February 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0522-1: moderate: Recommended update for fetchmail
by maintenance＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Recommended Update: Recommended update for fetchmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0522-1 Rating: moderate References: #1193894 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fetchmail fixes the following issues: - Restore autoprobe functionality (bsc#1193894) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-522=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-522=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): fetchmail-6.4.22-20.26.1 fetchmail-debuginfo-6.4.22-20.26.1 fetchmail-debugsource-6.4.22-20.26.1 fetchmailconf-6.4.22-20.26.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): fetchmail-6.4.22-20.26.1 fetchmail-debuginfo-6.4.22-20.26.1 fetchmail-debugsource-6.4.22-20.26.1 fetchmailconf-6.4.22-20.26.1 References: https://bugzilla.suse.com/1193894

1 0

openSUSE-RU-2022:0519-1: moderate: Recommended update for sysstat
by maintenance＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Recommended Update: Recommended update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0519-1 Rating: moderate References: #1194679 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysstat fixes the following issues: - Fix possible segfault (bsc#1194679). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-519=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-519=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): sysstat-12.0.2-3.33.1 sysstat-debuginfo-12.0.2-3.33.1 sysstat-debugsource-12.0.2-3.33.1 sysstat-isag-12.0.2-3.33.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): sysstat-12.0.2-3.33.1 sysstat-debuginfo-12.0.2-3.33.1 sysstat-debugsource-12.0.2-3.33.1 sysstat-isag-12.0.2-3.33.1 References: https://bugzilla.suse.com/1194679

1 0

openSUSE-RU-2022:0520-1: moderate: Recommended update for rpm
by maintenance＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Recommended Update: Recommended update for rpm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0520-1 Rating: moderate References: #1194968 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpm fixes the following issues: - Revert unwanted /usr/bin/python to /usr/bin/python2 change we got with the update to 4.14.3 (bsc#1194968) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-520=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-520=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python2-rpm-4.14.3-150300.46.1 python2-rpm-debuginfo-4.14.3-150300.46.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-rpm-debugsource-4.14.3-150300.46.1 python2-rpm-4.14.3-150300.46.1 python2-rpm-debuginfo-4.14.3-150300.46.1 python3-rpm-4.14.3-150300.46.1 python3-rpm-debuginfo-4.14.3-150300.46.1 rpm-4.14.3-150300.46.1 rpm-build-4.14.3-150300.46.1 rpm-build-debuginfo-4.14.3-150300.46.1 rpm-debuginfo-4.14.3-150300.46.1 rpm-debugsource-4.14.3-150300.46.1 rpm-devel-4.14.3-150300.46.1 rpm-ndb-4.14.3-150300.46.1 rpm-ndb-debuginfo-4.14.3-150300.46.1 rpm-ndb-debugsource-4.14.3-150300.46.1 - openSUSE Leap 15.3 (x86_64): rpm-32bit-4.14.3-150300.46.1 rpm-32bit-debuginfo-4.14.3-150300.46.1 rpm-ndb-32bit-4.14.3-150300.46.1 rpm-ndb-32bit-debuginfo-4.14.3-150300.46.1 References: https://bugzilla.suse.com/1194968

1 0

openSUSE-RU-2022:0513-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0513-1 Rating: moderate References: #1159205 #1190395 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Fix wrong default entry when booting snapshot (bsc#1159205). - Improve support for SLE Micro 5.1 on s390x (bsc#1190395). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-513=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): grub2-2.04-150300.22.12.2 grub2-branding-upstream-2.04-150300.22.12.2 grub2-debuginfo-2.04-150300.22.12.2 - openSUSE Leap 15.3 (aarch64 s390x x86_64): grub2-debugsource-2.04-150300.22.12.2 - openSUSE Leap 15.3 (noarch): grub2-arm64-efi-2.04-150300.22.12.2 grub2-arm64-efi-debug-2.04-150300.22.12.2 grub2-i386-pc-2.04-150300.22.12.2 grub2-i386-pc-debug-2.04-150300.22.12.2 grub2-powerpc-ieee1275-2.04-150300.22.12.2 grub2-powerpc-ieee1275-debug-2.04-150300.22.12.2 grub2-snapper-plugin-2.04-150300.22.12.2 grub2-systemd-sleep-plugin-2.04-150300.22.12.2 grub2-x86_64-efi-2.04-150300.22.12.2 grub2-x86_64-efi-debug-2.04-150300.22.12.2 grub2-x86_64-xen-2.04-150300.22.12.2 - openSUSE Leap 15.3 (s390x): grub2-s390x-emu-2.04-150300.22.12.2 grub2-s390x-emu-debug-2.04-150300.22.12.2 References: https://bugzilla.suse.com/1159205 https://bugzilla.suse.com/1190395

1 0

openSUSE-SU-2022:0498-1: important: Security update for expat
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0498-1 Rating: important References: #1195054 #1195217 Cross-References: CVE-2022-23852 CVE-2022-23990 CVSS scores: CVE-2022-23852 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23852 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23990 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23990 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for expat fixes the following issues: - CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054). - CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-498=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): expat-2.2.5-3.12.1 expat-debuginfo-2.2.5-3.12.1 expat-debugsource-2.2.5-3.12.1 libexpat-devel-2.2.5-3.12.1 libexpat1-2.2.5-3.12.1 libexpat1-debuginfo-2.2.5-3.12.1 - openSUSE Leap 15.3 (x86_64): expat-32bit-debuginfo-2.2.5-3.12.1 libexpat-devel-32bit-2.2.5-3.12.1 libexpat1-32bit-2.2.5-3.12.1 libexpat1-32bit-debuginfo-2.2.5-3.12.1 References: https://www.suse.com/security/cve/CVE-2022-23852.html https://www.suse.com/security/cve/CVE-2022-23990.html https://bugzilla.suse.com/1195054 https://bugzilla.suse.com/1195217

1 0

openSUSE-RU-2022:0188-2: moderate: Recommended update for hunspell
by maintenance＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Recommended Update: Recommended update for hunspell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0188-2 Rating: moderate References: #1193627 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hunspell fixes the following issues: - Fix myspell english dictionary not being installed (bsc#1193627) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-188=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): hunspell-1.6.2-3.8.1 hunspell-debuginfo-1.6.2-3.8.1 hunspell-debugsource-1.6.2-3.8.1 hunspell-devel-1.6.2-3.8.1 hunspell-tools-1.6.2-3.8.1 hunspell-tools-debuginfo-1.6.2-3.8.1 libhunspell-1_6-0-1.6.2-3.8.1 libhunspell-1_6-0-debuginfo-1.6.2-3.8.1 - openSUSE Leap 15.4 (x86_64): hunspell-devel-32bit-1.6.2-3.8.1 libhunspell-1_6-0-32bit-1.6.2-3.8.1 libhunspell-1_6-0-32bit-debuginfo-1.6.2-3.8.1 References: https://bugzilla.suse.com/1193627

1 0

openSUSE-SU-2022:0210-2: Security update for qemu
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0210-2 Rating: low References: #1172033 #1181361 Cross-References: CVE-2020-13253 CVE-2021-20196 CVSS scores: CVE-2020-13253 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-13253 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2021-20196 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-20196 (SUSE): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for qemu fixes the following issues: - CVE-2020-13253: Fixed an OOB access that could crash the guest resulting in DoS (bsc#1172033) - CVE-2021-20196: Fixed null pointer dereference that may lead to guest crash (bsc#1181361). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-210=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): qemu-s390-4.2.1-11.34.2 qemu-s390-debuginfo-4.2.1-11.34.2 References: https://www.suse.com/security/cve/CVE-2020-13253.html https://www.suse.com/security/cve/CVE-2021-20196.html https://bugzilla.suse.com/1172033 https://bugzilla.suse.com/1181361

1 0

openSUSE-SU-2022:0492-1: important: Security update for strongswan
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0492-1 Rating: important References: #1194471 Cross-References: CVE-2021-45079 CVSS scores: CVE-2021-45079 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2021-45079 (SUSE): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for strongswan fixes the following issues: - CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-492=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-492=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): strongswan-5.8.2-11.24.1 strongswan-debuginfo-5.8.2-11.24.1 strongswan-debugsource-5.8.2-11.24.1 strongswan-hmac-5.8.2-11.24.1 strongswan-ipsec-5.8.2-11.24.1 strongswan-ipsec-debuginfo-5.8.2-11.24.1 strongswan-libs0-5.8.2-11.24.1 strongswan-libs0-debuginfo-5.8.2-11.24.1 strongswan-mysql-5.8.2-11.24.1 strongswan-mysql-debuginfo-5.8.2-11.24.1 strongswan-nm-5.8.2-11.24.1 strongswan-nm-debuginfo-5.8.2-11.24.1 strongswan-sqlite-5.8.2-11.24.1 strongswan-sqlite-debuginfo-5.8.2-11.24.1 - openSUSE Leap 15.4 (noarch): strongswan-doc-5.8.2-11.24.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): strongswan-5.8.2-11.24.1 strongswan-debuginfo-5.8.2-11.24.1 strongswan-debugsource-5.8.2-11.24.1 strongswan-hmac-5.8.2-11.24.1 strongswan-ipsec-5.8.2-11.24.1 strongswan-ipsec-debuginfo-5.8.2-11.24.1 strongswan-libs0-5.8.2-11.24.1 strongswan-libs0-debuginfo-5.8.2-11.24.1 strongswan-mysql-5.8.2-11.24.1 strongswan-mysql-debuginfo-5.8.2-11.24.1 strongswan-nm-5.8.2-11.24.1 strongswan-nm-debuginfo-5.8.2-11.24.1 strongswan-sqlite-5.8.2-11.24.1 strongswan-sqlite-debuginfo-5.8.2-11.24.1 - openSUSE Leap 15.3 (noarch): strongswan-doc-5.8.2-11.24.1 References: https://www.suse.com/security/cve/CVE-2021-45079.html https://bugzilla.suse.com/1194471

1 0

openSUSE-RU-2022:0228-2: moderate: Recommended update for boost
by maintenance＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Recommended Update: Recommended update for boost ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0228-2 Rating: moderate References: #1194522 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for boost fixes the following issues: - Fix compilation errors (bsc#1194522) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-228=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libboost_mpi_python-py2_7-1_66_0-1.66.0-12.3.1 libboost_mpi_python-py2_7-1_66_0-debuginfo-1.66.0-12.3.1 libboost_mpi_python-py2_7-1_66_0-devel-1.66.0-12.3.1 libboost_numpy-py2_7-1_66_0-1.66.0-12.3.1 libboost_numpy-py2_7-1_66_0-debuginfo-1.66.0-12.3.1 libboost_numpy-py2_7-1_66_0-devel-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-debuginfo-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-devel-1.66.0-12.3.1 python2-boost_parallel_mpi1_66_0-1.66.0-12.3.1 python2-boost_parallel_mpi1_66_0-debuginfo-1.66.0-12.3.1 - openSUSE Leap 15.4 (x86_64): libboost_python-py2_7-1_66_0-32bit-1.66.0-12.3.1 libboost_python-py2_7-1_66_0-32bit-debuginfo-1.66.0-12.3.1 References: https://bugzilla.suse.com/1194522

1 0

openSUSE-SU-2022:0493-1: important: Security update for clamav
by opensuse-security＠opensuse.org 18 Feb '22

18 Feb '22

openSUSE Security Update: Security update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0493-1 Rating: important References: #1194731 Cross-References: CVE-2022-20698 CVSS scores: CVE-2022-20698 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for clamav fixes the following issues: - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-493=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-493=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): clamav-0.103.5-3.35.1 clamav-debuginfo-0.103.5-3.35.1 clamav-debugsource-0.103.5-3.35.1 clamav-devel-0.103.5-3.35.1 libclamav9-0.103.5-3.35.1 libclamav9-debuginfo-0.103.5-3.35.1 libfreshclam2-0.103.5-3.35.1 libfreshclam2-debuginfo-0.103.5-3.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): clamav-0.103.5-3.35.1 clamav-debuginfo-0.103.5-3.35.1 clamav-debugsource-0.103.5-3.35.1 clamav-devel-0.103.5-3.35.1 libclamav9-0.103.5-3.35.1 libclamav9-debuginfo-0.103.5-3.35.1 libfreshclam2-0.103.5-3.35.1 libfreshclam2-debuginfo-0.103.5-3.35.1 References: https://www.suse.com/security/cve/CVE-2022-20698.html https://bugzilla.suse.com/1194731

1 0