January 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0124-1: moderate: Recommended update for shared-mime-info
by maintenance＠opensuse.org 19 Jan '22

19 Jan '22

openSUSE Recommended Update: Recommended update for shared-mime-info ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0124-1 Rating: moderate References: #1191630 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for shared-mime-info fixes the following issues: - Fix nautilus not launching applications because all applications are not detected as executable program but as shared library (bsc#1191630) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-124=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): shared-mime-info-1.12-3.3.1 shared-mime-info-debuginfo-1.12-3.3.1 shared-mime-info-debugsource-1.12-3.3.1 - openSUSE Leap 15.3 (noarch): shared-mime-info-lang-1.12-3.3.1 References: https://bugzilla.suse.com/1191630

1 0

openSUSE-RU-2022:0123-1: important: Recommended update for fetchmail
by maintenance＠opensuse.org 19 Jan '22

19 Jan '22

openSUSE Recommended Update: Recommended update for fetchmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0123-1 Rating: important References: #1194203 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fetchmail fixes the following issues: - Always create fetchmail group, even if the user is already present, as a leftover from Leap 15.2 upgrade. This may happen also if user is messing with groups/users directly or upgrading from even an older fetchmail versions (bsc#1194203) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-123=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): fetchmail-6.4.22-20.23.1 fetchmail-debuginfo-6.4.22-20.23.1 fetchmail-debugsource-6.4.22-20.23.1 fetchmailconf-6.4.22-20.23.1 References: https://bugzilla.suse.com/1194203

1 0

openSUSE-FU-2022:0122-1: moderate: Feature update for zxing-cpp
by maintenance＠opensuse.org 18 Jan '22

18 Jan '22

openSUSE Feature Update: Feature update for zxing-cpp ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0122-1 Rating: moderate References: #1158377 #1180479 #1181915 #1183655 #1187982 #1189813 SLE-18214 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 6 feature fixes and contains one feature can now be installed. Description: This feature update for zxing-cpp fixes the following issues: Update LibreOffice from version 7.1.4.2 to 7.2.3.2 (jsc#SLE-18214): - Fix UI scaling on HIDPI Wayland/KDE screens - Fix gtk popover usage on gtk 3.20 for SUSE Linux Enterprise 12 - Fix inteaction between multi-column shape text and automatic height. (bsc#1187982) - Fix interaction of transparent cell fill and transparent shadow. (bsc#1189813) - Use external `poppler` version 21.01.0 (jsc#SLE-18214) - Use external `CMIS` version 0.5.2 - Update external `boost` to version 1.75.0 - Update external `pdfium` to version 4500 - Update external `skia` to version `m90` - Do not use `qrcodegen-devel` but move to `zxing-cpp` (jsc#SLE-18214) - Keep upstream desktop file names (bsc#1183655) - Display math icon (bsc#1180479) - Source `profile.d/alljava.sh` from either `/etc` (if found) or `/usr/etc`. Provide `zxing-cpp` 1.2.0 as new LibreOffice dependency. (jsc#SLE-18214) - Do not build examples to avoid a cycle with `QT5Multimedia` - Use `cmake3-full` package instead of `cmake` on SUSE Linux Enterprise 12 - Do not build examples on SUSE Linux Enterprise 12 - Only build blackbox tests on openSUSE Tumbleweed - New `BarcodeFormat` - New ZXingQtCamReader demo app based on `QtMultimedia` and `QtQuick` - New QRCode reader, faster and better support for rotated symbols - Add `Structured Append` support for `DataMatrix`, `Aztec` and `MaxiCode` - Add `DMRE` support for `DataMatrix` - Switch to the reimplemented 1D detectors, about 5x faster - Faster and more capable `isPure` detection for all 2D codes - 20% faster `ReedSolomon` error correction. - `ReedSolomon` error detection code 2x speedup. - PDF417 is faster and supports flipped symbols - Reduced false positive rate for `UPC/EAN` barcodes and improved Add-On symbol handling - Fix country-code metadata decoding for UPC/EAN codes. - Proper ECI handling in all 2D barcodes - Add baselibs.conf - Many performance improvements for 1D readers - More meta-data exported when reading specific format - Improve DataMatrix encoder - Add interface to simplify basic usage - WASM API to support pixels array as input - `LuminanceSource` based API is now deprecated but still compiles. - New BarcodeFormats flag type to specify the set of barcodes to look for. - New simplified and consistent Python API - Slightly improved QRCode detection for rotated symbols. Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-122=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libZXing1-1.2.0-9.4.1 libZXing1-debuginfo-1.2.0-9.4.1 zxing-cpp-debugsource-1.2.0-9.4.1 zxing-cpp-devel-1.2.0-9.4.1 References: https://bugzilla.suse.com/1158377 https://bugzilla.suse.com/1180479 https://bugzilla.suse.com/1181915 https://bugzilla.suse.com/1183655 https://bugzilla.suse.com/1187982 https://bugzilla.suse.com/1189813

1 0

openSUSE-RU-2022:0117-1: moderate: Recommended update for rust
by maintenance＠opensuse.org 18 Jan '22

18 Jan '22

openSUSE Recommended Update: Recommended update for rust ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0117-1 Rating: moderate References: SLE-18626 SLE-18627 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains two features can now be installed. Description: This update for rust fixes the following issues: Rust is shipped in version 1.57.0. Please see: https://blog.rust-lang.org/2021/12/02/Rust-1.57.0.html for more information. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-117=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cargo-1.57.0-21.13.1 cargo1.57-1.57.0-7.3.1 cargo1.57-debuginfo-1.57.0-7.3.1 rust-1.57.0-21.13.1 rust1.57-1.57.0-7.3.1 rust1.57-debuginfo-1.57.0-7.3.1 References:

1 0

openSUSE-SU-2022:0113-1: moderate: Security update for nodejs12
by opensuse-security＠opensuse.org 18 Jan '22

18 Jan '22

openSUSE Security Update: Security update for nodejs12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0113-1 Rating: moderate References: #1194511 #1194512 #1194513 #1194514 Cross-References: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824 CVSS scores: CVE-2021-44531 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-44532 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-44533 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21824 (SUSE): 4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for nodejs12 fixes the following issues: - CVE-2021-44531: Fixed improper handling of URI Subject Alternative Names (bsc#1194511). - CVE-2021-44532: Fixed certificate Verification Bypass via String Injection (bsc#1194512). - CVE-2021-44533: Fixed incorrect handling of certificate subject and issuer fields (bsc#1194513). - CVE-2022-21824: Fixed prototype pollution via console.table properties (bsc#1194514). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-113=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs12-12.22.9-4.25.1 nodejs12-debuginfo-12.22.9-4.25.1 nodejs12-debugsource-12.22.9-4.25.1 nodejs12-devel-12.22.9-4.25.1 npm12-12.22.9-4.25.1 - openSUSE Leap 15.3 (noarch): nodejs12-docs-12.22.9-4.25.1 References: https://www.suse.com/security/cve/CVE-2021-44531.html https://www.suse.com/security/cve/CVE-2021-44532.html https://www.suse.com/security/cve/CVE-2021-44533.html https://www.suse.com/security/cve/CVE-2022-21824.html https://bugzilla.suse.com/1194511 https://bugzilla.suse.com/1194512 https://bugzilla.suse.com/1194513 https://bugzilla.suse.com/1194514

1 0

openSUSE-SU-2022:0112-1: moderate: Security update for nodejs14
by opensuse-security＠opensuse.org 18 Jan '22

18 Jan '22

openSUSE Security Update: Security update for nodejs14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0112-1 Rating: moderate References: #1194511 #1194512 #1194513 #1194514 Cross-References: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824 CVSS scores: CVE-2021-44531 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-44532 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-44533 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-21824 (SUSE): 4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for nodejs14 fixes the following issues: - CVE-2021-44531: Fixed improper handling of URI Subject Alternative Names (bsc#1194511). - CVE-2021-44532: Fixed certificate Verification Bypass via String Injection (bsc#1194512). - CVE-2021-44533: Fixed incorrect handling of certificate subject and issuer fields (bsc#1194513). - CVE-2022-21824: Fixed prototype pollution via console.table properties (bsc#1194514). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-112=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs14-14.18.3-15.24.1 nodejs14-debuginfo-14.18.3-15.24.1 nodejs14-debugsource-14.18.3-15.24.1 nodejs14-devel-14.18.3-15.24.1 npm14-14.18.3-15.24.1 - openSUSE Leap 15.3 (noarch): nodejs14-docs-14.18.3-15.24.1 References: https://www.suse.com/security/cve/CVE-2021-44531.html https://www.suse.com/security/cve/CVE-2021-44532.html https://www.suse.com/security/cve/CVE-2021-44533.html https://www.suse.com/security/cve/CVE-2022-21824.html https://bugzilla.suse.com/1194511 https://bugzilla.suse.com/1194512 https://bugzilla.suse.com/1194513 https://bugzilla.suse.com/1194514

1 0

openSUSE-SU-2022:0111-1: important: Security update for virglrenderer
by opensuse-security＠opensuse.org 18 Jan '22

18 Jan '22

openSUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0111-1 Rating: important References: #1194601 Cross-References: CVE-2022-0175 CVSS scores: CVE-2022-0175 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0175: Fixed missing initialization of res->ptr (bsc#1194601). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-111=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.6.1 libvirglrenderer0-debuginfo-0.6.0-4.6.1 virglrenderer-debuginfo-0.6.0-4.6.1 virglrenderer-debugsource-0.6.0-4.6.1 virglrenderer-devel-0.6.0-4.6.1 virglrenderer-test-server-0.6.0-4.6.1 virglrenderer-test-server-debuginfo-0.6.0-4.6.1 References: https://www.suse.com/security/cve/CVE-2022-0175.html https://bugzilla.suse.com/1194601

1 0

openSUSE-RU-2022:0105-1: important: Recommended update for libqb
by maintenance＠opensuse.org 18 Jan '22

18 Jan '22

openSUSE Recommended Update: Recommended update for libqb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0105-1 Rating: important References: #1188212 #1193737 #1193912 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for libqb fixes the following issues: - Fix occasional Pacemaker commandline tool failures and interrupted system calls (bsc#1193737, bsc#1193912) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-105=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): doxygen2man-2.0.2+20201203.def947e-3.3.1 doxygen2man-debuginfo-2.0.2+20201203.def947e-3.3.1 libqb-debugsource-2.0.2+20201203.def947e-3.3.1 libqb-devel-2.0.2+20201203.def947e-3.3.1 libqb-tests-2.0.2+20201203.def947e-3.3.1 libqb-tests-debuginfo-2.0.2+20201203.def947e-3.3.1 libqb-tools-2.0.2+20201203.def947e-3.3.1 libqb-tools-debuginfo-2.0.2+20201203.def947e-3.3.1 libqb100-2.0.2+20201203.def947e-3.3.1 libqb100-debuginfo-2.0.2+20201203.def947e-3.3.1 - openSUSE Leap 15.3 (x86_64): libqb-devel-32bit-2.0.2+20201203.def947e-3.3.1 libqb100-32bit-2.0.2+20201203.def947e-3.3.1 libqb100-32bit-debuginfo-2.0.2+20201203.def947e-3.3.1 References: https://bugzilla.suse.com/1188212 https://bugzilla.suse.com/1193737 https://bugzilla.suse.com/1193912

1 0

openSUSE-SU-2022:0104-1: important: Security update for SDL2
by opensuse-security＠opensuse.org 18 Jan '22

18 Jan '22

openSUSE Security Update: Security update for SDL2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0104-1 Rating: important References: #1181201 #1181202 Cross-References: CVE-2020-14409 CVE-2020-14410 CVSS scores: CVE-2020-14409 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-14409 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-14410 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2020-14410 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for SDL2 fixes the following issues: - CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202). - CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-104=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): SDL2-debugsource-2.0.8-11.3.1 libSDL2-2_0-0-2.0.8-11.3.1 libSDL2-2_0-0-debuginfo-2.0.8-11.3.1 libSDL2-devel-2.0.8-11.3.1 - openSUSE Leap 15.3 (x86_64): libSDL2-2_0-0-32bit-2.0.8-11.3.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-11.3.1 libSDL2-devel-32bit-2.0.8-11.3.1 References: https://www.suse.com/security/cve/CVE-2020-14409.html https://www.suse.com/security/cve/CVE-2020-14410.html https://bugzilla.suse.com/1181201 https://bugzilla.suse.com/1181202

1 0

openSUSE-SU-2022:0106-1: important: Security update for jawn
by opensuse-security＠opensuse.org 18 Jan '22

18 Jan '22

openSUSE Security Update: Security update for jawn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0106-1 Rating: important References: #1194358 Cross-References: CVE-2022-21653 CVSS scores: CVE-2022-21653 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jawn fixes the following issues: - CVE-2022-21653: Fixed DoS caused by a hash collision in SimpleFacade and MutableFacade (bsc#1194358). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-106=1 Package List: - openSUSE Leap 15.3 (noarch): jawn-ast-0.14.1-3.3.1 jawn-json4s-0.14.1-3.3.1 jawn-parser-0.14.1-3.3.1 jawn-util-0.14.1-3.3.1 References: https://www.suse.com/security/cve/CVE-2022-21653.html https://bugzilla.suse.com/1194358

1 0