February 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0222-2: moderate: Recommended update for xrdp
by maintenance＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Recommended Update: Recommended update for xrdp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0222-2 Rating: moderate References: #1187258 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xrdp fixes the following issues: - Fix crash in xrdp-fate318398-change-expired-password.patch (bsc#1187258) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-222=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpainter0-0.9.13.1-4.12.1 libpainter0-debuginfo-0.9.13.1-4.12.1 librfxencode0-0.9.13.1-4.12.1 librfxencode0-debuginfo-0.9.13.1-4.12.1 xrdp-0.9.13.1-4.12.1 xrdp-debuginfo-0.9.13.1-4.12.1 xrdp-debugsource-0.9.13.1-4.12.1 xrdp-devel-0.9.13.1-4.12.1 References: https://bugzilla.suse.com/1187258

1 0

openSUSE-RU-2022:0035-2: Recommended update for telnet
by maintenance＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Recommended Update: Recommended update for telnet ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0035-2 Rating: low References: #1129925 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for telnet fixes the following issues: - Update Source location to use Gentoo mirror, fixes bsc#1129925 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-35=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): telnet-1.2-3.3.1 telnet-debuginfo-1.2-3.3.1 telnet-debugsource-1.2-3.3.1 telnet-server-1.2-3.3.1 telnet-server-debuginfo-1.2-3.3.1 References: https://bugzilla.suse.com/1129925

1 0

openSUSE-SU-2022:0184-2: important: Security update for json-c
by opensuse-security＠opensuse.org 17 Feb '22

17 Feb '22

openSUSE Security Update: Security update for json-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0184-2 Rating: important References: #1171479 Cross-References: CVE-2020-12762 CVSS scores: CVE-2020-12762 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-12762 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for json-c fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-184=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): json-c-debugsource-0.13-3.3.1 libjson-c-devel-0.13-3.3.1 libjson-c3-0.13-3.3.1 libjson-c3-debuginfo-0.13-3.3.1 - openSUSE Leap 15.4 (x86_64): libjson-c3-32bit-0.13-3.3.1 libjson-c3-32bit-debuginfo-0.13-3.3.1 - openSUSE Leap 15.4 (noarch): libjson-c-doc-0.13-3.3.1 References: https://www.suse.com/security/cve/CVE-2020-12762.html https://bugzilla.suse.com/1171479

1 0

openSUSE-RU-2022:0039-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 16 Feb '22

16 Feb '22

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0039-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: fwts was updated to version 22.01.00: * fwts-test: sync up the adding option for get next high monotonic count * uefirtmisc: add option to specify iterations get next high monitonic count * uefirtmisc: add checking the resources for testing * lib: fwts_version.h - update to V22.01.00 * debian: update changelog * fwts_acpica: skip unneccessary null check * s3: use system suspend default if --s3-sleep-type is not used * tpmevlogdump: add supporting several new types for event log dumping * auto-packager: mkpackage.sh: remove hirsute * tpmevlog: add supporting several new types for event log checking * lib: fwts_tpm.h: add new type definition Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-39=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-39=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2022-39=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 x86_64): fwts-22.01.00-bp153.2.15.1 fwts-debuginfo-22.01.00-bp153.2.15.1 fwts-debugsource-22.01.00-bp153.2.15.1 - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): fwts-22.01.00-bp152.4.27.1 fwts-debuginfo-22.01.00-bp152.4.27.1 fwts-debugsource-22.01.00-bp152.4.27.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): fwts-22.01.00-bp151.4.27.1 References:

1 0

openSUSE-SU-2022:0038-1: important: Security update for kafka
by opensuse-security＠opensuse.org 16 Feb '22

16 Feb '22

openSUSE Security Update: Security update for kafka ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0038-1 Rating: important References: #1193662 #1194842 #1194843 #1194844 Cross-References: CVE-2021-4104 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVSS scores: CVE-2021-4104 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-4104 (SUSE): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-23302 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23302 (SUSE): 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23305 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23307 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for kafka, kafka-kit fixes following issues: - Remove JDBCAppender, JMSSink, chainsaw from log4j jars during build to prevent bsc#1194842, CVE-2022-23302, bsc#1194843, CVE-2022-23305, bsc#1194844, CVE-2022-23307 - Rebuild with kafka-kit change to Remove JMSAppender from log4j jars during build to prevent bsc#1193662, CVE-2021-4104 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-38=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): kafka-source-2.1.0-bp153.2.6.1 - openSUSE Backports SLE-15-SP3 (x86_64): kafka-kit-2.1.0-bp153.2.6.1 References: https://www.suse.com/security/cve/CVE-2021-4104.html https://www.suse.com/security/cve/CVE-2022-23302.html https://www.suse.com/security/cve/CVE-2022-23305.html https://www.suse.com/security/cve/CVE-2022-23307.html https://bugzilla.suse.com/1193662 https://bugzilla.suse.com/1194842 https://bugzilla.suse.com/1194843 https://bugzilla.suse.com/1194844

1 0

openSUSE-RU-2022:0439-1: important: Recommended update for release-notes-sles
by maintenance＠opensuse.org 16 Feb '22

16 Feb '22

openSUSE Recommended Update: Recommended update for release-notes-sles ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0439-1 Rating: important References: #1192121 #1193843 #1195107 #933411 SLE-20555 SLE-22663 SLE-22690 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has four recommended fixes and contains three features can now be installed. Description: This update for release-notes-sles fixes the following issues: - 15.3.20220202 (tracked in bsc#933411) - Added kernel parameter changes (bsc#1195107) - Added note about IBM Power10 support (bsc#1192121) - Added note about deprecating XFS V4 (jsc#SLE-22663) - Updated note about unixODBC drivers in production (jsc#SLE-20555) - Added note about RTL8821CE support (jsc#SLE-22690) - Updated KillMode=none note (bsc#1193843) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-439=1 Package List: - openSUSE Leap 15.3 (noarch): release-notes-sles-15.3.20220202-150300.3.20.1 References: https://bugzilla.suse.com/1192121 https://bugzilla.suse.com/1193843 https://bugzilla.suse.com/1195107 https://bugzilla.suse.com/933411

1 0

openSUSE-SU-2022:0037-1: important: Security update for firejail
by opensuse-security＠opensuse.org 16 Feb '22

16 Feb '22

openSUSE Security Update: Security update for firejail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0037-1 Rating: important References: #1195880 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for firejail fixes the following issues: - Update Leap 15.3 package to 0.9.68 (boo#1195880) update to firejail 0.9.68: - security: on Ubuntu, the PPA is now recommended over the distro package - (see README.md) (#4748) - security: bugfix: private-cwd leaks access to the entire filesystem - (#4780); reported by Hugo Osvaldo Barrera - feature: remove (some) environment variables with auth-tokens (#4157) - feature: ALLOW_TRAY condition (#4510 #4599) - feature: add basic Firejail support to AppArmor base abstraction (#3226 - #4628) - feature: intrusion detection system (--ids-init, --ids-check) - feature: deterministic shutdown command (--deterministic-exit-code, - --deterministic-shutdown) (#928 #3042 #4635) - feature: noprinters command (#4607 #4827) - feature: network monitor (--nettrace) - feature: network locker (--netlock) (#4848) - feature: whitelist-ro profile command (#4740) - feature: disable pipewire with --nosound (#4855) - feature: Unset TMP if it doesn't exist inside of sandbox (#4151) - feature: Allow apostrophe in whitelist and blacklist (#4614) - feature: AppImage support in --build command (#4878) - modifs: exit code: distinguish fatal signals by adding 128 (#4533) - modifs: firecfg.config is now installed to /etc/firejail/ (#408 #4669) - modifs: close file descriptors greater than 2 (--keep-fd) (#4845) - modifs: nogroups now stopped causing certain system groups to be dropped, - which are now controlled by the relevant "no" options instead (such as - nosound -> drop audio group), which fixes device access issues on systems - not using (e)logind (such as with seatd) (#4632 #4725 #4732 #4851) - removal: --disable-whitelist at compile time - removal: whitelist=yes/no in /etc/firejail/firejail.config - bugfix: Fix sndio support (#4362 #4365) - bugfix: Error mounting tmpfs (MS_REMOUNT flag not being cleared) (#4387) - bugfix: --build clears the environment (#4460 #4467) - bugfix: firejail hangs with net parameter (#3958 #4476) - bugfix: Firejail does not work with a custom hosts file (#2758 #4560) - bugfix: --tracelog and --trace override /etc/ld.so.preload (#4558 #4586) - bugfix: PATH_MAX is undeclared on musl libc (#4578 #4579 #4583 #4606) - bugfix: firejail symlinks are not skipped with private-bin + globs (#4626) - bugfix: Firejail rejects empty arguments (#4395) - bugfix: firecfg does not work with symlinks (discord.desktop) (#4235) - bugfix: Seccomp list output goes to stdout instead of stderr (#4328) - bugfix: private-etc does not work with symlinks (#4887) - bugfix: Hardware key not detected on keepassxc (#4883) - build: allow building with address sanitizer (#4594) - build: Stop linking pthread (#4695) - build: Configure cleanup and improvements (#4712) - ci: add profile checks for sorting disable-programs.inc and - firecfg.config and for the required arguments in private-etc (#2739 #4643) - ci: pin GitHub actions to SHAs and use Dependabot to update them (#4774) - docs: Add new command checklist to CONTRIBUTING.md (#4413) - docs: Rework bug report issue template and add both a question and a - feature request template (#4479 #4515 #4561) - docs: fix contradictory descriptions of machine-id ("preserves" vs - "spoofs") (#4689) - docs: Document that private-bin and private-etc always accumulate (#4078) - new includes: whitelist-run-common.inc (#4288), disable-X11.inc (#4462) - new includes: disable-proc.inc (#4521) - removed includes: disable-passwordmgr.inc (#4454 #4461) - new profiles: microsoft-edge-beta, clion-eap, lifeograph, zim - new profiles: io.github.lainsce.Notejot, rednotebook, gallery-dl - new profiles: yt-dlp, goldendict, goldendict, bundle, cmake - new profiles: make, meson, pip, codium, telnet, ftp, OpenStego - new profiles: imv, retroarch, torbrowser, CachyBrowser, - new profiles: notable, RPCS3, wget2, raincat, conitop, 1passwd, - new profiles: Seafile, neovim, com.github.tchx84.Flatseal firejail 0.9.66: * deprecated --audit options, relpaced by jailcheck utility * deprecated follow-symlink-as-user from firejail.config * new firejail.config settings: private-bin, private-etc * new firejail.config settings: private-opt, private-srv * new firejail.config settings: whitelist-disable-topdir * new firejail.config settings: seccomp-filter-add * removed kcmp syscall from seccomp default filter * rename --noautopulse to keep-config-pulse * filtering environment variables * zsh completion * command line: --mkdir, --mkfile * --protocol now accumulates * jailtest utility for testing running sandboxes * faccessat2 syscall support * --private-dev keeps /dev/input * added --noinput to disable /dev/input * add support for subdirs in --private-etc * subdirs support in private-etc * input devices support in private-dev, --no-input * support trailing comments on profile lines * many new profiles - split shell completion into standard subpackages Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-37=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): firejail-0.9.68-bp153.2.3.1 References: https://bugzilla.suse.com/1195880

1 0

openSUSE-RU-2022:0035-1: Recommended update for openqa-mon
by maintenance＠opensuse.org 16 Feb '22

16 Feb '22

openSUSE Recommended Update: Recommended update for openqa-mon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0035-1 Rating: low References: #1129925 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openqa-mon fixes the following issues: Upstream version 0.25 - New interaction options for openqa-mon - openqa-revtui received the "reviewed" keyword - Add useragent - Fix incomplete display when job has more than 10 clones - Add --version to programs - Ignore skipped and cancelled jobs from notifications - openqa-revtui: Follow jobs - openqa-revtui: Mark failed jobs with bug refs as reviewed - Hotfix: Continuous program argument - Remove unncessary go version - Include openqa-mq and openqa-revtui - Add _service for the git and go forkflow - Ignore url fragments - Refactoring of the internal job ID process Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-35=1 openSUSE-SLE-15.3-2022-35=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): openqa-mon-0.25-lp153.2.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): telnet-1.2-3.3.1 telnet-debuginfo-1.2-3.3.1 telnet-debugsource-1.2-3.3.1 telnet-server-1.2-3.3.1 telnet-server-debuginfo-1.2-3.3.1 References: https://bugzilla.suse.com/1129925

1 0

openSUSE-RU-2022:0034-1: moderate: Recommended update for terraform-provider-vsphere
by maintenance＠opensuse.org 16 Feb '22

16 Feb '22

openSUSE Recommended Update: Recommended update for terraform-provider-vsphere ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0034-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for terraform-provider-vsphere fixes the following issues: terraform-provider-vsphere is updated to 1.18.3: * resource/custom_attribute: Fix id in error message when category is missing. (#1088) * resource/virtual_machine: Add vApp properties with OVF deployment. (#1082) * resource/host & resource/compute_cluster: Add arguments for specifying if cluster management should be handled in host or compute_cluster resource. (#1085) * resource/virtual_machine: Handle OVF argument validation during VM creation. (#1084) * resource/host: Disconnect rather than entering maintenance mode when deleting. (#1083) * resource/virtual_machine: Skip unexpected NIC entries. (#1067) * Respect session_persistence for REST sessions. (#1077) * resource/virtual_machine: Allow users to deploy OVF templates from both from local system and remote URL. (#1052) * resource/virtual_machine: Mark product_key as sensitive. (#1045) * resource/virtual_machine: Increase max hardware_version for vSphere v7.0. (#1056) * resource/virtual_machine: Fix to disk bus sorting. (#1039) * resource/virtual_machine: Only include hardware_version in CreateSpecs. (#1055) * Use built in session persistence in govmomi. (#1050) * resource/virtual_disk: Support VMDK files. (#987) * resource/virtual_machine: Fix disk controller sorting. (#1032) * resource/virtual_machine: Add support for hardware version tracking and upgrading. (#1020) * data/vsphere_network: Handle cases of network port groups with same name using distributed_virtual_switch_uuid. (#1001) * resource/virtual_machine: Fix working with orphaned devices. (#1005) * resource/virtual_machine: Ignore guest_id with content library. (#1014) * New Data Source: content_library (#985) * New Data Source: content_library_item (#985) * New Resource: content_library (#985) * New Resource: content_library_item (#985) * resource/virtual_machine: Add poweron_timeout option for the amount of time to give a VM to power on. (#990) * resource/virtual_machine: Optimize OS family query. (#959) * Migrate provider to Terraform plugin SDK. (#982) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-34=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): terraform-provider-vsphere-1.18.3-bp153.2.1 References:

1 0

openSUSE-RU-2022:0386-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 16 Feb '22

16 Feb '22

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0386-1 Rating: moderate References: #1192437 #1194440 #1194881 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for autoyast2 fixes the following issues: - Fix handling of add-on signature settings (bsc#1194881). - Properly merge the autoupgrade workflow when using the online medium (bsc#1192437, bsc#1194440). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-386=1 Package List: - openSUSE Leap 15.3 (noarch): autoyast2-4.3.96-150300.3.35.1 autoyast2-installation-4.3.96-150300.3.35.1 References: https://bugzilla.suse.com/1192437 https://bugzilla.suse.com/1194440 https://bugzilla.suse.com/1194881

1 0