February 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-FU-2022:0482-1: moderate: Feature update for libreoffice
by maintenance＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Feature Update: Feature update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0482-1 Rating: moderate References: #1180479 #1183308 #1183655 #1187982 #1189813 SLE-18214 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 5 feature fixes and contains one feature can now be installed. Description: This update for libreoffice fixes the following issues: Update LibreOffice from version 7.1.4.2 to 7.2.3.2 (jsc#SLE-18214) - Improve the rendering and loading rendering of shapes. (bsc#1183308) - Removed unrecognized option `--disable-vlc` This option has been removed from upstream in commit https://gerrit.libreoffice.org/c/core/+/108283 There's no real change in our build given that the VLC avmedia backend was explicitly disabled. - Fix gtk popover usage on gtk 3.20 - Revert upstream commit https://gerrit.libreoffice.org/c/core/+/116884 - Fix generated list of files for python scripts - Updating some LibreOffice buildrequires - Fix UI scaling on HIDPI Wayland/KDE screens - Fix inteaction between multi-column shape text and automatic height. (bsc#1187982) - Fix interaction of transparent cell fill and transparent shadow. (bsc#1189813) - Use vendored boost for all codestreams except Tumbleweed. Update boost vendored version. - Add vendored poppler to use for all codestreams except Tumbleweed. - Keep upstream desktop file names (bsc#1183655) and display math icon (bsc#1180479) - Source profile.d/alljava.sh from either /etc (if found) or /usr/etc). Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-482=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-482=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): libreoffice-7.2.3.2-150300.14.22.15.3 libreoffice-base-7.2.3.2-150300.14.22.15.3 libreoffice-base-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-base-drivers-postgresql-7.2.3.2-150300.14.22.15.3 libreoffice-base-drivers-postgresql-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-calc-7.2.3.2-150300.14.22.15.3 libreoffice-calc-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-calc-extensions-7.2.3.2-150300.14.22.15.3 libreoffice-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-debugsource-7.2.3.2-150300.14.22.15.3 libreoffice-draw-7.2.3.2-150300.14.22.15.3 libreoffice-draw-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-filters-optional-7.2.3.2-150300.14.22.15.3 libreoffice-gnome-7.2.3.2-150300.14.22.15.3 libreoffice-gnome-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-gtk3-7.2.3.2-150300.14.22.15.3 libreoffice-gtk3-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-impress-7.2.3.2-150300.14.22.15.3 libreoffice-impress-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-librelogo-7.2.3.2-150300.14.22.15.3 libreoffice-mailmerge-7.2.3.2-150300.14.22.15.3 libreoffice-math-7.2.3.2-150300.14.22.15.3 libreoffice-math-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-officebean-7.2.3.2-150300.14.22.15.3 libreoffice-officebean-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-pyuno-7.2.3.2-150300.14.22.15.3 libreoffice-pyuno-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-qt5-7.2.3.2-150300.14.22.15.3 libreoffice-qt5-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-sdk-7.2.3.2-150300.14.22.15.3 libreoffice-sdk-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-sdk-doc-7.2.3.2-150300.14.22.15.3 libreoffice-writer-7.2.3.2-150300.14.22.15.3 libreoffice-writer-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-writer-extensions-7.2.3.2-150300.14.22.15.3 libreofficekit-7.2.3.2-150300.14.22.15.3 libreofficekit-devel-7.2.3.2-150300.14.22.15.3 - openSUSE Leap 15.4 (noarch): libreoffice-branding-upstream-7.2.3.2-150300.14.22.15.3 libreoffice-gdb-pretty-printers-7.2.3.2-150300.14.22.15.3 libreoffice-glade-7.2.3.2-150300.14.22.15.3 libreoffice-icon-themes-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-af-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-am-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ar-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-as-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ast-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-be-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bg-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bn_IN-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bo-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-br-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-brx-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bs-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ca-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ca_valencia-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ckb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-cs-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-cy-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-da-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-de-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-dgo-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-dsb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-dz-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-el-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-en-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-en_GB-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-en_ZA-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-eo-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-es-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-et-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-eu-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fa-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fi-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fur-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fy-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ga-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-gd-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-gl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-gu-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-gug-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-he-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-hi-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-hr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-hsb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-hu-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-id-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-is-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-it-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ja-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ka-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kab-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kk-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-km-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kmr_Latn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ko-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kok-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ks-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-lb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-lo-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-lt-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-lv-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mai-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mk-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ml-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mni-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-my-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ne-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nso-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-oc-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-om-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-or-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-pa-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-pl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-pt_BR-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-pt_PT-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ro-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ru-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-rw-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sa_IN-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sat-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sd-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-si-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sid-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sk-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sq-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ss-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-st-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sv-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sw_TZ-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-szl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ta-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-te-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-tg-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-th-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-tn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-tr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ts-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-tt-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ug-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-uk-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-uz-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ve-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-vec-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-vi-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-xh-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-zh_CN-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-zh_TW-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-zu-7.2.3.2-150300.14.22.15.3 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libreoffice-7.2.3.2-150300.14.22.15.3 libreoffice-base-7.2.3.2-150300.14.22.15.3 libreoffice-base-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-base-drivers-postgresql-7.2.3.2-150300.14.22.15.3 libreoffice-base-drivers-postgresql-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-calc-7.2.3.2-150300.14.22.15.3 libreoffice-calc-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-calc-extensions-7.2.3.2-150300.14.22.15.3 libreoffice-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-debugsource-7.2.3.2-150300.14.22.15.3 libreoffice-draw-7.2.3.2-150300.14.22.15.3 libreoffice-draw-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-filters-optional-7.2.3.2-150300.14.22.15.3 libreoffice-gnome-7.2.3.2-150300.14.22.15.3 libreoffice-gnome-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-gtk3-7.2.3.2-150300.14.22.15.3 libreoffice-gtk3-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-impress-7.2.3.2-150300.14.22.15.3 libreoffice-impress-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-librelogo-7.2.3.2-150300.14.22.15.3 libreoffice-mailmerge-7.2.3.2-150300.14.22.15.3 libreoffice-math-7.2.3.2-150300.14.22.15.3 libreoffice-math-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-officebean-7.2.3.2-150300.14.22.15.3 libreoffice-officebean-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-pyuno-7.2.3.2-150300.14.22.15.3 libreoffice-pyuno-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-qt5-7.2.3.2-150300.14.22.15.3 libreoffice-qt5-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-sdk-7.2.3.2-150300.14.22.15.3 libreoffice-sdk-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-sdk-doc-7.2.3.2-150300.14.22.15.3 libreoffice-writer-7.2.3.2-150300.14.22.15.3 libreoffice-writer-debuginfo-7.2.3.2-150300.14.22.15.3 libreoffice-writer-extensions-7.2.3.2-150300.14.22.15.3 libreofficekit-7.2.3.2-150300.14.22.15.3 libreofficekit-devel-7.2.3.2-150300.14.22.15.3 - openSUSE Leap 15.3 (noarch): libreoffice-branding-upstream-7.2.3.2-150300.14.22.15.3 libreoffice-gdb-pretty-printers-7.2.3.2-150300.14.22.15.3 libreoffice-glade-7.2.3.2-150300.14.22.15.3 libreoffice-icon-themes-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-af-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-am-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ar-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-as-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ast-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-be-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bg-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bn_IN-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bo-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-br-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-brx-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-bs-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ca-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ca_valencia-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ckb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-cs-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-cy-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-da-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-de-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-dgo-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-dsb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-dz-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-el-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-en-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-en_GB-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-en_ZA-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-eo-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-es-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-et-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-eu-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fa-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fi-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fur-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-fy-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ga-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-gd-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-gl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-gu-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-gug-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-he-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-hi-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-hr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-hsb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-hu-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-id-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-is-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-it-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ja-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ka-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kab-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kk-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-km-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kmr_Latn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ko-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-kok-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ks-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-lb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-lo-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-lt-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-lv-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mai-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mk-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ml-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mni-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-mr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-my-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nb-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ne-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-nso-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-oc-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-om-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-or-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-pa-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-pl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-pt_BR-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-pt_PT-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ro-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ru-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-rw-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sa_IN-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sat-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sd-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-si-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sid-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sk-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sq-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ss-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-st-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sv-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-sw_TZ-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-szl-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ta-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-te-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-tg-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-th-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-tn-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-tr-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ts-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-tt-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ug-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-uk-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-uz-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-ve-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-vec-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-vi-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-xh-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-zh_CN-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-zh_TW-7.2.3.2-150300.14.22.15.3 libreoffice-l10n-zu-7.2.3.2-150300.14.22.15.3 References: https://bugzilla.suse.com/1180479 https://bugzilla.suse.com/1183308 https://bugzilla.suse.com/1183655 https://bugzilla.suse.com/1187982 https://bugzilla.suse.com/1189813

1 0

openSUSE-SU-2022:0042-1: important: Security update for chromium
by opensuse-security＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0042-1 Rating: important References: #1195986 Cross-References: CVE-2022-0603 CVE-2022-0604 CVE-2022-0605 CVE-2022-0606 CVE-2022-0607 CVE-2022-0608 CVE-2022-0609 CVE-2022-0610 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 98.0.4758.102 (boo#1195986) * CVE-2022-0603: Use after free in File Manager * CVE-2022-0604: Heap buffer overflow in Tab Groups * CVE-2022-0605: Use after free in Webstore API * CVE-2022-0606: Use after free in ANGLE * CVE-2022-0607: Use after free in GPU * CVE-2022-0608: Integer overflow in Mojo * CVE-2022-0609: Use after free in Animation * CVE-2022-0610: Inappropriate implementation in Gamepad API * Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-42=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-98.0.4758.102-bp153.2.63.1 chromium-98.0.4758.102-bp153.2.63.1 References: https://www.suse.com/security/cve/CVE-2022-0603.html https://www.suse.com/security/cve/CVE-2022-0604.html https://www.suse.com/security/cve/CVE-2022-0605.html https://www.suse.com/security/cve/CVE-2022-0606.html https://www.suse.com/security/cve/CVE-2022-0607.html https://www.suse.com/security/cve/CVE-2022-0608.html https://www.suse.com/security/cve/CVE-2022-0609.html https://www.suse.com/security/cve/CVE-2022-0610.html https://bugzilla.suse.com/1195986

1 0

openSUSE-SU-2022:0480-1: important: Security update for tiff
by opensuse-security＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0480-1 Rating: important References: #1071031 #1154365 #1182808 #1182809 #1182811 #1182812 #1190312 #1194539 Cross-References: CVE-2017-17095 CVE-2019-17546 CVE-2020-19131 CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524 CVE-2022-22844 CVSS scores: CVE-2017-17095 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-17095 (SUSE): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-17546 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-17546 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-19131 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-19131 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-35521 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-35521 (SUSE): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H CVE-2020-35522 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-35522 (SUSE): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H CVE-2020-35523 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-35523 (SUSE): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2020-35524 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-35524 (SUSE): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2022-22844 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for tiff fixes the following issues: - CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031). - CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365). - CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312). - CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808). - CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809). - CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811). - CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812). - CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-480=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-480=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-45.5.1 libtiff5-4.0.9-45.5.1 libtiff5-debuginfo-4.0.9-45.5.1 tiff-4.0.9-45.5.1 tiff-debuginfo-4.0.9-45.5.1 tiff-debugsource-4.0.9-45.5.1 - openSUSE Leap 15.4 (x86_64): libtiff-devel-32bit-4.0.9-45.5.1 libtiff5-32bit-4.0.9-45.5.1 libtiff5-32bit-debuginfo-4.0.9-45.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-45.5.1 libtiff5-4.0.9-45.5.1 libtiff5-debuginfo-4.0.9-45.5.1 tiff-4.0.9-45.5.1 tiff-debuginfo-4.0.9-45.5.1 tiff-debugsource-4.0.9-45.5.1 - openSUSE Leap 15.3 (x86_64): libtiff-devel-32bit-4.0.9-45.5.1 libtiff5-32bit-4.0.9-45.5.1 libtiff5-32bit-debuginfo-4.0.9-45.5.1 References: https://www.suse.com/security/cve/CVE-2017-17095.html https://www.suse.com/security/cve/CVE-2019-17546.html https://www.suse.com/security/cve/CVE-2020-19131.html https://www.suse.com/security/cve/CVE-2020-35521.html https://www.suse.com/security/cve/CVE-2020-35522.html https://www.suse.com/security/cve/CVE-2020-35523.html https://www.suse.com/security/cve/CVE-2020-35524.html https://www.suse.com/security/cve/CVE-2022-22844.html https://bugzilla.suse.com/1071031 https://bugzilla.suse.com/1154365 https://bugzilla.suse.com/1182808 https://bugzilla.suse.com/1182809 https://bugzilla.suse.com/1182811 https://bugzilla.suse.com/1182812 https://bugzilla.suse.com/1190312 https://bugzilla.suse.com/1194539

1 0

openSUSE-RU-2022:0041-1: moderate: Recommended update for python-stestr
by maintenance＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Recommended Update: Recommended update for python-stestr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0041-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update of python-stestr upadtes it to SLES 15 SP2 level. update to 2.6.0: * Base project infrastructure * Add python 3.8 macOS and windows ci jobs * Update test\_processor.py * Update config\_file.py * Update cli.py * Remove 3.8 azure pipelines jobs * Update stestr/scheduler.py * Update to recent hacking version * Add Python 3.8 support * Add --pdb flag to stestr run * Add unit tests around repo initialize * Handle empty .stestr directory to initialize * Update issue templates * Escape Windows paths * Stop encoding attachments text * Remove stray reference to removed short form of --random * Remove abbreviated option for stestr run --random * Only use stdlib based unittest runner for py >=3.5 * Handle NoneType timestamps in subunit results * Add links to translated version README * Add README\_ja.rst * Update docs * Revert to the trimmed stdout usage * Revert to previous stdout and remove usage modification * Revert "Add back more of the \_get\_runner() logic" * Add back more of the \_get\_runner() logic * Remove unused bits from test runner * Use StringIO instead of tempfile * Remove console script entrypoint for the runner * Add license to package metadata * Add unit tests for output functions * Add mailmap file to deduplicate authors list * Add custom test runner and remove testtools runner dependency * Fix edge case where there are no test times in output * Mention IRC channel in README * Add macOS azure pipelines * Use Azure DevOps build badge instead of appveyor * Add Deprecation warning on cli usage with py2.7 * Remove appveyor config * Install vcpython27 when python.version is 2.7 * Set up CI with Azure Pipelines * Add release automation for pypi artifacts * Rework logic for suppress attachments and all attachments * Add readme note about python 2 eol in readme * Cap sphinx version <2.0.0 when python2.7 * Add flag to print all attachments for successful tests * Add skips on windows * Discover python executable when discover is not used * Update copyright year * Use str instead of six.text\_type for python2.7 * Fix pep8 error * Update stestr/repository/memory.py * Add support to repositories for storing run metadata * Use yaml.safe\_load instead of yaml.load * Take care of 'concurrency is None' case * Add sanity check unittests * Use to\_int in both CLI and Python API * Ensure concurrency is always an int Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-41=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python2-stestr-2.6.0-bp152.4.4.1 References:

1 0

openSUSE-SU-2022:0479-1: important: Security update for virglrenderer
by opensuse-security＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0479-1 Rating: important References: #1195389 Cross-References: CVE-2022-0135 CVSS scores: CVE-2022-0135 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-479=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-479=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirglrenderer0-0.6.0-4.9.1 libvirglrenderer0-debuginfo-0.6.0-4.9.1 virglrenderer-debuginfo-0.6.0-4.9.1 virglrenderer-debugsource-0.6.0-4.9.1 virglrenderer-devel-0.6.0-4.9.1 virglrenderer-test-server-0.6.0-4.9.1 virglrenderer-test-server-debuginfo-0.6.0-4.9.1 References: https://www.suse.com/security/cve/CVE-2022-0135.html https://bugzilla.suse.com/1195389

1 0

openSUSE-RU-2022:0187-2: moderate: Recommended update for vsftpd
by maintenance＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Recommended Update: Recommended update for vsftpd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0187-2 Rating: moderate References: #1021387 #1052900 #1180314 #971784 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for vsftpd fixes the following issues: - Fix several issues related to SSL/TLS support (bsc#1021387) - Fix a seccomp failure that used to occur in FIPS mode when SSL is enabled (bsc#1052900) - Fix seccomp bug where the process would hang trying access syslog (bsc#971784) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-187=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): vsftpd-3.0.3-12.6.1 vsftpd-debuginfo-3.0.3-12.6.1 vsftpd-debugsource-3.0.3-12.6.1 References: https://bugzilla.suse.com/1021387 https://bugzilla.suse.com/1052900 https://bugzilla.suse.com/1180314 https://bugzilla.suse.com/971784

1 0

openSUSE-SU-2022:0040-1: important: Security update for kafka
by opensuse-security＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Security Update: Security update for kafka ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0040-1 Rating: important References: #1190587 #1190839 #1193662 #1193930 #1194842 #1194843 #1194844 Cross-References: CVE-2021-4104 CVE-2021-43565 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVSS scores: CVE-2021-4104 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-4104 (SUSE): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-43565 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-23302 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23302 (SUSE): 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23307 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has two fixes is now available. Description: This update for kafka, kafka-kit fixes following issues: - Remove JDBCAppender, JMSSink, chainsaw from log4j jars during build to prevent bsc#1194842, CVE-2022-23302, bsc#1194843, CVE-2022-23305, bsc#1194844, CVE-2022-23307 - Rebuild with kafka-kit change to Remove JMSAppender from log4j jars during build to prevent bsc#1193662, CVE-2021-4104 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-40=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-40=1 Package List: - openSUSE Leap 15.3 (x86_64): kubevirt-container-disk-0.45.0-8.7.1 kubevirt-container-disk-debuginfo-0.45.0-8.7.1 kubevirt-manifests-0.45.0-8.7.1 kubevirt-tests-0.45.0-8.7.1 kubevirt-tests-debuginfo-0.45.0-8.7.1 kubevirt-virt-api-0.45.0-8.7.1 kubevirt-virt-api-debuginfo-0.45.0-8.7.1 kubevirt-virt-controller-0.45.0-8.7.1 kubevirt-virt-controller-debuginfo-0.45.0-8.7.1 kubevirt-virt-handler-0.45.0-8.7.1 kubevirt-virt-handler-debuginfo-0.45.0-8.7.1 kubevirt-virt-launcher-0.45.0-8.7.1 kubevirt-virt-launcher-debuginfo-0.45.0-8.7.1 kubevirt-virt-operator-0.45.0-8.7.1 kubevirt-virt-operator-debuginfo-0.45.0-8.7.1 kubevirt-virtctl-0.45.0-8.7.1 kubevirt-virtctl-debuginfo-0.45.0-8.7.1 obs-service-kubevirt_containers_meta-0.45.0-8.7.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): kafka-source-2.1.0-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (x86_64): kafka-kit-2.1.0-bp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-4104.html https://www.suse.com/security/cve/CVE-2021-43565.html https://www.suse.com/security/cve/CVE-2022-23302.html https://www.suse.com/security/cve/CVE-2022-23305.html https://www.suse.com/security/cve/CVE-2022-23307.html https://bugzilla.suse.com/1190587 https://bugzilla.suse.com/1190839 https://bugzilla.suse.com/1193662 https://bugzilla.suse.com/1193930 https://bugzilla.suse.com/1194842 https://bugzilla.suse.com/1194843 https://bugzilla.suse.com/1194844

1 0

openSUSE-RU-2022:0476-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0476-1 Rating: moderate References: #1194661 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nfs-utils fixes the following issues: - If an error or warning message is produced before closeall() is called, mountd doesn't work. (bsc#1194661) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-476=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-476=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nfs-client-2.1.1-10.21.1 nfs-client-debuginfo-2.1.1-10.21.1 nfs-doc-2.1.1-10.21.1 nfs-kernel-server-2.1.1-10.21.1 nfs-kernel-server-debuginfo-2.1.1-10.21.1 nfs-utils-debuginfo-2.1.1-10.21.1 nfs-utils-debugsource-2.1.1-10.21.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nfs-client-2.1.1-10.21.1 nfs-client-debuginfo-2.1.1-10.21.1 nfs-doc-2.1.1-10.21.1 nfs-kernel-server-2.1.1-10.21.1 nfs-kernel-server-debuginfo-2.1.1-10.21.1 nfs-utils-debuginfo-2.1.1-10.21.1 nfs-utils-debugsource-2.1.1-10.21.1 References: https://bugzilla.suse.com/1194661

1 0

openSUSE-SU-2021:4136-2: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:4136-2 Rating: important References: #1190487 #1190488 #1190489 Cross-References: CVE-2021-4009 CVE-2021-4010 CVE-2021-4011 CVSS scores: CVE-2021-4009 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-4010 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-4011 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request length leading to out of bounds memory write. (bsc#1190487) - CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension does not properly validate the request length leading to out of bounds memory write. (bsc#1190488) - CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients requests of the Record extension do not properly validate the request length leading to out of bounds memory write. (bsc#1190489) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-465=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): xorg-x11-server-wayland-1.20.3-22.5.42.1 xorg-x11-server-wayland-debuginfo-1.20.3-22.5.42.1 References: https://www.suse.com/security/cve/CVE-2021-4009.html https://www.suse.com/security/cve/CVE-2021-4010.html https://www.suse.com/security/cve/CVE-2021-4011.html https://bugzilla.suse.com/1190487 https://bugzilla.suse.com/1190488 https://bugzilla.suse.com/1190489

1 0

openSUSE-SU-2022:0182-2: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0182-2 Rating: important References: #1194019 Cross-References: CVE-2019-8766 CVE-2019-8782 CVE-2019-8808 CVE-2019-8815 CVE-2020-13753 CVE-2020-27918 CVE-2020-29623 CVE-2020-3902 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9947 CVE-2020-9948 CVE-2020-9951 CVE-2020-9952 CVE-2021-1765 CVE-2021-1788 CVE-2021-1817 CVE-2021-1820 CVE-2021-1825 CVE-2021-1826 CVE-2021-1844 CVE-2021-1871 CVE-2021-30661 CVE-2021-30666 CVE-2021-30682 CVE-2021-30761 CVE-2021-30762 CVE-2021-30809 CVE-2021-30818 CVE-2021-30823 CVE-2021-30836 CVE-2021-30846 CVE-2021-30848 CVE-2021-30849 CVE-2021-30851 CVE-2021-30858 CVE-2021-30884 CVE-2021-30887 CVE-2021-30888 CVE-2021-30889 CVE-2021-30890 CVE-2021-30897 CVSS scores: CVE-2019-8766 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8766 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8782 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8782 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8808 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8808 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8815 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-8815 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-13753 (NVD) : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2020-13753 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-27918 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-27918 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-29623 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2020-29623 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2020-3902 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-3902 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-9802 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9802 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-9803 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9803 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-9805 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2020-9805 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2020-9947 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9947 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9948 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9951 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9951 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-9952 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2020-9952 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-1765 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-1765 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-1788 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1788 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1844 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1844 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-1871 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-1871 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30809 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30809 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30818 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30818 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30823 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-30823 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-30836 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-30836 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-30846 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30846 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30848 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30848 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30849 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30849 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30851 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30851 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30858 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30858 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30884 (NVD) : 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N CVE-2021-30884 (SUSE): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N CVE-2021-30887 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-30887 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-30888 (NVD) : 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-30888 (SUSE): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N CVE-2021-30889 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30889 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30890 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-30890 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-30897 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-30897 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 43 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: Fixed logic issue allowing universal cross site scripting when processing maliciously crafted web content. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-182=1 Package List: - openSUSE Leap 15.4 (noarch): libwebkit2gtk3-lang-2.34.3-23.3 References: https://www.suse.com/security/cve/CVE-2019-8766.html https://www.suse.com/security/cve/CVE-2019-8782.html https://www.suse.com/security/cve/CVE-2019-8808.html https://www.suse.com/security/cve/CVE-2019-8815.html https://www.suse.com/security/cve/CVE-2020-13753.html https://www.suse.com/security/cve/CVE-2020-27918.html https://www.suse.com/security/cve/CVE-2020-29623.html https://www.suse.com/security/cve/CVE-2020-3902.html https://www.suse.com/security/cve/CVE-2020-9802.html https://www.suse.com/security/cve/CVE-2020-9803.html https://www.suse.com/security/cve/CVE-2020-9805.html https://www.suse.com/security/cve/CVE-2020-9947.html https://www.suse.com/security/cve/CVE-2020-9948.html https://www.suse.com/security/cve/CVE-2020-9951.html https://www.suse.com/security/cve/CVE-2020-9952.html https://www.suse.com/security/cve/CVE-2021-1765.html https://www.suse.com/security/cve/CVE-2021-1788.html https://www.suse.com/security/cve/CVE-2021-1817.html https://www.suse.com/security/cve/CVE-2021-1820.html https://www.suse.com/security/cve/CVE-2021-1825.html https://www.suse.com/security/cve/CVE-2021-1826.html https://www.suse.com/security/cve/CVE-2021-1844.html https://www.suse.com/security/cve/CVE-2021-1871.html https://www.suse.com/security/cve/CVE-2021-30661.html https://www.suse.com/security/cve/CVE-2021-30666.html https://www.suse.com/security/cve/CVE-2021-30682.html https://www.suse.com/security/cve/CVE-2021-30761.html https://www.suse.com/security/cve/CVE-2021-30762.html https://www.suse.com/security/cve/CVE-2021-30809.html https://www.suse.com/security/cve/CVE-2021-30818.html https://www.suse.com/security/cve/CVE-2021-30823.html https://www.suse.com/security/cve/CVE-2021-30836.html https://www.suse.com/security/cve/CVE-2021-30846.html https://www.suse.com/security/cve/CVE-2021-30848.html https://www.suse.com/security/cve/CVE-2021-30849.html https://www.suse.com/security/cve/CVE-2021-30851.html https://www.suse.com/security/cve/CVE-2021-30858.html https://www.suse.com/security/cve/CVE-2021-30884.html https://www.suse.com/security/cve/CVE-2021-30887.html https://www.suse.com/security/cve/CVE-2021-30888.html https://www.suse.com/security/cve/CVE-2021-30889.html https://www.suse.com/security/cve/CVE-2021-30890.html https://www.suse.com/security/cve/CVE-2021-30897.html https://bugzilla.suse.com/1194019

1 0