January 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0227-1: moderate: Recommended update for git
by maintenance＠opensuse.org 31 Jan '22

31 Jan '22

openSUSE Recommended Update: Recommended update for git ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0227-1 Rating: moderate References: #1193722 SLE-23398 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for git fixes the following issues: - update to 2.34.1 (bsc#1193722): * "git grep" looking in a blob that has non-UTF8 payload was completely broken when linked with certain versions of PCREv2 library in the latest release. * "git pull" with any strategy when the other side is behind us should succeed as it is a no-op, but doesn't. * An earlier change in 2.34.0 caused JGit application (that abused GIT_EDITOR mechanism when invoking "git config") to get stuck with a SIGTTOU signal; it has been reverted. * An earlier change that broke .gitignore matching has been reverted. * SubmittingPatches document gained a syntactically incorrect mark-up, which has been corrected. - git 2.33.0: * "git send-email" learned the "--sendmail-cmd" command line option and the "sendemail.sendmailCmd" configuration variable, which is a more sensible approach than the current way of repurposing the "smtp-server" that is meant to name the server to instead name the command to talk to the server. * The userdiff pattern for C# learned the token "record". * "git rev-list" learns to omit the "commit <object-name>" header lines from the output with the `--no-commit-header` option. * "git worktree add --lock" learned to record why the worktree is locked with a custom message. * internal improvements including performance optimizations * a number of bug fixes - git 2.32.0: * ".gitattributes", ".gitignore", and ".mailmap" files that are symbolic links are ignored * "git apply --3way" used to first attempt a straight application, and only fell back to the 3-way merge algorithm when the straight application failed. Starting with this version, the command will first try the 3-way merge algorithm and only when it fails (either resulting with conflict or the base versions of blobs are missing), falls back to the usual patch application. * "git stash show" can now show the untracked part of the stash * Improved "git repack" strategy * http code can now unlock a certificate with a cached password respectively. * "git clone --reject-shallow" option fails the clone as soon as we notice that we are cloning from a shallow repository. * "gitweb" learned "e-mail privacy" feature * Multiple improvements to output and configuration options * Bug fixes and developer visible fixes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-227=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): git-2.34.1-10.9.1 git-arch-2.34.1-10.9.1 git-core-2.34.1-10.9.1 git-core-debuginfo-2.34.1-10.9.1 git-credential-gnome-keyring-2.34.1-10.9.1 git-credential-gnome-keyring-debuginfo-2.34.1-10.9.1 git-credential-libsecret-2.34.1-10.9.1 git-credential-libsecret-debuginfo-2.34.1-10.9.1 git-cvs-2.34.1-10.9.1 git-daemon-2.34.1-10.9.1 git-daemon-debuginfo-2.34.1-10.9.1 git-debuginfo-2.34.1-10.9.1 git-debugsource-2.34.1-10.9.1 git-email-2.34.1-10.9.1 git-gui-2.34.1-10.9.1 git-p4-2.34.1-10.9.1 git-svn-2.34.1-10.9.1 git-web-2.34.1-10.9.1 gitk-2.34.1-10.9.1 perl-Git-2.34.1-10.9.1 - openSUSE Leap 15.3 (noarch): git-doc-2.34.1-10.9.1 References: https://bugzilla.suse.com/1193722

1 0

openSUSE-RU-2022:0228-1: moderate: Recommended update for boost
by maintenance＠opensuse.org 31 Jan '22

31 Jan '22

openSUSE Recommended Update: Recommended update for boost ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0228-1 Rating: moderate References: #1194522 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for boost fixes the following issues: - Fix compilation errors (bsc#1194522) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-228=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): boost-base-debugsource-1.66.0-12.3.1 boost_1_66-jam-1.66.0-12.3.1 boost_1_66-quickbook-1.66.0-12.3.1 boost_1_66-quickbook-debuginfo-1.66.0-12.3.1 libboost_atomic1_66_0-1.66.0-12.3.1 libboost_atomic1_66_0-debuginfo-1.66.0-12.3.1 libboost_atomic1_66_0-devel-1.66.0-12.3.1 libboost_chrono1_66_0-1.66.0-12.3.1 libboost_chrono1_66_0-debuginfo-1.66.0-12.3.1 libboost_chrono1_66_0-devel-1.66.0-12.3.1 libboost_container1_66_0-1.66.0-12.3.1 libboost_container1_66_0-debuginfo-1.66.0-12.3.1 libboost_container1_66_0-devel-1.66.0-12.3.1 libboost_date_time1_66_0-1.66.0-12.3.1 libboost_date_time1_66_0-debuginfo-1.66.0-12.3.1 libboost_date_time1_66_0-devel-1.66.0-12.3.1 libboost_filesystem1_66_0-1.66.0-12.3.1 libboost_filesystem1_66_0-debuginfo-1.66.0-12.3.1 libboost_filesystem1_66_0-devel-1.66.0-12.3.1 libboost_graph1_66_0-1.66.0-12.3.1 libboost_graph1_66_0-debuginfo-1.66.0-12.3.1 libboost_graph1_66_0-devel-1.66.0-12.3.1 libboost_graph_parallel1_66_0-1.66.0-12.3.1 libboost_graph_parallel1_66_0-debuginfo-1.66.0-12.3.1 libboost_graph_parallel1_66_0-devel-1.66.0-12.3.1 libboost_headers1_66_0-devel-1.66.0-12.3.1 libboost_iostreams1_66_0-1.66.0-12.3.1 libboost_iostreams1_66_0-debuginfo-1.66.0-12.3.1 libboost_iostreams1_66_0-devel-1.66.0-12.3.1 libboost_locale1_66_0-1.66.0-12.3.1 libboost_locale1_66_0-debuginfo-1.66.0-12.3.1 libboost_locale1_66_0-devel-1.66.0-12.3.1 libboost_log1_66_0-1.66.0-12.3.1 libboost_log1_66_0-debuginfo-1.66.0-12.3.1 libboost_log1_66_0-devel-1.66.0-12.3.1 libboost_math1_66_0-1.66.0-12.3.1 libboost_math1_66_0-debuginfo-1.66.0-12.3.1 libboost_math1_66_0-devel-1.66.0-12.3.1 libboost_mpi1_66_0-1.66.0-12.3.1 libboost_mpi1_66_0-debuginfo-1.66.0-12.3.1 libboost_mpi1_66_0-devel-1.66.0-12.3.1 libboost_mpi_python-py2_7-1_66_0-1.66.0-12.3.1 libboost_mpi_python-py2_7-1_66_0-debuginfo-1.66.0-12.3.1 libboost_mpi_python-py2_7-1_66_0-devel-1.66.0-12.3.1 libboost_mpi_python-py3-1_66_0-1.66.0-12.3.1 libboost_mpi_python-py3-1_66_0-debuginfo-1.66.0-12.3.1 libboost_mpi_python-py3-1_66_0-devel-1.66.0-12.3.1 libboost_numpy-py2_7-1_66_0-1.66.0-12.3.1 libboost_numpy-py2_7-1_66_0-debuginfo-1.66.0-12.3.1 libboost_numpy-py2_7-1_66_0-devel-1.66.0-12.3.1 libboost_numpy-py3-1_66_0-1.66.0-12.3.1 libboost_numpy-py3-1_66_0-debuginfo-1.66.0-12.3.1 libboost_numpy-py3-1_66_0-devel-1.66.0-12.3.1 libboost_program_options1_66_0-1.66.0-12.3.1 libboost_program_options1_66_0-debuginfo-1.66.0-12.3.1 libboost_program_options1_66_0-devel-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-debuginfo-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-devel-1.66.0-12.3.1 libboost_python-py3-1_66_0-1.66.0-12.3.1 libboost_python-py3-1_66_0-debuginfo-1.66.0-12.3.1 libboost_python-py3-1_66_0-devel-1.66.0-12.3.1 libboost_random1_66_0-1.66.0-12.3.1 libboost_random1_66_0-debuginfo-1.66.0-12.3.1 libboost_random1_66_0-devel-1.66.0-12.3.1 libboost_regex1_66_0-1.66.0-12.3.1 libboost_regex1_66_0-debuginfo-1.66.0-12.3.1 libboost_regex1_66_0-devel-1.66.0-12.3.1 libboost_serialization1_66_0-1.66.0-12.3.1 libboost_serialization1_66_0-debuginfo-1.66.0-12.3.1 libboost_serialization1_66_0-devel-1.66.0-12.3.1 libboost_signals1_66_0-1.66.0-12.3.1 libboost_signals1_66_0-debuginfo-1.66.0-12.3.1 libboost_signals1_66_0-devel-1.66.0-12.3.1 libboost_stacktrace1_66_0-1.66.0-12.3.1 libboost_stacktrace1_66_0-debuginfo-1.66.0-12.3.1 libboost_stacktrace1_66_0-devel-1.66.0-12.3.1 libboost_system1_66_0-1.66.0-12.3.1 libboost_system1_66_0-debuginfo-1.66.0-12.3.1 libboost_system1_66_0-devel-1.66.0-12.3.1 libboost_test1_66_0-1.66.0-12.3.1 libboost_test1_66_0-debuginfo-1.66.0-12.3.1 libboost_test1_66_0-devel-1.66.0-12.3.1 libboost_thread1_66_0-1.66.0-12.3.1 libboost_thread1_66_0-debuginfo-1.66.0-12.3.1 libboost_thread1_66_0-devel-1.66.0-12.3.1 libboost_timer1_66_0-1.66.0-12.3.1 libboost_timer1_66_0-debuginfo-1.66.0-12.3.1 libboost_timer1_66_0-devel-1.66.0-12.3.1 libboost_type_erasure1_66_0-1.66.0-12.3.1 libboost_type_erasure1_66_0-debuginfo-1.66.0-12.3.1 libboost_type_erasure1_66_0-devel-1.66.0-12.3.1 libboost_wave1_66_0-1.66.0-12.3.1 libboost_wave1_66_0-debuginfo-1.66.0-12.3.1 libboost_wave1_66_0-devel-1.66.0-12.3.1 python2-boost_parallel_mpi1_66_0-1.66.0-12.3.1 python2-boost_parallel_mpi1_66_0-debuginfo-1.66.0-12.3.1 python3-boost_parallel_mpi1_66_0-1.66.0-12.3.1 python3-boost_parallel_mpi1_66_0-debuginfo-1.66.0-12.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libboost_context1_66_0-1.66.0-12.3.1 libboost_context1_66_0-debuginfo-1.66.0-12.3.1 libboost_context1_66_0-devel-1.66.0-12.3.1 libboost_coroutine1_66_0-1.66.0-12.3.1 libboost_coroutine1_66_0-debuginfo-1.66.0-12.3.1 libboost_coroutine1_66_0-devel-1.66.0-12.3.1 libboost_fiber1_66_0-1.66.0-12.3.1 libboost_fiber1_66_0-debuginfo-1.66.0-12.3.1 libboost_fiber1_66_0-devel-1.66.0-12.3.1 - openSUSE Leap 15.3 (x86_64): libboost_atomic1_66_0-32bit-1.66.0-12.3.1 libboost_atomic1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_container1_66_0-32bit-1.66.0-12.3.1 libboost_container1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_context1_66_0-32bit-1.66.0-12.3.1 libboost_context1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_coroutine1_66_0-32bit-1.66.0-12.3.1 libboost_coroutine1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_date_time1_66_0-32bit-1.66.0-12.3.1 libboost_date_time1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_fiber1_66_0-32bit-1.66.0-12.3.1 libboost_fiber1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_filesystem1_66_0-32bit-1.66.0-12.3.1 libboost_filesystem1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_graph1_66_0-32bit-1.66.0-12.3.1 libboost_graph1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_graph_parallel1_66_0-32bit-1.66.0-12.3.1 libboost_graph_parallel1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_iostreams1_66_0-32bit-1.66.0-12.3.1 libboost_iostreams1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_locale1_66_0-32bit-1.66.0-12.3.1 libboost_locale1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_math1_66_0-32bit-1.66.0-12.3.1 libboost_math1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_mpi1_66_0-32bit-1.66.0-12.3.1 libboost_mpi1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_program_options1_66_0-32bit-1.66.0-12.3.1 libboost_program_options1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-32bit-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_python-py3-1_66_0-32bit-1.66.0-12.3.1 libboost_python-py3-1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_random1_66_0-32bit-1.66.0-12.3.1 libboost_random1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_regex1_66_0-32bit-1.66.0-12.3.1 libboost_regex1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_serialization1_66_0-32bit-1.66.0-12.3.1 libboost_serialization1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_signals1_66_0-32bit-1.66.0-12.3.1 libboost_signals1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_stacktrace1_66_0-32bit-1.66.0-12.3.1 libboost_stacktrace1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_system1_66_0-32bit-1.66.0-12.3.1 libboost_system1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_test1_66_0-32bit-1.66.0-12.3.1 libboost_test1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_thread1_66_0-32bit-1.66.0-12.3.1 libboost_thread1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_type_erasure1_66_0-32bit-1.66.0-12.3.1 libboost_type_erasure1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_wave1_66_0-32bit-1.66.0-12.3.1 libboost_wave1_66_0-32bit-debuginfo-1.66.0-12.3.1 - openSUSE Leap 15.3 (noarch): boost-license1_66_0-1.66.0-12.3.1 boost_1_66-doc-html-1.66.0-12.3.1 boost_1_66-doc-pdf-1.66.0-12.3.1 References: https://bugzilla.suse.com/1194522

1 0

openSUSE-RU-2022:0023-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 30 Jan '22

30 Jan '22

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0023-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: fwts was updated to fix: Update to version 21.12.00: * lib: fwts_version.h - update to V21.12.00 * dmicheck: skip scanning smbios in /dev/mem on aarch64 * s3: increase s2idle_residency to u64 to avoid overflows * s3: fix incorrect error messages for s2idle_residency * acpi: uniqueid: clean up pedantic static analysis warnings * s4: clean up pedantic static analysis warnings Update to version 21.11.00: * lib: fwts_version.h - update to V21.11.00 * fwts-test: sync up the adding sleep type for s2idle testing * s3: add sleep type setting for testing with s3 or s2idle * acpi: madt: De-initialise ACPICA core engine in case of error. * lib: fwts_smbios: fix loading SMBIOS table from uefi * acpi: uniqueid: skip comparison of _HID and _CID of the same device * ACPICA: Update to version 20210930 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-23=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-23=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2022-23=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 x86_64): fwts-21.12.00-bp153.2.12.2 fwts-debuginfo-21.12.00-bp153.2.12.2 fwts-debugsource-21.12.00-bp153.2.12.2 - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): fwts-21.12.00-bp152.4.24.1 fwts-debuginfo-21.12.00-bp152.4.24.1 fwts-debugsource-21.12.00-bp152.4.24.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): fwts-21.12.00-bp151.4.24.1 References:

1 0

openSUSE-SU-2022:0226-1: important: Security update for log4j12
by opensuse-security＠opensuse.org 28 Jan '22

28 Jan '22

openSUSE Security Update: Security update for log4j12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0226-1 Rating: important References: #1193184 #1194842 #1194843 #1194844 Cross-References: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVSS scores: CVE-2022-23302 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23302 (SUSE): 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23307 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for log4j12 fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844) - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#1194843) - CVE-2022-23302: Fix remote code execution by removing src/main/java/org/apache/log4j/net/JMSSink.java. (bsc#1194842) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-226=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-226=1 Package List: - openSUSE Leap 15.4 (noarch): log4j12-1.2.17-4.9.1 log4j12-javadoc-1.2.17-4.9.1 log4j12-manual-1.2.17-4.9.1 - openSUSE Leap 15.3 (noarch): log4j12-1.2.17-4.9.1 log4j12-javadoc-1.2.17-4.9.1 log4j12-manual-1.2.17-4.9.1 References: https://www.suse.com/security/cve/CVE-2022-23302.html https://www.suse.com/security/cve/CVE-2022-23305.html https://www.suse.com/security/cve/CVE-2022-23307.html https://bugzilla.suse.com/1193184 https://bugzilla.suse.com/1194842 https://bugzilla.suse.com/1194843 https://bugzilla.suse.com/1194844

1 0

openSUSE-RU-2022:0222-1: moderate: Recommended update for xrdp
by maintenance＠opensuse.org 28 Jan '22

28 Jan '22

openSUSE Recommended Update: Recommended update for xrdp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0222-1 Rating: moderate References: #1187258 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xrdp fixes the following issues: - Fix crash in xrdp-fate318398-change-expired-password.patch (bsc#1187258) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-222=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpainter0-0.9.13.1-4.12.1 libpainter0-debuginfo-0.9.13.1-4.12.1 librfxencode0-0.9.13.1-4.12.1 librfxencode0-debuginfo-0.9.13.1-4.12.1 xrdp-0.9.13.1-4.12.1 xrdp-debuginfo-0.9.13.1-4.12.1 xrdp-debugsource-0.9.13.1-4.12.1 xrdp-devel-0.9.13.1-4.12.1 References: https://bugzilla.suse.com/1187258

1 0

openSUSE-RU-2022:0217-1: moderate: Recommended update for rubygem-asciidoctor
by maintenance＠opensuse.org 28 Jan '22

28 Jan '22

openSUSE Recommended Update: Recommended update for rubygem-asciidoctor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0217-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rubygem-asciidoctor fixes the following issues: - Fix a changelog entry by removing a control character that caused issues with createrepo Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-217=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-asciidoctor-testsuite-1.5.6.1-3.3.1 References:

1 0

openSUSE-RU-2022:0220-1: important: Recommended update for saptune
by maintenance＠opensuse.org 28 Jan '22

28 Jan '22

openSUSE Recommended Update: Recommended update for saptune ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0220-1 Rating: important References: #1192029 #1192697 #1193241 #1193435 #1193576 #1193580 #1194299 #1194334 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for saptune fixes the following issues: - Fix LVM slave devices not to be excluded when they are valid block devices (bsc#1194299) - Fix 'not compliant' state for energy_perf_bias on PowerPC systems and suppress misleading error message regarding missing 'mokutil' (bsc#1193435) - Remove the dependency to 'mokutil' by relying on sysfs to detect a secure boot environment (bsc#1193435) - Fix problem with command `saptune revert all`, if the saptune service was stopped between the two commands `apply` and `revert all` - Fix `saptune service enablestart|disablestop` to always perform both actions and no longer stop working, if the service is already started|stopped (bsc#1193241) - Fix support support for AWS x1e instances (bsc#1192029) - Support /etc/fstab entries with 4 instead of 6 fields and change error handling from 'panic' to error log messages (bsc#1193580) - Enhance documentation in man page 'saptune.8' with the entry 'configured Note' and some more descriptions of the entries from `saptune service status` (bsc#1192697) - Fix block device settings (e.g. NRREQ) for multipath devices (bsc#1193576) - Fix `saptune verify` command to report a non existing sysctl or sys parameter as 'not available on the system'. An additional warning is displayed to raise attention to typos in the parameter name. - Fix `saptune status` command to accurately report the unit state (bsc#1194334) - Added a hint to the man page and some additional log messages as the PowerPC systems (hardware architecture 'ppc64le') don't support files in '/sys/class/dmi' Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-220=1 Package List: - openSUSE Leap 15.3 (ppc64le x86_64): saptune-3.0.2-8.22.2 saptune-debuginfo-3.0.2-8.22.2 References: https://bugzilla.suse.com/1192029 https://bugzilla.suse.com/1192697 https://bugzilla.suse.com/1193241 https://bugzilla.suse.com/1193435 https://bugzilla.suse.com/1193576 https://bugzilla.suse.com/1193580 https://bugzilla.suse.com/1194299 https://bugzilla.suse.com/1194334

1 0

openSUSE-SU-2022:0214-1: important: Security update for log4j
by opensuse-security＠opensuse.org 27 Jan '22

27 Jan '22

openSUSE Security Update: Security update for log4j ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0214-1 Rating: important References: #1194842 #1194843 #1194844 Cross-References: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVSS scores: CVE-2022-23302 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23302 (SUSE): 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23307 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for log4j fixes the following issues: - CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. (bsc#1194844) - CVE-2022-23305: Fixed SQL injection when application is configured to use JDBCAppender. (bsc#1194843) - CVE-2022-23302: Fixed remote code execution when application is configured to use JMSSink. (bsc#1194842) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-214=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-214=1 Package List: - openSUSE Leap 15.4 (noarch): log4j-manual-1.2.17-5.9.1 - openSUSE Leap 15.3 (noarch): log4j-manual-1.2.17-5.9.1 References: https://www.suse.com/security/cve/CVE-2022-23302.html https://www.suse.com/security/cve/CVE-2022-23305.html https://www.suse.com/security/cve/CVE-2022-23307.html https://bugzilla.suse.com/1194842 https://bugzilla.suse.com/1194843 https://bugzilla.suse.com/1194844

1 0

openSUSE-RU-2022:0209-1: moderate: Recommended update for opencl-headers
by maintenance＠opensuse.org 27 Jan '22

27 Jan '22

openSUSE Recommended Update: Recommended update for opencl-headers ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0209-1 Rating: moderate References: #1193617 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for opencl-headers fixes the following issues: Update opencl-headers from 2.2+git.20170617 to version 2.2+git.20211214 (bsc#1193617) - Add definitions for cl_arm_protected_memory_allocation - Update headers for cl_intel_unified_shared_memory - Add provisional command-buffer extension - Rename cl_intel_thread_local_exec to cl_intel_exec_by_local_thread - Fix API suffix version macros for semaphore extensions command definitions - If change the include path destination when run cmake configure with `DCMAKE_INSTALL_INCLUDEDIR`, the .cmake generated still point to hardcoded path `include`. this fix it - Add external memory, external semaphore, and semaphore provisional extensions - Fix condition for warning 4201 pop - Update extension headers for cl_intel_device_attribute_query - Update extension headers for cl_intel_sharing_format_query - Add support for cl_khr_integer_dot_product v2 - Update headers for cl_khr_integer_dot_product - Add cl_khr_pci_bus_info and cl_khr_suggested_local_work_size - Add missing 'stdint.h' include to 'CL/cl.h' - Disable failing CI configs - Fixes for usage of macro CL_API_ENTRY - cl_intel_command_queue_families extension - Update default OpenCL version in README - Replace uses of CL_EXT_{PRE,SUF}FIX* with CL_API_{PRE,SUF}FIX* - Do not include cl_gl_ext.h from opencl.h - Move cl_khr_gl_event to cl_gl.h - Add testing for cl_d3d10.h, cl_d3d11.h, and cl_dx9_media_sharing.h - Add definitions for cl_arm_import_memory_android_hardware_buffer v1.1.0 - Add support for user-supplied prefix/suffix in function declarations - Move cl_icd_layer.h from OpenCL-ICD-Loader to OpenCL-Headers. - Add definitions for cl_arm_controlled_kernel_termination - Add definitions for cl_arm_scheduling_controls v0.3.0 - Remove unused CL_EXTENSION_WEAK_LINK definition - Move Intel extensions into common files - Add definitions for cl_arm_scheduling_controls v0.2.0 - Update apt package list in CI before running cmake - Re-enable format string warning in CI - Use PRId64 and PRIu64 when printing 64-bit values - Fix test format string warnings - Fix origin argument names for rect functions - Enable GitHub Actions for pull requests - Added definitions for cl_img_generate_mipmap. - Added missing define for cl_img_use_gralloc_ptr. - Use the alignment attribute under Integrity OS. - Comprehensive CMake Package Config support - Added definitions for cl_img_mem_properties. - Switch the default version for the OpenCL headers to OpenCL 3.0 - Re-enable anonymous unions by default - Avoid anon structs when MSVC uses /Za - Update APIs and enums for cl_intel_unified_shared_memory for rev Q - Header changes for cl_intel_mem_force_host_memory - Add definitions for cl_ext_cxx_for_opencl - Add definitions for cl_arm_scheduling_controls - Add cl_intel_create_buffer_with_properties and cl_intel_mem_channel_property extensions - Add cl_api prefix for clSetContextDestructorCallback - Update ICD dispatch table with clSetContextDestructorCallback - Deprecate clSetProgramReleaseCallback - Add CL_DEVICE_LATEST_CONFORMANCE_VERSION_PASSED - Add clSetContextDestructorCallback - Introduce cl_properties type - Switch device enqueue boolean query to capabilities query - Fix build of dependent software with clang - Add APIs and enums for cl_intel_unified_shared_memory - Add cl_khr_device_uuid definitions - Add cl_half.h header - Add tokens for cl_amd_device_attribute_query - Add Windows CI using Travis - Update headers for OpenCL 3.0 - Add cl_khr_extended_versioning macro - Synchronize experimental enum etc with cl.xml - Include the DirectX sharing headers from CL/cl_icd.h. - Add missing error code CL_CONTEXT_TERMINATED_KHR - Change license to Apache 2.0 - Add enum value for `cl_khronos_vendor_id` - Experimental enum cl_khronos_vendor_id - Experimental enums for language queries - Add experimental enum CL_COMMAND_SVM_MIGRATE_MEM - Move two subgroup queries from cl_kernel_info to cl_kernel_sub_group_info - Add experimental enums - Add CL_IMPORT_DMA_BUF_DATA_CONSISTENCY_WITH_HOST_ARM definition - Add tests and Travis CI config - Add definitions for cl_arm_import_memory_android_hardware_buffer - Add version guards to ICD declarations - Add cl_khr_extended_versioning definitions - Add API function pointer and ICD dispatch table definitions - Add definitions for cl_arm_job_slot_selection - Fix _cl_image_desc for OpenCL 1.2 compatibility - Simplify the definition of deprecation prefixes/suffixes - Added suffixed enums for cl_khr_image2d_from_buffer - Drop __attribute__((aligned(X))) from cl_X defs - Small typo fix for pfn_notify - Use __vector instead of vector to fix altivec builds - Fix clCreateFromGLBuffer error code result type - Fixed w4201 triggering with MSVC in /W4 /Za builds - Add suffixed enums for cl_khr_mipmap_image - Remove all Apple specific content from headers - Add enums for cl_arm_get_core_id - Rename CL_IMPORT_TYPE_SECURE_ARM - Add CL_DEVICE_DOUBLE_FP_CONFIG - Remove CL_DEVICE_HALF_FP_CONFIG - Unified Headers and added clSetCommandQueueProperty to unified headers - Add cl_khr_il_program to OpenCL 1.2 and 2.0 headers - Add cl_khr_create_command_queue - Use correctly rounded decimal mathematical constants - Shorten CL_DBL_MAX for Visual Studio to fix token overflow - Anon structs supported in C11 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-209=1 Package List: - openSUSE Leap 15.3 (noarch): opencl-headers-2.2+git.20211214-3.3.1 References: https://bugzilla.suse.com/1193617

1 0

openSUSE-SU-2022:0210-1: Security update for qemu
by opensuse-security＠opensuse.org 27 Jan '22

27 Jan '22

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0210-1 Rating: low References: #1172033 #1181361 Cross-References: CVE-2020-13253 CVE-2021-20196 CVSS scores: CVE-2020-13253 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-13253 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2021-20196 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-20196 (SUSE): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for qemu fixes the following issues: - CVE-2020-13253: Fixed an OOB access that could crash the guest resulting in DoS (bsc#1172033) - CVE-2021-20196: Fixed null pointer dereference that may lead to guest crash (bsc#1181361). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-210=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-s390-4.2.1-11.34.2 qemu-s390-debuginfo-4.2.1-11.34.2 References: https://www.suse.com/security/cve/CVE-2020-13253.html https://www.suse.com/security/cve/CVE-2021-20196.html https://bugzilla.suse.com/1172033 https://bugzilla.suse.com/1181361

1 0