July 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0976-1: moderate: Recommended update for createrepo_c
by maintenance＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Recommended Update: Recommended update for createrepo_c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0976-1 Rating: moderate References: #1187811 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for createrepo_c fixes the following issues: - fix segfaults when metadata loading fails [boo#1187811] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-976=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): createrepo_c-0.15.4-lp152.3.3.1 createrepo_c-debuginfo-0.15.4-lp152.3.3.1 createrepo_c-debugsource-0.15.4-lp152.3.3.1 libcreaterepo_c-devel-0.15.4-lp152.3.3.1 libcreaterepo_c0-0.15.4-lp152.3.3.1 libcreaterepo_c0-debuginfo-0.15.4-lp152.3.3.1 python3-createrepo_c-0.15.4-lp152.3.3.1 python3-createrepo_c-debuginfo-0.15.4-lp152.3.3.1 References: https://bugzilla.suse.com/1187811

1 0

openSUSE-RU-2021:0978-1: moderate: Recommended update for exim
by maintenance＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Recommended Update: Recommended update for exim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0978-1 Rating: moderate References: #1187561 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for exim fixes the following issues: Exim is in version exim-4.94.2. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2021-978=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): exim-4.94.2-bp153.2.1 eximon-4.94.2-bp153.2.1 eximstats-html-4.94.2-bp153.2.1 libspf2-2-1.2.10-bp153.2.1 libspf2-2-debuginfo-1.2.10-bp153.2.1 libspf2-debuginfo-1.2.10-bp153.2.1 libspf2-debugsource-1.2.10-bp153.2.1 libspf2-devel-1.2.10-bp153.2.1 libspf2-tools-1.2.10-bp153.2.1 libspf2-tools-debuginfo-1.2.10-bp153.2.1 References: https://bugzilla.suse.com/1187561

1 0

openSUSE-RU-2021:2261-1: moderate: Recommended update for xmlsec1
by maintenance＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Recommended Update: Recommended update for xmlsec1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2261-1 Rating: moderate References: #1177233 #1186642 #1186706 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update rereleases xmlsec1 for SUSE Linux Enterprise 15 SP3 to fix a migration issue. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2261=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libxmlsec1-1-1.2.28-7.9.1 libxmlsec1-1-debuginfo-1.2.28-7.9.1 libxmlsec1-gcrypt1-1.2.28-7.9.1 libxmlsec1-gcrypt1-debuginfo-1.2.28-7.9.1 libxmlsec1-gnutls1-1.2.28-7.9.1 libxmlsec1-gnutls1-debuginfo-1.2.28-7.9.1 libxmlsec1-nss1-1.2.28-7.9.1 libxmlsec1-nss1-debuginfo-1.2.28-7.9.1 libxmlsec1-openssl1-1.2.28-7.9.1 libxmlsec1-openssl1-debuginfo-1.2.28-7.9.1 xmlsec1-1.2.28-7.9.1 xmlsec1-debuginfo-1.2.28-7.9.1 xmlsec1-debugsource-1.2.28-7.9.1 xmlsec1-devel-1.2.28-7.9.1 xmlsec1-gcrypt-devel-1.2.28-7.9.1 xmlsec1-gnutls-devel-1.2.28-7.9.1 xmlsec1-nss-devel-1.2.28-7.9.1 xmlsec1-openssl-devel-1.2.28-7.9.1 References: https://bugzilla.suse.com/1177233 https://bugzilla.suse.com/1186642 https://bugzilla.suse.com/1186706

1 0

openSUSE-RU-2021:2258-1: moderate: Recommended update for buildah
by maintenance＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Recommended Update: Recommended update for buildah ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2258-1 Rating: moderate References: #1187812 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for buildah fixes the following issues: - buildah requires cni for usage (bsc#1187812) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2258=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): buildah-1.17.0-3.9.1 References: https://bugzilla.suse.com/1187812

1 0

openSUSE-RU-2021:2254-1: moderate: Recommended update for raptor
by maintenance＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Recommended Update: Recommended update for raptor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2254-1 Rating: moderate References: #1186642 #1187464 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for raptor fixes the following issue: - raptor was not delivered correctly for openSUSE Leap 15.3 (bsc#1186642) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2254=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libraptor-devel-2.0.15-9.7.1 libraptor2-0-2.0.15-9.7.1 libraptor2-0-debuginfo-2.0.15-9.7.1 raptor-2.0.15-9.7.1 raptor-debuginfo-2.0.15-9.7.1 raptor-debugsource-2.0.15-9.7.1 - openSUSE Leap 15.3 (x86_64): libraptor2-0-32bit-2.0.15-9.7.1 libraptor2-0-32bit-debuginfo-2.0.15-9.7.1 References: https://bugzilla.suse.com/1186642 https://bugzilla.suse.com/1187464

1 0

openSUSE-RU-2021:2255-1: moderate: Recommended update for myspell-dictionaries, ucpp
by maintenance＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Recommended Update: Recommended update for myspell-dictionaries, ucpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2255-1 Rating: moderate References: #1186642 #1187464 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update rereleases myspell-dictionaries and ucpp for SUSE Linux Enterprise 15 sp3 to fix a migration issue. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2255=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libucpp13-1.3.4-3.4.1 libucpp13-debuginfo-1.3.4-3.4.1 myspell-dictionaries-20191219-3.21.1 myspell-lightproof-en-20191219-3.21.1 myspell-lightproof-hu_HU-20191219-3.21.1 myspell-lightproof-pt_BR-20191219-3.21.1 myspell-lightproof-ru_RU-20191219-3.21.1 ucpp-1.3.4-3.4.1 ucpp-debuginfo-1.3.4-3.4.1 ucpp-debugsource-1.3.4-3.4.1 ucpp-devel-1.3.4-3.4.1 - openSUSE Leap 15.3 (noarch): myspell-af_NA-20191219-3.21.1 myspell-af_ZA-20191219-3.21.1 myspell-an-20191219-3.21.1 myspell-an_ES-20191219-3.21.1 myspell-ar-20191219-3.21.1 myspell-ar_AE-20191219-3.21.1 myspell-ar_BH-20191219-3.21.1 myspell-ar_DZ-20191219-3.21.1 myspell-ar_EG-20191219-3.21.1 myspell-ar_IQ-20191219-3.21.1 myspell-ar_JO-20191219-3.21.1 myspell-ar_KW-20191219-3.21.1 myspell-ar_LB-20191219-3.21.1 myspell-ar_LY-20191219-3.21.1 myspell-ar_MA-20191219-3.21.1 myspell-ar_OM-20191219-3.21.1 myspell-ar_QA-20191219-3.21.1 myspell-ar_SA-20191219-3.21.1 myspell-ar_SD-20191219-3.21.1 myspell-ar_SY-20191219-3.21.1 myspell-ar_TN-20191219-3.21.1 myspell-ar_YE-20191219-3.21.1 myspell-be_BY-20191219-3.21.1 myspell-bg_BG-20191219-3.21.1 myspell-bn_BD-20191219-3.21.1 myspell-bn_IN-20191219-3.21.1 myspell-bo-20191219-3.21.1 myspell-bo_CN-20191219-3.21.1 myspell-bo_IN-20191219-3.21.1 myspell-br_FR-20191219-3.21.1 myspell-bs-20191219-3.21.1 myspell-bs_BA-20191219-3.21.1 myspell-ca-20191219-3.21.1 myspell-ca_AD-20191219-3.21.1 myspell-ca_ES-20191219-3.21.1 myspell-ca_ES_valencia-20191219-3.21.1 myspell-ca_FR-20191219-3.21.1 myspell-ca_IT-20191219-3.21.1 myspell-cs_CZ-20191219-3.21.1 myspell-da_DK-20191219-3.21.1 myspell-de-20191219-3.21.1 myspell-de_AT-20191219-3.21.1 myspell-de_CH-20191219-3.21.1 myspell-de_DE-20191219-3.21.1 myspell-el_GR-20191219-3.21.1 myspell-en-20191219-3.21.1 myspell-en_AU-20191219-3.21.1 myspell-en_BS-20191219-3.21.1 myspell-en_BZ-20191219-3.21.1 myspell-en_CA-20191219-3.21.1 myspell-en_GB-20191219-3.21.1 myspell-en_GH-20191219-3.21.1 myspell-en_IE-20191219-3.21.1 myspell-en_IN-20191219-3.21.1 myspell-en_JM-20191219-3.21.1 myspell-en_MW-20191219-3.21.1 myspell-en_NA-20191219-3.21.1 myspell-en_NZ-20191219-3.21.1 myspell-en_PH-20191219-3.21.1 myspell-en_TT-20191219-3.21.1 myspell-en_US-20191219-3.21.1 myspell-en_ZA-20191219-3.21.1 myspell-en_ZW-20191219-3.21.1 myspell-es-20191219-3.21.1 myspell-es_AR-20191219-3.21.1 myspell-es_BO-20191219-3.21.1 myspell-es_CL-20191219-3.21.1 myspell-es_CO-20191219-3.21.1 myspell-es_CR-20191219-3.21.1 myspell-es_CU-20191219-3.21.1 myspell-es_DO-20191219-3.21.1 myspell-es_EC-20191219-3.21.1 myspell-es_ES-20191219-3.21.1 myspell-es_GT-20191219-3.21.1 myspell-es_HN-20191219-3.21.1 myspell-es_MX-20191219-3.21.1 myspell-es_NI-20191219-3.21.1 myspell-es_PA-20191219-3.21.1 myspell-es_PE-20191219-3.21.1 myspell-es_PR-20191219-3.21.1 myspell-es_PY-20191219-3.21.1 myspell-es_SV-20191219-3.21.1 myspell-es_UY-20191219-3.21.1 myspell-es_VE-20191219-3.21.1 myspell-et_EE-20191219-3.21.1 myspell-fr_BE-20191219-3.21.1 myspell-fr_CA-20191219-3.21.1 myspell-fr_CH-20191219-3.21.1 myspell-fr_FR-20191219-3.21.1 myspell-fr_LU-20191219-3.21.1 myspell-fr_MC-20191219-3.21.1 myspell-gd_GB-20191219-3.21.1 myspell-gl-20191219-3.21.1 myspell-gl_ES-20191219-3.21.1 myspell-gu_IN-20191219-3.21.1 myspell-gug-20191219-3.21.1 myspell-gug_PY-20191219-3.21.1 myspell-he_IL-20191219-3.21.1 myspell-hi_IN-20191219-3.21.1 myspell-hr_HR-20191219-3.21.1 myspell-hu_HU-20191219-3.21.1 myspell-id-20191219-3.21.1 myspell-id_ID-20191219-3.21.1 myspell-is-20191219-3.21.1 myspell-is_IS-20191219-3.21.1 myspell-it_IT-20191219-3.21.1 myspell-kmr_Latn-20191219-3.21.1 myspell-kmr_Latn_SY-20191219-3.21.1 myspell-kmr_Latn_TR-20191219-3.21.1 myspell-lo_LA-20191219-3.21.1 myspell-lt_LT-20191219-3.21.1 myspell-lv_LV-20191219-3.21.1 myspell-nb_NO-20191219-3.21.1 myspell-ne_NP-20191219-3.21.1 myspell-nl_BE-20191219-3.21.1 myspell-nl_NL-20191219-3.21.1 myspell-nn_NO-20191219-3.21.1 myspell-no-20191219-3.21.1 myspell-oc_FR-20191219-3.21.1 myspell-pl_PL-20191219-3.21.1 myspell-pt_AO-20191219-3.21.1 myspell-pt_BR-20191219-3.21.1 myspell-pt_PT-20191219-3.21.1 myspell-ro-20191219-3.21.1 myspell-ro_RO-20191219-3.21.1 myspell-ru_RU-20191219-3.21.1 myspell-si_LK-20191219-3.21.1 myspell-sk_SK-20191219-3.21.1 myspell-sl_SI-20191219-3.21.1 myspell-sq_AL-20191219-3.21.1 myspell-sr-20191219-3.21.1 myspell-sr_CS-20191219-3.21.1 myspell-sr_Latn_CS-20191219-3.21.1 myspell-sr_Latn_RS-20191219-3.21.1 myspell-sr_RS-20191219-3.21.1 myspell-sv_FI-20191219-3.21.1 myspell-sv_SE-20191219-3.21.1 myspell-sw_TZ-20191219-3.21.1 myspell-te-20191219-3.21.1 myspell-te_IN-20191219-3.21.1 myspell-th_TH-20191219-3.21.1 myspell-tr-20191219-3.21.1 myspell-tr_TR-20191219-3.21.1 myspell-uk_UA-20191219-3.21.1 myspell-vi-20191219-3.21.1 myspell-vi_VN-20191219-3.21.1 myspell-zu_ZA-20191219-3.21.1 References: https://bugzilla.suse.com/1186642 https://bugzilla.suse.com/1187464

1 0

openSUSE-RU-2021:0975-1: moderate: Recommended update for proteus
by maintenance＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Recommended Update: Recommended update for proteus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0975-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for proteus fixes the following issues: proteus was updated to 5.0.9 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-975=1 Package List: - openSUSE Leap 15.2 (noarch): proteus-5.0.9-lp152.2.6.1 References:

1 0

openSUSE-SU-2021:0974-1: important: Security update for roundcubemail
by opensuse-security＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0974-1 Rating: important References: #1180399 #1187706 #1187707 Cross-References: CVE-2020-18670 CVE-2020-18671 CVE-2020-35730 CVSS scores: CVE-2020-18670 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2020-18671 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2020-35730 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious content. References: - CVE-2020-18670: Cross Site Scripting (XSS) vulneraibility via database host and user in /installer/test.php (boo#1187707) - CVE-2020-18671: Cross Site Scripting (XSS) vulnerability via smtp config in /installer/test.php (boo#1187706) - CVE-2020-35730: cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious content (boo#1180399) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-974=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): roundcubemail-1.3.16-bp152.4.14.1 References: https://www.suse.com/security/cve/CVE-2020-18670.html https://www.suse.com/security/cve/CVE-2020-18671.html https://www.suse.com/security/cve/CVE-2020-35730.html https://bugzilla.suse.com/1180399 https://bugzilla.suse.com/1187706 https://bugzilla.suse.com/1187707

1 0

openSUSE-SU-2021:0973-1: important: Security update for libqt5-qtwebengine
by opensuse-security＠opensuse.org 06 Jul '21

06 Jul '21

openSUSE Security Update: Security update for libqt5-qtwebengine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0973-1 Rating: important References: #1130395 #1158516 #1163744 #1163766 #1182233 Cross-References: CVE-2020-16044 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-21123 CVE-2021-21125 CVE-2021-21126 CVE-2021-21127 CVE-2021-21128 CVE-2021-21129 CVE-2021-21130 CVE-2021-21131 CVE-2021-21132 CVE-2021-21135 CVE-2021-21137 CVE-2021-21140 CVE-2021-21141 CVE-2021-21145 CVE-2021-21146 CVE-2021-21147 CVE-2021-21148 CVE-2021-21149 CVE-2021-21150 CVE-2021-21152 CVE-2021-21153 CVE-2021-21156 CVE-2021-21157 CVSS scores: CVE-2020-16044 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21118 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21119 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21120 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21121 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-21122 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21123 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-21125 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2021-21126 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-21127 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21128 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21129 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-21130 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-21131 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-21132 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-21135 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-21137 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-21140 (NVD) : 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-21141 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-21148 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free in WebSQL - CVE-2021-21121: Use after free in Omnibox - CVE-2021-21122: Use after free in Blink - CVE-2021-21123: Insufficient data validation in File System API - CVE-2021-21125: Insufficient policy enforcement in File System API - CVE-2021-21126: Insufficient policy enforcement in extensions - CVE-2021-21127: Insufficient policy enforcement in extensions - CVE-2021-21128: Heap buffer overflow in Blink - CVE-2021-21129: Insufficient policy enforcement in File System API - CVE-2021-21130: Insufficient policy enforcement in File System API - CVE-2021-21131: Insufficient policy enforcement in File System API - CVE-2021-21132: Inappropriate implementation in DevTools - CVE-2021-21135: Inappropriate implementation in Performance API - CVE-2021-21137: Inappropriate implementation in DevTools - CVE-2021-21140: Uninitialized Use in USB - CVE-2021-21141: Insufficient policy enforcement in File System API - CVE-2021-21145: Use after free in Fonts - CVE-2021-21146: Use after free in Navigation - CVE-2021-21147: Inappropriate implementation in Skia - CVE-2021-21148: Heap buffer overflow in V8 - CVE-2021-21149: Stack overflow in Data Transfer - CVE-2021-21150: Use after free in Downloads - CVE-2021-21152: Heap buffer overflow in Media - CVE-2021-21153: Stack overflow in GPU Process - CVE-2021-21156: Heap buffer overflow in V8 - CVE-2021-21157: Use after free in Web Sockets Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-973=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libQt5Pdf5-5.15.3-lp152.3.3.4 libQt5Pdf5-debuginfo-5.15.3-lp152.3.3.4 libQt5PdfWidgets5-5.15.3-lp152.3.3.4 libQt5PdfWidgets5-debuginfo-5.15.3-lp152.3.3.4 libqt5-qtpdf-devel-5.15.3-lp152.3.3.4 libqt5-qtpdf-examples-5.15.3-lp152.3.3.4 libqt5-qtpdf-examples-debuginfo-5.15.3-lp152.3.3.4 libqt5-qtpdf-imports-5.15.3-lp152.3.3.4 libqt5-qtpdf-imports-debuginfo-5.15.3-lp152.3.3.4 libqt5-qtwebengine-5.15.3-lp152.3.3.4 libqt5-qtwebengine-debuginfo-5.15.3-lp152.3.3.4 libqt5-qtwebengine-debugsource-5.15.3-lp152.3.3.4 libqt5-qtwebengine-devel-5.15.3-lp152.3.3.4 libqt5-qtwebengine-devel-debuginfo-5.15.3-lp152.3.3.4 libqt5-qtwebengine-examples-5.15.3-lp152.3.3.4 libqt5-qtwebengine-examples-debuginfo-5.15.3-lp152.3.3.4 - openSUSE Leap 15.2 (noarch): libqt5-qtpdf-private-headers-devel-5.15.3-lp152.3.3.4 libqt5-qtwebengine-private-headers-devel-5.15.3-lp152.3.3.4 References: https://www.suse.com/security/cve/CVE-2020-16044.html https://www.suse.com/security/cve/CVE-2021-21118.html https://www.suse.com/security/cve/CVE-2021-21119.html https://www.suse.com/security/cve/CVE-2021-21120.html https://www.suse.com/security/cve/CVE-2021-21121.html https://www.suse.com/security/cve/CVE-2021-21122.html https://www.suse.com/security/cve/CVE-2021-21123.html https://www.suse.com/security/cve/CVE-2021-21125.html https://www.suse.com/security/cve/CVE-2021-21126.html https://www.suse.com/security/cve/CVE-2021-21127.html https://www.suse.com/security/cve/CVE-2021-21128.html https://www.suse.com/security/cve/CVE-2021-21129.html https://www.suse.com/security/cve/CVE-2021-21130.html https://www.suse.com/security/cve/CVE-2021-21131.html https://www.suse.com/security/cve/CVE-2021-21132.html https://www.suse.com/security/cve/CVE-2021-21135.html https://www.suse.com/security/cve/CVE-2021-21137.html https://www.suse.com/security/cve/CVE-2021-21140.html https://www.suse.com/security/cve/CVE-2021-21141.html https://www.suse.com/security/cve/CVE-2021-21145.html https://www.suse.com/security/cve/CVE-2021-21146.html https://www.suse.com/security/cve/CVE-2021-21147.html https://www.suse.com/security/cve/CVE-2021-21148.html https://www.suse.com/security/cve/CVE-2021-21149.html https://www.suse.com/security/cve/CVE-2021-21150.html https://www.suse.com/security/cve/CVE-2021-21152.html https://www.suse.com/security/cve/CVE-2021-21153.html https://www.suse.com/security/cve/CVE-2021-21156.html https://www.suse.com/security/cve/CVE-2021-21157.html https://bugzilla.suse.com/1130395 https://bugzilla.suse.com/1158516 https://bugzilla.suse.com/1163744 https://bugzilla.suse.com/1163766 https://bugzilla.suse.com/1182233

1 0

openSUSE-RU-2021:0972-1: moderate: Recommended update for ntp
by maintenance＠opensuse.org 05 Jul '21

05 Jul '21

openSUSE Recommended Update: Recommended update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0972-1 Rating: moderate References: #1186431 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ntp fixes the following issues: - Fix a typo in '%post' section. (bsc#1186431) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-972=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ntp-4.2.8p15-lp152.3.12.1 ntp-debuginfo-4.2.8p15-lp152.3.12.1 ntp-debugsource-4.2.8p15-lp152.3.12.1 ntp-doc-4.2.8p15-lp152.3.12.1 References: https://bugzilla.suse.com/1186431

1 0