January 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0227-1: moderate: Recommended update for git
by maintenance＠opensuse.org 31 Jan '22

31 Jan '22

openSUSE Recommended Update: Recommended update for git ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0227-1 Rating: moderate References: #1193722 SLE-23398 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for git fixes the following issues: - update to 2.34.1 (bsc#1193722): * "git grep" looking in a blob that has non-UTF8 payload was completely broken when linked with certain versions of PCREv2 library in the latest release. * "git pull" with any strategy when the other side is behind us should succeed as it is a no-op, but doesn't. * An earlier change in 2.34.0 caused JGit application (that abused GIT_EDITOR mechanism when invoking "git config") to get stuck with a SIGTTOU signal; it has been reverted. * An earlier change that broke .gitignore matching has been reverted. * SubmittingPatches document gained a syntactically incorrect mark-up, which has been corrected. - git 2.33.0: * "git send-email" learned the "--sendmail-cmd" command line option and the "sendemail.sendmailCmd" configuration variable, which is a more sensible approach than the current way of repurposing the "smtp-server" that is meant to name the server to instead name the command to talk to the server. * The userdiff pattern for C# learned the token "record". * "git rev-list" learns to omit the "commit <object-name>" header lines from the output with the `--no-commit-header` option. * "git worktree add --lock" learned to record why the worktree is locked with a custom message. * internal improvements including performance optimizations * a number of bug fixes - git 2.32.0: * ".gitattributes", ".gitignore", and ".mailmap" files that are symbolic links are ignored * "git apply --3way" used to first attempt a straight application, and only fell back to the 3-way merge algorithm when the straight application failed. Starting with this version, the command will first try the 3-way merge algorithm and only when it fails (either resulting with conflict or the base versions of blobs are missing), falls back to the usual patch application. * "git stash show" can now show the untracked part of the stash * Improved "git repack" strategy * http code can now unlock a certificate with a cached password respectively. * "git clone --reject-shallow" option fails the clone as soon as we notice that we are cloning from a shallow repository. * "gitweb" learned "e-mail privacy" feature * Multiple improvements to output and configuration options * Bug fixes and developer visible fixes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-227=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): git-2.34.1-10.9.1 git-arch-2.34.1-10.9.1 git-core-2.34.1-10.9.1 git-core-debuginfo-2.34.1-10.9.1 git-credential-gnome-keyring-2.34.1-10.9.1 git-credential-gnome-keyring-debuginfo-2.34.1-10.9.1 git-credential-libsecret-2.34.1-10.9.1 git-credential-libsecret-debuginfo-2.34.1-10.9.1 git-cvs-2.34.1-10.9.1 git-daemon-2.34.1-10.9.1 git-daemon-debuginfo-2.34.1-10.9.1 git-debuginfo-2.34.1-10.9.1 git-debugsource-2.34.1-10.9.1 git-email-2.34.1-10.9.1 git-gui-2.34.1-10.9.1 git-p4-2.34.1-10.9.1 git-svn-2.34.1-10.9.1 git-web-2.34.1-10.9.1 gitk-2.34.1-10.9.1 perl-Git-2.34.1-10.9.1 - openSUSE Leap 15.3 (noarch): git-doc-2.34.1-10.9.1 References: https://bugzilla.suse.com/1193722

1 0

openSUSE-RU-2022:0228-1: moderate: Recommended update for boost
by maintenance＠opensuse.org 31 Jan '22

31 Jan '22

openSUSE Recommended Update: Recommended update for boost ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0228-1 Rating: moderate References: #1194522 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for boost fixes the following issues: - Fix compilation errors (bsc#1194522) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-228=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): boost-base-debugsource-1.66.0-12.3.1 boost_1_66-jam-1.66.0-12.3.1 boost_1_66-quickbook-1.66.0-12.3.1 boost_1_66-quickbook-debuginfo-1.66.0-12.3.1 libboost_atomic1_66_0-1.66.0-12.3.1 libboost_atomic1_66_0-debuginfo-1.66.0-12.3.1 libboost_atomic1_66_0-devel-1.66.0-12.3.1 libboost_chrono1_66_0-1.66.0-12.3.1 libboost_chrono1_66_0-debuginfo-1.66.0-12.3.1 libboost_chrono1_66_0-devel-1.66.0-12.3.1 libboost_container1_66_0-1.66.0-12.3.1 libboost_container1_66_0-debuginfo-1.66.0-12.3.1 libboost_container1_66_0-devel-1.66.0-12.3.1 libboost_date_time1_66_0-1.66.0-12.3.1 libboost_date_time1_66_0-debuginfo-1.66.0-12.3.1 libboost_date_time1_66_0-devel-1.66.0-12.3.1 libboost_filesystem1_66_0-1.66.0-12.3.1 libboost_filesystem1_66_0-debuginfo-1.66.0-12.3.1 libboost_filesystem1_66_0-devel-1.66.0-12.3.1 libboost_graph1_66_0-1.66.0-12.3.1 libboost_graph1_66_0-debuginfo-1.66.0-12.3.1 libboost_graph1_66_0-devel-1.66.0-12.3.1 libboost_graph_parallel1_66_0-1.66.0-12.3.1 libboost_graph_parallel1_66_0-debuginfo-1.66.0-12.3.1 libboost_graph_parallel1_66_0-devel-1.66.0-12.3.1 libboost_headers1_66_0-devel-1.66.0-12.3.1 libboost_iostreams1_66_0-1.66.0-12.3.1 libboost_iostreams1_66_0-debuginfo-1.66.0-12.3.1 libboost_iostreams1_66_0-devel-1.66.0-12.3.1 libboost_locale1_66_0-1.66.0-12.3.1 libboost_locale1_66_0-debuginfo-1.66.0-12.3.1 libboost_locale1_66_0-devel-1.66.0-12.3.1 libboost_log1_66_0-1.66.0-12.3.1 libboost_log1_66_0-debuginfo-1.66.0-12.3.1 libboost_log1_66_0-devel-1.66.0-12.3.1 libboost_math1_66_0-1.66.0-12.3.1 libboost_math1_66_0-debuginfo-1.66.0-12.3.1 libboost_math1_66_0-devel-1.66.0-12.3.1 libboost_mpi1_66_0-1.66.0-12.3.1 libboost_mpi1_66_0-debuginfo-1.66.0-12.3.1 libboost_mpi1_66_0-devel-1.66.0-12.3.1 libboost_mpi_python-py2_7-1_66_0-1.66.0-12.3.1 libboost_mpi_python-py2_7-1_66_0-debuginfo-1.66.0-12.3.1 libboost_mpi_python-py2_7-1_66_0-devel-1.66.0-12.3.1 libboost_mpi_python-py3-1_66_0-1.66.0-12.3.1 libboost_mpi_python-py3-1_66_0-debuginfo-1.66.0-12.3.1 libboost_mpi_python-py3-1_66_0-devel-1.66.0-12.3.1 libboost_numpy-py2_7-1_66_0-1.66.0-12.3.1 libboost_numpy-py2_7-1_66_0-debuginfo-1.66.0-12.3.1 libboost_numpy-py2_7-1_66_0-devel-1.66.0-12.3.1 libboost_numpy-py3-1_66_0-1.66.0-12.3.1 libboost_numpy-py3-1_66_0-debuginfo-1.66.0-12.3.1 libboost_numpy-py3-1_66_0-devel-1.66.0-12.3.1 libboost_program_options1_66_0-1.66.0-12.3.1 libboost_program_options1_66_0-debuginfo-1.66.0-12.3.1 libboost_program_options1_66_0-devel-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-debuginfo-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-devel-1.66.0-12.3.1 libboost_python-py3-1_66_0-1.66.0-12.3.1 libboost_python-py3-1_66_0-debuginfo-1.66.0-12.3.1 libboost_python-py3-1_66_0-devel-1.66.0-12.3.1 libboost_random1_66_0-1.66.0-12.3.1 libboost_random1_66_0-debuginfo-1.66.0-12.3.1 libboost_random1_66_0-devel-1.66.0-12.3.1 libboost_regex1_66_0-1.66.0-12.3.1 libboost_regex1_66_0-debuginfo-1.66.0-12.3.1 libboost_regex1_66_0-devel-1.66.0-12.3.1 libboost_serialization1_66_0-1.66.0-12.3.1 libboost_serialization1_66_0-debuginfo-1.66.0-12.3.1 libboost_serialization1_66_0-devel-1.66.0-12.3.1 libboost_signals1_66_0-1.66.0-12.3.1 libboost_signals1_66_0-debuginfo-1.66.0-12.3.1 libboost_signals1_66_0-devel-1.66.0-12.3.1 libboost_stacktrace1_66_0-1.66.0-12.3.1 libboost_stacktrace1_66_0-debuginfo-1.66.0-12.3.1 libboost_stacktrace1_66_0-devel-1.66.0-12.3.1 libboost_system1_66_0-1.66.0-12.3.1 libboost_system1_66_0-debuginfo-1.66.0-12.3.1 libboost_system1_66_0-devel-1.66.0-12.3.1 libboost_test1_66_0-1.66.0-12.3.1 libboost_test1_66_0-debuginfo-1.66.0-12.3.1 libboost_test1_66_0-devel-1.66.0-12.3.1 libboost_thread1_66_0-1.66.0-12.3.1 libboost_thread1_66_0-debuginfo-1.66.0-12.3.1 libboost_thread1_66_0-devel-1.66.0-12.3.1 libboost_timer1_66_0-1.66.0-12.3.1 libboost_timer1_66_0-debuginfo-1.66.0-12.3.1 libboost_timer1_66_0-devel-1.66.0-12.3.1 libboost_type_erasure1_66_0-1.66.0-12.3.1 libboost_type_erasure1_66_0-debuginfo-1.66.0-12.3.1 libboost_type_erasure1_66_0-devel-1.66.0-12.3.1 libboost_wave1_66_0-1.66.0-12.3.1 libboost_wave1_66_0-debuginfo-1.66.0-12.3.1 libboost_wave1_66_0-devel-1.66.0-12.3.1 python2-boost_parallel_mpi1_66_0-1.66.0-12.3.1 python2-boost_parallel_mpi1_66_0-debuginfo-1.66.0-12.3.1 python3-boost_parallel_mpi1_66_0-1.66.0-12.3.1 python3-boost_parallel_mpi1_66_0-debuginfo-1.66.0-12.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libboost_context1_66_0-1.66.0-12.3.1 libboost_context1_66_0-debuginfo-1.66.0-12.3.1 libboost_context1_66_0-devel-1.66.0-12.3.1 libboost_coroutine1_66_0-1.66.0-12.3.1 libboost_coroutine1_66_0-debuginfo-1.66.0-12.3.1 libboost_coroutine1_66_0-devel-1.66.0-12.3.1 libboost_fiber1_66_0-1.66.0-12.3.1 libboost_fiber1_66_0-debuginfo-1.66.0-12.3.1 libboost_fiber1_66_0-devel-1.66.0-12.3.1 - openSUSE Leap 15.3 (x86_64): libboost_atomic1_66_0-32bit-1.66.0-12.3.1 libboost_atomic1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_container1_66_0-32bit-1.66.0-12.3.1 libboost_container1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_context1_66_0-32bit-1.66.0-12.3.1 libboost_context1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_coroutine1_66_0-32bit-1.66.0-12.3.1 libboost_coroutine1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_date_time1_66_0-32bit-1.66.0-12.3.1 libboost_date_time1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_fiber1_66_0-32bit-1.66.0-12.3.1 libboost_fiber1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_filesystem1_66_0-32bit-1.66.0-12.3.1 libboost_filesystem1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_graph1_66_0-32bit-1.66.0-12.3.1 libboost_graph1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_graph_parallel1_66_0-32bit-1.66.0-12.3.1 libboost_graph_parallel1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_iostreams1_66_0-32bit-1.66.0-12.3.1 libboost_iostreams1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_locale1_66_0-32bit-1.66.0-12.3.1 libboost_locale1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_math1_66_0-32bit-1.66.0-12.3.1 libboost_math1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_mpi1_66_0-32bit-1.66.0-12.3.1 libboost_mpi1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_program_options1_66_0-32bit-1.66.0-12.3.1 libboost_program_options1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-32bit-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_python-py3-1_66_0-32bit-1.66.0-12.3.1 libboost_python-py3-1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_random1_66_0-32bit-1.66.0-12.3.1 libboost_random1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_regex1_66_0-32bit-1.66.0-12.3.1 libboost_regex1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_serialization1_66_0-32bit-1.66.0-12.3.1 libboost_serialization1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_signals1_66_0-32bit-1.66.0-12.3.1 libboost_signals1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_stacktrace1_66_0-32bit-1.66.0-12.3.1 libboost_stacktrace1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_system1_66_0-32bit-1.66.0-12.3.1 libboost_system1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_test1_66_0-32bit-1.66.0-12.3.1 libboost_test1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_thread1_66_0-32bit-1.66.0-12.3.1 libboost_thread1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_type_erasure1_66_0-32bit-1.66.0-12.3.1 libboost_type_erasure1_66_0-32bit-debuginfo-1.66.0-12.3.1 libboost_wave1_66_0-32bit-1.66.0-12.3.1 libboost_wave1_66_0-32bit-debuginfo-1.66.0-12.3.1 - openSUSE Leap 15.3 (noarch): boost-license1_66_0-1.66.0-12.3.1 boost_1_66-doc-html-1.66.0-12.3.1 boost_1_66-doc-pdf-1.66.0-12.3.1 References: https://bugzilla.suse.com/1194522

1 0

openSUSE-RU-2022:0023-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 30 Jan '22

30 Jan '22

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0023-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: fwts was updated to fix: Update to version 21.12.00: * lib: fwts_version.h - update to V21.12.00 * dmicheck: skip scanning smbios in /dev/mem on aarch64 * s3: increase s2idle_residency to u64 to avoid overflows * s3: fix incorrect error messages for s2idle_residency * acpi: uniqueid: clean up pedantic static analysis warnings * s4: clean up pedantic static analysis warnings Update to version 21.11.00: * lib: fwts_version.h - update to V21.11.00 * fwts-test: sync up the adding sleep type for s2idle testing * s3: add sleep type setting for testing with s3 or s2idle * acpi: madt: De-initialise ACPICA core engine in case of error. * lib: fwts_smbios: fix loading SMBIOS table from uefi * acpi: uniqueid: skip comparison of _HID and _CID of the same device * ACPICA: Update to version 20210930 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-23=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-23=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2022-23=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 x86_64): fwts-21.12.00-bp153.2.12.2 fwts-debuginfo-21.12.00-bp153.2.12.2 fwts-debugsource-21.12.00-bp153.2.12.2 - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): fwts-21.12.00-bp152.4.24.1 fwts-debuginfo-21.12.00-bp152.4.24.1 fwts-debugsource-21.12.00-bp152.4.24.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): fwts-21.12.00-bp151.4.24.1 References:

1 0

openSUSE-SU-2022:0226-1: important: Security update for log4j12
by opensuse-security＠opensuse.org 28 Jan '22

28 Jan '22

openSUSE Security Update: Security update for log4j12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0226-1 Rating: important References: #1193184 #1194842 #1194843 #1194844 Cross-References: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVSS scores: CVE-2022-23302 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23302 (SUSE): 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23307 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for log4j12 fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844) - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#1194843) - CVE-2022-23302: Fix remote code execution by removing src/main/java/org/apache/log4j/net/JMSSink.java. (bsc#1194842) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-226=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-226=1 Package List: - openSUSE Leap 15.4 (noarch): log4j12-1.2.17-4.9.1 log4j12-javadoc-1.2.17-4.9.1 log4j12-manual-1.2.17-4.9.1 - openSUSE Leap 15.3 (noarch): log4j12-1.2.17-4.9.1 log4j12-javadoc-1.2.17-4.9.1 log4j12-manual-1.2.17-4.9.1 References: https://www.suse.com/security/cve/CVE-2022-23302.html https://www.suse.com/security/cve/CVE-2022-23305.html https://www.suse.com/security/cve/CVE-2022-23307.html https://bugzilla.suse.com/1193184 https://bugzilla.suse.com/1194842 https://bugzilla.suse.com/1194843 https://bugzilla.suse.com/1194844

1 0

openSUSE-RU-2022:0222-1: moderate: Recommended update for xrdp
by maintenance＠opensuse.org 28 Jan '22

28 Jan '22

openSUSE Recommended Update: Recommended update for xrdp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0222-1 Rating: moderate References: #1187258 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xrdp fixes the following issues: - Fix crash in xrdp-fate318398-change-expired-password.patch (bsc#1187258) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-222=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpainter0-0.9.13.1-4.12.1 libpainter0-debuginfo-0.9.13.1-4.12.1 librfxencode0-0.9.13.1-4.12.1 librfxencode0-debuginfo-0.9.13.1-4.12.1 xrdp-0.9.13.1-4.12.1 xrdp-debuginfo-0.9.13.1-4.12.1 xrdp-debugsource-0.9.13.1-4.12.1 xrdp-devel-0.9.13.1-4.12.1 References: https://bugzilla.suse.com/1187258

1 0

openSUSE-RU-2022:0217-1: moderate: Recommended update for rubygem-asciidoctor
by maintenance＠opensuse.org 28 Jan '22

28 Jan '22

openSUSE Recommended Update: Recommended update for rubygem-asciidoctor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0217-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rubygem-asciidoctor fixes the following issues: - Fix a changelog entry by removing a control character that caused issues with createrepo Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-217=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-asciidoctor-testsuite-1.5.6.1-3.3.1 References:

1 0

openSUSE-RU-2022:0220-1: important: Recommended update for saptune
by maintenance＠opensuse.org 28 Jan '22

28 Jan '22

openSUSE Recommended Update: Recommended update for saptune ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0220-1 Rating: important References: #1192029 #1192697 #1193241 #1193435 #1193576 #1193580 #1194299 #1194334 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for saptune fixes the following issues: - Fix LVM slave devices not to be excluded when they are valid block devices (bsc#1194299) - Fix 'not compliant' state for energy_perf_bias on PowerPC systems and suppress misleading error message regarding missing 'mokutil' (bsc#1193435) - Remove the dependency to 'mokutil' by relying on sysfs to detect a secure boot environment (bsc#1193435) - Fix problem with command `saptune revert all`, if the saptune service was stopped between the two commands `apply` and `revert all` - Fix `saptune service enablestart|disablestop` to always perform both actions and no longer stop working, if the service is already started|stopped (bsc#1193241) - Fix support support for AWS x1e instances (bsc#1192029) - Support /etc/fstab entries with 4 instead of 6 fields and change error handling from 'panic' to error log messages (bsc#1193580) - Enhance documentation in man page 'saptune.8' with the entry 'configured Note' and some more descriptions of the entries from `saptune service status` (bsc#1192697) - Fix block device settings (e.g. NRREQ) for multipath devices (bsc#1193576) - Fix `saptune verify` command to report a non existing sysctl or sys parameter as 'not available on the system'. An additional warning is displayed to raise attention to typos in the parameter name. - Fix `saptune status` command to accurately report the unit state (bsc#1194334) - Added a hint to the man page and some additional log messages as the PowerPC systems (hardware architecture 'ppc64le') don't support files in '/sys/class/dmi' Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-220=1 Package List: - openSUSE Leap 15.3 (ppc64le x86_64): saptune-3.0.2-8.22.2 saptune-debuginfo-3.0.2-8.22.2 References: https://bugzilla.suse.com/1192029 https://bugzilla.suse.com/1192697 https://bugzilla.suse.com/1193241 https://bugzilla.suse.com/1193435 https://bugzilla.suse.com/1193576 https://bugzilla.suse.com/1193580 https://bugzilla.suse.com/1194299 https://bugzilla.suse.com/1194334

1 0

openSUSE-SU-2022:0214-1: important: Security update for log4j
by opensuse-security＠opensuse.org 27 Jan '22

27 Jan '22

openSUSE Security Update: Security update for log4j ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0214-1 Rating: important References: #1194842 #1194843 #1194844 Cross-References: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVSS scores: CVE-2022-23302 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23302 (SUSE): 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23307 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for log4j fixes the following issues: - CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. (bsc#1194844) - CVE-2022-23305: Fixed SQL injection when application is configured to use JDBCAppender. (bsc#1194843) - CVE-2022-23302: Fixed remote code execution when application is configured to use JMSSink. (bsc#1194842) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-214=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-214=1 Package List: - openSUSE Leap 15.4 (noarch): log4j-manual-1.2.17-5.9.1 - openSUSE Leap 15.3 (noarch): log4j-manual-1.2.17-5.9.1 References: https://www.suse.com/security/cve/CVE-2022-23302.html https://www.suse.com/security/cve/CVE-2022-23305.html https://www.suse.com/security/cve/CVE-2022-23307.html https://bugzilla.suse.com/1194842 https://bugzilla.suse.com/1194843 https://bugzilla.suse.com/1194844

1 0

openSUSE-RU-2022:0209-1: moderate: Recommended update for opencl-headers
by maintenance＠opensuse.org 27 Jan '22

27 Jan '22

openSUSE Recommended Update: Recommended update for opencl-headers ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0209-1 Rating: moderate References: #1193617 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for opencl-headers fixes the following issues: Update opencl-headers from 2.2+git.20170617 to version 2.2+git.20211214 (bsc#1193617) - Add definitions for cl_arm_protected_memory_allocation - Update headers for cl_intel_unified_shared_memory - Add provisional command-buffer extension - Rename cl_intel_thread_local_exec to cl_intel_exec_by_local_thread - Fix API suffix version macros for semaphore extensions command definitions - If change the include path destination when run cmake configure with `DCMAKE_INSTALL_INCLUDEDIR`, the .cmake generated still point to hardcoded path `include`. this fix it - Add external memory, external semaphore, and semaphore provisional extensions - Fix condition for warning 4201 pop - Update extension headers for cl_intel_device_attribute_query - Update extension headers for cl_intel_sharing_format_query - Add support for cl_khr_integer_dot_product v2 - Update headers for cl_khr_integer_dot_product - Add cl_khr_pci_bus_info and cl_khr_suggested_local_work_size - Add missing 'stdint.h' include to 'CL/cl.h' - Disable failing CI configs - Fixes for usage of macro CL_API_ENTRY - cl_intel_command_queue_families extension - Update default OpenCL version in README - Replace uses of CL_EXT_{PRE,SUF}FIX* with CL_API_{PRE,SUF}FIX* - Do not include cl_gl_ext.h from opencl.h - Move cl_khr_gl_event to cl_gl.h - Add testing for cl_d3d10.h, cl_d3d11.h, and cl_dx9_media_sharing.h - Add definitions for cl_arm_import_memory_android_hardware_buffer v1.1.0 - Add support for user-supplied prefix/suffix in function declarations - Move cl_icd_layer.h from OpenCL-ICD-Loader to OpenCL-Headers. - Add definitions for cl_arm_controlled_kernel_termination - Add definitions for cl_arm_scheduling_controls v0.3.0 - Remove unused CL_EXTENSION_WEAK_LINK definition - Move Intel extensions into common files - Add definitions for cl_arm_scheduling_controls v0.2.0 - Update apt package list in CI before running cmake - Re-enable format string warning in CI - Use PRId64 and PRIu64 when printing 64-bit values - Fix test format string warnings - Fix origin argument names for rect functions - Enable GitHub Actions for pull requests - Added definitions for cl_img_generate_mipmap. - Added missing define for cl_img_use_gralloc_ptr. - Use the alignment attribute under Integrity OS. - Comprehensive CMake Package Config support - Added definitions for cl_img_mem_properties. - Switch the default version for the OpenCL headers to OpenCL 3.0 - Re-enable anonymous unions by default - Avoid anon structs when MSVC uses /Za - Update APIs and enums for cl_intel_unified_shared_memory for rev Q - Header changes for cl_intel_mem_force_host_memory - Add definitions for cl_ext_cxx_for_opencl - Add definitions for cl_arm_scheduling_controls - Add cl_intel_create_buffer_with_properties and cl_intel_mem_channel_property extensions - Add cl_api prefix for clSetContextDestructorCallback - Update ICD dispatch table with clSetContextDestructorCallback - Deprecate clSetProgramReleaseCallback - Add CL_DEVICE_LATEST_CONFORMANCE_VERSION_PASSED - Add clSetContextDestructorCallback - Introduce cl_properties type - Switch device enqueue boolean query to capabilities query - Fix build of dependent software with clang - Add APIs and enums for cl_intel_unified_shared_memory - Add cl_khr_device_uuid definitions - Add cl_half.h header - Add tokens for cl_amd_device_attribute_query - Add Windows CI using Travis - Update headers for OpenCL 3.0 - Add cl_khr_extended_versioning macro - Synchronize experimental enum etc with cl.xml - Include the DirectX sharing headers from CL/cl_icd.h. - Add missing error code CL_CONTEXT_TERMINATED_KHR - Change license to Apache 2.0 - Add enum value for `cl_khronos_vendor_id` - Experimental enum cl_khronos_vendor_id - Experimental enums for language queries - Add experimental enum CL_COMMAND_SVM_MIGRATE_MEM - Move two subgroup queries from cl_kernel_info to cl_kernel_sub_group_info - Add experimental enums - Add CL_IMPORT_DMA_BUF_DATA_CONSISTENCY_WITH_HOST_ARM definition - Add tests and Travis CI config - Add definitions for cl_arm_import_memory_android_hardware_buffer - Add version guards to ICD declarations - Add cl_khr_extended_versioning definitions - Add API function pointer and ICD dispatch table definitions - Add definitions for cl_arm_job_slot_selection - Fix _cl_image_desc for OpenCL 1.2 compatibility - Simplify the definition of deprecation prefixes/suffixes - Added suffixed enums for cl_khr_image2d_from_buffer - Drop __attribute__((aligned(X))) from cl_X defs - Small typo fix for pfn_notify - Use __vector instead of vector to fix altivec builds - Fix clCreateFromGLBuffer error code result type - Fixed w4201 triggering with MSVC in /W4 /Za builds - Add suffixed enums for cl_khr_mipmap_image - Remove all Apple specific content from headers - Add enums for cl_arm_get_core_id - Rename CL_IMPORT_TYPE_SECURE_ARM - Add CL_DEVICE_DOUBLE_FP_CONFIG - Remove CL_DEVICE_HALF_FP_CONFIG - Unified Headers and added clSetCommandQueueProperty to unified headers - Add cl_khr_il_program to OpenCL 1.2 and 2.0 headers - Add cl_khr_create_command_queue - Use correctly rounded decimal mathematical constants - Shorten CL_DBL_MAX for Visual Studio to fix token overflow - Anon structs supported in C11 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-209=1 Package List: - openSUSE Leap 15.3 (noarch): opencl-headers-2.2+git.20211214-3.3.1 References: https://bugzilla.suse.com/1193617

1 0

openSUSE-SU-2022:0210-1: Security update for qemu
by opensuse-security＠opensuse.org 27 Jan '22

27 Jan '22

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0210-1 Rating: low References: #1172033 #1181361 Cross-References: CVE-2020-13253 CVE-2021-20196 CVSS scores: CVE-2020-13253 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-13253 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2021-20196 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-20196 (SUSE): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for qemu fixes the following issues: - CVE-2020-13253: Fixed an OOB access that could crash the guest resulting in DoS (bsc#1172033) - CVE-2021-20196: Fixed null pointer dereference that may lead to guest crash (bsc#1181361). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-210=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-s390-4.2.1-11.34.2 qemu-s390-debuginfo-4.2.1-11.34.2 References: https://www.suse.com/security/cve/CVE-2020-13253.html https://www.suse.com/security/cve/CVE-2021-20196.html https://bugzilla.suse.com/1172033 https://bugzilla.suse.com/1181361

1 0

openSUSE-RU-2022:0207-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 27 Jan '22

27 Jan '22

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0207-1 Rating: moderate References: SLE-20049 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for glibc fixes the following issues: - Add support for livepatches on x86_64 for SUSE Linux Enterprise 15 SP4 (jsc#SLE-20049). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-207=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): glibc-2.31-9.9.1 glibc-debuginfo-2.31-9.9.1 glibc-debugsource-2.31-9.9.1 glibc-devel-2.31-9.9.1 glibc-devel-debuginfo-2.31-9.9.1 glibc-devel-static-2.31-9.9.1 glibc-extra-2.31-9.9.1 glibc-extra-debuginfo-2.31-9.9.1 glibc-locale-2.31-9.9.1 glibc-locale-base-2.31-9.9.1 glibc-locale-base-debuginfo-2.31-9.9.1 glibc-profile-2.31-9.9.1 glibc-utils-2.31-9.9.1 glibc-utils-debuginfo-2.31-9.9.1 glibc-utils-src-debugsource-2.31-9.9.1 nscd-2.31-9.9.1 nscd-debuginfo-2.31-9.9.1 - openSUSE Leap 15.3 (noarch): glibc-html-2.31-9.9.1 glibc-i18ndata-2.31-9.9.1 glibc-info-2.31-9.9.1 glibc-lang-2.31-9.9.1 - openSUSE Leap 15.3 (x86_64): glibc-32bit-2.31-9.9.1 glibc-32bit-debuginfo-2.31-9.9.1 glibc-devel-32bit-2.31-9.9.1 glibc-devel-32bit-debuginfo-2.31-9.9.1 glibc-devel-static-32bit-2.31-9.9.1 glibc-locale-base-32bit-2.31-9.9.1 glibc-locale-base-32bit-debuginfo-2.31-9.9.1 glibc-profile-32bit-2.31-9.9.1 glibc-utils-32bit-2.31-9.9.1 glibc-utils-32bit-debuginfo-2.31-9.9.1 References:

1 0

openSUSE-RU-2022:0203-1: important: Recommended update for cloud-init
by maintenance＠opensuse.org 26 Jan '22

26 Jan '22

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0203-1 Rating: important References: #1186004 MSC-270 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for cloud-init fixes the following issues: - Update to version 21.2 (bsc#1186004) + Add \r\n check for SSH keys in Azure (#889) + Revert "Add support to resize rootfs if using LVM (#721)" (#887) (LP: #1922742) + Add Vultaire as contributor (#881) [Paul Goins] + Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo] + test_upgrade: modify test_upgrade_package to run for more sources (#883) + Fix chef module run failure when chef_license is set (#868) [Ben Hughes] + Azure: Retry net metadata during nic attach for non-timeout errs (#878) [aswinrajamannar] + Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer] + Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo] + Use `partprobe` to re-read partition table if available (#856) [Nicolas Bock] (LP: #1920939) + fix error on upgrade caused by new vendordata2 attributes (#869) (LP: #1922739) + add prefer_fqdn_over_hostname config option (#859) [hamalq] (LP: #1921004) + Emit dots on travis to avoid timeout (#867) + doc: Replace remaining references to user-scripts as a config module (#866) [Ryan Harper] + azure: Removing ability to invoke walinuxagent (#799) [Anh Vo] + Add Vultr support (#827) [David Dymko] + Fix unpickle for source paths missing run_dir (#863) [lucasmoura] (LP: #1899299) + sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann] + bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov] + add hamalq user (#860) [hamalq] + Add support to resize rootfs if using LVM (#721) [Eduardo Otubo] (LP: #1799953) + Fix mis-detecting network configuration in initramfs cmdline (#844) (LP: #1919188) + tools/write-ssh-key-fingerprints: do not display empty header/footer (#817) [dermotbradley] + Azure helper: Ensure Azure http handler sleeps between retries (#842) [Johnson Shi] + Fix chef apt source example (#826) [timothegenzmer] + .travis.yml: generate an SSH key before running tests (#848) + write passwords only to serial console, lock down cloud-init-output.log (#847) (LP: #1918303) + Fix apt default integration test (#845) + integration_tests: bump pycloudlib dependency (#846) + Fix stack trace if vendordata_raw contained an array (#837) [eb3095] + archlinux: Fix broken locale logic (#841) [Kristian Klausen] (LP: #1402406) + Integration test for #783 (#832) + integration_tests: mount more paths IN_PLACE (#838) + Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875) + Remove the vi comment from the part-handler example (#835) + net: exclude OVS internal interfaces in get_interfaces (#829) (LP: #1912844) + tox.ini: pass OS_* environment variables to integration tests (#830) + integration_tests: add OpenStack as a platform (#804) + Add flexibility to IMDS api-version (#793) [Thomas Stringer] + Fix the TestApt tests using apt-key on Xenial and Hirsute (#823) [Paride Legovini] (LP: #1916629) + doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood] + archlinux: Use hostnamectl to set the transient hostname (#797) [Kristian Klausen] + cc_keys_to_console.py: Add documentation for recently added config key (#824) [dermotbradley] + Update cc_set_hostname documentation (#818) [Toshi Aoyama] From 21.1 + Azure: Support for VMs without ephemeral resource disks. (#800) [Johnson Shi] (LP: #1901011) + cc_keys_to_console: add option to disable key emission (#811) [Michael Hudson-Doyle] (LP: #1915460) + integration_tests: introduce lxd_use_exec mark (#802) + azure: case-insensitive UUID to avoid new IID during kernel upgrade (#798) (LP: #1835584) + stale.yml: don't ask submitters to reopen PRs (#816) + integration_tests: fix use of SSH agent within tox (#815) + integration_tests: add UPGRADE CloudInitSource (#812) + integration_tests: use unique MAC addresses for tests (#813) + Update .gitignore (#814) + Port apt cloud_tests to integration tests (#808) + integration_tests: fix test_gh626 on LXD VMs (#809) + Fix attempting to decode binary data in test_seed_random_data test (#806) + Remove wait argument from tests with session_cloud calls (#805) + Datasource for UpCloud (#743) [Antti Myyr��] + test_gh668: fix failure on LXD VMs (#801) + openstack: read the dynamic metadata group vendor_data2.json (#777) [Andrew Bogott] (LP: #1841104) + includedir in suoders can be prefixed by "arroba" (#783) [Jordi Massaguer Pla] + [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware] + Revert integration test associated with reverted #586 (#784) + Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla] + Add Rick Harding to CLA signers (#792) [Rick Harding] + HACKING.rst: add clarifying note to LP CLA process section (#789) + Stop linting cloud_tests (#791) + cloud-tests: update cryptography requirement (#790) [Joshua Powers] + Remove 'remove-raise-on-failure' calls from integration_tests (#788) + Use more cloud defaults in integration tests (#757) + Adding self to cla signers (#776) [Andrew Bogott] + doc: avoid two warnings (#781) [Dan Kenigsberg] + Use proper spelling for Red Hat (#778) [Dan Kenigsberg] + Add antonyc to .github-cla-signers (#747) [Anton Chaporgin] + integration_tests: log image serial if available (#772) + [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware] + net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin] + .travis.yml: don't run cloud_tests in CI (#756) + test_upgrade: add some missing commas (#769) + cc_seed_random: update documentation and fix integration test (#771) (LP: #1911227) + Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230) + archlinux: fix package upgrade command handling (#768) [Bao Trinh] + integration_tests: add integration test for LP: #1910835 (#761) + Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer] + integration_tests: log cloud-init version in SUT (#758) + Add ajmyyra as contributor (#742) [Antti Myyr��] + net_convert: add some missing help text (#755) + Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL (#753) [Eduardo Otubo] + doc: document missing IPv6 subnet types (#744) [Antti Myyr��] + Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong] + integration_tests: add SSH key selection settings (#754) + fix a typo in man page cloud-init.1 (#752) [Amy Chen] + network-config-format-v2.rst: add Netplan Passthrough section (#750) + stale: re-enable post holidays (#749) + integration_tests: port ca_certs tests from cloud_tests (#732) + Azure: Add telemetry for poll IMDS (#741) [Johnson Shi] + doc: move testing section from HACKING to its own doc (#739) + No longer allow integration test failures on travis (#738) + stale: fix error in definition (#740) + integration_tests: set log-cli-level to INFO by default (#737) + PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736) + stale: disable check for holiday break (#735) + integration_tests: log the path we collect logs into (#733) + .travis.yml: add (most) supported Python versions to CI (#734) + integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731) + cc_ca_certs: add RHEL support (#633) [cawamata] + Azure: only generate config for NICs with addresses (#709) [Thomas Stringer] + doc: fix CloudStack configuration example (#707) [Olivier Lemasle] + integration_tests: restrict test_lxd_bridge appropriately (#730) + Add integration tests for CLI functionality (#729) + Integration test for gh-626 (#728) + Some test_upgrade fixes (#726) + Ensure overriding test vars with env vars works for booleans (#727) + integration_tests: port lxd_bridge test from cloud_tests (#718) + Integration test for gh-632. (#725) + Integration test for gh-671 (#724) + integration-requirements.txt: bump pycloudlib commit (#723) + Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo] + Integration test for LP: #1813396 and #669 (#719) + integration_tests: include timestamp in log output (#720) + integration_tests: add test for LP: #1898997 (#713) + Add integration test for power_state_change module (#717) + Update documentation for network-config-format-v2 (#701) [ggiesen] + sandbox CA Cert tests to not require ca-certificates (#715) [Eduardo Otubo] + Add upgrade integration test (#693) + Integration test for 570 (#712) + Add ability to keep snapshotted images in integration tests (#711) + Integration test for pull #586 (#706) + integration_tests: introduce skipping of tests by OS (#702) + integration_tests: introduce IntegrationInstance.restart (#708) + Add lxd-vm to list of valid integration test platforms (#705) + Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL (#685) [Eduardo Otubo] + Delete image snapshots created for integration tests (#682) + Parametrize ssh_keys_provided integration test (#700) [lucasmoura] + Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura] + cc_apt_configure: add riscv64 as a ports arch (#687) [Dimitri John Ledkov] + cla: add xnox (#692) [Dimitri John Ledkov] + Collect logs from integration test runs (#675) From 20.4.1 + Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)" From 20.4 + tox: avoid tox testenv subsvars for xenial support (#684) + Ensure proper root permissions in integration tests (#664) [James Falcon] + LXD VM support in integration tests (#678) [James Falcon] + Integration test for fallocate falling back to dd (#681) [James Falcon] + .travis.yml: correctly integration test the built .deb (#683) + Ability to hot-attach NICs to preprovisioned VMs before reprovisioning (#613) [aswinrajamannar] + Support configuring SSH host certificates. (#660) [Jonathan Lung] + add integration test for LP: #1900837 (#679) + cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655) [Mina Gali��] (LP: #1901958, #1901958) + DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo] + Make mount in place for tests work (#667) [James Falcon] + integration_tests: restore emission of settings to log (#657) + DataSourceAzure: update password for defuser if exists (#671) [Anh Vo] + tox.ini: only select "ci" marked tests for CI runs (#677) + Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi] + DataSourceAzure: send failure signal on Azure datasource failure (#594) [Johnson Shi] + test_persistence: simplify VersionIsPoppedFromState (#674) + only run a subset of integration tests in CI (#672) + cli: add + -system param to allow validating system user-data on a machine (#575) + test_persistence: add VersionIsPoppedFromState test (#673) + introduce an upgrade framework and related testing (#659) + add + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396) + Pin pycloudlib to a working commit (#666) [James Falcon] + DataSourceOpenNebula: exclude SRANDOM from context output (#665) + cloud_tests: add hirsute release definition (#662) + split integration and cloud_tests requirements (#652) + faq.rst: add warning to answer that suggests running `clean` (#661) + Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632) [Scott Moser] + Make wakeonlan Network Config v2 setting actually work (#626) [dermotbradley] + HACKING.md: unify network-refactoring namespace (#658) [Mina Gali��] + replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Gali��] + Prevent timeout on travis integration tests. (#651) [James Falcon] + azure: enable pushing the log to KVP from the last pushed byte (#614) [Moustafa Moustafa] + Fix launch_kwargs bug in integration tests (#654) [James Falcon] + split read_fs_info into linux & freebsd parts (#625) [Mina Gali��] + PULL_REQUEST_TEMPLATE.md: expand commit message section (#642) + Make some language improvements in growpart documentation (#649) [Shane Frasier] + Revert ".travis.yml: use a known-working version of lxd (#643)" (#650) + Fix not sourcing default 50-cloud-init ENI file on Debian (#598) [WebSpider] + remove unnecessary reboot from gpart resize (#646) [Mina Gali��] + cloudinit: move dmi functions out of util (#622) [Scott Moser] + integration_tests: various launch improvements (#638) + test_lp1886531: don't assume /etc/fstab exists (#639) + Remove Ubuntu restriction from PR template (#648) [James Falcon] + util: fix mounting of vfat on *BSD (#637) [Mina Gali��] + conftest: improve docstring for disable_subp_usage (#644) + doc: add example query commands to debug Jinja templates (#645) + Correct documentation and testcase data for some user-data YAML (#618) [dermotbradley] + Hetzner: Fix instance_id / SMBIOS serial comparison (#640) [Markus Schade] + .travis.yml: use a known-working version of lxd (#643) + tools/build-on-freebsd: fix comment explaining purpose of the script (#635) [Mina Gali��] + Hetzner: initialize instance_id from system-serial-number (#630) [Markus Schade] (LP: #1885527) + Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634) [Eduardo Otubo] + get_interfaces: don't exclude Open vSwitch bridge/bond members (#608) [Lukas M��rdian] (LP: #1898997) + Add config modules for controlling IBM PowerVM RMC. (#584) [Aman306] (LP: #1895979) + Update network config docs to clarify MAC address quoting (#623) [dermotbradley] + gentoo: fix hostname rendering when value has a comment (#611) [Manuel Aguilera] + refactor integration testing infrastructure (#610) [James Falcon] + stages: don't reset permissions of cloud-init.log every boot (#624) (LP: #1900837) + docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers] + Drop vestigial update_resolve_conf_file function (#620) [Scott Moser] + cc_mounts: correctly fallback to dd if fallocate fails (#585) (LP: #1897099) + .travis.yml: add integration-tests to Travis matrix (#600) + ssh_util: handle non-default AuthorizedKeysFile config (#586) [Eduardo Otubo] + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo] + bddeb: new + -packaging-branch argument to pull packaging from branch (#576) [Paride Legovini] + Add more integration tests (#615) [lucasmoura] + DataSourceAzure: write marker file after report ready in preprovisioning (#590) [Johnson Shi] + integration_tests: emit settings to log during setup (#601) + integration_tests: implement citest tests run in Travis (#605) + Add Azure support to integration test framework (#604) [James Falcon] + openstack: consider product_name as valid chassis tag (#580) [Adrian Vladu] (LP: #1895976) + azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi] + net: add the ability to blacklist network interfaces based on driver during enumeration of physical network devices (#591) [Anh Vo] + integration_tests: don't error on cloud-init failure (#596) + integration_tests: improve cloud-init.log assertions (#593) + conftest.py: remove top-level import of httpretty (#599) + tox.ini: add integration-tests testenv definition (#595) + PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597) + add integration test for LP: #1886531 (#592) + Initial implementation of integration testing infrastructure (#581) [James Falcon] + Fix name of ntp and chrony service on CentOS and RHEL. (#589) [Scott Moser] (LP: #1897915) + Adding a PR template (#587) [James Falcon] + Azure parse_network_config uses fallback cfg when generate IMDS network cfg fails (#549) [Johnson Shi] + features: refresh docs for easier out-of-context reading (#582) + Fix typo in resolv_conf module's description (#578) [Wac��aw Schiller] + cc_users_groups: minor doc formatting fix (#577) + Fix typo in disk_setup module's description (#579) [Wac��aw Schiller] + Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570) [Johann Queuniet] + boot.rst: add First Boot Determination section (#568) (LP: #1888858) + opennebula.rst: minor readability improvements (#573) [Mina Gali��] + cloudinit: remove unused LOG variables (#574) + create a shutdown_command method in distro classes (#567) [Emmanuel Thom��] + user_data: remove unused constant (#566) + network: Fix type and respect name when rendering vlan in sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608) + Retrieve SSH keys from IMDS first with OVF as a fallback (#509) [Thomas Stringer] + Add jqueuniet as contributor (#569) [Johann Queuniet] + distros: minor typo fix (#562) + Bump the integration-requirements versioned dependencies (#565) [Paride Legovini] + network-config-format-v1: fix typo in nameserver example (#564) [Stanislas] + Run cloud-init-local.service after the hv_kvp_daemon (#505) [Robert Schweikert] + Add method type hints for Azure helper (#540) [Johnson Shi] + systemd: add Before=shutdown.target when Conflicts=shutdown.target is used (#546) [Paride Legovini] + LXD: detach network from profile before deleting it (#542) [Paride Legovini] (LP: #1776958) + redhat spec: add missing BuildRequires (#552) [Paride Legovini] + util: remove debug statement (#556) [Joshua Powers] + Fix cloud config on chef example (#551) [lucasmoura] From 20.3 + Azure: Add netplan driver filter when using hv_netvsc driver (#539) [James Falcon] (LP: #1830740) + query: do not handle non-decodable non-gzipped content (#543) + DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo] + Update the list of valid ssh keys. (#487) [Ole-Martin Bratteng] (LP: #1877869) + cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938) + Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa] + Add Alpine Linux support. (#535) [dermotbradley] + Detect kernel version before swap file creation (#428) [Eduardo Otubo] + cli: add devel make-mime subcommand (#518) + user-data: only verify mime-types for TYPE_NEEDED and x-shellscript (#511) (LP: #1888822) + DataSourceOracle: retry twice (and document why we retry at all) (#536) + Refactor Azure report ready code (#468) [Johnson Shi] + tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531) + Support Oracle IMDSv2 API (#528) [James Falcon] + .travis.yml: run a doc build during CI (#534) + doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533) + Fix 'Users and Groups' configuration documentation (#530) [sshedi] + cloudinit.distros: update docstrings of add_user and create_user (#527) + Fix headers for device types in network v2 docs (#532) [Caleb Xavier Berger] + Add AlexBaranowski as contributor (#508) [Aleksander Baranowski] + DataSourceOracle: refactor to use only OPC v1 endpoint (#493) + .github/workflows/stale.yml: s/Josh/Rick/ (#526) + Fix a typo in apt pipelining module (#525) [Xiao Liang] + test_util: parametrize devlist tests (#523) [James Falcon] + Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466) + Handle additional identifier for SLES For HPC (#520) [Robert Schweikert] + Revert "test-requirements.txt: pin pytest to <6 (#512)" (#515) + test-requirements.txt: pin pytest to <6 (#512) + Add "tsanghan" as contributor (#504) [tsanghan] + fix brpm building (LP: #1886107) + Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson] + azure: disable bouncing hostname when setting hostname fails (#494) [Anh Vo] + VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441) [xiaofengw-vmware] + DataSourceAzure: Use ValueError when JSONDecodeError is not available (#490) [Anh Vo] + cc_ca_certs.py: fix blank line problem when removing CAs and adding new one (#483) [dermotbradley] + freebsd: py37-serial is now py37-pyserial (#492) [Gon��ri Le Bouder] + ssh exit with non-zero status on disabled user (#472) [Eduardo Otubo] (LP: #1170059) + cloudinit: remove global disable of pylint W0107 and fix errors (#489) + networking: refactor wait_for_physdevs from cloudinit.net (#466) (LP: #1884626) + HACKING.rst: add pytest.param pytest gotcha (#481) + cloudinit: remove global disable of pylint W0105 and fix errors (#480) + Fix two minor warnings (#475) + test_data: fix faulty patch (#476) + cc_mounts: handle missing fstab (#484) (LP: #1886531) + LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini] + Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy] + cloudinit: fix tip-pylint failures and bump pinned pylint version (#478) + Added BirknerAlex as contributor and sorted the file (#477) [Alexander Birkner] + Update list of types of modules in cli.rst [saurabhvartak1982] + tests: use markers to configure disable_subp_usage (#473) + Add mention of vendor-data to no-cloud format documentation (#470) [Landon Kirk] + Fix broken link to OpenStack metadata service docs (#467) [Matt Riedemann] + Disable ec2 mirror for non aws instances (#390) [lucasmoura] (LP: #1456277) + cloud_tests: don't pass + -python-version to read-dependencies (#465) + networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619) + Enable use of the caplog fixture in pytest tests, and add a cc_final_message test using it (#461) + RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy] + Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888) + test_util: add (partial) testing for util.mount_cb (#463) + .travis.yml: revert to installing ubuntu-dev-tools (#460) + HACKING.rst: add details of net refactor tracking (#456) + .travis.yml: rationalise installation of dependencies in host (#449) + Add dermotbradley as contributor. (#458) [dermotbradley] + net/networking: remove unused functions/methods (#453) + distros.networking: initial implementation of layout (#391) + cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452) + Change from redhat to rhel in systemd generator tmpl (#450) [Eduardo Otubo] + Hetzner: support reading user-data that is base64 encoded. (#448) [Scott Moser] (LP: #1884071) + HACKING.rst: add strpath gotcha to testing gotchas section (#446) + cc_final_message: don't create directories when writing boot-finished (#445) (LP: #1883903) + .travis.yml: only store new schroot if something has changed (#440) + util: add ensure_dir_exists parameter to write_file (#443) + printing the error stream of the dhclient process before killing it (#369) [Moustafa Moustafa] + Fix link to the MAAS documentation (#442) [Paride Legovini] (LP: #1883666) + RPM build: disable the dynamic mirror URLs when using a proxy (#437) [Paride Legovini] + util: rename write_file's copy_mode parameter to preserve_mode (#439) + .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438) + cli.rst: alphabetise devel subcommands and add net-convert to list (#430) + Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon] + travis: cache the chroot we use for package builds (#429) + test: fix all flake8 E126 errors (#425) [Joshua Powers] + Fixes KeyError for bridge with no "parameters:" setting (#423) [Brian Candler] (LP: #1879673) + When tools.conf does not exist, running cmd "vmware-toolbox-cmd config get deployPkg enable-custom-scripts", the return code will be EX_UNAVAILABLE(69), on this condition, it should not take it as error. (#413) [chengcheng-chcheng] + Document CloudStack data-server well-known hostname (#399) [Gregor Riepl] + test: move conftest.py to top-level, to cover tests/ also (#414) + Replace cc_chef is_installed with use of subp.is_exe. (#421) [Scott Moser] + Move runparts to subp. (#420) [Scott Moser] + Move subp into its own module. (#416) [Scott Moser] + readme: point at travis-ci.com (#417) [Joshua Powers] + New feature flag functionality and fix includes failing silently (#367) [James Falcon] (LP: #1734939) + Enhance poll imds logging (#365) [Moustafa Moustafa] + test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers] + test: fix all flake8 E241 (#403) [Joshua Powers] + test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers] + cc_grub_dpkg: determine idevs in more robust manner with grub-probe (#358) [Matthew Ruffell] (LP: #1877491) + test: fix all flake8 E741 errors (#401) [Joshua Powers] + tests: add groovy integration tests for ubuntu (#400) + Enable chef_license support for chef infra client (#389) [Bipin Bachhao] + testing: use flake8 again (#392) [Joshua Powers] + enable Puppet, Chef mcollective in default config (#385) [Mina Gali�� (deprecated: Igor Gali��)] (LP: #1880279) + HACKING.rst: introduce .net + > Networking refactor section (#384) + Travis: do not install python3-contextlib2 (dropped dependency) (#388) [Paride Legovini] + HACKING: mention that .github-cla-signers is alpha-sorted (#380) + Add bipinbachhao as contributor (#379) [Bipin Bachhao] + cc_snap: validate that assertions property values are strings (#370) + conftest: implement partial disable_subp_usage (#371) + test_resolv_conf: refresh stale comment (#374) + cc_snap: apply validation to snap.commands properties (#364) + make finding libc platform independent (#366) [Mina Gali�� (deprecated: Igor Gali��)] + doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP] + templater: drop Jinja Python 2 compatibility shim (#353) + cloudinit: minor pylint fixes (#360) + cloudinit: remove unneeded __future__ imports (#362) + migrating momousta lp user to Moustafa-Moustafa GitHub user (#361) [Moustafa Moustafa] + cloud_tests: emit dots on Travis while fetching images (#347) + Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884) + conftest: add docs and tests regarding CiTestCase's subp functionality (#343) + analyze/dump: refactor shared string into variable (#350) + doc: update boot.rst with correct timing of runcmd (#351) + HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura] + HACKING.rst: guide people to add themselves to the CLA file (#349) + HACKING.rst: more unit testing documentation (#354) + .travis.yml: don't run lintian during integration test package builds (#352) + Add test to ensure docs examples are valid cloud-init configs (#355) [James Falcon] (LP: #1876414) + make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng] + Create tests to validate schema examples (#348) [lucasmoura] (LP: #1876412) + analyze/dump: add support for Amazon Linux 2 log lines (#346) (LP: #1876323) + bsd: upgrade support (#305) [Gon��ri Le Bouder] + Add lucasmoura as contributor (#345) [lucasmoura] + Add "therealfalcon" as contributor (#344) [James Falcon] + Adapt the package building scripts to use Python 3 (#231) [Paride Legovini] + DataSourceEc2: use metadata's NIC ordering to determine route-metrics (#342) (LP: #1876312) + .travis.yml: introduce caching (#329) + cc_locale: introduce schema (#335) + doc/rtd/conf.py: bump copyright year to 2020 (#341) + yum_add_repo: Add Centos to the supported distro list (#340) - Fix unit test fail in TestGetPackageMirrorInfo::test_substitution. - Add patch from upstream to remove python2 compatibility so cloud-init builds fine in Tumbleweed with a recent Jinja2 version. This patch is only applied in TW. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-203=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cloud-init-21.2-8.51.1 cloud-init-config-suse-21.2-8.51.1 cloud-init-doc-21.2-8.51.1 References: https://bugzilla.suse.com/1186004

1 0

openSUSE-SU-2022:0199-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 26 Jan '22

26 Jan '22

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0199-1 Rating: important References: #1194547 Cross-References: CVE-2021-4140 CVE-2022-22737 CVE-2022-22738 CVE-2022-22739 CVE-2022-22740 CVE-2022-22741 CVE-2022-22742 CVE-2022-22743 CVE-2022-22744 CVE-2022-22745 CVE-2022-22746 CVE-2022-22747 CVE-2022-22748 CVE-2022-22751 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - CVE-2021-4140: Fixed Iframe sandbox bypass with XSLT (bsc#1194547). - CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547). - CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547). - CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547). - CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547). - CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547). - CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547). - CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547). - CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547). - CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547). - CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547). - CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547). - CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547). - CVE-2022-22751: Fixed memory safety bugs (bsc#1194547). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-199=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.5.0-8.51.1 MozillaThunderbird-debuginfo-91.5.0-8.51.1 MozillaThunderbird-debugsource-91.5.0-8.51.1 MozillaThunderbird-translations-common-91.5.0-8.51.1 MozillaThunderbird-translations-other-91.5.0-8.51.1 References: https://www.suse.com/security/cve/CVE-2021-4140.html https://www.suse.com/security/cve/CVE-2022-22737.html https://www.suse.com/security/cve/CVE-2022-22738.html https://www.suse.com/security/cve/CVE-2022-22739.html https://www.suse.com/security/cve/CVE-2022-22740.html https://www.suse.com/security/cve/CVE-2022-22741.html https://www.suse.com/security/cve/CVE-2022-22742.html https://www.suse.com/security/cve/CVE-2022-22743.html https://www.suse.com/security/cve/CVE-2022-22744.html https://www.suse.com/security/cve/CVE-2022-22745.html https://www.suse.com/security/cve/CVE-2022-22746.html https://www.suse.com/security/cve/CVE-2022-22747.html https://www.suse.com/security/cve/CVE-2022-22748.html https://www.suse.com/security/cve/CVE-2022-22751.html https://bugzilla.suse.com/1194547

1 0

openSUSE-SU-2022:0198-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 26 Jan '22

26 Jan '22

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0198-1 Rating: important References: #1065729 #1071995 #1154353 #1154492 #1156395 #1167773 #1176447 #1176774 #1177437 #1190256 #1191271 #1191929 #1192931 #1193255 #1193328 #1193660 #1193669 #1193727 #1193901 #1193927 #1194001 #1194027 #1194087 #1194094 #1194266 #1194302 #1194493 #1194516 #1194517 #1194518 #1194529 #1194578 #1194580 #1194584 #1194586 #1194587 #1194589 #1194590 #1194591 #1194592 #1194888 #1194953 #1194985 Cross-References: CVE-2021-4083 CVE-2021-4135 CVE-2021-4149 CVE-2021-4197 CVE-2021-4202 CVE-2021-45485 CVE-2021-45486 CVE-2021-46283 CVE-2022-0185 CVE-2022-0322 CVSS scores: CVE-2021-4083 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-4135 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-4149 (SUSE): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-4197 (SUSE): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2021-4202 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-45485 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-45485 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-45486 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-46283 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0185 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0322 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.4 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has 33 fixes is now available. Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2022-0322: Fixed a denial of service in SCTP sctp_addto_chunk (bsc#1194985). - CVE-2021-4197: Fixed a cgroup issue where lower privileged processes could write to fds of lower privileged ones that could lead to privilege escalation (bsc#1194302). - CVE-2021-46283: nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace (bnc#1194518). - CVE-2021-4135: Fixed an information leak in the nsim_bpf_map_alloc function (bsc#1193927). - CVE-2021-4202: Fixed a race condition during NFC device remove which could lead to a use-after-free memory corruption (bsc#1194529) - CVE-2021-4083: A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allowed a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4 (bnc#1193727). - CVE-2021-4149: Fixed a locking condition in btrfs which could lead to system deadlocks (bsc#1194001). - CVE-2021-45485: In the IPv6 implementation in net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses (bnc#1194094). - CVE-2021-45486: In the IPv4 implementation in net/ipv4/route.c has an information leak because the hash table is very small (bnc#1194087). The following non-security bugs were fixed: - ACPI: APD: Check for NULL pointer after calling devm_ioremap() (git-fixes). - ACPI: Add stubs for wakeup handler functions (git-fixes). - ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes (git-fixes). - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls (git-fixes). - ALSA: ctl: Fix copy of updated id with element read/write (git-fixes). - ALSA: drivers: opl3: Fix incorrect use of vp->state (git-fixes). - ALSA: hda/hdmi: Disable silent stream on GLK (git-fixes). - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform (git-fixes). - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows (git-fixes). - ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100 (git-fixes). - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 (git-fixes). - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU (git-fixes). - ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 (git-fixes). - ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers (git-fixes). - ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ (git-fixes). - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls (git-fixes). - ALSA: hda: Make proper use of timecounter (git-fixes). - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls (git-fixes). - ALSA: jack: Check the return value of kstrdup() (git-fixes). - ALSA: oss: fix compile error when OSS_DEBUG is enabled (git-fixes). - ALSA: pcm: oss: Fix negative period/buffer sizes (git-fixes). - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() (git-fixes). - ALSA: pcm: oss: Limit the period size to 16MB (git-fixes). - ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID (git-fixes). - ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk (git-fixes). - ASoC: codecs: wcd934x: handle channel mappping list correctly (git-fixes). - ASoC: codecs: wcd934x: return correct value from mixer put (git-fixes). - ASoC: codecs: wcd934x: return error code correctly from hw_params (git-fixes). - ASoC: codecs: wsa881x: fix return values from kcontrol put (git-fixes). - ASoC: cs42l42: Correct configuring of switch inversion from ts-inv (git-fixes). - ASoC: cs42l42: Disable regulators if probe fails (git-fixes). - ASoC: cs42l42: Use device_property API instead of of_property (git-fixes). - ASoC: fsl_asrc: refine the check of available clock divider (git-fixes). - ASoC: fsl_mqs: fix MODULE_ALIAS (git-fixes). - ASoC: mediatek: Check for error clk pointer (git-fixes). - ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s (git-fixes). - ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent() (git-fixes). - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer (git-fixes). - ASoC: rt5663: Handle device_property_read_u32_array error codes (git-fixes). - ASoC: samsung: idma: Check of ioremap return value (git-fixes). - ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked() (git-fixes). - ASoC: sunxi: fix a sound binding broken reference (git-fixes). - ASoC: tegra: Fix kcontrol put callback in ADMAIF (git-fixes). - ASoC: tegra: Fix kcontrol put callback in AHUB (git-fixes). - ASoC: tegra: Fix kcontrol put callback in DMIC (git-fixes). - ASoC: tegra: Fix kcontrol put callback in DSPK (git-fixes). - ASoC: tegra: Fix kcontrol put callback in I2S (git-fixes). - ASoC: tegra: Fix wrong value type in ADMAIF (git-fixes). - ASoC: tegra: Fix wrong value type in DMIC (git-fixes). - ASoC: tegra: Fix wrong value type in DSPK (git-fixes). - ASoC: tegra: Fix wrong value type in I2S (git-fixes). - ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA (git-fixes). - Add cherry-picked IDs for qemu fw_cfg patches - Bluetooth: L2CAP: Fix using wrong mode (git-fixes). - Bluetooth: bfusb: fix division by zero in send path (git-fixes). - Bluetooth: btmtksdio: fix resume failure (git-fixes). - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() (git-fixes). - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails (git-fixes). - Bluetooth: hci_bcm: Check for error irq (git-fixes). - Bluetooth: hci_qca: Stop IBS timer during BT OFF (git-fixes). - Bluetooth: stop proccessing malicious adv data (git-fixes). - Documentation: ACPI: Fix data node reference documentation (git-fixes). - Documentation: dmaengine: Correctly describe dmatest with channel unset (git-fixes). - Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization (git-fixes). - HID: add USB_HID dependancy to hid-chicony (git-fixes). - HID: add USB_HID dependancy to hid-prodikeys (git-fixes). - HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option (git-fixes). - HID: bigbenff: prevent null pointer dereference (git-fixes). - HID: google: add eel USB id (git-fixes). - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad (git-fixes). - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc (git-fixes). - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init (git-fixes). - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init (git-fixes). - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover (git-fixes). - Input: appletouch - initialize work before device registration (git-fixes). - Input: atmel_mxt_ts - fix double free in mxt_read_info_block (git-fixes). - Input: elantech - fix stack out of bound access in elantech_change_report_id() (git-fixes). - Input: i8042 - add deferred probe support (bsc#1190256). - Input: i8042 - enable deferred probe quirk for ASUS UM325UA (bsc#1190256). - Input: max8925_onkey - do not mark comment as kernel-doc (git-fixes). - Input: spaceball - fix parsing of movement data packets (git-fixes). - Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes). - Input: ti_am335x_tsc - set ADCREFM for X configuration (git-fixes). - Move upstreamed patches into sorted section - NFC: st21nfca: Fix memory leak in device probe and remove (git-fixes). - NFSD: Fix zero-length NFSv3 WRITEs (git-fixes). - NFSv42: Do not fail clone() unless the OP_CLONE operation failed (git-fixes). - NFSv42: Fix pagecache invalidation after COPY/CLONE (git-fixes). - PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (git-fixes). - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error (git-fixes). - PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() (git-fixes). - PCI/MSI: Mask MSI-X vectors only on success (git-fixes). - PCI: cadence: Add cdns_plat_pcie_probe() missing return (git-fixes). - PCI: dwc: Do not remap invalid res (git-fixes). - PCI: mvebu: Check for errors from pci_bridge_emul_init() call (git-fixes). - PCI: mvebu: Do not modify PCI IO type bits in conf_write (git-fixes). - PCI: mvebu: Fix support for DEVCAP2, DEVCTL2 and LNKCTL2 registers on emulated bridge (git-fixes). - PCI: mvebu: Fix support for PCI_EXP_DEVCTL on emulated bridge (git-fixes). - PCI: mvebu: Fix support for PCI_EXP_RTSTA on emulated bridge (git-fixes). - PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space (git-fixes). - PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device (git-fixes). - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault (git-fixes). - PCI: xgene: Fix IB window setup (git-fixes). - PM: runtime: Defer suspending suppliers (git-fixes). - PM: sleep: Do not assume that "mem" is always present (git-fixes). - RDMA/hns: Replace kfree() with kvfree() (jsc#SLE-14777). - Revert "PM: sleep: Do not assume that "mem" is always present" (git-fixes). - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" (git-fixes). - Revert "net/mlx5: Add retry mechanism to the command entry index allocation" (jsc#SLE-15172). - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status (git-fixes). - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub (git-fixes). - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) (git-fixes). - USB: cdc-acm: fix break reporting (git-fixes). - USB: cdc-acm: fix racy tty buffer accesses (git-fixes). - USB: chipidea: fix interrupt deadlock (git-fixes). - USB: core: Fix bug in resuming hub's handling of wakeup requests (git-fixes). - USB: gadget: bRequestType is a bitfield, not a enum (git-fixes). - USB: gadget: detect too-big endpoint 0 requests (git-fixes). - USB: gadget: zero allocate endpoint 0 buffers (git-fixes). - USB: serial: cp210x: fix CP2105 GPIO registration (git-fixes). - USB: serial: option: add Telit FN990 compositions (git-fixes). - Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch (git-fixes bsc#1193660 ltc#195634). - Updated mpi3mr entry in supported.conf (bsc#1194578 jsc#SLE-18120) Moving this driver into the "supported" package. - amd/display: downgrade validation failure log level (git-fixes). - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile (git-fixes). - atlantic: Fix buff_ring OOB in aq_ring_rx_clean (git-fixes). - ax25: NPD bug when detaching AX25 device (git-fixes). - backlight: qcom-wled: Fix off-by-one maximum with default num_strings (git-fixes). - backlight: qcom-wled: Override default length with qcom,enabled-strings (git-fixes). - backlight: qcom-wled: Pass number of elements to read to read_u32_array (git-fixes). - backlight: qcom-wled: Validate enabled string indices in DT (git-fixes). - batman-adv: mcast: do not send link-local multicast to mcast routers (git-fixes). - blk-cgroup: synchronize blkg creation against policy deactivation (bsc#1194584). - block/scsi-ioctl: Fix kernel-infoleak in scsi_put_cdrom_generic_arg() (git-fixes). - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) (bsc#1194586). - can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data (git-fixes). - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} (git-fixes). - can: kvaser_usb: get CAN clock frequency from device (git-fixes). - can: sja1000: fix use after free in ems_pcmcia_add_card() (git-fixes). - can: softing: softing_startstop(): fix set but not used variable warning (git-fixes). - can: softing_cs: softingcs_probe(): fix memleak on registration failure (git-fixes). - can: usb_8dev: remove unused member echo_skb from struct usb_8dev_priv (git-fixes). - can: xilinx_can: xcan_probe(): check for error irq (git-fixes). - char/mwave: Adjust io port register size (git-fixes). - clk: Do not parent clks until the parent is fully registered (git-fixes). - clk: Gemini: fix struct name in kernel-doc (git-fixes). - clk: bcm-2835: Pick the closest clock rate (git-fixes). - clk: bcm-2835: Remove rounding up the dividers (git-fixes). - clk: imx8mn: Fix imx8mn_clko1_sels (git-fixes). - clk: imx: pllv1: fix kernel-doc notation for struct clk_pllv1 (git-fixes). - clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk (git-fixes). - clk: qcom: regmap-mux: fix parent clock lookup (git-fixes). - clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell (git-fixes). - crypto: caam - replace this_cpu_ptr with raw_cpu_ptr (git-fixes). - crypto: mxs-dcp - Use sg_mapping_iter to copy data (git-fixes). - crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() (git-fixes). - crypto: qat - do not ignore errors from enable_vf2pf_comms() (git-fixes). - crypto: qat - fix reuse of completion variable (git-fixes). - crypto: qat - handle both source of interrupt in VF ISR (git-fixes). - crypto: qce - fix uaf on qce_ahash_register_one (git-fixes). - crypto: stm32/crc32 - Fix kernel BUG triggered in probe() (git-fixes). - crypto: stm32/cryp - fix double pm exit (git-fixes). - crypto: stm32/cryp - fix lrw chaining mode (git-fixes). - crypto: stm32/cryp - fix xts and race condition in crypto_engine requests (git-fixes). - debugfs: lockdown: Allow reading debugfs files that are not world readable (bsc#1193328 ltc#195566). - device property: Fix documentation for FWNODE_GRAPH_DEVICE_DISABLED (git-fixes). - dm crypt: document encrypted keyring key option (git-fixes). - dm writecache: add "cleaner" and "max_age" to Documentation (git-fixes). - dm writecache: advance the number of arguments when reporting max_age (git-fixes). - dm writecache: fix performance degradation in ssd mode (git-fixes). - dm writecache: flush origin device when writing and cache is full (git-fixes). - dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() (git-fixes). - dmaengine: at_xdmac: Do not start transactions at tx_submit level (git-fixes). - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition (git-fixes). - dmaengine: at_xdmac: Fix concurrency over xfers_list (git-fixes). - dmaengine: at_xdmac: Fix lld view setting (git-fixes). - dmaengine: at_xdmac: Print debug message after realeasing the lock (git-fixes). - dmaengine: bestcomm: fix system boot lockups (git-fixes). - dmaengine: idxd: add module parameter to force disable of SVA (bsc#1192931). - dmaengine: idxd: enable SVA feature for IOMMU (bsc#1192931). - dmaengine: pxa/mmp: stop referencing config->slave_id (git-fixes). - dmaengine: st_fdma: fix MODULE_ALIAS (git-fixes). - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (git-fixes). - drm/amd/display: Fix for the no Audio bug with Tiled Displays (git-fixes). - drm/amd/display: Update bounding box states (v2) (git-fixes). - drm/amd/display: Update number of DCN3 clock states (git-fixes). - drm/amd/display: add connector type check for CRC source set (git-fixes). - drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled (git-fixes). - drm/amd/display: fix incorrect CM/TF programming sequence in dwb (git-fixes). - drm/amd/display: fix missing writeback disablement if plane is removed (git-fixes). - drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() (git-fixes). - drm/amdgpu: Fix a printing message (git-fixes). - drm/amdgpu: Fix amdgpu_ras_eeprom_init() (git-fixes). - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE (git-fixes). - drm/amdgpu: revert "Add autodump debugfs node for gpu reset v8" (git-fixes). - drm/amdkfd: Account for SH/SE count when setting up cu masks (git-fixes). - drm/amdkfd: Check for null pointer after calling kmemdup (git-fixes). - drm/ast: potential dereference of null pointer (git-fixes). - drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable in self refresh mode (git-fixes). - drm/bridge: analogix_dp: Make PSR-exit block less (git-fixes). - drm/bridge: display-connector: fix an uninitialized pointer in probe() (git-fixes). - drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit (git-fixes). - drm/bridge: ti-sn65dsi86: Set max register for regmap (git-fixes). - drm/display: fix possible null-pointer dereference in dcn10_set_clock() (git-fixes). - drm/exynos: Always initialize mapping in exynos_drm_register_dma() (git-fixes). - drm/i915/fb: Fix rounding error in subsampled plane size calculation (git-fixes). - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() (git-fixes). - drm/mediatek: Check plane visibility in atomic_update (git-fixes). - drm/msm/dpu: fix safe status debugfs file (git-fixes). - drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660 (git-fixes). - drm/msm/dsi: set default num_data_lanes (git-fixes). - drm/msm/mdp5: fix cursor-related warnings (git-fixes). - drm/msm: mdp4: drop vblank get/put from prepare/complete_commit (git-fixes). - drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture() (git-fixes). - drm/panel: innolux-p079zca: Delete panel on attach() failure (git-fixes). - drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure (git-fixes). - drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() (git-fixes). - drm/rockchip: dsi: Disable PLL clock on bind error (git-fixes). - drm/rockchip: dsi: Fix unbalanced clock on probe error (git-fixes). - drm/rockchip: dsi: Hold pm-runtime across bind/unbind (git-fixes). - drm/rockchip: dsi: Reconfigure hardware on resume() (git-fixes). - drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get (git-fixes). - drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY (git-fixes). - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence (git-fixes). - drm/tegra: vic: Fix DMA API misuse (git-fixes). - drm/vboxvideo: fix a NULL vs IS_ERR() check (git-fixes). - drm/vc4: hdmi: Make sure the controller is powered up during bind (git-fixes). - drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET (git-fixes). - drm/vc4: hdmi: Set a default HSM rate (git-fixes). - drm: fix null-ptr-deref in drm_dev_init_release() (git-fixes). - drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers (git-fixes). - drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock (git-fixes). - eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (git-fixes). - eeprom: idt_89hpesx: Restore printing the unsupported fwnode name (git-fixes). - ext4: Avoid trim error on fs with small groups (bsc#1191271). - ext4: fix lazy initialization next schedule time computation in more granular unit (bsc#1194580). - fget: clarify and improve __fget_files() implementation (bsc#1193727). - firmware: Update Kconfig help text for Google firmware (git-fixes). - firmware: arm_scmi: pm: Propagate return value to caller (git-fixes). - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (git-fixes). - firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available() (git-fixes). - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries (git-fixes). - firmware: qemu_fw_cfg: fix kobject leak in probe error path (git-fixes). - firmware: qemu_fw_cfg: fix sysfs information leak (git-fixes). - firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()' (git-fixes). - firmware: smccc: Fix check for ARCH_SOC_ID not implemented (git-fixes). - firmware: tegra: Fix error application of sizeof() to pointer (git-fixes). - firmware: tegra: Reduce stack usage (git-fixes). - firmware_loader: fix pre-allocated buf built-in firmware use (git-fixes). - floppy: Fix hang in watchdog when disk is ejected (git-fixes). - flow_offload: return EOPNOTSUPP for the unsupported mpls action type (bsc#1154353). - fuse: Pass correct lend value to filemap_write_and_wait_range() (bsc#1194953). - gpiolib: acpi: Make set-debounce-timeout failures non fatal (git-fixes). - gpu: host1x: Add back arm_iommu_detach_device() (git-fixes). - hwmon: (lm90) Add basic support for TI TMP461 (git-fixes). - hwmon: (lm90) Add max6654 support to lm90 driver (git-fixes). - hwmon: (lm90) Do not report 'busy' status bit as alarm (git-fixes). - hwmon: (lm90) Drop critical attribute support for MAX6654 (git-fixes). - hwmon: (lm90) Fix usage of CONFIG2 register in detect function (git-fixes). - hwmon: (lm90) Introduce flag indicating extended temperature support (git-fixes). - i2c: rk3x: Handle a spurious start completion interrupt flag (git-fixes). - i2c: validate user data in compat ioctl (git-fixes). - i3c: fix incorrect address slot lookup on 64-bit (git-fixes). - i3c: master: dw: check return of dw_i3c_master_get_free_pos() (git-fixes). - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (git-fixes). - i40e: Fix for displaying message regarding NVM version (git-fixes). - i40e: Fix incorrect netdev's real number of RX/TX queues (git-fixes). - i40e: Fix to not show opcode msg on unsuccessful VF MAC change (git-fixes). - i40e: fix use-after-free in i40e_sync_filters_subtask() (git-fixes). - iavf: Fix limit of total number of queues to active queues of VF (git-fixes). - iavf: restore MSI state on reset (git-fixes). - ieee802154: atusb: fix uninit value in atusb_set_extended_addr (git-fixes). - ieee802154: fix error return code in ieee802154_llsec_getparams() (git-fixes). - ieee802154: fix error return code in ieee802154_add_iface() (git-fixes). - ieee802154: hwsim: Fix memory leak in hwsim_add_one (git-fixes). - ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others (git-fixes). - ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() (git-fixes). - ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi (git-fixes). - igb: Fix removal of unicast MAC filters of VFs (git-fixes). - igbvf: fix double free in `igbvf_probe` (git-fixes). - igc: Fix typo in i225 LTR functions (jsc#SLE-13533). - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove (git-fixes). - iio: ad7768-1: Call iio_trigger_notify_done() on error (git-fixes). - iio: adc: axp20x_adc: fix charging current reporting on AXP22x (git-fixes). - iio: at91-sama5d2: Fix incorrect sign extension (git-fixes). - iio: dln2-adc: Fix lockdep complaint (git-fixes). - iio: dln2: Check return value of devm_iio_trigger_register() (git-fixes). - iio: itg3200: Call iio_trigger_notify_done() on error (git-fixes). - iio: kxsd9: Do not return error code in trigger handler (git-fixes). - iio: ltr501: Do not return error code in trigger handler (git-fixes). - iio: mma8452: Fix trigger reference couting (git-fixes). - iio: stk3310: Do not return error code in interrupt handler (git-fixes). - iio: trigger: Fix reference counting (git-fixes). - iio: trigger: stm32-timer: fix MODULE_ALIAS (git-fixes). - ionic: Initialize the 'lif->dbid_inuse' bitmap (bsc#1167773). - isofs: Fix out of bound access for corrupted isofs image (bsc#1194591). - iwlwifi: fw: correctly limit to monitor dump (git-fixes). - iwlwifi: mvm: Fix scan channel flags settings (git-fixes). - iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() (git-fixes). - iwlwifi: mvm: avoid static queue number aliasing (git-fixes). - iwlwifi: mvm: disable RX-diversity in powersave (git-fixes). - iwlwifi: mvm: fix 32-bit build in FTM (git-fixes). - iwlwifi: mvm: fix access to BSS elements (git-fixes). - iwlwifi: mvm: test roc running status bits before removing the sta (git-fixes). - iwlwifi: pcie: free RBs during configure (git-fixes). - ixgbe: set X550 MDIO speed before talking to PHY (git-fixes). - kmod: make request_module() return an error when autoloading is disabled (git-fixes). - kobject: Restore old behaviour of kobject_del(NULL) (git-fixes). - kobject_uevent: remove warning in init_uevent_argv() (git-fixes). - kprobes: Limit max data_size of the kretprobe instances (bsc#1193669). - libata: add horkage for ASMedia 1092 (git-fixes). - libata: if T_LENGTH is zero, dma direction should be DMA_NONE (git-fixes). - livepatch: Avoid CPU hogging with cond_resched (bsc#1071995). - lockdown: Allow unprivileged users to see lockdown status (git-fixes). - mISDN: change function names to avoid conflicts (git-fixes). - mac80211: Fix monitor MTU limit so that A-MSDUs get through (git-fixes). - mac80211: agg-tx: do not schedule_and_wake_txq() under sta->lock (git-fixes). - mac80211: do not access the IV when it was stripped (git-fixes). - mac80211: fix lookup when adding AddBA extension element (git-fixes). - mac80211: fix regression in SSN handling of addba tx (git-fixes). - mac80211: initialize variable have_higher_than_11mbit (git-fixes). - mac80211: mark TX-during-stop for TX in in_reconfig (git-fixes). - mac80211: send ADDBA requests using the tid/queue of the aggregation session (git-fixes). - mac80211: track only QoS data frames for admission control (git-fixes). - mac80211: validate extended element ID is present (git-fixes). - mailbox: hi3660: convert struct comments to kernel-doc notation (git-fixes). - media: Revert "media: uvcvideo: Set unique vdev name based in type" (bsc#1193255). - media: aspeed: Update signal status immediately to ensure sane hw state (git-fixes). - media: aspeed: fix mode-detect always time out at 2nd run (git-fixes). - media: cpia2: fix control-message timeouts (git-fixes). - media: dib0700: fix undefined behavior in tuner shutdown (git-fixes). - media: dib8000: Fix a memleak in dib8000_init() (git-fixes). - media: dmxdev: fix UAF when dvb_register_device() fails (git-fixes). - media: dw2102: Fix use after free (git-fixes). - media: em28xx: fix control-message timeouts (git-fixes). - media: em28xx: fix memory leak in em28xx_init_dev (git-fixes). - media: flexcop-usb: fix control-message timeouts (git-fixes). - media: hantro: Fix probe func error path (git-fixes). - media: i2c: imx274: fix trivial typo expsoure/exposure (git-fixes). - media: i2c: imx274: fix trivial typo obainted/obtained (git-fixes). - media: imx-pxp: Initialize the spinlock prior to using it (git-fixes). - media: mceusb: fix control-message timeouts (git-fixes). - media: msi001: fix possible null-ptr-deref in msi001_probe() (git-fixes). - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released (git-fixes). - media: pvrusb2: fix control-message timeouts (git-fixes). - media: rcar-csi2: Correct the selection of hsfreqrange (git-fixes). - media: rcar-csi2: Optimize the selection PHTW register (git-fixes). - media: redrat3: fix control-message timeouts (git-fixes). - media: s2255: fix control-message timeouts (git-fixes). - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() (git-fixes). - media: si2157: Fix "warm" tuner state detection (git-fixes). - media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() (git-fixes). - media: stk1160: fix control-message timeouts (git-fixes). - media: streamzap: remove unnecessary ir_raw_event_reset and handle (git-fixes). - media: uvcvideo: fix division by zero at stream start (git-fixes). - media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' (git-fixes). - memblock: ensure there is no overflow in memblock_overlaps_region() (git-fixes). - memory: emif: Remove bogus debugfs error handling (git-fixes). - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() (git-fixes). - misc: fastrpc: Add missing lock before accessing find_vma() (git-fixes). - misc: fastrpc: fix improper packet size calculation (git-fixes). - misc: lattice-ecp3-config: Fix task hung when firmware load failed (git-fixes). - mmc: meson-mx-sdio: add IRQ check (git-fixes). - mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (git-fixes). - mmc: sdhci-esdhc-imx: disable CMDQ support (git-fixes). - mmc: sdhci-pci: Add PCI ID for Intel ADL (git-fixes). - mmc: sdhci-tegra: Fix switch to HS400ES mode (git-fixes). - move to "mainline soon" section: - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch - moxart: fix potential use-after-free on remove path (bsc#1194516). - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode (git-fixes). - mt76: mt7915: fix an off-by-one bound check (git-fixes). - mtd: rawnand: fsmc: Fix timing computation (git-fixes). - mtd: rawnand: fsmc: Take instruction delay into account (git-fixes). - mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() (git-fixes). - mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (git-fixes). - mwifiex: Fix possible ABBA deadlock (git-fixes). - mwifiex: Try waking the firmware until we get an interrupt (git-fixes). - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources (jsc#SLE-8464). - net/mlx5: Set command entry semaphore up once got index free (jsc#SLE-15172). - net/mlx5e: Fix wrong features assignment in case of error (git-fixes). - net/mlx5e: Wrap the tx reporter dump callback to extract the sq (jsc#SLE-15172). - net/sched: fq_pie: prevent dismantle issue (jsc#SLE-15172). - net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1176774). - net: create netdev->dev_addr assignment helpers (git-fixes). - net: ena: Fix error handling when calculating max IO queues number (bsc#1154492). - net: ena: Fix undefined state when tx request id is out of bounds (bsc#1154492). - net: ena: Fix wrong rx request id by resetting device (git-fixes). - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (jsc#SLE-14777). - net: usb: lan78xx: add Allied Telesis AT29M2-AF (git-fixes). - net: usb: pegasus: Do not drop long Ethernet frames (git-fixes). - netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone (bsc#1176447). - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (git-fixes). - nfc: fix segfault in nfc_genl_dump_devices_done (git-fixes). - nfsd: Fix nsfd startup race (again) (git-fixes). - nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups (bsc#1176447). - nvme-tcp: block BH in sk state_change sk callback (git-fixes). - nvme-tcp: can't set sk_user_data without write_lock (git-fixes). - nvme-tcp: check sgl supported by target (git-fixes). - nvme-tcp: do not update queue count when failing to set io queues (git-fixes). - nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU (git-fixes). - nvme-tcp: fix crash triggered with a dataless request submission (git-fixes). - nvme-tcp: fix error codes in nvme_tcp_setup_ctrl() (git-fixes). - nvme-tcp: fix io_work priority inversion (git-fixes). - nvme-tcp: fix possible data corruption with bio merges (git-fixes). - nvme-tcp: fix possible req->offset corruption (git-fixes). - nvme-tcp: fix wrong setting of request iov_iter (git-fixes). - nvme-tcp: get rid of unused helper function (git-fixes). - nvme-tcp: pair send_mutex init with destroy (git-fixes). - nvme-tcp: pass multipage bvec to request iov_iter (git-fixes). - nvme-tcp: remove incorrect Kconfig dep in BLK_DEV_NVME (git-fixes). - pcmcia: fix setting of kthread task states (git-fixes). - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() (git-fixes). - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() (git-fixes). - pcnet32: Use pci_resource_len to validate PCI resource (git-fixes). - pinctrl: mediatek: fix global-out-of-bounds issue (git-fixes). - pinctrl: qcom: spmi-gpio: correct parent irqspec translation (git-fixes). - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines (git-fixes). - pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() (git-fixes). - pipe: increase minimum default pipe size to 2 pages (bsc#1194587). - platform/x86: apple-gmux: use resource_size() with res (git-fixes). - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep (git-fixes). - power: reset: ltc2952: Fix use of floating point literals (git-fixes). - power: supply: core: Break capacity loop (git-fixes). - power: supply: max17042_battery: Clear status bits in interrupt handler (git-fixes). - powerpc/64s: fix program check interrupt emergency stack path (bsc#1156395). - powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic (bsc#1193901 ltc#194976). - powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC (bsc#1156395). - powerpc/perf: Fix data source encodings for L2.1 and L3.1 accesses (bsc#1065729). - powerpc/prom_init: Fix improper check of prom_getprop() (bsc#1065729). - powerpc/pseries/cpuhp: cache node corrections (bsc#1065729). - powerpc/pseries/cpuhp: delete add/remove_by_count code (bsc#1065729). - powerpc/pseries/mobility: ignore ibm, platform-facilities updates (bsc#1065729). - powerpc/traps: do not enable irqs in _exception (bsc#1065729). - powerpc/xive: Add missing null check after calling kmalloc (bsc#1177437 ltc#188522 jsc#SLE-13294 git-fixes). - powerpc: add interrupt_cond_local_irq_enable helper (bsc#1065729). - powerpc: handle kdump appropriately with crash_kexec_post_notifiers option (bsc#1193901 ltc#194976). - pwm: mxs: Do not modify HW state in .probe() after the PWM chip was registered (git-fixes). - pwm: tiecap: Drop .free() callback (git-fixes). - qlcnic: potential dereference null pointer of rx_queue->page_ring (git-fixes). - quota: check block number when reading the block in quota file (bsc#1194589). - quota: correct error number in free_dqentry() (bsc#1194590). - random: fix data race on crng init time (git-fixes). - random: fix data race on crng_node_pool (git-fixes). - regmap: Call regmap_debugfs_exit() prior to _init() (git-fixes). - rndis_host: support Hytera digital radios (git-fixes). - rpmsg: core: Clean up resources on announce_create failure (git-fixes). - rtl8xxxu: Fix the handling of TX A-MPDU aggregation (git-fixes). - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled (git-fixes). - rtw88: use read_poll_timeout instead of fixed sleep (git-fixes). - rtw88: wow: build wow function only if CONFIG_PM is on (git-fixes). - rtw88: wow: fix size access error of probe request (git-fixes). - sata: nv: fix debug format string mismatch (git-fixes). - scsi: lpfc: Add additional debugfs support for CMF (bsc#1194266). - scsi: lpfc: Adjust CMF total bytes and rxmonitor (bsc#1194266). - scsi: lpfc: Cap CMF read bytes to MBPI (bsc#1194266). - scsi: lpfc: Change return code on I/Os received during link bounce (bsc#1194266). - scsi: lpfc: Fix NPIV port deletion crash (bsc#1194266). - scsi: lpfc: Fix leaked lpfc_dmabuf mbox allocations with NPIV (bsc#1194266). - scsi: lpfc: Fix lpfc_force_rscn ndlp kref imbalance (bsc#1194266). - scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup (bsc#1194266). - scsi: lpfc: Update lpfc version to 14.0.0.4 (bsc#1194266). - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() (git-fixes). - scsi: qla2xxx: Format log strings only if needed (git-fixes). - scsi: qla2xxx: edif: Fix EDIF bsg (git-fixes). - scsi: qla2xxx: edif: Fix app start delay (git-fixes). - scsi: qla2xxx: edif: Fix app start fail (git-fixes). - scsi: qla2xxx: edif: Fix off by one bug in qla_edif_app_getfcinfo() (git-fixes). - scsi: qla2xxx: edif: Flush stale events and msgs on session down (git-fixes). - scsi: qla2xxx: edif: Increase ELS payload (git-fixes). - select: Fix indefinitely sleeping task in poll_schedule_timeout() (bsc#1194027). - selftests: KVM: Explicitly use movq to read xmm registers (git-fixes). - selinux: fix potential memleak in selinux_add_opt() (git-fixes). - seq_buf: Fix overflow in seq_buf_putmem_hex() (git-fixes). - seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (git-fixes). - serial: pl011: Add ACPI SBSA UART match id (git-fixes). - serial: tty: uartlite: fix console setup (git-fixes). - sfc: Check null pointer of rx_queue->page_ring (git-fixes). - sfc: The RX page_ring is optional (git-fixes). - sfc: falcon: Check null pointer of rx_queue->page_ring (git-fixes). - sfc_ef100: potential dereference of null pointer (jsc#SLE-16683). - shmem: shmem_writepage() split unlikely i915 THP (git-fixes). - slimbus: qcom: fix potential NULL dereference in qcom_slim_prg_slew() (git-fixes). - soc/tegra: fuse: Fix bitwise vs. logical OR warning (git-fixes). - soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (git-fixes). - soc: fsl: dpio: rename the enqueue descriptor variable (git-fixes). - soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id (git-fixes). - soc: fsl: dpio: use an explicit NULL instead of 0 (git-fixes). - soc: fsl: dpio: use the combined functions to protect critical zone (git-fixes). - spi: change clk_disable_unprepare to clk_unprepare (git-fixes). - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe (git-fixes). - spi: spi-rspi: Drop redeclaring ret variable in qspi_transfer_in() (git-fixes). - staging: emxx_udc: Fix passing of NULL to dma_alloc_coherent() (git-fixes). - staging: fbtft: Do not spam logs when probe is deferred (git-fixes). - staging: fbtft: Rectify GPIO handling (git-fixes). - staging: fieldbus: anybuss: jump to correct label in an error path (git-fixes). - staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (git-fixes). - staging: rtl8192e: return error code from rtllib_softmac_init() (git-fixes). - staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() (git-fixes). - staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() (git-fixes). - string.h: fix incompatibility between FORTIFY_SOURCE and KASAN (git-fixes). - thermal/drivers/imx8mm: Enable ADC when enabling monitor (git-fixes). - thermal/drivers/int340x: Do not set a wrong tcc offset on resume (git-fixes). - thermal: core: Reset previous low and high trip during thermal zone init (git-fixes). - tpm: add request_locality before write TPM_INT_ENABLE (git-fixes). - tpm: fix potential NULL pointer access in tpm_del_char_device (git-fixes). - tracing/kprobes: 'nmissed' not showed correctly for kretprobe (git-fixes). - tracing/uprobes: Check the return value of kstrdup() for tu->filename (git-fixes). - tracing: Add test for user space strings when filtering on string pointers (git-fixes). - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() (git-fixes). - tty: max310x: fix flexible_array.cocci warnings (git-fixes). - tty: serial: atmel: Call dma_async_issue_pending() (git-fixes). - tty: serial: atmel: Check return code of dmaengine_submit() (git-fixes). - tty: serial: earlycon dependency (git-fixes). - tty: serial: qcom_geni_serial: Drop __init from qcom_geni_console_setup (git-fixes). - tty: serial: uartlite: allow 64 bit address (git-fixes). - tty: synclink_gt: rename a conflicting function name (git-fixes). - udf: Fix crash after seekdir (bsc#1194592). - uio: uio_dmem_genirq: Catch the Exception (git-fixes). - usb: core: config: fix validation of wMaxPacketValue entries (git-fixes). - usb: core: config: using bit mask instead of individual bits (git-fixes). - usb: dwc2: check return value after calling platform_get_resource() (git-fixes). - usb: dwc3: gadget: Continue to process pending requests (git-fixes). - usb: dwc3: gadget: Ignore EP queue requests during bus reset (git-fixes). - usb: dwc3: gadget: Reclaim extra TRBs after request completion (git-fixes). - usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield (git-fixes). - usb: dwc3: ulpi: Fix USB2.0 HS/FS/LS PHY suspend regression (git-fixes). - usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one (git-fixes). - usb: dwc3: ulpi: fix checkpatch warning (git-fixes). - usb: ftdi-elan: fix memory leak on device disconnect (git-fixes). - usb: gadget: composite: Allow bMaxPower=0 if self-powered (git-fixes). - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear (git-fixes). - usb: gadget: u_ether: fix race in setting MAC address in setup phase (git-fixes). - usb: mtu3: add memory barrier before set GPD's HWO (git-fixes). - usb: mtu3: fix interval value for intr and isoc (git-fixes). - usb: mtu3: fix list_head check warning (git-fixes). - usb: mtu3: set interval of FS intr and isoc endpoint (git-fixes). - usb: typec: tcpm: handle SRC_STARTUP state if cc changes (git-fixes). - usb: xhci: Extend support for runtime power management for AMD's Yellow carp (git-fixes). - usermodehelper: reset umask to default before executing user process (git-fixes). - vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888). - video: backlight: Drop maximum brightness override for brightness zero (git-fixes). - watchdog: Fix OMAP watchdog early handling (git-fixes). - watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (git-fixes). - wcn36xx: Fix missing frame timestamp for beacon/probe-resp (git-fixes). - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND (git-fixes). - wcn36xx: Release DMA channel descriptor allocations (git-fixes). - wcn36xx: handle connection loss indication (git-fixes). - wireguard: allowedips: add missing __rcu annotation to satisfy sparse (git-fixes). - wireguard: device: reset peer src endpoint when netns exits (git-fixes). - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc() (git-fixes). - wireguard: receive: drop handshakes if queue lock is contended (git-fixes). - wireguard: receive: use ring buffer for incoming handshakes (git-fixes). - wireguard: selftests: actually test for routing loops (git-fixes). - wireguard: selftests: increase default dmesg log size (git-fixes). - wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma (git-fixes). - x86/platform/uv: Add more to secondary CPU kdump info (bsc#1194493). - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set (git-fixes). - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending (git-fixes). - xhci: avoid race between disable slot command and host runtime suspend (git-fixes). - xhci: fix unsafe memory usage in xhci tracing (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-198=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-198=1 Package List: - openSUSE Leap 15.4 (aarch64): dtb-al-5.3.18-150300.59.43.1 dtb-zte-5.3.18-150300.59.43.1 - openSUSE Leap 15.4 (x86_64): cluster-md-kmp-preempt-5.3.18-150300.59.43.1 cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 dlm-kmp-preempt-5.3.18-150300.59.43.1 dlm-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 gfs2-kmp-preempt-5.3.18-150300.59.43.1 gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 kernel-preempt-5.3.18-150300.59.43.1 kernel-preempt-debuginfo-5.3.18-150300.59.43.1 kernel-preempt-debugsource-5.3.18-150300.59.43.1 kernel-preempt-devel-5.3.18-150300.59.43.1 kernel-preempt-devel-debuginfo-5.3.18-150300.59.43.1 kernel-preempt-extra-5.3.18-150300.59.43.1 kernel-preempt-extra-debuginfo-5.3.18-150300.59.43.1 kernel-preempt-livepatch-devel-5.3.18-150300.59.43.1 kernel-preempt-optional-5.3.18-150300.59.43.1 kernel-preempt-optional-debuginfo-5.3.18-150300.59.43.1 kselftests-kmp-preempt-5.3.18-150300.59.43.1 kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 ocfs2-kmp-preempt-5.3.18-150300.59.43.1 ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 reiserfs-kmp-preempt-5.3.18-150300.59.43.1 reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cluster-md-kmp-default-5.3.18-150300.59.43.1 cluster-md-kmp-default-debuginfo-5.3.18-150300.59.43.1 dlm-kmp-default-5.3.18-150300.59.43.1 dlm-kmp-default-debuginfo-5.3.18-150300.59.43.1 gfs2-kmp-default-5.3.18-150300.59.43.1 gfs2-kmp-default-debuginfo-5.3.18-150300.59.43.1 kernel-default-5.3.18-150300.59.43.1 kernel-default-base-5.3.18-150300.59.43.1.150300.18.27.1 kernel-default-base-rebuild-5.3.18-150300.59.43.1.150300.18.27.1 kernel-default-debuginfo-5.3.18-150300.59.43.1 kernel-default-debugsource-5.3.18-150300.59.43.1 kernel-default-devel-5.3.18-150300.59.43.1 kernel-default-devel-debuginfo-5.3.18-150300.59.43.1 kernel-default-extra-5.3.18-150300.59.43.1 kernel-default-extra-debuginfo-5.3.18-150300.59.43.1 kernel-default-livepatch-5.3.18-150300.59.43.1 kernel-default-livepatch-devel-5.3.18-150300.59.43.1 kernel-default-optional-5.3.18-150300.59.43.1 kernel-default-optional-debuginfo-5.3.18-150300.59.43.1 kernel-obs-build-5.3.18-150300.59.43.1 kernel-obs-build-debugsource-5.3.18-150300.59.43.1 kernel-obs-qa-5.3.18-150300.59.43.1 kernel-syms-5.3.18-150300.59.43.1 kselftests-kmp-default-5.3.18-150300.59.43.1 kselftests-kmp-default-debuginfo-5.3.18-150300.59.43.1 ocfs2-kmp-default-5.3.18-150300.59.43.1 ocfs2-kmp-default-debuginfo-5.3.18-150300.59.43.1 reiserfs-kmp-default-5.3.18-150300.59.43.1 reiserfs-kmp-default-debuginfo-5.3.18-150300.59.43.1 - openSUSE Leap 15.3 (aarch64 x86_64): cluster-md-kmp-preempt-5.3.18-150300.59.43.1 cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 dlm-kmp-preempt-5.3.18-150300.59.43.1 dlm-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 gfs2-kmp-preempt-5.3.18-150300.59.43.1 gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 kernel-preempt-5.3.18-150300.59.43.1 kernel-preempt-debuginfo-5.3.18-150300.59.43.1 kernel-preempt-debugsource-5.3.18-150300.59.43.1 kernel-preempt-devel-5.3.18-150300.59.43.1 kernel-preempt-devel-debuginfo-5.3.18-150300.59.43.1 kernel-preempt-extra-5.3.18-150300.59.43.1 kernel-preempt-extra-debuginfo-5.3.18-150300.59.43.1 kernel-preempt-livepatch-devel-5.3.18-150300.59.43.1 kernel-preempt-optional-5.3.18-150300.59.43.1 kernel-preempt-optional-debuginfo-5.3.18-150300.59.43.1 kselftests-kmp-preempt-5.3.18-150300.59.43.1 kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 ocfs2-kmp-preempt-5.3.18-150300.59.43.1 ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 reiserfs-kmp-preempt-5.3.18-150300.59.43.1 reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.43.1 - openSUSE Leap 15.3 (ppc64le x86_64): kernel-debug-5.3.18-150300.59.43.1 kernel-debug-debuginfo-5.3.18-150300.59.43.1 kernel-debug-debugsource-5.3.18-150300.59.43.1 kernel-debug-devel-5.3.18-150300.59.43.1 kernel-debug-devel-debuginfo-5.3.18-150300.59.43.1 kernel-debug-livepatch-devel-5.3.18-150300.59.43.1 kernel-kvmsmall-5.3.18-150300.59.43.1 kernel-kvmsmall-debuginfo-5.3.18-150300.59.43.1 kernel-kvmsmall-debugsource-5.3.18-150300.59.43.1 kernel-kvmsmall-devel-5.3.18-150300.59.43.1 kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.43.1 kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.43.1 - openSUSE Leap 15.3 (aarch64): cluster-md-kmp-64kb-5.3.18-150300.59.43.1 cluster-md-kmp-64kb-debuginfo-5.3.18-150300.59.43.1 dlm-kmp-64kb-5.3.18-150300.59.43.1 dlm-kmp-64kb-debuginfo-5.3.18-150300.59.43.1 dtb-al-5.3.18-150300.59.43.1 dtb-allwinner-5.3.18-150300.59.43.1 dtb-altera-5.3.18-150300.59.43.1 dtb-amd-5.3.18-150300.59.43.1 dtb-amlogic-5.3.18-150300.59.43.1 dtb-apm-5.3.18-150300.59.43.1 dtb-arm-5.3.18-150300.59.43.1 dtb-broadcom-5.3.18-150300.59.43.1 dtb-cavium-5.3.18-150300.59.43.1 dtb-exynos-5.3.18-150300.59.43.1 dtb-freescale-5.3.18-150300.59.43.1 dtb-hisilicon-5.3.18-150300.59.43.1 dtb-lg-5.3.18-150300.59.43.1 dtb-marvell-5.3.18-150300.59.43.1 dtb-mediatek-5.3.18-150300.59.43.1 dtb-nvidia-5.3.18-150300.59.43.1 dtb-qcom-5.3.18-150300.59.43.1 dtb-renesas-5.3.18-150300.59.43.1 dtb-rockchip-5.3.18-150300.59.43.1 dtb-socionext-5.3.18-150300.59.43.1 dtb-sprd-5.3.18-150300.59.43.1 dtb-xilinx-5.3.18-150300.59.43.1 dtb-zte-5.3.18-150300.59.43.1 gfs2-kmp-64kb-5.3.18-150300.59.43.1 gfs2-kmp-64kb-debuginfo-5.3.18-150300.59.43.1 kernel-64kb-5.3.18-150300.59.43.1 kernel-64kb-debuginfo-5.3.18-150300.59.43.1 kernel-64kb-debugsource-5.3.18-150300.59.43.1 kernel-64kb-devel-5.3.18-150300.59.43.1 kernel-64kb-devel-debuginfo-5.3.18-150300.59.43.1 kernel-64kb-extra-5.3.18-150300.59.43.1 kernel-64kb-extra-debuginfo-5.3.18-150300.59.43.1 kernel-64kb-livepatch-devel-5.3.18-150300.59.43.1 kernel-64kb-optional-5.3.18-150300.59.43.1 kernel-64kb-optional-debuginfo-5.3.18-150300.59.43.1 kselftests-kmp-64kb-5.3.18-150300.59.43.1 kselftests-kmp-64kb-debuginfo-5.3.18-150300.59.43.1 ocfs2-kmp-64kb-5.3.18-150300.59.43.1 ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.43.1 reiserfs-kmp-64kb-5.3.18-150300.59.43.1 reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.43.1 - openSUSE Leap 15.3 (noarch): kernel-devel-5.3.18-150300.59.43.1 kernel-docs-5.3.18-150300.59.43.1 kernel-docs-html-5.3.18-150300.59.43.1 kernel-macros-5.3.18-150300.59.43.1 kernel-source-5.3.18-150300.59.43.1 kernel-source-vanilla-5.3.18-150300.59.43.1 - openSUSE Leap 15.3 (s390x): kernel-zfcpdump-5.3.18-150300.59.43.1 kernel-zfcpdump-debuginfo-5.3.18-150300.59.43.1 kernel-zfcpdump-debugsource-5.3.18-150300.59.43.1 References: https://www.suse.com/security/cve/CVE-2021-4083.html https://www.suse.com/security/cve/CVE-2021-4135.html https://www.suse.com/security/cve/CVE-2021-4149.html https://www.suse.com/security/cve/CVE-2021-4197.html https://www.suse.com/security/cve/CVE-2021-4202.html https://www.suse.com/security/cve/CVE-2021-45485.html https://www.suse.com/security/cve/CVE-2021-45486.html https://www.suse.com/security/cve/CVE-2021-46283.html https://www.suse.com/security/cve/CVE-2022-0185.html https://www.suse.com/security/cve/CVE-2022-0322.html https://bugzilla.suse.com/1065729 https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1154353 https://bugzilla.suse.com/1154492 https://bugzilla.suse.com/1156395 https://bugzilla.suse.com/1167773 https://bugzilla.suse.com/1176447 https://bugzilla.suse.com/1176774 https://bugzilla.suse.com/1177437 https://bugzilla.suse.com/1190256 https://bugzilla.suse.com/1191271 https://bugzilla.suse.com/1191929 https://bugzilla.suse.com/1192931 https://bugzilla.suse.com/1193255 https://bugzilla.suse.com/1193328 https://bugzilla.suse.com/1193660 https://bugzilla.suse.com/1193669 https://bugzilla.suse.com/1193727 https://bugzilla.suse.com/1193901 https://bugzilla.suse.com/1193927 https://bugzilla.suse.com/1194001 https://bugzilla.suse.com/1194027 https://bugzilla.suse.com/1194087 https://bugzilla.suse.com/1194094 https://bugzilla.suse.com/1194266 https://bugzilla.suse.com/1194302 https://bugzilla.suse.com/1194493 https://bugzilla.suse.com/1194516 https://bugzilla.suse.com/1194517 https://bugzilla.suse.com/1194518 https://bugzilla.suse.com/1194529 https://bugzilla.suse.com/1194578 https://bugzilla.suse.com/1194580 https://bugzilla.suse.com/1194584 https://bugzilla.suse.com/1194586 https://bugzilla.suse.com/1194587 https://bugzilla.suse.com/1194589 https://bugzilla.suse.com/1194590 https://bugzilla.suse.com/1194591 https://bugzilla.suse.com/1194592 https://bugzilla.suse.com/1194888 https://bugzilla.suse.com/1194953 https://bugzilla.suse.com/1194985

1 0

openSUSE-RU-2022:0196-1: moderate: Recommended update for s390-tools
by maintenance＠opensuse.org 26 Jan '22

26 Jan '22

openSUSE Recommended Update: Recommended update for s390-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0196-1 Rating: moderate References: #1193461 #1193462 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for s390-tools fixes the following issues: - Fixed an issue when the required data is not collected during run of 'dbginfo.sh' (bsc#1193462) - Replace problematic commands with additional ones in 'dbginfo.sh' (bsc#1193462) - Added fixes to 'dbginfo.sh' for stabilzation of data collection (bsc#1193461) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-196=1 Package List: - openSUSE Leap 15.3 (s390x): libekmfweb1-2.15.1-8.11.1 libekmfweb1-debuginfo-2.15.1-8.11.1 libekmfweb1-devel-2.15.1-8.11.1 osasnmpd-2.15.1-8.11.1 osasnmpd-debuginfo-2.15.1-8.11.1 s390-tools-2.15.1-8.11.1 s390-tools-debuginfo-2.15.1-8.11.1 s390-tools-debugsource-2.15.1-8.11.1 s390-tools-hmcdrvfs-2.15.1-8.11.1 s390-tools-hmcdrvfs-debuginfo-2.15.1-8.11.1 s390-tools-zdsfs-2.15.1-8.11.1 s390-tools-zdsfs-debuginfo-2.15.1-8.11.1 References: https://bugzilla.suse.com/1193461 https://bugzilla.suse.com/1193462

1 0

openSUSE-SU-2022:0190-1: important: Security update for polkit
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for polkit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0190-1 Rating: important References: #1194568 Cross-References: CVE-2021-4034 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-190=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpolkit0-0.116-3.6.1 libpolkit0-debuginfo-0.116-3.6.1 polkit-0.116-3.6.1 polkit-debuginfo-0.116-3.6.1 polkit-debugsource-0.116-3.6.1 polkit-devel-0.116-3.6.1 polkit-devel-debuginfo-0.116-3.6.1 typelib-1_0-Polkit-1_0-0.116-3.6.1 - openSUSE Leap 15.3 (x86_64): libpolkit0-32bit-0.116-3.6.1 libpolkit0-32bit-debuginfo-0.116-3.6.1 - openSUSE Leap 15.3 (noarch): polkit-doc-0.116-3.6.1 References: https://www.suse.com/security/cve/CVE-2021-4034.html https://bugzilla.suse.com/1194568

1 0

openSUSE-RU-2022:0187-1: moderate: Recommended update for vsftpd
by maintenance＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Recommended Update: Recommended update for vsftpd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0187-1 Rating: moderate References: #1021387 #1052900 #1180314 #971784 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for vsftpd fixes the following issues: - Fix several issues related to SSL/TLS support (bsc#1021387) - Fix a seccomp failure that used to occur in FIPS mode when SSL is enabled (bsc#1052900) - Fix seccomp bug where the process would hang trying access syslog (bsc#971784) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-187=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): vsftpd-3.0.3-12.6.1 vsftpd-debuginfo-3.0.3-12.6.1 vsftpd-debugsource-3.0.3-12.6.1 References: https://bugzilla.suse.com/1021387 https://bugzilla.suse.com/1052900 https://bugzilla.suse.com/1180314 https://bugzilla.suse.com/971784

1 0

openSUSE-RU-2022:0193-1: moderate: Recommended update for librtas
by maintenance＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Recommended Update: Recommended update for librtas ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0193-1 Rating: moderate References: #1193846 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for librtas fixes the following issues: - librtasevent: Fix memory page address print issue. (bsc#1193846) - Add '-ffat-lto-objects' to avoid ppc64le build error Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-193=1 Package List: - openSUSE Leap 15.3 (ppc64le): librtas-debugsource-2.0.2-7.3.1 librtas-devel-2.0.2-7.3.1 librtas-devel-static-2.0.2-7.3.1 librtas-doc-2.0.2-7.3.1 librtas2-2.0.2-7.3.1 librtas2-debuginfo-2.0.2-7.3.1 References: https://bugzilla.suse.com/1193846

1 0

openSUSE-RU-2022:0186-1: moderate: Recommended update for gdm
by maintenance＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Recommended Update: Recommended update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0186-1 Rating: moderate References: #1190230 #1192177 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gdm fixes the following issues: -Fixed an issue when X server does not restart after using "ctrl-alt-backspace". (bsc#1190230) -Fixed an issue when Xorg does not log to 'var/log/Xorg.*.log'. (bsc#1192177) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-186=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gdm-3.34.1-8.21.3 gdm-debuginfo-3.34.1-8.21.3 gdm-debugsource-3.34.1-8.21.3 gdm-devel-3.34.1-8.21.3 libgdm1-3.34.1-8.21.3 libgdm1-debuginfo-3.34.1-8.21.3 typelib-1_0-Gdm-1_0-3.34.1-8.21.3 - openSUSE Leap 15.3 (noarch): gdm-branding-upstream-3.34.1-8.21.3 gdm-lang-3.34.1-8.21.3 gdm-systemd-3.34.1-8.21.3 gdmflexiserver-3.34.1-8.21.3 References: https://bugzilla.suse.com/1190230 https://bugzilla.suse.com/1192177

1 0

openSUSE-RU-2022:0188-1: moderate: Recommended update for hunspell
by maintenance＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Recommended Update: Recommended update for hunspell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0188-1 Rating: moderate References: #1193627 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hunspell fixes the following issues: - Fix myspell english dictionary not being installed (bsc#1193627) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-188=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): hunspell-1.6.2-3.8.1 hunspell-debuginfo-1.6.2-3.8.1 hunspell-debugsource-1.6.2-3.8.1 hunspell-devel-1.6.2-3.8.1 hunspell-tools-1.6.2-3.8.1 hunspell-tools-debuginfo-1.6.2-3.8.1 libhunspell-1_6-0-1.6.2-3.8.1 libhunspell-1_6-0-debuginfo-1.6.2-3.8.1 - openSUSE Leap 15.3 (x86_64): hunspell-devel-32bit-1.6.2-3.8.1 libhunspell-1_6-0-32bit-1.6.2-3.8.1 libhunspell-1_6-0-32bit-debuginfo-1.6.2-3.8.1 References: https://bugzilla.suse.com/1193627

1 0

openSUSE-SU-2022:0182-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0182-1 Rating: important References: #1194019 Cross-References: CVE-2019-8766 CVE-2019-8782 CVE-2019-8808 CVE-2019-8815 CVE-2020-13753 CVE-2020-27918 CVE-2020-29623 CVE-2020-3902 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9947 CVE-2020-9948 CVE-2020-9951 CVE-2020-9952 CVE-2021-1765 CVE-2021-1788 CVE-2021-1817 CVE-2021-1820 CVE-2021-1825 CVE-2021-1826 CVE-2021-1844 CVE-2021-1871 CVE-2021-30661 CVE-2021-30666 CVE-2021-30682 CVE-2021-30761 CVE-2021-30762 CVE-2021-30809 CVE-2021-30818 CVE-2021-30823 CVE-2021-30836 CVE-2021-30846 CVE-2021-30848 CVE-2021-30849 CVE-2021-30851 CVE-2021-30858 CVE-2021-30884 CVE-2021-30887 CVE-2021-30888 CVE-2021-30889 CVE-2021-30890 CVE-2021-30897 CVSS scores: CVE-2019-8766 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8766 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8782 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8782 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8808 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8808 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8815 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8815 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-13753 (NVD) : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2020-13753 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-27918 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-27918 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-29623 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2020-29623 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2020-3902 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-3902 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-9802 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9802 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-9803 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9803 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-9805 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2020-9805 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2020-9947 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9947 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9948 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9951 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9951 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9952 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2020-9952 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-1765 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-1765 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-1788 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1788 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1844 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1844 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1871 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-1871 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30809 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30809 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30818 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30818 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30823 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-30823 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-30836 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-30836 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-30846 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30846 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30848 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30848 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30849 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30849 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30851 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30851 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30858 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30858 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30884 (NVD) : 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N CVE-2021-30884 (SUSE): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N CVE-2021-30887 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-30887 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-30888 (NVD) : 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-30888 (SUSE): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-30889 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30889 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30890 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-30890 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-30897 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 43 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: Fixed logic issue allowing universal cross site scripting when processing maliciously crafted web content. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-182=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.34.3-23.3 libjavascriptcoregtk-4_0-18-debuginfo-2.34.3-23.3 libwebkit2gtk-4_0-37-2.34.3-23.3 libwebkit2gtk-4_0-37-debuginfo-2.34.3-23.3 typelib-1_0-JavaScriptCore-4_0-2.34.3-23.3 typelib-1_0-WebKit2-4_0-2.34.3-23.3 typelib-1_0-WebKit2WebExtension-4_0-2.34.3-23.3 webkit-jsc-4-2.34.3-23.3 webkit-jsc-4-debuginfo-2.34.3-23.3 webkit2gtk-4_0-injected-bundles-2.34.3-23.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.34.3-23.3 webkit2gtk3-debugsource-2.34.3-23.3 webkit2gtk3-devel-2.34.3-23.3 webkit2gtk3-minibrowser-2.34.3-23.3 webkit2gtk3-minibrowser-debuginfo-2.34.3-23.3 - openSUSE Leap 15.3 (noarch): libwebkit2gtk3-lang-2.34.3-23.3 - openSUSE Leap 15.3 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.34.3-23.3 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.34.3-23.3 libwebkit2gtk-4_0-37-32bit-2.34.3-23.3 libwebkit2gtk-4_0-37-32bit-debuginfo-2.34.3-23.3 References: https://www.suse.com/security/cve/CVE-2019-8766.html https://www.suse.com/security/cve/CVE-2019-8782.html https://www.suse.com/security/cve/CVE-2019-8808.html https://www.suse.com/security/cve/CVE-2019-8815.html https://www.suse.com/security/cve/CVE-2020-13753.html https://www.suse.com/security/cve/CVE-2020-27918.html https://www.suse.com/security/cve/CVE-2020-29623.html https://www.suse.com/security/cve/CVE-2020-3902.html https://www.suse.com/security/cve/CVE-2020-9802.html https://www.suse.com/security/cve/CVE-2020-9803.html https://www.suse.com/security/cve/CVE-2020-9805.html https://www.suse.com/security/cve/CVE-2020-9947.html https://www.suse.com/security/cve/CVE-2020-9948.html https://www.suse.com/security/cve/CVE-2020-9951.html https://www.suse.com/security/cve/CVE-2020-9952.html https://www.suse.com/security/cve/CVE-2021-1765.html https://www.suse.com/security/cve/CVE-2021-1788.html https://www.suse.com/security/cve/CVE-2021-1817.html https://www.suse.com/security/cve/CVE-2021-1820.html https://www.suse.com/security/cve/CVE-2021-1825.html https://www.suse.com/security/cve/CVE-2021-1826.html https://www.suse.com/security/cve/CVE-2021-1844.html https://www.suse.com/security/cve/CVE-2021-1871.html https://www.suse.com/security/cve/CVE-2021-30661.html https://www.suse.com/security/cve/CVE-2021-30666.html https://www.suse.com/security/cve/CVE-2021-30682.html https://www.suse.com/security/cve/CVE-2021-30761.html https://www.suse.com/security/cve/CVE-2021-30762.html https://www.suse.com/security/cve/CVE-2021-30809.html https://www.suse.com/security/cve/CVE-2021-30818.html https://www.suse.com/security/cve/CVE-2021-30823.html https://www.suse.com/security/cve/CVE-2021-30836.html https://www.suse.com/security/cve/CVE-2021-30846.html https://www.suse.com/security/cve/CVE-2021-30848.html https://www.suse.com/security/cve/CVE-2021-30849.html https://www.suse.com/security/cve/CVE-2021-30851.html https://www.suse.com/security/cve/CVE-2021-30858.html https://www.suse.com/security/cve/CVE-2021-30884.html https://www.suse.com/security/cve/CVE-2021-30887.html https://www.suse.com/security/cve/CVE-2021-30888.html https://www.suse.com/security/cve/CVE-2021-30889.html https://www.suse.com/security/cve/CVE-2021-30890.html https://www.suse.com/security/cve/CVE-2021-30897.html https://bugzilla.suse.com/1194019

1 0

openSUSE-SU-2022:0184-1: important: Security update for json-c
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for json-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0184-1 Rating: important References: #1171479 Cross-References: CVE-2020-12762 CVSS scores: CVE-2020-12762 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-12762 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for json-c fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-184=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): json-c-debugsource-0.13-3.3.1 libjson-c-devel-0.13-3.3.1 libjson-c3-0.13-3.3.1 libjson-c3-debuginfo-0.13-3.3.1 - openSUSE Leap 15.3 (noarch): libjson-c-doc-0.13-3.3.1 - openSUSE Leap 15.3 (x86_64): libjson-c3-32bit-0.13-3.3.1 libjson-c3-32bit-debuginfo-0.13-3.3.1 References: https://www.suse.com/security/cve/CVE-2020-12762.html https://bugzilla.suse.com/1171479

1 0

openSUSE-RU-2022:0022-1: moderate: Recommended update for galera-4
by maintenance＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Recommended Update: Recommended update for galera-4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0022-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for galera-4 fixes the following issues: This update ships galera-4 in version 26.4.10: http://releases.galeracluster.com/galera-4/release-notes-galera-26.4.10.txt Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-22=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): galera-4-26.4.10-bp153.2.1 galera-4-wsrep-provider-26.4.10-bp153.2.1 References:

1 0

openSUSE-RU-2022:0021-1: moderate: Recommended update for youtube-dl
by maintenance＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Recommended Update: Recommended update for youtube-dl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0021-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for youtube-dl fixes the following issues: - The youtube-dl SRPM (producing: yt-dlp BRPM) switches back from the yt-dlp source to the to youtube-dl source and produces the youtube-dl BRPM again. (Project has seen activity). yt-dlp is now its own SRPM. - Switch to youtube-dl 2021.12.17 * youtube: Update signature function patterns * liveleak: Remove extractor * orf:tvthek: Add support for MPD formats - Update to 2021.06.06 * [facebook] Improve login required detection * [youporn] Fix formats and view count extraction * [orf:tvthek] Fix thumbnails extraction * [formula1] Fix extraction * [ard] Relax URL regular expression and fix video ids * [ustream] Detect https embeds * [ted] Prefer own formats over external sources * [twitch:clips] Improve extraction * [twitch:clips] Add access token query to download URLs * [youtube] Fix get_video_info request * [vimeo] Fix vimeo pro embed extraction * [redbulltv] Fix embed data extraction * [shahid] Relax URL regular expression - Update to release 2021.05.16 * Add support for sibnet embeds - Update to release 2021.04.17 * [curiositystream] fix format extraction * [cbssports] fix extraction * [mtv] Fix Viacom A/B Testing Video Player extraction * [youtube:tab] Pass innertube context and x-goog-visitor-id header along with continuation requests * [youtube] Improve URL to extractor routing * [youtube] Add more invidious instances * [youtube:tab] Detect series playlist on playlists page * [youtube:tab] Improve grid extraction * [youtube] Improve stretch extraction and fix stretched ratio calculation * [utils] Add support for support for experimental HTTP response status code 308 Permanent Redirect - Update to release 2021.04.07 * youtube: Add support for hashtag videos extraction - The youtube-dl SRPM (producing: yt-dlp BRPM) switches back from the yt-dlp source to the to youtube-dl source and produces the youtube-dl BRPM again. (Project has seen activity). yt-dlp is now its own SRPM. - Switch to youtube-dl 2021.12.17 * youtube: Update signature function patterns * liveleak: Remove extractor * orf:tvthek: Add support for MPD formats - Update to 2021.06.06 * [facebook] Improve login required detection * [youporn] Fix formats and view count extraction * [orf:tvthek] Fix thumbnails extraction * [formula1] Fix extraction * [ard] Relax URL regular expression and fix video ids * [ustream] Detect https embeds * [ted] Prefer own formats over external sources * [twitch:clips] Improve extraction * [twitch:clips] Add access token query to download URLs * [youtube] Fix get_video_info request * [vimeo] Fix vimeo pro embed extraction * [redbulltv] Fix embed data extraction * [shahid] Relax URL regular expression - Update to release 2021.05.16 * Add support for sibnet embeds - Update to release 2021.04.17 * [curiositystream] fix format extraction * [cbssports] fix extraction * [mtv] Fix Viacom A/B Testing Video Player extraction * [youtube:tab] Pass innertube context and x-goog-visitor-id header along with continuation requests * [youtube] Improve URL to extractor routing * [youtube] Add more invidious instances * [youtube:tab] Detect series playlist on playlists page * [youtube:tab] Improve grid extraction * [youtube] Improve stretch extraction and fix stretched ratio calculation * [utils] Add support for support for experimental HTTP response status code 308 Permanent Redirect - Update to release 2021.04.07 * youtube: Add support for hashtag videos extraction Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-21=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): python2-youtube-dl-2020.05.08-bp153.2.5.1 python3-youtube-dl-2020.05.08-bp153.2.5.1 youtube-dl-2021.12.17-bp153.2.3.1 youtube-dl-bash-completion-2021.12.17-bp153.2.3.1 youtube-dl-fish-completion-2021.12.17-bp153.2.3.1 youtube-dl-zsh-completion-2021.12.17-bp153.2.3.1 References:

1 0

openSUSE-SU-2022:0177-1: Security update for qemu
by opensuse-security＠opensuse.org 25 Jan '22

25 Jan '22

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0177-1 Rating: low References: #1181361 Cross-References: CVE-2021-20196 CVSS scores: CVE-2021-20196 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-20196 (SUSE): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for qemu fixes the following issues: - CVE-2021-20196: Fixed null pointer dereference that may lead to guest crash (bsc#1181361). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-177=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-5.2.0-150300.109.2 qemu-arm-5.2.0-150300.109.2 qemu-arm-debuginfo-5.2.0-150300.109.2 qemu-audio-alsa-5.2.0-150300.109.2 qemu-audio-alsa-debuginfo-5.2.0-150300.109.2 qemu-audio-pa-5.2.0-150300.109.2 qemu-audio-pa-debuginfo-5.2.0-150300.109.2 qemu-audio-spice-5.2.0-150300.109.2 qemu-audio-spice-debuginfo-5.2.0-150300.109.2 qemu-block-curl-5.2.0-150300.109.2 qemu-block-curl-debuginfo-5.2.0-150300.109.2 qemu-block-dmg-5.2.0-150300.109.2 qemu-block-dmg-debuginfo-5.2.0-150300.109.2 qemu-block-gluster-5.2.0-150300.109.2 qemu-block-gluster-debuginfo-5.2.0-150300.109.2 qemu-block-iscsi-5.2.0-150300.109.2 qemu-block-iscsi-debuginfo-5.2.0-150300.109.2 qemu-block-nfs-5.2.0-150300.109.2 qemu-block-nfs-debuginfo-5.2.0-150300.109.2 qemu-block-rbd-5.2.0-150300.109.2 qemu-block-rbd-debuginfo-5.2.0-150300.109.2 qemu-block-ssh-5.2.0-150300.109.2 qemu-block-ssh-debuginfo-5.2.0-150300.109.2 qemu-chardev-baum-5.2.0-150300.109.2 qemu-chardev-baum-debuginfo-5.2.0-150300.109.2 qemu-chardev-spice-5.2.0-150300.109.2 qemu-chardev-spice-debuginfo-5.2.0-150300.109.2 qemu-debuginfo-5.2.0-150300.109.2 qemu-debugsource-5.2.0-150300.109.2 qemu-extra-5.2.0-150300.109.2 qemu-extra-debuginfo-5.2.0-150300.109.2 qemu-guest-agent-5.2.0-150300.109.2 qemu-guest-agent-debuginfo-5.2.0-150300.109.2 qemu-hw-display-qxl-5.2.0-150300.109.2 qemu-hw-display-qxl-debuginfo-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-debuginfo-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-pci-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-pci-debuginfo-5.2.0-150300.109.2 qemu-hw-display-virtio-vga-5.2.0-150300.109.2 qemu-hw-display-virtio-vga-debuginfo-5.2.0-150300.109.2 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.109.2 qemu-hw-s390x-virtio-gpu-ccw-debuginfo-5.2.0-150300.109.2 qemu-hw-usb-redirect-5.2.0-150300.109.2 qemu-hw-usb-redirect-debuginfo-5.2.0-150300.109.2 qemu-hw-usb-smartcard-5.2.0-150300.109.2 qemu-hw-usb-smartcard-debuginfo-5.2.0-150300.109.2 qemu-ivshmem-tools-5.2.0-150300.109.2 qemu-ivshmem-tools-debuginfo-5.2.0-150300.109.2 qemu-ksm-5.2.0-150300.109.2 qemu-lang-5.2.0-150300.109.2 qemu-linux-user-5.2.0-150300.109.2 qemu-linux-user-debuginfo-5.2.0-150300.109.2 qemu-linux-user-debugsource-5.2.0-150300.109.2 qemu-ppc-5.2.0-150300.109.2 qemu-ppc-debuginfo-5.2.0-150300.109.2 qemu-s390x-5.2.0-150300.109.2 qemu-s390x-debuginfo-5.2.0-150300.109.2 qemu-testsuite-5.2.0-150300.109.4 qemu-tools-5.2.0-150300.109.2 qemu-tools-debuginfo-5.2.0-150300.109.2 qemu-ui-curses-5.2.0-150300.109.2 qemu-ui-curses-debuginfo-5.2.0-150300.109.2 qemu-ui-gtk-5.2.0-150300.109.2 qemu-ui-gtk-debuginfo-5.2.0-150300.109.2 qemu-ui-opengl-5.2.0-150300.109.2 qemu-ui-opengl-debuginfo-5.2.0-150300.109.2 qemu-ui-spice-app-5.2.0-150300.109.2 qemu-ui-spice-app-debuginfo-5.2.0-150300.109.2 qemu-ui-spice-core-5.2.0-150300.109.2 qemu-ui-spice-core-debuginfo-5.2.0-150300.109.2 qemu-vhost-user-gpu-5.2.0-150300.109.2 qemu-vhost-user-gpu-debuginfo-5.2.0-150300.109.2 qemu-x86-5.2.0-150300.109.2 qemu-x86-debuginfo-5.2.0-150300.109.2 - openSUSE Leap 15.3 (s390x x86_64): qemu-kvm-5.2.0-150300.109.2 - openSUSE Leap 15.3 (noarch): qemu-ipxe-1.0.0+-150300.109.2 qemu-microvm-5.2.0-150300.109.2 qemu-seabios-1.14.0_0_g155821a-150300.109.2 qemu-sgabios-8-150300.109.2 qemu-skiboot-5.2.0-150300.109.2 qemu-vgabios-1.14.0_0_g155821a-150300.109.2 References: https://www.suse.com/security/cve/CVE-2021-20196.html https://bugzilla.suse.com/1181361

1 0