September 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:2992-1: moderate: Recommended update for drbd
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2992-1 Rating: moderate References: #1188472 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd fixes the following issues: - bsc#1188472, update to 9.0.29 * fix data corruption when DRBD's backing disk is a degraded Linux software raid (MD) * add correct thawing of IO requests after IO was frozen due to loss of quorum * fix timeout detection after idle periods and for configs with ko-count when a disk on an a secondary stops delivering IO-completion events * fixed an issue where UUIDs where not shifted in the history slots; that caused false "unrelated data" events * fix switching resync sources by letting resync requests drain before issuing resync requests to the new source; before the fix, it could happen that the resync does not terminate since a late reply from the previous caused a out-of-sync bit set after the "scan point" * fix a temporal deadlock you could trigger when you exercise promotion races and mix some read-only openers into the test case * fix for bitmap-copy operation in a very specific and unlikely case where two nodes do a bitmap-based resync due to disk-states * fix size negotiation when combining nodes of different CPU architectures that have different page sizes * fix a very rare race where DRBD reported wrong magic in a header packet right after reconnecting * fix a case where DRBD ends up reporting unrelated data; it affected thinly allocated resources with a diskless node in a recreate from day0 event * speedup open() of drbd devices if promote has not chance to go through * new option "--reset-bitmap=no" for the invalidate and invalidate-remote commands; this allows to do a resync after online verify found differences * changes to socket buffer sizes get applied to established connections immediately; before it was applied after a re-connect * add exists events for path objects * forbid keyed hash algorithms for online verify, csyms and HMAC base alg * fix a regression introduces with 9.0.25; it failed to determine the right device size and the connection hangs in 'WFBitmapS/WFBitmapT' repl state; to trigger this you need to do a partial resync to a new node with different backing device size * fix an issue with netlink packets processed in parallel on multiple CPUs; the bug caused drbdadm adjust failing in very rare cases * fix a very rare occurrence of a reconciliation resync getting stuck * fix a race condition that causes a detach operation to hang; it is very hard to trigger * fix a kernel OOPS (via a BUG()) upon adding a timer twice under very rare timing * fix a counter imbalance that could lead to assertion messages when a protocol A peer disconnects with a certain timing * fix a rare race with receiving bitmap and a state change while establishing a connection * fix UUID handling to avoid false split-brain detections; this bug got triggered an isolated primary that gets demoted, and temporal network interruptions among the remaining nodes * fix resync decision to obey disk states when the generation UUIDs are equal; the effect of this bug was that you could end up with two Outdated nodes after resync * fix concurrent disk-attach operations * Fix possible kernel warning regarding an inbalance of backing device link/unlink * move some amount of kernel backward compatibility code moved from the old method (drbd_wrappers.h) to new cocci semantic patches * add support renaming resources while its devices might be in use and process IO requests * Allow setting c_max_rate to 0 with the meaning that the resync controller has no upper limit for the resync speed * Fix regression: allow live migration between two diskful peers again Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2992=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): drbd-9.0.29~0+git.9a7bc817-3.3.1 drbd-debugsource-9.0.29~0+git.9a7bc817-3.3.1 drbd-kmp-default-9.0.29~0+git.9a7bc817_k5.3.18_59.19-3.3.1 drbd-kmp-default-debuginfo-9.0.29~0+git.9a7bc817_k5.3.18_59.19-3.3.1 - openSUSE Leap 15.3 (aarch64 x86_64): drbd-kmp-preempt-9.0.29~0+git.9a7bc817_k5.3.18_59.19-3.3.1 drbd-kmp-preempt-debuginfo-9.0.29~0+git.9a7bc817_k5.3.18_59.19-3.3.1 - openSUSE Leap 15.3 (aarch64): drbd-kmp-64kb-9.0.29~0+git.9a7bc817_k5.3.18_59.19-3.3.1 drbd-kmp-64kb-debuginfo-9.0.29~0+git.9a7bc817_k5.3.18_59.19-3.3.1 - openSUSE Leap 15.3 (x86_64): drbd-kmp-rt-9.0.29~0+git.9a7bc817_k5.3.18_8.13-3.3.1 drbd-kmp-rt-debuginfo-9.0.29~0+git.9a7bc817_k5.3.18_8.13-3.3.1 References: https://bugzilla.suse.com/1188472

1 0

openSUSE-RU-2021:2993-1: moderate: Recommended update for gcc
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for gcc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2993-1 Rating: moderate References: #1185348 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gcc fixes the following issues: - With gcc-PIE add -pie even when -fPIC is specified but we are not linking a shared library. [bsc#1185348] - Fix postun of gcc-go alternative. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2993=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cpp-7-3.9.1 gcc-7-3.9.1 gcc-PIE-7-3.9.1 gcc-ada-7-3.9.1 gcc-c++-7-3.9.1 gcc-fortran-7-3.9.1 gcc-go-7-3.9.1 gcc-info-7-3.9.1 gcc-locale-7-3.9.1 gcc-obj-c++-7-3.9.1 gcc-objc-7-3.9.1 libstdc++-devel-7-3.9.1 - openSUSE Leap 15.3 (s390x x86_64): gcc-32bit-7-3.9.1 gcc-ada-32bit-7-3.9.1 gcc-c++-32bit-7-3.9.1 gcc-fortran-32bit-7-3.9.1 gcc-go-32bit-7-3.9.1 gcc-objc-32bit-7-3.9.1 libstdc++-devel-32bit-7-3.9.1 References: https://bugzilla.suse.com/1185348

1 0

openSUSE-RU-2021:2997-1: moderate: Recommended update for python3
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2997-1 Rating: moderate References: #1187338 #1189659 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3 fixes the following issues: - Fixed an issue when the missing 'stropts.h' causing build errors for different python modules. (bsc#1187338) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2997=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.13-10.3.1 libpython3_6m1_0-debuginfo-3.6.13-10.3.1 python3-3.6.13-10.3.1 python3-base-3.6.13-10.3.1 python3-base-debuginfo-3.6.13-10.3.1 python3-core-debugsource-3.6.13-10.3.1 python3-curses-3.6.13-10.3.1 python3-curses-debuginfo-3.6.13-10.3.1 python3-dbm-3.6.13-10.3.1 python3-dbm-debuginfo-3.6.13-10.3.1 python3-debuginfo-3.6.13-10.3.1 python3-debugsource-3.6.13-10.3.1 python3-devel-3.6.13-10.3.1 python3-devel-debuginfo-3.6.13-10.3.1 python3-doc-devhelp-3.6.13-10.3.1 python3-idle-3.6.13-10.3.1 python3-testsuite-3.6.13-10.3.1 python3-testsuite-debuginfo-3.6.13-10.3.1 python3-tk-3.6.13-10.3.1 python3-tk-debuginfo-3.6.13-10.3.1 python3-tools-3.6.13-10.3.1 - openSUSE Leap 15.3 (x86_64): libpython3_6m1_0-32bit-3.6.13-10.3.1 libpython3_6m1_0-32bit-debuginfo-3.6.13-10.3.1 python3-32bit-3.6.13-10.3.1 python3-32bit-debuginfo-3.6.13-10.3.1 python3-base-32bit-3.6.13-10.3.1 python3-base-32bit-debuginfo-3.6.13-10.3.1 References: https://bugzilla.suse.com/1187338 https://bugzilla.suse.com/1189659

1 0

openSUSE-SU-2021:3005-1: important: Security update for libaom
by opensuse-security＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Security Update: Security update for libaom ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3005-1 Rating: important References: #1189497 Cross-References: CVE-2021-30475 CVSS scores: CVE-2021-30475 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30475 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libaom fixes the following issues: - CVE-2021-30475: Fixed buffer overflow in aom_dsp/noise_model.c (bsc#1189497). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3005=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): aom-tools-1.0.0-3.3.1 aom-tools-debuginfo-1.0.0-3.3.1 libaom-debugsource-1.0.0-3.3.1 libaom-devel-1.0.0-3.3.1 libaom0-1.0.0-3.3.1 libaom0-debuginfo-1.0.0-3.3.1 - openSUSE Leap 15.3 (noarch): libaom-devel-doc-1.0.0-3.3.1 - openSUSE Leap 15.3 (x86_64): libaom0-32bit-1.0.0-3.3.1 libaom0-32bit-debuginfo-1.0.0-3.3.1 References: https://www.suse.com/security/cve/CVE-2021-30475.html https://bugzilla.suse.com/1189497

1 0

openSUSE-SU-2021:2994-1: Security update for openssl-1_0_0
by opensuse-security＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Security Update: Security update for openssl-1_0_0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:2994-1 Rating: low References: #1189521 Cross-References: CVE-2021-3712 CVSS scores: CVE-2021-3712 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openssl-1_0_0 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2994=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenssl-1_0_0-devel-1.0.2p-3.43.1 libopenssl10-1.0.2p-3.43.1 libopenssl10-debuginfo-1.0.2p-3.43.1 libopenssl1_0_0-1.0.2p-3.43.1 libopenssl1_0_0-debuginfo-1.0.2p-3.43.1 libopenssl1_0_0-hmac-1.0.2p-3.43.1 libopenssl1_0_0-steam-1.0.2p-3.43.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-3.43.1 openssl-1_0_0-1.0.2p-3.43.1 openssl-1_0_0-cavs-1.0.2p-3.43.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-3.43.1 openssl-1_0_0-debuginfo-1.0.2p-3.43.1 openssl-1_0_0-debugsource-1.0.2p-3.43.1 - openSUSE Leap 15.3 (noarch): openssl-1_0_0-doc-1.0.2p-3.43.1 - openSUSE Leap 15.3 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1 libopenssl1_0_0-32bit-1.0.2p-3.43.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-3.43.1 libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1 libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-3.43.1 References: https://www.suse.com/security/cve/CVE-2021-3712.html https://bugzilla.suse.com/1189521

1 0

openSUSE-RU-2021:2990-1: important: Recommended update for powerpc-utils
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for powerpc-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:2990-1 Rating: important References: #1189015 #1189571 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for powerpc-utils fixes the following issues: - Update from version 1.3.8 to version 1.3.9 (bsc#1189015) - Raise the log rotation threshold to 1MB so that more history is preserved. - Fix checking HCNID array size at boot time - Set autoconnect-slaves on HNV connections. - When trying to detect HNV bond list all connections, not only active ones. - Use hexdump from util-linux rather than xxd from vim. - hcn-init.service: Start together with NetworkManager. - ofpathname: Fix OF to logical FC lookup for multipath and partitions - bootlist: Fix for multipath devices with > 5 paths - Add the missing substring extraction of the partition number from the logical device path so that the partition number is appended to OFPATH when the logical device is a partition. - Introducing 'lparnumascore' that is is computing the LPAR NUMA score for CPU and memory. - This new command detects CPU and memory resources the kernel keep binded to the NUMA node topology of the departure node. It computes a ratio, and print it to the standard output. The ratio is between 0 (worst) and 100 (best). The command is **not** locking '/var/lock/dr_config_lock' so user should ensure that there is not ongoing command impacting the computed scores. This allows the command to be run without special privileges. - Introduce 'of_associativity_to_node' - This device tree related function reads the ibm associativity property of a node and, using the specified 'min_common_deth', returns the NUMA node id - Rename 'is_lsslot_cmd' into 'read_dynamic_memory_v2' - Add manpage for the drmgr utility - Add a check against 'usr_drc_index' which is set when a remove by index operation is done to ensure the NUMA removal code is not triggered in that case. - Add support for the plug ID of a SCSI/SATA host - 'lpartstat': add '-x' option for the security flavor. - The output number means: - 0 = Speculative execution fully enabled - 1 = Speculative execution controls to mitigate user-to-kernel side-channel attacks - 2 = Speculative execution controls to mitigate user-to-kernel and user-to-user side-channel attacks - \- = The running kernel is not exposing the security flavor in '/proc/powerpc/lparcfg' - Introduce NUMA based LMB removal - When the NUMA topology can be read, all the LMBs found in the Device Tree are linked the corresponding node. LMB not associated to node are considered as not used. LMB associated to CPU less node are accounted separately because they will be targeted first to be remove. The LMB are removed from the CPU less nodes to reach an average number LMBs per CPU less node. The removal is done through the remove by DRC index API, allowing to remove a LMB at a time. When the requested amount of LMB could not be removed a partial status is reported. If the NUMA topology can't be read, we fallback using the legacy remove way. - Fix ofpathname race with udev rename - ofpathname: Use NVMe controller physical nsid - Use a loop to check for all related bonding connections and remove them explicitly one by one instead of using xargs - Avoid using 'ifcfg' file for checking bonding interface status - Wait for sysfs device ready when looking up device name - Avoid cleanup of bond interface at boot time when no HNV exists - Adds the option 'ppc64_cpu --version in 'ppc64_cpu --help' in the usage information of ppc64-cpu command. - Clean up dead network config interface after inactive migration - Disable 'vnic' as backup vdevice for migratable 'SR_IOV' - Fix qrydev checking for active interface error - Skip collecting lsdevinfo right before migration. When the LPARs has large number of devices, this can take quite a long time and flood the log message. - Wait for OS ready to lookup device name for configure HNV device. - The hybrid network virtualization is only supported on PowerVM LPAR. Exit the 'hcnmgr' gracefully on other power platform instead of return error. - Optimize 'lsdevinfo' filtering to prevent LPM timeouts (bsc#1189571) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2990=1 Package List: - openSUSE Leap 15.3 (ppc64le): powerpc-utils-1.3.9-9.9.1 powerpc-utils-debuginfo-1.3.9-9.9.1 powerpc-utils-debugsource-1.3.9-9.9.1 References: https://bugzilla.suse.com/1189015 https://bugzilla.suse.com/1189571

1 0

openSUSE-RU-2021:3010-1: moderate: Recommended update for pesign-obs-integration
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for pesign-obs-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3010-1 Rating: moderate References: #1188636 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pesign-obs-integration fixes the following issues: - Fixed slowness when MALLOC_PERTURB_ is set (bsc#1188636) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3010=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): pesign-obs-integration-10.1-13.3.1 References: https://bugzilla.suse.com/1188636

1 0

openSUSE-SU-2021:3004-1: important: Security update for libtpms
by opensuse-security＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Security Update: Security update for libtpms ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3004-1 Rating: important References: #1189935 Cross-References: CVE-2021-3746 CVSS scores: CVE-2021-3746 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libtpms fixes the following issues: - CVE-2021-3746: Fixed out-of-bounds access via specially crafted TPM 2 command packets (bsc#1189935). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3004=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libtpms-debugsource-0.8.2-3.3.1 libtpms-devel-0.8.2-3.3.1 libtpms0-0.8.2-3.3.1 libtpms0-debuginfo-0.8.2-3.3.1 References: https://www.suse.com/security/cve/CVE-2021-3746.html https://bugzilla.suse.com/1189935

1 0

openSUSE-RU-2021:3002-1: moderate: Recommended update for cronie
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for cronie ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3002-1 Rating: moderate References: #1187508 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cronie fixes the following issue: - Increase the limit of allowed entries in 'crontab' files. (bsc#1187508) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3002=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cron-4.2-70.14.4.1 cronie-1.5.1-70.14.4.1 cronie-anacron-1.5.1-70.14.4.1 cronie-anacron-debuginfo-1.5.1-70.14.4.1 cronie-debuginfo-1.5.1-70.14.4.1 cronie-debugsource-1.5.1-70.14.4.1 References: https://bugzilla.suse.com/1187508

1 0

openSUSE-RU-2021:3001-1: moderate: Recommended update for netcfg
by maintenance＠opensuse.org 09 Sep '21

09 Sep '21

openSUSE Recommended Update: Recommended update for netcfg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:3001-1 Rating: moderate References: #1189683 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for netcfg fixes the following issues: - add submissions port/protocol to services file for message submission over TLS protocol [bsc#1189683] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3001=1 Package List: - openSUSE Leap 15.3 (noarch): netcfg-11.6-3.3.1 References: https://bugzilla.suse.com/1189683

1 0