September 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:3000-1: moderate: Recommended update for vncmanager-controller
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for vncmanager-controller ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3000-1 Rating: moderate References: #1188118 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vncmanager-controller fixes the following issues: - Fix extension loading error that disables "Vnc session configuration" option (bsc#1188118) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3000=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): vncmanager-controller-1.0.1-3.3.1 vncmanager-controller-debuginfo-1.0.1-3.3.1 vncmanager-controller-debugsource-1.0.1-3.3.1 vncmanager-controller-gnome-1.0.1-3.3.1 References: https://bugzilla.suse.com/1188118

1 0

openSUSE-RU-2021:1242-1: critical: Recommended update for runc
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for runc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1242-1 Rating: critical References: #1189743 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for runc fixes the following issues: - Fixed an issue when toolbox container fails to start. (bsc#1189743) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1242=1 Package List: - openSUSE Leap 15.2 (x86_64): runc-1.0.0~rc93-lp152.2.6.1 runc-debuginfo-1.0.0~rc93-lp152.2.6.1 References: https://bugzilla.suse.com/1189743

1 0

openSUSE-RU-2021:1245-1: important: Recommended update for librdkafka
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for librdkafka ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1245-1 Rating: important References: #1189792 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for librdkafka fixes the following issue: - Fixed thread creation on SUSE Linux Enterprise Server 15 SP3. (bsc#1189792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1245=1 Package List: - openSUSE Leap 15.2 (x86_64): librdkafka-debugsource-0.11.6-lp152.4.3.1 librdkafka-devel-0.11.6-lp152.4.3.1 librdkafka1-0.11.6-lp152.4.3.1 librdkafka1-debuginfo-0.11.6-lp152.4.3.1 References: https://bugzilla.suse.com/1189792

1 0

openSUSE-SU-2021:1244-1: important: Security update for ntfs-3g_ntfsprogs
by opensuse-security＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Security Update: Security update for ntfs-3g_ntfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1244-1 Rating: important References: #1189720 Cross-References: CVE-2019-9755 CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-35266 CVE-2021-35267 CVE-2021-35268 CVE-2021-35269 CVE-2021-39251 CVE-2021-39252 CVE-2021-39253 CVE-2021-39255 CVE-2021-39256 CVE-2021-39257 CVE-2021-39258 CVE-2021-39259 CVE-2021-39260 CVE-2021-39261 CVE-2021-39262 CVE-2021-39263 CVSS scores: CVE-2019-9755 (NVD) : 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2019-9755 (SUSE): 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update for ntfs-3g_ntfsprogs fixes the following issues: Update to version 2021.8.22 (bsc#1189720): * Fixed compile error when building with libfuse < 2.8.0 * Fixed obsolete macros in configure.ac * Signalled support of UTIME_OMIT to external libfuse2 * Fixed an improper macro usage in ntfscp.c * Updated the repository change in the README * Fixed vulnerability threats caused by maliciously tampered NTFS partitions * Security fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE_2021-39254, CVE-2021-39255, CVE-2021-39256, CVE-2021-39257, CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261, CVE-2021-39262, CVE-2021-39263. - Library soversion is now 89 * Changes in version 2017.3.23 * Delegated processing of special reparse points to external plugins * Allowed kernel cacheing by lowntfs-3g when not using Posix ACLs * Enabled fallback to read-only mount when the volume is hibernated * Made a full check for whether an extended attribute is allowed * Moved secaudit and usermap to ntfsprogs (now ntfssecaudit and ntfsusermap) * Enabled encoding broken UTF-16 into broken UTF-8 * Autoconfigured selecting <sys/sysmacros.h> vs <sys/mkdev> * Allowed using the full library API on systems without extended attributes support * Fixed DISABLE_PLUGINS as the condition for not using plugins * Corrected validation of multi sector transfer protected records * Denied creating/removing files from $Extend * Returned the size of locale encoded target as the size of symlinks This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1244=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libntfs-3g-devel-2021.8.22-lp152.5.3.1 libntfs-3g87-2021.8.22-lp152.5.3.1 libntfs-3g87-debuginfo-2021.8.22-lp152.5.3.1 ntfs-3g-2021.8.22-lp152.5.3.1 ntfs-3g-debuginfo-2021.8.22-lp152.5.3.1 ntfs-3g_ntfsprogs-debuginfo-2021.8.22-lp152.5.3.1 ntfs-3g_ntfsprogs-debugsource-2021.8.22-lp152.5.3.1 ntfsprogs-2021.8.22-lp152.5.3.1 ntfsprogs-debuginfo-2021.8.22-lp152.5.3.1 ntfsprogs-extra-2021.8.22-lp152.5.3.1 ntfsprogs-extra-debuginfo-2021.8.22-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-9755.html https://www.suse.com/security/cve/CVE-2021-33285.html https://www.suse.com/security/cve/CVE-2021-33286.html https://www.suse.com/security/cve/CVE-2021-33287.html https://www.suse.com/security/cve/CVE-2021-33289.html https://www.suse.com/security/cve/CVE-2021-35266.html https://www.suse.com/security/cve/CVE-2021-35267.html https://www.suse.com/security/cve/CVE-2021-35268.html https://www.suse.com/security/cve/CVE-2021-35269.html https://www.suse.com/security/cve/CVE-2021-39251.html https://www.suse.com/security/cve/CVE-2021-39252.html https://www.suse.com/security/cve/CVE-2021-39253.html https://www.suse.com/security/cve/CVE-2021-39255.html https://www.suse.com/security/cve/CVE-2021-39256.html https://www.suse.com/security/cve/CVE-2021-39257.html https://www.suse.com/security/cve/CVE-2021-39258.html https://www.suse.com/security/cve/CVE-2021-39259.html https://www.suse.com/security/cve/CVE-2021-39260.html https://www.suse.com/security/cve/CVE-2021-39261.html https://www.suse.com/security/cve/CVE-2021-39262.html https://www.suse.com/security/cve/CVE-2021-39263.html https://bugzilla.suse.com/1189720

1 0

openSUSE-RU-2021:1243-1: important: Recommended update for corosync
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for corosync ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:1243-1 Rating: important References: #1189680 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for corosync fixes the following issue: - Add 'cancel_hold_on_retransmit' config option on corosync totem (bsc#1189680) - This option allows Corosync to hold the token by representative when there are too many retransmit messages. This allows the network to process increased load without overloading it. The used mechanism is same as described for the hold directive. Some deployments may prefer to never hold token when there is retransmit messages. If so, the option should be set to yes. The default value is no. This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1243=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): corosync-2.4.5-lp152.5.6.1 corosync-debuginfo-2.4.5-lp152.5.6.1 corosync-debugsource-2.4.5-lp152.5.6.1 corosync-qdevice-2.4.5-lp152.5.6.1 corosync-qdevice-debuginfo-2.4.5-lp152.5.6.1 corosync-qnetd-2.4.5-lp152.5.6.1 corosync-qnetd-debuginfo-2.4.5-lp152.5.6.1 corosync-testagents-2.4.5-lp152.5.6.1 corosync-testagents-debuginfo-2.4.5-lp152.5.6.1 libcfg6-2.4.5-lp152.5.6.1 libcfg6-debuginfo-2.4.5-lp152.5.6.1 libcmap4-2.4.5-lp152.5.6.1 libcmap4-debuginfo-2.4.5-lp152.5.6.1 libcorosync-devel-2.4.5-lp152.5.6.1 libcorosync_common4-2.4.5-lp152.5.6.1 libcorosync_common4-debuginfo-2.4.5-lp152.5.6.1 libcpg4-2.4.5-lp152.5.6.1 libcpg4-debuginfo-2.4.5-lp152.5.6.1 libquorum5-2.4.5-lp152.5.6.1 libquorum5-debuginfo-2.4.5-lp152.5.6.1 libsam4-2.4.5-lp152.5.6.1 libsam4-debuginfo-2.4.5-lp152.5.6.1 libtotem_pg5-2.4.5-lp152.5.6.1 libtotem_pg5-debuginfo-2.4.5-lp152.5.6.1 libvotequorum8-2.4.5-lp152.5.6.1 libvotequorum8-debuginfo-2.4.5-lp152.5.6.1 - openSUSE Leap 15.2 (x86_64): libcfg6-32bit-2.4.5-lp152.5.6.1 libcfg6-32bit-debuginfo-2.4.5-lp152.5.6.1 libcmap4-32bit-2.4.5-lp152.5.6.1 libcmap4-32bit-debuginfo-2.4.5-lp152.5.6.1 libcorosync_common4-32bit-2.4.5-lp152.5.6.1 libcorosync_common4-32bit-debuginfo-2.4.5-lp152.5.6.1 libcpg4-32bit-2.4.5-lp152.5.6.1 libcpg4-32bit-debuginfo-2.4.5-lp152.5.6.1 libquorum5-32bit-2.4.5-lp152.5.6.1 libquorum5-32bit-debuginfo-2.4.5-lp152.5.6.1 libsam4-32bit-2.4.5-lp152.5.6.1 libsam4-32bit-debuginfo-2.4.5-lp152.5.6.1 libtotem_pg5-32bit-2.4.5-lp152.5.6.1 libtotem_pg5-32bit-debuginfo-2.4.5-lp152.5.6.1 libvotequorum8-32bit-2.4.5-lp152.5.6.1 libvotequorum8-32bit-debuginfo-2.4.5-lp152.5.6.1 References: https://bugzilla.suse.com/1189680

1 0

openSUSE-RU-2021:2987-1: Recommended update for pesign
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for pesign ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2987-1 Rating: low References: #1184124 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign fixes the following issues: - Link as Position Independent Executable (bsc#1184124). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2987=1 Package List: - openSUSE Leap 15.3 (aarch64 x86_64): pesign-0.112-4.9.1 pesign-debuginfo-0.112-4.9.1 pesign-debugsource-0.112-4.9.1 References: https://bugzilla.suse.com/1184124

1 0

openSUSE-RU-2021:2984-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 08 Sep '21

08 Sep '21

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2984-1 Rating: moderate References: #1188290 #1188966 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Fix for the documentation: Note that resource tracing is only supported by OCF resource agents. (bsc#1188966) - Development for 'ui_context': Add info when spell-corrections happen. - Fix for 'parse': Should still be able to show the empty property if it already exists. (bsc#1188290) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2984=1 Package List: - openSUSE Leap 15.3 (noarch): crmsh-4.3.1+20210811.2a30e37e-5.62.1 crmsh-scripts-4.3.1+20210811.2a30e37e-5.62.1 crmsh-test-4.3.1+20210811.2a30e37e-5.62.1 References: https://bugzilla.suse.com/1188290 https://bugzilla.suse.com/1188966

1 0

openSUSE-RU-2021:2982-1: moderate: Recommended update for python
by maintenance＠opensuse.org 08 Sep '21

08 Sep '21

openSUSE Recommended Update: Recommended update for python ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2982-1 Rating: moderate References: #1187668 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python fixes the following issues: - Fix for python base to contain the same version numbers as are in reality the ones in the bundled wheels. (bsc#1187668) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2982=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-7.58.1 libpython2_7-1_0-debuginfo-2.7.18-7.58.1 python-2.7.18-7.58.1 python-base-2.7.18-7.58.1 python-base-debuginfo-2.7.18-7.58.1 python-base-debugsource-2.7.18-7.58.1 python-curses-2.7.18-7.58.1 python-curses-debuginfo-2.7.18-7.58.1 python-debuginfo-2.7.18-7.58.1 python-debugsource-2.7.18-7.58.1 python-demo-2.7.18-7.58.1 python-devel-2.7.18-7.58.1 python-gdbm-2.7.18-7.58.1 python-gdbm-debuginfo-2.7.18-7.58.1 python-idle-2.7.18-7.58.1 python-tk-2.7.18-7.58.1 python-tk-debuginfo-2.7.18-7.58.1 python-xml-2.7.18-7.58.1 python-xml-debuginfo-2.7.18-7.58.1 - openSUSE Leap 15.3 (noarch): python-doc-2.7.18-7.58.1 python-doc-pdf-2.7.18-7.58.1 - openSUSE Leap 15.3 (x86_64): libpython2_7-1_0-32bit-2.7.18-7.58.1 libpython2_7-1_0-32bit-debuginfo-2.7.18-7.58.1 python-32bit-2.7.18-7.58.1 python-32bit-debuginfo-2.7.18-7.58.1 python-base-32bit-2.7.18-7.58.1 python-base-32bit-debuginfo-2.7.18-7.58.1 References: https://bugzilla.suse.com/1187668

1 0

openSUSE-RU-2021:2977-1: moderate: Recommended update for usbutils
by maintenance＠opensuse.org 08 Sep '21

08 Sep '21

openSUSE Recommended Update: Recommended update for usbutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2977-1 Rating: moderate References: SLE-19451 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for usbutils fixes the following issue: - Update to version 0.14 (jira#SLE-19451) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2977=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): usbutils-014-3.3.1 usbutils-debuginfo-014-3.3.1 usbutils-debugsource-014-3.3.1 References:

1 0

openSUSE-SU-2021:2975-1: moderate: Security update for haproxy
by opensuse-security＠opensuse.org 07 Sep '21

07 Sep '21

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:2975-1 Rating: moderate References: #1189877 Cross-References: CVE-2021-40346 CVSS scores: CVE-2021-40346 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for haproxy fixes the following issues: - CVE-2021-40346: Fixed request smuggling vulnerability in HTX (bsc#1189877). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2975=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): haproxy-2.0.14-11.11.1 haproxy-debuginfo-2.0.14-11.11.1 haproxy-debugsource-2.0.14-11.11.1 References: https://www.suse.com/security/cve/CVE-2021-40346.html https://bugzilla.suse.com/1189877

1 0