February 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-FU-2022:0599-1: moderate: Feature update for golang-github-prometheus-prometheus
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Feature Update: Feature update for golang-github-prometheus-prometheus ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0599-1 Rating: moderate References: #1181400 SLE-22863 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one feature fix and contains one feature can now be installed. Description: This feature update for golang-github-prometheus-prometheus provides the following changes: Upgrade `golang-github-prometheus-prometheus` from version 2.27.1 to version 2.32.1: (jsc#SLE-22863) - Use `obs-service-go_modules` - Added hardening to systemd service(s). Modified `prometheus.service` (bsc#1181400) - Bugfixes: * Scrape: Fix reporting metrics when sample limit is reached during the report. * Scrape: Ensure that scrape interval and scrape timeout are always set. * TSDB: Expose and fix bug in iterators' Seek() method. * TSDB: Add more size checks when writing individual sections in the index. * PromQL: Make deriv() return zero values for constant series. * TSDB: Fix panic when checkpoint directory is empty. #9687 * TSDB: Fix panic, out of order chunks, and race warning during WAL replay. * UI: Correctly render links for targets with IPv6 addresses that contain a Zone ID. * Promtool: Fix checking of `authorization.credentials_file` and `bearer_token_file` fields. * Uyuni SD: Fix null pointer exception during initialization. * TSDB: Fix queries after a failed snapshot replay. * SD: Fix a panic when the experimental discovery manager receives targets during a reload. * Backfill: Apply rule labels after query labels. * Scrape: Resolve conflicts between multiple exported label prefixes. * Scrape: Restart scrape loops when __scrape_interval__ is changed. * TSDB: Fix memory leak in samples deletion. * UI: Use consistent margin-bottom for all alert kinds. * TSDB: Fix panic on failed snapshot replay. * TSDB: Don't fail snapshot replay with exemplar storage disabled when the snapshot contains exemplars. * TSDB: Don't error on overlapping m-mapped chunks during WAL replay. * promtool rules backfill: Prevent creation of data before the start time. * promtool rules backfill: Do not query after the end time. * Azure SD: Fix panic when no computername is set. * Exemplars: Fix panic when resizing exemplar storage from 0 to a non-zero size. * TSDB: Correctly decrement `prometheus_tsdb_head_active_appenders` when the append has no samples. * promtool rules backfill: Return 1 if backfill was unsuccessful. * promtool rules backfill: Avoid creation of overlapping blocks. * config: Fix a panic when reloading configuration with a null relabel action. * Fix Kubernetes SD failing to discover Ingress in Kubernetes v1.22. * Fix data race in loading write-ahead-log (WAL). * TSDB: align atomically accessed int64 to prevent panic in 32-bit archs. * Log when total symbol size exceeds 2^32 bytes, causing compaction to fail, and skip compaction. * Fix incorrect target_limit reloading of zero value. * Fix head GC and pending readers race condition. * Fix timestamp handling in OpenMetrics parser. * Fix potential duplicate metrics in /federate endpoint when specifying multiple matchers. * Fix server configuration and validation for authentication via client cert. * Allow start and end again as label names in PromQL queries. They were disallowed since the introduction of @ timestamp feature. * HTTP SD: Allow charset specification in Content-Type header. * HTTP SD: Fix handling of disappeared target groups. * Fix incorrect log-level handling after moving to go-kit/log. * UI: In the experimental PromQL editor, fix autocompletion and parsing for special float values and improve series metadata fetching. * TSDB: When merging chunks, split resulting chunks if they would contain more than the maximum of 120 samples. * SD: Fix the computation of the `prometheus_sd_discovered_targets` metric when using multiple service discoveries. - Change: * remote-write: Change default max retry time from 100ms to 5 seconds. * UI: Remove standard PromQL editor in favour of the codemirror-based editor. * Promote `--storage.tsdb.allow-overlapping-blocks` flag to stable. * Promote `--storage.tsdb.retention.size` flag to stable. * UI: Make the new experimental PromQL editor the default. - Features: * Agent: New mode of operation optimized for remote-write only scenarios, without local storage. * Promtool: Add promtool check service-discovery command. * PromQL: Add trigonometric functions and atan2 binary operator. * Remote: Add support for exemplar in the remote write receiver endpoint. * SD: Add PuppetDB service discovery. * SD: Add Uyuni service discovery. * Web: Add support for security-related HTTP headers. * experimental TSDB: Snapshot in-memory chunks on shutdown for faster restarts. * experimental Scrape: Configure scrape interval and scrape timeout via relabeling using `__scrape_interval__` and `__scrape_timeout__` labels respectively. * Scrape: Add scrape_timeout_seconds and scrape_sample_limit metric. * Add Kuma service discovery. * Add present_over_time PromQL function. * Allow configuring exemplar storage via file and make it reloadable. * UI: Allow selecting time range with mouse drag. * promtool: Add feature flags flag `--enable-feature`. * promtool: Add `file_sd` file validation. * Linode SD: Add Linode service discovery. * HTTP SD: Add generic HTTP-based service discovery. * Kubernetes SD: Allow configuring API Server access via a kubeconfig file. * UI: Add exemplar display support to the graphing interface. * Consul SD: Add namespace support for Consul Enterprise. - Enhancements: * Promtool: Improve test output. * Promtool: Use kahan summation for better numerical stability. * Remote-write: Reuse memory for marshalling. * Scrape: Add scrape_body_size_bytes scrape metric behind the `--enable-feature=extra-scrape-metrics` flag. * TSDB: Add windows arm64 support. * TSDB: Optimize query by skipping unneeded sorting in TSDB. * Templates: Support int and uint as datatypes for template formatting. * UI: Prefer rate over rad, delta over deg, and count over cos in autocomplete. * Azure SD: Add proxy_url, follow_redirects, tls_config. * Backfill: Add `--max-block-duration` in promtool `create-blocks-from` rules. * Config: Print human-readable sizes with unit instead of raw numbers. * HTTP: Re-enable HTTP/2. * Kubernetes SD: Warn user if number of endpoints exceeds limit. * OAuth2: Add TLS configuration to token requests. * PromQL: Several optimizations. * PromQL: Make aggregations deterministic in instant queries. * Rules: Add the ability to limit number of alerts or series. * SD: Experimental discovery manager to avoid restarts upon reload. * UI: Debounce timerange setting changes. * Remote Write: Redact remote write URL when used for metric label. * UI: Redact remote write URL and proxy URL passwords in the /config page. * Scrape: Add --scrape.timestamp-tolerance flag to adjust scrape timestamp tolerance when enabled via `--scrape.adjust-timestamps`. * Remote Write: Improve throughput when sending exemplars. * TSDB: Optimise WAL loading by removing extra map and caching min-time * promtool: Speed up checking for duplicate rules. * Scrape: Reduce allocations when parsing the metrics. * docker_sd: Support host network mode * Reduce blocking of outgoing remote write requests from series garbage collection. * Improve write-ahead-log decoding performance. * Improve append performance in TSDB by reducing mutexes usage. * Allow configuring max_samples_per_send for remote write metadata. * Add `__meta_gce_interface_ipv4_<name>` meta label to GCE discovery. * Add `__meta_ec2_availability_zone_id` meta label to EC2 discovery. * Add `__meta_azure_machine_computer_name` meta label to Azure discovery. * Add `__meta_hetzner_hcloud_labelpresent_<labelname>` meta label to Hetzner discovery. * promtool: Add compaction efficiency to promtool tsdb analyze reports. * promtool: Allow configuring max block duration for backfilling via `--max-block-duration` flag. * UI: Add sorting and filtering to flags page. * UI: Improve alerts page rendering performance. * Promtool: Allow silencing output when importing / backfilling data. * Consul SD: Support reading tokens from file. * Rules: Add a new .ExternalURL alert field templating variable, containing the external URL of the Prometheus server. * Scrape: Add experimental body_size_limit scrape configuration setting to limit the allowed response body size for target scrapes. * Kubernetes SD: Add ingress class name label for ingress discovery. * UI: Show a startup screen with progress bar when the TSDB is not ready yet. * SD: Add a target creation failure counter `prometheus_target_sync_failed_total` and improve target creation failure handling. * TSDB: Improve validation of exemplar label set length. * TSDB: Add a prometheus_tsdb_clean_start metric that indicates whether a TSDB lockfile from a previous run still existed upon startup. Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-599=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-599=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-4.3.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-4.3.2 References: https://bugzilla.suse.com/1181400

1 0

openSUSE-RU-2022:0052-1: moderate: Recommended update for python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Recommended Update: Recommended update for python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0052-1 Rating: moderate References: #1191205 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for the OpenStack related python packages python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient ships them to PackageHub 15-SP2. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-52=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python-congressclient-doc-2.0.1-bp152.2.3.1 python-masakariclient-doc-6.0.0-bp152.4.3.1 python-mistralclient-doc-4.0.1-bp152.4.6.1 python-saharaclient-doc-3.1.0-bp152.4.3.1 python-senlinclient-doc-2.0.1-bp152.4.4.1 python3-congressclient-2.0.1-bp152.2.3.1 python3-ironic-inspector-client-4.1.0-bp152.3.3.1 python3-masakariclient-6.0.0-bp152.4.3.1 python3-mistralclient-4.0.1-bp152.4.6.1 python3-saharaclient-3.1.0-bp152.4.3.1 python3-senlinclient-2.0.1-bp152.4.4.1 References: https://bugzilla.suse.com/1191205

1 0

openSUSE-RU-2022:0584-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0584-1 Rating: moderate References: #1097531 #1190781 #1193357 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Fix inspector module export function (bsc#1097531) - Add all ssh kwargs to sanitize_kwargs method - Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357) - Don't check for cached pillar errors on state.apply (bsc#1190781) - Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution - Add "--no-return-event" option to salt-call to prevent sending return event back to master. - Make "state.highstate" to acts on concurrent flag. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-584=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python3-salt-3002.2-150300.53.7.2 salt-3002.2-150300.53.7.2 salt-api-3002.2-150300.53.7.2 salt-cloud-3002.2-150300.53.7.2 salt-doc-3002.2-150300.53.7.2 salt-master-3002.2-150300.53.7.2 salt-minion-3002.2-150300.53.7.2 salt-proxy-3002.2-150300.53.7.2 salt-ssh-3002.2-150300.53.7.2 salt-standalone-formulas-configuration-3002.2-150300.53.7.2 salt-syndic-3002.2-150300.53.7.2 salt-transactional-update-3002.2-150300.53.7.2 - openSUSE Leap 15.3 (noarch): salt-bash-completion-3002.2-150300.53.7.2 salt-fish-completion-3002.2-150300.53.7.2 salt-zsh-completion-3002.2-150300.53.7.2 References: https://bugzilla.suse.com/1097531 https://bugzilla.suse.com/1190781 https://bugzilla.suse.com/1193357

1 0

openSUSE-RU-2022:0595-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Recommended Update: Recommended update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0595-1 Rating: moderate References: #1192487 #1193600 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues: ansible: - Require python macros for building mgr-cfg: - Version 4.2.6-1 * Do not build python 2 package for SLE15SP4 and higher - Version 4.2.5-1 * do not build python 2 package for SLE15 - Version 4.2.4-1 * Fix python selinux package name depending on build target (bsc#1193600) mgr-custom-info: - Version 4.2.3-1 * require python macros for building mgr-osad: - Version 4.2.7-1 * Do not build python 2 package for SLE15SP4 and higher * require python macros for building mgr-push: - Version 4.2.4-1 * Do not build python 2 package for SLE15SP4 and higher mgr-virtualization: - Version 4.2.3-1 * Do not build python 2 package for SLE15SP4 and higher * require python macros for building rhnlib: - Version 4.2.5-1 * do not build python 2 package for SLE15 spacecmd: - Version 4.2.15-1 * require python macros for building spacewalk-client-tools: - Version 4.2.16-1 * do not build python 2 package for SLE15 * require python macros for building spacewalk-koan: - Version 4.2.5-1 * Do not build python 2 package for SLE15SP4 and higher spacewalk-oscap: - Version 4.2.3-1 * Do not build python 2 package for SLE15SP4 and higher * require python macros for building spacewalk-remote-utils: - Version 4.2.2-1 * require python macros for building suseRegisterInfo: - Version 4.2.5-1 * require python macros for building * Do not build python 2 package for SLE15 and higher uyuni-common-libs: - Version 4.2.6-1 * Read modularity data from DISTTAG tag as fallback (bsc#1192487) * require python macros for building zypp-plugin-spacewalk: - 1.0.11 * require python macros for building Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-595=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-595=1 Package List: - openSUSE Leap 15.4 (noarch): ansible-2.9.21-1.10.1 ansible-doc-2.9.21-1.10.1 ansible-test-2.9.21-1.10.1 python2-rhnlib-4.2.5-3.31.1 python3-rhnlib-4.2.5-3.31.1 spacecmd-4.2.15-3.74.1 - openSUSE Leap 15.3 (noarch): ansible-2.9.21-1.10.1 ansible-doc-2.9.21-1.10.1 ansible-test-2.9.21-1.10.1 python2-rhnlib-4.2.5-3.31.1 python3-rhnlib-4.2.5-3.31.1 spacecmd-4.2.15-3.74.1 References: https://bugzilla.suse.com/1192487 https://bugzilla.suse.com/1193600

1 0

openSUSE-RU-2022:0580-1: important: Recommended update for s390-tools
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Recommended Update: Recommended update for s390-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0580-1 Rating: important References: #1196257 #1196258 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for s390-tools fixes the following issues: - Fix for issue introduced in version 2.37+ of util-linux that modified the output characters of lsblk, which breaks the parser function (bsc#1196258) - Fix for path resolution failing when a device provides multiple mount points such as, for example, when using btrfs subvolumes, or when mounting the same file system at multiple mount points (bsc#1196257) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-580=1 Package List: - openSUSE Leap 15.3 (s390x): libekmfweb1-2.15.1-150300.8.14.1 libekmfweb1-debuginfo-2.15.1-150300.8.14.1 libekmfweb1-devel-2.15.1-150300.8.14.1 osasnmpd-2.15.1-150300.8.14.1 osasnmpd-debuginfo-2.15.1-150300.8.14.1 s390-tools-2.15.1-150300.8.14.1 s390-tools-debuginfo-2.15.1-150300.8.14.1 s390-tools-debugsource-2.15.1-150300.8.14.1 s390-tools-hmcdrvfs-2.15.1-150300.8.14.1 s390-tools-hmcdrvfs-debuginfo-2.15.1-150300.8.14.1 s390-tools-zdsfs-2.15.1-150300.8.14.1 s390-tools-zdsfs-debuginfo-2.15.1-150300.8.14.1 References: https://bugzilla.suse.com/1196257 https://bugzilla.suse.com/1196258

1 0

openSUSE-SU-2022:0574-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 25 Feb '22

25 Feb '22

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0574-1 Rating: important References: #1192615 #1195779 #1195780 #1195781 Cross-References: CVE-2021-0127 CVE-2021-0145 CVE-2021-0146 CVE-2021-33120 CVSS scores: CVE-2021-0127 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-0127 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-0145 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0145 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2021-0146 (NVD) : 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-0146 (SUSE): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-33120 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVE-2021-33120 (SUSE): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615) - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779) - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780) - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781) - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/ad visory/intel-sa-00528.html) - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/ad visory/intel-sa-00532.html) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-574=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-574=1 Package List: - openSUSE Leap 15.4 (x86_64): ucode-intel-20220207-10.1 - openSUSE Leap 15.3 (x86_64): ucode-intel-20220207-10.1 References: https://www.suse.com/security/cve/CVE-2021-0127.html https://www.suse.com/security/cve/CVE-2021-0145.html https://www.suse.com/security/cve/CVE-2021-0146.html https://www.suse.com/security/cve/CVE-2021-33120.html https://bugzilla.suse.com/1192615 https://bugzilla.suse.com/1195779 https://bugzilla.suse.com/1195780 https://bugzilla.suse.com/1195781

1 0

openSUSE-RU-2022:0051-1: - update to version 2.0.1
by maintenance＠opensuse.org 25 Feb '22

25 Feb '22

openSUSE Recommended Update: - update to version 2.0.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0051-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: - update to version 2.0.1 - Change default API version to 1.14 - Add support for node tainted field - Update master for stable/train - Return meta-data field for events list - Add action update command - Drop python 2.7 support and testing - Flush confirmation messages - switch to python 3.x only - update to version 1.11.0 - Replace openstack.org git:// URLs with https:// - Update master for stable/stein - Dropping the py35 testing - Replace git.openstack.org URLs with opendev.org URLs - OpenDev Migration Patch - Imported Translations from Zanata - Fix uint test test_json_format and Solve pep8 msgfmt error - Add Python 3 Train unit tests - Update api-ref location - Switch to the new canonical constraints URL on master - update to version 1.10.1 - Fix calls to functions removed from openstacksdk - Update json module to jsonutils - Imported Translations from Zanata - Use template for lower-constraints - Enable cluster profile only and replace function test - Fix getting action id in Location header Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-51=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python-senlinclient-doc-2.0.1-bp152.4.3.1 python3-senlinclient-2.0.1-bp152.4.3.1 References:

1 0

openSUSE-SU-2022:0050-1: important: Security update for opera
by opensuse-security＠opensuse.org 25 Feb '22

25 Feb '22

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0050-1 Rating: important References: #1027353 #1081164 #1102775 #1108471 #1111122 #1116807 #1140341 #1145864 #1152968 #1174961 #1178021 #1178351 #1179009 #1179699 #1181591 SLE-6120 Cross-References: CVE-2018-18065 CVE-2020-15862 CVE-2022-0452 CVE-2022-0453 CVE-2022-0454 CVE-2022-0455 CVE-2022-0456 CVE-2022-0457 CVE-2022-0458 CVE-2022-0459 CVE-2022-0460 CVE-2022-0461 CVE-2022-0462 CVE-2022-0463 CVE-2022-0464 CVE-2022-0465 CVE-2022-0466 CVE-2022-0467 CVE-2022-0468 CVE-2022-0469 CVE-2022-0470 CVSS scores: CVE-2018-18065 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2018-18065 (SUSE): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-15862 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-15862 (SUSE): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.3:NonFree ______________________________________________________________________________ An update that fixes 21 vulnerabilities, contains one feature is now available. Description: This update for opera fixes the following issues: - Update to 84.0.4316.14 - CHR-8753 Update chromium on desktop-stable-98-4316 to 98.0.4758.82 - DNA-97177 Battery saver �� the icon looks bad for DPI!=100% - DNA-97614 automatic video pop-out for most popular websites broadcasting Winter Olympic Games 2022 - DNA-97804 Promote O84 to stable - The update to chromium 98.0.4758.82 fixes following issues: CVE-2022-0452, CVE-2022-0453, CVE-2022-0454, CVE-2022-0455, CVE-2022-0456, CVE-2022-0457, CVE-2022-0458, CVE-2022-0459, CVE-2022-0460, CVE-2022-0461, CVE-2022-0462, CVE-2022-0463, CVE-2022-0464, CVE-2022-0465, CVE-2022-0466, CVE-2022-0467, CVE-2022-0468, CVE-2022-0469, CVE-2022-0470 - Complete Opera 84.0 changelog at: https://blogs.opera.com/desktop/changelog-for-84/ - Update to 83.0.4254.54 - DNA-96581 Fast tab tooltip doesn��t always show related sites with scrollable tab strip - DNA-96608 Cannot drag a tab to create a new window - DNA-96657 Do not make tab tooltip hoverable if there��s no list of tabs - DNA-97291 Crash at opera::flow::FlowSessionImpl::RegisterDevice(base::OnceCallback) - DNA-97468 Incorrect number of restored tabs when video-popout is detached - DNA-97476 Add retry to stapling during signing - DNA-97609 Failing MetricsReporterTest.TimeSpent* smoketests Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3:NonFree: zypper in -t patch openSUSE-2022-50=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-50=1 Package List: - openSUSE Leap 15.3:NonFree (x86_64): opera-84.0.4316.14-lp153.2.36.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsnmp30-5.7.3-10.9.1 libsnmp30-debuginfo-5.7.3-10.9.1 net-snmp-5.7.3-10.9.1 net-snmp-debuginfo-5.7.3-10.9.1 net-snmp-debugsource-5.7.3-10.9.1 net-snmp-devel-5.7.3-10.9.1 perl-SNMP-5.7.3-10.9.1 perl-SNMP-debuginfo-5.7.3-10.9.1 python2-net-snmp-5.7.3-10.9.1 python2-net-snmp-debuginfo-5.7.3-10.9.1 python3-net-snmp-5.7.3-10.9.1 python3-net-snmp-debuginfo-5.7.3-10.9.1 snmp-mibs-5.7.3-10.9.1 - openSUSE Leap 15.3 (x86_64): libsnmp30-32bit-5.7.3-10.9.1 libsnmp30-32bit-debuginfo-5.7.3-10.9.1 net-snmp-devel-32bit-5.7.3-10.9.1 References: https://www.suse.com/security/cve/CVE-2018-18065.html https://www.suse.com/security/cve/CVE-2020-15862.html https://www.suse.com/security/cve/CVE-2022-0452.html https://www.suse.com/security/cve/CVE-2022-0453.html https://www.suse.com/security/cve/CVE-2022-0454.html https://www.suse.com/security/cve/CVE-2022-0455.html https://www.suse.com/security/cve/CVE-2022-0456.html https://www.suse.com/security/cve/CVE-2022-0457.html https://www.suse.com/security/cve/CVE-2022-0458.html https://www.suse.com/security/cve/CVE-2022-0459.html https://www.suse.com/security/cve/CVE-2022-0460.html https://www.suse.com/security/cve/CVE-2022-0461.html https://www.suse.com/security/cve/CVE-2022-0462.html https://www.suse.com/security/cve/CVE-2022-0463.html https://www.suse.com/security/cve/CVE-2022-0464.html https://www.suse.com/security/cve/CVE-2022-0465.html https://www.suse.com/security/cve/CVE-2022-0466.html https://www.suse.com/security/cve/CVE-2022-0467.html https://www.suse.com/security/cve/CVE-2022-0468.html https://www.suse.com/security/cve/CVE-2022-0469.html https://www.suse.com/security/cve/CVE-2022-0470.html https://bugzilla.suse.com/1027353 https://bugzilla.suse.com/1081164 https://bugzilla.suse.com/1102775 https://bugzilla.suse.com/1108471 https://bugzilla.suse.com/1111122 https://bugzilla.suse.com/1116807 https://bugzilla.suse.com/1140341 https://bugzilla.suse.com/1145864 https://bugzilla.suse.com/1152968 https://bugzilla.suse.com/1174961 https://bugzilla.suse.com/1178021 https://bugzilla.suse.com/1178351 https://bugzilla.suse.com/1179009 https://bugzilla.suse.com/1179699 https://bugzilla.suse.com/1181591

1 0

openSUSE-RU-2022:0049-1: moderate: Recommended update for openstack modules
by maintenance＠opensuse.org 25 Feb '22

25 Feb '22

openSUSE Recommended Update: Recommended update for openstack modules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0049-1 Rating: moderate References: #1191205 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides various dependencies for openstack. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-49=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): openstack-macros-2019.2.1-bp152.4.3.1 python-barbicanclient-doc-4.10.0-bp152.4.3.1 python-freezerclient-doc-3.0.1-bp152.4.3.1 python-ironicclient-doc-4.1.0-bp152.4.3.1 python-magnumclient-doc-3.0.1-bp152.4.3.1 python-manilaclient-doc-2.1.0-bp152.4.3.1 python-mistralclient-doc-4.0.1-bp152.4.3.1 python3-freezerclient-3.0.1-bp152.4.3.1 python3-manilaclient-2.1.0-bp152.4.3.1 python3-mistralclient-4.0.1-bp152.4.3.1 References: https://bugzilla.suse.com/1191205

1 0

openSUSE-RU-2022:0572-1: moderate: Recommended update for psmisc
by maintenance＠opensuse.org 24 Feb '22

24 Feb '22

openSUSE Recommended Update: Recommended update for psmisc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0572-1 Rating: moderate References: #1194172 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for psmisc fixes the following issues: - Determine the namespace of a process only once to speed up the parsing of 'fdinfo'. (bsc#1194172) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-572=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-572=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): psmisc-23.0-6.19.1 psmisc-debuginfo-23.0-6.19.1 psmisc-debugsource-23.0-6.19.1 - openSUSE Leap 15.4 (noarch): psmisc-lang-23.0-6.19.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): psmisc-23.0-6.19.1 psmisc-debuginfo-23.0-6.19.1 psmisc-debugsource-23.0-6.19.1 - openSUSE Leap 15.3 (noarch): psmisc-lang-23.0-6.19.1 References: https://bugzilla.suse.com/1194172

1 0