February 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-FU-2022:0599-1: moderate: Feature update for golang-github-prometheus-prometheus
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Feature Update: Feature update for golang-github-prometheus-prometheus ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0599-1 Rating: moderate References: #1181400 SLE-22863 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one feature fix and contains one feature can now be installed. Description: This feature update for golang-github-prometheus-prometheus provides the following changes: Upgrade `golang-github-prometheus-prometheus` from version 2.27.1 to version 2.32.1: (jsc#SLE-22863) - Use `obs-service-go_modules` - Added hardening to systemd service(s). Modified `prometheus.service` (bsc#1181400) - Bugfixes: * Scrape: Fix reporting metrics when sample limit is reached during the report. * Scrape: Ensure that scrape interval and scrape timeout are always set. * TSDB: Expose and fix bug in iterators' Seek() method. * TSDB: Add more size checks when writing individual sections in the index. * PromQL: Make deriv() return zero values for constant series. * TSDB: Fix panic when checkpoint directory is empty. #9687 * TSDB: Fix panic, out of order chunks, and race warning during WAL replay. * UI: Correctly render links for targets with IPv6 addresses that contain a Zone ID. * Promtool: Fix checking of `authorization.credentials_file` and `bearer_token_file` fields. * Uyuni SD: Fix null pointer exception during initialization. * TSDB: Fix queries after a failed snapshot replay. * SD: Fix a panic when the experimental discovery manager receives targets during a reload. * Backfill: Apply rule labels after query labels. * Scrape: Resolve conflicts between multiple exported label prefixes. * Scrape: Restart scrape loops when __scrape_interval__ is changed. * TSDB: Fix memory leak in samples deletion. * UI: Use consistent margin-bottom for all alert kinds. * TSDB: Fix panic on failed snapshot replay. * TSDB: Don't fail snapshot replay with exemplar storage disabled when the snapshot contains exemplars. * TSDB: Don't error on overlapping m-mapped chunks during WAL replay. * promtool rules backfill: Prevent creation of data before the start time. * promtool rules backfill: Do not query after the end time. * Azure SD: Fix panic when no computername is set. * Exemplars: Fix panic when resizing exemplar storage from 0 to a non-zero size. * TSDB: Correctly decrement `prometheus_tsdb_head_active_appenders` when the append has no samples. * promtool rules backfill: Return 1 if backfill was unsuccessful. * promtool rules backfill: Avoid creation of overlapping blocks. * config: Fix a panic when reloading configuration with a null relabel action. * Fix Kubernetes SD failing to discover Ingress in Kubernetes v1.22. * Fix data race in loading write-ahead-log (WAL). * TSDB: align atomically accessed int64 to prevent panic in 32-bit archs. * Log when total symbol size exceeds 2^32 bytes, causing compaction to fail, and skip compaction. * Fix incorrect target_limit reloading of zero value. * Fix head GC and pending readers race condition. * Fix timestamp handling in OpenMetrics parser. * Fix potential duplicate metrics in /federate endpoint when specifying multiple matchers. * Fix server configuration and validation for authentication via client cert. * Allow start and end again as label names in PromQL queries. They were disallowed since the introduction of @ timestamp feature. * HTTP SD: Allow charset specification in Content-Type header. * HTTP SD: Fix handling of disappeared target groups. * Fix incorrect log-level handling after moving to go-kit/log. * UI: In the experimental PromQL editor, fix autocompletion and parsing for special float values and improve series metadata fetching. * TSDB: When merging chunks, split resulting chunks if they would contain more than the maximum of 120 samples. * SD: Fix the computation of the `prometheus_sd_discovered_targets` metric when using multiple service discoveries. - Change: * remote-write: Change default max retry time from 100ms to 5 seconds. * UI: Remove standard PromQL editor in favour of the codemirror-based editor. * Promote `--storage.tsdb.allow-overlapping-blocks` flag to stable. * Promote `--storage.tsdb.retention.size` flag to stable. * UI: Make the new experimental PromQL editor the default. - Features: * Agent: New mode of operation optimized for remote-write only scenarios, without local storage. * Promtool: Add promtool check service-discovery command. * PromQL: Add trigonometric functions and atan2 binary operator. * Remote: Add support for exemplar in the remote write receiver endpoint. * SD: Add PuppetDB service discovery. * SD: Add Uyuni service discovery. * Web: Add support for security-related HTTP headers. * experimental TSDB: Snapshot in-memory chunks on shutdown for faster restarts. * experimental Scrape: Configure scrape interval and scrape timeout via relabeling using `__scrape_interval__` and `__scrape_timeout__` labels respectively. * Scrape: Add scrape_timeout_seconds and scrape_sample_limit metric. * Add Kuma service discovery. * Add present_over_time PromQL function. * Allow configuring exemplar storage via file and make it reloadable. * UI: Allow selecting time range with mouse drag. * promtool: Add feature flags flag `--enable-feature`. * promtool: Add `file_sd` file validation. * Linode SD: Add Linode service discovery. * HTTP SD: Add generic HTTP-based service discovery. * Kubernetes SD: Allow configuring API Server access via a kubeconfig file. * UI: Add exemplar display support to the graphing interface. * Consul SD: Add namespace support for Consul Enterprise. - Enhancements: * Promtool: Improve test output. * Promtool: Use kahan summation for better numerical stability. * Remote-write: Reuse memory for marshalling. * Scrape: Add scrape_body_size_bytes scrape metric behind the `--enable-feature=extra-scrape-metrics` flag. * TSDB: Add windows arm64 support. * TSDB: Optimize query by skipping unneeded sorting in TSDB. * Templates: Support int and uint as datatypes for template formatting. * UI: Prefer rate over rad, delta over deg, and count over cos in autocomplete. * Azure SD: Add proxy_url, follow_redirects, tls_config. * Backfill: Add `--max-block-duration` in promtool `create-blocks-from` rules. * Config: Print human-readable sizes with unit instead of raw numbers. * HTTP: Re-enable HTTP/2. * Kubernetes SD: Warn user if number of endpoints exceeds limit. * OAuth2: Add TLS configuration to token requests. * PromQL: Several optimizations. * PromQL: Make aggregations deterministic in instant queries. * Rules: Add the ability to limit number of alerts or series. * SD: Experimental discovery manager to avoid restarts upon reload. * UI: Debounce timerange setting changes. * Remote Write: Redact remote write URL when used for metric label. * UI: Redact remote write URL and proxy URL passwords in the /config page. * Scrape: Add --scrape.timestamp-tolerance flag to adjust scrape timestamp tolerance when enabled via `--scrape.adjust-timestamps`. * Remote Write: Improve throughput when sending exemplars. * TSDB: Optimise WAL loading by removing extra map and caching min-time * promtool: Speed up checking for duplicate rules. * Scrape: Reduce allocations when parsing the metrics. * docker_sd: Support host network mode * Reduce blocking of outgoing remote write requests from series garbage collection. * Improve write-ahead-log decoding performance. * Improve append performance in TSDB by reducing mutexes usage. * Allow configuring max_samples_per_send for remote write metadata. * Add `__meta_gce_interface_ipv4_<name>` meta label to GCE discovery. * Add `__meta_ec2_availability_zone_id` meta label to EC2 discovery. * Add `__meta_azure_machine_computer_name` meta label to Azure discovery. * Add `__meta_hetzner_hcloud_labelpresent_<labelname>` meta label to Hetzner discovery. * promtool: Add compaction efficiency to promtool tsdb analyze reports. * promtool: Allow configuring max block duration for backfilling via `--max-block-duration` flag. * UI: Add sorting and filtering to flags page. * UI: Improve alerts page rendering performance. * Promtool: Allow silencing output when importing / backfilling data. * Consul SD: Support reading tokens from file. * Rules: Add a new .ExternalURL alert field templating variable, containing the external URL of the Prometheus server. * Scrape: Add experimental body_size_limit scrape configuration setting to limit the allowed response body size for target scrapes. * Kubernetes SD: Add ingress class name label for ingress discovery. * UI: Show a startup screen with progress bar when the TSDB is not ready yet. * SD: Add a target creation failure counter `prometheus_target_sync_failed_total` and improve target creation failure handling. * TSDB: Improve validation of exemplar label set length. * TSDB: Add a prometheus_tsdb_clean_start metric that indicates whether a TSDB lockfile from a previous run still existed upon startup. Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-599=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-599=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-4.3.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-4.3.2 References: https://bugzilla.suse.com/1181400

1 0

openSUSE-RU-2022:0052-1: moderate: Recommended update for python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Recommended Update: Recommended update for python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0052-1 Rating: moderate References: #1191205 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for the OpenStack related python packages python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient ships them to PackageHub 15-SP2. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-52=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python-congressclient-doc-2.0.1-bp152.2.3.1 python-masakariclient-doc-6.0.0-bp152.4.3.1 python-mistralclient-doc-4.0.1-bp152.4.6.1 python-saharaclient-doc-3.1.0-bp152.4.3.1 python-senlinclient-doc-2.0.1-bp152.4.4.1 python3-congressclient-2.0.1-bp152.2.3.1 python3-ironic-inspector-client-4.1.0-bp152.3.3.1 python3-masakariclient-6.0.0-bp152.4.3.1 python3-mistralclient-4.0.1-bp152.4.6.1 python3-saharaclient-3.1.0-bp152.4.3.1 python3-senlinclient-2.0.1-bp152.4.4.1 References: https://bugzilla.suse.com/1191205

1 0

openSUSE-RU-2022:0584-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0584-1 Rating: moderate References: #1097531 #1190781 #1193357 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Fix inspector module export function (bsc#1097531) - Add all ssh kwargs to sanitize_kwargs method - Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357) - Don't check for cached pillar errors on state.apply (bsc#1190781) - Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution - Add "--no-return-event" option to salt-call to prevent sending return event back to master. - Make "state.highstate" to acts on concurrent flag. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-584=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python3-salt-3002.2-150300.53.7.2 salt-3002.2-150300.53.7.2 salt-api-3002.2-150300.53.7.2 salt-cloud-3002.2-150300.53.7.2 salt-doc-3002.2-150300.53.7.2 salt-master-3002.2-150300.53.7.2 salt-minion-3002.2-150300.53.7.2 salt-proxy-3002.2-150300.53.7.2 salt-ssh-3002.2-150300.53.7.2 salt-standalone-formulas-configuration-3002.2-150300.53.7.2 salt-syndic-3002.2-150300.53.7.2 salt-transactional-update-3002.2-150300.53.7.2 - openSUSE Leap 15.3 (noarch): salt-bash-completion-3002.2-150300.53.7.2 salt-fish-completion-3002.2-150300.53.7.2 salt-zsh-completion-3002.2-150300.53.7.2 References: https://bugzilla.suse.com/1097531 https://bugzilla.suse.com/1190781 https://bugzilla.suse.com/1193357

1 0

openSUSE-RU-2022:0595-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Recommended Update: Recommended update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0595-1 Rating: moderate References: #1192487 #1193600 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues: ansible: - Require python macros for building mgr-cfg: - Version 4.2.6-1 * Do not build python 2 package for SLE15SP4 and higher - Version 4.2.5-1 * do not build python 2 package for SLE15 - Version 4.2.4-1 * Fix python selinux package name depending on build target (bsc#1193600) mgr-custom-info: - Version 4.2.3-1 * require python macros for building mgr-osad: - Version 4.2.7-1 * Do not build python 2 package for SLE15SP4 and higher * require python macros for building mgr-push: - Version 4.2.4-1 * Do not build python 2 package for SLE15SP4 and higher mgr-virtualization: - Version 4.2.3-1 * Do not build python 2 package for SLE15SP4 and higher * require python macros for building rhnlib: - Version 4.2.5-1 * do not build python 2 package for SLE15 spacecmd: - Version 4.2.15-1 * require python macros for building spacewalk-client-tools: - Version 4.2.16-1 * do not build python 2 package for SLE15 * require python macros for building spacewalk-koan: - Version 4.2.5-1 * Do not build python 2 package for SLE15SP4 and higher spacewalk-oscap: - Version 4.2.3-1 * Do not build python 2 package for SLE15SP4 and higher * require python macros for building spacewalk-remote-utils: - Version 4.2.2-1 * require python macros for building suseRegisterInfo: - Version 4.2.5-1 * require python macros for building * Do not build python 2 package for SLE15 and higher uyuni-common-libs: - Version 4.2.6-1 * Read modularity data from DISTTAG tag as fallback (bsc#1192487) * require python macros for building zypp-plugin-spacewalk: - 1.0.11 * require python macros for building Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-595=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-595=1 Package List: - openSUSE Leap 15.4 (noarch): ansible-2.9.21-1.10.1 ansible-doc-2.9.21-1.10.1 ansible-test-2.9.21-1.10.1 python2-rhnlib-4.2.5-3.31.1 python3-rhnlib-4.2.5-3.31.1 spacecmd-4.2.15-3.74.1 - openSUSE Leap 15.3 (noarch): ansible-2.9.21-1.10.1 ansible-doc-2.9.21-1.10.1 ansible-test-2.9.21-1.10.1 python2-rhnlib-4.2.5-3.31.1 python3-rhnlib-4.2.5-3.31.1 spacecmd-4.2.15-3.74.1 References: https://bugzilla.suse.com/1192487 https://bugzilla.suse.com/1193600

1 0

openSUSE-RU-2022:0580-1: important: Recommended update for s390-tools
by maintenance＠opensuse.org 28 Feb '22

28 Feb '22

openSUSE Recommended Update: Recommended update for s390-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0580-1 Rating: important References: #1196257 #1196258 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for s390-tools fixes the following issues: - Fix for issue introduced in version 2.37+ of util-linux that modified the output characters of lsblk, which breaks the parser function (bsc#1196258) - Fix for path resolution failing when a device provides multiple mount points such as, for example, when using btrfs subvolumes, or when mounting the same file system at multiple mount points (bsc#1196257) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-580=1 Package List: - openSUSE Leap 15.3 (s390x): libekmfweb1-2.15.1-150300.8.14.1 libekmfweb1-debuginfo-2.15.1-150300.8.14.1 libekmfweb1-devel-2.15.1-150300.8.14.1 osasnmpd-2.15.1-150300.8.14.1 osasnmpd-debuginfo-2.15.1-150300.8.14.1 s390-tools-2.15.1-150300.8.14.1 s390-tools-debuginfo-2.15.1-150300.8.14.1 s390-tools-debugsource-2.15.1-150300.8.14.1 s390-tools-hmcdrvfs-2.15.1-150300.8.14.1 s390-tools-hmcdrvfs-debuginfo-2.15.1-150300.8.14.1 s390-tools-zdsfs-2.15.1-150300.8.14.1 s390-tools-zdsfs-debuginfo-2.15.1-150300.8.14.1 References: https://bugzilla.suse.com/1196257 https://bugzilla.suse.com/1196258

1 0

openSUSE-SU-2022:0574-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 25 Feb '22

25 Feb '22

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0574-1 Rating: important References: #1192615 #1195779 #1195780 #1195781 Cross-References: CVE-2021-0127 CVE-2021-0145 CVE-2021-0146 CVE-2021-33120 CVSS scores: CVE-2021-0127 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-0127 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-0145 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0145 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2021-0146 (NVD) : 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-0146 (SUSE): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-33120 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVE-2021-33120 (SUSE): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615) - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779) - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780) - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781) - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/ad visory/intel-sa-00528.html) - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/ad visory/intel-sa-00532.html) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-574=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-574=1 Package List: - openSUSE Leap 15.4 (x86_64): ucode-intel-20220207-10.1 - openSUSE Leap 15.3 (x86_64): ucode-intel-20220207-10.1 References: https://www.suse.com/security/cve/CVE-2021-0127.html https://www.suse.com/security/cve/CVE-2021-0145.html https://www.suse.com/security/cve/CVE-2021-0146.html https://www.suse.com/security/cve/CVE-2021-33120.html https://bugzilla.suse.com/1192615 https://bugzilla.suse.com/1195779 https://bugzilla.suse.com/1195780 https://bugzilla.suse.com/1195781

1 0

openSUSE-RU-2022:0051-1: - update to version 2.0.1
by maintenance＠opensuse.org 25 Feb '22

25 Feb '22

openSUSE Recommended Update: - update to version 2.0.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0051-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: - update to version 2.0.1 - Change default API version to 1.14 - Add support for node tainted field - Update master for stable/train - Return meta-data field for events list - Add action update command - Drop python 2.7 support and testing - Flush confirmation messages - switch to python 3.x only - update to version 1.11.0 - Replace openstack.org git:// URLs with https:// - Update master for stable/stein - Dropping the py35 testing - Replace git.openstack.org URLs with opendev.org URLs - OpenDev Migration Patch - Imported Translations from Zanata - Fix uint test test_json_format and Solve pep8 msgfmt error - Add Python 3 Train unit tests - Update api-ref location - Switch to the new canonical constraints URL on master - update to version 1.10.1 - Fix calls to functions removed from openstacksdk - Update json module to jsonutils - Imported Translations from Zanata - Use template for lower-constraints - Enable cluster profile only and replace function test - Fix getting action id in Location header Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-51=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python-senlinclient-doc-2.0.1-bp152.4.3.1 python3-senlinclient-2.0.1-bp152.4.3.1 References:

1 0

openSUSE-SU-2022:0050-1: important: Security update for opera
by opensuse-security＠opensuse.org 25 Feb '22

25 Feb '22

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0050-1 Rating: important References: #1027353 #1081164 #1102775 #1108471 #1111122 #1116807 #1140341 #1145864 #1152968 #1174961 #1178021 #1178351 #1179009 #1179699 #1181591 SLE-6120 Cross-References: CVE-2018-18065 CVE-2020-15862 CVE-2022-0452 CVE-2022-0453 CVE-2022-0454 CVE-2022-0455 CVE-2022-0456 CVE-2022-0457 CVE-2022-0458 CVE-2022-0459 CVE-2022-0460 CVE-2022-0461 CVE-2022-0462 CVE-2022-0463 CVE-2022-0464 CVE-2022-0465 CVE-2022-0466 CVE-2022-0467 CVE-2022-0468 CVE-2022-0469 CVE-2022-0470 CVSS scores: CVE-2018-18065 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2018-18065 (SUSE): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-15862 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-15862 (SUSE): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.3:NonFree ______________________________________________________________________________ An update that fixes 21 vulnerabilities, contains one feature is now available. Description: This update for opera fixes the following issues: - Update to 84.0.4316.14 - CHR-8753 Update chromium on desktop-stable-98-4316 to 98.0.4758.82 - DNA-97177 Battery saver �� the icon looks bad for DPI!=100% - DNA-97614 automatic video pop-out for most popular websites broadcasting Winter Olympic Games 2022 - DNA-97804 Promote O84 to stable - The update to chromium 98.0.4758.82 fixes following issues: CVE-2022-0452, CVE-2022-0453, CVE-2022-0454, CVE-2022-0455, CVE-2022-0456, CVE-2022-0457, CVE-2022-0458, CVE-2022-0459, CVE-2022-0460, CVE-2022-0461, CVE-2022-0462, CVE-2022-0463, CVE-2022-0464, CVE-2022-0465, CVE-2022-0466, CVE-2022-0467, CVE-2022-0468, CVE-2022-0469, CVE-2022-0470 - Complete Opera 84.0 changelog at: https://blogs.opera.com/desktop/changelog-for-84/ - Update to 83.0.4254.54 - DNA-96581 Fast tab tooltip doesn��t always show related sites with scrollable tab strip - DNA-96608 Cannot drag a tab to create a new window - DNA-96657 Do not make tab tooltip hoverable if there��s no list of tabs - DNA-97291 Crash at opera::flow::FlowSessionImpl::RegisterDevice(base::OnceCallback) - DNA-97468 Incorrect number of restored tabs when video-popout is detached - DNA-97476 Add retry to stapling during signing - DNA-97609 Failing MetricsReporterTest.TimeSpent* smoketests Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3:NonFree: zypper in -t patch openSUSE-2022-50=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-50=1 Package List: - openSUSE Leap 15.3:NonFree (x86_64): opera-84.0.4316.14-lp153.2.36.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsnmp30-5.7.3-10.9.1 libsnmp30-debuginfo-5.7.3-10.9.1 net-snmp-5.7.3-10.9.1 net-snmp-debuginfo-5.7.3-10.9.1 net-snmp-debugsource-5.7.3-10.9.1 net-snmp-devel-5.7.3-10.9.1 perl-SNMP-5.7.3-10.9.1 perl-SNMP-debuginfo-5.7.3-10.9.1 python2-net-snmp-5.7.3-10.9.1 python2-net-snmp-debuginfo-5.7.3-10.9.1 python3-net-snmp-5.7.3-10.9.1 python3-net-snmp-debuginfo-5.7.3-10.9.1 snmp-mibs-5.7.3-10.9.1 - openSUSE Leap 15.3 (x86_64): libsnmp30-32bit-5.7.3-10.9.1 libsnmp30-32bit-debuginfo-5.7.3-10.9.1 net-snmp-devel-32bit-5.7.3-10.9.1 References: https://www.suse.com/security/cve/CVE-2018-18065.html https://www.suse.com/security/cve/CVE-2020-15862.html https://www.suse.com/security/cve/CVE-2022-0452.html https://www.suse.com/security/cve/CVE-2022-0453.html https://www.suse.com/security/cve/CVE-2022-0454.html https://www.suse.com/security/cve/CVE-2022-0455.html https://www.suse.com/security/cve/CVE-2022-0456.html https://www.suse.com/security/cve/CVE-2022-0457.html https://www.suse.com/security/cve/CVE-2022-0458.html https://www.suse.com/security/cve/CVE-2022-0459.html https://www.suse.com/security/cve/CVE-2022-0460.html https://www.suse.com/security/cve/CVE-2022-0461.html https://www.suse.com/security/cve/CVE-2022-0462.html https://www.suse.com/security/cve/CVE-2022-0463.html https://www.suse.com/security/cve/CVE-2022-0464.html https://www.suse.com/security/cve/CVE-2022-0465.html https://www.suse.com/security/cve/CVE-2022-0466.html https://www.suse.com/security/cve/CVE-2022-0467.html https://www.suse.com/security/cve/CVE-2022-0468.html https://www.suse.com/security/cve/CVE-2022-0469.html https://www.suse.com/security/cve/CVE-2022-0470.html https://bugzilla.suse.com/1027353 https://bugzilla.suse.com/1081164 https://bugzilla.suse.com/1102775 https://bugzilla.suse.com/1108471 https://bugzilla.suse.com/1111122 https://bugzilla.suse.com/1116807 https://bugzilla.suse.com/1140341 https://bugzilla.suse.com/1145864 https://bugzilla.suse.com/1152968 https://bugzilla.suse.com/1174961 https://bugzilla.suse.com/1178021 https://bugzilla.suse.com/1178351 https://bugzilla.suse.com/1179009 https://bugzilla.suse.com/1179699 https://bugzilla.suse.com/1181591

1 0

openSUSE-RU-2022:0049-1: moderate: Recommended update for openstack modules
by maintenance＠opensuse.org 25 Feb '22

25 Feb '22

openSUSE Recommended Update: Recommended update for openstack modules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0049-1 Rating: moderate References: #1191205 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides various dependencies for openstack. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-49=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): openstack-macros-2019.2.1-bp152.4.3.1 python-barbicanclient-doc-4.10.0-bp152.4.3.1 python-freezerclient-doc-3.0.1-bp152.4.3.1 python-ironicclient-doc-4.1.0-bp152.4.3.1 python-magnumclient-doc-3.0.1-bp152.4.3.1 python-manilaclient-doc-2.1.0-bp152.4.3.1 python-mistralclient-doc-4.0.1-bp152.4.3.1 python3-freezerclient-3.0.1-bp152.4.3.1 python3-manilaclient-2.1.0-bp152.4.3.1 python3-mistralclient-4.0.1-bp152.4.3.1 References: https://bugzilla.suse.com/1191205

1 0

openSUSE-RU-2022:0572-1: moderate: Recommended update for psmisc
by maintenance＠opensuse.org 24 Feb '22

24 Feb '22

openSUSE Recommended Update: Recommended update for psmisc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0572-1 Rating: moderate References: #1194172 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for psmisc fixes the following issues: - Determine the namespace of a process only once to speed up the parsing of 'fdinfo'. (bsc#1194172) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-572=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-572=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): psmisc-23.0-6.19.1 psmisc-debuginfo-23.0-6.19.1 psmisc-debugsource-23.0-6.19.1 - openSUSE Leap 15.4 (noarch): psmisc-lang-23.0-6.19.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): psmisc-23.0-6.19.1 psmisc-debuginfo-23.0-6.19.1 psmisc-debugsource-23.0-6.19.1 - openSUSE Leap 15.3 (noarch): psmisc-lang-23.0-6.19.1 References: https://bugzilla.suse.com/1194172

1 0

openSUSE-SU-2022:0562-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 24 Feb '22

24 Feb '22

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0562-1 Rating: moderate References: #1188437 Cross-References: CVE-2021-27845 CVSS scores: CVE-2021-27845 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-27845 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jasper fixes the following issues: - CVE-2021-27845: Fixed divide-by-zery issue in cp_create() (bsc#1188437). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-562=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-562=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): jasper-2.0.14-3.22.1 jasper-debuginfo-2.0.14-3.22.1 jasper-debugsource-2.0.14-3.22.1 libjasper-devel-2.0.14-3.22.1 libjasper4-2.0.14-3.22.1 libjasper4-debuginfo-2.0.14-3.22.1 - openSUSE Leap 15.4 (x86_64): libjasper4-32bit-2.0.14-3.22.1 libjasper4-32bit-debuginfo-2.0.14-3.22.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): jasper-2.0.14-3.22.1 jasper-debuginfo-2.0.14-3.22.1 jasper-debugsource-2.0.14-3.22.1 libjasper-devel-2.0.14-3.22.1 libjasper4-2.0.14-3.22.1 libjasper4-debuginfo-2.0.14-3.22.1 - openSUSE Leap 15.3 (x86_64): libjasper4-32bit-2.0.14-3.22.1 libjasper4-32bit-debuginfo-2.0.14-3.22.1 References: https://www.suse.com/security/cve/CVE-2021-27845.html https://bugzilla.suse.com/1188437

1 0

openSUSE-SU-2022:0559-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 23 Feb '22

23 Feb '22

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0559-1 Rating: important References: #1195682 #1196072 Cross-References: CVE-2022-0566 CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763 CVE-2022-22764 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.6.1 / MFSA 2022-07 (bsc#1196072) * CVE-2022-0566 (bmo#1753094) Crafted email could trigger an out-of-bounds write - Mozilla Thunderbird 91.6 / MFSA 2022-06 (bsc#1195682) * CVE-2022-22753 (bmo#1732435) Privilege Escalation to SYSTEM on Windows via Maintenance Service * CVE-2022-22754 (bmo#1750565) Extensions could have bypassed permission confirmation during update * CVE-2022-22756 (bmo#1317873) Drag and dropping an image could have resulted in the dropped object being an executable * CVE-2022-22759 (bmo#1739957) Sandboxed iframes could have executed script if the parent appended elements * CVE-2022-22760 (bmo#1740985, bmo#1748503) Cross-Origin responses could be distinguished between script and non-script content-types * CVE-2022-22761 (bmo#1745566) frame-ancestors Content Security Policy directive was not enforced for framed extension pages * CVE-2022-22763 (bmo#1740534) Script Execution during invalid object state * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545, bmo#1748210, bmo#1748279) Memory safety bugs fixed in Thunderbird 91.6 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-559=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-559=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.1-8.54.1 MozillaThunderbird-debuginfo-91.6.1-8.54.1 MozillaThunderbird-debugsource-91.6.1-8.54.1 MozillaThunderbird-translations-common-91.6.1-8.54.1 MozillaThunderbird-translations-other-91.6.1-8.54.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.1-8.54.1 MozillaThunderbird-debuginfo-91.6.1-8.54.1 MozillaThunderbird-debugsource-91.6.1-8.54.1 MozillaThunderbird-translations-common-91.6.1-8.54.1 MozillaThunderbird-translations-other-91.6.1-8.54.1 References: https://www.suse.com/security/cve/CVE-2022-0566.html https://www.suse.com/security/cve/CVE-2022-22753.html https://www.suse.com/security/cve/CVE-2022-22754.html https://www.suse.com/security/cve/CVE-2022-22756.html https://www.suse.com/security/cve/CVE-2022-22759.html https://www.suse.com/security/cve/CVE-2022-22760.html https://www.suse.com/security/cve/CVE-2022-22761.html https://www.suse.com/security/cve/CVE-2022-22763.html https://www.suse.com/security/cve/CVE-2022-22764.html https://bugzilla.suse.com/1195682 https://bugzilla.suse.com/1196072

1 0

openSUSE-RU-2022:0548-1: moderate: Recommended update for blog
by maintenance＠opensuse.org 22 Feb '22

22 Feb '22

openSUSE Recommended Update: Recommended update for blog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0548-1 Rating: moderate References: #1186506 #1191057 SLE-23234 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for blog fixes the following issues: - Update to version 2.26 * On s390/x and PPC64 gcc misses unused arg0 - Update to version 2.24 * Avoid install errror due missed directory - Update to version 2.22 * Avoid KillMode=none for newer systemd version as well as rework the systemd unit files of blog (bsc#1186506) - Move to /usr for UsrMerge (bsc#1191057) - Update to version 2.21 * Merge pull request #4 from samueldr/fix/makefile Fixup Makefile for better build system support * Silent new gcc compiler Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-548=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): blog-2.26-150300.4.3.1 blog-debuginfo-2.26-150300.4.3.1 blog-debugsource-2.26-150300.4.3.1 blog-devel-2.26-150300.4.3.1 blog-plymouth-2.26-150300.4.3.1 libblogger2-2.26-150300.4.3.1 libblogger2-debuginfo-2.26-150300.4.3.1 References: https://bugzilla.suse.com/1186506 https://bugzilla.suse.com/1191057

1 0

openSUSE-RU-2022:0048-1: moderate: Recommended update for python3
by maintenance＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Recommended Update: Recommended update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0048-1 Rating: moderate References: #1190566 #1192249 #1193179 Affected Products: openSUSE Backports SLE-15-SP2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for python3 fixes the following issues: - Don't use OpenSSL 1.1 on platforms which don't have it. - Remove shebangs from python-base libraries in '_libdir'. (bsc#1193179, bsc#1192249). - Build against 'openssl 1.1' as it is incompatible with 'openssl 3.0+' (bsc#1190566) - Fix for permission error when changing the mtime of the source file in presence of 'SOURCE_DATE_EPOCH'. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-48=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-48=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.15-10.15.1 libpython3_6m1_0-debuginfo-3.6.15-10.15.1 python3-3.6.15-10.15.1 python3-base-3.6.15-10.15.1 python3-base-debuginfo-3.6.15-10.15.1 python3-core-debugsource-3.6.15-10.15.1 python3-curses-3.6.15-10.15.1 python3-curses-debuginfo-3.6.15-10.15.1 python3-dbm-3.6.15-10.15.1 python3-dbm-debuginfo-3.6.15-10.15.1 python3-debuginfo-3.6.15-10.15.1 python3-debugsource-3.6.15-10.15.1 python3-devel-3.6.15-10.15.1 python3-devel-debuginfo-3.6.15-10.15.1 python3-doc-3.6.15-10.15.1 python3-doc-devhelp-3.6.15-10.15.1 python3-idle-3.6.15-10.15.1 python3-testsuite-3.6.15-10.15.1 python3-testsuite-debuginfo-3.6.15-10.15.1 python3-tk-3.6.15-10.15.1 python3-tk-debuginfo-3.6.15-10.15.1 python3-tools-3.6.15-10.15.1 - openSUSE Leap 15.3 (x86_64): libpython3_6m1_0-32bit-3.6.15-10.15.1 libpython3_6m1_0-32bit-debuginfo-3.6.15-10.15.1 - openSUSE Backports SLE-15-SP2 (noarch): python2-stestr-2.6.0-bp152.4.13.1 python3-stestr-2.6.0-bp152.4.13.1 References: https://bugzilla.suse.com/1190566 https://bugzilla.suse.com/1192249 https://bugzilla.suse.com/1193179

1 0

openSUSE-RU-2022:0545-1: moderate: Recommended update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer, libnbd, nbdkit
by maintenance＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Recommended Update: Recommended update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer, libnbd, nbdkit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0545-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer, libnbd, nbdkit fixes the following issues: - Update to version 1.43.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43. 0 - Update to version 1.42.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42. 0 - Detect SLE15 SP4 build environment - Update to version 1.41.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41. 0 - Update to version 1.40.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40. 0 - Install util-linux package (provides blockdev) - Update to version 1.29.4: * Remove deprecated nbdkit-streaming-plugin * Added retry-request-filter, an alternative, more lightweight, filter with different trade-offs for nbdkit-retry-filter. * cc: Document how to create OCaml plugin scripts * cc: Add binding for .cleanup * docs: Document NBDKIT_VERSION_* macros Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-545=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libnbd-1.9.3-150300.8.6.1 libnbd-debuginfo-1.9.3-150300.8.6.1 libnbd-debugsource-1.9.3-150300.8.6.1 libnbd-devel-1.9.3-150300.8.6.1 libnbd0-1.9.3-150300.8.6.1 libnbd0-debuginfo-1.9.3-150300.8.6.1 nbdfuse-1.9.3-150300.8.6.1 nbdfuse-debuginfo-1.9.3-150300.8.6.1 nbdkit-1.29.4-150300.8.6.1 nbdkit-basic-filters-1.29.4-150300.8.6.1 nbdkit-basic-filters-debuginfo-1.29.4-150300.8.6.1 nbdkit-basic-plugins-1.29.4-150300.8.6.1 nbdkit-basic-plugins-debuginfo-1.29.4-150300.8.6.1 nbdkit-curl-plugin-1.29.4-150300.8.6.1 nbdkit-curl-plugin-debuginfo-1.29.4-150300.8.6.1 nbdkit-debuginfo-1.29.4-150300.8.6.1 nbdkit-debugsource-1.29.4-150300.8.6.1 nbdkit-devel-1.29.4-150300.8.6.1 nbdkit-example-plugins-1.29.4-150300.8.6.1 nbdkit-example-plugins-debuginfo-1.29.4-150300.8.6.1 nbdkit-gzip-filter-1.29.4-150300.8.6.1 nbdkit-gzip-filter-debuginfo-1.29.4-150300.8.6.1 nbdkit-nbd-plugin-1.29.4-150300.8.6.1 nbdkit-nbd-plugin-debuginfo-1.29.4-150300.8.6.1 nbdkit-python-plugin-1.29.4-150300.8.6.1 nbdkit-python-plugin-debuginfo-1.29.4-150300.8.6.1 nbdkit-server-1.29.4-150300.8.6.1 nbdkit-server-debuginfo-1.29.4-150300.8.6.1 nbdkit-ssh-plugin-1.29.4-150300.8.6.1 nbdkit-ssh-plugin-debuginfo-1.29.4-150300.8.6.1 nbdkit-tar-filter-1.29.4-150300.8.6.1 nbdkit-tar-filter-debuginfo-1.29.4-150300.8.6.1 nbdkit-tmpdisk-plugin-1.29.4-150300.8.6.1 nbdkit-tmpdisk-plugin-debuginfo-1.29.4-150300.8.6.1 nbdkit-xz-filter-1.29.4-150300.8.6.1 nbdkit-xz-filter-debuginfo-1.29.4-150300.8.6.1 - openSUSE Leap 15.3 (x86_64): containerized-data-importer-api-1.43.0-150300.8.6.3 containerized-data-importer-api-debuginfo-1.43.0-150300.8.6.3 containerized-data-importer-cloner-1.43.0-150300.8.6.3 containerized-data-importer-cloner-debuginfo-1.43.0-150300.8.6.3 containerized-data-importer-controller-1.43.0-150300.8.6.3 containerized-data-importer-controller-debuginfo-1.43.0-150300.8.6.3 containerized-data-importer-importer-1.43.0-150300.8.6.3 containerized-data-importer-importer-debuginfo-1.43.0-150300.8.6.3 containerized-data-importer-manifests-1.43.0-150300.8.6.3 containerized-data-importer-operator-1.43.0-150300.8.6.3 containerized-data-importer-operator-debuginfo-1.43.0-150300.8.6.3 containerized-data-importer-uploadproxy-1.43.0-150300.8.6.3 containerized-data-importer-uploadproxy-debuginfo-1.43.0-150300.8.6.3 containerized-data-importer-uploadserver-1.43.0-150300.8.6.3 containerized-data-importer-uploadserver-debuginfo-1.43.0-150300.8.6.3 nbdkit-vddk-plugin-1.29.4-150300.8.6.1 nbdkit-vddk-plugin-debuginfo-1.29.4-150300.8.6.1 obs-service-cdi_containers_meta-1.43.0-150300.8.6.3 - openSUSE Leap 15.3 (noarch): libnbd-bash-completion-1.9.3-150300.8.6.1 nbdkit-bash-completion-1.29.4-150300.8.6.1 References:

1 0

openSUSE-RU-2022:0546-1: important: Recommended update for monitoring-plugins
by maintenance＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Recommended Update: Recommended update for monitoring-plugins ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0546-1 Rating: important References: #1047218 #1114483 #1191011 SLE-23324 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes and contains one feature can now be installed. Description: This update for monitoring-plugins fixes the following issues: the patch just reverts the problem, if you get more than 64K on stdout - recommend syslog for monitoring-plugins-log, as people probably want to analize logs generated by (r)syslog or journald check_snmp will segfaults at line 489 if number of lines returned by SNMPD is greater than number of defined thresholds - Remove unneeded build requirement on "syslog" - Remove unneeded BuildRequires on python-devel (bsc#1191011) - Call gettextize with --no-changelog to make package build reproducible (bsc#1047218) - Update to 2.3.1: Enhancements * check_curl: Add an option to verify the peer certificate and host using the system CA's Fixes * check_curl: fixed help, usage and errors for TLS 1.3 * check_curl: fixed a potential buffer overflow in url buffer * check_dns: split multiple IP addresses passed in one -a argument * check_curl: added string_statuscode function for printing HTTP/1.1 and HTTP/2 correctly * check_curl: fix crash if http header contains leading spaces * check_curl: display a specific human-readable error message where possible * check_pgsql: Using snprintf which honors the buffers size and guarantees null termination. * check_snmp: put the "c" (to mark a counter) after the perfdata value * check_http: Increase regexp limit * check_http: make -C obvious * check_curl: Increase regexp limit (to 1024 as in check_http) * check_curl: make -C obvious (from check_http) - Update to 2.3 (final): Enhancements * check_dns: allow 'expected address' (-a) to be specified in CIDR notation (IPv4 only). * check_dns: allow for IPv6 RDNS * check_dns: Accept CIDR * check_dns: allow unsorted addresses * check_dns: allow forcing complete match of all addresses * check_apt: add --only-critical switch * check_apt: add -l/--list option to print packages * check_file_age: add range checking * check_file_age: enable to test for maximum file size * check_apt: adding packages-warning option * check_load: Adding top consuming processes option * check_http: Adding Proxy-Authorization and extra headers * check_snmp: make calcualtion of timeout value in help output more clear * check_uptime: new plugin for checking uptime to see how long the system is running * check_curl: check_http replacement based on libcurl * check_http: Allow user to specify HTTP method after proxy CONNECT * check_http: Add new flag --show-body/-B to print body * check_cluster: Added data argument validation * check_icmp: Add IPv6 support * check_icmp: Automatically detect IP protocol * check_icmp: emit error if multiple protocol version * check_disk: add support to display inodes usage in perfdata * check_hpjd: Added -D option to disable warning on 'out of paper' * check_http: support the --show-body/-B flag when --expect is used * check_mysql: allow mariadbclient to be used * check_tcp: add --sni * check_dns: detect unreachable dns service in nslookup output Fixes * Fix regression where check_dhcp was rereading response in a tight loop * check_dns: fix error detection on sles nslookup * check_disk_smb: fix timeout issue * check_swap: repaired -n behaviour * check_icmp: Correctly set address_family on lookup * check_icmp: Do not overwrite -4,-6 on lookup * check_smtp: initializes n before it is used * check_dns: fix typo in parameter description * check_by_ssh: fix child process leak on timeouts * check_mysql: Allow sockets to be specified to -H * check_procs: improve command examples for 'at least' processes * check_disk: include -P switch in help * check_mailq: restore accidentially removed options - change version to 2.3~alpha.$date.$commit changes summarized * detect unreachable dns service in nslookup output * check_curl: host_name may be null * update test parameter according to check_http * check_curl: use CURLOPT_RESOLVE to fix connecting to the right ip * workaround for issue #1550 - better use "ping -4" instead of "ping" if supported * Use size_t instead of int when calling sysctl(3) * check_tcp: add --sni * Fix timeout_interval declarations * check_curl: NSS, parse more date formats from certificate (in -C cert check) * check_curl: more tolerant CN= parsing when checking certificates (hit on Centos 8) * setting no_body to TRUE when we have a HEAD request * some LIBCURL_VERSION checks around HTTP/2 feature * added --http-version option to check_curl to choose HTTP * improved curlhelp_parse_statusline to handle both HTTP/1.x and HTTP/2 * check_curl: updates embedded picohttpparser to newest git version * setting progname of check_curl plugin to check_curl (at least for now) * Allow mariadbclient to be used for check_mysql * fix maxfd being zero * include -P switch in help * check_swap: repaired "-n" behaviour * improve command examples for 'at least' processes * check_mysql: Allow sockets to be specified to -H * Adding packages-warning option to check_apt plugin * Adding print top consuming processes option to check_load * check_snmp: make calcualtion of timeout value in help output more clear * [check_disk] add support to display inodes usage in perfdata * check_by_ssh: fix child process leak on timeouts * check_icmp: Add IPv6 support * check_dns: fix typo in parameter description * Also support the --show-body/-B flag when --expect is used * check_dns: improve support for checking multiple addresses * check_hpjd: Added -D option to disable warning on 'out of paper' * check_icmp: Do not overwrite -4,-6 on lookup * check_icmp: emit error if multiple protocol version * check_icmp: move opts string into a variable * check_cluster.c: Added data argument validation. * check_icmp: Correctly set address_family on lookup * check_icmp: process protocol version args first * check_icmp: Add IPv6 support - drop explicit attr in filelist for check_host and check_rta_multi as they are symlinks to check_icmp - add new subpackage monitoring-plugins-uptime - include upstream fixes for check_swap - simply fix the plugin name in the comment - improve the output if the swap has zero size - use unknown exit code for help/version in plugins - updated context in - monitoring-plugins-mysql should also provide monitoring-plugins-mysql_query - Provide/Obsolete nagios-plugins in old version for better compatibility and to allow dist upgrade (bsc#1114483) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-546=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-546=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): freeradius-client-1.1.7-3.2.1 freeradius-client-debuginfo-1.1.7-3.2.1 freeradius-client-debugsource-1.1.7-3.2.1 freeradius-client-devel-1.1.7-3.2.1 freeradius-client-libs-1.1.7-3.2.1 freeradius-client-libs-debuginfo-1.1.7-3.2.1 monitoring-plugins-2.3.1-3.9.2 monitoring-plugins-all-2.3.1-3.9.2 monitoring-plugins-breeze-2.3.1-3.9.2 monitoring-plugins-by_ssh-2.3.1-3.9.2 monitoring-plugins-by_ssh-debuginfo-2.3.1-3.9.2 monitoring-plugins-cluster-2.3.1-3.9.2 monitoring-plugins-cluster-debuginfo-2.3.1-3.9.2 monitoring-plugins-common-2.3.1-3.9.2 monitoring-plugins-common-debuginfo-2.3.1-3.9.2 monitoring-plugins-cups-2.3.1-3.9.2 monitoring-plugins-dbi-2.3.1-3.9.2 monitoring-plugins-dbi-debuginfo-2.3.1-3.9.2 monitoring-plugins-dbi-mysql-2.3.1-3.9.2 monitoring-plugins-dbi-pgsql-2.3.1-3.9.2 monitoring-plugins-dbi-sqlite3-2.3.1-3.9.2 monitoring-plugins-debuginfo-2.3.1-3.9.2 monitoring-plugins-debugsource-2.3.1-3.9.2 monitoring-plugins-dhcp-2.3.1-3.9.2 monitoring-plugins-dhcp-debuginfo-2.3.1-3.9.2 monitoring-plugins-dig-2.3.1-3.9.2 monitoring-plugins-dig-debuginfo-2.3.1-3.9.2 monitoring-plugins-disk-2.3.1-3.9.2 monitoring-plugins-disk-debuginfo-2.3.1-3.9.2 monitoring-plugins-disk_smb-2.3.1-3.9.2 monitoring-plugins-dns-2.3.1-3.9.2 monitoring-plugins-dns-debuginfo-2.3.1-3.9.2 monitoring-plugins-dummy-2.3.1-3.9.2 monitoring-plugins-dummy-debuginfo-2.3.1-3.9.2 monitoring-plugins-extras-2.3.1-3.9.2 monitoring-plugins-file_age-2.3.1-3.9.2 monitoring-plugins-flexlm-2.3.1-3.9.2 monitoring-plugins-fping-2.3.1-3.9.2 monitoring-plugins-fping-debuginfo-2.3.1-3.9.2 monitoring-plugins-hpjd-2.3.1-3.9.2 monitoring-plugins-hpjd-debuginfo-2.3.1-3.9.2 monitoring-plugins-http-2.3.1-3.9.2 monitoring-plugins-http-debuginfo-2.3.1-3.9.2 monitoring-plugins-icmp-2.3.1-3.9.2 monitoring-plugins-icmp-debuginfo-2.3.1-3.9.2 monitoring-plugins-ide_smart-2.3.1-3.9.2 monitoring-plugins-ide_smart-debuginfo-2.3.1-3.9.2 monitoring-plugins-ifoperstatus-2.3.1-3.9.2 monitoring-plugins-ifstatus-2.3.1-3.9.2 monitoring-plugins-ircd-2.3.1-3.9.2 monitoring-plugins-ldap-2.3.1-3.9.2 monitoring-plugins-ldap-debuginfo-2.3.1-3.9.2 monitoring-plugins-load-2.3.1-3.9.2 monitoring-plugins-load-debuginfo-2.3.1-3.9.2 monitoring-plugins-log-2.3.1-3.9.2 monitoring-plugins-mailq-2.3.1-3.9.2 monitoring-plugins-mrtg-2.3.1-3.9.2 monitoring-plugins-mrtg-debuginfo-2.3.1-3.9.2 monitoring-plugins-mrtgtraf-2.3.1-3.9.2 monitoring-plugins-mrtgtraf-debuginfo-2.3.1-3.9.2 monitoring-plugins-mysql-2.3.1-3.9.2 monitoring-plugins-mysql-debuginfo-2.3.1-3.9.2 monitoring-plugins-nagios-2.3.1-3.9.2 monitoring-plugins-nagios-debuginfo-2.3.1-3.9.2 monitoring-plugins-nt-2.3.1-3.9.2 monitoring-plugins-nt-debuginfo-2.3.1-3.9.2 monitoring-plugins-ntp_peer-2.3.1-3.9.2 monitoring-plugins-ntp_peer-debuginfo-2.3.1-3.9.2 monitoring-plugins-ntp_time-2.3.1-3.9.2 monitoring-plugins-ntp_time-debuginfo-2.3.1-3.9.2 monitoring-plugins-nwstat-2.3.1-3.9.2 monitoring-plugins-nwstat-debuginfo-2.3.1-3.9.2 monitoring-plugins-oracle-2.3.1-3.9.2 monitoring-plugins-overcr-2.3.1-3.9.2 monitoring-plugins-overcr-debuginfo-2.3.1-3.9.2 monitoring-plugins-pgsql-2.3.1-3.9.2 monitoring-plugins-pgsql-debuginfo-2.3.1-3.9.2 monitoring-plugins-ping-2.3.1-3.9.2 monitoring-plugins-ping-debuginfo-2.3.1-3.9.2 monitoring-plugins-procs-2.3.1-3.9.2 monitoring-plugins-procs-debuginfo-2.3.1-3.9.2 monitoring-plugins-radius-2.3.1-3.9.2 monitoring-plugins-radius-debuginfo-2.3.1-3.9.2 monitoring-plugins-real-2.3.1-3.9.2 monitoring-plugins-real-debuginfo-2.3.1-3.9.2 monitoring-plugins-rpc-2.3.1-3.9.2 monitoring-plugins-smtp-2.3.1-3.9.2 monitoring-plugins-smtp-debuginfo-2.3.1-3.9.2 monitoring-plugins-snmp-2.3.1-3.9.2 monitoring-plugins-snmp-debuginfo-2.3.1-3.9.2 monitoring-plugins-ssh-2.3.1-3.9.2 monitoring-plugins-ssh-debuginfo-2.3.1-3.9.2 monitoring-plugins-swap-2.3.1-3.9.2 monitoring-plugins-swap-debuginfo-2.3.1-3.9.2 monitoring-plugins-tcp-2.3.1-3.9.2 monitoring-plugins-tcp-debuginfo-2.3.1-3.9.2 monitoring-plugins-time-2.3.1-3.9.2 monitoring-plugins-time-debuginfo-2.3.1-3.9.2 monitoring-plugins-ups-2.3.1-3.9.2 monitoring-plugins-ups-debuginfo-2.3.1-3.9.2 monitoring-plugins-users-2.3.1-3.9.2 monitoring-plugins-users-debuginfo-2.3.1-3.9.2 monitoring-plugins-wave-2.3.1-3.9.2 perl-Crypt-DES-2.07-3.2.1 perl-Crypt-DES-debuginfo-2.07-3.2.1 perl-Crypt-DES-debugsource-2.07-3.2.1 perl-Crypt-Rijndael-1.13-3.2.1 perl-Crypt-Rijndael-debuginfo-1.13-3.2.1 perl-Crypt-Rijndael-debugsource-1.13-3.2.1 - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): monitoring-plugins-sensors-2.3.1-3.9.2 - openSUSE Leap 15.4 (noarch): perl-Net-SNMP-6.0.1-3.2.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): freeradius-client-1.1.7-3.2.1 freeradius-client-debuginfo-1.1.7-3.2.1 freeradius-client-debugsource-1.1.7-3.2.1 freeradius-client-devel-1.1.7-3.2.1 freeradius-client-libs-1.1.7-3.2.1 freeradius-client-libs-debuginfo-1.1.7-3.2.1 monitoring-plugins-2.3.1-3.9.2 monitoring-plugins-all-2.3.1-3.9.2 monitoring-plugins-breeze-2.3.1-3.9.2 monitoring-plugins-by_ssh-2.3.1-3.9.2 monitoring-plugins-by_ssh-debuginfo-2.3.1-3.9.2 monitoring-plugins-cluster-2.3.1-3.9.2 monitoring-plugins-cluster-debuginfo-2.3.1-3.9.2 monitoring-plugins-common-2.3.1-3.9.2 monitoring-plugins-common-debuginfo-2.3.1-3.9.2 monitoring-plugins-cups-2.3.1-3.9.2 monitoring-plugins-dbi-2.3.1-3.9.2 monitoring-plugins-dbi-debuginfo-2.3.1-3.9.2 monitoring-plugins-dbi-mysql-2.3.1-3.9.2 monitoring-plugins-dbi-pgsql-2.3.1-3.9.2 monitoring-plugins-dbi-sqlite3-2.3.1-3.9.2 monitoring-plugins-debuginfo-2.3.1-3.9.2 monitoring-plugins-debugsource-2.3.1-3.9.2 monitoring-plugins-dhcp-2.3.1-3.9.2 monitoring-plugins-dhcp-debuginfo-2.3.1-3.9.2 monitoring-plugins-dig-2.3.1-3.9.2 monitoring-plugins-dig-debuginfo-2.3.1-3.9.2 monitoring-plugins-disk-2.3.1-3.9.2 monitoring-plugins-disk-debuginfo-2.3.1-3.9.2 monitoring-plugins-disk_smb-2.3.1-3.9.2 monitoring-plugins-dns-2.3.1-3.9.2 monitoring-plugins-dns-debuginfo-2.3.1-3.9.2 monitoring-plugins-dummy-2.3.1-3.9.2 monitoring-plugins-dummy-debuginfo-2.3.1-3.9.2 monitoring-plugins-extras-2.3.1-3.9.2 monitoring-plugins-file_age-2.3.1-3.9.2 monitoring-plugins-flexlm-2.3.1-3.9.2 monitoring-plugins-fping-2.3.1-3.9.2 monitoring-plugins-fping-debuginfo-2.3.1-3.9.2 monitoring-plugins-hpjd-2.3.1-3.9.2 monitoring-plugins-hpjd-debuginfo-2.3.1-3.9.2 monitoring-plugins-http-2.3.1-3.9.2 monitoring-plugins-http-debuginfo-2.3.1-3.9.2 monitoring-plugins-icmp-2.3.1-3.9.2 monitoring-plugins-icmp-debuginfo-2.3.1-3.9.2 monitoring-plugins-ide_smart-2.3.1-3.9.2 monitoring-plugins-ide_smart-debuginfo-2.3.1-3.9.2 monitoring-plugins-ifoperstatus-2.3.1-3.9.2 monitoring-plugins-ifstatus-2.3.1-3.9.2 monitoring-plugins-ircd-2.3.1-3.9.2 monitoring-plugins-ldap-2.3.1-3.9.2 monitoring-plugins-ldap-debuginfo-2.3.1-3.9.2 monitoring-plugins-load-2.3.1-3.9.2 monitoring-plugins-load-debuginfo-2.3.1-3.9.2 monitoring-plugins-log-2.3.1-3.9.2 monitoring-plugins-mailq-2.3.1-3.9.2 monitoring-plugins-mrtg-2.3.1-3.9.2 monitoring-plugins-mrtg-debuginfo-2.3.1-3.9.2 monitoring-plugins-mrtgtraf-2.3.1-3.9.2 monitoring-plugins-mrtgtraf-debuginfo-2.3.1-3.9.2 monitoring-plugins-mysql-2.3.1-3.9.2 monitoring-plugins-mysql-debuginfo-2.3.1-3.9.2 monitoring-plugins-nagios-2.3.1-3.9.2 monitoring-plugins-nagios-debuginfo-2.3.1-3.9.2 monitoring-plugins-nt-2.3.1-3.9.2 monitoring-plugins-nt-debuginfo-2.3.1-3.9.2 monitoring-plugins-ntp_peer-2.3.1-3.9.2 monitoring-plugins-ntp_peer-debuginfo-2.3.1-3.9.2 monitoring-plugins-ntp_time-2.3.1-3.9.2 monitoring-plugins-ntp_time-debuginfo-2.3.1-3.9.2 monitoring-plugins-nwstat-2.3.1-3.9.2 monitoring-plugins-nwstat-debuginfo-2.3.1-3.9.2 monitoring-plugins-oracle-2.3.1-3.9.2 monitoring-plugins-overcr-2.3.1-3.9.2 monitoring-plugins-overcr-debuginfo-2.3.1-3.9.2 monitoring-plugins-pgsql-2.3.1-3.9.2 monitoring-plugins-pgsql-debuginfo-2.3.1-3.9.2 monitoring-plugins-ping-2.3.1-3.9.2 monitoring-plugins-ping-debuginfo-2.3.1-3.9.2 monitoring-plugins-procs-2.3.1-3.9.2 monitoring-plugins-procs-debuginfo-2.3.1-3.9.2 monitoring-plugins-radius-2.3.1-3.9.2 monitoring-plugins-radius-debuginfo-2.3.1-3.9.2 monitoring-plugins-real-2.3.1-3.9.2 monitoring-plugins-real-debuginfo-2.3.1-3.9.2 monitoring-plugins-rpc-2.3.1-3.9.2 monitoring-plugins-smtp-2.3.1-3.9.2 monitoring-plugins-smtp-debuginfo-2.3.1-3.9.2 monitoring-plugins-snmp-2.3.1-3.9.2 monitoring-plugins-snmp-debuginfo-2.3.1-3.9.2 monitoring-plugins-ssh-2.3.1-3.9.2 monitoring-plugins-ssh-debuginfo-2.3.1-3.9.2 monitoring-plugins-swap-2.3.1-3.9.2 monitoring-plugins-swap-debuginfo-2.3.1-3.9.2 monitoring-plugins-tcp-2.3.1-3.9.2 monitoring-plugins-tcp-debuginfo-2.3.1-3.9.2 monitoring-plugins-time-2.3.1-3.9.2 monitoring-plugins-time-debuginfo-2.3.1-3.9.2 monitoring-plugins-ups-2.3.1-3.9.2 monitoring-plugins-ups-debuginfo-2.3.1-3.9.2 monitoring-plugins-users-2.3.1-3.9.2 monitoring-plugins-users-debuginfo-2.3.1-3.9.2 monitoring-plugins-wave-2.3.1-3.9.2 perl-Crypt-DES-2.07-3.2.1 perl-Crypt-DES-debuginfo-2.07-3.2.1 perl-Crypt-DES-debugsource-2.07-3.2.1 perl-Crypt-Rijndael-1.13-3.2.1 perl-Crypt-Rijndael-debuginfo-1.13-3.2.1 perl-Crypt-Rijndael-debugsource-1.13-3.2.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): monitoring-plugins-sensors-2.3.1-3.9.2 - openSUSE Leap 15.3 (noarch): perl-Net-SNMP-6.0.1-3.2.1 References: https://bugzilla.suse.com/1047218 https://bugzilla.suse.com/1114483 https://bugzilla.suse.com/1191011

1 0

openSUSE-SU-2022:0539-1: moderate: Security update for systemd
by opensuse-security＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0539-1 Rating: moderate References: #1191826 #1192637 #1194178 Cross-References: CVE-2021-3997 CVSS scores: CVE-2021-3997 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for systemd fixes the following issues: - CVE-2021-3997: Fixed an uncontrolled recursion in systemd's systemd-tmpfiles (bsc#1194178). The following non-security bugs were fixed: - udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637) - localectl: don't omit keymaps files that are symlinks (bsc#1191826) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-539=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-539=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): systemd-logger-246.16-150300.7.39.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.39.1 libsystemd0-debuginfo-246.16-150300.7.39.1 libudev-devel-246.16-150300.7.39.1 libudev1-246.16-150300.7.39.1 libudev1-debuginfo-246.16-150300.7.39.1 nss-myhostname-246.16-150300.7.39.1 nss-myhostname-debuginfo-246.16-150300.7.39.1 nss-mymachines-246.16-150300.7.39.1 nss-mymachines-debuginfo-246.16-150300.7.39.1 nss-resolve-246.16-150300.7.39.1 nss-resolve-debuginfo-246.16-150300.7.39.1 nss-systemd-246.16-150300.7.39.1 nss-systemd-debuginfo-246.16-150300.7.39.1 systemd-246.16-150300.7.39.1 systemd-container-246.16-150300.7.39.1 systemd-container-debuginfo-246.16-150300.7.39.1 systemd-coredump-246.16-150300.7.39.1 systemd-coredump-debuginfo-246.16-150300.7.39.1 systemd-debuginfo-246.16-150300.7.39.1 systemd-debugsource-246.16-150300.7.39.1 systemd-devel-246.16-150300.7.39.1 systemd-doc-246.16-150300.7.39.1 systemd-journal-remote-246.16-150300.7.39.1 systemd-journal-remote-debuginfo-246.16-150300.7.39.1 systemd-logger-246.16-150300.7.39.1 systemd-network-246.16-150300.7.39.1 systemd-network-debuginfo-246.16-150300.7.39.1 systemd-sysvinit-246.16-150300.7.39.1 udev-246.16-150300.7.39.1 udev-debuginfo-246.16-150300.7.39.1 - openSUSE Leap 15.3 (noarch): systemd-lang-246.16-150300.7.39.1 - openSUSE Leap 15.3 (x86_64): libsystemd0-32bit-246.16-150300.7.39.1 libsystemd0-32bit-debuginfo-246.16-150300.7.39.1 libudev-devel-32bit-246.16-150300.7.39.1 libudev1-32bit-246.16-150300.7.39.1 libudev1-32bit-debuginfo-246.16-150300.7.39.1 nss-myhostname-32bit-246.16-150300.7.39.1 nss-myhostname-32bit-debuginfo-246.16-150300.7.39.1 nss-mymachines-32bit-246.16-150300.7.39.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.39.1 systemd-32bit-246.16-150300.7.39.1 systemd-32bit-debuginfo-246.16-150300.7.39.1 References: https://www.suse.com/security/cve/CVE-2021-3997.html https://bugzilla.suse.com/1191826 https://bugzilla.suse.com/1192637 https://bugzilla.suse.com/1194178

1 0

openSUSE-OU-2022:0538-1: Optional update for xmltooling
by maintenance＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Optional Update: Optional update for xmltooling ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0538-1 Rating: low References: #1172351 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for xmltooling doesn't fix any user visible bugs. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-538=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-538=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libxmltooling7-1.6.4-3.6.1 libxmltooling7-debuginfo-1.6.4-3.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libxmltooling7-1.6.4-3.6.1 libxmltooling7-debuginfo-1.6.4-3.6.1 References: https://bugzilla.suse.com/1172351

1 0

openSUSE-RU-2022:0537-1: Recommended update for yast2-dhcp-server
by maintenance＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Recommended Update: Recommended update for yast2-dhcp-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0537-1 Rating: low References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for yast2-dhcp-server fixes the following issues: - Fix DNS zone creation by fixing a maintained DNS zone check. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-537=1 Package List: - openSUSE Leap 15.3 (noarch): yast2-dhcp-server-4.3.2-150300.3.3.1 References:

1 0

openSUSE-SU-2022:0540-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0540-1 Rating: moderate References: #1195563 Cross-References: CVE-2022-0284 CVSS scores: CVE-2022-0284 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ImageMagick fixes the following issues: - CVE-2022-0284: Fixed heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h (bsc#1195563). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-540=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-540=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libMagick++-7_Q16HDRI4-7.0.7.34-10.21.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-10.21.1 libMagickCore-7_Q16HDRI6-7.0.7.34-10.21.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-10.21.1 libMagickWand-7_Q16HDRI6-7.0.7.34-10.21.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-10.21.1 - openSUSE Leap 15.4 (x86_64): libMagick++-7_Q16HDRI4-32bit-7.0.7.34-10.21.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-10.21.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-10.21.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-10.21.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-10.21.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-10.21.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ImageMagick-7.0.7.34-10.21.1 ImageMagick-config-7-SUSE-7.0.7.34-10.21.1 ImageMagick-config-7-upstream-7.0.7.34-10.21.1 ImageMagick-debuginfo-7.0.7.34-10.21.1 ImageMagick-debugsource-7.0.7.34-10.21.1 ImageMagick-devel-7.0.7.34-10.21.1 ImageMagick-extra-7.0.7.34-10.21.1 ImageMagick-extra-debuginfo-7.0.7.34-10.21.1 libMagick++-7_Q16HDRI4-7.0.7.34-10.21.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-10.21.1 libMagick++-devel-7.0.7.34-10.21.1 libMagickCore-7_Q16HDRI6-7.0.7.34-10.21.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-10.21.1 libMagickWand-7_Q16HDRI6-7.0.7.34-10.21.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-10.21.1 perl-PerlMagick-7.0.7.34-10.21.1 perl-PerlMagick-debuginfo-7.0.7.34-10.21.1 - openSUSE Leap 15.3 (x86_64): ImageMagick-devel-32bit-7.0.7.34-10.21.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-10.21.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-10.21.1 libMagick++-devel-32bit-7.0.7.34-10.21.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-10.21.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-10.21.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-10.21.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-10.21.1 - openSUSE Leap 15.3 (noarch): ImageMagick-doc-7.0.7.34-10.21.1 References: https://www.suse.com/security/cve/CVE-2022-0284.html https://bugzilla.suse.com/1195563

1 0

openSUSE-RU-2022:0533-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0533-1 Rating: moderate References: #1180539 #1184128 #1184823 #1185287 #1185937 #1187460 #1187461 #1187515 #1192975 #1195229 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for python-kiwi fixes the following issues: This version upgrade includes several fixes: - Ensure backward compatibility on deprecated methods This commit ensures backward compatibility for deprecated config bash script utilities. (bsc#1195229) * Fixed regression in compression detection. (bsc#1192975) * index.rst: Change title (bsc#1189294#c2) * suggested in bsc#1189294#c2 for more clarity * change has been discussed with and approved by main author (Marcus S.) * Care for different snapper template locations. (bsc#1192940) * Do not force dracut into a compression setting * Fixed secure boot fallback setup Make sure MokManager gets copied. The name and location of the mok manager is distribution specific in the same way as the shim loader. Thus we need to apply a similar concept for looking it up. (bsc#1187515) * Allow creation of LUKS system with empty key To support cloud platforms better we should allow the creation of an initial(insecure) LUKS encrypted image with an empty passphrase/keyfile. (bsc#1187461, bsc#1187460) * Delete obsolete 'ddb.adapterType' patching When building a vmdk image with pvscsi as adapter type, kiwi implicitly changed the adapter_type from pvscsi to lsilogic because qemu only knows lsilogic. At the end kiwi patched the adapter type in the descriptor of the vmdk header back to pvscsi. That patching seems to be wrong according to information from users and VMware support. This commit deletes the descriptor patching and only leaves the pvscsi setting in the guest configuration(vmx). bsc#1180539) * Make dracut version check more robust The check_dracut_module_versions_compatible_to_kiwi() runtime check calls the package manager from the host and reads the package database from the image root. Doing this requires the package database in the image to be compatible with the package manager on the host. However this cannot be guarenteed and it is more robust to chroot into the image root and call the package manager from there. However, this change also comes with the cost that it's required to have a package manager available in the image root tree. Therefore along with the chroot based call, eventual exceptions from the call are now catched and leads to a debug message in the log file but will not lead the runtime check to fail. I consider the cases without a package database inside of the image to be less critical than the incompatibility issue between the host tooling and the package database in the image. (bsc#1185937) * Fixed setup of repository architecture Unfortunately the architecture reported by uname is not necessarily the same name as used in the repository metadata. Therefore it was not a good idea to set the architecture and manage the name via a mapping table. It also has turned out that repo arch names are distro specific which causes more complexity on an eventual mapping table. In the end this commit changes the way how the repository architecture is setup in a way that we only set the architecture if a name was explicitly specified such that the user keeps full control over it without any mapping magic included (bsc#1185287) * Do not apply default subcommand for derivate containers This commit does not apply the default subcommand for derivate containers. (bsc#1184823) * Added openssl to the core requires openssl is used in kiwi to construct a password hash if the plaintext password feature for user settings is used. (bsc#1184128) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-533=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.16-3.44.1 dracut-kiwi-live-9.24.16-3.44.1 dracut-kiwi-oem-dump-9.24.16-3.44.1 dracut-kiwi-oem-repart-9.24.16-3.44.1 dracut-kiwi-overlay-9.24.16-3.44.1 kiwi-man-pages-9.24.16-3.44.1 kiwi-systemdeps-9.24.16-3.44.1 kiwi-systemdeps-bootloaders-9.24.16-3.44.1 kiwi-systemdeps-containers-9.24.16-3.44.1 kiwi-systemdeps-core-9.24.16-3.44.1 kiwi-systemdeps-disk-images-9.24.16-3.44.1 kiwi-systemdeps-filesystems-9.24.16-3.44.1 kiwi-systemdeps-image-validation-9.24.16-3.44.1 kiwi-systemdeps-iso-media-9.24.16-3.44.1 kiwi-tools-9.24.16-3.44.1 kiwi-tools-debuginfo-9.24.16-3.44.1 python-kiwi-debugsource-9.24.16-3.44.1 python3-kiwi-9.24.16-3.44.1 - openSUSE Leap 15.3 (x86_64): kiwi-pxeboot-9.24.16-3.44.1 References: https://bugzilla.suse.com/1180539 https://bugzilla.suse.com/1184128 https://bugzilla.suse.com/1184823 https://bugzilla.suse.com/1185287 https://bugzilla.suse.com/1185937 https://bugzilla.suse.com/1187460 https://bugzilla.suse.com/1187461 https://bugzilla.suse.com/1187515 https://bugzilla.suse.com/1192975 https://bugzilla.suse.com/1195229

1 0

openSUSE-RU-2022:0044-1: Recommended update for python-configparser
by maintenance＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Recommended Update: Recommended update for python-configparser ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0044-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: python-configparser was updated to fix the github repo is github.com/jaraco/configparser Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-44=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python2-configparser-3.7.3-bp152.4.3.1 References:

1 0

openSUSE-RU-2022:0528-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0528-1 Rating: moderate References: SLE-23739 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for resource-agents fixes the following issues: - Provide a way to manage autofs mounts from within the HA Filesystem Resource Agent script. (jsc#SLE-23739) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-528=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ldirectord-4.8.0+git30.d0077df0-150300.8.20.1 resource-agents-4.8.0+git30.d0077df0-150300.8.20.1 resource-agents-debuginfo-4.8.0+git30.d0077df0-150300.8.20.1 resource-agents-debugsource-4.8.0+git30.d0077df0-150300.8.20.1 - openSUSE Leap 15.3 (noarch): monitoring-plugins-metadata-4.8.0+git30.d0077df0-150300.8.20.1 References:

1 0

openSUSE-SU-2022:0046-1: moderate: Security update for sphinx
by opensuse-security＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Security Update: Security update for sphinx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0046-1 Rating: moderate References: #1195227 Cross-References: CVE-2020-29050 CVSS scores: CVE-2020-29050 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: sphinx was updated to fix the following issues: - CVE-2020-29050: SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). (boo#1195227) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2022-46=1 Package List: - openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64): libsphinxclient-0_0_1-2.2.11-lp154.3.3.1 libsphinxclient-devel-2.2.11-lp154.3.3.1 sphinx-2.2.11-lp154.3.3.1 sphinx-debuginfo-2.2.11-lp154.3.3.1 sphinx-debugsource-2.2.11-lp154.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-29050.html https://bugzilla.suse.com/1195227

1 0

openSUSE-SU-2022:0526-1: moderate: Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container
by opensuse-security＠opensuse.org 21 Feb '22

21 Feb '22

openSUSE Security Update: Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0526-1 Rating: moderate References: Cross-References: CVE-2021-43565 CVSS scores: CVE-2021-43565 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues: - Update to version 0.49.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0 - Drop kubevirt-psp-caasp.yaml - Install curl and lsscsi (needed for testing) - Symlink UEFI firmware with AMD SEV support - Install tar package to enable kubectl cp ... - Make a "fixed appliance" for libguestfs - Explicitly install libguestfs{,-devel} and supermin Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-526=1 Package List: - openSUSE Leap 15.3 (x86_64): kubevirt-container-disk-0.49.0-150300.8.10.1 kubevirt-container-disk-debuginfo-0.49.0-150300.8.10.1 kubevirt-manifests-0.49.0-150300.8.10.1 kubevirt-tests-0.49.0-150300.8.10.1 kubevirt-tests-debuginfo-0.49.0-150300.8.10.1 kubevirt-virt-api-0.49.0-150300.8.10.1 kubevirt-virt-api-debuginfo-0.49.0-150300.8.10.1 kubevirt-virt-controller-0.49.0-150300.8.10.1 kubevirt-virt-controller-debuginfo-0.49.0-150300.8.10.1 kubevirt-virt-handler-0.49.0-150300.8.10.1 kubevirt-virt-handler-debuginfo-0.49.0-150300.8.10.1 kubevirt-virt-launcher-0.49.0-150300.8.10.1 kubevirt-virt-launcher-debuginfo-0.49.0-150300.8.10.1 kubevirt-virt-operator-0.49.0-150300.8.10.1 kubevirt-virt-operator-debuginfo-0.49.0-150300.8.10.1 kubevirt-virtctl-0.49.0-150300.8.10.1 kubevirt-virtctl-debuginfo-0.49.0-150300.8.10.1 obs-service-kubevirt_containers_meta-0.49.0-150300.8.10.1 References: https://www.suse.com/security/cve/CVE-2021-43565.html

1 0