): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L CVE-2021-20277 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update for samba fixes the following issues: - CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574). - CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677). - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572). - Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156). - s3-libads: use dns name to open a ldap session (bsc#1184310). - Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-636=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ctdb-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 ctdb-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 ctdb-pcp-pmda-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 ctdb-pcp-pmda-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 ctdb-tests-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 ctdb-tests-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc-binding0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc-binding0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc-samr-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc-samr0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc-samr0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-krb5pac-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-krb5pac0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-krb5pac0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-nbt-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-nbt0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-nbt0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-standard-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-standard0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-standard0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libnetapi-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libnetapi0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libnetapi0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-credentials-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-credentials0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-credentials0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-errors-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-errors0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-errors0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-hostconfig-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-hostconfig0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-hostconfig0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-passdb-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-passdb0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-passdb0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-policy-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-policy-python3-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-policy0-python3-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-policy0-python3-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-util-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-util0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-util0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamdb-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamdb0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamdb0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbclient-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbclient0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbclient0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbconf-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbconf0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbconf0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbldap-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbldap2-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbldap2-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libtevent-util-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libtevent-util0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libtevent-util0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libwbclient-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libwbclient0-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libwbclient0-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-ad-dc-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-ad-dc-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-client-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-client-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-core-devel-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-debugsource-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-dsdb-modules-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-dsdb-modules-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-libs-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-libs-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-libs-python3-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-libs-python3-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-python3-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-python3-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-test-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-test-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-winbind-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-winbind-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 - openSUSE Leap 15.2 (noarch): samba-doc-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 - openSUSE Leap 15.2 (x86_64): libdcerpc-binding0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc-binding0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc-samr0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc-samr0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libdcerpc0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-krb5pac0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-krb5pac0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-nbt0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-nbt0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-standard0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr-standard0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libndr0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libnetapi-devel-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libnetapi0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libnetapi0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-credentials0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-credentials0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-errors0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-errors0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-hostconfig0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-hostconfig0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-passdb0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-passdb0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-policy0-python3-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-policy0-python3-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-util0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamba-util0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamdb0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsamdb0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbclient0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbclient0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbconf0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbconf0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbldap2-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libsmbldap2-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libtevent-util0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libtevent-util0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libwbclient0-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 libwbclient0-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-ad-dc-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-ad-dc-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-ceph-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-ceph-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-client-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-client-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-libs-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-libs-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-libs-python3-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-libs-python3-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-winbind-32bit-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 samba-winbind-32bit-debuginfo-4.11.14+git.247.8c858f7ee14-lp152.3.19.1 References: https://www.suse.com/security/cve/CVE-2020-27840.html https://www.suse.com/security/cve/CVE-2021-20254.html https://www.suse.com/security/cve/CVE-2021-20277.html https://bugzilla.suse.com/1178469 https://bugzilla.suse.com/1179156 https://bugzilla.suse.com/1183572 https://bugzilla.suse.com/1183574 https://bugzilla.suse.com/1184310 https://bugzilla.suse.com/1184677

1 0

openSUSE-SU-2021:0639-1: important: Security update for cifs-utils
by opensuse-security＠opensuse.org 01 May '21

01 May '21

openSUSE Security Update: Security update for cifs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0639-1 Rating: important References: #1152930 #1174477 #1183239 #1184815 Cross-References: CVE-2020-14342 CVE-2021-20208 CVSS scores: CVE-2020-14342 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-14342 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-20208 (NVD) : 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N CVE-2021-20208 (SUSE): 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for cifs-utils fixes the following security issues: - CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. (bsc#1183239) - CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. (bsc#1174477) This update for cifs-utils fixes the following issues: - Solve invalid directory mounting. When attempting to change the current working directory into non-existing directories, mount.cifs crashes. (bsc#1152930) - Fixed a bug where it was no longer possible to mount CIFS filesystem after the last maintenance update. (bsc#1184815) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-639=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): cifs-utils-6.9-lp152.2.3.1 cifs-utils-debuginfo-6.9-lp152.2.3.1 cifs-utils-debugsource-6.9-lp152.2.3.1 cifs-utils-devel-6.9-lp152.2.3.1 pam_cifscreds-6.9-lp152.2.3.1 pam_cifscreds-debuginfo-6.9-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14342.html https://www.suse.com/security/cve/CVE-2021-20208.html https://bugzilla.suse.com/1152930 https://bugzilla.suse.com/1174477 https://bugzilla.suse.com/1183239 https://bugzilla.suse.com/1184815

1 0

openSUSE-RU-2021:0641-1: Recommended update for strongswan
by maintenance＠opensuse.org 01 May '21

01 May '21

openSUSE Recommended Update: Recommended update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0641-1 Rating: low References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strongswan fixes the following issues: - Added rcstrongswan-starter to this package. Please refer to the README.SUSE file to get more information about its usage. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-641=1 Package List: - openSUSE Leap 15.2 (noarch): strongswan-doc-5.8.2-lp152.2.6.2 - openSUSE Leap 15.2 (x86_64): strongswan-5.8.2-lp152.2.6.2 strongswan-debuginfo-5.8.2-lp152.2.6.2 strongswan-debugsource-5.8.2-lp152.2.6.2 strongswan-hmac-5.8.2-lp152.2.6.2 strongswan-ipsec-5.8.2-lp152.2.6.2 strongswan-ipsec-debuginfo-5.8.2-lp152.2.6.2 strongswan-libs0-5.8.2-lp152.2.6.2 strongswan-libs0-debuginfo-5.8.2-lp152.2.6.2 strongswan-mysql-5.8.2-lp152.2.6.2 strongswan-mysql-debuginfo-5.8.2-lp152.2.6.2 strongswan-nm-5.8.2-lp152.2.6.2 strongswan-nm-debuginfo-5.8.2-lp152.2.6.2 strongswan-sqlite-5.8.2-lp152.2.6.2 strongswan-sqlite-debuginfo-5.8.2-lp152.2.6.2 References:

1 0

openSUSE-RU-2021:0640-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 01 May '21

01 May '21

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0640-1 Rating: moderate References: #1184072 #1184543 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Fixed a crash that might occur when talking to Xwayland (bsc#1184072, bsc#1184543) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-640=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xorg-x11-server-1.20.3-lp152.8.24.1 xorg-x11-server-debuginfo-1.20.3-lp152.8.24.1 xorg-x11-server-debugsource-1.20.3-lp152.8.24.1 xorg-x11-server-extra-1.20.3-lp152.8.24.1 xorg-x11-server-extra-debuginfo-1.20.3-lp152.8.24.1 xorg-x11-server-sdk-1.20.3-lp152.8.24.1 xorg-x11-server-source-1.20.3-lp152.8.24.1 xorg-x11-server-wayland-1.20.3-lp152.8.24.1 xorg-x11-server-wayland-debuginfo-1.20.3-lp152.8.24.1 References: https://bugzilla.suse.com/1184072 https://bugzilla.suse.com/1184543

1 0

openSUSE-RU-2021:0643-1: moderate: Recommended update for python-shaptools
by maintenance＠opensuse.org 01 May '21

01 May '21

openSUSE Recommended Update: Recommended update for python-shaptools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0643-1 Rating: moderate References: #1185090 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-shaptools fixes the following issues: - Fix the HANA 'sidadm' user creation to transform to lowercase properly. (bsc#1185090) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-643=1 Package List: - openSUSE Leap 15.2 (noarch): python2-shaptools-0.3.12+git.1619007514.1951d23-lp152.2.9.1 python3-shaptools-0.3.12+git.1619007514.1951d23-lp152.2.9.1 References: https://bugzilla.suse.com/1185090

1 0

openSUSE-SU-2021:0629-1: critical: Security update for Chromium
by opensuse-security＠opensuse.org 01 May '21

01 May '21

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0629-1 Rating: critical References: #11845047 #1184764 #1185398 Cross-References: CVE-2021-21201 CVE-2021-21202 CVE-2021-21203 CVE-2021-21204 CVE-2021-21205 CVE-2021-21207 CVE-2021-21208 CVE-2021-21209 CVE-2021-21210 CVE-2021-21211 CVE-2021-21212 CVE-2021-21213 CVE-2021-21221 CVE-2021-21222 CVE-2021-21223 CVE-2021-21224 CVE-2021-21225 CVE-2021-21226 CVE-2021-21227 CVE-2021-21228 CVE-2021-21229 CVE-2021-21230 CVE-2021-21231 CVE-2021-21232 CVE-2021-21233 CVSS scores: CVE-2021-21201 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-21202 (NVD) : 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-21203 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21204 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21205 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2021-21207 (NVD) : 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-21208 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-21209 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-21210 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-21211 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-21212 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-21213 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21221 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-21222 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-21223 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-21224 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21225 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21226 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium was updated to 90.0.4430.93 (boo#1184764,boo#1185047,boo#1185398) * CVE-2021-21227: Insufficient data validation in V8. * CVE-2021-21232: Use after free in Dev Tools. * CVE-2021-21233: Heap buffer overflow in ANGLE. * CVE-2021-21228: Insufficient policy enforcement in extensions. * CVE-2021-21229: Incorrect security UI in downloads. * CVE-2021-21230: Type Confusion in V8. * CVE-2021-21231: Insufficient data validation in V8. * CVE-2021-21222: Heap buffer overflow in V8 * CVE-2021-21223: Integer overflow in Mojo * CVE-2021-21224: Type Confusion in V8 * CVE-2021-21225: Out of bounds memory access in V8 * CVE-2021-21226: Use after free in navigation * CVE-2021-21201: Use after free in permissions * CVE-2021-21202: Use after free in extensions * CVE-2021-21203: Use after free in Blink * CVE-2021-21204: Use after free in Blink * CVE-2021-21205: Insufficient policy enforcement in navigation * CVE-2021-21221: Insufficient validation of untrusted input in Mojo * CVE-2021-21207: Use after free in IndexedDB * CVE-2021-21208: Insufficient data validation in QR scanner * CVE-2021-21209: Inappropriate implementation in storage * CVE-2021-21210: Inappropriate implementation in Network * CVE-2021-21211: Inappropriate implementation in Navigatio * CVE-2021-21212: Incorrect security UI in Network Config UI * CVE-2021-21213: Use after free in WebMIDI Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-629=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-90.0.4430.93-lp152.2.89.1 chromedriver-debuginfo-90.0.4430.93-lp152.2.89.1 chromium-90.0.4430.93-lp152.2.89.1 chromium-debuginfo-90.0.4430.93-lp152.2.89.1 References: https://www.suse.com/security/cve/CVE-2021-21201.html https://www.suse.com/security/cve/CVE-2021-21202.html https://www.suse.com/security/cve/CVE-2021-21203.html https://www.suse.com/security/cve/CVE-2021-21204.html https://www.suse.com/security/cve/CVE-2021-21205.html https://www.suse.com/security/cve/CVE-2021-21207.html https://www.suse.com/security/cve/CVE-2021-21208.html https://www.suse.com/security/cve/CVE-2021-21209.html https://www.suse.com/security/cve/CVE-2021-21210.html https://www.suse.com/security/cve/CVE-2021-21211.html https://www.suse.com/security/cve/CVE-2021-21212.html https://www.suse.com/security/cve/CVE-2021-21213.html https://www.suse.com/security/cve/CVE-2021-21221.html https://www.suse.com/security/cve/CVE-2021-21222.html https://www.suse.com/security/cve/CVE-2021-21223.html https://www.suse.com/security/cve/CVE-2021-21224.html https://www.suse.com/security/cve/CVE-2021-21225.html https://www.suse.com/security/cve/CVE-2021-21226.html https://www.suse.com/security/cve/CVE-2021-21227.html https://www.suse.com/security/cve/CVE-2021-21228.html https://www.suse.com/security/cve/CVE-2021-21229.html https://www.suse.com/security/cve/CVE-2021-21230.html https://www.suse.com/security/cve/CVE-2021-21231.html https://www.suse.com/security/cve/CVE-2021-21232.html https://www.suse.com/security/cve/CVE-2021-21233.html https://bugzilla.suse.com/11845047 https://bugzilla.suse.com/1184764 https://bugzilla.suse.com/1185398

1 0

openSUSE-SU-2021:0637-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 01 May '21

01 May '21

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0637-1 Rating: important References: #1182719 #1184155 #1184262 Cross-References: CVE-2020-27918 CVE-2020-29623 CVE-2021-1765 CVE-2021-1788 CVE-2021-1789 CVE-2021-1799 CVE-2021-1801 CVE-2021-1844 CVE-2021-1870 CVE-2021-1871 CVSS scores: CVE-2020-27918 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-29623 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2021-1765 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-1788 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1789 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1799 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-1801 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-1844 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1871 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.0 (bsc#1184155): * Fix the authentication request port when URL omits the port. * Fix iframe scrolling when main frame is scrolled in async * scrolling mode. * Stop using g_memdup. * Show a warning message when overriding signal handler for * threading suspension. * Fix the build on RISC-V with GCC 11. * Fix several crashes and rendering issues. * Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871 - Update in version 2.30.6 (bsc#1184262): * Update user agent quirks again for Google Docs and Google Drive. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765 CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870. - Update _constraints for armv6/armv7 (bsc#1182719) - restore NPAPI plugin support which was removed in 2.32.0 This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-637=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.32.0-lp152.2.13.1 libjavascriptcoregtk-4_0-18-debuginfo-2.32.0-lp152.2.13.1 libwebkit2gtk-4_0-37-2.32.0-lp152.2.13.1 libwebkit2gtk-4_0-37-debuginfo-2.32.0-lp152.2.13.1 typelib-1_0-JavaScriptCore-4_0-2.32.0-lp152.2.13.1 typelib-1_0-WebKit2-4_0-2.32.0-lp152.2.13.1 typelib-1_0-WebKit2WebExtension-4_0-2.32.0-lp152.2.13.1 webkit-jsc-4-2.32.0-lp152.2.13.1 webkit-jsc-4-debuginfo-2.32.0-lp152.2.13.1 webkit2gtk-4_0-injected-bundles-2.32.0-lp152.2.13.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.32.0-lp152.2.13.1 webkit2gtk3-debugsource-2.32.0-lp152.2.13.1 webkit2gtk3-devel-2.32.0-lp152.2.13.1 webkit2gtk3-minibrowser-2.32.0-lp152.2.13.1 webkit2gtk3-minibrowser-debuginfo-2.32.0-lp152.2.13.1 - openSUSE Leap 15.2 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.32.0-lp152.2.13.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.32.0-lp152.2.13.1 libwebkit2gtk-4_0-37-32bit-2.32.0-lp152.2.13.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.32.0-lp152.2.13.1 - openSUSE Leap 15.2 (noarch): libwebkit2gtk3-lang-2.32.0-lp152.2.13.1 References: https://www.suse.com/security/cve/CVE-2020-27918.html https://www.suse.com/security/cve/CVE-2020-29623.html https://www.suse.com/security/cve/CVE-2021-1765.html https://www.suse.com/security/cve/CVE-2021-1788.html https://www.suse.com/security/cve/CVE-2021-1789.html https://www.suse.com/security/cve/CVE-2021-1799.html https://www.suse.com/security/cve/CVE-2021-1801.html https://www.suse.com/security/cve/CVE-2021-1844.html https://www.suse.com/security/cve/CVE-2021-1870.html https://www.suse.com/security/cve/CVE-2021-1871.html https://bugzilla.suse.com/1182719 https://bugzilla.suse.com/1184155 https://bugzilla.suse.com/1184262

1 0