June 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0884-1: moderate: Recommended update for openssh
by maintenance＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0884-1 Rating: moderate References: #1186673 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openssh fixes the following issues: - Further attempts to mitigate instances of secrets lingering in memory after a session exits to meet key zeroization requirements. (bsc#1186673) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-884=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): openssh-8.1p1-lp152.4.18.1 openssh-cavs-8.1p1-lp152.4.18.1 openssh-cavs-debuginfo-8.1p1-lp152.4.18.1 openssh-debuginfo-8.1p1-lp152.4.18.1 openssh-debugsource-8.1p1-lp152.4.18.1 openssh-fips-8.1p1-lp152.4.18.1 openssh-helpers-8.1p1-lp152.4.18.1 openssh-helpers-debuginfo-8.1p1-lp152.4.18.1 - openSUSE Leap 15.2 (x86_64): openssh-askpass-gnome-8.1p1-lp152.4.18.1 openssh-askpass-gnome-debuginfo-8.1p1-lp152.4.18.1 openssh-askpass-gnome-debugsource-8.1p1-lp152.4.18.1 References: https://bugzilla.suse.com/1186673

1 0

openSUSE-SU-2021:0876-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0876-1 Rating: important References: #1179833 #1179836 #1179837 #1179839 Cross-References: CVE-2020-24489 CVE-2020-24511 CVE-2020-24512 CVE-2020-24513 CVSS scores: CVE-2020-24489 (SUSE): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-24511 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2020-24512 (SUSE): 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2020-24513 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20210608 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833) See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0 0465.html - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836) See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0 0464.html) - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464) See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0 0464.html) - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839) See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0 0442.html Other fixes: - Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details. - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details. - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details. - Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xe on/xeon-d-1500-specification-update.html) for details. - Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3- spec-update.html) for details. - Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3- spec-update.html?wapkw=processor+spec+update+e5) for details. - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/co re/10th-gen-core-families-specification-update.html) for details. - Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/co re/8th-gen-core-spec-update.html) for details. - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-cor e-family-spec-update.html) for details. - Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details. - Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-120 0v6-spec-update.html) for details. - Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xe on/xeon-e-2100-specification-update.html) for details. - New platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CLX-SP | A0 | 06-55-05/b7 | | 03000010 | Xeon Scalable Gen2 | ICX-SP | C0 | 06-6a-05/87 | | 0c0002f0 | Xeon Scalable Gen3 | ICX-SP | D0 | 06-6a-06/87 | | 0d0002a0 | Xeon Scalable Gen3 | SNR | B0 | 06-86-04/01 | | 0b00000f | Atom P59xxB | SNR | B1 | 06-86-05/01 | | 0b00000f | Atom P59xxB | TGL | B1 | 06-8c-01/80 | | 00000088 | Core Gen11 Mobile | TGL-R | C0 | 06-8c-02/c2 | | 00000016 | Core Gen11 Mobile | TGL-H | R0 | 06-8d-01/c2 | | 0000002c | Core Gen11 Mobile | EHL | B1 | 06-96-01/01 | | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E | JSL | A0/A1 | 06-9c-00/01 | | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105 | RKL-S | B0 | 06-a7-01/02 | | 00000040 | Core Gen11 - Updated platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3 | HSX-EX | E0 | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile | BDX-ML | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx | SKX-SP | B1 | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2 | CPX-SP | A1 | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3 | BDX-DE | V2/V3 | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19 | BDX-DE | Y0 | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87 | BDX-NS | A0 | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53 | APL | D0 | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5 | DNV | B0 | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series | GLK | B0 | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx | GKL-R | R0 | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile | LKF | B2/B3 | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology | AML-Y22 | H0 | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile | CML-H | R1 | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10 | CML-U62 | A0 | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile | CML-U62 V2 | K0 | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile This update was imported from the SUSE:SLE-15:Update update project. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-876=1 Package List: - openSUSE Leap 15.2 (x86_64): ucode-intel-20210525-lp152.2.17.1 References: https://www.suse.com/security/cve/CVE-2020-24489.html https://www.suse.com/security/cve/CVE-2020-24511.html https://www.suse.com/security/cve/CVE-2020-24512.html https://www.suse.com/security/cve/CVE-2020-24513.html https://bugzilla.suse.com/1179833 https://bugzilla.suse.com/1179836 https://bugzilla.suse.com/1179837 https://bugzilla.suse.com/1179839

1 0

openSUSE-RU-2021:0872-1: important: Recommended update for multipath-tools
by maintenance＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0872-1 Rating: important References: #1107187 #1139775 #1172157 #1174026 #1175454 #1176406 #1177081 #1177371 #1178049 #1178377 #1178379 #1178662 #1181234 #1182072 #1182917 #1184260 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 16 recommended fixes can now be installed. Description: This update for multipath-tools fixes the following issues: - Update from version 0.8.2+140.5146cae to version 0.8.2+166.7501a27: * enable negated regular expression syntax in conf file. (bsc#1182917) * change default devnode blacklist to `'!^(sd[a-z]|dasd[a-z]|nvme[0-9])'` * fixes for SAS expanders. (bsc#1178377, bsc#1178379, bsc#1177081) * Avoid "illegal request" errors on non-RDAC storage. (bsc#1182072, bsc#1177371) * kpartx: free loop device after listing partitions. (bsc#1107187) * fix issues with SAS expanders. (bsc#1178377, bsc#1178379, bsc#1177081) * cleanup uevent generation on startup. (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406) * Avoid access to root FS while queueing IO. (bsc#1178049, bsc#1181234) * libmultipath: force map reload if udev incomplete. (bsc#1178662) * kpartx: fix detection of dasd partition tables on loop devices. (bsc#1139775) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-872=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): kpartx-0.8.2+166.7501a27-lp152.3.9.1 kpartx-debuginfo-0.8.2+166.7501a27-lp152.3.9.1 libdmmp-devel-0.8.2+166.7501a27-lp152.3.9.1 libdmmp0_2_0-0.8.2+166.7501a27-lp152.3.9.1 libdmmp0_2_0-debuginfo-0.8.2+166.7501a27-lp152.3.9.1 multipath-tools-0.8.2+166.7501a27-lp152.3.9.1 multipath-tools-debuginfo-0.8.2+166.7501a27-lp152.3.9.1 multipath-tools-debugsource-0.8.2+166.7501a27-lp152.3.9.1 multipath-tools-devel-0.8.2+166.7501a27-lp152.3.9.1 References: https://bugzilla.suse.com/1107187 https://bugzilla.suse.com/1139775 https://bugzilla.suse.com/1172157 https://bugzilla.suse.com/1174026 https://bugzilla.suse.com/1175454 https://bugzilla.suse.com/1176406 https://bugzilla.suse.com/1177081 https://bugzilla.suse.com/1177371 https://bugzilla.suse.com/1178049 https://bugzilla.suse.com/1178377 https://bugzilla.suse.com/1178379 https://bugzilla.suse.com/1178662 https://bugzilla.suse.com/1181234 https://bugzilla.suse.com/1182072 https://bugzilla.suse.com/1182917 https://bugzilla.suse.com/1184260

1 0

openSUSE-SU-2021:0874-1: important: Security update for spice
by opensuse-security＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0874-1 Rating: important References: #1181686 Cross-References: CVE-2021-20201 CVSS scores: CVE-2021-20201 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-20201 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for spice fixes the following issues: - CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-874=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libspice-server-devel-0.14.2-lp152.2.6.1 libspice-server1-0.14.2-lp152.2.6.1 libspice-server1-debuginfo-0.14.2-lp152.2.6.1 spice-debugsource-0.14.2-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2021-20201.html https://bugzilla.suse.com/1181686

1 0

openSUSE-SU-2021:0885-1: moderate: Security update for libopenmpt
by opensuse-security＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Security Update: Security update for libopenmpt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0885-1 Rating: moderate References: #1186663 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libopenmpt fixes the following issues: Various bugfix and stability issues were fixed, some of those might have security impact. libopenmpt was updated to 0.3.28: * Fixed excessive memory consumption with malformed files in various formats. Changes in 0.3.27: * AMS: Avoid allocating excessive amount of memory for compressed song message in malformed files. * S3M: Some samples were imported with a too high sample rate if module was saved with Scream Tracker 3. Changes in 0.3.26: * DMF: Improve import of finetune effect with parameters larger than +/-15. Changes in 0.3.25: * AMS: An upper bound for uncompressed sample size is now established to avoid memory exhaustion from malformed files. * MO3: Avoid certain ModPlug hacks from being fixed up twice, which could lead to e.g. very narrow pan swing range for old OpenMPT IT files saved with a recent MO3 encoder version. * IMF: Instrument sample mapping was off by one octave, notable in the guitar part of Astaris by Karsten Koch. * PLM: Percentage offset (Mxx) was slightly off. Changes in 0.3.24: * PP20: The first few bytes of some files were not decompressed properly, making some files unplayable (depending on the original format). Changes in 0.3.23: * IT: Global volume slides with both nibbles set preferred the ��slide up�� nibble over the ��slide down�� nibble in old OpenMPT versions, unlike other slides. Such old files are now imported correctly again. * IT: Fixed an edge case where, if the filter hit full cutoff / no resonance on the first tick of a row where a new delayed note would be triggered, the filter would be disabled even though it should stay active. Fixes trace.it by maddie. * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT 1.23.05.00. The arpeggios in Binary World by Dakota now play correctly again. * S3M: Support old-style sample pre-amp value in very early S3M files. * S3M: Only force-enable fast slides for files ST 3.00. Previously, any S3M file made with an ST3 version older than 3.20 enabled them. * M15: Improve tracker detection heuristics to never assume SoundTracker 2.0 if there is a huge number of Dxx commands, as that is a definite hint that they should be treated as volume slides. Fixes Monty On The Run by Master Blaster. Changes in 0.3.22: * IT: Disable retrigger with short notes quirk for modules saved with Chibi Tracker, as it does not implement that quirk. * MOD: Fix early song ending due to ProTracker pattern jump quirk (EEx + Dxx on same row) if infinite looping is disabled. Fixes Haunted Tracks.mod by Triace. * MOD: Vibrato type ��ramp down�� was upside down. Changes in 0.3.21: * IT: Vibrato was too fast in Old Effects mode since libopenmpt 0.3. * XM: Treat 8bitbubsy��s FT2 clone exactly like Fasttracker 2 with respect to compatibility and playback flags. For example, FT2 Pan Law was not applied. * DMF: Some files had a wrong tempo since libopenmpt 0.2.5705-beta15. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-885=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libmodplug-devel-0.3.28-lp152.2.3.1 libmodplug1-0.3.28-lp152.2.3.1 libmodplug1-debuginfo-0.3.28-lp152.2.3.1 libopenmpt-debugsource-0.3.28-lp152.2.3.1 libopenmpt-devel-0.3.28-lp152.2.3.1 libopenmpt0-0.3.28-lp152.2.3.1 libopenmpt0-debuginfo-0.3.28-lp152.2.3.1 libopenmpt_modplug1-0.3.28-lp152.2.3.1 libopenmpt_modplug1-debuginfo-0.3.28-lp152.2.3.1 openmpt123-0.3.28-lp152.2.3.1 openmpt123-debuginfo-0.3.28-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libmodplug1-32bit-0.3.28-lp152.2.3.1 libmodplug1-32bit-debuginfo-0.3.28-lp152.2.3.1 libopenmpt0-32bit-0.3.28-lp152.2.3.1 libopenmpt0-32bit-debuginfo-0.3.28-lp152.2.3.1 libopenmpt_modplug1-32bit-0.3.28-lp152.2.3.1 libopenmpt_modplug1-32bit-debuginfo-0.3.28-lp152.2.3.1 References: https://bugzilla.suse.com/1186663

1 0

openSUSE-SU-2021:0878-1: important: Security update for containerd, docker, runc
by opensuse-security＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Security Update: Security update for containerd, docker, runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0878-1 Rating: important References: #1168481 #1175081 #1175821 #1181594 #1181641 #1181677 #1181730 #1181732 #1181749 #1182451 #1182476 #1182947 #1183024 #1183855 #1184768 #1184962 #1185405 Cross-References: CVE-2021-21284 CVE-2021-21285 CVE-2021-21334 CVE-2021-30465 CVSS scores: CVE-2021-21284 (NVD) : 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N CVE-2021-21284 (SUSE): 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N CVE-2021-21285 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-21285 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H CVE-2021-21334 (NVD) : 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2021-21334 (SUSE): 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2021-30465 (NVD) : 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2021-30465 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has 13 fixes is now available. Description: This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594) * Switch version to use -ce suffix rather than _ce to avoid confusing other tools (bsc#1182476). * CVE-2021-21284: Fixed a potential privilege escalation when the root user in the remapped namespace has access to the host filesystem (bsc#1181732) * CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest crashes the dockerd daemon (bsc#1181730). * btrfs quotas being removed by Docker regularly (bsc#1183855, bsc#1175081) runc was updated to v1.0.0~rc93 (bsc#1182451, bsc#1175821 bsc#1184962). * Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821). * Fixed /dev/null is not available (bsc#1168481). * CVE-2021-30465: Fixed a symlink-exchange attack vulnarability (bsc#1185405). containerd was updated to v1.4.4 * CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397). * Handle a requirement from docker (bsc#1181594). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-878=1 Package List: - openSUSE Leap 15.2 (noarch): docker-bash-completion-20.10.6_ce-lp152.2.12.1 docker-fish-completion-20.10.6_ce-lp152.2.12.1 docker-zsh-completion-20.10.6_ce-lp152.2.12.1 - openSUSE Leap 15.2 (x86_64): containerd-1.4.4-lp152.2.6.1 containerd-ctr-1.4.4-lp152.2.6.1 docker-20.10.6_ce-lp152.2.12.1 docker-debuginfo-20.10.6_ce-lp152.2.12.1 runc-1.0.0~rc93-lp152.2.3.1 runc-debuginfo-1.0.0~rc93-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-21284.html https://www.suse.com/security/cve/CVE-2021-21285.html https://www.suse.com/security/cve/CVE-2021-21334.html https://www.suse.com/security/cve/CVE-2021-30465.html https://bugzilla.suse.com/1168481 https://bugzilla.suse.com/1175081 https://bugzilla.suse.com/1175821 https://bugzilla.suse.com/1181594 https://bugzilla.suse.com/1181641 https://bugzilla.suse.com/1181677 https://bugzilla.suse.com/1181730 https://bugzilla.suse.com/1181732 https://bugzilla.suse.com/1181749 https://bugzilla.suse.com/1182451 https://bugzilla.suse.com/1182476 https://bugzilla.suse.com/1182947 https://bugzilla.suse.com/1183024 https://bugzilla.suse.com/1183855 https://bugzilla.suse.com/1184768 https://bugzilla.suse.com/1184962 https://bugzilla.suse.com/1185405

1 0

openSUSE-RU-2021:0871-1: important: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0871-1 Rating: important References: #1184326 #1184399 #1184997 #1185325 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for libzypp, zypper fixes the following issues: libzypp was updated to 17.26.0: - Work around download.o.o broken https redirects. - Allow trusted repos to add additional signing keys (bsc#1184326) Repositories signed with a trusted gpg key may import additional package signing keys. This is needed if different keys were used to sign the the packages shipped by the repository. - MediaCurl: Fix logging of redirects. - Use 15.3 resolver problem and solution texts on all distros. - $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the zypp lock (bsc#1184399) Helps boot time services like 'zypper purge-kernels' to wait for the zypp lock until other services using zypper have completed. - Fix purge-kernels is broken in Leap 15.3 (bsc#1185325) Leap 15.3 introduces a new kernel package called kernel-flavour-extra, which contain kmp's. Currently kmp's are detected by name ".*-kmp(-.*)?" but this does not work which those new packages. This patch fixes the problem by checking packages for kmod(*) and ksym(*) provides and only falls back to name checking if the package in question does not provide one of those. - Introduce zypp-runpurge, a tool to run purge-kernels on testcases. zypper was updated to 1.14.45: - Fix service detection with cgroupv2 (bsc#1184997) - Add hints to 'trust GPG key' prompt. - Add report when receiving new package signing keys from a trusted repo (bsc#1184326) - Added translation using Weblate (Kabyle) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-871=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsolv-debuginfo-0.7.19-lp152.2.25.1 libsolv-debugsource-0.7.19-lp152.2.25.1 libsolv-demo-0.7.19-lp152.2.25.1 libsolv-demo-debuginfo-0.7.19-lp152.2.25.1 libsolv-devel-0.7.19-lp152.2.25.1 libsolv-devel-debuginfo-0.7.19-lp152.2.25.1 libsolv-tools-0.7.19-lp152.2.25.1 libsolv-tools-debuginfo-0.7.19-lp152.2.25.1 libzypp-17.26.0-lp152.2.34.1 libzypp-debuginfo-17.26.0-lp152.2.34.1 libzypp-debugsource-17.26.0-lp152.2.34.1 libzypp-devel-17.26.0-lp152.2.34.1 libzypp-devel-doc-17.26.0-lp152.2.34.1 perl-solv-0.7.19-lp152.2.25.1 perl-solv-debuginfo-0.7.19-lp152.2.25.1 python-solv-0.7.19-lp152.2.25.1 python-solv-debuginfo-0.7.19-lp152.2.25.1 python3-solv-0.7.19-lp152.2.25.1 python3-solv-debuginfo-0.7.19-lp152.2.25.1 ruby-solv-0.7.19-lp152.2.25.1 ruby-solv-debuginfo-0.7.19-lp152.2.25.1 zypper-1.14.45-lp152.2.24.1 zypper-debuginfo-1.14.45-lp152.2.24.1 zypper-debugsource-1.14.45-lp152.2.24.1 - openSUSE Leap 15.2 (noarch): zypper-aptitude-1.14.45-lp152.2.24.1 zypper-log-1.14.45-lp152.2.24.1 zypper-needs-restarting-1.14.45-lp152.2.24.1 References: https://bugzilla.suse.com/1184326 https://bugzilla.suse.com/1184399 https://bugzilla.suse.com/1184997 https://bugzilla.suse.com/1185325

1 0

openSUSE-RU-2021:0880-1: important: Recommended update for libreoffice
by maintenance＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Recommended Update: Recommended update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0880-1 Rating: important References: #1162022 #1172941 #1175552 #1176197 #1176198 #1185505 #1185797 #1186110 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for libreoffice fixes the following issues: - Searching in PPTX document makes LibreOffice crash. (bsc#1185797) - Fix a text highlight issue when saving as PPTX. (bsc#1185505) - Recommend `libreoffice-qt5` only when it is actually created. - Solve a GCC11 build issue. (bsc#1186110) - LibreOffice requires at least java 1.8.0 to run properly This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-880=1 Package List: - openSUSE Leap 15.2 (x86_64): libreoffice-7.1.3.2-lp152.2.13.1 libreoffice-base-7.1.3.2-lp152.2.13.1 libreoffice-base-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-base-drivers-postgresql-7.1.3.2-lp152.2.13.1 libreoffice-base-drivers-postgresql-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-calc-7.1.3.2-lp152.2.13.1 libreoffice-calc-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-calc-extensions-7.1.3.2-lp152.2.13.1 libreoffice-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-debugsource-7.1.3.2-lp152.2.13.1 libreoffice-draw-7.1.3.2-lp152.2.13.1 libreoffice-draw-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-filters-optional-7.1.3.2-lp152.2.13.1 libreoffice-gnome-7.1.3.2-lp152.2.13.1 libreoffice-gnome-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-gtk3-7.1.3.2-lp152.2.13.1 libreoffice-gtk3-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-impress-7.1.3.2-lp152.2.13.1 libreoffice-impress-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-librelogo-7.1.3.2-lp152.2.13.1 libreoffice-mailmerge-7.1.3.2-lp152.2.13.1 libreoffice-math-7.1.3.2-lp152.2.13.1 libreoffice-math-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-officebean-7.1.3.2-lp152.2.13.1 libreoffice-officebean-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-pyuno-7.1.3.2-lp152.2.13.1 libreoffice-pyuno-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-qt5-7.1.3.2-lp152.2.13.1 libreoffice-qt5-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-sdk-7.1.3.2-lp152.2.13.1 libreoffice-sdk-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-sdk-doc-7.1.3.2-lp152.2.13.1 libreoffice-writer-7.1.3.2-lp152.2.13.1 libreoffice-writer-debuginfo-7.1.3.2-lp152.2.13.1 libreoffice-writer-extensions-7.1.3.2-lp152.2.13.1 libreofficekit-7.1.3.2-lp152.2.13.1 libreofficekit-devel-7.1.3.2-lp152.2.13.1 - openSUSE Leap 15.2 (noarch): libreoffice-branding-upstream-7.1.3.2-lp152.2.13.1 libreoffice-gdb-pretty-printers-7.1.3.2-lp152.2.13.1 libreoffice-glade-7.1.3.2-lp152.2.13.1 libreoffice-icon-themes-7.1.3.2-lp152.2.13.1 libreoffice-l10n-af-7.1.3.2-lp152.2.13.1 libreoffice-l10n-am-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ar-7.1.3.2-lp152.2.13.1 libreoffice-l10n-as-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ast-7.1.3.2-lp152.2.13.1 libreoffice-l10n-be-7.1.3.2-lp152.2.13.1 libreoffice-l10n-bg-7.1.3.2-lp152.2.13.1 libreoffice-l10n-bn-7.1.3.2-lp152.2.13.1 libreoffice-l10n-bn_IN-7.1.3.2-lp152.2.13.1 libreoffice-l10n-bo-7.1.3.2-lp152.2.13.1 libreoffice-l10n-br-7.1.3.2-lp152.2.13.1 libreoffice-l10n-brx-7.1.3.2-lp152.2.13.1 libreoffice-l10n-bs-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ca-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ca_valencia-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ckb-7.1.3.2-lp152.2.13.1 libreoffice-l10n-cs-7.1.3.2-lp152.2.13.1 libreoffice-l10n-cy-7.1.3.2-lp152.2.13.1 libreoffice-l10n-da-7.1.3.2-lp152.2.13.1 libreoffice-l10n-de-7.1.3.2-lp152.2.13.1 libreoffice-l10n-dgo-7.1.3.2-lp152.2.13.1 libreoffice-l10n-dsb-7.1.3.2-lp152.2.13.1 libreoffice-l10n-dz-7.1.3.2-lp152.2.13.1 libreoffice-l10n-el-7.1.3.2-lp152.2.13.1 libreoffice-l10n-en-7.1.3.2-lp152.2.13.1 libreoffice-l10n-en_GB-7.1.3.2-lp152.2.13.1 libreoffice-l10n-en_ZA-7.1.3.2-lp152.2.13.1 libreoffice-l10n-eo-7.1.3.2-lp152.2.13.1 libreoffice-l10n-es-7.1.3.2-lp152.2.13.1 libreoffice-l10n-et-7.1.3.2-lp152.2.13.1 libreoffice-l10n-eu-7.1.3.2-lp152.2.13.1 libreoffice-l10n-fa-7.1.3.2-lp152.2.13.1 libreoffice-l10n-fi-7.1.3.2-lp152.2.13.1 libreoffice-l10n-fr-7.1.3.2-lp152.2.13.1 libreoffice-l10n-fur-7.1.3.2-lp152.2.13.1 libreoffice-l10n-fy-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ga-7.1.3.2-lp152.2.13.1 libreoffice-l10n-gd-7.1.3.2-lp152.2.13.1 libreoffice-l10n-gl-7.1.3.2-lp152.2.13.1 libreoffice-l10n-gu-7.1.3.2-lp152.2.13.1 libreoffice-l10n-gug-7.1.3.2-lp152.2.13.1 libreoffice-l10n-he-7.1.3.2-lp152.2.13.1 libreoffice-l10n-hi-7.1.3.2-lp152.2.13.1 libreoffice-l10n-hr-7.1.3.2-lp152.2.13.1 libreoffice-l10n-hsb-7.1.3.2-lp152.2.13.1 libreoffice-l10n-hu-7.1.3.2-lp152.2.13.1 libreoffice-l10n-id-7.1.3.2-lp152.2.13.1 libreoffice-l10n-is-7.1.3.2-lp152.2.13.1 libreoffice-l10n-it-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ja-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ka-7.1.3.2-lp152.2.13.1 libreoffice-l10n-kab-7.1.3.2-lp152.2.13.1 libreoffice-l10n-kk-7.1.3.2-lp152.2.13.1 libreoffice-l10n-km-7.1.3.2-lp152.2.13.1 libreoffice-l10n-kmr_Latn-7.1.3.2-lp152.2.13.1 libreoffice-l10n-kn-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ko-7.1.3.2-lp152.2.13.1 libreoffice-l10n-kok-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ks-7.1.3.2-lp152.2.13.1 libreoffice-l10n-lb-7.1.3.2-lp152.2.13.1 libreoffice-l10n-lo-7.1.3.2-lp152.2.13.1 libreoffice-l10n-lt-7.1.3.2-lp152.2.13.1 libreoffice-l10n-lv-7.1.3.2-lp152.2.13.1 libreoffice-l10n-mai-7.1.3.2-lp152.2.13.1 libreoffice-l10n-mk-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ml-7.1.3.2-lp152.2.13.1 libreoffice-l10n-mn-7.1.3.2-lp152.2.13.1 libreoffice-l10n-mni-7.1.3.2-lp152.2.13.1 libreoffice-l10n-mr-7.1.3.2-lp152.2.13.1 libreoffice-l10n-my-7.1.3.2-lp152.2.13.1 libreoffice-l10n-nb-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ne-7.1.3.2-lp152.2.13.1 libreoffice-l10n-nl-7.1.3.2-lp152.2.13.1 libreoffice-l10n-nn-7.1.3.2-lp152.2.13.1 libreoffice-l10n-nr-7.1.3.2-lp152.2.13.1 libreoffice-l10n-nso-7.1.3.2-lp152.2.13.1 libreoffice-l10n-oc-7.1.3.2-lp152.2.13.1 libreoffice-l10n-om-7.1.3.2-lp152.2.13.1 libreoffice-l10n-or-7.1.3.2-lp152.2.13.1 libreoffice-l10n-pa-7.1.3.2-lp152.2.13.1 libreoffice-l10n-pl-7.1.3.2-lp152.2.13.1 libreoffice-l10n-pt_BR-7.1.3.2-lp152.2.13.1 libreoffice-l10n-pt_PT-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ro-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ru-7.1.3.2-lp152.2.13.1 libreoffice-l10n-rw-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sa_IN-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sat-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sd-7.1.3.2-lp152.2.13.1 libreoffice-l10n-si-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sid-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sk-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sl-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sq-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sr-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ss-7.1.3.2-lp152.2.13.1 libreoffice-l10n-st-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sv-7.1.3.2-lp152.2.13.1 libreoffice-l10n-sw_TZ-7.1.3.2-lp152.2.13.1 libreoffice-l10n-szl-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ta-7.1.3.2-lp152.2.13.1 libreoffice-l10n-te-7.1.3.2-lp152.2.13.1 libreoffice-l10n-tg-7.1.3.2-lp152.2.13.1 libreoffice-l10n-th-7.1.3.2-lp152.2.13.1 libreoffice-l10n-tn-7.1.3.2-lp152.2.13.1 libreoffice-l10n-tr-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ts-7.1.3.2-lp152.2.13.1 libreoffice-l10n-tt-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ug-7.1.3.2-lp152.2.13.1 libreoffice-l10n-uk-7.1.3.2-lp152.2.13.1 libreoffice-l10n-uz-7.1.3.2-lp152.2.13.1 libreoffice-l10n-ve-7.1.3.2-lp152.2.13.1 libreoffice-l10n-vec-7.1.3.2-lp152.2.13.1 libreoffice-l10n-vi-7.1.3.2-lp152.2.13.1 libreoffice-l10n-xh-7.1.3.2-lp152.2.13.1 libreoffice-l10n-zh_CN-7.1.3.2-lp152.2.13.1 libreoffice-l10n-zh_TW-7.1.3.2-lp152.2.13.1 libreoffice-l10n-zu-7.1.3.2-lp152.2.13.1 References: https://bugzilla.suse.com/1162022 https://bugzilla.suse.com/1172941 https://bugzilla.suse.com/1175552 https://bugzilla.suse.com/1176197 https://bugzilla.suse.com/1176198 https://bugzilla.suse.com/1185505 https://bugzilla.suse.com/1185797 https://bugzilla.suse.com/1186110

1 0

openSUSE-RU-2021:0891-1: moderate: Recommended update for gpg2
by maintenance＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Recommended Update: Recommended update for gpg2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0891-1 Rating: moderate References: #1161268 #1172308 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gpg2 fixes the following issues: - Fixed an issue where the gpg-agent's ssh-agent does not handle flags in signing requests properly (bsc#1161268 and bsc#1172308). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-891=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gpg2-2.2.5-lp152.9.3.1 gpg2-debuginfo-2.2.5-lp152.9.3.1 gpg2-debugsource-2.2.5-lp152.9.3.1 - openSUSE Leap 15.2 (noarch): gpg2-lang-2.2.5-lp152.9.3.1 References: https://bugzilla.suse.com/1161268 https://bugzilla.suse.com/1172308

1 0

openSUSE-SU-2021:0892-1: moderate: Security update for libjpeg-turbo
by opensuse-security＠opensuse.org 16 Jun '21

16 Jun '21

openSUSE Security Update: Security update for libjpeg-turbo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0892-1 Rating: moderate References: #1186764 Cross-References: CVE-2020-17541 CVSS scores: CVE-2020-17541 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libjpeg-turbo fixes the following issues: - CVE-2020-17541: Fixed a stack-based buffer overflow in the "transform" component (bsc#1186764). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-892=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libjpeg-turbo-1.5.3-lp152.8.6.1 libjpeg-turbo-debuginfo-1.5.3-lp152.8.6.1 libjpeg-turbo-debugsource-1.5.3-lp152.8.6.1 libjpeg62-62.2.0-lp152.8.6.1 libjpeg62-debuginfo-62.2.0-lp152.8.6.1 libjpeg62-devel-62.2.0-lp152.8.6.1 libjpeg62-turbo-1.5.3-lp152.8.6.1 libjpeg62-turbo-debugsource-1.5.3-lp152.8.6.1 libjpeg8-8.1.2-lp152.8.6.1 libjpeg8-debuginfo-8.1.2-lp152.8.6.1 libjpeg8-devel-8.1.2-lp152.8.6.1 libturbojpeg0-8.1.2-lp152.8.6.1 libturbojpeg0-debuginfo-8.1.2-lp152.8.6.1 - openSUSE Leap 15.2 (x86_64): libjpeg62-32bit-62.2.0-lp152.8.6.1 libjpeg62-32bit-debuginfo-62.2.0-lp152.8.6.1 libjpeg62-devel-32bit-62.2.0-lp152.8.6.1 libjpeg8-32bit-8.1.2-lp152.8.6.1 libjpeg8-32bit-debuginfo-8.1.2-lp152.8.6.1 libjpeg8-devel-32bit-8.1.2-lp152.8.6.1 libturbojpeg0-32bit-8.1.2-lp152.8.6.1 libturbojpeg0-32bit-debuginfo-8.1.2-lp152.8.6.1 References: https://www.suse.com/security/cve/CVE-2020-17541.html https://bugzilla.suse.com/1186764

1 0