July 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:1017-1: moderate: Recommended update for proteus
by maintenance＠lists.opensuse.org 09 Jul '21

09 Jul '21

openSUSE Recommended Update: Recommended update for proteus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1017-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for proteus fixes the following issues: proteus was updated to 5.0.9 - Bugfix Release This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1017=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): proteus-5.0.9-bp152.2.8.1 References:

1 0

openSUSE-RU-2021:1817-1: moderate: Recommended update for google-poppins-fonts
by maintenance＠lists.opensuse.org 09 Jul '21

09 Jul '21

openSUSE Recommended Update: Recommended update for google-poppins-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1817-1 Rating: moderate References: #1186642 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of google-poppins-fonts releases it in a higher version than on SLES 15 SP2, to allow better migration and solve a openSUSE Leap 15.3 patch problem. (bsc#1186642) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-1817=1 Package List: - openSUSE Leap 15.3 (noarch): google-poppins-fonts-4.003-6.3.1 References: https://bugzilla.suse.com/1186642

1 0

openSUSE-SU-2021:1014-1: important: Security update for roundcubemail
by security＠lists.opensuse.org 09 Jul '21

09 Jul '21

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1014-1 Rating: important References: #1180399 #1187706 #1187707 Cross-References: CVE-2020-18670 CVE-2020-18671 CVE-2020-35730 CVSS scores: CVE-2020-18670 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2020-18671 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2020-35730 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious content. References: - CVE-2020-18670: Cross Site Scripting (XSS) vulneraibility via database host and user in /installer/test.php (boo#1187707) - CVE-2020-18671: Cross Site Scripting (XSS) vulnerability via smtp config in /installer/test.php (boo#1187706) - CVE-2020-35730: cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious content (boo#1180399) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-1014=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): roundcubemail-1.3.16-bp152.4.18.1 References: https://www.suse.com/security/cve/CVE-2020-18670.html https://www.suse.com/security/cve/CVE-2020-18671.html https://www.suse.com/security/cve/CVE-2020-35730.html https://bugzilla.suse.com/1180399 https://bugzilla.suse.com/1187706 https://bugzilla.suse.com/1187707

1 0

openSUSE-SU-2021:1012-1: important: Security update for gstreamer-plugins-bad
by security＠lists.opensuse.org 09 Jul '21

09 Jul '21

openSUSE Security Update: Security update for gstreamer-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1012-1 Rating: important References: #1181255 Cross-References: CVE-2021-3185 CVSS scores: CVE-2021-3185 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-3185 (SUSE): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-plugins-bad fixes the following issues: - Update to version 1.16.3: - CVE-2021-3185: buffer overflow in gst_h264_slice_parse_dec_ref_pic_marking() (bsc#1181255) - amcvideodec: fix sync meta copying not taking a reference - audiobuffersplit: Perform discont tracking on running time - audiobuffersplit: Specify in the template caps that only interleaved audio is supported - audiobuffersplit: Unset DISCONT flag if not discontinuous - autoconvert: Fix lock-less exchange or free condition - autoconvert: fix compiler warnings with g_atomic on recent GLib versions - avfvideosrc: element requests camera permissions even with capture-screen property is true - codecparsers: h264parser: guard against ref_pic_markings overflow - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated - dtls/connection: fix EOF handling with openssl 1.1.1e - fdkaacdec: add support for mpegversion=2 - hls: Check nettle version to ensure AES128 support - ipcpipeline: Rework compiler checks - interlace: Increment phase_index before checking if we're at the end of the phase - h264parser: Do not allocate too large size of memory for registered user data SEI - ladspa: fix unbounded integer properties - modplug: avoid division by zero - msdkdec: Fix GstMsdkContext leak - msdkenc: fix leaks on windows - musepackdec: Don't fail all queries if no sample rate is known yet - openslessink: Allow openslessink to handle 48kHz streams. - opencv: allow compilation against 4.2.x - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc - vulkan: Drop use of VK_RESULT_BEGIN_RANGE - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset - wasapi: Fix possible deadlock while downwards state change - waylandsink: Clear window when pipeline is stopped - webrtc: Support non-trickle ICE candidates in the SDP - webrtc: Unmap all non-binary buffers received via the datachannel Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2021-1012=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): gstreamer-plugins-bad-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-chromaprint-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-chromaprint-debuginfo-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-debuginfo-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-debugsource-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-devel-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-doc-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-fluidsynth-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-fluidsynth-debuginfo-1.16.3-lp153.3.3.1 libgstadaptivedemux-1_0-0-1.16.3-lp153.3.3.1 libgstadaptivedemux-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstbadaudio-1_0-0-1.16.3-lp153.3.3.1 libgstbadaudio-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstbasecamerabinsrc-1_0-0-1.16.3-lp153.3.3.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstcodecparsers-1_0-0-1.16.3-lp153.3.3.1 libgstcodecparsers-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstinsertbin-1_0-0-1.16.3-lp153.3.3.1 libgstinsertbin-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstisoff-1_0-0-1.16.3-lp153.3.3.1 libgstisoff-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstmpegts-1_0-0-1.16.3-lp153.3.3.1 libgstmpegts-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstphotography-1_0-0-1.16.3-lp153.3.3.1 libgstphotography-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstplayer-1_0-0-1.16.3-lp153.3.3.1 libgstplayer-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstsctp-1_0-0-1.16.3-lp153.3.3.1 libgstsctp-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgsturidownloader-1_0-0-1.16.3-lp153.3.3.1 libgsturidownloader-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstwayland-1_0-0-1.16.3-lp153.3.3.1 libgstwayland-1_0-0-debuginfo-1.16.3-lp153.3.3.1 libgstwebrtc-1_0-0-1.16.3-lp153.3.3.1 libgstwebrtc-1_0-0-debuginfo-1.16.3-lp153.3.3.1 typelib-1_0-GstInsertBin-1_0-1.16.3-lp153.3.3.1 typelib-1_0-GstMpegts-1_0-1.16.3-lp153.3.3.1 typelib-1_0-GstPlayer-1_0-1.16.3-lp153.3.3.1 typelib-1_0-GstWebRTC-1_0-1.16.3-lp153.3.3.1 - openSUSE Leap 15.3 (aarch64_ilp32): gstreamer-plugins-bad-64bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-64bit-debuginfo-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-chromaprint-64bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-fluidsynth-64bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-fluidsynth-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstadaptivedemux-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstadaptivedemux-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstbadaudio-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstbadaudio-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstbasecamerabinsrc-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstcodecparsers-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstcodecparsers-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstinsertbin-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstinsertbin-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstisoff-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstisoff-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstmpegts-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstmpegts-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstphotography-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstphotography-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstplayer-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstplayer-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstsctp-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstsctp-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgsturidownloader-1_0-0-64bit-1.16.3-lp153.3.3.1 libgsturidownloader-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstwayland-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstwayland-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 libgstwebrtc-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstwebrtc-1_0-0-64bit-debuginfo-1.16.3-lp153.3.3.1 - openSUSE Leap 15.3 (x86_64): gstreamer-plugins-bad-32bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-32bit-debuginfo-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-chromaprint-32bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-fluidsynth-32bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-fluidsynth-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstadaptivedemux-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstadaptivedemux-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstbadaudio-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstbadaudio-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstbasecamerabinsrc-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstcodecparsers-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstcodecparsers-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstinsertbin-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstinsertbin-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstisoff-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstisoff-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstmpegts-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstmpegts-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstphotography-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstphotography-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstplayer-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstplayer-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstsctp-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstsctp-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgsturidownloader-1_0-0-32bit-1.16.3-lp153.3.3.1 libgsturidownloader-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstwayland-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstwayland-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 libgstwebrtc-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstwebrtc-1_0-0-32bit-debuginfo-1.16.3-lp153.3.3.1 - openSUSE Leap 15.3 (noarch): gstreamer-plugins-bad-lang-1.16.3-lp153.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-3185.html https://bugzilla.suse.com/1181255

1 0

openSUSE-RU-2021:1013-1: Recommended update for suse-xsl-stylesheets
by maintenance＠lists.opensuse.org 09 Jul '21

09 Jul '21

openSUSE Recommended Update: Recommended update for suse-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1013-1 Rating: low References: #1187783 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-xsl-stylesheets fixes the following issues: - updated stylesheets with the latest branding (bsc#1187783) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1013=1 Package List: - openSUSE Leap 15.2 (noarch): suse-xsl-stylesheets-2.81.0-lp152.3.3.1 References: https://bugzilla.suse.com/1187783

1 0

openSUSE-SU-2021:1884-1: important: Security update for MozillaFirefox
by security＠lists.opensuse.org 09 Jul '21

09 Jul '21

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1884-1 Rating: important References: #1185633 #1186696 Cross-References: CVE-2021-29951 CVE-2021-29964 CVE-2021-29967 CVSS scores: CVE-2021-29951 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2021-29951 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 78.11.0 ESR (bsc#1186696) * CVE-2021-29964: Out of bounds-read when parsing a `WM_COPYDATA` message * CVE-2021-29967: Memory safety bugs fixed in Firefox Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-1884=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-78.11.0-8.43.1 MozillaFirefox-branding-upstream-78.11.0-8.43.1 MozillaFirefox-debuginfo-78.11.0-8.43.1 MozillaFirefox-debugsource-78.11.0-8.43.1 MozillaFirefox-devel-78.11.0-8.43.1 MozillaFirefox-translations-common-78.11.0-8.43.1 MozillaFirefox-translations-other-78.11.0-8.43.1 - openSUSE Leap 15.3 (x86_64): MozillaFirefox-buildsymbols-78.11.0-8.43.1 References: https://www.suse.com/security/cve/CVE-2021-29951.html https://www.suse.com/security/cve/CVE-2021-29964.html https://www.suse.com/security/cve/CVE-2021-29967.html https://bugzilla.suse.com/1185633 https://bugzilla.suse.com/1186696

1 0

openSUSE-RU-2021:0980-1: moderate: Recommended update for vlc
by maintenance＠opensuse.org 07 Jul '21

07 Jul '21

openSUSE Recommended Update: Recommended update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0980-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for vlc fixes the following issues: Update to version 3.0.16: + Video Output: Fix a D3D11 crash on Windows 8/8.1. + Access: Fix RTSP server timeout handling. + Interfaces: macOS: Add touchbar support. + Misc: Multiple settings improvements. Changes from version 3.0.15: + Core: Add Opus & Alac wave format mappings. + Access: Fix opening DVD folders with non-ascii characters. + Demux: - Fix asf regression with broadcast streams. - MP4: Fix audio drop on seek. + Video Output: - Fix seek & volume sliders overlapping with subtitles. - Fix delays when seeking with D3D11. + Text renderer: Improve freetype fonts outlining. + Misc: Fix GnuTLS support for Windows XP. Changes from version 3.0.14: + Core: - Fix double loading of slave input. - Fix an issue causing the auto-updater not to launch the new version installer. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-980=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): libvlc5-3.0.16-bp152.2.15.1 libvlccore9-3.0.16-bp152.2.15.1 vlc-3.0.16-bp152.2.15.1 vlc-codec-gstreamer-3.0.16-bp152.2.15.1 vlc-devel-3.0.16-bp152.2.15.1 vlc-jack-3.0.16-bp152.2.15.1 vlc-noX-3.0.16-bp152.2.15.1 vlc-opencv-3.0.16-bp152.2.15.1 vlc-qt-3.0.16-bp152.2.15.1 vlc-vdpau-3.0.16-bp152.2.15.1 - openSUSE Backports SLE-15-SP2 (noarch): vlc-lang-3.0.16-bp152.2.15.1 References:

1 0

openSUSE-RU-2021:2266-1: important: Recommended update for clamav
by maintenance＠opensuse.org 07 Jul '21

07 Jul '21

openSUSE Recommended Update: Recommended update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2266-1 Rating: important References: #1187509 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for clamav fixes the following issue: - In the "clamscan" and "clamdscan" manpages, document that files over a certain size by default will silently not be scanned and how this can be adjusted. (bsc#1187509) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2266=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): clamav-0.103.2-3.29.1 clamav-debuginfo-0.103.2-3.29.1 clamav-debugsource-0.103.2-3.29.1 clamav-devel-0.103.2-3.29.1 libclamav9-0.103.2-3.29.1 libclamav9-debuginfo-0.103.2-3.29.1 libfreshclam2-0.103.2-3.29.1 libfreshclam2-debuginfo-0.103.2-3.29.1 References: https://bugzilla.suse.com/1187509

1 0

openSUSE-SU-2021:0977-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0977-1 Rating: important References: #1182918 #1186361 Cross-References: CVE-2021-2145 CVE-2021-2250 CVE-2021-2264 CVE-2021-2266 CVE-2021-2279 CVE-2021-2280 CVE-2021-2281 CVE-2021-2282 CVE-2021-2283 CVE-2021-2284 CVE-2021-2285 CVE-2021-2286 CVE-2021-2287 CVE-2021-2291 CVE-2021-2296 CVE-2021-2297 CVE-2021-2306 CVE-2021-2309 CVE-2021-2310 CVE-2021-2312 CVSS scores: CVE-2021-2145 (NVD) : 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-2250 (NVD) : 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-2264 (NVD) : 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N CVE-2021-2266 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2021-2279 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-2280 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2281 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2021-2282 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2283 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2284 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2021-2285 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2286 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2021-2287 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2021-2291 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-2296 (NVD) : 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2021-2297 (NVD) : 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2021-2306 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2021-2309 (NVD) : 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-2310 (NVD) : 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2021-2312 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. Description: This update for virtualbox fixes the following issues: - Update vboxdrv.sh per boo#1186361 Version bump to 6.1.22 (released April 29 2021 by Oracle) - This is a maintenance release. The following items were fixed and/or added: - VMM: Improved performance of 64-bit Windows and Solaris guests when Hyper-V is used on recent Windows 10 hosts - VMM: Fixed frequent crashes of 64-bit Windows Vista and Server 2003 guests when Hyper-V is used - GUI: Fixed regression where user was not able to save unset default shortcuts (bug #20305) - Storage: Fixed regression in LsiLogic SAS controller emulation caused VM crash (bug #20323) - Linux Guest Additions: Fixed issue when it was not possible to run executables from mounted share (bug #20320) - Fixes for CVE-2021-2145 CVE-2021-2250 CVE-2021-2264 CVE-2021-2266 CVE-2021-2279 CVE-2021-2280 CVE-2021-2281 CVE-2021-2282 CVE-2021-2283 CVE-2021-2284 CVE-2021-2285 CVE-2021-2286 CVE-2021-2287 CVE-2021-2291 CVE-2021-2296 CVE-2021-2297 CVE-2021-2306 CVE-2021-2309 CVE-2021-2310 CVE-2021-2312 - Improve autostart security boo#1182918. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2021-977=1 Package List: - openSUSE Leap 15.3 (x86_64): python3-virtualbox-6.1.22-lp153.2.3.2 python3-virtualbox-debuginfo-6.1.22-lp153.2.3.2 virtualbox-6.1.22-lp153.2.3.2 virtualbox-debuginfo-6.1.22-lp153.2.3.2 virtualbox-debugsource-6.1.22-lp153.2.3.2 virtualbox-devel-6.1.22-lp153.2.3.2 virtualbox-guest-tools-6.1.22-lp153.2.3.2 virtualbox-guest-tools-debuginfo-6.1.22-lp153.2.3.2 virtualbox-guest-x11-6.1.22-lp153.2.3.2 virtualbox-guest-x11-debuginfo-6.1.22-lp153.2.3.2 virtualbox-kmp-debugsource-6.1.22-lp153.2.3.2 virtualbox-kmp-default-6.1.22_k5.3.18_59.5-lp153.2.3.2 virtualbox-kmp-default-debuginfo-6.1.22_k5.3.18_59.5-lp153.2.3.2 virtualbox-kmp-preempt-6.1.22_k5.3.18_59.5-lp153.2.3.2 virtualbox-kmp-preempt-debuginfo-6.1.22_k5.3.18_59.5-lp153.2.3.2 virtualbox-qt-6.1.22-lp153.2.3.2 virtualbox-qt-debuginfo-6.1.22-lp153.2.3.2 virtualbox-vnc-6.1.22-lp153.2.3.2 virtualbox-websrv-6.1.22-lp153.2.3.2 virtualbox-websrv-debuginfo-6.1.22-lp153.2.3.2 - openSUSE Leap 15.3 (noarch): virtualbox-guest-desktop-icons-6.1.22-lp153.2.3.2 virtualbox-guest-source-6.1.22-lp153.2.3.2 virtualbox-host-source-6.1.22-lp153.2.3.2 References: https://www.suse.com/security/cve/CVE-2021-2145.html https://www.suse.com/security/cve/CVE-2021-2250.html https://www.suse.com/security/cve/CVE-2021-2264.html https://www.suse.com/security/cve/CVE-2021-2266.html https://www.suse.com/security/cve/CVE-2021-2279.html https://www.suse.com/security/cve/CVE-2021-2280.html https://www.suse.com/security/cve/CVE-2021-2281.html https://www.suse.com/security/cve/CVE-2021-2282.html https://www.suse.com/security/cve/CVE-2021-2283.html https://www.suse.com/security/cve/CVE-2021-2284.html https://www.suse.com/security/cve/CVE-2021-2285.html https://www.suse.com/security/cve/CVE-2021-2286.html https://www.suse.com/security/cve/CVE-2021-2287.html https://www.suse.com/security/cve/CVE-2021-2291.html https://www.suse.com/security/cve/CVE-2021-2296.html https://www.suse.com/security/cve/CVE-2021-2297.html https://www.suse.com/security/cve/CVE-2021-2306.html https://www.suse.com/security/cve/CVE-2021-2309.html https://www.suse.com/security/cve/CVE-2021-2310.html https://www.suse.com/security/cve/CVE-2021-2312.html https://bugzilla.suse.com/1182918 https://bugzilla.suse.com/1186361

1 0

openSUSE-RU-2021:0979-1: moderate: Recommended update for product-builder
by maintenance＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Recommended Update: Recommended update for product-builder ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0979-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for product-builder fixes the following issues: product-builder was updated to 1.3.4: * fix collecting of source rpms when multiple different binary versions were used Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2021-979=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): product-builder-1.3.4-lp153.2.3.1 References:

1 0