February 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0353-1: moderate: Recommended update for systemd-rpm-macros
by maintenance＠opensuse.org 08 Feb '22

08 Feb '22

openSUSE Recommended Update: Recommended update for systemd-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0353-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for systemd-rpm-macros fixes the following issues: - Bump version to 10 - %sysusers_create_inline was wrongly marked as deprecated - %sysusers_create can be useful in certain cases and won't go away until we'll move to file triggers. So don't mark it as deprecated too Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-353=1 Package List: - openSUSE Leap 15.3 (noarch): systemd-rpm-macros-10-7.24.1 References:

1 0

openSUSE-RU-2022:0348-1: important: Recommended update for libzypp
by maintenance＠opensuse.org 08 Feb '22

08 Feb '22

openSUSE Recommended Update: Recommended update for libzypp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0348-1 Rating: important References: #1193007 #1193488 #1194597 #1194898 #954813 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libzypp fixes the following issues: - RepoManager: remember execution errors in exception history (bsc#1193007) - Fix exception handling when reading or writing credentials (bsc#1194898) - Fix install path for parser (bsc#1194597) - Fix Legacy include (bsc#1194597) - Public header files on older distros must use c++11 (bsc#1194597) - Use the default zypp.conf settings if no zypp.conf exists (bsc#1193488) - Fix wrong encoding of URI compontents of ISO images (bsc#954813) - When invoking 32bit mode in userland of an aarch64 kernel, handle armv8l as armv7hl compatible - Introduce zypp-curl as a sublibrary for CURL related code - zypp-rpm: Increase rpm loglevel if ZYPP_RPM_DEBUG is set - Save all signatures associated with a public key in its PublicKeyData Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-348=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libzypp-17.29.3-27.1 libzypp-debuginfo-17.29.3-27.1 libzypp-debugsource-17.29.3-27.1 libzypp-devel-17.29.3-27.1 libzypp-devel-doc-17.29.3-27.1 zypper-1.14.51-24.1 zypper-debuginfo-1.14.51-24.1 zypper-debugsource-1.14.51-24.1 - openSUSE Leap 15.3 (noarch): zypper-aptitude-1.14.51-24.1 zypper-log-1.14.51-24.1 zypper-needs-restarting-1.14.51-24.1 References: https://bugzilla.suse.com/1193007 https://bugzilla.suse.com/1193488 https://bugzilla.suse.com/1194597 https://bugzilla.suse.com/1194898 https://bugzilla.suse.com/954813

1 0

openSUSE-RU-2022:0032-1: Security update for phpMyAdmin
by maintenance＠opensuse.org 08 Feb '22

08 Feb '22

openSUSE Recommended Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0032-1 Rating: low References: #1195017 Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: phpMyAdmin was updated to fix: * CVE-2022-23807: Fixed Two factor authentication bypass (boo#1195017, PMASA-2022-1, CWE-661) * Add a new configuration directive $cfg['URLQueryEncryption'] to allow encrypting sensitive information in the URL to prevent disclosure. Thanks to Rich Grimes for suggesting this improvement * Add a new configuration directive $cfg['Servers'][$i]['hide_connection_errors'] to allow hiding the full error message when a log on attempt fails, which can leak hostnames or IP addresses of the target database server. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-32=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-32=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2022-32=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-32=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): phpMyAdmin-4.9.8-bp153.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): phpMyAdmin-4.9.8-bp152.2.9.1 - openSUSE Backports SLE-15-SP1 (noarch): phpMyAdmin-4.9.8-bp151.3.27.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): phpMyAdmin-4.9.8-55.1 References: https://www.suse.com/security/cve/CVE-2022-23807.html https://bugzilla.suse.com/1195017

1 0

openSUSE-RU-2022:0032-1: Security update for phpMyAdmin
by maintenance＠opensuse.org 08 Feb '22

08 Feb '22

openSUSE Recommended Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0032-1 Rating: low References: #1195017 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: phpMyAdmin was updated to fix: * CVE-2022-23807: Fixed Two factor authentication bypass (boo#1195017, PMASA-2022-1, CWE-661) * Add a new configuration directive $cfg['URLQueryEncryption'] to allow encrypting sensitive information in the URL to prevent disclosure. Thanks to Rich Grimes for suggesting this improvement * Add a new configuration directive $cfg['Servers'][$i]['hide_connection_errors'] to allow hiding the full error message when a log on attempt fails, which can leak hostnames or IP addresses of the target database server. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-32=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-32=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2022-32=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): phpMyAdmin-4.9.8-bp153.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): phpMyAdmin-4.9.8-bp152.2.9.1 - openSUSE Backports SLE-15-SP1 (noarch): phpMyAdmin-4.9.8-bp151.3.27.1 References: https://www.suse.com/security/cve/CVE-2022-23807.html https://bugzilla.suse.com/1195017

1 0

openSUSE-RU-2022:0031-1: moderate: Recommended update for hamlib
by maintenance＠opensuse.org 08 Feb '22

08 Feb '22

openSUSE Recommended Update: Recommended update for hamlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0031-1 Rating: moderate References: #1195260 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hamlib fixes the following issues: - Be less strict with required interpreters for tcl and perl subpackages (boo#1195260) - Drop python2 subpackage as its not relevant to any supported openSUSE release - Update to version 4.4 * Icom rigs now default filter 2 when setting PKTUSB but user can override * Fix FTDX9000 meter readings * Add Android sensor as a rotator * Added rig_get_vfo to some Icom rigs that have XCHG or 0x25 command capability * Added ability to build hamlib with docker * Added M0NKA mcHF URP rig * Faster serial i/o noticeable on higher baud rates * IC7300/9700/7800/785x set_clock/get_clock routines added -- no auto set yet * Yaesu FT1200/891/991/DX10/DX101/DX101MP set_clock/get_clock routines added - Update to version 4.3.1 * Bug fix release - Do not do vfo_fixup on satmode rigs - Fix compilation of misc.c with gmtime_r replacement function for mingw - Fix python build. For some reason casting tp vfo_t in the RIG_VFO_N macro broke the swig parsing - Append the missing information to build hamlib v4.3 for Android NDK - Change set_icom_set_mode_with_data to not change mode unless necessary - Since Icom rigs default to filter 2 if a filter is not selected we will do the same when turning on data mode - Fix segfault in kenwood_set_vfo - scripts: Update example in readme, since 4.0 817 is 1020 - Make testlibusb.c compatible with libusb < 1.0.23 Note: On systems with libusb < 1.0.23 a warning will be emmitted but compliation should proceed without error. - Update testlibusb.c warning to "may be" instead of "will be" - Change kenwood to only set VFOA default on 1st rig_open call - Update to version 4.3 * libusb-1.0.23 or greater is now required or use --without-libusb * Generating documentation now requires GNU source-highlighter. * Added IC-575 * Less VFO swapping of newer Icom rigs -- zero swapping in WSJTX and JTDX * Dual rotator control in rotctl -R option * Started work on simulators -- very crude right now but usable to debug some things * Overhaul of rig split -- reverse split (VFOA=RX VFOB=TX) should work for rigs capable of it Starting VFO does not matter -- rig will end up on RX VFO S VFOA 1 VFOB S VFOB 1 VFOA S Main 1 Sub S Sub 1 Main - Update to version 4.2 * New rig_get_mode_bandwidths: returns token set for bandwidths for given mode * New rig_get_info: returns token set for all vfos where order does not matter. * New rig_get_vfo_info * FILPATHLEN has changed to HAMLIB_FILPATHLEN * USRP lib and gnuradio are deprecated and will be removed in 5.0 * Added Radan rotator * Added Malachite SDR * Major rework for PRM80 * Add twiddle_timeout and twiddle_rit --set-conf options * rigctld --twiddle is deprecated and will be removed in 5.0 along with get_twiddle and set_twiddle - Update to version 4.1 * rigctld and rigs should be more robust for disconnect problems * Several fixes for Icom and Yaesu rigs * Nobody should need to use rig->caps or rig->state anymore * New rig_get_caps_int and rig_get_caps_cptr functions to replace using caps-> values * New rig_get_function to replace using caps-> function pointers * Fix shared library problem with WSJTX, JTDX, and JS8Call * New model Barrett 950 - Update to version 4.0 * Major changes in 4.0 affecting usage * Most rig model numbers have changed * RIG_LEVEL_VOX has been deprecated and replaced by RIG_LEVEL_VOXDELAY * rigctl 'f' command now returns VFO argument too * rigctl 'y' and 'Y' command now take/show antenna argument and option. * range_list items are undergoing changes towards a different model TBD * RTS/DTR PTT sharing is off by default now -- use serial_share=1 option to enable Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-31=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): hamlib-4.4-bp153.2.3.1 hamlib-devel-4.4-bp153.2.3.1 libhamlib++4-4.4-bp153.2.3.1 libhamlib4-4.4-bp153.2.3.1 lua-Hamliblua-4.4-bp153.2.3.1 perl-Hamlib-4.4-bp153.2.3.1 python3-Hamlib-4.4-bp153.2.3.1 tcl-Hamlib-4.4-bp153.2.3.1 References: https://bugzilla.suse.com/1195260

1 0

openSUSE-RU-2022:0344-1: moderate: Recommended update for obs-service-kiwi_metainfo_helper
by maintenance＠opensuse.org 07 Feb '22

07 Feb '22

openSUSE Recommended Update: Recommended update for obs-service-kiwi_metainfo_helper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0344-1 Rating: moderate References: #1195061 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for obs-service-kiwi_metainfo_helper fixes the following issues: - Generate OS_VERSION based on os-release VERSION (bsc#1195061). - Add test suite Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-344=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-344=1 Package List: - openSUSE Leap 15.4 (noarch): obs-service-kiwi_metainfo_helper-0.5-1.15.1 - openSUSE Leap 15.3 (noarch): obs-service-kiwi_metainfo_helper-0.5-1.15.1 References: https://bugzilla.suse.com/1195061

1 0

openSUSE-RU-2022:0340-1: moderate: Security update for the Linux Kernel
by maintenance＠opensuse.org 07 Feb '22

07 Feb '22

openSUSE Recommended Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0340-1 Rating: moderate References: #1195142 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various a regression bugfix. The following non-security bugs were fixed: - drm/radeon: fix error handling in radeon_driver_open_kms that could lead to non-booting systems with Radeon cards (bsc#1195142). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-340=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cluster-md-kmp-default-5.3.18-150300.59.46.1 cluster-md-kmp-default-debuginfo-5.3.18-150300.59.46.1 dlm-kmp-default-5.3.18-150300.59.46.1 dlm-kmp-default-debuginfo-5.3.18-150300.59.46.1 gfs2-kmp-default-5.3.18-150300.59.46.1 gfs2-kmp-default-debuginfo-5.3.18-150300.59.46.1 kernel-default-5.3.18-150300.59.46.1 kernel-default-base-5.3.18-150300.59.46.1.150300.18.29.1 kernel-default-base-rebuild-5.3.18-150300.59.46.1.150300.18.29.1 kernel-default-debuginfo-5.3.18-150300.59.46.1 kernel-default-debugsource-5.3.18-150300.59.46.1 kernel-default-devel-5.3.18-150300.59.46.1 kernel-default-devel-debuginfo-5.3.18-150300.59.46.1 kernel-default-extra-5.3.18-150300.59.46.1 kernel-default-extra-debuginfo-5.3.18-150300.59.46.1 kernel-default-livepatch-5.3.18-150300.59.46.1 kernel-default-livepatch-devel-5.3.18-150300.59.46.1 kernel-default-optional-5.3.18-150300.59.46.1 kernel-default-optional-debuginfo-5.3.18-150300.59.46.1 kernel-obs-build-5.3.18-150300.59.46.1 kernel-obs-build-debugsource-5.3.18-150300.59.46.1 kernel-obs-qa-5.3.18-150300.59.46.1 kernel-syms-5.3.18-150300.59.46.1 kselftests-kmp-default-5.3.18-150300.59.46.1 kselftests-kmp-default-debuginfo-5.3.18-150300.59.46.1 ocfs2-kmp-default-5.3.18-150300.59.46.1 ocfs2-kmp-default-debuginfo-5.3.18-150300.59.46.1 reiserfs-kmp-default-5.3.18-150300.59.46.1 reiserfs-kmp-default-debuginfo-5.3.18-150300.59.46.1 - openSUSE Leap 15.3 (ppc64le x86_64): kernel-debug-5.3.18-150300.59.46.1 kernel-debug-debuginfo-5.3.18-150300.59.46.1 kernel-debug-debugsource-5.3.18-150300.59.46.1 kernel-debug-devel-5.3.18-150300.59.46.1 kernel-debug-devel-debuginfo-5.3.18-150300.59.46.1 kernel-debug-livepatch-devel-5.3.18-150300.59.46.1 kernel-kvmsmall-5.3.18-150300.59.46.1 kernel-kvmsmall-debuginfo-5.3.18-150300.59.46.1 kernel-kvmsmall-debugsource-5.3.18-150300.59.46.1 kernel-kvmsmall-devel-5.3.18-150300.59.46.1 kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.46.1 kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.46.1 - openSUSE Leap 15.3 (aarch64 x86_64): cluster-md-kmp-preempt-5.3.18-150300.59.46.1 cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.46.1 dlm-kmp-preempt-5.3.18-150300.59.46.1 dlm-kmp-preempt-debuginfo-5.3.18-150300.59.46.1 gfs2-kmp-preempt-5.3.18-150300.59.46.1 gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.46.1 kernel-preempt-5.3.18-150300.59.46.1 kernel-preempt-debuginfo-5.3.18-150300.59.46.1 kernel-preempt-debugsource-5.3.18-150300.59.46.1 kernel-preempt-devel-5.3.18-150300.59.46.1 kernel-preempt-devel-debuginfo-5.3.18-150300.59.46.1 kernel-preempt-extra-5.3.18-150300.59.46.1 kernel-preempt-extra-debuginfo-5.3.18-150300.59.46.1 kernel-preempt-livepatch-devel-5.3.18-150300.59.46.1 kernel-preempt-optional-5.3.18-150300.59.46.1 kernel-preempt-optional-debuginfo-5.3.18-150300.59.46.1 kselftests-kmp-preempt-5.3.18-150300.59.46.1 kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.46.1 ocfs2-kmp-preempt-5.3.18-150300.59.46.1 ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.46.1 reiserfs-kmp-preempt-5.3.18-150300.59.46.1 reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.46.1 - openSUSE Leap 15.3 (aarch64): cluster-md-kmp-64kb-5.3.18-150300.59.46.1 cluster-md-kmp-64kb-debuginfo-5.3.18-150300.59.46.1 dlm-kmp-64kb-5.3.18-150300.59.46.1 dlm-kmp-64kb-debuginfo-5.3.18-150300.59.46.1 dtb-al-5.3.18-150300.59.46.1 dtb-allwinner-5.3.18-150300.59.46.1 dtb-altera-5.3.18-150300.59.46.1 dtb-amd-5.3.18-150300.59.46.1 dtb-amlogic-5.3.18-150300.59.46.1 dtb-apm-5.3.18-150300.59.46.1 dtb-arm-5.3.18-150300.59.46.1 dtb-broadcom-5.3.18-150300.59.46.1 dtb-cavium-5.3.18-150300.59.46.1 dtb-exynos-5.3.18-150300.59.46.1 dtb-freescale-5.3.18-150300.59.46.1 dtb-hisilicon-5.3.18-150300.59.46.1 dtb-lg-5.3.18-150300.59.46.1 dtb-marvell-5.3.18-150300.59.46.1 dtb-mediatek-5.3.18-150300.59.46.1 dtb-nvidia-5.3.18-150300.59.46.1 dtb-qcom-5.3.18-150300.59.46.1 dtb-renesas-5.3.18-150300.59.46.1 dtb-rockchip-5.3.18-150300.59.46.1 dtb-socionext-5.3.18-150300.59.46.1 dtb-sprd-5.3.18-150300.59.46.1 dtb-xilinx-5.3.18-150300.59.46.1 dtb-zte-5.3.18-150300.59.46.1 gfs2-kmp-64kb-5.3.18-150300.59.46.1 gfs2-kmp-64kb-debuginfo-5.3.18-150300.59.46.1 kernel-64kb-5.3.18-150300.59.46.1 kernel-64kb-debuginfo-5.3.18-150300.59.46.1 kernel-64kb-debugsource-5.3.18-150300.59.46.1 kernel-64kb-devel-5.3.18-150300.59.46.1 kernel-64kb-devel-debuginfo-5.3.18-150300.59.46.1 kernel-64kb-extra-5.3.18-150300.59.46.1 kernel-64kb-extra-debuginfo-5.3.18-150300.59.46.1 kernel-64kb-livepatch-devel-5.3.18-150300.59.46.1 kernel-64kb-optional-5.3.18-150300.59.46.1 kernel-64kb-optional-debuginfo-5.3.18-150300.59.46.1 kselftests-kmp-64kb-5.3.18-150300.59.46.1 kselftests-kmp-64kb-debuginfo-5.3.18-150300.59.46.1 ocfs2-kmp-64kb-5.3.18-150300.59.46.1 ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.46.1 reiserfs-kmp-64kb-5.3.18-150300.59.46.1 reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.46.1 - openSUSE Leap 15.3 (noarch): kernel-devel-5.3.18-150300.59.46.1 kernel-docs-5.3.18-150300.59.46.1 kernel-docs-html-5.3.18-150300.59.46.1 kernel-macros-5.3.18-150300.59.46.1 kernel-source-5.3.18-150300.59.46.1 kernel-source-vanilla-5.3.18-150300.59.46.1 - openSUSE Leap 15.3 (s390x): kernel-zfcpdump-5.3.18-150300.59.46.1 kernel-zfcpdump-debuginfo-5.3.18-150300.59.46.1 kernel-zfcpdump-debugsource-5.3.18-150300.59.46.1 References: https://bugzilla.suse.com/1195142

1 0

openSUSE-RU-2022:0343-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 07 Feb '22

07 Feb '22

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0343-1 Rating: moderate References: #1193086 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemd fixes the following issues: - disable DNSSEC until the following issue is solved: https://github.com/systemd/systemd/issues/10579 - disable fallback DNS servers and fail when no DNS server info could be obtained from the links. - DNSSEC support requires openssl therefore document this build dependency in systemd-network sub-package. - Improve warning messages (bsc#1193086). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-343=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.36.1 libsystemd0-debuginfo-246.16-150300.7.36.1 libudev-devel-246.16-150300.7.36.1 libudev1-246.16-150300.7.36.1 libudev1-debuginfo-246.16-150300.7.36.1 nss-myhostname-246.16-150300.7.36.1 nss-myhostname-debuginfo-246.16-150300.7.36.1 nss-mymachines-246.16-150300.7.36.1 nss-mymachines-debuginfo-246.16-150300.7.36.1 nss-resolve-246.16-150300.7.36.1 nss-resolve-debuginfo-246.16-150300.7.36.1 nss-systemd-246.16-150300.7.36.1 nss-systemd-debuginfo-246.16-150300.7.36.1 systemd-246.16-150300.7.36.1 systemd-container-246.16-150300.7.36.1 systemd-container-debuginfo-246.16-150300.7.36.1 systemd-coredump-246.16-150300.7.36.1 systemd-coredump-debuginfo-246.16-150300.7.36.1 systemd-debuginfo-246.16-150300.7.36.1 systemd-debugsource-246.16-150300.7.36.1 systemd-devel-246.16-150300.7.36.1 systemd-doc-246.16-150300.7.36.1 systemd-journal-remote-246.16-150300.7.36.1 systemd-journal-remote-debuginfo-246.16-150300.7.36.1 systemd-logger-246.16-150300.7.36.1 systemd-network-246.16-150300.7.36.1 systemd-network-debuginfo-246.16-150300.7.36.1 systemd-sysvinit-246.16-150300.7.36.1 udev-246.16-150300.7.36.1 udev-debuginfo-246.16-150300.7.36.1 - openSUSE Leap 15.3 (x86_64): libsystemd0-32bit-246.16-150300.7.36.1 libsystemd0-32bit-debuginfo-246.16-150300.7.36.1 libudev-devel-32bit-246.16-150300.7.36.1 libudev1-32bit-246.16-150300.7.36.1 libudev1-32bit-debuginfo-246.16-150300.7.36.1 nss-myhostname-32bit-246.16-150300.7.36.1 nss-myhostname-32bit-debuginfo-246.16-150300.7.36.1 nss-mymachines-32bit-246.16-150300.7.36.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.36.1 systemd-32bit-246.16-150300.7.36.1 systemd-32bit-debuginfo-246.16-150300.7.36.1 - openSUSE Leap 15.3 (noarch): systemd-lang-246.16-150300.7.36.1 References: https://bugzilla.suse.com/1193086

1 0

openSUSE-SU-2022:0030-1: important: Security update for chromium
by opensuse-security＠opensuse.org 07 Feb '22

07 Feb '22

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0030-1 Rating: important References: #1195420 Cross-References: CVE-2022-0452 CVE-2022-0453 CVE-2022-0454 CVE-2022-0455 CVE-2022-0456 CVE-2022-0457 CVE-2022-0459 CVE-2022-0460 CVE-2022-0461 CVE-2022-0462 CVE-2022-0463 CVE-2022-0464 CVE-2022-0465 CVE-2022-0466 CVE-2022-0467 CVE-2022-0468 CVE-2022-0469 CVE-2022-0470 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 98.0.4758.80 (boo#1195420) * CVE-2022-0452: Use after free in Safe Browsing * CVE-2022-0453: Use after free in Reader Mode * CVE-2022-0454: Heap buffer overflow in ANGLE * CVE-2022-0455: Inappropriate implementation in Full Screen Mode * CVE-2022-0456: Use after free in Web Search * CVE-2022-0457: Type Confusion in V8 * CVE-2022-0459: Use after free in Screen Capture * CVE-2022-0460: Use after free in Window Dialog * CVE-2022-0461: Policy bypass in COOP * CVE-2022-0462: Inappropriate implementation in Scroll * CVE-2022-0463: Use after free in Accessibility * CVE-2022-0464: Use after free in Accessibility * CVE-2022-0465: Use after free in Extensions * CVE-2022-0466: Inappropriate implementation in Extensions Platform * CVE-2022-0467: Inappropriate implementation in Pointer Lock * CVE-2022-0468: Use after free in Payments * CVE-2022-0469: Use after free in Cast * CVE-2022-0470: Out of bounds memory access in V8 * Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-30=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-98.0.4758.80-bp153.2.60.1 chromium-98.0.4758.80-bp153.2.60.1 References: https://www.suse.com/security/cve/CVE-2022-0452.html https://www.suse.com/security/cve/CVE-2022-0453.html https://www.suse.com/security/cve/CVE-2022-0454.html https://www.suse.com/security/cve/CVE-2022-0455.html https://www.suse.com/security/cve/CVE-2022-0456.html https://www.suse.com/security/cve/CVE-2022-0457.html https://www.suse.com/security/cve/CVE-2022-0459.html https://www.suse.com/security/cve/CVE-2022-0460.html https://www.suse.com/security/cve/CVE-2022-0461.html https://www.suse.com/security/cve/CVE-2022-0462.html https://www.suse.com/security/cve/CVE-2022-0463.html https://www.suse.com/security/cve/CVE-2022-0464.html https://www.suse.com/security/cve/CVE-2022-0465.html https://www.suse.com/security/cve/CVE-2022-0466.html https://www.suse.com/security/cve/CVE-2022-0467.html https://www.suse.com/security/cve/CVE-2022-0468.html https://www.suse.com/security/cve/CVE-2022-0469.html https://www.suse.com/security/cve/CVE-2022-0470.html https://bugzilla.suse.com/1195420

1 0

openSUSE-RU-2022:0339-1: moderate: Recommended update for google-droid-fonts
by maintenance＠opensuse.org 07 Feb '22

07 Feb '22

openSUSE Recommended Update: Recommended update for google-droid-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0339-1 Rating: moderate References: #1190886 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-droid-fonts fixes the following issue: - Add sources DroidSansFallback.ttf DroidSansFallbackFull.ttf DroidSansMono.ttf: Merge the latest modification from Android project (bsc#1190886). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-339=1 Package List: - openSUSE Leap 15.3 (noarch): google-droid-fonts-20121204-3.3.1 References: https://bugzilla.suse.com/1190886

1 0