June 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2021:0930-1: moderate: Security update for freeradius-server
by opensuse-security＠opensuse.org 27 Jun '21

27 Jun '21

openSUSE Security Update: Security update for freeradius-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0930-1 Rating: moderate References: #1184016 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for freeradius-server fixes the following issues: - Fixed plaintext password entries in logfiles (bsc#1184016). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-930=1 Package List: - openSUSE Leap 15.2 (x86_64): freeradius-server-3.0.21-lp152.2.9.1 freeradius-server-debuginfo-3.0.21-lp152.2.9.1 freeradius-server-debugsource-3.0.21-lp152.2.9.1 freeradius-server-devel-3.0.21-lp152.2.9.1 freeradius-server-doc-3.0.21-lp152.2.9.1 freeradius-server-krb5-3.0.21-lp152.2.9.1 freeradius-server-krb5-debuginfo-3.0.21-lp152.2.9.1 freeradius-server-ldap-3.0.21-lp152.2.9.1 freeradius-server-ldap-debuginfo-3.0.21-lp152.2.9.1 freeradius-server-libs-3.0.21-lp152.2.9.1 freeradius-server-libs-debuginfo-3.0.21-lp152.2.9.1 freeradius-server-mysql-3.0.21-lp152.2.9.1 freeradius-server-mysql-debuginfo-3.0.21-lp152.2.9.1 freeradius-server-perl-3.0.21-lp152.2.9.1 freeradius-server-perl-debuginfo-3.0.21-lp152.2.9.1 freeradius-server-postgresql-3.0.21-lp152.2.9.1 freeradius-server-postgresql-debuginfo-3.0.21-lp152.2.9.1 freeradius-server-python3-3.0.21-lp152.2.9.1 freeradius-server-python3-debuginfo-3.0.21-lp152.2.9.1 freeradius-server-sqlite-3.0.21-lp152.2.9.1 freeradius-server-sqlite-debuginfo-3.0.21-lp152.2.9.1 freeradius-server-utils-3.0.21-lp152.2.9.1 freeradius-server-utils-debuginfo-3.0.21-lp152.2.9.1 References: https://bugzilla.suse.com/1184016

1 0

openSUSE-RU-2021:0928-1: moderate: Recommended update for sapnwbootstrap-formula
by maintenance＠opensuse.org 26 Jun '21

26 Jun '21

openSUSE Recommended Update: Recommended update for sapnwbootstrap-formula ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0928-1 Rating: moderate References: #1185627 #1186236 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sapnwbootstrap-formula fixes the following issues: Update from version 0.6.2 to version 0.6.4: - Set the default empty dictionary for `virtual_addresses` and ensure a dictionary is obtained if the value is `None`. This change is needed for SUSE Manager. (bsc#1185627) - Fixed an issue where the `azure-lb` resources for `ASCS/ERS` were not added to the corresponding resource group. (bsc#1186236) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-928=1 Package List: - openSUSE Leap 15.2 (noarch): sapnwbootstrap-formula-0.6.4+git.1621842068.a86c37c-lp152.2.15.1 References: https://bugzilla.suse.com/1185627 https://bugzilla.suse.com/1186236

1 0

openSUSE-RU-2021:0929-1: moderate: Recommended update for prometheus-ha_cluster_exporter
by maintenance＠opensuse.org 26 Jun '21

26 Jun '21

openSUSE Recommended Update: Recommended update for prometheus-ha_cluster_exporter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0929-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for prometheus-ha_cluster_exporter fixes the following issues: Update from version 1.2.2 to version 1.2.3: - Compress GitHub artifacts after having built them. - Fix cloned resource collection and track stopped resources even when they are cloned. `Pacemaker Clone Resources` appear multiple times in `crm_mon`; since the main discriminator field is the node, and that's missing when a resource is stopped, the cloned and stopped entries will appear multiple times in the `crm_mon` output, with the exact same fields and values: this is a problem for the `Prometheus SDK`, which doesn't expect duplicate metrics over the course of a single collection cycle. - Remove the `make download` target, which was required when using old Go versions. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-929=1 Package List: - openSUSE Leap 15.2 (x86_64): prometheus-ha_cluster_exporter-1.2.3+git.1622185790.d319147-lp152.2.15.1 References:

1 0

openSUSE-RU-2021:0927-1: moderate: Recommended update for obs-service-kiwi_metainfo_helper
by maintenance＠opensuse.org 26 Jun '21

26 Jun '21

openSUSE Recommended Update: Recommended update for obs-service-kiwi_metainfo_helper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0927-1 Rating: moderate References: #1180263 SLE-12986 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for obs-service-kiwi_metainfo_helper fixes the following issues: Version update to 0.3: - Provide various modified spellings of PRETTY_NAME useful for writing KIWI image definitions with reduced diff between SLE, Leap and Tumbleweed. DASHED satisfies the requirement that kiwi image names must not have spaces. The BEFORE_PAREN variations drop the release label in parentheses (SLE only) and can be used as a stable name for image registries and WSL app store submissions. * VENDOR * PRETTY_NAME_DASHED * PRETTY_NAME_BEFORE_PAREN * PRETTY_NAME_BEFORE_PAREN_DASHED (Needed for jsc#SLE-12986) - Update README and service definition XML to reflect all variables - Don't enable pipefail: rpm got SIGPIPE because grep -q exits early and closes the other end, which made the whole expression fail - Read os-release from the to be installed RPMs. This avoids pulling in distribution-release when not necessary (boo#1180263) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-927=1 Package List: - openSUSE Leap 15.2 (noarch): obs-service-kiwi_metainfo_helper-0.3-lp152.3.6.1 References: https://bugzilla.suse.com/1180263

1 0

openSUSE-SU-2021:0926-1: important: Security update for tor
by opensuse-security＠opensuse.org 25 Jun '21

25 Jun '21

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0926-1 Rating: important References: #1179331 #1181244 #1187322 #1187323 #1187324 #1187325 Cross-References: CVE-2021-34548 CVE-2021-34549 CVE-2021-34550 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update for tor fixes the following issues: tor 0.4.5.9 * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322) * Detect more failure conditions from the OpenSSL RNG code (boo#1187323) * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324) * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325) tor 0.4.5.8 * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html * allow Linux sandbox with Glibc 2.33 * work with autoconf 2.70+ * several other minor features and bugfixes (see announcement) - Fix logging issue due to systemd picking up stdout - boo#1181244 Continue to log notices to syslog by default. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-926=1 Package List: - openSUSE Leap 15.2 (x86_64): tor-0.4.5.9-lp152.2.12.1 tor-debuginfo-0.4.5.9-lp152.2.12.1 tor-debugsource-0.4.5.9-lp152.2.12.1 References: https://www.suse.com/security/cve/CVE-2021-34548.html https://www.suse.com/security/cve/CVE-2021-34549.html https://www.suse.com/security/cve/CVE-2021-34550.html https://bugzilla.suse.com/1179331 https://bugzilla.suse.com/1181244 https://bugzilla.suse.com/1187322 https://bugzilla.suse.com/1187323 https://bugzilla.suse.com/1187324 https://bugzilla.suse.com/1187325

1 0

openSUSE-SU-2021:0925-1: important: Security update for openexr
by opensuse-security＠opensuse.org 25 Jun '21

25 Jun '21

openSUSE Security Update: Security update for openexr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0925-1 Rating: important References: #1187310 #1187395 Cross-References: CVE-2021-3598 CVE-2021-3605 CVSS scores: CVE-2021-3598 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-3605 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openexr fixes the following issues: - Fixed CVE-2021-3605 [bsc#1187395]: Heap buffer overflow in the rleUncompress function - Fixed CVE-2021-3598 [bsc#1187310]: Heap buffer overflow in Imf_3_1:CharPtrIO:readChars This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-925=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libIlmImf-2_2-23-2.2.1-lp152.7.17.1 libIlmImf-2_2-23-debuginfo-2.2.1-lp152.7.17.1 libIlmImfUtil-2_2-23-2.2.1-lp152.7.17.1 libIlmImfUtil-2_2-23-debuginfo-2.2.1-lp152.7.17.1 openexr-2.2.1-lp152.7.17.1 openexr-debuginfo-2.2.1-lp152.7.17.1 openexr-debugsource-2.2.1-lp152.7.17.1 openexr-devel-2.2.1-lp152.7.17.1 openexr-doc-2.2.1-lp152.7.17.1 - openSUSE Leap 15.2 (x86_64): libIlmImf-2_2-23-32bit-2.2.1-lp152.7.17.1 libIlmImf-2_2-23-32bit-debuginfo-2.2.1-lp152.7.17.1 libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.17.1 libIlmImfUtil-2_2-23-32bit-debuginfo-2.2.1-lp152.7.17.1 References: https://www.suse.com/security/cve/CVE-2021-3598.html https://www.suse.com/security/cve/CVE-2021-3605.html https://bugzilla.suse.com/1187310 https://bugzilla.suse.com/1187395

1 0

openSUSE-RU-2021:0924-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 25 Jun '21

25 Jun '21

openSUSE Recommended Update: Recommended update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0924-1 Rating: moderate References: #1173557 #1177884 #1177928 #1180583 #1180584 #1180585 #1185178 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update fixes the following issues: golang-github-prometheus-prometheus: - Add tarball with vendor modules and web assets - Read formula data from exporters map - Add support for TLS targets - Upgrade to upstream version 2.26.0 + Changes * Alerting: Using Alertmanager v2 API by default. * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. * UI: Make the React UI default. * Remote write: The following metrics were removed/renamed in remote write. > prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send. > prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total. > prometheus_remote_storage_failed_samples_total -> prometheus_remote_storage_samples_failed_total. > prometheus_remote_storage_retried_samples_total -> prometheus_remote_storage_samples_retried_total. > prometheus_remote_storage_dropped_samples_total -> prometheus_remote_storage_samples_dropped_total. > prometheus_remote_storage_pending_samples -> prometheus_remote_storage_samples_pending. * Remote: Do not collect non-initialized timestamp metrics. + Features * Remote: Add support for AWS SigV4 auth method for remote_write. * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. * Include a new `--enable-feature=` flag that enables experimental features. * Add TLS and basic authentication to HTTP endpoints. * promtool: Add check web-config subcommand to check web config files. * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. + Enhancements * PromQL: Add last_over_time, sgn, clamp functions. * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. * Scrape: Add follow_redirects option to scrape configuration. * Remote: Allow retries on HTTP 429 response code for remote_write. * Remote: Allow configuring custom headers for remote_read. * UI: Hitting Enter now triggers new query. * UI: Better handling of long rule and names on the /rules and /targets pages. * UI: Add collapse/expand all button on the /targets page. * Add optional name property to testgroup for better test failure output. * Add warnings into React Panel on the Graph page. * TSDB: Increase the number of buckets for the compaction duration metric. * Remote: Allow passing along custom remote_write HTTP headers. * Mixins: Scope grafana configuration. * Kubernetes SD: Add endpoint labels metadata. * UI: Expose total number of label pairs in head in TSDB stats page. * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. * Cache basic authentication results to significantly improve performance of HTTP endpoints. * HTTP API: Fast-fail queries with only empty matchers. * HTTP API: Support matchers for labels API. * promtool: Improve checking of URLs passed on the command line. * SD: Expose IPv6 as a label in EC2 SD. * SD: Reuse EC2 client, reducing frequency of requesting credentials. * TSDB: Add logging when compaction takes more than the block time range. * TSDB: Avoid unnecessary GC runs after compaction. * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. * TSDB: Make the snapshot directory name always the same length. * TSDB: Create a checkpoint only once at the end of all head compactions. * TSDB: Avoid Series API from hitting the chunks. * TSDB: Cache label name and last value when adding series during compactions making compactions faster. * PromQL: Improved performance of Hash method making queries a bit faster. * promtool: tsdb list now prints block sizes. * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. * SD: Add filtering of services to Docker Swarm SD. + Bug fixes * API: Fix global URL when external address has no port. * Deprecate unused flag --alertmanager.timeout. python-hwdata: - Modified to build on RHEL8. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-924=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): memcached-1.5.6-lp152.6.3.1 memcached-debuginfo-1.5.6-lp152.6.3.1 memcached-debugsource-1.5.6-lp152.6.3.1 memcached-devel-1.5.6-lp152.6.3.1 - openSUSE Leap 15.2 (noarch): ansible-2.9.21-lp152.2.4.1 ansible-doc-2.9.21-lp152.2.4.1 ansible-test-2.9.21-lp152.2.4.1 python2-hwdata-2.3.5-lp152.2.3.1 python2-python-memcached-1.59-lp152.3.3.1 python2-pyvmomi-6.7.3-lp152.2.3.1 python2-straight-plugin-1.5.0-lp152.3.3.1 python3-hwdata-2.3.5-lp152.2.3.1 python3-python-memcached-1.59-lp152.3.3.1 python3-pyvmomi-6.7.3-lp152.2.3.1 python3-straight-plugin-1.5.0-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): golang-github-prometheus-prometheus-2.26.0-lp152.3.10.1 python-multidict-debugsource-4.5.2-lp152.2.6.1 python-yarl-debugsource-1.3.0-lp152.2.9.1 python3-multidict-4.5.2-lp152.2.6.1 python3-multidict-debuginfo-4.5.2-lp152.2.6.1 python3-yarl-1.3.0-lp152.2.9.1 python3-yarl-debuginfo-1.3.0-lp152.2.9.1 References: https://bugzilla.suse.com/1173557 https://bugzilla.suse.com/1177884 https://bugzilla.suse.com/1177928 https://bugzilla.suse.com/1180583 https://bugzilla.suse.com/1180584 https://bugzilla.suse.com/1180585 https://bugzilla.suse.com/1185178

1 0

openSUSE-RU-2021:0923-1: Recommended update for ntp
by maintenance＠opensuse.org 25 Jun '21

25 Jun '21

openSUSE Recommended Update: Recommended update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0923-1 Rating: low References: SLE-15482 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for ntp fixes the following issues: - Adjusted the man page documentation to clarify that "interface ignore all" does not cover the wildcard and localhost addresses (jsc#SLE-15482) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-923=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ntp-4.2.8p15-lp152.3.9.1 ntp-debuginfo-4.2.8p15-lp152.3.9.1 ntp-debugsource-4.2.8p15-lp152.3.9.1 ntp-doc-4.2.8p15-lp152.3.9.1 References:

1 0

openSUSE-RU-2021:0922-1: moderate: Recommended update for hexchat
by maintenance＠opensuse.org 25 Jun '21

25 Jun '21

openSUSE Recommended Update: Recommended update for hexchat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0922-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for hexchat fixes the following issues: - add Libera chat (merge from Factory). feature-add-libera-chat.patch Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-922=1 Package List: - openSUSE Leap 15.2 (x86_64): hexchat-2.12.4-lp152.4.3.1 hexchat-debuginfo-2.12.4-lp152.4.3.1 hexchat-debugsource-2.12.4-lp152.4.3.1 hexchat-devel-2.12.4-lp152.4.3.1 hexchat-plugins-lua-2.12.4-lp152.4.3.1 hexchat-plugins-lua-debuginfo-2.12.4-lp152.4.3.1 hexchat-plugins-perl-2.12.4-lp152.4.3.1 hexchat-plugins-perl-debuginfo-2.12.4-lp152.4.3.1 hexchat-plugins-python3-2.12.4-lp152.4.3.1 hexchat-plugins-python3-debuginfo-2.12.4-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): hexchat-lang-2.12.4-lp152.4.3.1 References:

1 0

openSUSE-RU-2021:0921-1: moderate: Recommended update for nvme-cli
by maintenance＠opensuse.org 25 Jun '21

25 Jun '21

openSUSE Recommended Update: Recommended update for nvme-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0921-1 Rating: moderate References: #1186719 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nvme-cli fixes the following issues: - - Do not print error message when opening controller (boo#1186719) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-921=1 Package List: - openSUSE Leap 15.2 (x86_64): nvme-cli-1.10-lp152.2.15.1 nvme-cli-debuginfo-1.10-lp152.2.15.1 nvme-cli-debugsource-1.10-lp152.2.15.1 nvme-cli-regress-script-1.10-lp152.2.15.1 References: https://bugzilla.suse.com/1186719

1 0