March 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0099-1: Recommended update for tryton and proteus
by maintenance＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Recommended Update: Recommended update for tryton and proteus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0099-1 Rating: low References: #1193533 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for trytond packages and proteus fixes the following issues: - trytond_account was updated to version 5.0.23 bugfix release - trytond was updated to version 5.0.46 bugfix release - trytond_purchase was updated to version 5.0.11 bugfix release - proteus was updated to version 5.0.12 bugfix release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-99=1 openSUSE-SLE-15.3-2022-99=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-99=1 Package List: - openSUSE Leap 15.3 (noarch): proteus-5.0.12-lp153.2.3.3 trytond-5.0.46-lp153.2.3.1 trytond_account-5.0.23-lp153.2.3.3 trytond_purchase-5.0.11-lp153.2.3.3 yast2-samba-client-4.3.4-3.6.1 - openSUSE Backports SLE-15-SP3 (noarch): python2-pydot3-1.0.9-bp153.2.2.1 python2-python-sql-1.1.0-bp153.2.2.1 python3-pydot3-1.0.9-bp153.2.2.1 python3-python-sql-1.1.0-bp153.2.2.1 References: https://bugzilla.suse.com/1193533

1 0

openSUSE-SU-2022:0096-1: important: Security update for fish3
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for fish3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0096-1 Rating: important References: #1197139 Cross-References: CVE-2022-20001 CVSS scores: CVE-2022-20001 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-20001 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for fish3 fixes the following issues: - CVE-2022-20001: Navigating to a compromised git repository may lead to arbitrary code execution (bsc#1197139) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-96=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): fish3-3.3.1-bp153.2.10.1 fish3-devel-3.3.1-bp153.2.10.1 References: https://www.suse.com/security/cve/CVE-2022-20001.html https://bugzilla.suse.com/1197139

1 0

openSUSE-RU-2022:0101-1: moderate: Recommended update for trivy
by maintenance＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Recommended Update: Recommended update for trivy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0101-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: trivy was updated to fix the following issues: Update to version 0.24.4: * fix(docker): Getting images without a tag (#1852) * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801) Update to version 0.24.3: * chore(issue labels): added new labels (#1839) * refactor: clarify db update warning messages (#1808) * chore(ci): change trivy vulnerability scan for every day (#1838) * feat(helm): make Trivy service name configurable (#1825) * chore(deps): updated sprig to version v3.2.2. (#1814) * chore(deps): updated testcontainers-go to version v0.12.0 (#1822) * docs: add packages.config for .NET (#1823) * build: sign container image (#1668) * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.4.0 to 0.5.0 (#1778) * docs: fix Installation documentation (#1804) * fix(report): ensure json report got a final new line (#1797) * fix(terraform): resolve panics in defsec (#1811) * feat(docker): Label images based on OCI image spec (#1793) * fix(helm): indentation for ServiceAccount annotations (#1795) * fix(hcl): fix panic in hcl2json (#1791) * chore(helm): remove psp from helm manifest (#1315) * build: Replace `make protoc` with `for loop` to return an error (#1655) * fix: ASFF template to match ASFF schema (#1685) * feat(helm): Add support for server token (#1734) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-101=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 s390x x86_64): trivy-0.24.4-bp153.5.1 References:

1 0

openSUSE-SU-2022:1064-1: moderate: Security update for python2-numpy
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for python2-numpy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1064-1 Rating: moderate References: #1193907 #1193911 #1193913 Cross-References: CVE-2021-33430 CVE-2021-41495 CVE-2021-41496 CVSS scores: CVE-2021-33430 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-33430 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-41495 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-41495 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-41496 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-41496 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python2-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907). - CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1064=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): python-numpy_1_16_5-gnu-hpc-debugsource-1.16.5-150200.3.5.1 python2-numpy-gnu-hpc-1.16.5-150200.3.5.1 python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-debuginfo-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1 References: https://www.suse.com/security/cve/CVE-2021-33430.html https://www.suse.com/security/cve/CVE-2021-41495.html https://www.suse.com/security/cve/CVE-2021-41496.html https://bugzilla.suse.com/1193907 https://bugzilla.suse.com/1193911 https://bugzilla.suse.com/1193913

1 0

openSUSE-SU-2022:1065-1: important: Security update for kernel-firmware
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1065-1 Rating: important References: #1186938 #1188662 #1192953 #1195786 #1196333 Cross-References: CVE-2021-0066 CVE-2021-0071 CVE-2021-0072 CVE-2021-0076 CVE-2021-0161 CVE-2021-0164 CVE-2021-0165 CVE-2021-0166 CVE-2021-0168 CVE-2021-0170 CVE-2021-0172 CVE-2021-0173 CVE-2021-0174 CVE-2021-0175 CVE-2021-0176 CVE-2021-0183 CVE-2021-33139 CVE-2021-33155 CVSS scores: CVE-2021-0066 (NVD) : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-0066 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-0071 (NVD) : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-0072 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0072 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0076 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-0076 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-0161 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0161 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0164 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-0164 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-0165 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0165 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0166 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0166 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0168 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0168 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0170 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0170 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0172 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0172 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0173 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0173 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0174 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0174 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0175 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0175 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0176 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2021-0176 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2021-0183 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0183 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-33139 (NVD) : 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33139 (SUSE): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33155 (NVD) : 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33155 (SUSE): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: This update for kernel-firmware fixes the following issues: Update Intel Wireless firmware for 9xxx (INTEL-SA-00539, bsc#1196333): CVE-2021-0161: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0164: Improper access control in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access. CVE-2021-0165: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0066: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access. CVE-2021-0166: Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0168: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0170: Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an authenticated user to potentially enable information disclosure via local access. CVE-2021-0172: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0173: Improper Validation of Consistency within input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0174: Improper Use of Validation Framework in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0175: Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0076: Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable denial of service via local access. CVE-2021-0176: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable denial of service via local access. CVE-2021-0183: Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0072: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable information disclosure via local access. CVE-2021-0071: Improper input validation in firmware for some Intel PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. Update Intel Bluetooth firmware (INTEL-SA-00604,bsc#1195786): - CVE-2021-33139: Improper conditions check in firmware for some Intel Wireless Bluetooth and Killer Bluetooth products before may allow an authenticated user to potentially enable denial of service via adjacent access. - CVE-2021-33155: Improper input validation in firmware for some Intel Wireless Bluetooth and Killer Bluetooth products before may allow an authenticated user to potentially enable denial of service via adjacent access. Bug fixes: - Updated the AMD SEV firmware (bsc#1186938) - Reduced the LZMA2 dictionary size (bsc#1188662) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1065=1 Package List: - openSUSE Leap 15.3 (noarch): kernel-firmware-20210208-150300.4.7.1 kernel-firmware-all-20210208-150300.4.7.1 kernel-firmware-amdgpu-20210208-150300.4.7.1 kernel-firmware-ath10k-20210208-150300.4.7.1 kernel-firmware-ath11k-20210208-150300.4.7.1 kernel-firmware-atheros-20210208-150300.4.7.1 kernel-firmware-bluetooth-20210208-150300.4.7.1 kernel-firmware-bnx2-20210208-150300.4.7.1 kernel-firmware-brcm-20210208-150300.4.7.1 kernel-firmware-chelsio-20210208-150300.4.7.1 kernel-firmware-dpaa2-20210208-150300.4.7.1 kernel-firmware-i915-20210208-150300.4.7.1 kernel-firmware-intel-20210208-150300.4.7.1 kernel-firmware-iwlwifi-20210208-150300.4.7.1 kernel-firmware-liquidio-20210208-150300.4.7.1 kernel-firmware-marvell-20210208-150300.4.7.1 kernel-firmware-media-20210208-150300.4.7.1 kernel-firmware-mediatek-20210208-150300.4.7.1 kernel-firmware-mellanox-20210208-150300.4.7.1 kernel-firmware-mwifiex-20210208-150300.4.7.1 kernel-firmware-network-20210208-150300.4.7.1 kernel-firmware-nfp-20210208-150300.4.7.1 kernel-firmware-nvidia-20210208-150300.4.7.1 kernel-firmware-platform-20210208-150300.4.7.1 kernel-firmware-prestera-20210208-150300.4.7.1 kernel-firmware-qlogic-20210208-150300.4.7.1 kernel-firmware-radeon-20210208-150300.4.7.1 kernel-firmware-realtek-20210208-150300.4.7.1 kernel-firmware-serial-20210208-150300.4.7.1 kernel-firmware-sound-20210208-150300.4.7.1 kernel-firmware-ti-20210208-150300.4.7.1 kernel-firmware-ueagle-20210208-150300.4.7.1 kernel-firmware-usb-network-20210208-150300.4.7.1 ucode-amd-20210208-150300.4.7.1 References: https://www.suse.com/security/cve/CVE-2021-0066.html https://www.suse.com/security/cve/CVE-2021-0071.html https://www.suse.com/security/cve/CVE-2021-0072.html https://www.suse.com/security/cve/CVE-2021-0076.html https://www.suse.com/security/cve/CVE-2021-0161.html https://www.suse.com/security/cve/CVE-2021-0164.html https://www.suse.com/security/cve/CVE-2021-0165.html https://www.suse.com/security/cve/CVE-2021-0166.html https://www.suse.com/security/cve/CVE-2021-0168.html https://www.suse.com/security/cve/CVE-2021-0170.html https://www.suse.com/security/cve/CVE-2021-0172.html https://www.suse.com/security/cve/CVE-2021-0173.html https://www.suse.com/security/cve/CVE-2021-0174.html https://www.suse.com/security/cve/CVE-2021-0175.html https://www.suse.com/security/cve/CVE-2021-0176.html https://www.suse.com/security/cve/CVE-2021-0183.html https://www.suse.com/security/cve/CVE-2021-33139.html https://www.suse.com/security/cve/CVE-2021-33155.html https://bugzilla.suse.com/1186938 https://bugzilla.suse.com/1188662 https://bugzilla.suse.com/1192953 https://bugzilla.suse.com/1195786 https://bugzilla.suse.com/1196333

1 0

openSUSE-SU-2022:0097-1: important: Security update for icingaweb2
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for icingaweb2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0097-1 Rating: important References: #1196911 #1196913 Cross-References: CVE-2022-24714 CVE-2022-24715 CVSS scores: CVE-2022-24714 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-24715 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24715 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for icingaweb2 fixes the following issues: icingaweb2 was updated to 2.8.6 This is a security release. * Security Fixes - CVE-2022-24715: SSH resources allow arbitrary code execution for authenticated users (GHSA-v9mv-h52f-7g63 boo#1196911) - CVE-2022-24714: Unwanted disclosure of hosts and related data, linked to decommissioned services (GHSA-qcmg-vr56-x9wf boo#1196913) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-97=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): icingacli-2.8.6-bp153.2.3.1 icingaweb2-2.8.6-bp153.2.3.1 icingaweb2-common-2.8.6-bp153.2.3.1 icingaweb2-vendor-HTMLPurifier-2.8.6-bp153.2.3.1 icingaweb2-vendor-JShrink-2.8.6-bp153.2.3.1 icingaweb2-vendor-Parsedown-2.8.6-bp153.2.3.1 icingaweb2-vendor-dompdf-2.8.6-bp153.2.3.1 icingaweb2-vendor-lessphp-2.8.6-bp153.2.3.1 icingaweb2-vendor-zf1-2.8.6-bp153.2.3.1 php-Icinga-2.8.6-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-24714.html https://www.suse.com/security/cve/CVE-2022-24715.html https://bugzilla.suse.com/1196911 https://bugzilla.suse.com/1196913

1 0

openSUSE-RU-2022:1066-1: important: Recommended update for mlocate
by maintenance＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Recommended Update: Recommended update for mlocate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1066-1 Rating: important References: #1195144 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mlocate fixes the following issues: - Require `apparmor-abstractions`, because `apparmor.service` will fail if `mlocate` is installed. (bsc#1195144) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1066=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): mlocate-0.26-150100.7.3.2 mlocate-debuginfo-0.26-150100.7.3.2 mlocate-debugsource-0.26-150100.7.3.2 - openSUSE Leap 15.3 (noarch): mlocate-lang-0.26-150100.7.3.2 References: https://bugzilla.suse.com/1195144

1 0

openSUSE-SU-2022:0100-1: moderate: Security update for abcm2ps
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for abcm2ps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0100-1 Rating: moderate References: #1197355 Cross-References: CVE-2021-32434 CVE-2021-32435 CVE-2021-32436 CVSS scores: CVE-2021-32434 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-32435 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-32436 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for abcm2ps fixes the following issues: Update to 8.14.13: * fix: don't start/stop slurs above/below decorations * fix: crash when too many notes in a grace note sequence (#102) * fix: crash when too big value in M: (#103) * fix: loop or crash when too big width of y (space) (#104) * fix: bad font definition with SVG output when spaces in font name * fix: bad check of note length again (#106) * fix: handle %%staffscale at the global level (#108) * fix: bad vertical offset of lyrics when mysic line starts with empty staves Update to 8.14.12: Fixes: * crash when "%%break 1" and no measure bar in the tune * crash when duplicated voice ending on %%staves with repeat variant * crash when voice duplication with symbols without width * crash or bad output when null value in %%scale * problem when only bars in 2 voices followed %%staves of the second voice only * crash when tuplet error in grace note sequence * crash when grace note with empty tuplet * crash when many broken rhythms after a single grace note * access outside the deco array when error in U: * crash when !xstem! with no note in the previous voice * crash on tuplet without any note/rest * crash when grace notes at end of line and voice overlay * crash when !trem2! at start of a grace note sequence * crash when wrong duration in 2 voice overlays and bad ties * crash when accidental without a note at start of line after K: (CVE-2021-32435) * array overflow when wrong duration in voice overlay (CVE-2021-32434, CVE-2021-32436) * loss of left margin after first page since previous commit * no respect of %%leftmargin with -E or -g * bad placement of chord symbols when in a music line with only invisible rests Syntax: * Accept and remove one or two '%'s at start of all %%beginxxx lines Generation: * Move the CSS from XHTML to SVG Update to 8.14.11: * fix: error "'staffwidth' too small" when generating sample3.abc Update to 8.14.10: * fix: bad glyph when defined by SVG containing 'v' in * fix: bad check of note length since commit 191fa55 * fix: memory corruption when error in %%staves/%%score * fix: crash when too big note duration * fix: crash when staff width too small Update to 8.14.9: * fix: bad natural accidental when %%MIDI temperamentequal Update to 8.14.8: * fix: no respect the width in %%staffbreak * fix: don't draw a staff when only %%staffbreak inside * fix: bad repeat bracket when continued on next line, line starting by a bar * fix: bad tuplet bracket again when at end of a voice overlay sequence * fix: bad tuplet bracket when at end of a voice overlay sequence * handle '%%MIDI temperamentequal ' * accept '^1' and '_1' as microtone accidentals Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-100=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): abcm2ps-8.14.13-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-32434.html https://www.suse.com/security/cve/CVE-2021-32435.html https://www.suse.com/security/cve/CVE-2021-32436.html https://bugzilla.suse.com/1197355

1 0

openSUSE-SU-2022:0098-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0098-1 Rating: moderate References: #1196905 #1196908 #1196952 Cross-References: CVE-2021-41239 CVE-2021-41241 CVE-2021-41741 CVSS scores: CVE-2021-41239 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-41239 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: nextcloud was updated to 21.0.9: - CVE-2021-41239 (CWE-200): user enumeration setting not obeyed in User Status API (boo#1196905) - CVE-2021-41241 (CWE-863): groupfolders advanced permissions is not obeyed for subfolders (boo#1196908) - CVE-2021-41741 (CWE-400): High memory usage for generating preview of broken image (boo#1196952) - For more changes see https://nextcloud.com/changelog/#21-0-9 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-98=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): nextcloud-21.0.9-bp153.2.12.1 nextcloud-apache-21.0.9-bp153.2.12.1 References: https://www.suse.com/security/cve/CVE-2021-41239.html https://www.suse.com/security/cve/CVE-2021-41241.html https://www.suse.com/security/cve/CVE-2021-41741.html https://bugzilla.suse.com/1196905 https://bugzilla.suse.com/1196908 https://bugzilla.suse.com/1196952

1 0

openSUSE-SU-2022:0095-1: moderate: Security update for openSUSE-build-key
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for openSUSE-build-key ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0095-1 Rating: moderate References: #1197293 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for openSUSE-build-key fixes the following issues: - Disabled the SLE11 build key as SLE11 is EOL now, also key was 1024bit RSA (removed gpg-pubkey-307e3d54-5aaa90a5.asc) Also obsolete old build key. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-95=1 Package List: - openSUSE Leap 15.3 (noarch): openSUSE-build-key-1.0-lp153.4.8.1 References: https://bugzilla.suse.com/1197293

1 0

openSUSE-RU-2022:1047-1: moderate: Recommended update for pam
by maintenance＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Recommended Update: Recommended update for pam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1047-1 Rating: moderate References: #1196093 #1197024 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for pam fixes the following issues: - Define _pam_vendordir as the variable is needed by systemd and others. (bsc#1196093) - Between allocating the variable "ai" and free'ing them, there are two "return NO" were we don't free this variable. This patch inserts freaddrinfo() calls before the "return NO;"s. (bsc#1197024) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1047=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1047=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): pam-1.3.0-150000.6.55.3 pam-debuginfo-1.3.0-150000.6.55.3 pam-debugsource-1.3.0-150000.6.55.3 pam-devel-1.3.0-150000.6.55.3 pam-extra-1.3.0-150000.6.55.3 pam-extra-debuginfo-1.3.0-150000.6.55.3 - openSUSE Leap 15.4 (x86_64): pam-32bit-1.3.0-150000.6.55.3 pam-32bit-debuginfo-1.3.0-150000.6.55.3 pam-devel-32bit-1.3.0-150000.6.55.3 pam-extra-32bit-1.3.0-150000.6.55.3 pam-extra-32bit-debuginfo-1.3.0-150000.6.55.3 - openSUSE Leap 15.4 (noarch): pam-doc-1.3.0-150000.6.55.3 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): pam-1.3.0-150000.6.55.3 pam-debuginfo-1.3.0-150000.6.55.3 pam-debugsource-1.3.0-150000.6.55.3 pam-devel-1.3.0-150000.6.55.3 pam-extra-1.3.0-150000.6.55.3 pam-extra-debuginfo-1.3.0-150000.6.55.3 - openSUSE Leap 15.3 (noarch): pam-doc-1.3.0-150000.6.55.3 - openSUSE Leap 15.3 (x86_64): pam-32bit-1.3.0-150000.6.55.3 pam-32bit-debuginfo-1.3.0-150000.6.55.3 pam-devel-32bit-1.3.0-150000.6.55.3 pam-extra-32bit-1.3.0-150000.6.55.3 pam-extra-32bit-debuginfo-1.3.0-150000.6.55.3 References: https://bugzilla.suse.com/1196093 https://bugzilla.suse.com/1197024

1 0

openSUSE-SU-2022:1061-1: important: Security update for zlib
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1061-1 Rating: important References: #1197459 Cross-References: CVE-2018-25032 CVSS scores: CVE-2018-25032 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for zlib fixes the following issues: - CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1061=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1061=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libminizip1-1.2.11-150000.3.30.1 libminizip1-debuginfo-1.2.11-150000.3.30.1 libz1-1.2.11-150000.3.30.1 libz1-debuginfo-1.2.11-150000.3.30.1 minizip-devel-1.2.11-150000.3.30.1 zlib-debugsource-1.2.11-150000.3.30.1 zlib-devel-1.2.11-150000.3.30.1 zlib-devel-static-1.2.11-150000.3.30.1 - openSUSE Leap 15.4 (x86_64): libminizip1-32bit-1.2.11-150000.3.30.1 libminizip1-32bit-debuginfo-1.2.11-150000.3.30.1 libz1-32bit-1.2.11-150000.3.30.1 libz1-32bit-debuginfo-1.2.11-150000.3.30.1 zlib-devel-32bit-1.2.11-150000.3.30.1 zlib-devel-static-32bit-1.2.11-150000.3.30.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libminizip1-1.2.11-150000.3.30.1 libminizip1-debuginfo-1.2.11-150000.3.30.1 libz1-1.2.11-150000.3.30.1 libz1-debuginfo-1.2.11-150000.3.30.1 minizip-devel-1.2.11-150000.3.30.1 zlib-debugsource-1.2.11-150000.3.30.1 zlib-devel-1.2.11-150000.3.30.1 zlib-devel-static-1.2.11-150000.3.30.1 - openSUSE Leap 15.3 (x86_64): libminizip1-32bit-1.2.11-150000.3.30.1 libminizip1-32bit-debuginfo-1.2.11-150000.3.30.1 libz1-32bit-1.2.11-150000.3.30.1 libz1-32bit-debuginfo-1.2.11-150000.3.30.1 zlib-devel-32bit-1.2.11-150000.3.30.1 zlib-devel-static-32bit-1.2.11-150000.3.30.1 References: https://www.suse.com/security/cve/CVE-2018-25032.html https://bugzilla.suse.com/1197459

1 0

openSUSE-RU-2022:0093-1: important: Recommended update for helm
by maintenance＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Recommended Update: Recommended update for helm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0093-1 Rating: important References: #1192489 SLE-21196 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for helm fixes the following issues: Helm was updated to version 3.8.0 (jsc#SLE-21196): * OCI registry support for charts is now generally available. It has graduated out of being an experiment. Some changes over Helm 3.7 include: * When setting a chart in the dependencies as OCI the version can be set to a range, like other dependencies * SemVer tags that include build information can be pushed and used. OCI registries don't support + as a tag character. Helm translates the + to _ when stored as a tag * helm registry login now follows the same structure as the Docker CLI for storing credentials. The same location for registry configuration can be passed to both Helm and the Docker CLI * A --list-repo-url flag has been added to helm search hub to quickly show the repositories URL. * Release names are validated during installation * Added support for installing Helm on Windows via Cygwin * Added support for Kubernetes 1.23 Update to version 3.6.3: * Ensure RawPath match Path when resolving reference * Set Helm as manager for managedFields * fix(dep update): helm dep update is not respecting the "version" stipulated in the requirements * fix(doc): fix kube client interface doc. (#9882) * use TLS client information from repo config when downloading a chart * Adding test for user/pass without repo on Helm install * Fix the url being set by WithURL on the getters * tweak basic handling * keep existing behavior of returning ErrReleaseNotFound when release(s) failed to decode * fix(sql storage): Query() should return ErrReleaseNotFound immediately when no records are found * Add Test cases for repository-config without file extension * Correctly determine repository-config lockfile path * Fixed Test * Added test for lint mode * Fail message is now the same as the required message. Fixed #8973 Helm function 'fail' should not fail when doing 'helm lint' * fix helm dep build/update doesn't inherit --insecure-skip-tls-verify from helm repo add Update to version 3.6.2: * Fix the url being set by WithURL on the getters * Adding test for user/pass without repo on Helm install Update to version 3.6.1: * tweak basic handling Update to version 3.6.0: * bump version to v3.6.0 * chore: update testdata to use the new ingress template * feat: add networking.k8s.io/v1 support to ingress template * Moving myself to maintainer emeritus * upgrade to kubernetes 1.21 * Fix capabilities changes leaking into other tests * Add tests for template --kube-version * feat(helm): Support setting --kube-version * fix(ci) update ci to use main branch * Update references to default branch name as it has changed to main * Add ReadyChecker to decouple ready check logic from --wait * chore(deps): Bump github.com/deislabs/oras from v0.10.0 to v0.11.1 and drop replace * Add/update deprecation notices * Wrap validation error instead of recreating * Move default to avoid nil check * Add name validation rules for object kinds * Improve description for version flag. * chore: Spelling (#9410) * chore(deps): Bump k8s.io/klog/v2 from 2.5.0 to 2.8.0 * chore(deps): Bump github.com/containerd/containerd from 1.4.3 to 1.4.4 * chore(deps): Bump github.com/lib/pq from 1.9.0 to 1.10.0 * Bump github.com/spf13/cobra from 1.1.1 to 1.1.3 * Cleanup mpodule dependencies * feat(comp): Uninstall accepts multiple releases * new key for technosophos (#9478) * chore(deps): Bump github.com/sirupsen/logrus from 1.7.0 to 1.8.1 * add flag trimpath in the go build command * stick to 0.20.4 * updated unit tests to conform with helm best practices * corrected order of helm lint coalescing of multiple values files * upgrade to v0.21.0-beta.0 * Fix the example for --time-format flag * Use kube libraries v0.20.4 * Added s390x support to get script * add test to ensure OCIGetter registryClient is set * initialize registry client in oci getter * feat(comp): Add descriptions for output format * feat(comp): Add descriptions for --version comp * feat(comp): Add descriptions for revision comp * feat(comp): Add descriptions for kube-context comp * feat(comp): Add descriptions for plugin completion * feat(comp): Add descriptions for release name comp * feat(comp): Improve completion for plugin commands * fix(cmd): Show that flags can be used for zsh/fish * use relative linking * formatting * more words * keep it concise * docs(CONTRIBUTING): writing a HIP * update test expectation for new template error string * Add darwin/arm64 (Apple Silicon) support * fix windows tests * fix(test): Increase golangci-lint timeout * fix(helm): get/get-helm-3 whitespace support in runAsRoot * fix release sha256 * feat(comp): Completion for the docs --type flag * Bump github.com/jmoiron/sqlx from 1.2.0 to 1.3.1 * Updating golangci-lint to 1.36.0 * chore(go.mod): bump Masterminds/{spring,goutils} and deislabs/oras * fix(*): Validate metadata semver and printable characters * Bump github.com/mitchellh/copystructure from 1.0.0 to 1.1.1 * closes #9312 * Fix-9253: Change the deprecated charts repo URL in release notes * Fix `helm list --offset` cli help string * Define GPG_PUBRING to make pubring configurable * Bump github.com/mattn/go-shellwords from 1.0.10 to 1.0.11 * Bump k8s.io/klog/v2 from 2.4.0 to 2.5.0 * Upgrade to oras v0.9.0 (#9269) * use kube libraries v0.20.2 * print warning message instead of debug message when ~/.config exists but is not accessible * Update default ingress values section to correspond with template * chore(Makefile): add target to generate golden files * Fix dep build with OCI based charts * Fix typo in comment * bump version to * fix(Makefile): rebuild the binary if go.mod has changed * fix(pkg/storage): If storage.Create fails to clean up recent release versions, return an error * test(pkg/storage): Verify that storage.Create returns an error if it fails to clean up least-recent release versions * Bump github.com/containerd/containerd from 1.3.4 to 1.4.3 * Improve the console output for resource policy keep to align with helm2. Update to version 3.5.4: * Add/update deprecation notices * Wrap validation error instead of recreating * Move default to avoid nil check * Add name validation rules for object kinds * Use kube libraries v0.20.4 Update to version 3.5.3: * Fix the example for --time-format flag * Improve the console output for resource policy keep to align with helm2. * test(pkg/storage): Verify that storage.Create returns an error if it fails to clean up least-recent release versions * fix(pkg/storage): If storage.Create fails to clean up recent release versions, return an error * fix(test): Increase golangci-lint timeout * fix release sha256 * Fix-9253: Change the deprecated charts repo URL in release notes * Update default ingress values section to correspond with template * use kube libraries v0.20.2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-93=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-93=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenssl-1_1-devel-1.1.1d-11.38.1 libopenssl1_1-1.1.1d-11.38.1 libopenssl1_1-debuginfo-1.1.1d-11.38.1 libopenssl1_1-hmac-1.1.1d-11.38.1 openssl-1_1-1.1.1d-11.38.1 openssl-1_1-debuginfo-1.1.1d-11.38.1 openssl-1_1-debugsource-1.1.1d-11.38.1 - openSUSE Leap 15.3 (noarch): openssl-1_1-doc-1.1.1d-11.38.1 - openSUSE Leap 15.3 (x86_64): libopenssl-1_1-devel-32bit-1.1.1d-11.38.1 libopenssl1_1-32bit-1.1.1d-11.38.1 libopenssl1_1-32bit-debuginfo-1.1.1d-11.38.1 libopenssl1_1-hmac-32bit-1.1.1d-11.38.1 - openSUSE Backports SLE-15-SP3 (i586 ppc64le s390x x86_64): helm-3.8.0-bp153.2.3.4 - openSUSE Backports SLE-15-SP3 (noarch): helm-bash-completion-3.8.0-bp153.2.3.4 helm-fish-completion-3.8.0-bp153.2.3.4 helm-zsh-completion-3.8.0-bp153.2.3.4 References: https://bugzilla.suse.com/1192489

1 0

openSUSE-SU-2022:1059-1: important: Security update for salt
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1059-1 Rating: important References: #1197417 Cross-References: CVE-2022-22934 CVE-2022-22935 CVE-2022-22936 CVE-2022-22941 CVSS scores: CVE-2022-22934 (SUSE): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22935 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-22936 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-22941 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for salt fixes the following issues: - CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417) - CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417) - CVE-2022-22936: Prevent job and fileserver replays (bsc#1197417) - CVE-2022-22941: Fixed targeting bug, especially visible when using syndic and user auth. (bsc#1197417) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1059=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python3-salt-3002.2-150300.53.10.1 salt-3002.2-150300.53.10.1 salt-api-3002.2-150300.53.10.1 salt-cloud-3002.2-150300.53.10.1 salt-doc-3002.2-150300.53.10.1 salt-master-3002.2-150300.53.10.1 salt-minion-3002.2-150300.53.10.1 salt-proxy-3002.2-150300.53.10.1 salt-ssh-3002.2-150300.53.10.1 salt-standalone-formulas-configuration-3002.2-150300.53.10.1 salt-syndic-3002.2-150300.53.10.1 salt-transactional-update-3002.2-150300.53.10.1 - openSUSE Leap 15.3 (noarch): salt-bash-completion-3002.2-150300.53.10.1 salt-fish-completion-3002.2-150300.53.10.1 salt-zsh-completion-3002.2-150300.53.10.1 References: https://www.suse.com/security/cve/CVE-2022-22934.html https://www.suse.com/security/cve/CVE-2022-22935.html https://www.suse.com/security/cve/CVE-2022-22936.html https://www.suse.com/security/cve/CVE-2022-22941.html https://bugzilla.suse.com/1197417

1 0

openSUSE-RU-2022:1046-1: moderate: Recommended update for firewalld
by maintenance＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Recommended Update: Recommended update for firewalld ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1046-1 Rating: moderate References: #1191837 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for firewalld fixes the following issues: - Fixed ability to setting the default zone to external during installation (bsc#1191837) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1046=1 Package List: - openSUSE Leap 15.3 (noarch): firewall-applet-0.9.3-150300.3.3.1 firewall-config-0.9.3-150300.3.3.1 firewall-macros-0.9.3-150300.3.3.1 firewalld-0.9.3-150300.3.3.1 firewalld-lang-0.9.3-150300.3.3.1 python3-firewall-0.9.3-150300.3.3.1 References: https://bugzilla.suse.com/1191837

1 0

openSUSE-RU-2022:0094-1: moderate: Recommended update for kiwi-templates-JeOS
by maintenance＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Recommended Update: Recommended update for kiwi-templates-JeOS ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0094-1 Rating: moderate References: #1194484 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kiwi-templates-JeOS fixes the following issues: - Add rw to the default boot options to fix /etc/machine-id setup (boo#1194484, see also gh#OSInside/kiwi#1650) - Don't delete the dbus machine-id, it's a symlink Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-94=1 Package List: - openSUSE Leap 15.3 (noarch): kiwi-templates-JeOS-15.3-lp153.7.3.1 References: https://bugzilla.suse.com/1194484

1 0

openSUSE-SU-2022:1037-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1037-1 Rating: important References: #1176447 #1176774 #1178134 #1179439 #1181147 #1191428 #1192273 #1193731 #1193787 #1193864 #1194463 #1194516 #1195211 #1195254 #1195403 #1195612 #1195897 #1195905 #1195939 #1195949 #1195987 #1196079 #1196095 #1196132 #1196155 #1196299 #1196301 #1196433 #1196468 #1196472 #1196627 #1196723 #1196779 #1196830 #1196836 #1196866 #1196868 Cross-References: CVE-2021-0920 CVE-2021-39657 CVE-2021-44879 CVE-2022-0487 CVE-2022-0617 CVE-2022-0644 CVE-2022-24448 CVE-2022-24958 CVE-2022-24959 CVE-2022-25258 CVE-2022-25636 CVE-2022-26490 CVSS scores: CVE-2021-0920 (NVD) : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0920 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-39657 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2021-44879 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-44879 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0487 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-0487 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0617 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0617 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0644 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24448 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2022-24448 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-24958 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24958 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24959 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24959 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-25258 (NVD) : 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-25258 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25636 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25636 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26490 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26490 (SUSE): 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has 25 fixes is now available. Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to nf_tables_offload (bsc#1196299). - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830). - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2022-24448: Fixed an issue if an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612). - CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079) - CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd(). (bsc#1196155) - CVE-2022-25258: The USB Gadget subsystem lacked certain validation of interface OS descriptor requests, which could have lead to memory corruption (bsc#1196096). - CVE-2022-24958: drivers/usb/gadget/legacy/inode.c mishandled dev->buf release (bsc#1195905). - CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897). - CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987). - CVE-2021-0920: Fixed a local privilege escalation due to a use-after-free vulnerability in unix_scm_to_skb of af_unix (bsc#1193731). - CVE-2021-39657: Fixed an information leak in the Universal Flash Storage subsystem (bsc#1193864). The following non-security bugs were fixed: - ALSA: intel_hdmi: Fix reference to PCM buffer address (git-fixes). - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (git-fixes). - ARM: Fix kgdb breakpoint for Thumb2 (git-fixes). - ASoC: cs4265: Fix the duplicated control name (git-fixes). - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (git-fixes). - ASoC: rt5668: do not block workqueue if card is unbound (git-fixes). - ASoC: rt5682: do not block workqueue if card is unbound (git-fixes). - Bluetooth: btusb: Add missing Chicony device for Realtek RTL8723BE (bsc#1196779). - EDAC/altera: Fix deferred probing (bsc#1178134). - HID: add mapping for KEY_ALL_APPLICATIONS (git-fixes). - HID: add mapping for KEY_DICTATE (git-fixes). - Hand over the maintainership to SLE15-SP3 maintainers - IB/hfi1: Correct guard on eager buffer deallocation (git-fixes). - IB/hfi1: Fix early init panic (git-fixes). - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (git-fixes). - IB/hfi1: Insure use of smp_processor_id() is preempt disabled (git-fixes). - IB/rdmavt: Validate remote_addr during loopback atomic tests (git-fixes). - Input: clear BTN_RIGHT/MIDDLE on buttonpads (git-fixes). - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (git-fixes). - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (git-fixes). - RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" (git-fixes). - RDMA/cma: Do not change route.addr.src_addr outside state checks (bsc#1181147). - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry (git-fixes). - RDMA/cma: Remove open coding of overflow checking for private_data_len (git-fixes). - RDMA/core: Do not infoleak GRH fields (git-fixes). - RDMA/core: Let ib_find_gid() continue search even after empty entry (git-fixes). - RDMA/cxgb4: Set queue pair state when being queried (git-fixes). - RDMA/hns: Validate the pkey index (git-fixes). - RDMA/ib_srp: Fix a deadlock (git-fixes). - RDMA/mlx4: Do not continue event handler after memory allocation failure (git-fixes). - RDMA/rtrs-clt: Fix possible double free in error case (jsc#SLE-15176). - RDMA/rxe: Fix a typo in opcode name (git-fixes). - RDMA/siw: Fix broken RDMA Read Fence/Resume logic (git-fixes). - RDMA/uverbs: Check for null return of kmalloc_array (git-fixes). - RDMA/uverbs: Remove the unnecessary assignment (git-fixes). - Revert "USB: serial: ch341: add new Product ID for CH341A" (git-fixes). - SUNRPC: avoid race between mod_timer() and del_timer_sync() (bnc#1195403). - USB: gadget: validate endpoint index for xilinx udc (git-fixes). - USB: gadget: validate interface OS descriptor requests (git-fixes). - USB: hub: Clean up use of port initialization schemes and retries (git-fixes). - USB: serial: option: add Telit LE910R1 compositions (git-fixes). - USB: serial: option: add support for DW5829e (git-fixes). - USB: zaurus: support another broken Zaurus (git-fixes). - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (git-fixes). - asix: fix uninit-value in asix_mdio_read() (git-fixes). - ata: pata_hpt37x: disable primary channel on HPT371 (git-fixes). - batman-adv: Do not expect inter-netns unique iflink indices (git-fixes). - batman-adv: Request iflink once in batadv-on-batadv check (git-fixes). - batman-adv: Request iflink once in batadv_get_real_netdevice (git-fixes). - blk-mq: do not free tags if the tag_set is used by other device in queue initialztion (bsc#1193787). - bnxt_en: Fix active FEC reporting to ethtool (jsc#SLE-16649). - bnxt_en: Fix incorrect multicast rx mask setting when not requested (git-fixes). - bnxt_en: Fix occasional ethtool -t loopback test failures (git-fixes). - bnxt_en: Fix offline ethtool selftest with RDMA enabled (git-fixes). - bonding: force carrier update when releasing slave (git-fixes). - can: gs_usb: change active_channels's type from atomic_t to u8 (git-fixes). - cgroup-v1: Correct privileges check in release_agent writes (bsc#1196723). - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning (bsc#1196868). - clk: jz4725b: fix mmc0 clock gating (git-fixes). - cpufreq: schedutil: Use kobject release() method to free (git-fixes) - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() (bsc#1196866). - cputime, cpuacct: Include guest time in user time in (git-fixes) - dma-direct: Fix potential NULL pointer dereference (bsc#1196472 ltc#192278). - dma-mapping: Allow mixing bypass and mapped DMA operation (bsc#1196472 ltc#192278). - dmaengine: shdma: Fix runtime PM imbalance on error (git-fixes). - drm/amdgpu: disable MMHUB PG for Picasso (git-fixes). - drm/edid: Always set RGB444 (git-fixes). - drm/i915/dg1: Wait for pcode/uncore handshake at startup (bsc#1195211). - drm/i915/gen11+: Only load DRAM information from pcode (bsc#1195211). - drm/i915: Nuke not needed members of dram_info (bsc#1195211). - drm/i915: Remove memory frequency calculation (bsc#1195211). - drm/i915: Rename is_16gb_dimm to wm_lv_0_adjust_needed (bsc#1195211). - efivars: Respect "block" flag in efivar_entry_set_safe() (git-fixes). - exfat: fix i_blocks for files truncated over 4 GiB (git-fixes). - exfat: fix incorrect loading of i_blocks for large files (git-fixes). - firmware: arm_scmi: Remove space in MODULE_ALIAS name (git-fixes). - gpio: rockchip: Reset int_bothedge when changing trigger (git-fixes). - gpio: tegra186: Fix chip_data type confusion (git-fixes). - gtp: remove useless rcu_read_lock() (git-fixes). - hamradio: fix macro redefine warning (git-fixes). - i2c: bcm2835: Avoid clock stretching timeouts (git-fixes). - iavf: Fix missing check for running netdev (git-fixes). - ice: initialize local variable 'tlv' (jsc#SLE-12878). - igc: igc_read_phy_reg_gpy: drop premature return (git-fixes). - igc: igc_write_phy_reg_gpy: drop premature return (git-fixes). - iio: Fix error handling for PM (git-fixes). - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits (git-fixes). - iio: adc: men_z188_adc: Fix a resource leak in an error handling path (git-fixes). - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (git-fixes). - mac80211: fix forwarded mesh frames AC & queue selection (git-fixes). - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (git-fixes). - mac80211_hwsim: report NOACK frames in tx_status (git-fixes). - mask out added spinlock in rndis_params (git-fixes). - net/mlx5: Fix possible deadlock on rule deletion (git-fixes). - net/mlx5: Fix wrong limitation of metadata match on ecpf (git-fixes). - net/mlx5: Update the list of the PCI supported devices (git-fixes). - net/mlx5: Update the list of the PCI supported devices (git-fixes). - net/mlx5e: Fix modify header actions memory leak (git-fixes). - net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468). - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (git-fixes). - net/mlx5e: TC, Reject rules with drop and modify hdr action (git-fixes). - net/mlx5e: TC, Reject rules with forward and drop actions (git-fixes). - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (jsc#SLE-15172). - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (jsc#SLE-15172). - net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration (git-fixes). - net: ethernet: ti: cpsw: disable PTPv1 hw timestamping advertisement (git-fixes). - net: fix up skbs delta_truesize in UDP GRO frag_list (bsc#1176447). - net: hns3: Clear the CMDQ registers before unmapping BAR region (git-fixes). - net: sfc: Replace in_interrupt() usage (git-fixes). - net: tipc: validate domain record count on input (bsc#1195254). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (git-fixes). - netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1176447). - netsec: ignore 'phy-mode' device property on ACPI systems (git-fixes). - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (git-fixes). - nl80211: Handle nla_memdup failures in handle_nan_filter (git-fixes). - ntb: intel: fix port config status offset for SPR (git-fixes). - nvme-multipath: use vmalloc for ANA log buffer (bsc#1193787). - nvme-rdma: fix possible use-after-free in transport error_recovery work (git-fixes). - nvme-tcp: fix possible use-after-free in transport error_recovery work (git-fixes). - nvme: fix a possible use-after-free in controller reset during load (git-fixes). - powerpc/dma: Fallback to dma_ops when persistent memory present (bsc#1196472 ltc#192278). Update config files. - powerpc/fadump: register for fadump as early as possible (bsc#1179439 ltc#190038). - powerpc/mm: Remove dcache flush from memory remove (bsc#1196433 ltc#196449). - powerpc/powernv/memtrace: Fix dcache flushing (bsc#1196433 ltc#196449). - powerpc/pseries/iommu: Fix window size for direct mapping with pmem (bsc#1196472 ltc#192278). - sched/core: Mitigate race (git-fixes) - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (git-fixes). - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (git-fixes). - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() (git-fixes). - scsi: nsp_cs: Check of ioremap return value (git-fixes). - scsi: qedf: Fix potential dereference of NULL pointer (git-fixes). - scsi: smartpqi: Add PCI IDs (bsc#1196627). - scsi: ufs: Fix race conditions related to driver data (git-fixes). - selftests: mlxsw: tc_police_scale: Make test more robust (bsc#1176774). - soc: fsl: Correct MAINTAINERS database (QUICC ENGINE LIBRARY) (git-fixes). - soc: fsl: Correct MAINTAINERS database (SOC) (git-fixes). - soc: fsl: qe: Check of ioremap return value (git-fixes). - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (git-fixes). - sr9700: sanity check for packet length (bsc#1196836). - tracing: Fix return value of __setup handlers (git-fixes). - tty: n_gsm: fix encoding of control signal octet bit DV (git-fixes). - tty: n_gsm: fix proper link termination after failed open (git-fixes). - usb: dwc2: use well defined macros for power_down (git-fixes). - usb: dwc3: gadget: Let the interrupt handler disable bottom halves (git-fixes). - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (git-fixes). - usb: gadget: rndis: add spinlock for rndis response list (git-fixes). - usb: hub: Fix usb enumeration issue due to address0 race (git-fixes). - vrf: Fix fast path output packet handling with async Netfilter rules (git-fixes). - xhci: Prevent futile URB re-submissions due to incorrect return value (git-fixes). - xhci: re-initialize the HC during resume if HCE was set (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1037=1 Package List: - openSUSE Leap 15.3 (x86_64): cluster-md-kmp-azure-5.3.18-150300.38.50.1 cluster-md-kmp-azure-debuginfo-5.3.18-150300.38.50.1 dlm-kmp-azure-5.3.18-150300.38.50.1 dlm-kmp-azure-debuginfo-5.3.18-150300.38.50.1 gfs2-kmp-azure-5.3.18-150300.38.50.1 gfs2-kmp-azure-debuginfo-5.3.18-150300.38.50.1 kernel-azure-5.3.18-150300.38.50.1 kernel-azure-debuginfo-5.3.18-150300.38.50.1 kernel-azure-debugsource-5.3.18-150300.38.50.1 kernel-azure-devel-5.3.18-150300.38.50.1 kernel-azure-devel-debuginfo-5.3.18-150300.38.50.1 kernel-azure-extra-5.3.18-150300.38.50.1 kernel-azure-extra-debuginfo-5.3.18-150300.38.50.1 kernel-azure-livepatch-devel-5.3.18-150300.38.50.1 kernel-azure-optional-5.3.18-150300.38.50.1 kernel-azure-optional-debuginfo-5.3.18-150300.38.50.1 kernel-syms-azure-5.3.18-150300.38.50.1 kselftests-kmp-azure-5.3.18-150300.38.50.1 kselftests-kmp-azure-debuginfo-5.3.18-150300.38.50.1 ocfs2-kmp-azure-5.3.18-150300.38.50.1 ocfs2-kmp-azure-debuginfo-5.3.18-150300.38.50.1 reiserfs-kmp-azure-5.3.18-150300.38.50.1 reiserfs-kmp-azure-debuginfo-5.3.18-150300.38.50.1 - openSUSE Leap 15.3 (noarch): kernel-devel-azure-5.3.18-150300.38.50.1 kernel-source-azure-5.3.18-150300.38.50.1 References: https://www.suse.com/security/cve/CVE-2021-0920.html https://www.suse.com/security/cve/CVE-2021-39657.html https://www.suse.com/security/cve/CVE-2021-44879.html https://www.suse.com/security/cve/CVE-2022-0487.html https://www.suse.com/security/cve/CVE-2022-0617.html https://www.suse.com/security/cve/CVE-2022-0644.html https://www.suse.com/security/cve/CVE-2022-24448.html https://www.suse.com/security/cve/CVE-2022-24958.html https://www.suse.com/security/cve/CVE-2022-24959.html https://www.suse.com/security/cve/CVE-2022-25258.html https://www.suse.com/security/cve/CVE-2022-25636.html https://www.suse.com/security/cve/CVE-2022-26490.html https://bugzilla.suse.com/1176447 https://bugzilla.suse.com/1176774 https://bugzilla.suse.com/1178134 https://bugzilla.suse.com/1179439 https://bugzilla.suse.com/1181147 https://bugzilla.suse.com/1191428 https://bugzilla.suse.com/1192273 https://bugzilla.suse.com/1193731 https://bugzilla.suse.com/1193787 https://bugzilla.suse.com/1193864 https://bugzilla.suse.com/1194463 https://bugzilla.suse.com/1194516 https://bugzilla.suse.com/1195211 https://bugzilla.suse.com/1195254 https://bugzilla.suse.com/1195403 https://bugzilla.suse.com/1195612 https://bugzilla.suse.com/1195897 https://bugzilla.suse.com/1195905 https://bugzilla.suse.com/1195939 https://bugzilla.suse.com/1195949 https://bugzilla.suse.com/1195987 https://bugzilla.suse.com/1196079 https://bugzilla.suse.com/1196095 https://bugzilla.suse.com/1196132 https://bugzilla.suse.com/1196155 https://bugzilla.suse.com/1196299 https://bugzilla.suse.com/1196301 https://bugzilla.suse.com/1196433 https://bugzilla.suse.com/1196468 https://bugzilla.suse.com/1196472 https://bugzilla.suse.com/1196627 https://bugzilla.suse.com/1196723 https://bugzilla.suse.com/1196779 https://bugzilla.suse.com/1196830 https://bugzilla.suse.com/1196836 https://bugzilla.suse.com/1196866 https://bugzilla.suse.com/1196868

1 0

openSUSE-SU-2022:1039-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1039-1 Rating: important References: #1176447 #1176774 #1178134 #1179439 #1181147 #1191428 #1192273 #1193731 #1193787 #1193864 #1194463 #1194516 #1194943 #1195051 #1195211 #1195254 #1195353 #1195403 #1195612 #1195897 #1195905 #1195939 #1195949 #1195987 #1196079 #1196095 #1196130 #1196132 #1196155 #1196299 #1196301 #1196433 #1196468 #1196472 #1196488 #1196627 #1196723 #1196779 #1196830 #1196836 #1196866 #1196868 #1196956 #1196959 Cross-References: CVE-2021-0920 CVE-2021-39657 CVE-2021-39698 CVE-2021-44879 CVE-2021-45402 CVE-2022-0487 CVE-2022-0617 CVE-2022-0644 CVE-2022-23036 CVE-2022-23037 CVE-2022-23038 CVE-2022-23039 CVE-2022-23040 CVE-2022-23041 CVE-2022-23042 CVE-2022-24448 CVE-2022-24958 CVE-2022-24959 CVE-2022-25258 CVE-2022-25636 CVE-2022-26490 CVE-2022-26966 CVSS scores: CVE-2021-0920 (NVD) : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0920 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-39657 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2021-39698 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-39698 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-44879 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-44879 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45402 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-45402 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L CVE-2022-0487 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-0487 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0617 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0617 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0644 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-23036 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23036 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23037 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23037 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23038 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23038 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23039 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23039 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23040 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23040 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23041 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23041 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23042 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23042 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-24448 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2022-24448 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-24958 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24958 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24959 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24959 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-25258 (NVD) : 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-25258 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25636 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25636 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26490 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26490 (SUSE): 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-26966 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-26966 (SUSE): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 22 vulnerabilities and has 22 fixes is now available. Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to nf_tables_offload (bsc#1196299). - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830). - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2022-24448: Fixed an issue if an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612). - CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079) - CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd(). (bsc#1196155) - CVE-2022-25258: The USB Gadget subsystem lacked certain validation of interface OS descriptor requests, which could have lead to memory corruption (bsc#1196096). - CVE-2022-24958: drivers/usb/gadget/legacy/inode.c mishandled dev->buf release (bsc#1195905). - CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897). - CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987). - CVE-2021-0920: Fixed a local privilege escalation due to a use-after-free vulnerability in unix_scm_to_skb of af_unix (bsc#1193731). - CVE-2021-39657: Fixed an information leak in the Universal Flash Storage subsystem (bsc#1193864). - CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from heap memory via crafted frame lengths from a device (bsc#1196836). - CVE-2021-39698: Fixed a possible memory corruption due to a use after free in aio_poll_complete_work. This could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1196956) - CVE-2021-45402: The check_alu_op function in kernel/bpf/verifier.c did not properly update bounds while handling the mov32 instruction, which allowed local users to obtain potentially sensitive address information (bsc#1196130). - CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040, CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers. (bsc#1196488) The following non-security bugs were fixed: - ALSA: intel_hdmi: Fix reference to PCM buffer address (git-fixes). - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (git-fixes). - ARM: Fix kgdb breakpoint for Thumb2 (git-fixes). - ASoC: cs4265: Fix the duplicated control name (git-fixes). - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (git-fixes). - ASoC: rt5668: do not block workqueue if card is unbound (git-fixes). - ASoC: rt5682: do not block workqueue if card is unbound (git-fixes). - Bluetooth: btusb: Add missing Chicony device for Realtek RTL8723BE (bsc#1196779). - EDAC/altera: Fix deferred probing (bsc#1178134). - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() (bsc#1178134). - HID: add mapping for KEY_ALL_APPLICATIONS (git-fixes). - HID: add mapping for KEY_DICTATE (git-fixes). - Hand over the maintainership to SLE15-SP3 maintainers - IB/hfi1: Correct guard on eager buffer deallocation (git-fixes). - IB/hfi1: Fix early init panic (git-fixes). - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (git-fixes). - IB/hfi1: Insure use of smp_processor_id() is preempt disabled (git-fixes). - IB/rdmavt: Validate remote_addr during loopback atomic tests (git-fixes). - Input: clear BTN_RIGHT/MIDDLE on buttonpads (git-fixes). - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (git-fixes). - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (git-fixes). - NFC: port100: fix use-after-free in port100_send_complete (git-fixes). - RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" (git-fixes). - RDMA/cma: Do not change route.addr.src_addr outside state checks (bsc#1181147). - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry (git-fixes). - RDMA/cma: Remove open coding of overflow checking for private_data_len (git-fixes). - RDMA/core: Do not infoleak GRH fields (git-fixes). - RDMA/core: Let ib_find_gid() continue search even after empty entry (git-fixes). - RDMA/cxgb4: Set queue pair state when being queried (git-fixes). - RDMA/hns: Validate the pkey index (git-fixes). - RDMA/ib_srp: Fix a deadlock (git-fixes). - RDMA/mlx4: Do not continue event handler after memory allocation failure (git-fixes). - RDMA/rtrs-clt: Fix possible double free in error case (jsc#SLE-15176). - RDMA/rxe: Fix a typo in opcode name (git-fixes). - RDMA/siw: Fix broken RDMA Read Fence/Resume logic (git-fixes). - RDMA/uverbs: Check for null return of kmalloc_array (git-fixes). - RDMA/uverbs: Remove the unnecessary assignment (git-fixes). - Revert "USB: serial: ch341: add new Product ID for CH341A" (git-fixes). - SUNRPC: avoid race between mod_timer() and del_timer_sync() (bnc#1195403). - USB: gadget: validate endpoint index for xilinx udc (git-fixes). - USB: gadget: validate interface OS descriptor requests (git-fixes). - USB: hub: Clean up use of port initialization schemes and retries (git-fixes). - USB: serial: option: add Telit LE910R1 compositions (git-fixes). - USB: serial: option: add support for DW5829e (git-fixes). - USB: zaurus: support another broken Zaurus (git-fixes). - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (git-fixes). - asix: fix uninit-value in asix_mdio_read() (git-fixes). - ata: pata_hpt37x: disable primary channel on HPT371 (git-fixes). - ax25: Fix NULL pointer dereference in ax25_kill_by_device (git-fixes). - batman-adv: Do not expect inter-netns unique iflink indices (git-fixes). - batman-adv: Request iflink once in batadv-on-batadv check (git-fixes). - batman-adv: Request iflink once in batadv_get_real_netdevice (git-fixes). - blk-mq: do not free tags if the tag_set is used by other device in queue initialztion (bsc#1193787). - bnxt_en: Fix active FEC reporting to ethtool (jsc#SLE-16649). - bnxt_en: Fix incorrect multicast rx mask setting when not requested (git-fixes). - bnxt_en: Fix occasional ethtool -t loopback test failures (git-fixes). - bnxt_en: Fix offline ethtool selftest with RDMA enabled (git-fixes). - bonding: force carrier update when releasing slave (git-fixes). - build initrd without systemd This reduces the size of the initrd by over 25%, which improves startup time of the virtual machine by 0.5-0.6s on very fast machines, more on slower ones. - can: gs_usb: change active_channels's type from atomic_t to u8 (git-fixes). - cgroup-v1: Correct privileges check in release_agent writes (bsc#1196723). - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning (bsc#1196868). - clk: jz4725b: fix mmc0 clock gating (git-fixes). - constraints: Also adjust disk requirement for x86 and s390. - constraints: Increase disk space for aarch64 - cpufreq: schedutil: Use kobject release() method to free (git-fixes) - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() (bsc#1196866). - cputime, cpuacct: Include guest time in user time in (git-fixes) - dma-direct: Fix potential NULL pointer dereference (bsc#1196472 ltc#192278). - dma-mapping: Allow mixing bypass and mapped DMA operation (bsc#1196472 ltc#192278). - dmaengine: shdma: Fix runtime PM imbalance on error (git-fixes). - drm/amdgpu: disable MMHUB PG for Picasso (git-fixes). - drm/edid: Always set RGB444 (git-fixes). - drm/i915/dg1: Wait for pcode/uncore handshake at startup (bsc#1195211). - drm/i915/gen11+: Only load DRAM information from pcode (bsc#1195211). - drm/i915: Nuke not needed members of dram_info (bsc#1195211). - drm/i915: Remove memory frequency calculation (bsc#1195211). - drm/i915: Rename is_16gb_dimm to wm_lv_0_adjust_needed (bsc#1195211). - drm/sun4i: mixer: Fix P010 and P210 format numbers (git-fixes). - efivars: Respect "block" flag in efivar_entry_set_safe() (git-fixes). - exfat: fix i_blocks for files truncated over 4 GiB (git-fixes). - exfat: fix incorrect loading of i_blocks for large files (git-fixes). - firmware: arm_scmi: Remove space in MODULE_ALIAS name (git-fixes). - fix rpm build warning tumbleweed rpm is adding these warnings to the log: It's not recommended to have unversioned Obsoletes: Obsoletes: microcode_ctl - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (git-fixes). - gpio: rockchip: Reset int_bothedge when changing trigger (git-fixes). - gpio: tegra186: Fix chip_data type confusion (git-fixes). - gpio: ts4900: Do not set DAT and OE together (git-fixes). - gpiolib: acpi: Convert ACPI value of debounce to microseconds (git-fixes). - gtp: remove useless rcu_read_lock() (git-fixes). - hamradio: fix macro redefine warning (git-fixes). - i2c: bcm2835: Avoid clock stretching timeouts (git-fixes). - iavf: Fix missing check for running netdev (git-fixes). - ice: initialize local variable 'tlv' (jsc#SLE-12878). - igc: igc_read_phy_reg_gpy: drop premature return (git-fixes). - igc: igc_write_phy_reg_gpy: drop premature return (git-fixes). - iio: Fix error handling for PM (git-fixes). - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits (git-fixes). - iio: adc: men_z188_adc: Fix a resource leak in an error handling path (git-fixes). - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (git-fixes). - kernel-binary.spec.in: Move 20-kernel-default-extra.conf to the correctr directory (bsc#1195051). - kernel-binary.spec: Also exclude the kernel signing key from devel package. There is a check in OBS that fails when it is included. Also the key is not reproducible. Fixes: bb988d4625a3 ("kernel-binary: Do not include sourcedir in certificate path.") - kernel-binary.spec: Do not use the default certificate path (bsc#1194943). Using the the default path is broken since Linux 5.17 - kernel-binary: Do not include sourcedir in certificate path. The certs macro runs before build directory is set up so it creates the aggregate of supplied certificates in the source directory. Using this file directly as the certificate in kernel config works but embeds the source directory path in the kernel config. To avoid this symlink the certificate to the build directory and use relative path to refer to it. Also fabricate a certificate in the same location in build directory when none is provided. - kernel-obs-build: include 9p (boo#1195353) To be able to share files between host and the qemu vm of the build script, the 9p and 9p_virtio kernel modules need to be included in the initrd of kernel-obs-build. - mac80211: fix forwarded mesh frames AC & queue selection (git-fixes). - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (git-fixes). - mac80211_hwsim: report NOACK frames in tx_status (git-fixes). - mask out added spinlock in rndis_params (git-fixes). - mmc: meson: Fix usage of meson_mmc_post_req() (git-fixes). - net/mlx5: Fix possible deadlock on rule deletion (git-fixes). - net/mlx5: Fix wrong limitation of metadata match on ecpf (git-fixes). - net/mlx5: Update the list of the PCI supported devices (git-fixes). - net/mlx5: Update the list of the PCI supported devices (git-fixes). - net/mlx5e: Fix modify header actions memory leak (git-fixes). - net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468). - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (git-fixes). - net/mlx5e: TC, Reject rules with drop and modify hdr action (git-fixes). - net/mlx5e: TC, Reject rules with forward and drop actions (git-fixes). - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (jsc#SLE-15172). - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (jsc#SLE-15172). - net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration (git-fixes). - net: ethernet: ti: cpsw: disable PTPv1 hw timestamping advertisement (git-fixes). - net: fix up skbs delta_truesize in UDP GRO frag_list (bsc#1176447). - net: hns3: Clear the CMDQ registers before unmapping BAR region (git-fixes). - net: phy: DP83822: clear MISR2 register to disable interrupts (git-fixes). - net: sfc: Replace in_interrupt() usage (git-fixes). - net: tipc: validate domain record count on input (bsc#1195254). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (git-fixes). - netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1176447). - netsec: ignore 'phy-mode' device property on ACPI systems (git-fixes). - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (git-fixes). - nl80211: Handle nla_memdup failures in handle_nan_filter (git-fixes). - ntb: intel: fix port config status offset for SPR (git-fixes). - nvme-multipath: use vmalloc for ANA log buffer (bsc#1193787). - nvme-rdma: fix possible use-after-free in transport error_recovery work (git-fixes). - nvme-tcp: fix possible use-after-free in transport error_recovery work (git-fixes). - nvme: fix a possible use-after-free in controller reset during load (git-fixes). - powerpc/dma: Fallback to dma_ops when persistent memory present (bsc#1196472 ltc#192278). Update config files. - powerpc/fadump: register for fadump as early as possible (bsc#1179439 ltc#190038). - powerpc/mm: Remove dcache flush from memory remove (bsc#1196433 ltc#196449). - powerpc/powernv/memtrace: Fix dcache flushing (bsc#1196433 ltc#196449). - powerpc/pseries/iommu: Fix window size for direct mapping with pmem (bsc#1196472 ltc#192278). - rpm/*.spec.in: Use https:// urls - rpm/arch-symbols,guards,*driver: Replace Novell with SUSE. - rpm/check-for-config-changes: Ignore PAHOLE_VERSION. - rpm/kernel-docs.spec.in: use %%license for license declarations Limited to SLE15+ to avoid compatibility nightmares. - rpm/kernel-source.spec.in: call fdupes per subpackage It is a waste of time to do a global fdupes when we have subpackages. - rpm: SC2006: Use $(...) notation instead of legacy backticked `...`. - sched/core: Mitigate race (git-fixes) - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (git-fixes). - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (git-fixes). - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() (git-fixes). - scsi: nsp_cs: Check of ioremap return value (git-fixes). - scsi: qedf: Fix potential dereference of NULL pointer (git-fixes). - scsi: smartpqi: Add PCI IDs (bsc#1196627). - scsi: ufs: Fix race conditions related to driver data (git-fixes). - selftests: mlxsw: tc_police_scale: Make test more robust (bsc#1176774). - soc: fsl: Correct MAINTAINERS database (QUICC ENGINE LIBRARY) (git-fixes). - soc: fsl: Correct MAINTAINERS database (SOC) (git-fixes). - soc: fsl: qe: Check of ioremap return value (git-fixes). - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (git-fixes). - sr9700: sanity check for packet length (bsc#1196836). - staging: gdm724x: fix use after free in gdm_lte_rx() (git-fixes). - tracing: Fix return value of __setup handlers (git-fixes). - tty: n_gsm: fix encoding of control signal octet bit DV (git-fixes). - tty: n_gsm: fix proper link termination after failed open (git-fixes). - usb: dwc2: Fix Stalling a Non-Isochronous OUT EP (git-fixes). - usb: dwc2: gadget: Fix GOUTNAK flow for Slave mode (git-fixes). - usb: dwc2: gadget: Fix kill_all_requests race (git-fixes). - usb: dwc2: use well defined macros for power_down (git-fixes). - usb: dwc3: gadget: Let the interrupt handler disable bottom halves (git-fixes). - usb: dwc3: meson-g12a: Disable the regulator in the error handling path of the probe (git-fixes). - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (git-fixes). - usb: gadget: rndis: add spinlock for rndis response list (git-fixes). - usb: host: xen-hcd: add missing unlock in error path (git-fixes). - usb: hub: Fix locking issues with address0_mutex (git-fixes). - usb: hub: Fix usb enumeration issue due to address0 race (git-fixes). - vrf: Fix fast path output packet handling with async Netfilter rules (git-fixes). - xen/usb: do not use gnttab_end_foreign_access() in xenhcd_gnttab_done() (bsc#1196488, XSA-396). - xhci: Prevent futile URB re-submissions due to incorrect return value (git-fixes). - xhci: re-initialize the HC during resume if HCE was set (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1039=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1039=1 Package List: - openSUSE Leap 15.4 (aarch64 x86_64): cluster-md-kmp-preempt-5.3.18-150300.59.60.4 cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 dlm-kmp-preempt-5.3.18-150300.59.60.4 dlm-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 gfs2-kmp-preempt-5.3.18-150300.59.60.4 gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-5.3.18-150300.59.60.4 kernel-preempt-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-debugsource-5.3.18-150300.59.60.4 kernel-preempt-devel-5.3.18-150300.59.60.4 kernel-preempt-devel-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-extra-5.3.18-150300.59.60.4 kernel-preempt-extra-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-livepatch-devel-5.3.18-150300.59.60.4 kernel-preempt-optional-5.3.18-150300.59.60.4 kernel-preempt-optional-debuginfo-5.3.18-150300.59.60.4 kselftests-kmp-preempt-5.3.18-150300.59.60.4 kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 ocfs2-kmp-preempt-5.3.18-150300.59.60.4 ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 reiserfs-kmp-preempt-5.3.18-150300.59.60.4 reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 - openSUSE Leap 15.4 (aarch64): dtb-al-5.3.18-150300.59.60.4 dtb-zte-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cluster-md-kmp-default-5.3.18-150300.59.60.4 cluster-md-kmp-default-debuginfo-5.3.18-150300.59.60.4 dlm-kmp-default-5.3.18-150300.59.60.4 dlm-kmp-default-debuginfo-5.3.18-150300.59.60.4 gfs2-kmp-default-5.3.18-150300.59.60.4 gfs2-kmp-default-debuginfo-5.3.18-150300.59.60.4 kernel-default-5.3.18-150300.59.60.4 kernel-default-base-5.3.18-150300.59.60.4.150300.18.37.5 kernel-default-base-rebuild-5.3.18-150300.59.60.4.150300.18.37.5 kernel-default-debuginfo-5.3.18-150300.59.60.4 kernel-default-debugsource-5.3.18-150300.59.60.4 kernel-default-devel-5.3.18-150300.59.60.4 kernel-default-devel-debuginfo-5.3.18-150300.59.60.4 kernel-default-extra-5.3.18-150300.59.60.4 kernel-default-extra-debuginfo-5.3.18-150300.59.60.4 kernel-default-livepatch-5.3.18-150300.59.60.4 kernel-default-livepatch-devel-5.3.18-150300.59.60.4 kernel-default-optional-5.3.18-150300.59.60.4 kernel-default-optional-debuginfo-5.3.18-150300.59.60.4 kernel-obs-build-5.3.18-150300.59.60.4 kernel-obs-build-debugsource-5.3.18-150300.59.60.4 kernel-obs-qa-5.3.18-150300.59.60.4 kernel-syms-5.3.18-150300.59.60.4 kselftests-kmp-default-5.3.18-150300.59.60.4 kselftests-kmp-default-debuginfo-5.3.18-150300.59.60.4 ocfs2-kmp-default-5.3.18-150300.59.60.4 ocfs2-kmp-default-debuginfo-5.3.18-150300.59.60.4 reiserfs-kmp-default-5.3.18-150300.59.60.4 reiserfs-kmp-default-debuginfo-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (ppc64le x86_64): kernel-debug-5.3.18-150300.59.60.4 kernel-debug-debuginfo-5.3.18-150300.59.60.4 kernel-debug-debugsource-5.3.18-150300.59.60.4 kernel-debug-devel-5.3.18-150300.59.60.4 kernel-debug-devel-debuginfo-5.3.18-150300.59.60.4 kernel-debug-livepatch-devel-5.3.18-150300.59.60.4 kernel-kvmsmall-5.3.18-150300.59.60.4 kernel-kvmsmall-debuginfo-5.3.18-150300.59.60.4 kernel-kvmsmall-debugsource-5.3.18-150300.59.60.4 kernel-kvmsmall-devel-5.3.18-150300.59.60.4 kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.60.4 kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (aarch64 x86_64): cluster-md-kmp-preempt-5.3.18-150300.59.60.4 cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 dlm-kmp-preempt-5.3.18-150300.59.60.4 dlm-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 gfs2-kmp-preempt-5.3.18-150300.59.60.4 gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-5.3.18-150300.59.60.4 kernel-preempt-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-debugsource-5.3.18-150300.59.60.4 kernel-preempt-devel-5.3.18-150300.59.60.4 kernel-preempt-devel-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-extra-5.3.18-150300.59.60.4 kernel-preempt-extra-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-livepatch-devel-5.3.18-150300.59.60.4 kernel-preempt-optional-5.3.18-150300.59.60.4 kernel-preempt-optional-debuginfo-5.3.18-150300.59.60.4 kselftests-kmp-preempt-5.3.18-150300.59.60.4 kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 ocfs2-kmp-preempt-5.3.18-150300.59.60.4 ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 reiserfs-kmp-preempt-5.3.18-150300.59.60.4 reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (aarch64): cluster-md-kmp-64kb-5.3.18-150300.59.60.4 cluster-md-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 dlm-kmp-64kb-5.3.18-150300.59.60.4 dlm-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 dtb-al-5.3.18-150300.59.60.4 dtb-allwinner-5.3.18-150300.59.60.4 dtb-altera-5.3.18-150300.59.60.4 dtb-amd-5.3.18-150300.59.60.4 dtb-amlogic-5.3.18-150300.59.60.4 dtb-apm-5.3.18-150300.59.60.4 dtb-arm-5.3.18-150300.59.60.4 dtb-broadcom-5.3.18-150300.59.60.4 dtb-cavium-5.3.18-150300.59.60.4 dtb-exynos-5.3.18-150300.59.60.4 dtb-freescale-5.3.18-150300.59.60.4 dtb-hisilicon-5.3.18-150300.59.60.4 dtb-lg-5.3.18-150300.59.60.4 dtb-marvell-5.3.18-150300.59.60.4 dtb-mediatek-5.3.18-150300.59.60.4 dtb-nvidia-5.3.18-150300.59.60.4 dtb-qcom-5.3.18-150300.59.60.4 dtb-renesas-5.3.18-150300.59.60.4 dtb-rockchip-5.3.18-150300.59.60.4 dtb-socionext-5.3.18-150300.59.60.4 dtb-sprd-5.3.18-150300.59.60.4 dtb-xilinx-5.3.18-150300.59.60.4 dtb-zte-5.3.18-150300.59.60.4 gfs2-kmp-64kb-5.3.18-150300.59.60.4 gfs2-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 kernel-64kb-5.3.18-150300.59.60.4 kernel-64kb-debuginfo-5.3.18-150300.59.60.4 kernel-64kb-debugsource-5.3.18-150300.59.60.4 kernel-64kb-devel-5.3.18-150300.59.60.4 kernel-64kb-devel-debuginfo-5.3.18-150300.59.60.4 kernel-64kb-extra-5.3.18-150300.59.60.4 kernel-64kb-extra-debuginfo-5.3.18-150300.59.60.4 kernel-64kb-livepatch-devel-5.3.18-150300.59.60.4 kernel-64kb-optional-5.3.18-150300.59.60.4 kernel-64kb-optional-debuginfo-5.3.18-150300.59.60.4 kselftests-kmp-64kb-5.3.18-150300.59.60.4 kselftests-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 ocfs2-kmp-64kb-5.3.18-150300.59.60.4 ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 reiserfs-kmp-64kb-5.3.18-150300.59.60.4 reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (noarch): kernel-devel-5.3.18-150300.59.60.4 kernel-docs-5.3.18-150300.59.60.4 kernel-docs-html-5.3.18-150300.59.60.4 kernel-macros-5.3.18-150300.59.60.4 kernel-source-5.3.18-150300.59.60.4 kernel-source-vanilla-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (s390x): kernel-zfcpdump-5.3.18-150300.59.60.4 kernel-zfcpdump-debuginfo-5.3.18-150300.59.60.4 kernel-zfcpdump-debugsource-5.3.18-150300.59.60.4 References: https://www.suse.com/security/cve/CVE-2021-0920.html https://www.suse.com/security/cve/CVE-2021-39657.html https://www.suse.com/security/cve/CVE-2021-39698.html https://www.suse.com/security/cve/CVE-2021-44879.html https://www.suse.com/security/cve/CVE-2021-45402.html https://www.suse.com/security/cve/CVE-2022-0487.html https://www.suse.com/security/cve/CVE-2022-0617.html https://www.suse.com/security/cve/CVE-2022-0644.html https://www.suse.com/security/cve/CVE-2022-23036.html https://www.suse.com/security/cve/CVE-2022-23037.html https://www.suse.com/security/cve/CVE-2022-23038.html https://www.suse.com/security/cve/CVE-2022-23039.html https://www.suse.com/security/cve/CVE-2022-23040.html https://www.suse.com/security/cve/CVE-2022-23041.html https://www.suse.com/security/cve/CVE-2022-23042.html https://www.suse.com/security/cve/CVE-2022-24448.html https://www.suse.com/security/cve/CVE-2022-24958.html https://www.suse.com/security/cve/CVE-2022-24959.html https://www.suse.com/security/cve/CVE-2022-25258.html https://www.suse.com/security/cve/CVE-2022-25636.html https://www.suse.com/security/cve/CVE-2022-26490.html https://www.suse.com/security/cve/CVE-2022-26966.html https://bugzilla.suse.com/1176447 https://bugzilla.suse.com/1176774 https://bugzilla.suse.com/1178134 https://bugzilla.suse.com/1179439 https://bugzilla.suse.com/1181147 https://bugzilla.suse.com/1191428 https://bugzilla.suse.com/1192273 https://bugzilla.suse.com/1193731 https://bugzilla.suse.com/1193787 https://bugzilla.suse.com/1193864 https://bugzilla.suse.com/1194463 https://bugzilla.suse.com/1194516 https://bugzilla.suse.com/1194943 https://bugzilla.suse.com/1195051 https://bugzilla.suse.com/1195211 https://bugzilla.suse.com/1195254 https://bugzilla.suse.com/1195353 https://bugzilla.suse.com/1195403 https://bugzilla.suse.com/1195612 https://bugzilla.suse.com/1195897 https://bugzilla.suse.com/1195905 https://bugzilla.suse.com/1195939 https://bugzilla.suse.com/1195949 https://bugzilla.suse.com/1195987 https://bugzilla.suse.com/1196079 https://bugzilla.suse.com/1196095 https://bugzilla.suse.com/1196130 https://bugzilla.suse.com/1196132 https://bugzilla.suse.com/1196155 https://bugzilla.suse.com/1196299 https://bugzilla.suse.com/1196301 https://bugzilla.suse.com/1196433 https://bugzilla.suse.com/1196468 https://bugzilla.suse.com/1196472 https://bugzilla.suse.com/1196488 https://bugzilla.suse.com/1196627 https://bugzilla.suse.com/1196723 https://bugzilla.suse.com/1196779 https://bugzilla.suse.com/1196830 https://bugzilla.suse.com/1196836 https://bugzilla.suse.com/1196866 https://bugzilla.suse.com/1196868 https://bugzilla.suse.com/1196956 https://bugzilla.suse.com/1196959

1 0

openSUSE-SU-2022:1040-1: moderate: Security update for protobuf
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for protobuf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1040-1 Rating: moderate References: #1195258 Cross-References: CVE-2021-22570 CVSS scores: CVE-2021-22570 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-22570 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1040=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1040=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libprotobuf-lite20-3.9.2-4.12.1 libprotobuf-lite20-debuginfo-3.9.2-4.12.1 libprotobuf20-3.9.2-4.12.1 libprotobuf20-debuginfo-3.9.2-4.12.1 libprotoc20-3.9.2-4.12.1 libprotoc20-debuginfo-3.9.2-4.12.1 protobuf-debugsource-3.9.2-4.12.1 protobuf-devel-3.9.2-4.12.1 protobuf-devel-debuginfo-3.9.2-4.12.1 protobuf-java-3.9.2-4.12.1 python2-protobuf-3.9.2-4.12.1 python3-protobuf-3.9.2-4.12.1 - openSUSE Leap 15.4 (x86_64): libprotobuf-lite20-32bit-3.9.2-4.12.1 libprotobuf-lite20-32bit-debuginfo-3.9.2-4.12.1 libprotobuf20-32bit-3.9.2-4.12.1 libprotobuf20-32bit-debuginfo-3.9.2-4.12.1 libprotoc20-32bit-3.9.2-4.12.1 libprotoc20-32bit-debuginfo-3.9.2-4.12.1 - openSUSE Leap 15.4 (noarch): protobuf-source-3.9.2-4.12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libprotobuf-lite20-3.9.2-4.12.1 libprotobuf-lite20-debuginfo-3.9.2-4.12.1 libprotobuf20-3.9.2-4.12.1 libprotobuf20-debuginfo-3.9.2-4.12.1 libprotoc20-3.9.2-4.12.1 libprotoc20-debuginfo-3.9.2-4.12.1 protobuf-debugsource-3.9.2-4.12.1 protobuf-devel-3.9.2-4.12.1 protobuf-devel-debuginfo-3.9.2-4.12.1 protobuf-java-3.9.2-4.12.1 python2-protobuf-3.9.2-4.12.1 python3-protobuf-3.9.2-4.12.1 - openSUSE Leap 15.3 (x86_64): libprotobuf-lite20-32bit-3.9.2-4.12.1 libprotobuf-lite20-32bit-debuginfo-3.9.2-4.12.1 libprotobuf20-32bit-3.9.2-4.12.1 libprotobuf20-32bit-debuginfo-3.9.2-4.12.1 libprotoc20-32bit-3.9.2-4.12.1 libprotoc20-32bit-debuginfo-3.9.2-4.12.1 - openSUSE Leap 15.3 (noarch): protobuf-source-3.9.2-4.12.1 References: https://www.suse.com/security/cve/CVE-2021-22570.html https://bugzilla.suse.com/1195258

1 0

openSUSE-RU-2022:1033-1: moderate: Recommended update for java-11-openjdk
by maintenance＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Recommended Update: Recommended update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1033-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for java-11-openjdk fixes the following issues: - Build failure on Solaris. - Unable to connect to https://google.com using java.net.HttpClient. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1033=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1033=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): java-11-openjdk-11.0.14.1-3.77.5 java-11-openjdk-accessibility-11.0.14.1-3.77.5 java-11-openjdk-accessibility-debuginfo-11.0.14.1-3.77.5 java-11-openjdk-debugsource-11.0.14.1-3.77.5 java-11-openjdk-demo-11.0.14.1-3.77.5 java-11-openjdk-devel-11.0.14.1-3.77.5 java-11-openjdk-headless-11.0.14.1-3.77.5 java-11-openjdk-jmods-11.0.14.1-3.77.5 java-11-openjdk-src-11.0.14.1-3.77.5 - openSUSE Leap 15.4 (noarch): java-11-openjdk-javadoc-11.0.14.1-3.77.5 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): java-11-openjdk-11.0.14.1-3.77.5 java-11-openjdk-accessibility-11.0.14.1-3.77.5 java-11-openjdk-accessibility-debuginfo-11.0.14.1-3.77.5 java-11-openjdk-debugsource-11.0.14.1-3.77.5 java-11-openjdk-demo-11.0.14.1-3.77.5 java-11-openjdk-devel-11.0.14.1-3.77.5 java-11-openjdk-headless-11.0.14.1-3.77.5 java-11-openjdk-jmods-11.0.14.1-3.77.5 java-11-openjdk-src-11.0.14.1-3.77.5 - openSUSE Leap 15.3 (noarch): java-11-openjdk-javadoc-11.0.14.1-3.77.5 References:

1 0

openSUSE-SU-2022:1027-1: important: Security update for java-1_8_0-ibm
by opensuse-security＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Security Update: Security update for java-1_8_0-ibm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1027-1 Rating: important References: #1194925 #1194926 #1194927 #1194928 #1194929 #1194930 #1194931 #1194932 #1194933 #1194934 #1194935 #1194937 #1194939 #1194940 #1194941 #1195146 #1196500 #1197126 Cross-References: CVE-2022-21248 CVE-2022-21271 CVE-2022-21277 CVE-2022-21282 CVE-2022-21283 CVE-2022-21291 CVE-2022-21293 CVE-2022-21294 CVE-2022-21296 CVE-2022-21299 CVE-2022-21305 CVE-2022-21340 CVE-2022-21341 CVE-2022-21349 CVE-2022-21360 CVE-2022-21365 CVE-2022-21366 CVSS scores: CVE-2022-21248 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21248 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21271 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21271 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21277 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21277 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21282 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21282 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21283 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21283 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21291 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21291 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21293 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21296 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21296 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21299 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21305 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21305 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21340 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21340 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21349 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21349 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 17 vulnerabilities and has one errata is now available. Description: This update for java-1_8_0-ibm fixes the following issues: Update Java 8.0 to Service Refresh 7 Fix Pack 5 (bsc#1197126). Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-2022-21277, CVE-2022-21299, CVE-2022-21296, CVE-2022-21282, CVE-2022-21294, CVE-2022-21293, CVE-2022-21291, CVE-2022-21283, CVE-2022-21248, CVE-2022-21271. Non-securtiy fix: - Fixed a broken symlink for javaws (bsc#1195146). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1027=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1027=1 Package List: - openSUSE Leap 15.4 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-demo-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-devel-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-src-1.8.0_sr7.5-150000.3.56.1 - openSUSE Leap 15.4 (x86_64): java-1_8_0-ibm-32bit-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-alsa-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-devel-32bit-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-plugin-1.8.0_sr7.5-150000.3.56.1 - openSUSE Leap 15.3 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-demo-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-devel-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-src-1.8.0_sr7.5-150000.3.56.1 - openSUSE Leap 15.3 (x86_64): java-1_8_0-ibm-32bit-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-alsa-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-devel-32bit-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-plugin-1.8.0_sr7.5-150000.3.56.1 References: https://www.suse.com/security/cve/CVE-2022-21248.html https://www.suse.com/security/cve/CVE-2022-21271.html https://www.suse.com/security/cve/CVE-2022-21277.html https://www.suse.com/security/cve/CVE-2022-21282.html https://www.suse.com/security/cve/CVE-2022-21283.html https://www.suse.com/security/cve/CVE-2022-21291.html https://www.suse.com/security/cve/CVE-2022-21293.html https://www.suse.com/security/cve/CVE-2022-21294.html https://www.suse.com/security/cve/CVE-2022-21296.html https://www.suse.com/security/cve/CVE-2022-21299.html https://www.suse.com/security/cve/CVE-2022-21305.html https://www.suse.com/security/cve/CVE-2022-21340.html https://www.suse.com/security/cve/CVE-2022-21341.html https://www.suse.com/security/cve/CVE-2022-21349.html https://www.suse.com/security/cve/CVE-2022-21360.html https://www.suse.com/security/cve/CVE-2022-21365.html https://www.suse.com/security/cve/CVE-2022-21366.html https://bugzilla.suse.com/1194925 https://bugzilla.suse.com/1194926 https://bugzilla.suse.com/1194927 https://bugzilla.suse.com/1194928 https://bugzilla.suse.com/1194929 https://bugzilla.suse.com/1194930 https://bugzilla.suse.com/1194931 https://bugzilla.suse.com/1194932 https://bugzilla.suse.com/1194933 https://bugzilla.suse.com/1194934 https://bugzilla.suse.com/1194935 https://bugzilla.suse.com/1194937 https://bugzilla.suse.com/1194939 https://bugzilla.suse.com/1194940 https://bugzilla.suse.com/1194941 https://bugzilla.suse.com/1195146 https://bugzilla.suse.com/1196500 https://bugzilla.suse.com/1197126

1 0

openSUSE-RU-2022:1028-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1028-1 Rating: moderate References: #1194220 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chrony fixes the following issues: - Disable "ntsdumpdir" in default config, because augeas-lenses cannot parse it during installation of SUSE Linux Enterprise Micro 5.1 and openSUSE Leap 15.3 (bsc#1194220). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1028=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): chrony-4.1-150300.16.9.1 chrony-debuginfo-4.1-150300.16.9.1 chrony-debugsource-4.1-150300.16.9.1 - openSUSE Leap 15.3 (noarch): chrony-pool-empty-4.1-150300.16.9.1 chrony-pool-openSUSE-4.1-150300.16.9.1 chrony-pool-suse-4.1-150300.16.9.1 References: https://bugzilla.suse.com/1194220

1 0

openSUSE-SU-2022:1029-1: important: Security update for openvpn
by opensuse-security＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Security Update: Security update for openvpn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1029-1 Rating: important References: #1197341 Cross-References: CVE-2022-0547 CVSS scores: CVE-2022-0547 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openvpn fixes the following issues: - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1029=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1029=1 Package List: - openSUSE Leap 15.4 (aarch64): openvpn-2.4.3-150000.5.10.1 openvpn-auth-pam-plugin-2.4.3-150000.5.10.1 openvpn-auth-pam-plugin-debuginfo-2.4.3-150000.5.10.1 openvpn-debuginfo-2.4.3-150000.5.10.1 openvpn-debugsource-2.4.3-150000.5.10.1 openvpn-devel-2.4.3-150000.5.10.1 openvpn-down-root-plugin-2.4.3-150000.5.10.1 openvpn-down-root-plugin-debuginfo-2.4.3-150000.5.10.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): openvpn-2.4.3-150000.5.10.1 openvpn-auth-pam-plugin-2.4.3-150000.5.10.1 openvpn-auth-pam-plugin-debuginfo-2.4.3-150000.5.10.1 openvpn-debuginfo-2.4.3-150000.5.10.1 openvpn-debugsource-2.4.3-150000.5.10.1 openvpn-devel-2.4.3-150000.5.10.1 openvpn-down-root-plugin-2.4.3-150000.5.10.1 openvpn-down-root-plugin-debuginfo-2.4.3-150000.5.10.1 References: https://www.suse.com/security/cve/CVE-2022-0547.html https://bugzilla.suse.com/1197341

1 0

openSUSE-SU-2022:1031-1: important: Security update for apache2
by opensuse-security＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1031-1 Rating: important References: #1197091 #1197095 #1197096 #1197098 Cross-References: CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23943 CVSS scores: CVE-2022-22719 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-22719 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-22720 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22720 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2022-22721 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22721 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-23943 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23943 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for apache2 fixes the following issues: - CVE-2022-23943: heap out-of-bounds write in mod_sed (bsc#1197098). - CVE-2022-22720: HTTP request smuggling due to incorrect error handling (bsc#1197095). - CVE-2022-22719: use of uninitialized value of in r:parsebody in mod_lua (bsc#1197091). - CVE-2022-22721: possible buffer overflow with very large or unlimited LimitXMLRequestBody (bsc#1197096). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1031=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-2.4.51-150200.3.42.1 apache2-debuginfo-2.4.51-150200.3.42.1 apache2-debugsource-2.4.51-150200.3.42.1 apache2-devel-2.4.51-150200.3.42.1 apache2-event-2.4.51-150200.3.42.1 apache2-event-debuginfo-2.4.51-150200.3.42.1 apache2-example-pages-2.4.51-150200.3.42.1 apache2-prefork-2.4.51-150200.3.42.1 apache2-prefork-debuginfo-2.4.51-150200.3.42.1 apache2-utils-2.4.51-150200.3.42.1 apache2-utils-debuginfo-2.4.51-150200.3.42.1 apache2-worker-2.4.51-150200.3.42.1 apache2-worker-debuginfo-2.4.51-150200.3.42.1 - openSUSE Leap 15.3 (noarch): apache2-doc-2.4.51-150200.3.42.1 References: https://www.suse.com/security/cve/CVE-2022-22719.html https://www.suse.com/security/cve/CVE-2022-22720.html https://www.suse.com/security/cve/CVE-2022-22721.html https://www.suse.com/security/cve/CVE-2022-23943.html https://bugzilla.suse.com/1197091 https://bugzilla.suse.com/1197095 https://bugzilla.suse.com/1197096 https://bugzilla.suse.com/1197098

1 0

openSUSE-RU-2022:1021-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1021-1 Rating: moderate References: #1195899 SLE-23868 SLE-23870 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains two features can now be installed. Description: This update for systemd fixes the following issues: - allow setting external core size to infinity (bsc#1195899 jsc#SLE-23868 jsc#SLE-23870) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1021=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1021=1 Package List: - openSUSE Leap 15.4 (noarch): systemd-bash-completion-234-24.108.1 - openSUSE Leap 15.3 (noarch): systemd-bash-completion-234-24.108.1 References: https://bugzilla.suse.com/1195899

1 0

openSUSE-RU-2022:0092-1: moderate: Recommended update for python-wxPython
by maintenance＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Recommended Update: Recommended update for python-wxPython ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0092-1 Rating: moderate References: #1095747 #1194593 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-wxPython fixes the following issues: Update to 4.0.7.post2: * Bugfix to switch to AVFoundation instead of QTKit Update to 4.0.7.post1 * This post-release just fixes a problem with the numpy dependency constraint for Python 2.7. (#1415) * Bug fixes in wx.lib.calendar: key navigation across month boundaries is now possible; key navigation now sets the date and fires the EVT_CALENDAR event; setter APIs now set the date correctly (#1230). * Switch to using a wx.Overlay in the Widget Inspection Tool to highlight widgets when running on a GTK3 port. * Fixed issue in wx.lib.agw.customtreectrl where label editor could remain stuck forever (#1235). * Fix a sometimes crash when using a wx.Overlay by letting the wx.DCOverlay hold a reference to the DC, to ensure that the DCOverlay is destroyed first. (PR#1301) * Ported the embedding sample from Classic, which shows how to use wxPython from a C++ wxWidgets application that embeds Python. (PR #1353) * Fixed wx.GetApp() to use wxWidgets' global wxApp instance instead of maintaining its own pointer. This way, if the wxApp is created by C++ code wxPython will still be able to get access to it. (#1126) * Several other PRs have been backported from the master branch (which will become wxPython 4.1.0), the full list can be seen here: https://github.com/wxWidgets/Phoenix/pull/1357 * Fixed a probably rare, but fatal bug on OSX when calling certain overloaded virtual methods with implementations in Python. * Fixed char pointers in generated stub code to have a valid pointer value. * Reverted the change that loads up install_requires from the contents of requirements.txt. Split the requirements.txt file into one for install and one for development. * Added missing HtmlWindow.ScrollToAnchor method, and also a couple methods in HtmlCell too. (#1141) * Added missing setters for the wheel-related properties in wx.MouseEvent. (#1140) * Updated wxWidgets commit reference, bringing fixes for #1140, #1086 and #1147. * Fix the use of the output parameter in HtmlWindow.OnOpeningURL the same way it was fixed in HtmlWindowInterface.OnHTMLOpeningURL. (#1068) * Fixed a crashing bug when using a member of a transient wx.VisualAttributes object. Also set the attributes to be read-only to simplify the fix. (#1198). * Updated the sip being used in wxPython builds to version 4.19.16. * Added helper functions to check results of wxWidgets configure during the build of wxPython. Currently used to determine if the wx webview, glcanvas, and media libraries should be added to the link command. (#1138) * Fixed scrollbar issue with ListCtrlAutoWidthMixin (#1215) * Fixed file access in the wx.py and wx.tools.pywxrc packages to be Python 2 and 3 compatible. (#1193, #1156) * Fixes for building with Python 3.8 on Linux. (#1227) Update to 4.0.4 * Fixed an issue where wx.lib.intctrl would erroneously attempt to use long on Python3. (#898) * Include the MSVC runtime DLLs for Python 3.7 builds too. * Clear LIBPATH_PYEXT and LIB_PYEXT for linux builds too. (#904) * Added a dependency on the Pillow package since it's used in some wx.lib.agw modules. (PR #908) * Add flag to hide page in wx.lib.agw.aui.notebook. (#895) * Switch wx.lib.plot to issue deprecation warnings with PlotPendingDeprecation so it doesn't have to enable all warnings to get them to be shown by default. (#902) * Added a Python 3.7 builder on Fedora 28. (#925) * Fix the object ownership transfer for wx.Menu.Insert() (#931) * Added wx.Treebook.GetTreeCtrl, wx.Listbook.GetListView and wx.Choicebook.GetChoiceCtrl. (#918) * Removed the wx.BookCtrlBase.RemovePage workaround as it was causing problems and doesn't seem to be necessary any more. The existing wxWidgets assertions are catching the out of range error just fine, however if wxWidgets was built without the debug helpers turned on then it could still cause a crash. (#888) * Reverted the changes which removed the content of the wx.lib.pubsub package and encouraged users to switch to the real PyPubSub package instead. Removing it caused more issues than were expected so it has been restored and the code updated to PyPubSub v3.3.0. Version 4.0.0 is available upstream, but it is not compatible with Python 2.7. Now, wx.lib.pubsub is actually deprecated instead of just trying to pass control over to the upstream PyPubSub library. (#932) * Improve calltip stability in pyshell. (#941) * Fix TypeError in wx.lib.throbber. (#924) * Fix missing parameter tool_id in wx.lib.agw.ribbon.toolbar.RibbonToolBar.AddToggleTool. (#947) * Add a step to wx.Config.ReadInt to attempt converting from long to int under python2. (#384) * Add virtual behavior for wx.RichTextCtrl and wx.TextCtrl's Copy/Cut/Paste methods and their Can* counterparts. (#954) * Fix IO type in wx.lib.agw.thumbnailctrl (#959) * Fix type error that would occur using pycolourchooser. (#957) * Optimize line drawing in HyperTreeList. (#973) * Add wrapper for wx.StaticBox.GetBordersForSizer and use it in the demo to do platform-specific layout of the items in the StaticBox. (#974) * Update wx.Point, wx.RealPoint, and wx.Size to use floating point arithmetic when conducting scalar multiplication (#971) * Fix load/save bugs in PySlices (PR#978) * Replace deprecated PIL.Image.tostring (PR#1005) * Fix rendering and mouse sensitivity in UltimateListCtrl when adding HyperText items. (#1010) * Added a parameter to lib.agw.CustomTreeCtrl.SetItemWindow(), to allow positioning the Window (a small image) on the left of text in a CustomTreeItem. (#PR886). * Declared DeleteAllPages in the notebook subclasses, so the proper C++ implementation will be called. (#972) * Removed wx.lib.floatbar, which has been deprecated forever and probably hasn't been working in nearly as long. (#976) * Updated SIP to version 4.19.13. * Fix an issue in wx.lib.agw.aui.AuiManager where the orientation of an AuiToolBar would not be updated when calling LoadPerspective. (#917) * Fixed a bug in wx.FileSystemHandler.OpenFile where the object ownership was not being transferred correctly, causing a crash after a premature object deletion. (#926) * Fixed wx.ListCtrl.Append when wx.LC_SORT style is used, so appending items out of order does not lose the data for the remaining columns. (#906) * Add wx.Accessible, it's Windows-only, will raise a NotImplementedError exception on the other platforms. (#958) * Added the ability to generate stub classes for use when optional wxWidgets features are not part of the build. So far, stubs are available for wx.Accessible, wx.FileSystemWatcher, wx.glcanvas, wx.media and wx.html2. * Moved the wxpy_api.h file into the wx package at wx/include/wxPython so it will be included in the wheel file. (#961) * Fixed how string data is added to a virtual file-like object in wx.MemoryFSHandler. All strings are now added to the file as utf-8 encoded data, in both Python2 and Python3, and will be read from the virtual file the same way. If you need to use some other encoding for some reason you can first convert the text to a bytesarray or other buffer protocol compatible object and then create the virtual file from that data. (#969) * Performance update for wx.lib.agw.customtreectrl (#1049) * Ensure that colours set in wx.lib.agw.customtreectrl.TreeItemAttr are instances of wx.Colour. (#1032) * Fix drawing of ticks in wx.lib.agw.speedmeter when there are negative bounds values. (#1013) * wxWidgets for Mac includes the wxJoystick class now, also update the demo. (#997) * Fix wx.html.HtmlPrintout to not be seen as an abstract class, so it can be instantiated. (#1060) * Fix wx.aui.AuiNotbook.SetArtProvider to properly transfer ownership of the art object from Python to C++. This possible double-deletion and related crashing problems. (#1061) * Fixed the wrappers for wx.html.HtmlWindow.OnOpeningURL to properly handle the redirect output parameter. (#1068) This is a backwards-incompatible change, please see the Migration Guide for details. * TabNavigatorWindow works similarly to other programs now. It's resizable and draggable so if user has tons of files with long names, it isn't an irritation anymore plastered right in the middle of the screen and can't be worked with easily and ESC now cancels the popup with a proper returnId. (#1096) * Added missing methods in wx.ListBox, SetItemForegroundColour, SetItemBackgroundColour and SetItemFont. (#1095) * Backported a fix in wxWidgets that avoids crashing in hhctrl.ocx when using context sensitive help in 64-bit builds on Windows. (#1104) - Update to 4.0.3 * Fixed a linking problem on macOS. The new waf added an explicit link to the Python shared library which meant that it would try to load it at runtime, even if a different Python (such as Anaconda, EDM or Homebrew) was used to import wxPython. This, of course, caused runtime errors. (#892) * Sort pages by dock_pos when added to automatic (agw.aui) notebook. (#882) * Fix a bug in py.introspect.getTokens. (#889) * Added Vagrant configuration for Fedora-28. Removed Fedora-23 (#884) * Added wrappers for the wx.WindowIDRef class and added the wx.NewIdRef function. These will make it possible to create reserved Window IDs using the same mechanism which is used when passing wx.ID_ANY to a widget constructor. The object returned by wx.NewIdRef will automatically convert to an int when passing it to a window constructor, and can also be used as the source in a Bind(). (#896) * Fixed issue when sys.prefix is not unicode (Python2) and when its contents are not translatable to utf-8. - Update to 4.0.2 * Fixed wx.html2.EVT_WEBVIEW_NAVIGATING event not being sent on some versions of Linux. (#741) * wx.Sizers can now be used as an iterator to iterate over the items within the sizer. (#738) * Fix Python3 division in ThumbnailCtrl. (#746) * Fix leaking image list in CheckListCtrlMixin (#752) * All items marked as deprecated in the wxWidgets interface (documentation) files will now throw a DeprecationWarning when used from wxPython. Many of these items are disappearing in 4.1 so it's important to ensure they are deprecated at runtime too instead of just in the docs. (#749) * Ensure that the attribute list given to the GLCanvas constructor is zero-terminated like it was in Classic. (#770) * Updated to the wxWidgets 3.0.4 release version. * Added the wxWidgets version number to the tail end of the string returned by wx.version(). * Bind EVT_WINDOW_DESTROY event only to the tree windows in CustomTreeCtrl, since otherwise it would be caught when child windows are destroyed too, which causes problems in this case. (#778) * Fixed a problem where wx.TreeCtrl.OnCompareItems was not being called in derived classes on Windows. This was due to an optimization that wasn't compatible with how the classes are wrapped. (#774) * Added wrappers for wx.ClassInfo and exposed wx.Object.GetClassInfo. This class is part of wxWidgets' internal type information system and although it is not very useful for Python applications it is useful for debugging some internal wxPython issues. * Removed the wx.lib.pubsub package, and replaced it with code that imports the standalone PyPubSub in order remain compatible with older code that still uses wx.lib.pubsub. (#782, #792) * Fixed bug in wx.lib.intctrl (#790) * Fixed subclassing of wx.TextCompleter and wx.TextCompleterSimple (#827) * Fixes for Python3 compatibility in PyCrust. (#823) * Fix wxGet to be able to use pip v10. (#817) * Change winid parameter in wx.ScrolledWindow to id, for consistency. (#816) * Ensure that the page exists in book controls GetPage and RemovePage methods. At least one of the wx ports do not do this. (#830) * Added missing wx.NumberEntryDialog * Change wx.TextCompleterSimple.GetCompletions to send the list of strings as a return value, rather than a parameter that gets filled. (#836) * Enabled the wx.GraphicsContext.Create(metaFileDC) wrapper (#811) * Metafile support is also available on OSX, so wx.msw.Metafile and wx.msw.MetafileDC have been moved to the core wx module. So they can now be accessed as wx.Metafile and wx.MetafileDC. * Updated the waf tool used by the build to version 2.0.7. This fixes problems with building for Python 3.7. * Fixed alignment in buttons on MSW which have had foreground or background colors set. (#815) * Fix for unexpected assertion inside wx.aui.AuiMDIChildFrame.Close. * Fix a bug in setting AuiDockingGuide size. (#727) * Remove unnecessary AUI notebook updating, and use wx.BufferedDC in Repaint() to mitigate flicker. (wx.lib.agw.aui). (#851, #686) * Fixed crashing bug when using client data with items in wx.dataview.DataViewTreeCtrl. (#856) * Detach wx.Control in AuiToolbar from current sizer before attach to a new one. (#843) * Fixed a problem in wx.lib.mixins.listctrl.TextEditMixin where the height of the editor widget could be set to zero. (See discussion in #849) * Fix a bug in calculating whether a tool fits into the AuiToolBar. (#863) * Override SetForegroundColour and SetBackgroundColour in MaskedEditMixin (#808) * Add an explicit wx.GraphicsContext.Create overload for wx.AutoBufferedPaintDC. (#783) * Return original AGW window style in AuiToolBar.GetAGWWindowStyleFlag. (#870) * Fix a bug in group management on wx.lib.masked.numctrl; the previous code used truediv ('/') to calculate _groupSpace, but in python 3.x this leads to a float result, instead of an integer as was expected. Using floordiv ('//') instead to solve the problem. (#865) * Hide the window when the tool does not fit into AuiToolBar. (#872) * Fixed the virtual dispatch code for the PGEditor.GetValueFromControl method to properly pass the parameters to the Python implementation, and also fixed how the return value is handled. (#742) * Fixed all implementations of the PGProperty.StringToValue and IntToValue methods to treat the value parameter as a return value. (#742) * Add missing wx.adv.EVT_CALENDAR_WEEK_CLICKED (#875) * Fixed the stock labels to conform to Windows design guidelines. (#787) * Always reset floating size and style when floating a toolbar in agw.aui. (#880) - Move "wx/*.so" libraries to main package, remove devel package (boo#1095747) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-92=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-92=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): rsyslog-8.2106.0-4.16.1 rsyslog-debuginfo-8.2106.0-4.16.1 rsyslog-debugsource-8.2106.0-4.16.1 rsyslog-diag-tools-8.2106.0-4.16.1 rsyslog-diag-tools-debuginfo-8.2106.0-4.16.1 rsyslog-doc-8.2106.0-4.16.1 rsyslog-module-dbi-8.2106.0-4.16.1 rsyslog-module-dbi-debuginfo-8.2106.0-4.16.1 rsyslog-module-elasticsearch-8.2106.0-4.16.1 rsyslog-module-elasticsearch-debuginfo-8.2106.0-4.16.1 rsyslog-module-gcrypt-8.2106.0-4.16.1 rsyslog-module-gcrypt-debuginfo-8.2106.0-4.16.1 rsyslog-module-gssapi-8.2106.0-4.16.1 rsyslog-module-gssapi-debuginfo-8.2106.0-4.16.1 rsyslog-module-gtls-8.2106.0-4.16.1 rsyslog-module-gtls-debuginfo-8.2106.0-4.16.1 rsyslog-module-mmnormalize-8.2106.0-4.16.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-4.16.1 rsyslog-module-mysql-8.2106.0-4.16.1 rsyslog-module-mysql-debuginfo-8.2106.0-4.16.1 rsyslog-module-omamqp1-8.2106.0-4.16.1 rsyslog-module-omamqp1-debuginfo-8.2106.0-4.16.1 rsyslog-module-omhttpfs-8.2106.0-4.16.1 rsyslog-module-omhttpfs-debuginfo-8.2106.0-4.16.1 rsyslog-module-omtcl-8.2106.0-4.16.1 rsyslog-module-omtcl-debuginfo-8.2106.0-4.16.1 rsyslog-module-ossl-8.2106.0-4.16.1 rsyslog-module-ossl-debuginfo-8.2106.0-4.16.1 rsyslog-module-pgsql-8.2106.0-4.16.1 rsyslog-module-pgsql-debuginfo-8.2106.0-4.16.1 rsyslog-module-relp-8.2106.0-4.16.1 rsyslog-module-relp-debuginfo-8.2106.0-4.16.1 rsyslog-module-snmp-8.2106.0-4.16.1 rsyslog-module-snmp-debuginfo-8.2106.0-4.16.1 rsyslog-module-udpspoof-8.2106.0-4.16.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-4.16.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): python2-wxPython-4.0.7.post2-bp153.2.1 python2-wxPython-lang-4.0.7.post2-bp153.2.1 python3-wxPython-4.0.7.post2-bp153.2.1 python3-wxPython-lang-4.0.7.post2-bp153.2.1 References: https://bugzilla.suse.com/1095747 https://bugzilla.suse.com/1194593

1 0

openSUSE-SU-2022:0091-1: important: Security update for apache2
by opensuse-security＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0091-1 Rating: important References: #1193942 #1193943 #1197552 SLE-22733 SLE-22849 Cross-References: CVE-2021-44224 CVE-2021-44790 CVE-2022-1096 CVSS scores: CVE-2021-44224 (NVD) : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2021-44224 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-44790 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-44790 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities, contains two features is now available. Description: This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849) It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log. Also fixed: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943) - CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-91=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-91=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-2.4.51-3.37.1 apache2-debuginfo-2.4.51-3.37.1 apache2-debugsource-2.4.51-3.37.1 apache2-devel-2.4.51-3.37.1 apache2-event-2.4.51-3.37.1 apache2-event-debuginfo-2.4.51-3.37.1 apache2-example-pages-2.4.51-3.37.1 apache2-prefork-2.4.51-3.37.1 apache2-prefork-debuginfo-2.4.51-3.37.1 apache2-utils-2.4.51-3.37.1 apache2-utils-debuginfo-2.4.51-3.37.1 apache2-worker-2.4.51-3.37.1 apache2-worker-debuginfo-2.4.51-3.37.1 - openSUSE Leap 15.3 (noarch): apache2-doc-2.4.51-3.37.1 - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-99.0.4844.84-bp153.2.75.1 chromium-99.0.4844.84-bp153.2.75.1 References: https://www.suse.com/security/cve/CVE-2021-44224.html https://www.suse.com/security/cve/CVE-2021-44790.html https://www.suse.com/security/cve/CVE-2022-1096.html https://bugzilla.suse.com/1193942 https://bugzilla.suse.com/1193943 https://bugzilla.suse.com/1197552

1 0

openSUSE-RU-2022:0957-1: moderate: Recommended update for trilinos
by maintenance＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Recommended Update: Recommended update for trilinos ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0957-1 Rating: moderate References: #1194648 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for trilinos fixes the following issues: - Update to version 13.2.0 For information on changes consult the release notes of its sub-packages. - Add dependency for library package to devel package. - Fix by calculating the relative path elements between the 'cmake' directory and the installation directory. This works only if 'Trilinos_INSTALL_LIB_DIR' is relative, while other parts of the code allow it to be absolute. (bsc#1194648) - Fix doc building. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-957=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenblas-gnu-hpc-0.3.13-150300.5.2.2 libopenblas-gnu-hpc-devel-0.3.13-150300.5.2.2 libopenblas-pthreads-gnu-hpc-0.3.13-150300.5.2.2 libopenblas-pthreads-gnu-hpc-devel-0.3.13-150300.5.2.2 libopenblas-pthreads_0_3_13-gnu-hpc-0.3.13-150300.5.2.2 libopenblas-pthreads_0_3_13-gnu-hpc-debuginfo-0.3.13-150300.5.2.2 libopenblas-pthreads_0_3_13-gnu-hpc-devel-0.3.13-150300.5.2.2 libopenblas_0_3_13-gnu-hpc-0.3.13-150300.5.2.2 libopenblas_0_3_13-gnu-hpc-debuginfo-0.3.13-150300.5.2.2 libopenblas_0_3_13-gnu-hpc-devel-0.3.13-150300.5.2.2 libopenblas_openmp-devel-0.3.13-150300.5.2.2 libopenblas_openmp0-0.3.13-150300.5.2.2 libopenblas_openmp0-debuginfo-0.3.13-150300.5.2.2 libopenblas_pthreads-devel-0.3.13-150300.5.2.3 libopenblas_pthreads0-0.3.13-150300.5.2.3 libopenblas_pthreads0-debuginfo-0.3.13-150300.5.2.3 libopenblas_serial-devel-0.3.13-150300.5.2.2 libopenblas_serial0-0.3.13-150300.5.2.2 libopenblas_serial0-debuginfo-0.3.13-150300.5.2.2 lua-lmod-8.4.28-150300.3.2.3 lua-lmod-debuginfo-8.4.28-150300.3.2.3 lua51-luafilesystem-1.7.0-3.2.3 lua51-luafilesystem-debuginfo-1.7.0-3.2.3 lua51-luafilesystem-debugsource-1.7.0-3.2.3 lua51-luaposix-34.1.1-3.2.3 lua51-luaposix-debuginfo-34.1.1-3.2.3 lua51-luaterm-0.07-5.2.3 lua51-luaterm-debuginfo-0.07-5.2.3 lua51-luaterm-debugsource-0.07-5.2.3 lua53-luafilesystem-1.7.0-3.2.3 lua53-luafilesystem-debuginfo-1.7.0-3.2.3 lua53-luafilesystem-debugsource-1.7.0-3.2.3 lua53-luaposix-34.1.1-3.2.3 lua53-luaposix-debuginfo-34.1.1-3.2.3 lua53-luaterm-0.07-5.2.3 lua53-luaterm-debuginfo-0.07-5.2.3 lua53-luaterm-debugsource-0.07-5.2.3 mpich-3.3.2-150300.9.2.2 mpich-debuginfo-3.3.2-150300.9.2.2 mpich-debugsource-3.3.2-150300.9.2.2 mpich-devel-3.3.2-150300.9.2.2 mpich-gnu-hpc-3.3.2-150300.9.2.2 mpich-gnu-hpc-devel-3.3.2-150300.9.2.2 mpich-gnu-hpc-devel-static-3.3.2-150300.9.2.2 mpich-ofi-3.3.2-150300.9.2.2 mpich-ofi-debuginfo-3.3.2-150300.9.2.2 mpich-ofi-debugsource-3.3.2-150300.9.2.2 mpich-ofi-devel-3.3.2-150300.9.2.2 mpich-ofi-gnu-hpc-3.3.2-150300.9.2.2 mpich-ofi-gnu-hpc-devel-3.3.2-150300.9.2.2 mpich-ofi-gnu-hpc-devel-static-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-debuginfo-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-debugsource-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-devel-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-devel-static-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-macros-devel-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-debuginfo-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-debugsource-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-devel-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-devel-static-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-macros-devel-3.3.2-150300.9.2.2 openblas-devel-0.3.13-150300.5.2.2 openblas-pthreads_0_3_13-gnu-hpc-debugsource-0.3.13-150300.5.2.2 openblas-pthreads_0_3_13-gnu-hpc-devel-static-0.3.13-150300.5.2.2 openblas_0_3_13-gnu-hpc-debugsource-0.3.13-150300.5.2.2 openblas_0_3_13-gnu-hpc-devel-static-0.3.13-150300.5.2.2 openblas_openmp-debugsource-0.3.13-150300.5.2.2 openblas_openmp-devel-static-0.3.13-150300.5.2.2 openblas_pthreads-debugsource-0.3.13-150300.5.2.3 openblas_pthreads-devel-static-0.3.13-150300.5.2.3 openblas_serial-debugsource-0.3.13-150300.5.2.2 openblas_serial-devel-static-0.3.13-150300.5.2.2 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libtrilinos-gnu-mpich-hpc-13.2.0-150300.3.3.3 libtrilinos-gnu-mvapich2-hpc-13.2.0-150300.3.3.3 libtrilinos-gnu-openmpi2-hpc-13.2.0-150300.3.3.3 libtrilinos-gnu-openmpi3-hpc-13.2.0-150300.3.3.3 libtrilinos-gnu-openmpi4-hpc-13.2.0-150300.3.3.2 - openSUSE Leap 15.3 (noarch): gnu-compilers-hpc-1.4-3.16.2 gnu-compilers-hpc-devel-1.4-3.16.2 gnu-compilers-hpc-macros-devel-1.4-3.16.2 gnu10-compilers-hpc-1.4-3.16.2 gnu10-compilers-hpc-devel-1.4-3.16.2 gnu10-compilers-hpc-macros-devel-1.4-3.16.2 gnu11-compilers-hpc-1.4-3.16.2 gnu11-compilers-hpc-devel-1.4-3.16.2 gnu11-compilers-hpc-macros-devel-1.4-3.16.2 gnu8-compilers-hpc-1.4-3.16.2 gnu8-compilers-hpc-devel-1.4-3.16.2 gnu8-compilers-hpc-macros-devel-1.4-3.16.2 gnu9-compilers-hpc-1.4-3.16.2 gnu9-compilers-hpc-devel-1.4-3.16.2 gnu9-compilers-hpc-macros-devel-1.4-3.16.2 lua-lmod-doc-8.4.28-150300.3.2.3 luaposix-doc-34.1.1-3.2.3 mpich-gnu-hpc-macros-devel-3.3.2-150300.9.2.2 mpich-ofi-gnu-hpc-macros-devel-3.3.2-150300.9.2.2 openblas-devel-headers-0.3.13-150300.5.2.2 trilinos-gnu-mpich-hpc-devel-13.2.0-150300.3.3.3 trilinos-gnu-mvapich2-hpc-devel-13.2.0-150300.3.3.3 trilinos-gnu-openmpi2-hpc-devel-13.2.0-150300.3.3.3 trilinos-gnu-openmpi3-hpc-devel-13.2.0-150300.3.3.3 trilinos-gnu-openmpi4-hpc-devel-13.2.0-150300.3.3.2 trilinos-hpc-doc-13.2.0-150300.3.3.3 References: https://bugzilla.suse.com/1194648

1 0

openSUSE-SU-2022:0953-1: moderate: Security update for perl-DBD-SQLite
by opensuse-security＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Security Update: Security update for perl-DBD-SQLite ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0953-1 Rating: moderate References: #1195771 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for perl-DBD-SQLite fixes the following issues: - updated to 1.66 - Use external sqlite3 library rather than internal code. (bsc#1195771) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-953=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-953=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): perl-DBD-SQLite-1.66-150300.3.3.1 perl-DBD-SQLite-debuginfo-1.66-150300.3.3.1 perl-DBD-SQLite-debugsource-1.66-150300.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): perl-DBD-SQLite-1.66-150300.3.3.1 perl-DBD-SQLite-debuginfo-1.66-150300.3.3.1 perl-DBD-SQLite-debugsource-1.66-150300.3.3.1 References: https://bugzilla.suse.com/1195771

1 0

openSUSE-SU-2022:0954-1: moderate: Security update for wavpack
by opensuse-security＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Security Update: Security update for wavpack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0954-1 Rating: moderate References: #1197020 Cross-References: CVE-2021-44269 CVSS scores: CVE-2021-44269 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-44269 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wavpack fixes the following issues: - CVE-2021-44269: Fixed out of bounds read in processing .wav files (bsc#1197020). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-954=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-954=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libwavpack1-5.4.0-4.12.1 libwavpack1-debuginfo-5.4.0-4.12.1 wavpack-5.4.0-4.12.1 wavpack-debuginfo-5.4.0-4.12.1 wavpack-debugsource-5.4.0-4.12.1 wavpack-devel-5.4.0-4.12.1 - openSUSE Leap 15.4 (x86_64): libwavpack1-32bit-5.4.0-4.12.1 libwavpack1-32bit-debuginfo-5.4.0-4.12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libwavpack1-5.4.0-4.12.1 libwavpack1-debuginfo-5.4.0-4.12.1 wavpack-5.4.0-4.12.1 wavpack-debuginfo-5.4.0-4.12.1 wavpack-debugsource-5.4.0-4.12.1 wavpack-devel-5.4.0-4.12.1 - openSUSE Leap 15.3 (x86_64): libwavpack1-32bit-5.4.0-4.12.1 libwavpack1-32bit-debuginfo-5.4.0-4.12.1 References: https://www.suse.com/security/cve/CVE-2021-44269.html https://bugzilla.suse.com/1197020

1 0

openSUSE-RU-2022:0952-1: moderate: Recommended update for rpmlint
by maintenance＠opensuse.org 25 Mar '22

25 Mar '22

openSUSE Recommended Update: Recommended update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0952-1 Rating: moderate References: #1178848 #1194799 #1196149 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for rpmlint fixes the following issues: - Add tukitd dbus whitelist (bsc#1196149) - Add kpmcore whitelisting (bsc#1178848). - Add whitelisting for NetworkManager nm-priv helper for SLE-15-SP4 (bsc#1194799). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-952=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-952=1 Package List: - openSUSE Leap 15.4 (noarch): rpmlint-1.10-7.45.1 - openSUSE Leap 15.3 (noarch): rpmlint-1.10-7.45.1 References: https://bugzilla.suse.com/1178848 https://bugzilla.suse.com/1194799 https://bugzilla.suse.com/1196149

1 0

openSUSE-RU-2022:0948-1: moderate: Recommended update for sudo
by maintenance＠opensuse.org 25 Mar '22

25 Mar '22

openSUSE Recommended Update: Recommended update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0948-1 Rating: moderate References: #1193446 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sudo fixes the following issues: - Fix user set timeout not being honored (bsc#1193446) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-948=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): sudo-1.9.5p2-150300.3.6.1 sudo-debuginfo-1.9.5p2-150300.3.6.1 sudo-debugsource-1.9.5p2-150300.3.6.1 sudo-devel-1.9.5p2-150300.3.6.1 sudo-plugin-python-1.9.5p2-150300.3.6.1 sudo-plugin-python-debuginfo-1.9.5p2-150300.3.6.1 sudo-test-1.9.5p2-150300.3.6.1 References: https://bugzilla.suse.com/1193446

1 0

openSUSE-FU-2022:0950-1: moderate: Feature update for lifecycle-data-sle-module-development-tools
by maintenance＠opensuse.org 25 Mar '22

25 Mar '22

openSUSE Feature Update: Feature update for lifecycle-data-sle-module-development-tools ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0950-1 Rating: moderate References: ECO-2373 SLE-16821 SLE-16822 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 feature fixes and contains three features can now be installed. Description: This feature update for lifecycle-data-sle-module-development-tools fixes the following issues: - Added expiration data for GCC 10 yearly update for the Toolchain/Development modules (jsc#ECO-2373, jsc#SLE-16821, jsc#SLE-16822) Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-950=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-950=1 Package List: - openSUSE Leap 15.4 (noarch): lifecycle-data-sle-module-development-tools-1-3.13.1 - openSUSE Leap 15.3 (noarch): lifecycle-data-sle-module-development-tools-1-3.13.1 References:

1 0

openSUSE-RU-2022:0947-1: moderate: Recommended update for dapl
by maintenance＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Recommended Update: Recommended update for dapl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0947-1 Rating: moderate References: #1047218 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dapl fixes the following issues: - Allow to override build date in order to allow for reproducible builds. (bsc#1047218) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-947=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-947=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): dapl-2.1.10-3.6.1 dapl-debug-2.1.10-3.6.1 dapl-debug-debuginfo-2.1.10-3.6.1 dapl-debug-debugsource-2.1.10-3.6.1 dapl-debug-devel-2.1.10-3.6.1 dapl-debug-libs-2.1.10-3.6.1 dapl-debug-libs-debuginfo-2.1.10-3.6.1 dapl-debug-utils-2.1.10-3.6.1 dapl-debug-utils-debuginfo-2.1.10-3.6.1 dapl-debuginfo-2.1.10-3.6.1 dapl-debugsource-2.1.10-3.6.1 dapl-devel-2.1.10-3.6.1 dapl-utils-2.1.10-3.6.1 dapl-utils-debuginfo-2.1.10-3.6.1 libdat2-2-2.1.10-3.6.1 libdat2-2-debuginfo-2.1.10-3.6.1 - openSUSE Leap 15.4 (x86_64): dapl-devel-32bit-2.1.10-3.6.1 libdat2-2-32bit-2.1.10-3.6.1 libdat2-2-32bit-debuginfo-2.1.10-3.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dapl-2.1.10-3.6.1 dapl-debug-2.1.10-3.6.1 dapl-debug-debuginfo-2.1.10-3.6.1 dapl-debug-debugsource-2.1.10-3.6.1 dapl-debug-devel-2.1.10-3.6.1 dapl-debug-libs-2.1.10-3.6.1 dapl-debug-libs-debuginfo-2.1.10-3.6.1 dapl-debug-utils-2.1.10-3.6.1 dapl-debug-utils-debuginfo-2.1.10-3.6.1 dapl-debuginfo-2.1.10-3.6.1 dapl-debugsource-2.1.10-3.6.1 dapl-devel-2.1.10-3.6.1 dapl-utils-2.1.10-3.6.1 dapl-utils-debuginfo-2.1.10-3.6.1 libdat2-2-2.1.10-3.6.1 libdat2-2-debuginfo-2.1.10-3.6.1 - openSUSE Leap 15.3 (x86_64): dapl-devel-32bit-2.1.10-3.6.1 libdat2-2-32bit-2.1.10-3.6.1 libdat2-2-32bit-debuginfo-2.1.10-3.6.1 References: https://bugzilla.suse.com/1047218

1 0

openSUSE-SU-2022:0946-1: important: Security update for bind
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0946-1 Rating: important References: #1197135 Cross-References: CVE-2021-25220 CVSS scores: CVE-2021-25220 (SUSE): 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose caching rules (bsc#1197135). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-946=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-946=1 Package List: - openSUSE Leap 15.4 (x86_64): bind-devel-32bit-9.16.6-150000.12.60.1 libbind9-1600-32bit-9.16.6-150000.12.60.1 libbind9-1600-32bit-debuginfo-9.16.6-150000.12.60.1 libdns1605-32bit-9.16.6-150000.12.60.1 libdns1605-32bit-debuginfo-9.16.6-150000.12.60.1 libirs1601-32bit-9.16.6-150000.12.60.1 libirs1601-32bit-debuginfo-9.16.6-150000.12.60.1 libisc1606-32bit-9.16.6-150000.12.60.1 libisc1606-32bit-debuginfo-9.16.6-150000.12.60.1 libisccc1600-32bit-9.16.6-150000.12.60.1 libisccc1600-32bit-debuginfo-9.16.6-150000.12.60.1 libisccfg1600-32bit-9.16.6-150000.12.60.1 libisccfg1600-32bit-debuginfo-9.16.6-150000.12.60.1 libns1604-32bit-9.16.6-150000.12.60.1 libns1604-32bit-debuginfo-9.16.6-150000.12.60.1 - openSUSE Leap 15.3 (x86_64): bind-devel-32bit-9.16.6-150000.12.60.1 libbind9-1600-32bit-9.16.6-150000.12.60.1 libbind9-1600-32bit-debuginfo-9.16.6-150000.12.60.1 libdns1605-32bit-9.16.6-150000.12.60.1 libdns1605-32bit-debuginfo-9.16.6-150000.12.60.1 libirs1601-32bit-9.16.6-150000.12.60.1 libirs1601-32bit-debuginfo-9.16.6-150000.12.60.1 libisc1606-32bit-9.16.6-150000.12.60.1 libisc1606-32bit-debuginfo-9.16.6-150000.12.60.1 libisccc1600-32bit-9.16.6-150000.12.60.1 libisccc1600-32bit-debuginfo-9.16.6-150000.12.60.1 libisccfg1600-32bit-9.16.6-150000.12.60.1 libisccfg1600-32bit-debuginfo-9.16.6-150000.12.60.1 libns1604-32bit-9.16.6-150000.12.60.1 libns1604-32bit-debuginfo-9.16.6-150000.12.60.1 References: https://www.suse.com/security/cve/CVE-2021-25220.html https://bugzilla.suse.com/1197135

1 0

openSUSE-SU-2022:0945-1: important: Security update for bind
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0945-1 Rating: important References: #1197135 Cross-References: CVE-2021-25220 CVSS scores: CVE-2021-25220 (SUSE): 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose caching rules (bsc#1197135). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-945=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-945=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): bind-chrootenv-9.16.6-150300.22.16.1 bind-devel-9.16.6-150300.22.16.1 libbind9-1600-9.16.6-150300.22.16.1 libbind9-1600-debuginfo-9.16.6-150300.22.16.1 libdns1605-9.16.6-150300.22.16.1 libdns1605-debuginfo-9.16.6-150300.22.16.1 libirs-devel-9.16.6-150300.22.16.1 libirs1601-9.16.6-150300.22.16.1 libirs1601-debuginfo-9.16.6-150300.22.16.1 libisc1606-9.16.6-150300.22.16.1 libisc1606-debuginfo-9.16.6-150300.22.16.1 libisccc1600-9.16.6-150300.22.16.1 libisccc1600-debuginfo-9.16.6-150300.22.16.1 libisccfg1600-9.16.6-150300.22.16.1 libisccfg1600-debuginfo-9.16.6-150300.22.16.1 libns1604-9.16.6-150300.22.16.1 libns1604-debuginfo-9.16.6-150300.22.16.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): bind-9.16.6-150300.22.16.1 bind-chrootenv-9.16.6-150300.22.16.1 bind-debuginfo-9.16.6-150300.22.16.1 bind-debugsource-9.16.6-150300.22.16.1 bind-devel-9.16.6-150300.22.16.1 bind-utils-9.16.6-150300.22.16.1 bind-utils-debuginfo-9.16.6-150300.22.16.1 libbind9-1600-9.16.6-150300.22.16.1 libbind9-1600-debuginfo-9.16.6-150300.22.16.1 libdns1605-9.16.6-150300.22.16.1 libdns1605-debuginfo-9.16.6-150300.22.16.1 libirs-devel-9.16.6-150300.22.16.1 libirs1601-9.16.6-150300.22.16.1 libirs1601-debuginfo-9.16.6-150300.22.16.1 libisc1606-9.16.6-150300.22.16.1 libisc1606-debuginfo-9.16.6-150300.22.16.1 libisccc1600-9.16.6-150300.22.16.1 libisccc1600-debuginfo-9.16.6-150300.22.16.1 libisccfg1600-9.16.6-150300.22.16.1 libisccfg1600-debuginfo-9.16.6-150300.22.16.1 libns1604-9.16.6-150300.22.16.1 libns1604-debuginfo-9.16.6-150300.22.16.1 - openSUSE Leap 15.3 (noarch): bind-doc-9.16.6-150300.22.16.1 python3-bind-9.16.6-150300.22.16.1 References: https://www.suse.com/security/cve/CVE-2021-25220.html https://bugzilla.suse.com/1197135

1 0

openSUSE-SU-2022:0944-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0944-1 Rating: moderate References: #1022528 #1188572 #1189528 Cross-References: CVE-2017-5601 CVE-2021-36976 CVSS scores: CVE-2017-5601 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2017-5601 (SUSE): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L CVE-2021-36976 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-36976 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for libarchive fixes the following issues: - CVE-2021-36976: Fixed an invalid memory access that could cause data corruption (bsc#1188572). Non-security updates: - Updated references for CVE-2017-5601, which was already fixed in a previous version (bsc#1022528 bsc#1189528). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-944=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): bsdtar-3.4.2-150200.4.3.1 bsdtar-debuginfo-3.4.2-150200.4.3.1 libarchive-debugsource-3.4.2-150200.4.3.1 libarchive-devel-3.4.2-150200.4.3.1 libarchive13-3.4.2-150200.4.3.1 libarchive13-debuginfo-3.4.2-150200.4.3.1 - openSUSE Leap 15.3 (x86_64): libarchive13-32bit-3.4.2-150200.4.3.1 libarchive13-32bit-debuginfo-3.4.2-150200.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-5601.html https://www.suse.com/security/cve/CVE-2021-36976.html https://bugzilla.suse.com/1022528 https://bugzilla.suse.com/1188572 https://bugzilla.suse.com/1189528

1 0

openSUSE-SU-2022:0943-1: moderate: Security update for slirp4netns
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for slirp4netns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0943-1 Rating: moderate References: #1179467 Cross-References: CVE-2020-29130 CVSS scores: CVE-2020-29130 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2020-29130 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slirp4netns fixes the following issues: - CVE-2020-29130: Fixed an invalid memory access while processing ARP packets (bsc#1179467). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-943=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-943=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): slirp4netns-0.4.7-3.15.1 slirp4netns-debuginfo-0.4.7-3.15.1 slirp4netns-debugsource-0.4.7-3.15.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): slirp4netns-0.4.7-3.15.1 slirp4netns-debuginfo-0.4.7-3.15.1 slirp4netns-debugsource-0.4.7-3.15.1 References: https://www.suse.com/security/cve/CVE-2020-29130.html https://bugzilla.suse.com/1179467

1 0

openSUSE-SU-2022:0942-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0942-1 Rating: moderate References: #1186819 Cross-References: CVE-2021-3572 CVSS scores: CVE-2021-3572 (SUSE): 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-942=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-942=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.21.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.21.1 python3-3.6.15-150300.10.21.1 python3-base-3.6.15-150300.10.21.1 python3-base-debuginfo-3.6.15-150300.10.21.1 python3-core-debugsource-3.6.15-150300.10.21.1 python3-curses-3.6.15-150300.10.21.1 python3-curses-debuginfo-3.6.15-150300.10.21.1 python3-dbm-3.6.15-150300.10.21.1 python3-dbm-debuginfo-3.6.15-150300.10.21.1 python3-debuginfo-3.6.15-150300.10.21.1 python3-debugsource-3.6.15-150300.10.21.1 python3-devel-3.6.15-150300.10.21.1 python3-devel-debuginfo-3.6.15-150300.10.21.1 python3-doc-3.6.15-150300.10.21.1 python3-doc-devhelp-3.6.15-150300.10.21.1 python3-idle-3.6.15-150300.10.21.1 python3-testsuite-3.6.15-150300.10.21.1 python3-testsuite-debuginfo-3.6.15-150300.10.21.1 python3-tk-3.6.15-150300.10.21.1 python3-tk-debuginfo-3.6.15-150300.10.21.1 python3-tools-3.6.15-150300.10.21.1 - openSUSE Leap 15.4 (x86_64): libpython3_6m1_0-32bit-3.6.15-150300.10.21.1 libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.21.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.21.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.21.1 python3-3.6.15-150300.10.21.1 python3-base-3.6.15-150300.10.21.1 python3-base-debuginfo-3.6.15-150300.10.21.1 python3-core-debugsource-3.6.15-150300.10.21.1 python3-curses-3.6.15-150300.10.21.1 python3-curses-debuginfo-3.6.15-150300.10.21.1 python3-dbm-3.6.15-150300.10.21.1 python3-dbm-debuginfo-3.6.15-150300.10.21.1 python3-debuginfo-3.6.15-150300.10.21.1 python3-debugsource-3.6.15-150300.10.21.1 python3-devel-3.6.15-150300.10.21.1 python3-devel-debuginfo-3.6.15-150300.10.21.1 python3-doc-3.6.15-150300.10.21.1 python3-doc-devhelp-3.6.15-150300.10.21.1 python3-idle-3.6.15-150300.10.21.1 python3-testsuite-3.6.15-150300.10.21.1 python3-testsuite-debuginfo-3.6.15-150300.10.21.1 python3-tk-3.6.15-150300.10.21.1 python3-tk-debuginfo-3.6.15-150300.10.21.1 python3-tools-3.6.15-150300.10.21.1 - openSUSE Leap 15.3 (x86_64): libpython3_6m1_0-32bit-3.6.15-150300.10.21.1 libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.21.1 References: https://www.suse.com/security/cve/CVE-2021-3572.html https://bugzilla.suse.com/1186819

1 0

openSUSE-RU-2022:0090-1: moderate: Recommended update for chromium
by maintenance＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Recommended Update: Recommended update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0090-1 Rating: moderate References: #1197332 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chromium fixes the following issues: Update to version 99.0.4844.82: - Fixed a potential problem in Hangouts (boo#1197332) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-90=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-99.0.4844.82-bp153.2.72.1 chromium-99.0.4844.82-bp153.2.72.1 References: https://bugzilla.suse.com/1197332

1 0

openSUSE-SU-2022:0089-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 23 Mar '22

23 Mar '22

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0089-1 Rating: moderate References: #1196905 #1196908 #1196952 Cross-References: CVE-2021-41239 CVE-2021-41241 CVE-2021-41741 CVSS scores: CVE-2021-41239 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-41239 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: nextcloud was updated to 21.0.9: - CVE-2021-41239 (CWE-200): user enumeration setting not obeyed in User Status API (boo#1196905) - CVE-2021-41241 (CWE-863): groupfolders advanced permissions is not obeyed for subfolders (boo#1196908) - CVE-2021-41741 (CWE-400): High memory usage for generating preview of broken image (boo#1196952) - For more changes see https://nextcloud.com/changelog/#21-0-9 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-89=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nextcloud-21.0.9-37.1 nextcloud-apache-21.0.9-37.1 References: https://www.suse.com/security/cve/CVE-2021-41239.html https://www.suse.com/security/cve/CVE-2021-41241.html https://www.suse.com/security/cve/CVE-2021-41741.html https://bugzilla.suse.com/1196905 https://bugzilla.suse.com/1196908 https://bugzilla.suse.com/1196952

1 0

openSUSE-SU-2022:0940-1: important: Security update for xen
by opensuse-security＠opensuse.org 23 Mar '22

23 Mar '22

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0940-1 Rating: important References: #1027519 #1191668 #1194267 #1196915 Cross-References: CVE-2021-26401 CVE-2022-0001 CVE-2022-0002 CVSS scores: CVE-2021-26401 (NVD) : 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2021-26401 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0001 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0001 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0002 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0002 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for xen fixes the following issues: Update Xen to version 4.14.4 (bsc#1027519) Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named "Branch Target Injection" and "Intra-Mode Branch History Injection" are now mitigated. Security issues fixed: - CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: BHB speculation issues (bsc#1196915). Non-security issues fixed: - Fixed issue around xl and virsh operation - virsh list not giving any output (bsc#1191668). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-940=1 Package List: - openSUSE Leap 15.3 (aarch64 x86_64): xen-4.14.4_02-150300.3.21.1 xen-debugsource-4.14.4_02-150300.3.21.1 xen-devel-4.14.4_02-150300.3.21.1 xen-doc-html-4.14.4_02-150300.3.21.1 xen-libs-4.14.4_02-150300.3.21.1 xen-libs-debuginfo-4.14.4_02-150300.3.21.1 xen-tools-4.14.4_02-150300.3.21.1 xen-tools-debuginfo-4.14.4_02-150300.3.21.1 xen-tools-domU-4.14.4_02-150300.3.21.1 xen-tools-domU-debuginfo-4.14.4_02-150300.3.21.1 - openSUSE Leap 15.3 (x86_64): xen-libs-32bit-4.14.4_02-150300.3.21.1 xen-libs-32bit-debuginfo-4.14.4_02-150300.3.21.1 - openSUSE Leap 15.3 (noarch): xen-tools-xendomains-wait-disk-4.14.4_02-150300.3.21.1 References: https://www.suse.com/security/cve/CVE-2021-26401.html https://www.suse.com/security/cve/CVE-2022-0001.html https://www.suse.com/security/cve/CVE-2022-0002.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1191668 https://bugzilla.suse.com/1194267 https://bugzilla.suse.com/1196915

1 0

openSUSE-RU-2022:0936-1: moderate: Recommended update for filesystem and systemd-rpm-macros
by maintenance＠opensuse.org 22 Mar '22

22 Mar '22

openSUSE Recommended Update: Recommended update for filesystem and systemd-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0936-1 Rating: moderate References: #1196275 #1196406 SLE-20639 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for filesystem and systemd-rpm-macros fixes the following issues: filesystem: - Add path /lib/modprobe.d (bsc#1196275, jsc#SLE-20639) systemd-rpm-macros: - Make %_modprobedir point to /lib/modprobe.d (bsc#1196275, bsc#1196406) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-936=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-936=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): filesystem-15.0-11.8.1 - openSUSE Leap 15.4 (noarch): systemd-rpm-macros-11-7.27.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): filesystem-15.0-11.8.1 - openSUSE Leap 15.3 (noarch): systemd-rpm-macros-11-7.27.1 References: https://bugzilla.suse.com/1196275 https://bugzilla.suse.com/1196406

1 0

openSUSE-SU-2022:0930-1: important: Security update for qemu
by opensuse-security＠opensuse.org 22 Mar '22

22 Mar '22

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0930-1 Rating: important References: #1178049 #1192525 #1193364 #1193545 #1194938 #1195161 #1196087 #1196737 Cross-References: CVE-2021-3930 CVE-2022-0358 CVSS scores: CVE-2021-3930 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-3930 (SUSE): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L CVE-2022-0358 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has 6 fixes is now available. Description: This update for qemu fixes the following issues: - CVE-2022-0358: Fixed a potential privilege escalation via virtiofsd (bsc#1195161). - CVE-2021-3930: Fixed a potential denial of service in the emulated SCSI device (bsc#1192525). Non-security fixes: - Fixed a kernel data corruption via a long kernel boot cmdline (bsc#1196737). - Included vmxcap in the qemu-tools package (bsc#1193364). - Fixed package dependencies (bsc#1196087). - Fixed an issue were PowerPC firmwares would not be built for non-PowerPC builds (bsc#1193545). - Fixed multiple issues in I/O (bsc#1178049 bsc#1194938). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-930=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-5.2.0-150300.112.4 qemu-arm-5.2.0-150300.112.4 qemu-arm-debuginfo-5.2.0-150300.112.4 qemu-audio-alsa-5.2.0-150300.112.4 qemu-audio-alsa-debuginfo-5.2.0-150300.112.4 qemu-audio-pa-5.2.0-150300.112.4 qemu-audio-pa-debuginfo-5.2.0-150300.112.4 qemu-audio-spice-5.2.0-150300.112.4 qemu-audio-spice-debuginfo-5.2.0-150300.112.4 qemu-block-curl-5.2.0-150300.112.4 qemu-block-curl-debuginfo-5.2.0-150300.112.4 qemu-block-dmg-5.2.0-150300.112.4 qemu-block-dmg-debuginfo-5.2.0-150300.112.4 qemu-block-gluster-5.2.0-150300.112.4 qemu-block-gluster-debuginfo-5.2.0-150300.112.4 qemu-block-iscsi-5.2.0-150300.112.4 qemu-block-iscsi-debuginfo-5.2.0-150300.112.4 qemu-block-nfs-5.2.0-150300.112.4 qemu-block-nfs-debuginfo-5.2.0-150300.112.4 qemu-block-rbd-5.2.0-150300.112.4 qemu-block-rbd-debuginfo-5.2.0-150300.112.4 qemu-block-ssh-5.2.0-150300.112.4 qemu-block-ssh-debuginfo-5.2.0-150300.112.4 qemu-chardev-baum-5.2.0-150300.112.4 qemu-chardev-baum-debuginfo-5.2.0-150300.112.4 qemu-chardev-spice-5.2.0-150300.112.4 qemu-chardev-spice-debuginfo-5.2.0-150300.112.4 qemu-debuginfo-5.2.0-150300.112.4 qemu-debugsource-5.2.0-150300.112.4 qemu-extra-5.2.0-150300.112.4 qemu-extra-debuginfo-5.2.0-150300.112.4 qemu-guest-agent-5.2.0-150300.112.4 qemu-guest-agent-debuginfo-5.2.0-150300.112.4 qemu-hw-display-qxl-5.2.0-150300.112.4 qemu-hw-display-qxl-debuginfo-5.2.0-150300.112.4 qemu-hw-display-virtio-gpu-5.2.0-150300.112.4 qemu-hw-display-virtio-gpu-debuginfo-5.2.0-150300.112.4 qemu-hw-display-virtio-gpu-pci-5.2.0-150300.112.4 qemu-hw-display-virtio-gpu-pci-debuginfo-5.2.0-150300.112.4 qemu-hw-display-virtio-vga-5.2.0-150300.112.4 qemu-hw-display-virtio-vga-debuginfo-5.2.0-150300.112.4 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.112.4 qemu-hw-s390x-virtio-gpu-ccw-debuginfo-5.2.0-150300.112.4 qemu-hw-usb-redirect-5.2.0-150300.112.4 qemu-hw-usb-redirect-debuginfo-5.2.0-150300.112.4 qemu-hw-usb-smartcard-5.2.0-150300.112.4 qemu-hw-usb-smartcard-debuginfo-5.2.0-150300.112.4 qemu-ivshmem-tools-5.2.0-150300.112.4 qemu-ivshmem-tools-debuginfo-5.2.0-150300.112.4 qemu-ksm-5.2.0-150300.112.4 qemu-lang-5.2.0-150300.112.4 qemu-linux-user-5.2.0-150300.112.3 qemu-linux-user-debuginfo-5.2.0-150300.112.3 qemu-linux-user-debugsource-5.2.0-150300.112.3 qemu-ppc-5.2.0-150300.112.4 qemu-ppc-debuginfo-5.2.0-150300.112.4 qemu-s390x-5.2.0-150300.112.4 qemu-s390x-debuginfo-5.2.0-150300.112.4 qemu-testsuite-5.2.0-150300.112.7 qemu-tools-5.2.0-150300.112.4 qemu-tools-debuginfo-5.2.0-150300.112.4 qemu-ui-curses-5.2.0-150300.112.4 qemu-ui-curses-debuginfo-5.2.0-150300.112.4 qemu-ui-gtk-5.2.0-150300.112.4 qemu-ui-gtk-debuginfo-5.2.0-150300.112.4 qemu-ui-opengl-5.2.0-150300.112.4 qemu-ui-opengl-debuginfo-5.2.0-150300.112.4 qemu-ui-spice-app-5.2.0-150300.112.4 qemu-ui-spice-app-debuginfo-5.2.0-150300.112.4 qemu-ui-spice-core-5.2.0-150300.112.4 qemu-ui-spice-core-debuginfo-5.2.0-150300.112.4 qemu-vhost-user-gpu-5.2.0-150300.112.4 qemu-vhost-user-gpu-debuginfo-5.2.0-150300.112.4 qemu-x86-5.2.0-150300.112.4 qemu-x86-debuginfo-5.2.0-150300.112.4 - openSUSE Leap 15.3 (s390x x86_64): qemu-kvm-5.2.0-150300.112.4 - openSUSE Leap 15.3 (noarch): qemu-SLOF-5.2.0-150300.112.4 qemu-ipxe-1.0.0+-150300.112.4 qemu-microvm-5.2.0-150300.112.4 qemu-seabios-1.14.0_0_g155821a-150300.112.4 qemu-sgabios-8-150300.112.4 qemu-skiboot-5.2.0-150300.112.4 qemu-vgabios-1.14.0_0_g155821a-150300.112.4 References: https://www.suse.com/security/cve/CVE-2021-3930.html https://www.suse.com/security/cve/CVE-2022-0358.html https://bugzilla.suse.com/1178049 https://bugzilla.suse.com/1192525 https://bugzilla.suse.com/1193364 https://bugzilla.suse.com/1193545 https://bugzilla.suse.com/1194938 https://bugzilla.suse.com/1195161 https://bugzilla.suse.com/1196087 https://bugzilla.suse.com/1196737

1 0

openSUSE-FU-2022:0925-1: Test update for SUSE:SLE-15-SP4:Update (feature)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Feature Update: Test update for SUSE:SLE-15-SP4:Update (feature) ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0925-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one feature fix can now be installed. Description: This is a feature test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-925=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-925=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-feature-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-feature-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0919-1: Test update for SUSE:SLE-15-SP4:Update (relogin-suggested)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (relogin-suggested) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0919-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a relogin-suggested test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-919=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-919=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-relogin-suggested-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-relogin-suggested-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-OU-2022:0922-1: Test update for SUSE:SLE-15-SP4:Update (optional)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Optional Update: Test update for SUSE:SLE-15-SP4:Update (optional) ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0922-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This is a optional test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-922=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-922=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-optional-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-optional-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0920-1: Test update for SUSE:SLE-15-SP4:Update (affects-package-manager)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (affects-package-manager) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0920-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a affects-package-manager test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-920=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-920=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-affects-package-manager-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-affects-package-manager-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0927-1: Test update for SUSE:SLE-15-SP4:Update (interactive)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (interactive) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0927-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a interactive test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-927=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-927=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-interactive-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-interactive-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0926-1: Test update for SUSE:SLE-15-SP4:Update (reboot-needed)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (reboot-needed) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0926-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a reboot-needed test update for SUSE:SLE-15-SP4:Update Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-926=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-926=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-reboot-needed-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-reboot-needed-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-SU-2022:0923-1: important: Test update for SUSE:SLE-15-SP4:Update (security)
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Test update for SUSE:SLE-15-SP4:Update (security) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0923-1 Rating: important References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This is a security test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-923=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-923=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-security-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-security-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0924-1: Test update for SUSE:SLE-15-SP4:Update (trivial)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (trivial) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0924-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a trivial test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-924=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-924=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-trivial-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-trivial-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0921-1: Test update for SUSE:SLE-15-SP4:Update (retracted)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (retracted) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0921-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a retracted test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-921=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-921=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-retracted-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-retracted-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0914-1: Recommended update for qemu
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Recommended update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0914-1 Rating: low References: Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for qemu fixes the following issues: Increased the build version number to avoid downgrade issues. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-914=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-914=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): qemu-s390-4.2.1-150200.66.3 qemu-s390-debuginfo-4.2.1-150200.66.3 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-s390-4.2.1-150200.66.3 qemu-s390-debuginfo-4.2.1-150200.66.3 References:

1 0

openSUSE-SU-2022:0088-1: important: Security update for htmldoc
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Security update for htmldoc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0088-1 Rating: important References: #1192357 #1194303 #1194304 #1194487 #1195758 Cross-References: CVE-2021-40985 CVE-2021-43579 CVE-2021-45944 CVE-2021-45949 CVE-2022-0534 CVSS scores: CVE-2021-40985 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-40985 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2021-43579 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-43579 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-45944 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45944 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-45949 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45949 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0534 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0534 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: htmldoc was updated to fix issues: - CVE-2021-40985: Fixed buffer overflow may lead to DoS via a crafted BMP image (bsc#1192357) - CVE-2021-43579: Fixed stack-based buffer overflow in image_load_bmp() results in remote code execution if the victim converts an HTML document linking to a crafted BMP file (bsc#1194487) - CVE-2022-0534: Fixed stack out-of-bounds read in gif_get_code() when opening a malicious GIF file results in a segmentation fault (bsc#1195758) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-88=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-88=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ghostscript-9.52-161.1 ghostscript-debuginfo-9.52-161.1 ghostscript-debugsource-9.52-161.1 ghostscript-devel-9.52-161.1 ghostscript-x11-9.52-161.1 ghostscript-x11-debuginfo-9.52-161.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): htmldoc-1.8.28-9.1 References: https://www.suse.com/security/cve/CVE-2021-40985.html https://www.suse.com/security/cve/CVE-2021-43579.html https://www.suse.com/security/cve/CVE-2021-45944.html https://www.suse.com/security/cve/CVE-2021-45949.html https://www.suse.com/security/cve/CVE-2022-0534.html https://bugzilla.suse.com/1192357 https://bugzilla.suse.com/1194303 https://bugzilla.suse.com/1194304 https://bugzilla.suse.com/1194487 https://bugzilla.suse.com/1195758

1 0

openSUSE-SU-2022:0915-1: moderate: Security update for lapack
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Security update for lapack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0915-1 Rating: moderate References: #1193562 Cross-References: CVE-2021-4048 CVSS scores: CVE-2021-4048 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2021-4048 (SUSE): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lapack fixes the following issues: - CVE-2021-4048: Fixed an out of bounds read when user input was not validated properly (bsc#1193562). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-915=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-915=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): blas-devel-3.5.0-4.6.1 blas-devel-static-3.5.0-4.6.1 lapack-debugsource-3.5.0-4.6.1 lapack-devel-3.5.0-4.6.1 lapack-devel-static-3.5.0-4.6.1 lapacke-devel-3.5.0-4.6.1 lapacke-devel-static-3.5.0-4.6.1 libblas3-3.5.0-4.6.1 libblas3-debuginfo-3.5.0-4.6.1 liblapack3-3.5.0-4.6.1 liblapack3-debuginfo-3.5.0-4.6.1 liblapacke3-3.5.0-4.6.1 liblapacke3-debuginfo-3.5.0-4.6.1 - openSUSE Leap 15.4 (x86_64): blas-devel-32bit-3.5.0-4.6.1 lapack-devel-32bit-3.5.0-4.6.1 lapacke-devel-32bit-3.5.0-4.6.1 libblas3-32bit-3.5.0-4.6.1 libblas3-32bit-debuginfo-3.5.0-4.6.1 liblapack3-32bit-3.5.0-4.6.1 liblapack3-32bit-debuginfo-3.5.0-4.6.1 liblapacke3-32bit-3.5.0-4.6.1 liblapacke3-32bit-debuginfo-3.5.0-4.6.1 - openSUSE Leap 15.4 (noarch): blas-man-3.5.0-4.6.1 lapack-man-3.5.0-4.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): blas-devel-3.5.0-4.6.1 blas-devel-static-3.5.0-4.6.1 lapack-debugsource-3.5.0-4.6.1 lapack-devel-3.5.0-4.6.1 lapack-devel-static-3.5.0-4.6.1 lapacke-devel-3.5.0-4.6.1 lapacke-devel-static-3.5.0-4.6.1 libblas3-3.5.0-4.6.1 libblas3-debuginfo-3.5.0-4.6.1 liblapack3-3.5.0-4.6.1 liblapack3-debuginfo-3.5.0-4.6.1 liblapacke3-3.5.0-4.6.1 liblapacke3-debuginfo-3.5.0-4.6.1 - openSUSE Leap 15.3 (noarch): blas-man-3.5.0-4.6.1 lapack-man-3.5.0-4.6.1 - openSUSE Leap 15.3 (x86_64): blas-devel-32bit-3.5.0-4.6.1 lapack-devel-32bit-3.5.0-4.6.1 lapacke-devel-32bit-3.5.0-4.6.1 libblas3-32bit-3.5.0-4.6.1 libblas3-32bit-debuginfo-3.5.0-4.6.1 liblapack3-32bit-3.5.0-4.6.1 liblapack3-32bit-debuginfo-3.5.0-4.6.1 liblapacke3-32bit-3.5.0-4.6.1 liblapacke3-32bit-debuginfo-3.5.0-4.6.1 References: https://www.suse.com/security/cve/CVE-2021-4048.html https://bugzilla.suse.com/1193562

1 0

openSUSE-FU-2022:0911-1: moderate: Feature update for libbluray
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Feature Update: Feature update for libbluray ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0911-1 Rating: moderate References: SLE-23838 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 feature fixes and contains one feature can now be installed. Description: This feature update for libbluray fixes the following issues: Update to version 1.3.0 (jsc#SLE-23838): - Remove unused dependencies from pkgconfig(libbluray) - Enable build against java-devel >= 10. - Add functions to list and read BD-ROM files. - Add initial support for .fmts files. - Add initial support for OpenJDK 11. - Add initial support for UHD disc BD-J menus. - Add support for AWT mouse events (BD-J). - Add support for compiling .jar file with Java 9+ compiler. - Add support for separate key pressed / typed / released user input events. - Enable playback without menus when index.bdmv is missing. - Fix JVM bootstrap issues with some Java 9 versions. - Fix build with Java 1.6. - Fix build with OpenJDK 12 / 13. - Fix creating organization and disc specific BD-J BUDA directories. - Fix memory leak - Fix loading classes with Windows Java 8. - Fix loading libmmbd in Windows 64-bit. - Fix long delay in "Evangelion, You are (not) alone" menu. - Fix mark triggering when multiple marks are passed during single read(). - Fix playback of discs without normal titles (only TopMenu / FirstPlay title). - Fix playback of some broken BD-J discs. - Fix polygon-based BD-J graphics primitives. - Fix reading resources indirectly from mounted .jar file. - Fix resetting user-selected streams when playing without menus. - Fix seek bar pop-up at chapter boundary with some discs. - Fix sign extended bytes when reading single bytes in BDJ. - Fix stack overflow when using Java9+ with debugger connection. - Improve BD-J compability. - Improve JVM and .jar file probing. - Improve Java 8+ compability. - Improve UHD metadata support. - Improve error resilience and stability. - Improve main title selection. - Improve missing/broken playlist handling. - Improve portability. - Move AWT classes to separate .jar file. - Rename list_titles to bd_list_titles and add it to installed programs. - Update libudfread submodule repository URL. - Use external libudfread when available. Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-911=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-911=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libbluray-debugsource-1.3.0-150300.10.3.1 libbluray-devel-1.3.0-150300.10.3.1 libbluray-tools-1.3.0-150300.10.3.1 libbluray-tools-debuginfo-1.3.0-150300.10.3.1 libbluray2-1.3.0-150300.10.3.1 libbluray2-debuginfo-1.3.0-150300.10.3.1 - openSUSE Leap 15.4 (noarch): libbluray-bdj-1.3.0-150300.10.3.1 - openSUSE Leap 15.4 (x86_64): libbluray2-32bit-1.3.0-150300.10.3.1 libbluray2-32bit-debuginfo-1.3.0-150300.10.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libbluray-debugsource-1.3.0-150300.10.3.1 libbluray-devel-1.3.0-150300.10.3.1 libbluray-tools-1.3.0-150300.10.3.1 libbluray-tools-debuginfo-1.3.0-150300.10.3.1 libbluray2-1.3.0-150300.10.3.1 libbluray2-debuginfo-1.3.0-150300.10.3.1 - openSUSE Leap 15.3 (noarch): libbluray-bdj-1.3.0-150300.10.3.1 - openSUSE Leap 15.3 (x86_64): libbluray2-32bit-1.3.0-150300.10.3.1 libbluray2-32bit-debuginfo-1.3.0-150300.10.3.1 References:

1 0

openSUSE-SU-2022:0087-1: important: Security update for icingaweb2
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Security update for icingaweb2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0087-1 Rating: important References: #1196911 #1196913 Cross-References: CVE-2022-24714 CVE-2022-24715 CVSS scores: CVE-2022-24714 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-24715 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24715 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for icingaweb2 fixes the following issues: icingaweb2 was updated to 2.8.6 This is a security release. * Security Fixes - CVE-2022-24715: SSH resources allow arbitrary code execution for authenticated users (GHSA-v9mv-h52f-7g63 boo#1196911) - CVE-2022-24714: Unwanted disclosure of hosts and related data, linked to decommissioned services (GHSA-qcmg-vr56-x9wf boo#1196913) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-87=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): icingacli-2.8.6-15.1 icingaweb2-2.8.6-15.1 icingaweb2-common-2.8.6-15.1 icingaweb2-vendor-HTMLPurifier-2.8.6-15.1 icingaweb2-vendor-JShrink-2.8.6-15.1 icingaweb2-vendor-Parsedown-2.8.6-15.1 icingaweb2-vendor-dompdf-2.8.6-15.1 icingaweb2-vendor-lessphp-2.8.6-15.1 icingaweb2-vendor-zf1-2.8.6-15.1 php-Icinga-2.8.6-15.1 References: https://www.suse.com/security/cve/CVE-2022-24714.html https://www.suse.com/security/cve/CVE-2022-24715.html https://bugzilla.suse.com/1196911 https://bugzilla.suse.com/1196913

1 0

openSUSE-SU-2022:0906-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0906-1 Rating: important References: #1196900 Cross-References: CVE-2022-26381 CVE-2022-26383 CVE-2022-26384 CVE-2022-26386 CVE-2022-26387 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: Updated to version 91.7 (bsc#1196900): - CVE-2022-26381: Fixed an invalid memory access due to text reflow when SVG objects were present. - CVE-2022-26383: Fixed an issue where, when resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. - CVE-2022-26384: Fixed an iframe XSS sandbox bypass when allow-popups was used on the iframe. - CVE-2022-26386: Fixed an issue where downloadable temporary files were accessible to other local users. - CVE-2022-26387: Fixed a potential add-on signature verification bypass due to a race condition. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-906=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-906=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.7.0-150200.8.62.7 MozillaThunderbird-debuginfo-91.7.0-150200.8.62.7 MozillaThunderbird-debugsource-91.7.0-150200.8.62.7 MozillaThunderbird-translations-common-91.7.0-150200.8.62.7 MozillaThunderbird-translations-other-91.7.0-150200.8.62.7 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.7.0-150200.8.62.7 MozillaThunderbird-debuginfo-91.7.0-150200.8.62.7 MozillaThunderbird-debugsource-91.7.0-150200.8.62.7 MozillaThunderbird-translations-common-91.7.0-150200.8.62.7 MozillaThunderbird-translations-other-91.7.0-150200.8.62.7 References: https://www.suse.com/security/cve/CVE-2022-26381.html https://www.suse.com/security/cve/CVE-2022-26383.html https://www.suse.com/security/cve/CVE-2022-26384.html https://www.suse.com/security/cve/CVE-2022-26386.html https://www.suse.com/security/cve/CVE-2022-26387.html https://bugzilla.suse.com/1196900

1 0

openSUSE-RU-2022:0905-1: important: Recommended update for util-linux
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0905-1 Rating: important References: #1172427 #1194642 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for util-linux fixes the following issues: - Prevent root owning of `/var/lib/libuuid/clock.txt`. (bsc#1194642) - Make uuidd lock state file usable and time based UUIDs safer. (bsc#1194642) - Fix `su -s` bash completion. (bsc#1172427) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-905=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libblkid-devel-2.36.2-150300.4.17.1 libblkid-devel-static-2.36.2-150300.4.17.1 libblkid1-2.36.2-150300.4.17.1 libblkid1-debuginfo-2.36.2-150300.4.17.1 libfdisk-devel-2.36.2-150300.4.17.1 libfdisk-devel-static-2.36.2-150300.4.17.1 libfdisk1-2.36.2-150300.4.17.1 libfdisk1-debuginfo-2.36.2-150300.4.17.1 libmount-devel-2.36.2-150300.4.17.1 libmount-devel-static-2.36.2-150300.4.17.1 libmount1-2.36.2-150300.4.17.1 libmount1-debuginfo-2.36.2-150300.4.17.1 libsmartcols-devel-2.36.2-150300.4.17.1 libsmartcols-devel-static-2.36.2-150300.4.17.1 libsmartcols1-2.36.2-150300.4.17.1 libsmartcols1-debuginfo-2.36.2-150300.4.17.1 libuuid-devel-2.36.2-150300.4.17.1 libuuid-devel-static-2.36.2-150300.4.17.1 libuuid1-2.36.2-150300.4.17.1 libuuid1-debuginfo-2.36.2-150300.4.17.1 python3-libmount-2.36.2-150300.4.17.1 python3-libmount-debuginfo-2.36.2-150300.4.17.1 python3-libmount-debugsource-2.36.2-150300.4.17.1 util-linux-2.36.2-150300.4.17.1 util-linux-debuginfo-2.36.2-150300.4.17.1 util-linux-debugsource-2.36.2-150300.4.17.1 util-linux-systemd-2.36.2-150300.4.17.1 util-linux-systemd-debuginfo-2.36.2-150300.4.17.1 util-linux-systemd-debugsource-2.36.2-150300.4.17.1 uuidd-2.36.2-150300.4.17.1 uuidd-debuginfo-2.36.2-150300.4.17.1 - openSUSE Leap 15.3 (x86_64): libblkid-devel-32bit-2.36.2-150300.4.17.1 libblkid1-32bit-2.36.2-150300.4.17.1 libblkid1-32bit-debuginfo-2.36.2-150300.4.17.1 libfdisk-devel-32bit-2.36.2-150300.4.17.1 libfdisk1-32bit-2.36.2-150300.4.17.1 libfdisk1-32bit-debuginfo-2.36.2-150300.4.17.1 libmount-devel-32bit-2.36.2-150300.4.17.1 libmount1-32bit-2.36.2-150300.4.17.1 libmount1-32bit-debuginfo-2.36.2-150300.4.17.1 libsmartcols-devel-32bit-2.36.2-150300.4.17.1 libsmartcols1-32bit-2.36.2-150300.4.17.1 libsmartcols1-32bit-debuginfo-2.36.2-150300.4.17.1 libuuid-devel-32bit-2.36.2-150300.4.17.1 libuuid1-32bit-2.36.2-150300.4.17.1 libuuid1-32bit-debuginfo-2.36.2-150300.4.17.1 - openSUSE Leap 15.3 (noarch): util-linux-lang-2.36.2-150300.4.17.1 References: https://bugzilla.suse.com/1172427 https://bugzilla.suse.com/1194642

1 0

openSUSE-RU-2022:0086-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 20 Mar '22

20 Mar '22

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0086-1 Rating: moderate References: Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This is a test update for yast2-theme. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2022-86=1 Package List: - openSUSE Leap 15.4 (noarch): yast2-theme-4.4.4-lp154.2.4.1 yast2-theme-breeze-4.4.4-lp154.2.4.1 yast2-theme-oxygen-4.4.4-lp154.2.4.1 References:

1 0

openSUSE-SU-2022:0085-1: important: Security update for chromium
by opensuse-security＠opensuse.org 20 Mar '22

20 Mar '22

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0085-1 Rating: important References: #1197163 Cross-References: CVE-2022-0971 CVE-2022-0972 CVE-2022-0973 CVE-2022-0974 CVE-2022-0975 CVE-2022-0976 CVE-2022-0977 CVE-2022-0978 CVE-2022-0979 CVE-2022-0980 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to version 99.0.4844.74 (boo#1197163) * CVE-2022-0971: Use after free in Blink Layout * CVE-2022-0972: Use after free in Extensions * CVE-2022-0973: Use after free in Safe Browsing * CVE-2022-0974: Use after free in Splitscreen * CVE-2022-0975: Use after free in ANGLE * CVE-2022-0976: Heap buffer overflow in GPU * CVE-2022-0977: Use after free in Browser UI * CVE-2022-0978: Use after free in ANGLE * CVE-2022-0979: Use after free in Safe Browsing * CVE-2022-0980: Use after free in New Tab Page * Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-85=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-99.0.4844.74-bp153.2.69.1 chromium-99.0.4844.74-bp153.2.69.1 References: https://www.suse.com/security/cve/CVE-2022-0971.html https://www.suse.com/security/cve/CVE-2022-0972.html https://www.suse.com/security/cve/CVE-2022-0973.html https://www.suse.com/security/cve/CVE-2022-0974.html https://www.suse.com/security/cve/CVE-2022-0975.html https://www.suse.com/security/cve/CVE-2022-0976.html https://www.suse.com/security/cve/CVE-2022-0977.html https://www.suse.com/security/cve/CVE-2022-0978.html https://www.suse.com/security/cve/CVE-2022-0979.html https://www.suse.com/security/cve/CVE-2022-0980.html https://bugzilla.suse.com/1197163

1 0

openSUSE-RU-2022:0084-1: moderate: Recommended update for dosfstools
by maintenance＠opensuse.org 19 Mar '22

19 Mar '22

openSUSE Recommended Update: Recommended update for dosfstools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0084-1 Rating: moderate References: #1172863 #1188401 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dosfstools fixes the following issues: - To be able to create filesystems compatible with previous version, add -g command line option to mkfs (bsc#1188401) - BREAKING CHANGES: After fixing of bsc#1172863 in the last update, mkfs started to create different images than before. Applications that depend on exact FAT file format (e. g. embedded systems) may be broken in two ways: * The introduction of the alignment may create smaller images than before, with a different positions of important image elements. It can break existing software that expect images in doststools <= 4.1 style. To work around these problems, use "-a" command line argument. * The new image may contain a different geometry values. Geometry sensitive applications expecting doststools <= 4.1 style images can fails to accept different geometry values. There is no direct work around for this problem. But you can take the old image, use "file -s $IMAGE", check its "sectors/track" and "heads", and use them in the newly introduced "-g" command line argument. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-84=1 openSUSE-SLE-15.3-2022-84=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dosfstools-4.1-3.6.1 dosfstools-debuginfo-4.1-3.6.1 dosfstools-debugsource-4.1-3.6.1 - openSUSE Leap 15.3 (noarch): virtualbox-guest-desktop-icons-6.1.32-lp153.2.24.1 virtualbox-guest-source-6.1.32-lp153.2.24.1 virtualbox-host-source-6.1.32-lp153.2.24.1 - openSUSE Leap 15.3 (x86_64): python3-virtualbox-6.1.32-lp153.2.24.1 python3-virtualbox-debuginfo-6.1.32-lp153.2.24.1 virtualbox-6.1.32-lp153.2.24.1 virtualbox-debuginfo-6.1.32-lp153.2.24.1 virtualbox-debugsource-6.1.32-lp153.2.24.1 virtualbox-devel-6.1.32-lp153.2.24.1 virtualbox-guest-tools-6.1.32-lp153.2.24.1 virtualbox-guest-tools-debuginfo-6.1.32-lp153.2.24.1 virtualbox-guest-x11-6.1.32-lp153.2.24.1 virtualbox-guest-x11-debuginfo-6.1.32-lp153.2.24.1 virtualbox-kmp-debugsource-6.1.32-lp153.2.24.1 virtualbox-kmp-default-6.1.32_k5.3.18_150300.59.54-lp153.2.24.1 virtualbox-kmp-default-debuginfo-6.1.32_k5.3.18_150300.59.54-lp153.2.24.1 virtualbox-kmp-preempt-6.1.32_k5.3.18_150300.59.54-lp153.2.24.1 virtualbox-kmp-preempt-debuginfo-6.1.32_k5.3.18_150300.59.54-lp153.2.24.1 virtualbox-qt-6.1.32-lp153.2.24.1 virtualbox-qt-debuginfo-6.1.32-lp153.2.24.1 virtualbox-vnc-6.1.32-lp153.2.24.1 virtualbox-websrv-6.1.32-lp153.2.24.1 virtualbox-websrv-debuginfo-6.1.32-lp153.2.24.1 References: https://bugzilla.suse.com/1172863 https://bugzilla.suse.com/1188401

1 0

openSUSE-RU-2022:0904-1: moderate: Recommended update for go1.18
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Recommended Update: Recommended update for go1.18 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0904-1 Rating: moderate References: #1193742 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.18 fixes the following issues: go1.18 (released 2022-03-15) is a major release of Go. (boo#1193742) go1.18.x minor releases will be provided through February 2023, please see: https://github.com/golang/go/wiki/Go-Release-Cycle Go 1.18 is a significant release, including changes to the language, implementation of the toolchain, runtime, and libraries. Go 1.18 arrives seven months after Go 1.17. As always, the release maintains the Go 1 promise of compatibility. We expect almost all Go programs to continue to compile and run as before. * See release notes https://golang.org/doc/go1.18. Excerpts relevant to OBS environment and for SUSE/openSUSE follow: * Go 1.18 includes an implementation of generic features as described by the Type Parameters Proposal. This includes major but fully backward-compatible changes to the language. * The Go 1.18 compiler now correctly reports declared but not used errors for variables that are set inside a function literal but are never used. Before Go 1.18, the compiler did not report an error in such cases. This fixes long-outstanding compiler issue go#8560. * The Go 1.18 compiler now reports an overflow when passing a rune constant expression such as '1' << 32 as an argument to the predeclared functions print and println, consistent with the behavior of user-defined functions. Before Go 1.18, the compiler did not report an error in such cases but silently accepted such constant arguments if they fit into an int64. Since go vet always pointed out this error, the number of affected programs is likely very small. * AMD64: Go 1.18 introduces the new GOAMD64 environment variable, which selects at compile time a minimum target version of the AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each higher level requires, and takes advantage of, additional processor features. A detailed description can be found here. The GOAMD64 environment variable defaults to v1. * RISC-V: The 64-bit RISC-V architecture on Linux (the linux/riscv64 port) now supports the c-archive and c-shared build modes. * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later. * Fuzzing: Go 1.18 includes an implementation of fuzzing as described by the fuzzing proposal. See the fuzzing landing page to get started. Please be aware that fuzzing can consume a lot of memory and may impact your machine��s performance while it runs. * go get: go get no longer builds or installs packages in module-aware mode. go get is now dedicated to adjusting dependencies in go.mod. Effectively, the -d flag is always enabled. To install the latest version of an executable outside the context of the current module, use go install example.com/cmd@latest. Any version query may be used instead of latest. This form of go install was added in Go 1.16, so projects supporting older versions may need to provide install instructions for both go install and go get. go get now reports an error when used outside a module, since there is no go.mod file to update. In GOPATH mode (with GO111MODULE=off), go get still builds and installs packages, as before. * Automatic go.mod and go.sum updates: The go mod graph, go mod vendor, go mod verify, and go mod why subcommands no longer automatically update the go.mod and go.sum files. (Those files can be updated explicitly using go get, go mod tidy, or go mod download.) * go version: The go command now embeds version control information in binaries. It includes the currently checked-out revision, commit time, and a flag indicating whether edited or untracked files are present. Version control information is embedded if the go command is invoked in a directory within a Git, Mercurial, Fossil, or Bazaar repository, and the main package and its containing main module are in the same repository. This information may be omitted using the flag -buildvcs=false. Additionally, the go command embeds information about the build, including build and tool tags (set with -tags), compiler, assembler, and linker flags (like -gcflags), whether cgo was enabled, and if it was, the values of the cgo environment variables (like CGO_CFLAGS). Both VCS and build information may be read together with module information using go version -m file or runtime/debug.ReadBuildInfo (for the currently running binary) or the new debug/buildinfo package. The underlying data format of the embedded build information can change with new go releases, so an older version of go may not handle the build information produced with a newer version of go. To read the version information from a binary built with go 1.18, use the go version command and the debug/buildinfo package from go 1.18+. * go mod download: If the main module's go.mod file specifies go 1.17 or higher, go mod download without arguments now downloads source code for only the modules explicitly required in the main module's go.mod file. (In a go 1.17 or higher module, that set already includes all dependencies needed to build the packages and tests in the main module.) To also download source code for transitive dependencies, use go mod download all. * go mod vendor: The go mod vendor subcommand now supports a -o flag to set the output directory. (Other go commands still read from the vendor directory at the module root when loading packages with -mod=vendor, so the main use for this flag is for third-party tools that need to collect package source code.) * go mod tidy: The go mod tidy command now retains additional checksums in the go.sum file for modules whose source code is needed to verify that each imported package is provided by only one module in the build list. Because this condition is rare and failure to apply it results in a build error, this change is not conditioned on the go version in the main module's go.mod file. * go work: The go command now supports a "Workspace" mode. If a go.work file is found in the working directory or a parent directory, or one is specified using the GOWORK environment variable, it will put the go command into workspace mode. In workspace mode, the go.work file will be used to determine the set of main modules used as the roots for module resolution, instead of using the normally-found go.mod file to specify the single main module. For more information see the go work documentation. * go build -asan: The go build command and related commands now support an -asan flag that enables interoperation with C (or C++) code compiled with the address sanitizer (C compiler option -fsanitize=address). * //go:build lines: Go 1.17 introduced //go:build lines as a more readable way to write build constraints, instead of // +build lines. As of Go 1.17, gofmt adds //go:build lines to match existing +build lines and keeps them in sync, while go vet diagnoses when they are out of sync. Since the release of Go 1.18 marks the end of support for Go 1.16, all supported versions of Go now understand //go:build lines. In Go 1.18, go fix now removes the now-obsolete // +build lines in modules declaring go 1.17 or later in their go.mod files. For more information, see https://go.dev/design/draft-gobuild. * go vet: The vet tool is updated to support generic code. In most cases, it reports an error in generic code whenever it would report an error in the equivalent non-generic code after substituting for type parameters with a type from their type set. * go vet: The cmd/vet checkers copylock, printf, sortslice, testinggoroutine, and tests have all had moderate precision improvements to handle additional code patterns. This may lead to newly reported errors in existing packages. * Runtime: The garbage collector now includes non-heap sources of garbage collector work (e.g., stack scanning) when determining how frequently to run. As a result, garbage collector overhead is more predictable when these sources are significant. For most applications these changes will be negligible; however, some Go applications may now use less memory and spend more time on garbage collection, or vice versa, than before. The intended workaround is to tweak GOGC where necessary. The runtime now returns memory to the operating system more efficiently and has been tuned to work more aggressively as a result. * Compiler: Go 1.17 implemented a new way of passing function arguments and results using registers instead of the stack on 64-bit x86 architecture on selected operating systems. Go 1.18 expands the supported platforms to include 64-bit ARM (GOARCH=arm64), big- and little-endian 64-bit PowerPC (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture (GOARCH=amd64) on all operating systems. On 64-bit ARM and 64-bit PowerPC systems, benchmarking shows typical performance improvements of 10% or more. As mentioned in the Go 1.17 release notes, this change does not affect the functionality of any safe Go code and is designed to have no impact on most assembly code. See the Go 1.17 release notes for more details. * Compiler: The compiler now can inline functions that contain range loops or labeled for loops. * Compiler: The new -asan compiler option supports the new go command -asan option. * Compiler: Because the compiler's type checker was replaced in its entirety to support generics, some error messages now may use different wording than before. In some cases, pre-Go 1.18 error messages provided more detail or were phrased in a more helpful way. We intend to address these cases in Go 1.19. Because of changes in the compiler related to supporting generics, the Go 1.18 compile speed can be roughly 15% slower than the Go 1.17 compile speed. The execution time of the compiled code is not affected. We intend to improve the speed of the compiler in Go 1.19. * Linker: The linker emits far fewer relocations. As a result, most codebases will link faster, require less memory to link, and generate smaller binaries. Tools that process Go binaries should use Go 1.18's debug/gosym package to transparently handle both old and new binaries. * Linker: The new -asan linker option supports the new go command -asan option. * Bootstrap: When building a Go release from source and GOROOT_BOOTSTRAP is not set, previous versions of Go looked for a Go 1.4 or later bootstrap toolchain in the directory $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17 or later for bootstrap, and this change should make the transition smoother. For more details, see go#44505. * The new debug/buildinfo package provides access to module versions, version control information, and build flags embedded in executable files built by the go command. The same information is also available via runtime/debug.ReadBuildInfo for the currently running binary and via go version -m on the command line. * The new net/netip package defines a new IP address type, Addr. Compared to the existing net.IP type, the netip.Addr type takes less memory, is immutable, and is comparable so it supports == and can be used as a map key. * TLS 1.0 and 1.1 disabled by default client-side: If Config.MinVersion is not set, it now defaults to TLS 1.2 for client connections. Any safely up-to-date server is expected to support TLS 1.2, and browsers have required it since 2020. TLS 1.0 and 1.1 are still supported by setting Config.MinVersion to VersionTLS10. The server-side default is unchanged at TLS 1.0. The default can be temporarily reverted to TLS 1.0 by setting the GODEBUG=tls10default=1 environment variable. This option will be removed in Go 1.19. * Rejecting SHA-1 certificates: crypto/x509 will now reject certificates signed with the SHA-1 hash function. This doesn't apply to self-signed root certificates. Practical attacks against SHA-1 have been demonstrated since 2017 and publicly trusted Certificate Authorities have not issued SHA-1 certificates since 2015. This can be temporarily reverted by setting the GODEBUG=x509sha1=1 environment variable. This option will be removed in Go 1.19. * crypto/elliptic The P224, P384, and P521 curve implementations are now all backed by code generated by the addchain and fiat-crypto projects, the latter of which is based on a formally-verified model of the arithmetic operations. They now use safer complete formulas and internal APIs. P-224 and P-384 are now approximately four times faster. All specific curve implementations are now constant-time. Operating on invalid curve points (those for which the IsOnCurve method returns false, and which are never returned by Unmarshal or a Curve method operating on a valid point) has always been undefined behavior, can lead to key recovery attacks, and is now unsupported by the new backend. If an invalid point is supplied to a P224, P384, or P521 method, that method will now return a random point. The behavior might change to an explicit panic in a future release. * crypto/tls: The new Conn.NetConn method allows access to the underlying net.Conn. * crypto/x509: Certificate.Verify now uses platform APIs to verify certificate validity on macOS and iOS when it is called with a nil VerifyOpts.Roots or when using the root pool returned from SystemCertPool. SystemCertPool is now available on Windows. * crypto/x509: CertPool.Subjects is deprecated. On Windows, macOS, and iOS the CertPool returned by SystemCertPool will return a pool which does not include system roots in the slice returned by Subjects, as a static list can't appropriately represent the platform policies and might not be available at all from the platform APIs. * crypto/x509: Support for signing certificates using signature algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA, SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19. * net/http: When looking up a domain name containing non-ASCII characters, the Unicode-to-ASCII conversion is now done in accordance with Nontransitional Processing as defined in the Unicode IDNA Compatibility Processing standard (UTS #46). The interpretation of four distinct runes are changed: ��, ��, zero-width joiner U+200D, and zero-width non-joiner U+200C. Nontransitional Processing is consistent with most applications and web browsers. * os/user: User.GroupIds now uses a Go native implementation when cgo is not available. * runtime/debug: The BuildInfo struct has two new fields, containing additional information about how the binary was built: GoVersion holds the version of Go used to build the binary. Settings is a slice of BuildSettings structs holding key/value pairs describing the build. * runtime/pprof: The CPU profiler now uses per-thread timers on Linux. This increases the maximum CPU usage that a profile can observe, and reduces some forms of bias. * syscall: The new function SyscallN has been introduced for Windows, allowing for calls with arbitrary number of arguments. As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15, and Syscall18 are deprecated in favor of SyscallN. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-904=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-904=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): go1.18-1.18-1.8.1 go1.18-doc-1.18-1.8.1 - openSUSE Leap 15.4 (aarch64 x86_64): go1.18-race-1.18-1.8.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): go1.18-1.18-1.8.1 go1.18-doc-1.18-1.8.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.18-race-1.18-1.8.1 References: https://bugzilla.suse.com/1193742

1 0

openSUSE-OU-2022:0902-1: moderate: Optional update for SUSE Package Hub
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0902-1 Rating: moderate References: MSC-303 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 optional fixes and contains one feature can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: argyllcms, csync Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-902=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-902=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): csync-0.50.0-3.5.1 csync-debuginfo-0.50.0-3.5.1 csync-debugsource-0.50.0-3.5.1 libcsync-devel-0.50.0-3.5.1 libcsync-devel-doc-0.50.0-3.5.1 libcsync-doc-0.50.0-3.5.1 libcsync-plugin-owncloud-0.50.0-3.5.1 libcsync-plugin-owncloud-debuginfo-0.50.0-3.5.1 libcsync-plugin-sftp-0.50.0-3.5.1 libcsync-plugin-sftp-debuginfo-0.50.0-3.5.1 libcsync-plugin-smb-0.50.0-3.5.1 libcsync-plugin-smb-debuginfo-0.50.0-3.5.1 libcsync0-0.50.0-3.5.1 libcsync0-debuginfo-0.50.0-3.5.1 - openSUSE Leap 15.4 (x86_64): libcsync0-32bit-0.50.0-3.5.1 libcsync0-32bit-debuginfo-0.50.0-3.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): argyllcms-1.9.2-4.2.1 argyllcms-debuginfo-1.9.2-4.2.1 argyllcms-debugsource-1.9.2-4.2.1 argyllcms-doc-1.9.2-4.2.1 csync-0.50.0-3.5.1 csync-debuginfo-0.50.0-3.5.1 csync-debugsource-0.50.0-3.5.1 libcsync-devel-0.50.0-3.5.1 libcsync-devel-doc-0.50.0-3.5.1 libcsync-doc-0.50.0-3.5.1 libcsync-plugin-owncloud-0.50.0-3.5.1 libcsync-plugin-owncloud-debuginfo-0.50.0-3.5.1 libcsync-plugin-sftp-0.50.0-3.5.1 libcsync-plugin-sftp-debuginfo-0.50.0-3.5.1 libcsync-plugin-smb-0.50.0-3.5.1 libcsync-plugin-smb-debuginfo-0.50.0-3.5.1 libcsync0-0.50.0-3.5.1 libcsync0-debuginfo-0.50.0-3.5.1 - openSUSE Leap 15.3 (x86_64): libcsync0-32bit-0.50.0-3.5.1 libcsync0-32bit-debuginfo-0.50.0-3.5.1 References:

1 0

openSUSE-SU-2022:0083-1: moderate: Security update for weechat
by opensuse-security＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Security Update: Security update for weechat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0083-1 Rating: moderate References: #1190206 Cross-References: CVE-2021-40516 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for weechat fixes the following issues: update to 3.2.1: * CVE-2021-40516: relay: fix crash when decoding a malformed websocket frame (boo#1190206) update to 3.2 main changes: * use XDG directories by default (config, data, cache, runtime) * add support of IRC SASL mechanisms SCRAM-SHA-1, SCRAM-SHA-256 and SCRAM-SHA-512 * automatically load system certificates without giving a hardcoded path to the file with certificates * add options to customize commands executed on system signals received (SIGHUP, SIGQUIT, SIGTERM, SIGUSR1, SIGUSR2) * add bar item "tls_version" and buflist format * add signals "cursor_start" and "cursor_end" * add function crypto_hmac in API * add translated string in evaluation of expressions with "translate:xxx" * add info "weechat_daemon" * add Python stub for WeeChat API * add variables "${tg_shell_argc}" and "${tg_shell_argvN}" in command trigger evaluated strings * many bugs fixed. for all changes, please visit: https://weechat.org/files/changelog/ChangeLog-3.2.html update to 3.1 New features * core: add options weechat.look.hotlist_update_on_buffer_switch and weechat.look.read_marker_update_on_buffer_switch (issue #992, issue #993) * core: add option sec.crypt.passphrase_command to read passphrase from an external program on startup, remove option sec.crypt.passphrase_file (issue #141) * core: improve debug in command /eval: display more verbose debug with two "-d", add indentation and colors * core: add options "setvar" and "delvar" in command /buffer, rename option "localvar" to "listvar" * core: add buffer local variable "completion_default_template" (evaluated) to override the value of option "weechat.completion.default_template" (issue #1600) * core: add option "recreate" in command /filter * core: add raw string in evaluation of expressions with "raw:xxx" (issue #1611) * core: add evaluation of conditions in evaluation of expressions with "eval_cond:xxx" (issue #1582) * api: add info_hashtable "secured_data" * irc: add info "irc_is_message_ignored" * irc: add server option "default_chantypes", used when the server does not send them in message 005 (issue #1610) * trigger: add variable "${tg_trigger_name}" in command trigger evaluated strings (issue #1580) - Bug fixes * core: fix quoted line in cursor mode (issue #1602) * core: fix wrong size of the new window after vertical split (issue #1612) * core: do not remove quotes in arguments of command /eval as they can be part of the evaluated expression/condition (issue #1601) * core: display an error when the buffer is not found with command /command -buffer * buflist: add option buflist.look.use_items to speed up display of buflist (issue #1613) * irc: add bar item "irc_nick_prefix" * irc: fix separator between nick and host in bar item "irc_nick_host" * irc: fix completion of commands /halfop and /dehalfop - Documentation * do not build weechat-headless man page if headless binary is disabled (issue #1607) update to 3.0.1: * exec: fix search of command by identifier * spell: fix refresh of bar item "spell_suggest" when the input becomes empty (issue #1586) * spell: fix crash with IRC color codes in command line (issue #1589) update to 3.0 New features * api: add optional list of colors in infos "nick_color" and "nick_color_name" (issue #1565) * api: add argument "bytes" in function string_dyn_concat * api: add function string_color_code_size (issue #1547) * exec: add option "-oerr" to send stderr to buffer (now disabled by default) (issue #1566) * fset: add option fset.look.auto_refresh (issue #1553) * irc: add pointer to irc_nick in focus of bar item "buffer_nicklist" (issue #1535, issue #1538) * irc: allow to send text on buffers with commands /allchan, /allpv and /allserv * irc: evaluate command executed by commands /allchan, /allpv and /allserv (issue #1536) * script: add option script.scripts.download_enabled (issue #1548) * trigger: add variable "tg_argc" in data set by command trigger (issue #1576) * trigger: add variable "tg_trigger_name" in data set by all triggers (issue #1567, issue #1568) Bug fixes * core: set "notify_level" to 3 if there is a highlight in the line (issue #1529) * core: do not add line with highlight and tag "notify_none" to hotlist (issue #1529) * irc: remove SASL timeout message displayed by error after successful SASL authentication (issue #1515) * irc: send all channels in a single JOIN command when reconnecting to the server (issue #1551) * script: do not automatically download list of scripts on startup if the file is too old (issue #1548) * spell: properly skip WeeChat and IRC color codes when checking words in input (issue #1547) * trigger: fix recursive calls to triggers using regex (issue #1546) * trigger: add ${tg_tags} !!- ,notify_none, in conditions of default trigger "beep" (issue #1529) - Tests * core: add tests on GUI line functions - Build * core: disable debug by default in autotools build * tests: fix compilation with CppUTest �� 4.0 - new .desktop file from weechat sources - update to 2.9 - New features * core: add bar option "color_bg_inactive": color for window bars in inactive window (issue #732) * core: add Alacritty title escape sequence support (issue #1517) * core: display notify level for current buffer with command /buffer notify (issue #1505) * core: count only visible nicks in bar item "buffer_nicklist_count", add bar items "buffer_nicklist_count_groups" and "buffer_nicklist_count_all" (issue #1506) * core: set default size for input bar to 0 (automatic) (issue #1498) * core: add default key Alt+Enter to insert a newline (issue #1498) * core: add flag "input_multiline" in buffer (issue #984, issue #1063) * core: add a scalable WeeChat logo (SVG) (issue #1454, issue #1456) * core: add base 16/32/64 encoding/decoding in evaluation of expressions with "base_encode:base,xxx" and "base_decode:base,xxx" * core: add case sensitive wildcard matching comparison operator (==* and !!*) and case sensitive/insensitive include comparison operators (==-, !!-, =-, !-) in evaluation of expressions * core: add default key Alt+Shift+N to toggle nicklist bar * core: add command line option "--stdout" in weechat-headless binary to log to stdout rather than ~/.weechat/weechat.log (issue #1475, issue #1477) * core: reload configuration files on SIGHUP (issue #1476) * api: add pointer "_bar_window" in hashtable sent to hook focus callback (issue #1450) * api: add info_hashtable "focus_info" (issue #1245, issue #1257) * api: rename function hook_completion_get_string to completion_get_string and hook_completion_list_add to completion_list_add * api: add functions completion_new, completion_search and completion_free * api: add hdata "completion_word" * buflist: add default key Alt+Shift+B to toggle buflist * buflist: add options enable/disable/toggle in command /buflist * buflist: evaluate option buflist.look.sort so that sort can be customized for each of the three buflist bar items (issue #1465) * irc: add support of UTF8MAPPING (issue #1528) * irc: display account messages in buffers (issue #1250) * python: add WeeChat sharedir python directory to PYTHONPATH (issue #1537) * relay: increase default limits for IRC backlog options * relay: add command "handshake" in weechat relay protocol and nonce to prevent replay attacks, add options relay.network.password_hash_algo, relay.network.password_hash_iterations, relay.network.nonce_size (issue #1474) * relay: add command "completion" in weechat relay protocol to perform a completion on a string at a given position (issue #1484) * relay: add option relay.network.auth_timeout * relay: update default colors for client status * relay: add status "waiting_auth" in irc and weechat protocols (issue #1358) * trigger: evaluate arguments of command when the trigger is created (issue #1472) - Bug fixes * core: fix command /window scroll_beyond_end when buffer has fewer lines than chat height (issue #1509) * core: force buffer property "time_for_each_line" to 0 for buffers with free content (issue #1485) * core: don��t collapse consecutive newlines in lines displayed before the first buffer is created * core: don��t remove consecutive newlines when pasting text (issue #1500) * core: don��t collapse consecutive newlines in bar content (issue #1500) * core: fix WEECHAT_SHAREDIR with CMake build (issue #1461) * core: fix memory leak in calculation of expression on FreeBSD (issue #1469) * core: fix resize of a bar when its size is 0 (automatic) (issue #1470) * api: fix use of pointer after free in function key_unbind * api: replace plugin and buffer name by buffer pointer in argument "modifier_data" sent to weechat_print modifier callback (issue #42) * buflist: add "window" pointer in bar item evaluation only if it��s not NULL (if bar type is "window") * exec: fix use of same task id for different tasks (issue #1491) * fifo: fix errors when writing in the FIFO pipe (issue #713) * guile: enable again /guile eval (issue #1514) * irc: use new default chantypes "#&" when the server does not send it * irc: add support of optional server in info "irc_is_nick", fix check of nick using UTF8MAPPING isupport value (issue #1528) * irc: fix add of ignore with flags in regex, display full ignore mask in list of ignores (issue #1518) * irc: do not remove spaces at the end of users messages received (issue #1513) * irc: fix realname delimiter color in WHO/WHOX response (issue #1497) * irc: reuse a buffer with wrong type "channel" when a private message is received (issue #869) * python: fix crash when invalid UTF-8 string is in a WeeChat hashtable converted to a Python dict (issue #1463) * relay: add missing field "notify_level" in message "_buffer_line_added" (issue #1529) * relay: fix slow send of data to clients when SSL is enabled * trigger: only return trigger��s return code when condition evaluates to true (issue #592) * trigger: fix truncated trigger command with commands /trigger input|output|recreate * trigger: do not hide values of options with /set command in cmd_pass trigger - Documentation * add includes directory * merge 53 auto-generated files into 11 files * fix broken literal blocks in Japanese docs with Firefox (issue #1466) - Tests * core: add CI with GitHub Actions, move codecov.io upload to GitHub Actions * core: switch to Ubuntu Bionic on Travis CI, use pylint3 to lint Python scripts * core: run tests on plugins only if the plugins are enabled and compiled * irc: add tests on IRC color and channel functions - Build * javascript: disable build by default and remove Debian packaging of JavaScript plugin (issue #360) * core: make GnuTLS a required dependency * core: fix build with CMake 3.17.0 * core: fix build with cygport on Cygwin Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-83=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): weechat-3.2.1-bp153.2.3.1 weechat-devel-3.2.1-bp153.2.3.1 weechat-lua-3.2.1-bp153.2.3.1 weechat-perl-3.2.1-bp153.2.3.1 weechat-python-3.2.1-bp153.2.3.1 weechat-ruby-3.2.1-bp153.2.3.1 weechat-spell-3.2.1-bp153.2.3.1 weechat-tcl-3.2.1-bp153.2.3.1 - openSUSE Backports SLE-15-SP3 (noarch): weechat-lang-3.2.1-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-40516.html https://bugzilla.suse.com/1190206

1 0

openSUSE-RU-2022:0082-1: moderate: Recommended update for helm
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Recommended Update: Recommended update for helm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0082-1 Rating: moderate References: SLE-21196 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for helm fixes the following issues: Update to version 3.8.0 (jsc#SLE-21196): * OCI registry support for charts is now generally available. It has graduated out of being an experiment. Some changes over Helm 3.7 include: * When setting a chart in the dependencies as OCI the version can be set to a range, like other dependencies * SemVer tags that include build information can be pushed and used. OCI registries don't support + as a tag character. Helm translates the + to _ when stored as a tag * helm registry login now follows the same structure as the Docker CLI for storing credentials. The same location for registry configuration can be passed to both Helm and the Docker CLI * A --list-repo-url flag has been added to helm search hub to quickly show the repositories URL. * Release names are validated during installation * Added support for installing Helm on Windows via Cygwin * Added support for Kubernetes 1.23 Update to version 3.6.3: * Ensure RawPath match Path when resolving reference * Set Helm as manager for managedFields * fix(dep update): helm dep update is not respecting the "version" stipulated in the requirements * fix(doc): fix kube client interface doc. (#9882) * use TLS client information from repo config when downloading a chart * Adding test for user/pass without repo on Helm install * Fix the url being set by WithURL on the getters * tweak basic handling * keep existing behavior of returning ErrReleaseNotFound when release(s) failed to decode * fix(sql storage): Query() should return ErrReleaseNotFound immediately when no records are found * Add Test cases for repository-config without file extension * Correctly determine repository-config lockfile path Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-82=1 Package List: - openSUSE Backports SLE-15-SP2 (ppc64le s390x x86_64): helm-3.8.0-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): helm-bash-completion-3.8.0-bp152.2.3.1 helm-fish-completion-3.8.0-bp152.2.3.1 helm-zsh-completion-3.8.0-bp152.2.3.1 References:

1 0

openSUSE-SU-2022:0901-1: important: Security update for frr
by opensuse-security＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Security Update: Security update for frr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0901-1 Rating: important References: #1180217 #1196503 #1196504 #1196505 #1196506 #1196507 Cross-References: CVE-2022-26125 CVE-2022-26126 CVE-2022-26127 CVE-2022-26128 CVE-2022-26129 CVSS scores: CVE-2022-26125 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26125 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26126 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26126 (SUSE): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2022-26127 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26127 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26128 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26128 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-26129 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26129 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for frr fixes the following issues: - CVE-2022-26125, CVE-2022-26126: Fixed buffer overflows in unpack_tlv_router_cap() (bsc#1196505, bsc#1196506). - CVE-2022-26127: Fixed heap buffer overflow in babel_packet_examin() (bsc#1196503). - CVE-2022-26128: Fixed buffer overflows in babel_packet_examin() (bsc#1196507). - CVE-2022-26129: Fixed buffer overflows in parse_hello_subtlv(), parse_ihu_subtlv() and parse_update_subtlv() (bsc#1196504). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-901=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-901=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.3.1 frr-debuginfo-7.4-150300.4.3.1 frr-debugsource-7.4-150300.4.3.1 frr-devel-7.4-150300.4.3.1 libfrr0-7.4-150300.4.3.1 libfrr0-debuginfo-7.4-150300.4.3.1 libfrr_pb0-7.4-150300.4.3.1 libfrr_pb0-debuginfo-7.4-150300.4.3.1 libfrrcares0-7.4-150300.4.3.1 libfrrcares0-debuginfo-7.4-150300.4.3.1 libfrrfpm_pb0-7.4-150300.4.3.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.3.1 libfrrgrpc_pb0-7.4-150300.4.3.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.3.1 libfrrospfapiclient0-7.4-150300.4.3.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.3.1 libfrrsnmp0-7.4-150300.4.3.1 libfrrsnmp0-debuginfo-7.4-150300.4.3.1 libfrrzmq0-7.4-150300.4.3.1 libfrrzmq0-debuginfo-7.4-150300.4.3.1 libmlag_pb0-7.4-150300.4.3.1 libmlag_pb0-debuginfo-7.4-150300.4.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.3.1 frr-debuginfo-7.4-150300.4.3.1 frr-debugsource-7.4-150300.4.3.1 frr-devel-7.4-150300.4.3.1 libfrr0-7.4-150300.4.3.1 libfrr0-debuginfo-7.4-150300.4.3.1 libfrr_pb0-7.4-150300.4.3.1 libfrr_pb0-debuginfo-7.4-150300.4.3.1 libfrrcares0-7.4-150300.4.3.1 libfrrcares0-debuginfo-7.4-150300.4.3.1 libfrrfpm_pb0-7.4-150300.4.3.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.3.1 libfrrgrpc_pb0-7.4-150300.4.3.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.3.1 libfrrospfapiclient0-7.4-150300.4.3.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.3.1 libfrrsnmp0-7.4-150300.4.3.1 libfrrsnmp0-debuginfo-7.4-150300.4.3.1 libfrrzmq0-7.4-150300.4.3.1 libfrrzmq0-debuginfo-7.4-150300.4.3.1 libmlag_pb0-7.4-150300.4.3.1 libmlag_pb0-debuginfo-7.4-150300.4.3.1 References: https://www.suse.com/security/cve/CVE-2022-26125.html https://www.suse.com/security/cve/CVE-2022-26126.html https://www.suse.com/security/cve/CVE-2022-26127.html https://www.suse.com/security/cve/CVE-2022-26128.html https://www.suse.com/security/cve/CVE-2022-26129.html https://bugzilla.suse.com/1180217 https://bugzilla.suse.com/1196503 https://bugzilla.suse.com/1196504 https://bugzilla.suse.com/1196505 https://bugzilla.suse.com/1196506 https://bugzilla.suse.com/1196507

1 0

openSUSE-RU-2022:0898-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Recommended Update: Recommended update for lifecycle-data-sle-module-live-patching ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0898-1 Rating: moderate References: #1020320 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lifecycle-data-sle-module-live-patching fixes the following issues: - Added data for 5_3_18-150300_59_43, 5_3_18-24_99, 5_3_18-59_40. (bsc#1020320) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-898=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-898=1 Package List: - openSUSE Leap 15.4 (noarch): lifecycle-data-sle-module-live-patching-15-4.69.1 - openSUSE Leap 15.3 (noarch): lifecycle-data-sle-module-live-patching-15-4.69.1 References: https://bugzilla.suse.com/1020320

1 0

openSUSE-RU-2022:0899-1: moderate: Recommended update for smartmontools
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Recommended Update: Recommended update for smartmontools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0899-1 Rating: moderate References: #1195785 SLE-21751 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for smartmontools fixes the following issues: - Restart smartd and generate smartd_opts only if there are real sysconfig changes; do not trigger generate_smartd_opts by YaST, systemd is enough. (bsc#1195785) - Update smartmontools to the latest version from the upstream branch. (jsc#SLE-21751) - Fix update needed logic. - update to 7.2 (jsc#SLE-21751): - smartctl: New option '--json=y[c]' selects YAML output. - smartctl '-i': Prints ATA TRIM and Zoned Device capabilities. - smartctl '-j': Fixed 'scsi_grown_defect_list' value. - smartctl '-a': Prints SCSI 'Accumulated power on time'. - smartctl '-n POWERMODE': SCSI support. - smartctl '-s standby,now' and '-s standby,off': SCSI support. - smartctl '-c': NVMe 1.4 additions. - smartd: Support for staggered self-tests. - smartd: No longer writes attribute log if no attributes were read due to standby mode or other error. - smartd: Now resolves symlinks before device names are checked for duplicates. - smartd: Fixed SMARTD_DEVICETYPE environment variable if DEVICESCAN is used without '-d TYPE'. - ATA: Device type '-d jmb39x-q,N' for JMB39x protocol variant used by some QNAP NAS devices. - ATA: Device type '-d jms56x,N' for JMS562 USB to SATA RAID bridges. - SCSI: Improved heuristics for log subpages of new and very old disks. - NVMe: Log transfer size limited to avoid device or kernel crashes. - NVMEe/USB: Device type '-d sntrealtek' for Realtek RTL9210 USB to NVMe bridges. - update-smart-drivedb: New option '--branch X.Y'. - HDD, SSD and USB additions to drive database. - Dropped support for pre-C99 snprintf(). - configure: Dropped option '--without-working-snprintf'. - configure: Fixed '-fstack-protector*' detection. - Linux: Various fixes of smartd.service file (bsc#1183699). - Darwin: NVMe log support. - FreeBSD: Device scan does no longer include T_ENCLOSURE devices. - NetBSD: Fixed timeout handling. - NetBSD big endian: Fixed ATA register handling. - OpenBSD: Fixed timeout handling. - Windows: Dropped backward compatibility fixes for very old compilers. - Update to version 7.1: - smartctl: Fixed bogus exception on unknown form factor value. - smartctl '--json=cg': Suppresses extra spaces also in 'g' format. - smartctl '-i': ATA ACS-4 and ACS-5 enhancements. - smartd: No longer truncates very long device names in warning emails. - smartd: No longer skips scheduled tests if system clock has been adjusted to the past. - smartd '-A': Attribute logs now use local time instead of UTC. - Autodetection of '-d sntjmicron' type for JMicron USB to NVMe bridges. - Fixed segfault on CCISS transfer sizes. - Fixed smartd.service 'Type' if libsystemd-dev is not available. - Fixed '/dev/megaraid_sas_ioctl_node' fd leak. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-899=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-899=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): smartmontools-7.2-150300.8.5.1 smartmontools-debuginfo-7.2-150300.8.5.1 smartmontools-debugsource-7.2-150300.8.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): smartmontools-7.2-150300.8.5.1 smartmontools-debuginfo-7.2-150300.8.5.1 smartmontools-debugsource-7.2-150300.8.5.1 References: https://bugzilla.suse.com/1195785

1 0

openSUSE-RU-2022:0893-1: moderate: Recommended update for postgresql13
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for postgresql13 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0893-1 Rating: moderate References: #1190740 #1195680 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for postgresql13 fixes the following issues: - Upgrade to 13.6: (bsc#1195680) * https://www.postgresql.org/docs/13/release-13-6.html * Reindexing might be needed after applying this upgrade, so please read the release notes carefully. - Add constraints file with 12GB of memory for s390x as a workaround. (bsc#1190740) - Add a llvmjit-devel subpackage to pull in the right versions of clang and llvm for building extensions. - Fix some mistakes in the interdependencies between the implementation packages and their noarch counterpart. - Update the BuildIgnore section. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-893=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-893=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): postgresql13-13.6-5.25.1 postgresql13-contrib-13.6-5.25.1 postgresql13-contrib-debuginfo-13.6-5.25.1 postgresql13-debuginfo-13.6-5.25.1 postgresql13-debugsource-13.6-5.25.1 postgresql13-devel-13.6-5.25.1 postgresql13-devel-debuginfo-13.6-5.25.1 postgresql13-llvmjit-13.6-5.25.1 postgresql13-llvmjit-debuginfo-13.6-5.25.1 postgresql13-plperl-13.6-5.25.1 postgresql13-plperl-debuginfo-13.6-5.25.1 postgresql13-plpython-13.6-5.25.1 postgresql13-plpython-debuginfo-13.6-5.25.1 postgresql13-pltcl-13.6-5.25.1 postgresql13-pltcl-debuginfo-13.6-5.25.1 postgresql13-server-13.6-5.25.1 postgresql13-server-debuginfo-13.6-5.25.1 postgresql13-server-devel-13.6-5.25.1 postgresql13-server-devel-debuginfo-13.6-5.25.1 postgresql13-test-13.6-5.25.1 - openSUSE Leap 15.4 (noarch): postgresql13-docs-13.6-5.25.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postgresql13-13.6-5.25.1 postgresql13-contrib-13.6-5.25.1 postgresql13-contrib-debuginfo-13.6-5.25.1 postgresql13-debuginfo-13.6-5.25.1 postgresql13-debugsource-13.6-5.25.1 postgresql13-devel-13.6-5.25.1 postgresql13-devel-debuginfo-13.6-5.25.1 postgresql13-llvmjit-13.6-5.25.1 postgresql13-llvmjit-debuginfo-13.6-5.25.1 postgresql13-plperl-13.6-5.25.1 postgresql13-plperl-debuginfo-13.6-5.25.1 postgresql13-plpython-13.6-5.25.1 postgresql13-plpython-debuginfo-13.6-5.25.1 postgresql13-pltcl-13.6-5.25.1 postgresql13-pltcl-debuginfo-13.6-5.25.1 postgresql13-server-13.6-5.25.1 postgresql13-server-debuginfo-13.6-5.25.1 postgresql13-server-devel-13.6-5.25.1 postgresql13-server-devel-debuginfo-13.6-5.25.1 postgresql13-test-13.6-5.25.1 - openSUSE Leap 15.3 (noarch): postgresql13-docs-13.6-5.25.1 References: https://bugzilla.suse.com/1190740 https://bugzilla.suse.com/1195680

1 0

openSUSE-SU-2022:0886-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0886-1 Rating: moderate References: #1196456 SLE-18214 Cross-References: CVE-2021-25636 CVSS scores: CVE-2021-25636 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-25636 (SUSE): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability, contains one feature is now available. Description: This update for libreoffice fixes the following issues: Update to version 7.2.5.1 (jsc#SLE-18214): - CVE-2021-25636: Fixed an incorrect vadidation of digitally signed documents (bsc#1196456). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-886=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-886=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): libreoffice-7.2.5.1-150300.14.22.18.3 libreoffice-base-7.2.5.1-150300.14.22.18.3 libreoffice-base-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-base-drivers-postgresql-7.2.5.1-150300.14.22.18.3 libreoffice-base-drivers-postgresql-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-calc-7.2.5.1-150300.14.22.18.3 libreoffice-calc-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-calc-extensions-7.2.5.1-150300.14.22.18.3 libreoffice-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-debugsource-7.2.5.1-150300.14.22.18.3 libreoffice-draw-7.2.5.1-150300.14.22.18.3 libreoffice-draw-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-filters-optional-7.2.5.1-150300.14.22.18.3 libreoffice-gnome-7.2.5.1-150300.14.22.18.3 libreoffice-gnome-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-gtk3-7.2.5.1-150300.14.22.18.3 libreoffice-gtk3-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-impress-7.2.5.1-150300.14.22.18.3 libreoffice-impress-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-librelogo-7.2.5.1-150300.14.22.18.3 libreoffice-mailmerge-7.2.5.1-150300.14.22.18.3 libreoffice-math-7.2.5.1-150300.14.22.18.3 libreoffice-math-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-officebean-7.2.5.1-150300.14.22.18.3 libreoffice-officebean-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-pyuno-7.2.5.1-150300.14.22.18.3 libreoffice-pyuno-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-qt5-7.2.5.1-150300.14.22.18.3 libreoffice-qt5-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-doc-7.2.5.1-150300.14.22.18.3 libreoffice-writer-7.2.5.1-150300.14.22.18.3 libreoffice-writer-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-writer-extensions-7.2.5.1-150300.14.22.18.3 libreofficekit-7.2.5.1-150300.14.22.18.3 libreofficekit-devel-7.2.5.1-150300.14.22.18.3 - openSUSE Leap 15.4 (noarch): libreoffice-branding-upstream-7.2.5.1-150300.14.22.18.3 libreoffice-gdb-pretty-printers-7.2.5.1-150300.14.22.18.3 libreoffice-glade-7.2.5.1-150300.14.22.18.3 libreoffice-icon-themes-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-af-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-am-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ar-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-as-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ast-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-be-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bg-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bn_IN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-br-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-brx-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bs-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ca-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ca_valencia-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ckb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-cs-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-cy-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-da-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-de-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dgo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dsb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dz-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-el-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en_GB-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en_ZA-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-eo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-es-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-et-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-eu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fa-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fur-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fy-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ga-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gd-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gug-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-he-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hsb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-id-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-is-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-it-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ja-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ka-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kab-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-km-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kmr_Latn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ko-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kok-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ks-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lt-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lv-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mai-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ml-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mni-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-my-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ne-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nso-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-oc-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-om-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-or-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pa-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pt_BR-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pt_PT-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ro-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ru-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-rw-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sa_IN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sat-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sd-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-si-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sid-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sq-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ss-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-st-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sv-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sw_TZ-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-szl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ta-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-te-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tg-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-th-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ts-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tt-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ug-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-uk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-uz-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ve-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-vec-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-vi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-xh-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zh_CN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zh_TW-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zu-7.2.5.1-150300.14.22.18.3 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libreoffice-7.2.5.1-150300.14.22.18.3 libreoffice-base-7.2.5.1-150300.14.22.18.3 libreoffice-base-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-base-drivers-postgresql-7.2.5.1-150300.14.22.18.3 libreoffice-base-drivers-postgresql-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-calc-7.2.5.1-150300.14.22.18.3 libreoffice-calc-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-calc-extensions-7.2.5.1-150300.14.22.18.3 libreoffice-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-debugsource-7.2.5.1-150300.14.22.18.3 libreoffice-draw-7.2.5.1-150300.14.22.18.3 libreoffice-draw-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-filters-optional-7.2.5.1-150300.14.22.18.3 libreoffice-gnome-7.2.5.1-150300.14.22.18.3 libreoffice-gnome-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-gtk3-7.2.5.1-150300.14.22.18.3 libreoffice-gtk3-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-impress-7.2.5.1-150300.14.22.18.3 libreoffice-impress-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-librelogo-7.2.5.1-150300.14.22.18.3 libreoffice-mailmerge-7.2.5.1-150300.14.22.18.3 libreoffice-math-7.2.5.1-150300.14.22.18.3 libreoffice-math-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-officebean-7.2.5.1-150300.14.22.18.3 libreoffice-officebean-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-pyuno-7.2.5.1-150300.14.22.18.3 libreoffice-pyuno-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-qt5-7.2.5.1-150300.14.22.18.3 libreoffice-qt5-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-doc-7.2.5.1-150300.14.22.18.3 libreoffice-writer-7.2.5.1-150300.14.22.18.3 libreoffice-writer-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-writer-extensions-7.2.5.1-150300.14.22.18.3 libreofficekit-7.2.5.1-150300.14.22.18.3 libreofficekit-devel-7.2.5.1-150300.14.22.18.3 - openSUSE Leap 15.3 (noarch): libreoffice-branding-upstream-7.2.5.1-150300.14.22.18.3 libreoffice-gdb-pretty-printers-7.2.5.1-150300.14.22.18.3 libreoffice-glade-7.2.5.1-150300.14.22.18.3 libreoffice-icon-themes-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-af-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-am-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ar-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-as-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ast-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-be-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bg-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bn_IN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-br-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-brx-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bs-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ca-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ca_valencia-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ckb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-cs-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-cy-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-da-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-de-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dgo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dsb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dz-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-el-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en_GB-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en_ZA-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-eo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-es-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-et-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-eu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fa-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fur-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fy-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ga-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gd-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gug-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-he-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hsb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-id-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-is-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-it-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ja-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ka-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kab-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-km-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kmr_Latn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ko-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kok-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ks-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lt-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lv-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mai-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ml-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mni-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-my-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ne-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nso-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-oc-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-om-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-or-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pa-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pt_BR-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pt_PT-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ro-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ru-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-rw-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sa_IN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sat-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sd-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-si-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sid-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sq-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ss-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-st-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sv-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sw_TZ-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-szl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ta-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-te-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tg-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-th-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ts-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tt-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ug-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-uk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-uz-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ve-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-vec-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-vi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-xh-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zh_CN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zh_TW-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zu-7.2.5.1-150300.14.22.18.3 References: https://www.suse.com/security/cve/CVE-2021-25636.html https://bugzilla.suse.com/1196456

1 0

openSUSE-RU-2022:0889-1: moderate: Recommended update for postgresql10
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0889-1 Rating: moderate References: #1190740 #1195680 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for postgresql10 fixes the following issues: Upgrade to version 10.20 (bsc#1195680): - Reindexing might be needed after applying this upgrade, so please read the release notes carefully https://www.postgresql.org/docs/10/release-10-20.html - Add constraints file with 12GB of memory for s390x as a workaround (bsc#1190740) - Add a llvmjit-devel subpackage to pull in the right versions of clang and llvm for building extensions - Fix some mistakes in the interdependencies between the implementation packages and their noarch counterpart Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-889=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-889=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): postgresql10-10.20-8.44.1 postgresql10-contrib-10.20-8.44.1 postgresql10-contrib-debuginfo-10.20-8.44.1 postgresql10-debuginfo-10.20-8.44.1 postgresql10-debugsource-10.20-8.44.1 postgresql10-plperl-10.20-8.44.1 postgresql10-plperl-debuginfo-10.20-8.44.1 postgresql10-plpython-10.20-8.44.1 postgresql10-plpython-debuginfo-10.20-8.44.1 postgresql10-pltcl-10.20-8.44.1 postgresql10-pltcl-debuginfo-10.20-8.44.1 postgresql10-server-10.20-8.44.1 postgresql10-server-debuginfo-10.20-8.44.1 postgresql10-test-10.20-8.44.1 - openSUSE Leap 15.4 (noarch): postgresql10-docs-10.20-8.44.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postgresql10-10.20-8.44.1 postgresql10-contrib-10.20-8.44.1 postgresql10-contrib-debuginfo-10.20-8.44.1 postgresql10-debuginfo-10.20-8.44.1 postgresql10-debugsource-10.20-8.44.1 postgresql10-plperl-10.20-8.44.1 postgresql10-plperl-debuginfo-10.20-8.44.1 postgresql10-plpython-10.20-8.44.1 postgresql10-plpython-debuginfo-10.20-8.44.1 postgresql10-pltcl-10.20-8.44.1 postgresql10-pltcl-debuginfo-10.20-8.44.1 postgresql10-server-10.20-8.44.1 postgresql10-server-debuginfo-10.20-8.44.1 postgresql10-test-10.20-8.44.1 - openSUSE Leap 15.3 (noarch): postgresql10-docs-10.20-8.44.1 References: https://bugzilla.suse.com/1190740 https://bugzilla.suse.com/1195680

1 0

openSUSE-RU-2022:0888-1: moderate: Recommended update for avahi
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for avahi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0888-1 Rating: moderate References: #1179060 #1194561 #1195614 #1196282 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for avahi fixes the following issues: - Change python3-Twisted to a soft dependency. It is not available on SLED or PackageHub, and it is only needed by avahi-bookmarks (bsc#1196282) - Fix warning when Twisted is not available - Have python3-avahi require python3-dbus-python, not the python 2 dbus-1-python package (bsc#1195614) - Ensure that NetworkManager or wicked have already started before initializing (bsc#1194561) - Move sftp-ssh and ssh services to the doc directory. They allow a host's up/down status to be easily discovered and should not be enabled by default (bsc#1179060) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-888=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-888=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libavahi-ui0-0.7-3.18.1 libavahi-ui0-debuginfo-0.7-3.18.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): avahi-0.7-3.18.1 avahi-autoipd-0.7-3.18.1 avahi-autoipd-debuginfo-0.7-3.18.1 avahi-compat-howl-devel-0.7-3.18.1 avahi-compat-mDNSResponder-devel-0.7-3.18.1 avahi-debuginfo-0.7-3.18.1 avahi-debugsource-0.7-3.18.1 avahi-glib2-debugsource-0.7-3.18.1 avahi-utils-0.7-3.18.1 avahi-utils-debuginfo-0.7-3.18.1 avahi-utils-gtk-0.7-3.18.1 avahi-utils-gtk-debuginfo-0.7-3.18.1 libavahi-client3-0.7-3.18.1 libavahi-client3-debuginfo-0.7-3.18.1 libavahi-common3-0.7-3.18.1 libavahi-common3-debuginfo-0.7-3.18.1 libavahi-core7-0.7-3.18.1 libavahi-core7-debuginfo-0.7-3.18.1 libavahi-devel-0.7-3.18.1 libavahi-glib-devel-0.7-3.18.1 libavahi-glib1-0.7-3.18.1 libavahi-glib1-debuginfo-0.7-3.18.1 libavahi-gobject-devel-0.7-3.18.1 libavahi-gobject0-0.7-3.18.1 libavahi-gobject0-debuginfo-0.7-3.18.1 libavahi-ui-gtk3-0-0.7-3.18.1 libavahi-ui-gtk3-0-debuginfo-0.7-3.18.1 libavahi-ui0-0.7-3.18.1 libavahi-ui0-debuginfo-0.7-3.18.1 libdns_sd-0.7-3.18.1 libdns_sd-debuginfo-0.7-3.18.1 libhowl0-0.7-3.18.1 libhowl0-debuginfo-0.7-3.18.1 python3-avahi-0.7-3.18.1 python3-avahi-gtk-0.7-3.18.1 typelib-1_0-Avahi-0_6-0.7-3.18.1 - openSUSE Leap 15.3 (x86_64): avahi-32bit-debuginfo-0.7-3.18.1 libavahi-client3-32bit-0.7-3.18.1 libavahi-client3-32bit-debuginfo-0.7-3.18.1 libavahi-common3-32bit-0.7-3.18.1 libavahi-common3-32bit-debuginfo-0.7-3.18.1 libavahi-glib1-32bit-0.7-3.18.1 libavahi-glib1-32bit-debuginfo-0.7-3.18.1 libdns_sd-32bit-0.7-3.18.1 libdns_sd-32bit-debuginfo-0.7-3.18.1 - openSUSE Leap 15.3 (noarch): avahi-lang-0.7-3.18.1 References: https://bugzilla.suse.com/1179060 https://bugzilla.suse.com/1194561 https://bugzilla.suse.com/1195614 https://bugzilla.suse.com/1196282

1 0

openSUSE-OU-2022:0885-1: moderate: Optional update for SUSE Package Hub
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0885-1 Rating: moderate References: MSC-303 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 optional fixes and contains one feature can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: freerdp, libgsm Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-885=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-885=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libgsm-debugsource-1.0.14-3.2.1 libgsm-devel-1.0.14-3.2.1 libgsm-utils-1.0.14-3.2.1 libgsm-utils-debuginfo-1.0.14-3.2.1 libgsm1-1.0.14-3.2.1 libgsm1-debuginfo-1.0.14-3.2.1 - openSUSE Leap 15.4 (x86_64): libgsm-devel-32bit-1.0.14-3.2.1 libgsm1-32bit-1.0.14-3.2.1 libgsm1-32bit-debuginfo-1.0.14-3.2.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): freerdp-2.1.2-15.12.1 freerdp-debuginfo-2.1.2-15.12.1 freerdp-debugsource-2.1.2-15.12.1 freerdp-devel-2.1.2-15.12.1 freerdp-proxy-2.1.2-15.12.1 freerdp-proxy-debuginfo-2.1.2-15.12.1 freerdp-server-2.1.2-15.12.1 freerdp-server-debuginfo-2.1.2-15.12.1 freerdp-wayland-2.1.2-15.12.1 freerdp-wayland-debuginfo-2.1.2-15.12.1 libfreerdp2-2.1.2-15.12.1 libfreerdp2-debuginfo-2.1.2-15.12.1 libgsm-debugsource-1.0.14-3.2.1 libgsm-devel-1.0.14-3.2.1 libgsm-utils-1.0.14-3.2.1 libgsm-utils-debuginfo-1.0.14-3.2.1 libgsm1-1.0.14-3.2.1 libgsm1-debuginfo-1.0.14-3.2.1 libuwac0-0-2.1.2-15.12.1 libuwac0-0-debuginfo-2.1.2-15.12.1 libwinpr2-2.1.2-15.12.1 libwinpr2-debuginfo-2.1.2-15.12.1 uwac0-0-devel-2.1.2-15.12.1 winpr2-devel-2.1.2-15.12.1 - openSUSE Leap 15.3 (x86_64): libgsm-devel-32bit-1.0.14-3.2.1 libgsm1-32bit-1.0.14-3.2.1 libgsm1-32bit-debuginfo-1.0.14-3.2.1 References:

1 0

openSUSE-RU-2022:0884-1: moderate: Recommended update for python-jsonschema, python-rfc3987, python-strict-rfc3339
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for python-jsonschema, python-rfc3987, python-strict-rfc3339 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0884-1 Rating: moderate References: #1082318 SLE-18756 SLE-23374 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains two features can now be installed. Description: This update for python-jsonschema, python-rfc3987, python-strict-rfc3339 fixes the following issues: - Add patch to fix build with new webcolors. - update to version 3.2.0 (jsc#SLE-18756): * Added a format_nongpl setuptools extra, which installs only format dependencies that are non-GPL (#619). - specfile: * require python-importlib-metadata - update to version 3.1.1: * Temporarily revert the switch to js-regex until #611 and #612 are resolved. - changes from version 3.1.0: - Regular expressions throughout schemas now respect the ECMA 262 dialect, as recommended by the specification (#609). - Activate more of the test suite - Remove tests and benchmarking from the runtime package - Update to v3.0.2 - Fixed a bug where 0 and False were considered equal by const and enum - from v3.0.1 - Fixed a bug where extending validators did not preserve their notion of which validator property contains $id information. - Update to 3.0.1: - Support for Draft 6 and Draft 7 - Draft 7 is now the default - New TypeChecker object for more complex type definitions (and overrides) - Falling back to isodate for the date-time format checker is no longer attempted, in accordance with the specification - Use %license instead of %doc (bsc#1082318) - Remove hashbang from runtime module - Replace PyPI URL with https://github.com/dgerber/rfc3987 - Activate doctests - Add missing runtime dependency on timezone - Replace dead link with GitHub URL - Activate test suite - Trim bias from descriptions. - Initial commit, needed by flex Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-884=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-884=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-pyrsistent-debuginfo-0.14.4-3.2.1 python-pyrsistent-debugsource-0.14.4-3.2.1 python2-pyrsistent-0.14.4-3.2.1 python2-pyrsistent-debuginfo-0.14.4-3.2.1 python3-pyrsistent-0.14.4-3.2.1 python3-pyrsistent-debuginfo-0.14.4-3.2.1 - openSUSE Leap 15.4 (noarch): python-six-doc-1.14.0-12.1 python2-attrs-19.3.0-3.4.1 python2-backports-4.0.0-3.2.1 python2-configparser2-4.0.0-3.2.1 python2-six-1.14.0-12.1 python3-attrs-19.3.0-3.4.1 python3-backports-4.0.0-3.2.1 python3-configparser2-4.0.0-3.2.1 python3-six-1.14.0-12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-pyrsistent-debuginfo-0.14.4-3.2.1 python-pyrsistent-debugsource-0.14.4-3.2.1 python2-pyrsistent-0.14.4-3.2.1 python2-pyrsistent-debuginfo-0.14.4-3.2.1 python3-pyrsistent-0.14.4-3.2.1 python3-pyrsistent-debuginfo-0.14.4-3.2.1 - openSUSE Leap 15.3 (noarch): python-six-doc-1.14.0-12.1 python2-attrs-19.3.0-3.4.1 python2-backports-4.0.0-3.2.1 python2-configparser2-4.0.0-3.2.1 python2-six-1.14.0-12.1 python3-attrs-19.3.0-3.4.1 python3-backports-4.0.0-3.2.1 python3-configparser2-4.0.0-3.2.1 python3-six-1.14.0-12.1 References: https://bugzilla.suse.com/1082318

1 0

openSUSE-RU-2022:0892-1: Recommended update for libyui
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for libyui ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0892-1 Rating: low References: #1195114 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libyui fixes the following issue: - Add package libyui-qt-pkg15 to Basesystem (bsc#1195114). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-892=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libyui-bindings-debuginfo-4.1.5-150300.3.8.7 libyui-bindings-debugsource-4.1.5-150300.3.8.7 libyui-debugsource-4.1.5-150300.3.8.7 libyui-devel-4.1.5-150300.3.8.7 libyui-ncurses-debugsource-4.1.5-150300.3.8.7 libyui-ncurses-devel-4.1.5-150300.3.8.7 libyui-ncurses-pkg-debugsource-4.1.5-150300.3.8.1 libyui-ncurses-pkg-devel-4.1.5-150300.3.8.1 libyui-ncurses-pkg15-4.1.5-150300.3.8.1 libyui-ncurses-pkg15-debuginfo-4.1.5-150300.3.8.1 libyui-ncurses-rest-api-debugsource-4.1.5-150300.3.8.6 libyui-ncurses-rest-api-devel-4.1.5-150300.3.8.6 libyui-ncurses-rest-api15-4.1.5-150300.3.8.6 libyui-ncurses-rest-api15-debuginfo-4.1.5-150300.3.8.6 libyui-ncurses-tools-4.1.5-150300.3.8.7 libyui-ncurses15-4.1.5-150300.3.8.7 libyui-ncurses15-debuginfo-4.1.5-150300.3.8.7 libyui-qt-debugsource-4.1.5-150300.3.8.6 libyui-qt-devel-4.1.5-150300.3.8.6 libyui-qt-graph-debugsource-4.1.5-150300.3.8.6 libyui-qt-graph-devel-4.1.5-150300.3.8.6 libyui-qt-graph15-4.1.5-150300.3.8.6 libyui-qt-graph15-debuginfo-4.1.5-150300.3.8.6 libyui-qt-pkg-debugsource-4.1.5-150300.3.8.1 libyui-qt-pkg-devel-4.1.5-150300.3.8.1 libyui-qt-pkg15-4.1.5-150300.3.8.1 libyui-qt-pkg15-debuginfo-4.1.5-150300.3.8.1 libyui-qt-rest-api-debugsource-4.1.5-150300.3.8.6 libyui-qt-rest-api-devel-4.1.5-150300.3.8.6 libyui-qt-rest-api15-4.1.5-150300.3.8.6 libyui-qt-rest-api15-debuginfo-4.1.5-150300.3.8.6 libyui-qt15-4.1.5-150300.3.8.6 libyui-qt15-debuginfo-4.1.5-150300.3.8.6 libyui-rest-api-debugsource-4.1.5-150300.3.8.6 libyui-rest-api-devel-4.1.5-150300.3.8.6 libyui-rest-api15-4.1.5-150300.3.8.6 libyui-rest-api15-debuginfo-4.1.5-150300.3.8.6 libyui15-4.1.5-150300.3.8.7 libyui15-debuginfo-4.1.5-150300.3.8.7 perl-yui-4.1.5-150300.3.8.7 perl-yui-debuginfo-4.1.5-150300.3.8.7 python3-yui-4.1.5-150300.3.8.7 python3-yui-debuginfo-4.1.5-150300.3.8.7 ruby-yui-4.1.5-150300.3.8.7 ruby-yui-debuginfo-4.1.5-150300.3.8.7 References: https://bugzilla.suse.com/1195114

1 0

openSUSE-SU-2022:0081-1: important: Security update for ansible
by opensuse-security＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Security Update: Security update for ansible ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0081-1 Rating: important References: #1099808 #1112959 #1118896 #1126503 #1137528 #1157968 #1157969 #1164133 #1164134 #1164135 #1164136 #1164137 #1164138 #1164139 #1164140 #1165393 #1166389 #1167440 #1167532 #1167873 #1171162 #1174145 #1174302 #1180816 #1180942 #1181119 #1181935 Cross-References: CVE-2018-10875 CVE-2018-16837 CVE-2019-10156 CVE-2019-14846 CVE-2019-14904 CVE-2019-14905 CVE-2020-10684 CVE-2020-10685 CVE-2020-10691 CVE-2020-10729 CVE-2020-14330 CVE-2020-14332 CVE-2020-1733 CVE-2020-1734 CVE-2020-1735 CVE-2020-1736 CVE-2020-1737 CVE-2020-1738 CVE-2020-1739 CVE-2020-1740 CVE-2020-1746 CVE-2020-1753 CVE-2021-20178 CVE-2021-20180 CVE-2021-20191 CVE-2021-20228 CVSS scores: CVE-2018-10875 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2018-10875 (SUSE): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-16837 (NVD) : 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2018-16837 (SUSE): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-10156 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2019-10156 (SUSE): 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N CVE-2019-14846 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2019-14846 (SUSE): 2.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N CVE-2019-14904 (NVD) : 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L CVE-2019-14904 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2019-14905 (NVD) : 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L CVE-2019-14905 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-10684 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2020-10685 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-10685 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-10691 (NVD) : 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVE-2020-10691 (SUSE): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVE-2020-10729 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-10729 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-14330 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-14330 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2020-14332 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-14332 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-1733 (NVD) : 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L CVE-2020-1733 (SUSE): 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L CVE-2020-1734 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L CVE-2020-1735 (NVD) : 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N CVE-2020-1735 (SUSE): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVE-2020-1736 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2020-1736 (SUSE): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N CVE-2020-1737 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-1737 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H CVE-2020-1738 (NVD) : 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L CVE-2020-1738 (SUSE): 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L CVE-2020-1739 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2020-1739 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2020-1740 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-1740 (SUSE): 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2020-1746 (NVD) : 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-1746 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-1753 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20178 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20178 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-20180 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-20191 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20191 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-20228 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-20228 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves 26 vulnerabilities and has one errata is now available. Description: Ansible was updated to 2.9.21 to fix lots of bugs and security issues. Update to version 2.9.20, maintenance release containing numerous bugfixes. Update to version 2.9.19 with minor changes and a few bug fixes. Update to version 2.9.18: * CVE-2021-20228 where default and fallback values for no_log parameters to modules were not previously masked. (bsc#1181935) * CVE-2021-20178 where several parameters to the snmp_facts module were logged and displayed despite containing sensitive information. (bsc#1180816) * CVE-2021-20180 where several parameters to the bitbucket_pipeline_variable were logged and displayed despite containing sensitive information. (bsc#1180942) * CVE-2021-20191 which addresses a number of modules whose parameters were logged and displayed despite containing sensitive information. For the full list of affected modules, refer to the changelog linked below. (bsc#1181119) Update to version 2.9.17 with minor changes and a few bug fixes. Update to version 2.9.16 with minor changes and many bug fixes. update to version 2.9.15 with following breaking change: * ansible-galaxy login command has been removed update to version 2.9.14 with many small improvements and bug fixes, most notably: * kubectl - connection plugin now redact kubectl_token and kubectl_password in console log (CVE-2020-1753 bsc#1166389). update to version 2.9.13 with many bug fixes, most notably: * A security issue was addressed in the "dnf" module, which previously did not check GPG signatures of packages. * A bug in the "cron" module was fixed. In some cases prior to this fix, the module would inadvertently remove cron entries. update to version 2.9.12 with many bug fixes, most notably the following security fixes: * security issue - copy - Redact the value of the no_log 'content' parameter in the result's invocation.module_args in check mode. Previously when used with check mode and with '-vvv', the module would not censor the content if a change would be made to the destination path. (CVE-2020-14332 bsc#1174302) * security issue atomic_move - change default permissions when creating temporary files so they are not world readable (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736 bsc#1164134) * Fix warning for default permission change when no mode is specified. Follow up to https://github.com/ansible/ansible/issues/67794. (CVE-2020-1736) * Sanitize no_log values from any response keys that might be returned from the uri module (CVE-2020-14330 bsc#1174145). * reset logging level to INFO due to CVE-2019-14846. update to version 2.9.11 with many bug fixes update to version 2.9.10 with many bug fixes. - Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733 (bsc#1164140) update to version 2.9.9 * fix for a regression introduced in 2.9.8 update to version 2.9.8, maintenance release containing numerous bugfixes update to version 2.9.7 with many bug fixes, especially for these security issues: - bsc#1164140 CVE-2020-1733 - insecure temporary directory when running become_user from become directive - bsc#1164139 CVE-2020-1734 shell enabled by default in a pipe lookup plugin subprocess - bsc#1164137 CVE-2020-1735 - path injection on dest parameter in fetch module - bsc#1164134 CVE-2020-1736 atomic_move primitive sets permissive permissions - bsc#1164138 CVE-2020-1737 - Extract-Zip function in win_unzip module does not check extracted path - bsc#1164136 CVE-2020-1738 module package can be selected by the ansible facts - bsc#1164133 CVE-2020-1739 - svn module leaks password when specified as a parameter - bsc#1164135 CVE-2020-1740 - secrets readable after ansible-vault edit - bsc#1165393 CVE-2020-1746 - information disclosure issue in ldap_attr and ldap_entry modules - bsc#1166389 CVE-2020-1753 - kubectl connection plugin leaks sensitive information - bsc#1167532 CVE-2020-10684 - code injection when using ansible_facts as a subkey - bsc#1167440 CVE-2020-10685 - modules which use files encrypted with vault are not properly cleaned up - bsc#1167873 CVE-2020-10691 - archive traversal vulnerability in ansible-galaxy collection install [2] Fixed before 2.9.6, but not yet listed: - bsc#1171162 CVE-2020-10729 two random password lookups in same task return same value - bsc#1157968 CVE-2019-14904 vulnerability in solaris_zone module via crafted solaris zone - bsc#1157969 CVE-2019-14905 malicious code could craft filename in nxos_file_copy module - bsc#1112959 CVE-2018-16837 Information leak in "user" module patch added - (bsc#1137528) CVE-2019-10156: ansible: templating causing an - bsc#1118896 CVE-2018-16876 Information disclosure in vvv+ mode with no_log on (https://github.com/ansible/ansible/pull/49569) - Includes fix for bsc#1099808 (CVE-2018-10875) ansible.cfg is being read from current working directory allowing possible code execution Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-81=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): ansible-2.9.21-bp153.2.3.1 ansible-doc-2.9.21-bp153.2.3.1 ansible-test-2.9.21-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10875.html https://www.suse.com/security/cve/CVE-2018-16837.html https://www.suse.com/security/cve/CVE-2019-10156.html https://www.suse.com/security/cve/CVE-2019-14846.html https://www.suse.com/security/cve/CVE-2019-14904.html https://www.suse.com/security/cve/CVE-2019-14905.html https://www.suse.com/security/cve/CVE-2020-10684.html https://www.suse.com/security/cve/CVE-2020-10685.html https://www.suse.com/security/cve/CVE-2020-10691.html https://www.suse.com/security/cve/CVE-2020-10729.html https://www.suse.com/security/cve/CVE-2020-14330.html https://www.suse.com/security/cve/CVE-2020-14332.html https://www.suse.com/security/cve/CVE-2020-1733.html https://www.suse.com/security/cve/CVE-2020-1734.html https://www.suse.com/security/cve/CVE-2020-1735.html https://www.suse.com/security/cve/CVE-2020-1736.html https://www.suse.com/security/cve/CVE-2020-1737.html https://www.suse.com/security/cve/CVE-2020-1738.html https://www.suse.com/security/cve/CVE-2020-1739.html https://www.suse.com/security/cve/CVE-2020-1740.html https://www.suse.com/security/cve/CVE-2020-1746.html https://www.suse.com/security/cve/CVE-2020-1753.html https://www.suse.com/security/cve/CVE-2021-20178.html https://www.suse.com/security/cve/CVE-2021-20180.html https://www.suse.com/security/cve/CVE-2021-20191.html https://www.suse.com/security/cve/CVE-2021-20228.html https://bugzilla.suse.com/1099808 https://bugzilla.suse.com/1112959 https://bugzilla.suse.com/1118896 https://bugzilla.suse.com/1126503 https://bugzilla.suse.com/1137528 https://bugzilla.suse.com/1157968 https://bugzilla.suse.com/1157969 https://bugzilla.suse.com/1164133 https://bugzilla.suse.com/1164134 https://bugzilla.suse.com/1164135 https://bugzilla.suse.com/1164136 https://bugzilla.suse.com/1164137 https://bugzilla.suse.com/1164138 https://bugzilla.suse.com/1164139 https://bugzilla.suse.com/1164140 https://bugzilla.suse.com/1165393 https://bugzilla.suse.com/1166389 https://bugzilla.suse.com/1167440 https://bugzilla.suse.com/1167532 https://bugzilla.suse.com/1167873 https://bugzilla.suse.com/1171162 https://bugzilla.suse.com/1174145 https://bugzilla.suse.com/1174302 https://bugzilla.suse.com/1180816 https://bugzilla.suse.com/1180942 https://bugzilla.suse.com/1181119 https://bugzilla.suse.com/1181935

1 0

openSUSE-SU-2022:0872-1: important: Security update for stunnel
by opensuse-security＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Security Update: Security update for stunnel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0872-1 Rating: important References: #1181400 #1182529 SLE-20679 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes and contains one feature can now be installed. Description: This update for stunnel fixes the following issues: Update to 5.62 including new features and bugfixes: * Security bugfixes - The "redirect" option was fixed to properly handle unauthenticated requests (bsc#1182529). - Fixed a double free with OpenSSL older than 1.1.0. - Added hardening to systemd service (bsc#1181400). * New features - Added new "protocol = capwin" and "protocol = capwinctrl" configuration file options. - Added support for the new SSL_set_options() values. - Added a bash completion script. - New 'sessionResume' service-level option to allow or disallow session resumption - Download fresh ca-certs.pem for each new release. - New 'protocolHeader' service-level option to insert custom 'connect' protocol negotiation headers. This feature can be used to impersonate other software (e.g. web browsers). - 'protocolHost' can also be used to control the client SMTP protocol negotiation HELO/EHLO value. - Initial FIPS 3.0 support. - Client-side "protocol = ldap" support * Bugfixes - Fixed a transfer() loop bug. - Fixed reloading configuration with "systemctl reload stunnel.service". - Fixed incorrect messages logged for OpenSSL errors. - Fixed 'redirect' with 'protocol'. This combination is not supported by 'smtp', 'pop3' and 'imap' protocols. - X.509v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificates. - Fixed a tiny memory leak in configuration file reload error handling. - Fixed engine initialization. - FIPS TLS feature is reported when a provider or container is available, and not when FIPS control API is available. - Fix configuration reload when compression is used - Fix test suite fixed not to require external connectivity Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-872=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-872=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - openSUSE Leap 15.4 (noarch): stunnel-doc-5.62-3.14.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - openSUSE Leap 15.3 (noarch): stunnel-doc-5.62-3.14.1 References: https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1182529

1 0

openSUSE-SU-2022:0873-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0873-1 Rating: important References: #1193314 #1193444 #1193491 #1194926 #1194928 #1194929 #1194931 #1194932 #1194933 #1194934 #1194935 #1194937 #1194939 #1194940 #1194941 #1195163 Cross-References: CVE-2022-21248 CVE-2022-21282 CVE-2022-21283 CVE-2022-21293 CVE-2022-21294 CVE-2022-21296 CVE-2022-21299 CVE-2022-21305 CVE-2022-21340 CVE-2022-21341 CVE-2022-21349 CVE-2022-21360 CVE-2022-21365 CVSS scores: CVE-2022-21248 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21248 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21282 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21282 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21283 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21283 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21296 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21296 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21299 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21305 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21305 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21340 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21340 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21349 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21349 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has three fixes is now available. Description: This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u322 (icedtea-3.22.0) Including the following security fixes: - CVE-2022-21248, bsc#1194926: Enhance cross VM serialization - CVE-2022-21283, bsc#1194937: Better String matching - CVE-2022-21293, bsc#1194935: Improve String constructions - CVE-2022-21294, bsc#1194934: Enhance construction of Identity maps - CVE-2022-21282, bsc#1194933: Better resolution of URIs - CVE-2022-21296, bsc#1194932: Improve SAX Parser configuration management - CVE-2022-21299, bsc#1194931: Improved scanning of XML entities - CVE-2022-21305, bsc#1194939: Better array indexing - CVE-2022-21340, bsc#1194940: Verify Jar Verification - CVE-2022-21341, bsc#1194941: Improve serial forms for transport - CVE-2022-21349: Improve Solaris font rendering - CVE-2022-21360, bsc#1194929: Enhance BMP image support - CVE-2022-21365, bsc#1194928: Enhanced BMP processing Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-873=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-873=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.322-3.64.2 java-1_8_0-openjdk-accessibility-1.8.0.322-3.64.2 java-1_8_0-openjdk-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-debugsource-1.8.0.322-3.64.2 java-1_8_0-openjdk-demo-1.8.0.322-3.64.2 java-1_8_0-openjdk-demo-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-devel-1.8.0.322-3.64.2 java-1_8_0-openjdk-devel-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-headless-1.8.0.322-3.64.2 java-1_8_0-openjdk-headless-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-src-1.8.0.322-3.64.2 - openSUSE Leap 15.4 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.322-3.64.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.322-3.64.2 java-1_8_0-openjdk-accessibility-1.8.0.322-3.64.2 java-1_8_0-openjdk-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-debugsource-1.8.0.322-3.64.2 java-1_8_0-openjdk-demo-1.8.0.322-3.64.2 java-1_8_0-openjdk-demo-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-devel-1.8.0.322-3.64.2 java-1_8_0-openjdk-devel-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-headless-1.8.0.322-3.64.2 java-1_8_0-openjdk-headless-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-src-1.8.0.322-3.64.2 - openSUSE Leap 15.3 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.322-3.64.2 References: https://www.suse.com/security/cve/CVE-2022-21248.html https://www.suse.com/security/cve/CVE-2022-21282.html https://www.suse.com/security/cve/CVE-2022-21283.html https://www.suse.com/security/cve/CVE-2022-21293.html https://www.suse.com/security/cve/CVE-2022-21294.html https://www.suse.com/security/cve/CVE-2022-21296.html https://www.suse.com/security/cve/CVE-2022-21299.html https://www.suse.com/security/cve/CVE-2022-21305.html https://www.suse.com/security/cve/CVE-2022-21340.html https://www.suse.com/security/cve/CVE-2022-21341.html https://www.suse.com/security/cve/CVE-2022-21349.html https://www.suse.com/security/cve/CVE-2022-21360.html https://www.suse.com/security/cve/CVE-2022-21365.html https://bugzilla.suse.com/1193314 https://bugzilla.suse.com/1193444 https://bugzilla.suse.com/1193491 https://bugzilla.suse.com/1194926 https://bugzilla.suse.com/1194928 https://bugzilla.suse.com/1194929 https://bugzilla.suse.com/1194931 https://bugzilla.suse.com/1194932 https://bugzilla.suse.com/1194933 https://bugzilla.suse.com/1194934 https://bugzilla.suse.com/1194935 https://bugzilla.suse.com/1194937 https://bugzilla.suse.com/1194939 https://bugzilla.suse.com/1194940 https://bugzilla.suse.com/1194941 https://bugzilla.suse.com/1195163

1 0

openSUSE-RU-2022:0874-1: moderate: Recommended update for openldap2
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0874-1 Rating: moderate References: #1197004 PM-3288 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for openldap2 fixes the following issue: - Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression (bsc#1197004) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-874=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-874=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libldap-2_4-2-2.4.46-9.64.1 libldap-2_4-2-debuginfo-2.4.46-9.64.1 openldap2-2.4.46-9.64.1 openldap2-back-meta-2.4.46-9.64.1 openldap2-back-meta-debuginfo-2.4.46-9.64.1 openldap2-back-perl-2.4.46-9.64.1 openldap2-back-perl-debuginfo-2.4.46-9.64.1 openldap2-back-sock-2.4.46-9.64.1 openldap2-back-sock-debuginfo-2.4.46-9.64.1 openldap2-back-sql-2.4.46-9.64.1 openldap2-back-sql-debuginfo-2.4.46-9.64.1 openldap2-client-2.4.46-9.64.1 openldap2-client-debuginfo-2.4.46-9.64.1 openldap2-contrib-2.4.46-9.64.1 openldap2-contrib-debuginfo-2.4.46-9.64.1 openldap2-debuginfo-2.4.46-9.64.1 openldap2-debugsource-2.4.46-9.64.1 openldap2-devel-2.4.46-9.64.1 openldap2-devel-static-2.4.46-9.64.1 openldap2-ppolicy-check-password-1.2-9.64.1 openldap2-ppolicy-check-password-debuginfo-1.2-9.64.1 - openSUSE Leap 15.4 (noarch): libldap-data-2.4.46-9.64.1 openldap2-doc-2.4.46-9.64.1 - openSUSE Leap 15.4 (x86_64): libldap-2_4-2-32bit-2.4.46-9.64.1 libldap-2_4-2-32bit-debuginfo-2.4.46-9.64.1 openldap2-devel-32bit-2.4.46-9.64.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libldap-2_4-2-2.4.46-9.64.1 libldap-2_4-2-debuginfo-2.4.46-9.64.1 openldap2-2.4.46-9.64.1 openldap2-back-meta-2.4.46-9.64.1 openldap2-back-meta-debuginfo-2.4.46-9.64.1 openldap2-back-perl-2.4.46-9.64.1 openldap2-back-perl-debuginfo-2.4.46-9.64.1 openldap2-back-sock-2.4.46-9.64.1 openldap2-back-sock-debuginfo-2.4.46-9.64.1 openldap2-back-sql-2.4.46-9.64.1 openldap2-back-sql-debuginfo-2.4.46-9.64.1 openldap2-client-2.4.46-9.64.1 openldap2-client-debuginfo-2.4.46-9.64.1 openldap2-contrib-2.4.46-9.64.1 openldap2-contrib-debuginfo-2.4.46-9.64.1 openldap2-debuginfo-2.4.46-9.64.1 openldap2-debugsource-2.4.46-9.64.1 openldap2-devel-2.4.46-9.64.1 openldap2-devel-static-2.4.46-9.64.1 openldap2-ppolicy-check-password-1.2-9.64.1 openldap2-ppolicy-check-password-debuginfo-1.2-9.64.1 - openSUSE Leap 15.3 (noarch): libldap-data-2.4.46-9.64.1 openldap2-doc-2.4.46-9.64.1 - openSUSE Leap 15.3 (x86_64): libldap-2_4-2-32bit-2.4.46-9.64.1 libldap-2_4-2-32bit-debuginfo-2.4.46-9.64.1 openldap2-devel-32bit-2.4.46-9.64.1 References: https://bugzilla.suse.com/1197004

1 0

openSUSE-RU-2022:0876-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0876-1 Rating: moderate References: #1188970 #1196577 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xorg-x11-server fixes the following issue: - Fix segmentation fault during terminal switches with multiple attached displays. (bsc#1188970) - Fix a regression that may cause gdm/lightdm fail to start. (bsc#1196577) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-876=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-876=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): xorg-x11-server-wayland-1.20.3-22.5.47.1 xorg-x11-server-wayland-debuginfo-1.20.3-22.5.47.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): xorg-x11-server-1.20.3-22.5.47.1 xorg-x11-server-debuginfo-1.20.3-22.5.47.1 xorg-x11-server-debugsource-1.20.3-22.5.47.1 xorg-x11-server-extra-1.20.3-22.5.47.1 xorg-x11-server-extra-debuginfo-1.20.3-22.5.47.1 xorg-x11-server-sdk-1.20.3-22.5.47.1 xorg-x11-server-source-1.20.3-22.5.47.1 xorg-x11-server-wayland-1.20.3-22.5.47.1 xorg-x11-server-wayland-debuginfo-1.20.3-22.5.47.1 References: https://bugzilla.suse.com/1188970 https://bugzilla.suse.com/1196577

1 0

openSUSE-SU-2022:0870-1: important: Security update for java-1_8_0-openj9
by opensuse-security＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Security Update: Security update for java-1_8_0-openj9 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0870-1 Rating: important References: #1194925 #1194926 #1194927 #1194928 #1194929 #1194930 #1194931 #1194932 #1194933 #1194934 #1194935 #1194939 #1194940 #1194941 Cross-References: CVE-2022-21248 CVE-2022-21277 CVE-2022-21282 CVE-2022-21291 CVE-2022-21293 CVE-2022-21294 CVE-2022-21296 CVE-2022-21299 CVE-2022-21305 CVE-2022-21340 CVE-2022-21341 CVE-2022-21360 CVE-2022-21365 CVE-2022-21366 CVSS scores: CVE-2022-21248 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21248 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21277 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21277 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21282 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21282 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21291 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21291 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21293 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21296 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21296 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21299 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21305 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21305 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21340 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21340 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0: - Fixing the following vulnerabilities: CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930), CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925), CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934), CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931), CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940), CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929), CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-870=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-870=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): java-1_8_0-openj9-1.8.0.322-3.21.2 java-1_8_0-openj9-accessibility-1.8.0.322-3.21.2 java-1_8_0-openj9-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-debugsource-1.8.0.322-3.21.2 java-1_8_0-openj9-demo-1.8.0.322-3.21.2 java-1_8_0-openj9-demo-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-devel-1.8.0.322-3.21.2 java-1_8_0-openj9-devel-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-headless-1.8.0.322-3.21.2 java-1_8_0-openj9-headless-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-src-1.8.0.322-3.21.2 - openSUSE Leap 15.4 (noarch): java-1_8_0-openj9-javadoc-1.8.0.322-3.21.2 - openSUSE Leap 15.3 (ppc64le s390x x86_64): java-1_8_0-openj9-1.8.0.322-3.21.2 java-1_8_0-openj9-accessibility-1.8.0.322-3.21.2 java-1_8_0-openj9-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-debugsource-1.8.0.322-3.21.2 java-1_8_0-openj9-demo-1.8.0.322-3.21.2 java-1_8_0-openj9-demo-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-devel-1.8.0.322-3.21.2 java-1_8_0-openj9-headless-1.8.0.322-3.21.2 java-1_8_0-openj9-src-1.8.0.322-3.21.2 - openSUSE Leap 15.3 (noarch): java-1_8_0-openj9-javadoc-1.8.0.322-3.21.2 References: https://www.suse.com/security/cve/CVE-2022-21248.html https://www.suse.com/security/cve/CVE-2022-21277.html https://www.suse.com/security/cve/CVE-2022-21282.html https://www.suse.com/security/cve/CVE-2022-21291.html https://www.suse.com/security/cve/CVE-2022-21293.html https://www.suse.com/security/cve/CVE-2022-21294.html https://www.suse.com/security/cve/CVE-2022-21296.html https://www.suse.com/security/cve/CVE-2022-21299.html https://www.suse.com/security/cve/CVE-2022-21305.html https://www.suse.com/security/cve/CVE-2022-21340.html https://www.suse.com/security/cve/CVE-2022-21341.html https://www.suse.com/security/cve/CVE-2022-21360.html https://www.suse.com/security/cve/CVE-2022-21365.html https://www.suse.com/security/cve/CVE-2022-21366.html https://bugzilla.suse.com/1194925 https://bugzilla.suse.com/1194926 https://bugzilla.suse.com/1194927 https://bugzilla.suse.com/1194928 https://bugzilla.suse.com/1194929 https://bugzilla.suse.com/1194930 https://bugzilla.suse.com/1194931 https://bugzilla.suse.com/1194932 https://bugzilla.suse.com/1194933 https://bugzilla.suse.com/1194934 https://bugzilla.suse.com/1194935 https://bugzilla.suse.com/1194939 https://bugzilla.suse.com/1194940 https://bugzilla.suse.com/1194941

1 0

openSUSE-FU-2022:0868-1: moderate: Feature update for tcl and tk
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Feature Update: Feature update for tcl and tk ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0868-1 Rating: moderate References: #1138797 #1185662 #1195257 #903017 SLE-21016 SLE-23284 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability, contains two features and has three fixes is now available. Description: This feature update for tcl and tk fixes the following issues: Update tcl and tk to version 8.6.12 (jsc#SLE-21016, jsc#SLE-23284): - Move tcl.macros to /usr/lib/rpm/macros.d (bsc#1185662) - Use FAT LTO objects in order to provide proper static library (bsc#1138797) - Fix a bug in itcl that was affecting iwidgets (bsc#903017) - Add [combobox current] support "end" index - Add fixes in [text] bindings - Add missing "deferred clear code" support to GIF photo images - Add new virtual event <<TkWorldChanged>> - Add new keycodes: CodeInput, SingleCandidate, MultipleCandidate, PreviousCandidate - Add new support for POSIX error: EILSEQ - Add new command [tcl::unsupported::corotype] - Add new command [tcl::unsupported::timerate] for performance testing - Add new option -state to [ttk::scale] - Add portable keycodes: OE, oe, Ydiaeresis - Add support for backrefs in [array names -regexp] - Add support for Unicode 14 - Disfavor Master/Slave terminology - Enhance [oo::object] to acquire or lose a class identity dynamically - Fix canvas rotated text overlap detection - Fix canvas closed polylines yo fully honor -joinstyle - Fix display of Long non-wrapped lines in text - Fix display treeview focus ring when -selectmode none - Fix focus events not to break entry validation - Fix [package prefer stable] failing case - Fix auto_path initialization by Safe Base interps - Fix bad interaction between grab and mouse pointer warp - Fix borderwidth calculations on menu items - Fix cascade tearoff menu redraw artifacts - Fix coords rounding when drawing canvas items - Fix corrupt result from [$c postscript] with -file or -channel - Fix errno management in socket full close - Fix failure when a [proc] argument name is computed, not literal - Fix focus on unmapped windows - Fix handling of duplicates in spinbox -values list - Fix incomplete read of multi-image GIF - Fix initialization order of static package in wish - Fix issue when trying to display angled text without Xft - Fix issue with font initialization when no font is installed - Fix problems with Noto Color Emoji font - Fix race conditions in [file delete] and [file mkdir] - Fix Std channel initialization for multi-thread operations - Fix tearoff menu redraw artifacts - Fix up arrow key in [text] to correctly move cursor to index 1.0 - Fix various cursor issues - Fix various encoding issues - Fix various fontchooser issues - Fix various issues causing crashes and hang in - Fix various memory issues - Fix various scrolling bugs and add improvements - Fix 32/64-bit confusion of FS DIR operations reported for AIX - Improve appearance of text selection in [*entry] widgets - Improve checkbutton handling of -selectcolor - Improve handling of resolution changes - Improve multi-thread safety when Xft is in use - Improve ttk high-contrast-mode support - Improve emoji support - Improve legacy support for [tk_setPalette] - Make combobox -postoffset option work with default style - Make spinbox use proper names in query of option database - Menu flaws when empty menubar clicked - New index argument in [$menubutton post x y index] - Preserve canvas tag list order during add/delete - Prevent cross-manager loops of geom management - Rewrite of zlib inflation for multi-stream and completeness - Run fileevents in proper thread after [thread::attach $channel] - Stop [unload] corruption of list of loaded packages - Stop app switching exposing withdrawn windows as zombies - Tk now denied access to PRIMARY selection from safe interps - TkpDrawAngledCharsInContext leaked a CGColor - Try to restore Tcl's [update] command when Tk is unloaded - Changed [info * methods] to include mixins - [package require] is now NR-enabled The following fixes might show some potential incompatibilities with existing software: - Revised [binary (en|de)code base64] for RFC compliance and roundtrip - Tcl_DStringAppendElement # quoting precision, dstring-2.13, dstring-3.10 - Extended [clock scan] ISO format and time zone support - Allow for select/copy from disabled text widget on all platforms - Revised case of [info loaded] module names - [info hostname] reports DNS name, not NetBIOS name - Force -eofchar \032 when evaluating library scripts - Revised error messages: "too few" => "not enough" - Performed rewrite of Tk event loop to prevent ring overflow - Refactored all MouseWheel bindings - Revised precision of ::scale widget tick mark values - Prevent transient window cycles (crashed on Aqua) - Builds no longer use -lieee - Quoting of command line arguments by [exec] on Windows revised. Prior quoting rules left holes where some values would not pass through, but could trigger substitutions or program execution. See https://core.tcl-lang.org/tcl/info/21b0629c81 - [lreplace] accepts all out-of-range index values Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-868=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-868=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): tcl-8.6.12-150300.14.3.1 tcl-debuginfo-8.6.12-150300.14.3.1 tcl-debugsource-8.6.12-150300.14.3.1 tcl-devel-8.6.12-150300.14.3.1 tk-8.6.12-150300.10.3.1 tk-debuginfo-8.6.12-150300.10.3.1 tk-debugsource-8.6.12-150300.10.3.1 tk-devel-8.6.12-150300.10.3.1 - openSUSE Leap 15.4 (x86_64): tcl-32bit-8.6.12-150300.14.3.1 tcl-32bit-debuginfo-8.6.12-150300.14.3.1 tk-32bit-8.6.12-150300.10.3.1 tk-32bit-debuginfo-8.6.12-150300.10.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): tcl-8.6.12-150300.14.3.1 tcl-debuginfo-8.6.12-150300.14.3.1 tcl-debugsource-8.6.12-150300.14.3.1 tcl-devel-8.6.12-150300.14.3.1 tk-8.6.12-150300.10.3.1 tk-debuginfo-8.6.12-150300.10.3.1 tk-debugsource-8.6.12-150300.10.3.1 tk-devel-8.6.12-150300.10.3.1 - openSUSE Leap 15.3 (x86_64): tcl-32bit-8.6.12-150300.14.3.1 tcl-32bit-debuginfo-8.6.12-150300.14.3.1 tk-32bit-8.6.12-150300.10.3.1 tk-32bit-debuginfo-8.6.12-150300.10.3.1 References: https://www.suse.com/security/cve/CVE-2021-35331.html https://bugzilla.suse.com/1138797 https://bugzilla.suse.com/1185662 https://bugzilla.suse.com/1195257 https://bugzilla.suse.com/903017

1 0

openSUSE-RU-2022:0869-1: moderate: Recommended update for s390-tools
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for s390-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0869-1 Rating: moderate References: #1196439 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for s390-tools fixes the following issues: - Fix ziomon throughput calculation. Use time interval, during which read and write requests were started and finished, for calculation of throughput of zfcp adapter instead of d2c time of read and write requests (bsc#1196439) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-869=1 Package List: - openSUSE Leap 15.3 (s390x): libekmfweb1-2.15.1-150300.8.17.1 libekmfweb1-debuginfo-2.15.1-150300.8.17.1 libekmfweb1-devel-2.15.1-150300.8.17.1 osasnmpd-2.15.1-150300.8.17.1 osasnmpd-debuginfo-2.15.1-150300.8.17.1 s390-tools-2.15.1-150300.8.17.1 s390-tools-debuginfo-2.15.1-150300.8.17.1 s390-tools-debugsource-2.15.1-150300.8.17.1 s390-tools-hmcdrvfs-2.15.1-150300.8.17.1 s390-tools-hmcdrvfs-debuginfo-2.15.1-150300.8.17.1 s390-tools-zdsfs-2.15.1-150300.8.17.1 s390-tools-zdsfs-debuginfo-2.15.1-150300.8.17.1 References: https://bugzilla.suse.com/1196439

1 0

openSUSE-RU-2022:0864-1: important: Recommended update for SAPHanaSR
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for SAPHanaSR ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0864-1 Rating: important References: #1174557 #1181765 #1182201 #1182545 #1182774 #1189530 #1189531 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for SAPHanaSR fixes the following issues: - Add systemd support for the resource agent to interact with the new SAP unit files for sapstartsrv. As the new version of the SAP Startup Framework will use systemd unit files to control the sapstartsrv process instead of the previous used SysV init script, the handling of sapstartsrv inside the resource agents is adapted to support both ways. (bsc#1189530, bsc#1189531) - The resource start and stop timeout is now configurable by increasing the timeout for the action 'start' and/or 'stop'. 95% of this action timeouts will be used to calculate the new resource start and stop timeout for the 'WaitforStarted' and 'WaitforStopped' functions. If the new, calculated timeout value is less than '3600', it will be set to '3600', so that we do not decrease this timeout by accident. (bsc#1182545) - Change promotion scoring during maintenance procedure to prevent that both sides have an equal promotion scoring after refresh which might result in a critical promotion of the secondary. (bsc#1174557) - Update of man page SAPHanaSR.py.7 - correct the supported HANA version (bsc#1182201) - If the $hdbState command fails to retrieve the current state of the System Replication, the resource agent now uses the system_replication/actual_mode attribute (if available) from the global.ini file as a fallback. This should prevent some confusing and misleading log messages during a takeover and solves the problem of a not working takeover back (after a successful first takeover) (bsc#1181765) - Add dedicated logging of HANA_CALL problems. It is now possible to identify if the called `hana` command or the needed `su` command throws the error, and for further hints it logs the stderr output. Additionally it is possible to get regular log messages for the used commands, their return code and their stderr output by enabling the 'debug' mode of the resource agents (bsc#1182774) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-864=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-864=1 Package List: - openSUSE Leap 15.4 (noarch): SAPHanaSR-0.155.0-4.17.1 SAPHanaSR-doc-0.155.0-4.17.1 - openSUSE Leap 15.3 (noarch): SAPHanaSR-0.155.0-4.17.1 SAPHanaSR-doc-0.155.0-4.17.1 References: https://bugzilla.suse.com/1174557 https://bugzilla.suse.com/1181765 https://bugzilla.suse.com/1182201 https://bugzilla.suse.com/1182545 https://bugzilla.suse.com/1182774 https://bugzilla.suse.com/1189530 https://bugzilla.suse.com/1189531

1 0

openSUSE-RU-2022:0863-1: important: Recommended update for sapstartsrv-resource-agents
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for sapstartsrv-resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0863-1 Rating: important References: #1189529 #1193568 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sapstartsrv-resource-agents fixes the following issues: - Add systemd support for the resource agent to interact with the new SAP unit files for sapstartsrv. As the new version of the SAP Startup Framework uses systemd unit files to control the sapstartsrv process instead of the previous used SysV init script, handling of sapstartsrv inside the resource agents is adapted to support both ways (bsc#1189529) - Prevent false posivite with pgrep in function '_get_status' (bsc#1193568) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-863=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-863=1 Package List: - openSUSE Leap 15.4 (noarch): sapstartsrv-resource-agents-0.9.0+git.1645795466.55a8cca-1.12.1 - openSUSE Leap 15.3 (noarch): sapstartsrv-resource-agents-0.9.0+git.1645795466.55a8cca-1.12.1 References: https://bugzilla.suse.com/1189529 https://bugzilla.suse.com/1193568

1 0

openSUSE-RU-2022:0862-1: important: Recommended update for SAPHanaSR-ScaleOut
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for SAPHanaSR-ScaleOut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0862-1 Rating: important References: #1182774 #1189532 #1189533 #1189540 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for SAPHanaSR-ScaleOut fixes the following issues: - Add systemd support for the resource agent to interact with the new SAP unit files for sapstartsrv. As the new version of the SAP Startup Framework uses systemd unit files to control the sapstartsrv process instead of the previous used SysV init script, the handling of sapstartsrv inside the resource agents is adapted to support both ways. (bsc#1189532, bsc#1189533) - Add dedicated logging of HANA_CALL problems. It is now possible to identify if the called `hana` command or the needed `su` command throws the error, and for further hints it logs the stderr output. Additionally it is possible to get regular log messages for the used commands, their return code and their stderr output by enabling the 'debug' mode of the resource agents. (bsc#1182774) - Add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give control over the hook runtime. Default is 'all-on' which means there are 3 cib calls performed inside the hook script. Changing the value of 'cib_access' inside the global.ini file to'site-on' to perform the absolute minimum cib calls (only one). (bsc#1189540) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-862=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-862=1 Package List: - openSUSE Leap 15.4 (noarch): SAPHanaSR-ScaleOut-0.181.0-30.1 SAPHanaSR-ScaleOut-doc-0.181.0-30.1 - openSUSE Leap 15.3 (noarch): SAPHanaSR-ScaleOut-0.181.0-30.1 SAPHanaSR-ScaleOut-doc-0.181.0-30.1 References: https://bugzilla.suse.com/1182774 https://bugzilla.suse.com/1189532 https://bugzilla.suse.com/1189533 https://bugzilla.suse.com/1189540

1 0

openSUSE-RU-2022:0861-1: moderate: Recommended update for openssl-1_1
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for openssl-1_1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0861-1 Rating: moderate References: #1182959 #1195149 #1195792 #1195856 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for openssl-1_1 fixes the following issues: openssl-1_1: - Fix PAC pointer authentication in ARM (bsc#1195856) - Pull libopenssl-1_1 when updating openssl-1_1 with the same version (bsc#1195792) - FIPS: Fix function and reason error codes (bsc#1182959) - Enable zlib compression support (bsc#1195149) glibc: - Resolve installation issue of `glibc-devel` in SUSE Linux Enterprise Micro 5.1 linux-glibc-devel: - Resolve installation issue of `linux-kernel-headers` in SUSE Linux Enterprise Micro 5.1 libxcrypt: - Resolve installation issue of `libxcrypt-devel` in SUSE Linux Enterprise Micro 5.1 zlib: - Resolve installation issue of `zlib-devel` in SUSE Linux Enterprise Micro 5.1 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-861=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-861=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): glibc-2.31-150300.20.7 glibc-debuginfo-2.31-150300.20.7 glibc-debugsource-2.31-150300.20.7 glibc-devel-2.31-150300.20.7 glibc-devel-debuginfo-2.31-150300.20.7 glibc-devel-static-2.31-150300.20.7 glibc-extra-2.31-150300.20.7 glibc-extra-debuginfo-2.31-150300.20.7 glibc-locale-2.31-150300.20.7 glibc-locale-base-2.31-150300.20.7 glibc-locale-base-debuginfo-2.31-150300.20.7 glibc-profile-2.31-150300.20.7 glibc-utils-2.31-150300.20.1 glibc-utils-debuginfo-2.31-150300.20.1 glibc-utils-src-debugsource-2.31-150300.20.1 libcrypt1-4.4.15-150300.4.2.41 libcrypt1-debuginfo-4.4.15-150300.4.2.41 libminizip1-1.2.11-3.26.10 libminizip1-debuginfo-1.2.11-3.26.10 libxcrypt-debugsource-4.4.15-150300.4.2.41 libxcrypt-devel-4.4.15-150300.4.2.41 libxcrypt-devel-static-4.4.15-150300.4.2.41 libz1-1.2.11-3.26.10 libz1-debuginfo-1.2.11-3.26.10 minizip-devel-1.2.11-3.26.10 nscd-2.31-150300.20.7 nscd-debuginfo-2.31-150300.20.7 zlib-debugsource-1.2.11-3.26.10 zlib-devel-1.2.11-3.26.10 zlib-devel-static-1.2.11-3.26.10 - openSUSE Leap 15.4 (noarch): glibc-html-2.31-150300.20.7 glibc-i18ndata-2.31-150300.20.7 glibc-info-2.31-150300.20.7 glibc-lang-2.31-150300.20.7 - openSUSE Leap 15.4 (x86_64): glibc-32bit-2.31-150300.20.7 glibc-32bit-debuginfo-2.31-150300.20.7 glibc-devel-32bit-2.31-150300.20.7 glibc-devel-32bit-debuginfo-2.31-150300.20.7 glibc-devel-static-32bit-2.31-150300.20.7 glibc-locale-base-32bit-2.31-150300.20.7 glibc-locale-base-32bit-debuginfo-2.31-150300.20.7 glibc-profile-32bit-2.31-150300.20.7 glibc-utils-32bit-2.31-150300.20.1 glibc-utils-32bit-debuginfo-2.31-150300.20.1 libcrypt1-32bit-4.4.15-150300.4.2.41 libcrypt1-32bit-debuginfo-4.4.15-150300.4.2.41 libminizip1-32bit-1.2.11-3.26.10 libminizip1-32bit-debuginfo-1.2.11-3.26.10 libxcrypt-devel-32bit-4.4.15-150300.4.2.41 libz1-32bit-1.2.11-3.26.10 libz1-32bit-debuginfo-1.2.11-3.26.10 zlib-devel-32bit-1.2.11-3.26.10 zlib-devel-static-32bit-1.2.11-3.26.10 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): glibc-2.31-150300.20.7 glibc-debuginfo-2.31-150300.20.7 glibc-debugsource-2.31-150300.20.7 glibc-devel-2.31-150300.20.7 glibc-devel-debuginfo-2.31-150300.20.7 glibc-devel-static-2.31-150300.20.7 glibc-extra-2.31-150300.20.7 glibc-extra-debuginfo-2.31-150300.20.7 glibc-locale-2.31-150300.20.7 glibc-locale-base-2.31-150300.20.7 glibc-locale-base-debuginfo-2.31-150300.20.7 glibc-profile-2.31-150300.20.7 glibc-utils-2.31-150300.20.1 glibc-utils-debuginfo-2.31-150300.20.1 glibc-utils-src-debugsource-2.31-150300.20.1 libcrypt1-4.4.15-150300.4.2.41 libcrypt1-debuginfo-4.4.15-150300.4.2.41 libminizip1-1.2.11-3.26.10 libminizip1-debuginfo-1.2.11-3.26.10 libopenssl-1_1-devel-1.1.1d-11.43.1 libopenssl1_1-1.1.1d-11.43.1 libopenssl1_1-debuginfo-1.1.1d-11.43.1 libopenssl1_1-hmac-1.1.1d-11.43.1 libxcrypt-debugsource-4.4.15-150300.4.2.41 libxcrypt-devel-4.4.15-150300.4.2.41 libxcrypt-devel-static-4.4.15-150300.4.2.41 libz1-1.2.11-3.26.10 libz1-debuginfo-1.2.11-3.26.10 linux-glibc-devel-5.3-3.2.10 minizip-devel-1.2.11-3.26.10 nscd-2.31-150300.20.7 nscd-debuginfo-2.31-150300.20.7 openssl-1_1-1.1.1d-11.43.1 openssl-1_1-debuginfo-1.1.1d-11.43.1 openssl-1_1-debugsource-1.1.1d-11.43.1 zlib-debugsource-1.2.11-3.26.10 zlib-devel-1.2.11-3.26.10 zlib-devel-static-1.2.11-3.26.10 - openSUSE Leap 15.3 (x86_64): glibc-32bit-2.31-150300.20.7 glibc-32bit-debuginfo-2.31-150300.20.7 glibc-devel-32bit-2.31-150300.20.7 glibc-devel-32bit-debuginfo-2.31-150300.20.7 glibc-devel-static-32bit-2.31-150300.20.7 glibc-locale-base-32bit-2.31-150300.20.7 glibc-locale-base-32bit-debuginfo-2.31-150300.20.7 glibc-profile-32bit-2.31-150300.20.7 glibc-utils-32bit-2.31-150300.20.1 glibc-utils-32bit-debuginfo-2.31-150300.20.1 libcrypt1-32bit-4.4.15-150300.4.2.41 libcrypt1-32bit-debuginfo-4.4.15-150300.4.2.41 libminizip1-32bit-1.2.11-3.26.10 libminizip1-32bit-debuginfo-1.2.11-3.26.10 libopenssl-1_1-devel-32bit-1.1.1d-11.43.1 libopenssl1_1-32bit-1.1.1d-11.43.1 libopenssl1_1-32bit-debuginfo-1.1.1d-11.43.1 libopenssl1_1-hmac-32bit-1.1.1d-11.43.1 libxcrypt-devel-32bit-4.4.15-150300.4.2.41 libz1-32bit-1.2.11-3.26.10 libz1-32bit-debuginfo-1.2.11-3.26.10 zlib-devel-32bit-1.2.11-3.26.10 zlib-devel-static-32bit-1.2.11-3.26.10 - openSUSE Leap 15.3 (noarch): glibc-html-2.31-150300.20.7 glibc-i18ndata-2.31-150300.20.7 glibc-info-2.31-150300.20.7 glibc-lang-2.31-150300.20.7 openssl-1_1-doc-1.1.1d-11.43.1 References: https://bugzilla.suse.com/1182959 https://bugzilla.suse.com/1195149 https://bugzilla.suse.com/1195792 https://bugzilla.suse.com/1195856

1 0

openSUSE-SU-2022:0856-1: important: Security update for openssl-1_0_0
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for openssl-1_0_0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0856-1 Rating: important References: #1196877 Cross-References: CVE-2022-0778 CVSS scores: CVE-2022-0778 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openssl-1_0_0 fixes the following issues: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-856=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-856=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libopenssl-1_0_0-devel-1.0.2p-3.49.1 libopenssl10-1.0.2p-3.49.1 libopenssl10-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-1.0.2p-3.49.1 libopenssl1_0_0-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-hmac-1.0.2p-3.49.1 libopenssl1_0_0-steam-1.0.2p-3.49.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-1.0.2p-3.49.1 openssl-1_0_0-cavs-1.0.2p-3.49.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-debugsource-1.0.2p-3.49.1 - openSUSE Leap 15.4 (noarch): openssl-1_0_0-doc-1.0.2p-3.49.1 - openSUSE Leap 15.4 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-3.49.1 libopenssl1_0_0-32bit-1.0.2p-3.49.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-hmac-32bit-1.0.2p-3.49.1 libopenssl1_0_0-steam-32bit-1.0.2p-3.49.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-3.49.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenssl-1_0_0-devel-1.0.2p-3.49.1 libopenssl10-1.0.2p-3.49.1 libopenssl10-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-1.0.2p-3.49.1 libopenssl1_0_0-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-hmac-1.0.2p-3.49.1 libopenssl1_0_0-steam-1.0.2p-3.49.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-1.0.2p-3.49.1 openssl-1_0_0-cavs-1.0.2p-3.49.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-debugsource-1.0.2p-3.49.1 - openSUSE Leap 15.3 (noarch): openssl-1_0_0-doc-1.0.2p-3.49.1 - openSUSE Leap 15.3 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-3.49.1 libopenssl1_0_0-32bit-1.0.2p-3.49.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-hmac-32bit-1.0.2p-3.49.1 libopenssl1_0_0-steam-32bit-1.0.2p-3.49.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-3.49.1 References: https://www.suse.com/security/cve/CVE-2022-0778.html https://bugzilla.suse.com/1196877

1 0

openSUSE-SU-2022:0847-1: important: Security update for php7
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0847-1 Rating: important References: #1196252 Cross-References: CVE-2021-21708 CVSS scores: CVE-2021-21708 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-21708 (SUSE): 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2021-21708: Fixed a memory corruption issue when processing integers from an untrusted source (bsc#1196252). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-847=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-847=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): php7-firebird-7.4.6-3.35.1 php7-firebird-debuginfo-7.4.6-3.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.35.1 apache2-mod_php7-debuginfo-7.4.6-3.35.1 php7-7.4.6-3.35.1 php7-bcmath-7.4.6-3.35.1 php7-bcmath-debuginfo-7.4.6-3.35.1 php7-bz2-7.4.6-3.35.1 php7-bz2-debuginfo-7.4.6-3.35.1 php7-calendar-7.4.6-3.35.1 php7-calendar-debuginfo-7.4.6-3.35.1 php7-ctype-7.4.6-3.35.1 php7-ctype-debuginfo-7.4.6-3.35.1 php7-curl-7.4.6-3.35.1 php7-curl-debuginfo-7.4.6-3.35.1 php7-dba-7.4.6-3.35.1 php7-dba-debuginfo-7.4.6-3.35.1 php7-debuginfo-7.4.6-3.35.1 php7-debugsource-7.4.6-3.35.1 php7-devel-7.4.6-3.35.1 php7-dom-7.4.6-3.35.1 php7-dom-debuginfo-7.4.6-3.35.1 php7-embed-7.4.6-3.35.1 php7-embed-debuginfo-7.4.6-3.35.1 php7-enchant-7.4.6-3.35.1 php7-enchant-debuginfo-7.4.6-3.35.1 php7-exif-7.4.6-3.35.1 php7-exif-debuginfo-7.4.6-3.35.1 php7-fastcgi-7.4.6-3.35.1 php7-fastcgi-debuginfo-7.4.6-3.35.1 php7-fileinfo-7.4.6-3.35.1 php7-fileinfo-debuginfo-7.4.6-3.35.1 php7-firebird-7.4.6-3.35.1 php7-firebird-debuginfo-7.4.6-3.35.1 php7-fpm-7.4.6-3.35.1 php7-fpm-debuginfo-7.4.6-3.35.1 php7-ftp-7.4.6-3.35.1 php7-ftp-debuginfo-7.4.6-3.35.1 php7-gd-7.4.6-3.35.1 php7-gd-debuginfo-7.4.6-3.35.1 php7-gettext-7.4.6-3.35.1 php7-gettext-debuginfo-7.4.6-3.35.1 php7-gmp-7.4.6-3.35.1 php7-gmp-debuginfo-7.4.6-3.35.1 php7-iconv-7.4.6-3.35.1 php7-iconv-debuginfo-7.4.6-3.35.1 php7-intl-7.4.6-3.35.1 php7-intl-debuginfo-7.4.6-3.35.1 php7-json-7.4.6-3.35.1 php7-json-debuginfo-7.4.6-3.35.1 php7-ldap-7.4.6-3.35.1 php7-ldap-debuginfo-7.4.6-3.35.1 php7-mbstring-7.4.6-3.35.1 php7-mbstring-debuginfo-7.4.6-3.35.1 php7-mysql-7.4.6-3.35.1 php7-mysql-debuginfo-7.4.6-3.35.1 php7-odbc-7.4.6-3.35.1 php7-odbc-debuginfo-7.4.6-3.35.1 php7-opcache-7.4.6-3.35.1 php7-opcache-debuginfo-7.4.6-3.35.1 php7-openssl-7.4.6-3.35.1 php7-openssl-debuginfo-7.4.6-3.35.1 php7-pcntl-7.4.6-3.35.1 php7-pcntl-debuginfo-7.4.6-3.35.1 php7-pdo-7.4.6-3.35.1 php7-pdo-debuginfo-7.4.6-3.35.1 php7-pgsql-7.4.6-3.35.1 php7-pgsql-debuginfo-7.4.6-3.35.1 php7-phar-7.4.6-3.35.1 php7-phar-debuginfo-7.4.6-3.35.1 php7-posix-7.4.6-3.35.1 php7-posix-debuginfo-7.4.6-3.35.1 php7-readline-7.4.6-3.35.1 php7-readline-debuginfo-7.4.6-3.35.1 php7-shmop-7.4.6-3.35.1 php7-shmop-debuginfo-7.4.6-3.35.1 php7-snmp-7.4.6-3.35.1 php7-snmp-debuginfo-7.4.6-3.35.1 php7-soap-7.4.6-3.35.1 php7-soap-debuginfo-7.4.6-3.35.1 php7-sockets-7.4.6-3.35.1 php7-sockets-debuginfo-7.4.6-3.35.1 php7-sodium-7.4.6-3.35.1 php7-sodium-debuginfo-7.4.6-3.35.1 php7-sqlite-7.4.6-3.35.1 php7-sqlite-debuginfo-7.4.6-3.35.1 php7-sysvmsg-7.4.6-3.35.1 php7-sysvmsg-debuginfo-7.4.6-3.35.1 php7-sysvsem-7.4.6-3.35.1 php7-sysvsem-debuginfo-7.4.6-3.35.1 php7-sysvshm-7.4.6-3.35.1 php7-sysvshm-debuginfo-7.4.6-3.35.1 php7-test-7.4.6-3.35.1 php7-tidy-7.4.6-3.35.1 php7-tidy-debuginfo-7.4.6-3.35.1 php7-tokenizer-7.4.6-3.35.1 php7-tokenizer-debuginfo-7.4.6-3.35.1 php7-xmlreader-7.4.6-3.35.1 php7-xmlreader-debuginfo-7.4.6-3.35.1 php7-xmlrpc-7.4.6-3.35.1 php7-xmlrpc-debuginfo-7.4.6-3.35.1 php7-xmlwriter-7.4.6-3.35.1 php7-xmlwriter-debuginfo-7.4.6-3.35.1 php7-xsl-7.4.6-3.35.1 php7-xsl-debuginfo-7.4.6-3.35.1 php7-zip-7.4.6-3.35.1 php7-zip-debuginfo-7.4.6-3.35.1 php7-zlib-7.4.6-3.35.1 php7-zlib-debuginfo-7.4.6-3.35.1 References: https://www.suse.com/security/cve/CVE-2021-21708.html https://bugzilla.suse.com/1196252

1 0

openSUSE-RU-2022:0848-1: moderate: Recommended update for kiwi-templates-JeOS
by maintenance＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Recommended Update: Recommended update for kiwi-templates-JeOS ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0848-1 Rating: moderate References: #1194484 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kiwi-templates-JeOS fixes the following issues: - Fix /etc/machine-id setup by appending 'rw' to the default boot options (bsc#1194484) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-848=1 Package List: - openSUSE Leap 15.3 (noarch): kiwi-templates-JeOS-15.3-150300.4.7.1 References: https://bugzilla.suse.com/1194484

1 0

openSUSE-RU-2022:0849-1: important: Recommended update for python-kiwi
by maintenance＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0849-1 Rating: important References: #1196644 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kiwi fixes the following issues: - Don't exit the script on deprecated function use (bsc#1196644) * The "exit 0" stops processing of the calling script with a success exit code, which leads to incomplete and broken images. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-849=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.16-3.47.1 dracut-kiwi-live-9.24.16-3.47.1 dracut-kiwi-oem-dump-9.24.16-3.47.1 dracut-kiwi-oem-repart-9.24.16-3.47.1 dracut-kiwi-overlay-9.24.16-3.47.1 kiwi-man-pages-9.24.16-3.47.1 kiwi-systemdeps-9.24.16-3.47.1 kiwi-systemdeps-bootloaders-9.24.16-3.47.1 kiwi-systemdeps-containers-9.24.16-3.47.1 kiwi-systemdeps-core-9.24.16-3.47.1 kiwi-systemdeps-disk-images-9.24.16-3.47.1 kiwi-systemdeps-filesystems-9.24.16-3.47.1 kiwi-systemdeps-image-validation-9.24.16-3.47.1 kiwi-systemdeps-iso-media-9.24.16-3.47.1 kiwi-tools-9.24.16-3.47.1 kiwi-tools-debuginfo-9.24.16-3.47.1 python-kiwi-debugsource-9.24.16-3.47.1 python3-kiwi-9.24.16-3.47.1 - openSUSE Leap 15.3 (x86_64): kiwi-pxeboot-9.24.16-3.47.1 References: https://bugzilla.suse.com/1196644

1 0

openSUSE-SU-2022:0843-1: moderate: Security update for rust, rust1.58, rust1.59
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for rust, rust1.58, rust1.59 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0843-1 Rating: moderate References: #1194767 Cross-References: CVE-2022-21658 CVSS scores: CVE-2022-21658 (NVD) : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-21658 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rust, rust1.58, rust1.59 fixes the following issues: This update provides both rust1.58 and rust1.59. Changes in rust1.58: - Add recommends for GCC for installs to be able to link. - Add suggests for lld/clang which are faster than gcc for linking to allow users choice on what they use. - CVE-2022-21658: Resolve race condition in std::fs::remove_dir_all (bsc#1194767) Version 1.58.0 (2022-01-13) ========================== Language -------- - [Format strings can now capture arguments simply by writing `{ident}` in the string.][90473] This works in all macros accepting format strings. Support for this in `panic!` (`panic!("{ident}")`) requires the 2021 edition; panic invocations in previous editions that appear to be trying to use this will result in a warning lint about not having the intended effect. - [`*const T` pointers can now be dereferenced in const contexts.][89551] - [The rules for when a generic struct implements `Unsize` have been relaxed.][90417] Compiler -------- - [Add LLVM CFI support to the Rust compiler][89652] - [Stabilize -Z strip as -C strip][90058]. Note that while release builds already don't add debug symbols for the code you compile, the compiled standard library that ships with Rust includes debug symbols, so you may want to use the `strip` option to remove these symbols to produce smaller release binaries. Note that this release only includes support in rustc, not directly in cargo. - [Add support for LLVM coverage mapping format versions 5 and 6][91207] - [Emit LLVM optimization remarks when enabled with `-Cremark`][90833] - [Update the minimum external LLVM to 12][90175] - [Add `x86_64-unknown-none` at Tier 3*][89062] - [Build musl dist artifacts with debuginfo enabled][90733]. When building release binaries using musl, you may want to use the newly stabilized strip option to remove these debug symbols, reducing the size of your binaries. - [Don't abort compilation after giving a lint error][87337] - [Error messages point at the source of trait bound obligations in more places][89580] \* Refer to Rust's [platform support page][platform-support-doc] for more information on Rust's tiered platform support. Libraries --------- - [All remaining functions in the standard library have `#[must_use]` annotations where appropriate][89692], producing a warning when ignoring their return value. This helps catch mistakes such as expecting a function to mutate a value in place rather than return a new value. - [Paths are automatically canonicalized on Windows for operations that support it][89174] - [Re-enable debug checks for `copy` and `copy_nonoverlapping`][90041] - [Implement `RefUnwindSafe` for `Rc<T>`][87467] - [Make RSplit<T, P>: Clone not require T: Clone][90117] - [Implement `Termination` for `Result<Infallible, E>`][88601]. This allows writing `fn main() -> Result<Infallible, ErrorType>`, for a program whose successful exits never involve returning from `main` (for instance, a program that calls `exit`, or that uses `exec` to run another program). Stabilized APIs --------------- - [`Metadata::is_symlink`] - [`Path::is_symlink`] - [`{integer}::saturating_div`] - [`Option::unwrap_unchecked`] - [`Result::unwrap_unchecked`] - [`Result::unwrap_err_unchecked`] - [`NonZero{unsigned}::is_power_of_two`] - [`File::options`] These APIs are now usable in const contexts: - [`Duration::new`] - [`Duration::checked_add`] - [`Duration::saturating_add`] - [`Duration::checked_sub`] - [`Duration::saturating_sub`] - [`Duration::checked_mul`] - [`Duration::saturating_mul`] - [`Duration::checked_div`] - [`MaybeUninit::as_ptr`] - [`MaybeUninit::as_mut_ptr`] - [`MaybeUninit::assume_init`] - [`MaybeUninit::assume_init_ref`] Cargo ----- - [Add --message-format for install command][cargo/10107] - [Warn when alias shadows external subcommand][cargo/10082] Rustdoc ------- - [Show all Deref implementations recursively in rustdoc][90183] - [Use computed visibility in rustdoc][88447] Compatibility Notes ------------------- - [Try all stable method candidates first before trying unstable ones][90329]. This change ensures that adding new nightly-only methods to the Rust standard library will not break code invoking methods of the same name from traits outside the standard library. - Windows: [`std::process::Command` will no longer search the current directory for executables.][87704] - [All proc-macro backward-compatibility lints are now deny-by-default.][88041] - [proc_macro: Append .0 to unsuffixed float if it would otherwise become int token][90297] - [Refactor weak symbols in std::sys::unix][90846]. This optimizes accesses to glibc functions, by avoiding the use of dlopen. This does not increase the [minimum expected version of glibc](https://doc.rust-lang.org/nightly/rustc/platform-support.html). However, software distributions that use symbol versions to detect library dependencies, and which take weak symbols into account in that analysis, may detect rust binaries as requiring newer versions of glibc. - [rustdoc now rejects some unexpected semicolons in doctests][91026] Version 1.59.0 (2022-02-24) ========================== Language -------- - [Stabilize default arguments for const generics][90207] - [Stabilize destructuring assignment][90521] - [Relax private in public lint on generic bounds and where clauses of trait impls][90586] - [Stabilize asm! and global_asm! for x86, x86_64, ARM, Aarch64, and RISC-V][91728] Compiler -------- - [Stabilize new symbol mangling format, leaving it opt-in (-Csymbol-mangling-version=v0)][90128] - [Emit LLVM optimization remarks when enabled with `-Cremark`][90833] - [Fix sparc64 ABI for aggregates with floating point members][91003] - [Warn when a `#[test]`-like built-in attribute macro is present multiple times.][91172] - [Add support for riscv64gc-unknown-freebsd][91284] - [Stabilize `-Z emit-future-incompat` as `--json future-incompat`][91535] Libraries --------- - [Remove unnecessary bounds for some Hash{Map,Set} methods][91593] Stabilized APIs --------------- - [`std::thread::available_parallelism`][available_parallelism] - [`Result::copied`][result-copied] - [`Result::cloned`][result-cloned] - [`arch::asm!`][asm] - [`arch::global_asm!`][global_asm] - [`ops::ControlFlow::is_break`][is_break] - [`ops::ControlFlow::is_continue`][is_continue] - [`TryFrom<char> for u8`][try_from_char_u8] - [`char::TryFromCharError`][try_from_char_err] implementing `Clone`, `Debug`, `Display`, `PartialEq`, `Copy`, `Eq`, `Error` - [`iter::zip`][zip] - [`NonZeroU8::is_power_of_two`][is_power_of_two8] - [`NonZeroU16::is_power_of_two`][is_power_of_two16] - [`NonZeroU32::is_power_of_two`][is_power_of_two32] - [`NonZeroU64::is_power_of_two`][is_power_of_two64] - [`NonZeroU128::is_power_of_two`][is_power_of_two128] - [`DoubleEndedIterator for ToLowercase`][lowercase] - [`DoubleEndedIterator for ToUppercase`][uppercase] - [`TryFrom<&mut [T]> for [T; N]`][tryfrom_ref_arr] - [`UnwindSafe for Once`][unwindsafe_once] - [`RefUnwindSafe for Once`][refunwindsafe_once] - [armv8 neon intrinsics for aarch64][stdarch/1266] Const-stable: - [`mem::MaybeUninit::as_ptr`][muninit_ptr] - [`mem::MaybeUninit::assume_init`][muninit_init] - [`mem::MaybeUninit::assume_init_ref`][muninit_init_ref] - [`ffi::CStr::from_bytes_with_nul_unchecked`][cstr_from_bytes] Cargo ----- - [Stabilize the `strip` profile option][cargo/10088] - [Stabilize future-incompat-report][cargo/10165] - [Support abbreviating `--release` as `-r`][cargo/10133] - [Support `term.quiet` configuration][cargo/10152] - [Remove `--host` from cargo {publish,search,login}][cargo/10145] Compatibility Notes ------------------- - [Refactor weak symbols in std::sys::unix][90846] This may add new, versioned, symbols when building with a newer glibc, as the standard library uses weak linkage rather than dynamically attempting to load certain symbols at runtime. - [Deprecate crate_type and crate_name nested inside `#![cfg_attr]`][83744] This adds a future compatibility lint to supporting the use of cfg_attr wrapping either crate_type or crate_name specification within Rust files; it is recommended that users migrate to setting the equivalent command line flags. - [Remove effect of `#[no_link]` attribute on name resolution][92034] This may expose new names, leading to conflicts with preexisting names in a given namespace and a compilation failure. - [Cargo will document libraries before binaries.][cargo/10172] - [Respect doc=false in dependencies, not just the root crate][cargo/10201] - [Weaken guarantee around advancing underlying iterators in zip][83791] - [Make split_inclusive() on an empty slice yield an empty output][89825] - [Update std::env::temp_dir to use GetTempPath2 on Windows when available.][89999] Changes in rust wrapper package: - Update to version 1.59.0 - for details see the rust1.59 package - Update package description to help users choose what tooling to install. - Provide rust+cargo by cargo: all cargo<n> package provide this symbol too. Having the meta package provide it allows OBS to have a generic prefernece on the meta package for all packages 'just' requiring rust+cargo. - Update to version 1.58.0 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-843=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-843=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cargo-1.59.0-150300.21.20.1 rust-1.59.0-150300.21.20.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cargo-1.59.0-150300.21.20.1 cargo1.58-1.58.0-150300.7.3.1 cargo1.58-debuginfo-1.58.0-150300.7.3.1 cargo1.59-1.59.0-150300.7.4.2 cargo1.59-debuginfo-1.59.0-150300.7.4.2 rust-1.59.0-150300.21.20.1 rust1.58-1.58.0-150300.7.3.1 rust1.58-debuginfo-1.58.0-150300.7.3.1 rust1.59-1.59.0-150300.7.4.2 rust1.59-debuginfo-1.59.0-150300.7.4.2 References: https://www.suse.com/security/cve/CVE-2022-21658.html https://bugzilla.suse.com/1194767

1 0

openSUSE-SU-2022:0841-1: important: Security update for libqt5-qtbase
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0841-1 Rating: important References: #1195386 #1196501 Cross-References: CVE-2022-23853 CVE-2022-25255 CVSS scores: CVE-2022-23853 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-23853 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-25255 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25255 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libqt5-qtbase fixes the following issues: - CVE-2022-23853, CVE-2022-25255: Avoid unintentionally using binaries from CWD (bsc#1195386, bsc#1196501). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-841=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libQt5Bootstrap-devel-static-5.12.7-4.17.1 libQt5Concurrent-devel-5.12.7-4.17.1 libQt5Concurrent5-5.12.7-4.17.1 libQt5Concurrent5-debuginfo-5.12.7-4.17.1 libQt5Core-devel-5.12.7-4.17.1 libQt5Core5-5.12.7-4.17.1 libQt5Core5-debuginfo-5.12.7-4.17.1 libQt5DBus-devel-5.12.7-4.17.1 libQt5DBus-devel-debuginfo-5.12.7-4.17.1 libQt5DBus5-5.12.7-4.17.1 libQt5DBus5-debuginfo-5.12.7-4.17.1 libQt5Gui-devel-5.12.7-4.17.1 libQt5Gui5-5.12.7-4.17.1 libQt5Gui5-debuginfo-5.12.7-4.17.1 libQt5KmsSupport-devel-static-5.12.7-4.17.1 libQt5Network-devel-5.12.7-4.17.1 libQt5Network5-5.12.7-4.17.1 libQt5Network5-debuginfo-5.12.7-4.17.1 libQt5OpenGL-devel-5.12.7-4.17.1 libQt5OpenGL5-5.12.7-4.17.1 libQt5OpenGL5-debuginfo-5.12.7-4.17.1 libQt5OpenGLExtensions-devel-static-5.12.7-4.17.1 libQt5PlatformHeaders-devel-5.12.7-4.17.1 libQt5PlatformSupport-devel-static-5.12.7-4.17.1 libQt5PrintSupport-devel-5.12.7-4.17.1 libQt5PrintSupport5-5.12.7-4.17.1 libQt5PrintSupport5-debuginfo-5.12.7-4.17.1 libQt5Sql-devel-5.12.7-4.17.1 libQt5Sql5-5.12.7-4.17.1 libQt5Sql5-debuginfo-5.12.7-4.17.1 libQt5Sql5-mysql-5.12.7-4.17.1 libQt5Sql5-mysql-debuginfo-5.12.7-4.17.1 libQt5Sql5-postgresql-5.12.7-4.17.1 libQt5Sql5-postgresql-debuginfo-5.12.7-4.17.1 libQt5Sql5-sqlite-5.12.7-4.17.1 libQt5Sql5-sqlite-debuginfo-5.12.7-4.17.1 libQt5Sql5-unixODBC-5.12.7-4.17.1 libQt5Sql5-unixODBC-debuginfo-5.12.7-4.17.1 libQt5Test-devel-5.12.7-4.17.1 libQt5Test5-5.12.7-4.17.1 libQt5Test5-debuginfo-5.12.7-4.17.1 libQt5Widgets-devel-5.12.7-4.17.1 libQt5Widgets5-5.12.7-4.17.1 libQt5Widgets5-debuginfo-5.12.7-4.17.1 libQt5Xml-devel-5.12.7-4.17.1 libQt5Xml5-5.12.7-4.17.1 libQt5Xml5-debuginfo-5.12.7-4.17.1 libqt5-qtbase-common-devel-5.12.7-4.17.1 libqt5-qtbase-common-devel-debuginfo-5.12.7-4.17.1 libqt5-qtbase-debugsource-5.12.7-4.17.1 libqt5-qtbase-devel-5.12.7-4.17.1 libqt5-qtbase-examples-5.12.7-4.17.1 libqt5-qtbase-examples-debuginfo-5.12.7-4.17.1 libqt5-qtbase-platformtheme-gtk3-5.12.7-4.17.1 libqt5-qtbase-platformtheme-gtk3-debuginfo-5.12.7-4.17.1 libqt5-qtbase-platformtheme-xdgdesktopportal-5.12.7-4.17.1 libqt5-qtbase-platformtheme-xdgdesktopportal-debuginfo-5.12.7-4.17.1 - openSUSE Leap 15.3 (x86_64): libQt5Bootstrap-devel-static-32bit-5.12.7-4.17.1 libQt5Concurrent-devel-32bit-5.12.7-4.17.1 libQt5Concurrent5-32bit-5.12.7-4.17.1 libQt5Concurrent5-32bit-debuginfo-5.12.7-4.17.1 libQt5Core-devel-32bit-5.12.7-4.17.1 libQt5Core5-32bit-5.12.7-4.17.1 libQt5Core5-32bit-debuginfo-5.12.7-4.17.1 libQt5DBus-devel-32bit-5.12.7-4.17.1 libQt5DBus-devel-32bit-debuginfo-5.12.7-4.17.1 libQt5DBus5-32bit-5.12.7-4.17.1 libQt5DBus5-32bit-debuginfo-5.12.7-4.17.1 libQt5Gui-devel-32bit-5.12.7-4.17.1 libQt5Gui5-32bit-5.12.7-4.17.1 libQt5Gui5-32bit-debuginfo-5.12.7-4.17.1 libQt5Network-devel-32bit-5.12.7-4.17.1 libQt5Network5-32bit-5.12.7-4.17.1 libQt5Network5-32bit-debuginfo-5.12.7-4.17.1 libQt5OpenGL-devel-32bit-5.12.7-4.17.1 libQt5OpenGL5-32bit-5.12.7-4.17.1 libQt5OpenGL5-32bit-debuginfo-5.12.7-4.17.1 libQt5OpenGLExtensions-devel-static-32bit-5.12.7-4.17.1 libQt5PlatformSupport-devel-static-32bit-5.12.7-4.17.1 libQt5PrintSupport-devel-32bit-5.12.7-4.17.1 libQt5PrintSupport5-32bit-5.12.7-4.17.1 libQt5PrintSupport5-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql-devel-32bit-5.12.7-4.17.1 libQt5Sql5-32bit-5.12.7-4.17.1 libQt5Sql5-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql5-mysql-32bit-5.12.7-4.17.1 libQt5Sql5-mysql-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql5-postgresql-32bit-5.12.7-4.17.1 libQt5Sql5-postgresql-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql5-sqlite-32bit-5.12.7-4.17.1 libQt5Sql5-sqlite-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql5-unixODBC-32bit-5.12.7-4.17.1 libQt5Sql5-unixODBC-32bit-debuginfo-5.12.7-4.17.1 libQt5Test-devel-32bit-5.12.7-4.17.1 libQt5Test5-32bit-5.12.7-4.17.1 libQt5Test5-32bit-debuginfo-5.12.7-4.17.1 libQt5Widgets-devel-32bit-5.12.7-4.17.1 libQt5Widgets5-32bit-5.12.7-4.17.1 libQt5Widgets5-32bit-debuginfo-5.12.7-4.17.1 libQt5Xml-devel-32bit-5.12.7-4.17.1 libQt5Xml5-32bit-5.12.7-4.17.1 libQt5Xml5-32bit-debuginfo-5.12.7-4.17.1 libqt5-qtbase-examples-32bit-5.12.7-4.17.1 libqt5-qtbase-examples-32bit-debuginfo-5.12.7-4.17.1 - openSUSE Leap 15.3 (noarch): libQt5Core-private-headers-devel-5.12.7-4.17.1 libQt5DBus-private-headers-devel-5.12.7-4.17.1 libQt5Gui-private-headers-devel-5.12.7-4.17.1 libQt5KmsSupport-private-headers-devel-5.12.7-4.17.1 libQt5Network-private-headers-devel-5.12.7-4.17.1 libQt5OpenGL-private-headers-devel-5.12.7-4.17.1 libQt5PlatformSupport-private-headers-devel-5.12.7-4.17.1 libQt5PrintSupport-private-headers-devel-5.12.7-4.17.1 libQt5Sql-private-headers-devel-5.12.7-4.17.1 libQt5Test-private-headers-devel-5.12.7-4.17.1 libQt5Widgets-private-headers-devel-5.12.7-4.17.1 libqt5-qtbase-private-headers-devel-5.12.7-4.17.1 References: https://www.suse.com/security/cve/CVE-2022-23853.html https://www.suse.com/security/cve/CVE-2022-25255.html https://bugzilla.suse.com/1195386 https://bugzilla.suse.com/1196501

1 0

openSUSE-SU-2022:0845-1: moderate: Security update for chrony
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0845-1 Rating: moderate References: #1099272 #1115529 #1128846 #1162964 #1172113 #1173277 #1174075 #1174911 #1180689 #1181826 #1187906 #1190926 #1194229 SLE-17334 Cross-References: CVE-2020-14367 CVSS scores: CVE-2020-14367 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVE-2020-14367 (SUSE): 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability, contains one feature and has 12 fixes is now available. Description: This update for chrony fixes the following issues: Chrony was updated to 4.1, bringing features and bugfixes. Update to 4.1 * Add support for NTS servers specified by IP address (matching Subject Alternative Name in server certificate) * Add source-specific configuration of trusted certificates * Allow multiple files and directories with trusted certificates * Allow multiple pairs of server keys and certificates * Add copy option to server/pool directive * Increase PPS lock limit to 40% of pulse interval * Perform source selection immediately after loading dump files * Reload dump files for addresses negotiated by NTS-KE server * Update seccomp filter and add less restrictive level * Restart ongoing name resolution on online command * Fix dump files to not include uncorrected offset * Fix initstepslew to accept time from own NTP clients * Reset NTP address and port when no longer negotiated by NTS-KE server - Ensure the correct pool packages are installed for openSUSE and SLE (bsc#1180689). - Fix pool package dependencies, so that SLE prefers chrony-pool-suse over chrony-pool-empty. (bsc#1194229) - Enable syscallfilter unconditionally [bsc#1181826]. Update to 4.0 - Enhancements - Add support for Network Time Security (NTS) authentication - Add support for AES-CMAC keys (AES128, AES256) with Nettle - Add authselectmode directive to control selection of unauthenticated sources - Add binddevice, bindacqdevice, bindcmddevice directives - Add confdir directive to better support fragmented configuration - Add sourcedir directive and "reload sources" command to support dynamic NTP sources specified in files - Add clockprecision directive - Add dscp directive to set Differentiated Services Code Point (DSCP) - Add -L option to limit log messages by severity - Add -p option to print whole configuration with included files - Add -U option to allow start under non-root user - Allow maxsamples to be set to 1 for faster update with -q/-Q option - Avoid replacing NTP sources with sources that have unreachable address - Improve pools to repeat name resolution to get "maxsources" sources - Improve source selection with trusted sources - Improve NTP loop test to prevent synchronisation to itself - Repeat iburst when NTP source is switched from offline state to online - Update clock synchronisation status and leap status more frequently - Update seccomp filter - Add "add pool" command - Add "reset sources" command to drop all measurements - Add authdata command to print details about NTP authentication - Add selectdata command to print details about source selection - Add -N option and sourcename command to print original names of sources - Add -a option to some commands to print also unresolved sources - Add -k, -p, -r options to clients command to select, limit, reset data - Bug fixes - Don��t set interface for NTP responses to allow asymmetric routing - Handle RTCs that don��t support interrupts - Respond to command requests with correct address on multihomed hosts - Removed features - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320) - Drop support for long (non-standard) MACs in NTPv4 packets (chrony 2.x clients using non-MD5/SHA1 keys need to use option "version 3") - Drop support for line editing with GNU Readline - By default we don't write log files but log to journald, so only recommend logrotate. - Adjust and rename the sysconfig file, so that it matches the expectations of chronyd.service (bsc#1173277). Update to 3.5.1: * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911) - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075) - Use iburst in the default pool statements to speed up initial synchronisation (bsc#1172113). Update to 3.5: + Add support for more accurate reading of PHC on Linux 5.0 + Add support for hardware timestamping on interfaces with read-only timestamping configuration + Add support for memory locking and real-time priority on FreeBSD, NetBSD, Solaris + Update seccomp filter to work on more architectures + Validate refclock driver options + Fix bindaddress directive on FreeBSD + Fix transposition of hardware RX timestamp on Linux 4.13 and later + Fix building on non-glibc systems - Fix location of helper script in chrony-dnssrv@.service (bsc#1128846). - Read runtime servers from /var/run/netconfig/chrony.servers to fix bsc#1099272. - Move chrony-helper to /usr/lib/chrony/helper, because there should be no executables in /usr/share. Update to version 3.4 * Enhancements + Add filter option to server/pool/peer directive + Add minsamples and maxsamples options to hwtimestamp directive + Add support for faster frequency adjustments in Linux 4.19 + Change default pidfile to /var/run/chrony/chronyd.pid to allow chronyd without root privileges to remove it on exit + Disable sub-second polling intervals for distant NTP sources + Extend range of supported sub-second polling intervals + Get/set IPv4 destination/source address of NTP packets on FreeBSD + Make burst options and command useful with short polling intervals + Modify auto_offline option to activate when sending request failed + Respond from interface that received NTP request if possible + Add onoffline command to switch between online and offline state according to current system network configuration + Improve example NetworkManager dispatcher script * Bug fixes + Avoid waiting in Linux getrandom system call + Fix PPS support on FreeBSD and NetBSD Update to version 3.3 * Enhancements: + Add burst option to server/pool directive + Add stratum and tai options to refclock directive + Add support for Nettle crypto library + Add workaround for missing kernel receive timestamps on Linux + Wait for late hardware transmit timestamps + Improve source selection with unreachable sources + Improve protection against replay attacks on symmetric mode + Allow PHC refclock to use socket in /var/run/chrony + Add shutdown command to stop chronyd + Simplify format of response to manual list command + Improve handling of unknown responses in chronyc * Bug fixes: + Respond to NTPv1 client requests with zero mode + Fix -x option to not require CAP_SYS_TIME under non-root user + Fix acquisitionport directive to work with privilege separation + Fix handling of socket errors on Linux to avoid high CPU usage + Fix chronyc to not get stuck in infinite loop after clock step Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-845=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): augeas-1.10.1-3.9.1 augeas-debuginfo-1.10.1-3.9.1 augeas-debugsource-1.10.1-3.9.1 augeas-devel-1.10.1-3.9.1 augeas-lense-tests-1.10.1-3.9.1 augeas-lenses-1.10.1-3.9.1 chrony-4.1-150300.16.3.1 chrony-debuginfo-4.1-150300.16.3.1 chrony-debugsource-4.1-150300.16.3.1 libaugeas0-1.10.1-3.9.1 libaugeas0-debuginfo-1.10.1-3.9.1 - openSUSE Leap 15.3 (x86_64): augeas-devel-32bit-1.10.1-3.9.1 libaugeas0-32bit-1.10.1-3.9.1 libaugeas0-32bit-debuginfo-1.10.1-3.9.1 - openSUSE Leap 15.3 (noarch): chrony-pool-empty-4.1-150300.16.3.1 chrony-pool-openSUSE-4.1-150300.16.3.1 chrony-pool-suse-4.1-150300.16.3.1 References: https://www.suse.com/security/cve/CVE-2020-14367.html https://bugzilla.suse.com/1099272 https://bugzilla.suse.com/1115529 https://bugzilla.suse.com/1128846 https://bugzilla.suse.com/1162964 https://bugzilla.suse.com/1172113 https://bugzilla.suse.com/1173277 https://bugzilla.suse.com/1174075 https://bugzilla.suse.com/1174911 https://bugzilla.suse.com/1180689 https://bugzilla.suse.com/1181826 https://bugzilla.suse.com/1187906 https://bugzilla.suse.com/1190926 https://bugzilla.suse.com/1194229

1 0

openSUSE-SU-2022:0844-1: important: Security update for expat
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0844-1 Rating: important References: #1196025 #1196784 Cross-References: CVE-2022-25236 CVSS scores: CVE-2022-25236 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-25236 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-844=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): expat-2.2.5-3.19.1 expat-debuginfo-2.2.5-3.19.1 expat-debugsource-2.2.5-3.19.1 libexpat-devel-2.2.5-3.19.1 libexpat1-2.2.5-3.19.1 libexpat1-debuginfo-2.2.5-3.19.1 - openSUSE Leap 15.3 (x86_64): expat-32bit-debuginfo-2.2.5-3.19.1 libexpat-devel-32bit-2.2.5-3.19.1 libexpat1-32bit-2.2.5-3.19.1 libexpat1-32bit-debuginfo-2.2.5-3.19.1 References: https://www.suse.com/security/cve/CVE-2022-25236.html https://bugzilla.suse.com/1196025 https://bugzilla.suse.com/1196784

1 0

openSUSE-RU-2022:0846-1: moderate: Recommended update for log4j
by maintenance＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Recommended Update: Recommended update for log4j ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0846-1 Rating: moderate References: SLE-23508 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update ships log4j 2.17.1 to the SUSE Linux Enterprise Basesystem module. (jsc#SLE-23508) - Removed alias log4j:log4j from log4j-1.2-api, since it is not a drop-in replacement Update to 2.17.1. Fixed bugs: - JdbcAppender now uses JndiManager to access JNDI resources. JNDI is only enabled when system property log4j2.enableJndiJdbc is set to true. - Remove unused method. - ExtendedLoggerWrapper.logMessage no longer double-logs when location is requested. - log4j-to-slf4j no longer re-interpolates formatted message contents. - Correct SpringLookup package name in Interpolator. - log4j-to-slf4j takes the provided MessageFactory into account. - Fix MapLookup to lookup MapMessage before DefaultMap. - Buffered I/O checked had inverted logic in RollingFileAppenderBuidler. - Fix NPE when input is null in StrSubstitutor.replace(String, Properties). - Lookups with no prefix only read values from the configuration properties as expected. - Reduce ignored package scope of KafkaAppender. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-846=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-846=1 Package List: - openSUSE Leap 15.4 (noarch): jackson-annotations-2.10.2-3.2.1 jackson-annotations-javadoc-2.10.2-3.2.1 jackson-core-2.10.2-3.2.1 jackson-core-javadoc-2.10.2-3.2.1 jackson-databind-2.10.5.1-3.5.1 jackson-databind-javadoc-2.10.5.1-3.5.1 log4j-2.17.1-4.20.1 log4j-javadoc-2.17.1-4.20.1 log4j-jcl-2.17.1-4.20.1 log4j-slf4j-2.17.1-4.20.1 - openSUSE Leap 15.3 (noarch): jackson-annotations-2.10.2-3.2.1 jackson-annotations-javadoc-2.10.2-3.2.1 jackson-core-2.10.2-3.2.1 jackson-core-javadoc-2.10.2-3.2.1 jackson-databind-2.10.5.1-3.5.1 jackson-databind-javadoc-2.10.5.1-3.5.1 log4j-2.17.1-4.20.1 log4j-javadoc-2.17.1-4.20.1 log4j-jcl-2.17.1-4.20.1 log4j-slf4j-2.17.1-4.20.1 References:

1 0

openSUSE-RU-2022:0836-1: moderate: Recommended update for gdb
by maintenance＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Recommended Update: Recommended update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0836-1 Rating: moderate References: SLE-22287 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for gdb fixes the following issues: - Support for new IBM Z Hardware - GDB Part (jsc#SLE-22287) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-836=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-836=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gdb-11.1-8.30.1 gdb-debuginfo-11.1-8.30.1 gdb-debugsource-11.1-8.30.1 gdb-testresults-11.1-8.30.1 gdbserver-11.1-8.30.1 gdbserver-debuginfo-11.1-8.30.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gdb-11.1-8.30.1 gdb-debuginfo-11.1-8.30.1 gdb-debugsource-11.1-8.30.1 gdb-testresults-11.1-8.30.1 gdbserver-11.1-8.30.1 gdbserver-debuginfo-11.1-8.30.1 References:

1 0

openSUSE-RU-2022:0833-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0833-1 Rating: moderate References: #1195656 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-iscsi fixes the following issue: - Update to latest upstream, including test cleanup, minor bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-833=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-833=1 Package List: - openSUSE Leap 15.4 (aarch64): iscsiuio-0.7.8.6-150300.32.15.1 iscsiuio-debuginfo-0.7.8.6-150300.32.15.1 libopeniscsiusr0_2_0-2.1.6-150300.32.15.1 libopeniscsiusr0_2_0-debuginfo-2.1.6-150300.32.15.1 open-iscsi-2.1.6-150300.32.15.1 open-iscsi-debuginfo-2.1.6-150300.32.15.1 open-iscsi-debugsource-2.1.6-150300.32.15.1 open-iscsi-devel-2.1.6-150300.32.15.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): iscsiuio-0.7.8.6-150300.32.15.1 iscsiuio-debuginfo-0.7.8.6-150300.32.15.1 libopeniscsiusr0_2_0-2.1.6-150300.32.15.1 libopeniscsiusr0_2_0-debuginfo-2.1.6-150300.32.15.1 open-iscsi-2.1.6-150300.32.15.1 open-iscsi-debuginfo-2.1.6-150300.32.15.1 open-iscsi-debugsource-2.1.6-150300.32.15.1 open-iscsi-devel-2.1.6-150300.32.15.1 References: https://bugzilla.suse.com/1195656

1 0

openSUSE-SU-2022:0821-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0821-1 Rating: important References: #1196900 Cross-References: CVE-2022-26381 CVE-2022-26383 CVE-2022-26384 CVE-2022-26386 CVE-2022-26387 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.7.0 ESR (bsc#1196900): - CVE-2022-26383: Browser window spoof using fullscreen mode - CVE-2022-26384: iframe allow-scripts sandbox bypass - CVE-2022-26387: Time-of-check time-of-use bug when verifying add-on signatures - CVE-2022-26381: Use-after-free in text reflows - CVE-2022-26386: Temporary files downloaded to /tmp and accessible by other local users Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-821=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-821=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-branding-upstream-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-branding-upstream-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 References: https://www.suse.com/security/cve/CVE-2022-26381.html https://www.suse.com/security/cve/CVE-2022-26383.html https://www.suse.com/security/cve/CVE-2022-26384.html https://www.suse.com/security/cve/CVE-2022-26386.html https://www.suse.com/security/cve/CVE-2022-26387.html https://bugzilla.suse.com/1196900

1 0

openSUSE-SU-2022:0823-1: moderate: Security update for protobuf
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for protobuf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0823-1 Rating: moderate References: #1195258 Cross-References: CVE-2021-22570 CVSS scores: CVE-2021-22570 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-22570 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-823=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-823=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libprotobuf-lite15-3.5.0-5.5.1 libprotobuf-lite15-debuginfo-3.5.0-5.5.1 libprotobuf15-3.5.0-5.5.1 libprotobuf15-debuginfo-3.5.0-5.5.1 libprotoc15-3.5.0-5.5.1 libprotoc15-debuginfo-3.5.0-5.5.1 - openSUSE Leap 15.4 (x86_64): libprotobuf-lite15-32bit-3.5.0-5.5.1 libprotobuf-lite15-32bit-debuginfo-3.5.0-5.5.1 libprotobuf15-32bit-3.5.0-5.5.1 libprotobuf15-32bit-debuginfo-3.5.0-5.5.1 libprotoc15-32bit-3.5.0-5.5.1 libprotoc15-32bit-debuginfo-3.5.0-5.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libprotobuf-lite15-3.5.0-5.5.1 libprotobuf-lite15-debuginfo-3.5.0-5.5.1 libprotobuf15-3.5.0-5.5.1 libprotobuf15-debuginfo-3.5.0-5.5.1 libprotoc15-3.5.0-5.5.1 libprotoc15-debuginfo-3.5.0-5.5.1 - openSUSE Leap 15.3 (x86_64): libprotobuf-lite15-32bit-3.5.0-5.5.1 libprotobuf-lite15-32bit-debuginfo-3.5.0-5.5.1 libprotobuf15-32bit-3.5.0-5.5.1 libprotobuf15-32bit-debuginfo-3.5.0-5.5.1 libprotoc15-32bit-3.5.0-5.5.1 libprotoc15-32bit-debuginfo-3.5.0-5.5.1 References: https://www.suse.com/security/cve/CVE-2021-22570.html https://bugzilla.suse.com/1195258

1 0

openSUSE-SU-2022:0817-1: moderate: Security update for xstream
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for xstream ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0817-1 Rating: moderate References: #1195458 Cross-References: CVE-2021-43859 CVSS scores: CVE-2021-43859 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-43859 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xstream fixes the following issues: - CVE-2021-43859: Fixed a denial of service when unmarshalling highly recursive collections or maps (bsc#1195458). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-817=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-817=1 Package List: - openSUSE Leap 15.4 (noarch): xstream-1.4.19-3.18.2 xstream-benchmark-1.4.19-3.18.2 xstream-javadoc-1.4.19-3.18.2 xstream-parent-1.4.19-3.18.2 - openSUSE Leap 15.3 (noarch): xstream-1.4.19-3.18.2 xstream-benchmark-1.4.19-3.18.2 xstream-javadoc-1.4.19-3.18.2 xstream-parent-1.4.19-3.18.2 References: https://www.suse.com/security/cve/CVE-2021-43859.html https://bugzilla.suse.com/1195458

1 0

openSUSE-SU-2022:0816-1: moderate: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0816-1 Rating: moderate References: #1194925 #1194926 #1194927 #1194928 #1194929 #1194930 #1194931 #1194932 #1194933 #1194934 #1194935 #1194937 #1194939 #1194940 #1194941 Cross-References: CVE-2022-21248 CVE-2022-21277 CVE-2022-21282 CVE-2022-21283 CVE-2022-21291 CVE-2022-21293 CVE-2022-21294 CVE-2022-21296 CVE-2022-21299 CVE-2022-21305 CVE-2022-21340 CVE-2022-21341 CVE-2022-21360 CVE-2022-21365 CVE-2022-21366 CVSS scores: CVE-2022-21248 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21248 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21277 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21277 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21282 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21282 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21283 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21283 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21291 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21291 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21293 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21296 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21296 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21299 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21305 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21305 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21340 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21340 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. (bnc#1194926) - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. (bnc#1194930) - CVE-2022-21282: Fixed Insufficient URI checks in the XSLT TransformerImpl. (bnc#1194933) - CVE-2022-21283: Fixed unexpected exception thrown in regex Pattern. (bnc#1194937) - CVE-2022-21291: Fixed Incorrect marking of writeable fields. (bnc#1194925) - CVE-2022-21293: Fixed Incomplete checks of StringBuffer and StringBuilder during deserialization. (bnc#1194935) - CVE-2022-21294: Fixed Incorrect IdentityHashMap size checks during deserialization. (bnc#1194934) - CVE-2022-21296: Fixed Incorrect access checks in XMLEntityManager. (bnc#1194932) - CVE-2022-21299: Fixed Infinite loop related to incorrect handling of newlines in XMLEntityScanner. (bnc#1194931) - CVE-2022-21305: Fixed Array indexing issues in LIRGenerator. (bnc#1194939) - CVE-2022-21340: Fixed Excessive resource use when reading JAR manifest attributes. (bnc#1194940) - CVE-2022-21341: Fixed OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream. (bnc#1194941) - CVE-2022-21360: Fixed Excessive memory allocation in BMPImageReader. (bnc#1194929) - CVE-2022-21365: Fixed Integer overflow in BMPImageReader. (bnc#1194928) - CVE-2022-21366: Fixed Excessive memory allocation in TIFF*Decompressor. (bnc#1194927) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-816=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): java-11-openjdk-11.0.14.0-3.74.2 java-11-openjdk-accessibility-11.0.14.0-3.74.2 java-11-openjdk-accessibility-debuginfo-11.0.14.0-3.74.2 java-11-openjdk-debugsource-11.0.14.0-3.74.2 java-11-openjdk-demo-11.0.14.0-3.74.2 java-11-openjdk-devel-11.0.14.0-3.74.2 java-11-openjdk-headless-11.0.14.0-3.74.2 java-11-openjdk-jmods-11.0.14.0-3.74.2 java-11-openjdk-src-11.0.14.0-3.74.2 - openSUSE Leap 15.3 (noarch): java-11-openjdk-javadoc-11.0.14.0-3.74.2 References: https://www.suse.com/security/cve/CVE-2022-21248.html https://www.suse.com/security/cve/CVE-2022-21277.html https://www.suse.com/security/cve/CVE-2022-21282.html https://www.suse.com/security/cve/CVE-2022-21283.html https://www.suse.com/security/cve/CVE-2022-21291.html https://www.suse.com/security/cve/CVE-2022-21293.html https://www.suse.com/security/cve/CVE-2022-21294.html https://www.suse.com/security/cve/CVE-2022-21296.html https://www.suse.com/security/cve/CVE-2022-21299.html https://www.suse.com/security/cve/CVE-2022-21305.html https://www.suse.com/security/cve/CVE-2022-21340.html https://www.suse.com/security/cve/CVE-2022-21341.html https://www.suse.com/security/cve/CVE-2022-21360.html https://www.suse.com/security/cve/CVE-2022-21365.html https://www.suse.com/security/cve/CVE-2022-21366.html https://bugzilla.suse.com/1194925 https://bugzilla.suse.com/1194926 https://bugzilla.suse.com/1194927 https://bugzilla.suse.com/1194928 https://bugzilla.suse.com/1194929 https://bugzilla.suse.com/1194930 https://bugzilla.suse.com/1194931 https://bugzilla.suse.com/1194932 https://bugzilla.suse.com/1194933 https://bugzilla.suse.com/1194934 https://bugzilla.suse.com/1194935 https://bugzilla.suse.com/1194937 https://bugzilla.suse.com/1194939 https://bugzilla.suse.com/1194940 https://bugzilla.suse.com/1194941

1 0

openSUSE-SU-2022:0818-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0818-1 Rating: important References: #1195255 #1196137 Cross-References: CVE-2022-23181 CVSS scores: CVE-2022-23181 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23181 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for tomcat fixes the following issues: Security issues fixed: - CVE-2022-23181: Make calculation of session storage location more robust (bsc#1195255) - Remove log4j (bsc#1196137) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-818=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-818=1 Package List: - openSUSE Leap 15.4 (noarch): tomcat-9.0.36-19.1 tomcat-admin-webapps-9.0.36-19.1 tomcat-docs-webapp-9.0.36-19.1 tomcat-el-3_0-api-9.0.36-19.1 tomcat-embed-9.0.36-19.1 tomcat-javadoc-9.0.36-19.1 tomcat-jsp-2_3-api-9.0.36-19.1 tomcat-jsvc-9.0.36-19.1 tomcat-lib-9.0.36-19.1 tomcat-servlet-4_0-api-9.0.36-19.1 tomcat-webapps-9.0.36-19.1 - openSUSE Leap 15.3 (noarch): tomcat-9.0.36-19.1 tomcat-admin-webapps-9.0.36-19.1 tomcat-docs-webapp-9.0.36-19.1 tomcat-el-3_0-api-9.0.36-19.1 tomcat-embed-9.0.36-19.1 tomcat-javadoc-9.0.36-19.1 tomcat-jsp-2_3-api-9.0.36-19.1 tomcat-jsvc-9.0.36-19.1 tomcat-lib-9.0.36-19.1 tomcat-servlet-4_0-api-9.0.36-19.1 tomcat-webapps-9.0.36-19.1 References: https://www.suse.com/security/cve/CVE-2022-23181.html https://bugzilla.suse.com/1195255 https://bugzilla.suse.com/1196137

1 0

openSUSE-SU-2022:0815-1: moderate: Security update for flac
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for flac ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0815-1 Rating: moderate References: #1196660 Cross-References: CVE-2021-0561 CVSS scores: CVE-2021-0561 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0561 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for flac fixes the following issues: - CVE-2021-0561: Fixed out of bound write in append_to_verify_fifo_interleaved_ (bsc#1196660). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-815=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-815=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): flac-1.3.2-3.9.1 flac-debuginfo-1.3.2-3.9.1 flac-debugsource-1.3.2-3.9.1 flac-devel-1.3.2-3.9.1 libFLAC++6-1.3.2-3.9.1 libFLAC++6-debuginfo-1.3.2-3.9.1 libFLAC8-1.3.2-3.9.1 libFLAC8-debuginfo-1.3.2-3.9.1 - openSUSE Leap 15.4 (x86_64): flac-devel-32bit-1.3.2-3.9.1 libFLAC++6-32bit-1.3.2-3.9.1 libFLAC++6-32bit-debuginfo-1.3.2-3.9.1 libFLAC8-32bit-1.3.2-3.9.1 libFLAC8-32bit-debuginfo-1.3.2-3.9.1 - openSUSE Leap 15.4 (noarch): flac-doc-1.3.2-3.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): flac-1.3.2-3.9.1 flac-debuginfo-1.3.2-3.9.1 flac-debugsource-1.3.2-3.9.1 flac-devel-1.3.2-3.9.1 libFLAC++6-1.3.2-3.9.1 libFLAC++6-debuginfo-1.3.2-3.9.1 libFLAC8-1.3.2-3.9.1 libFLAC8-debuginfo-1.3.2-3.9.1 - openSUSE Leap 15.3 (x86_64): flac-devel-32bit-1.3.2-3.9.1 libFLAC++6-32bit-1.3.2-3.9.1 libFLAC++6-32bit-debuginfo-1.3.2-3.9.1 libFLAC8-32bit-1.3.2-3.9.1 libFLAC8-32bit-debuginfo-1.3.2-3.9.1 - openSUSE Leap 15.3 (noarch): flac-doc-1.3.2-3.9.1 References: https://www.suse.com/security/cve/CVE-2021-0561.html https://bugzilla.suse.com/1196660

1 0

openSUSE-RU-2022:0080-1: moderate: Recommended update for mirrorsorcerer
by maintenance＠opensuse.org 11 Mar '22

11 Mar '22

openSUSE Recommended Update: Recommended update for mirrorsorcerer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0080-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for mirrorsorcerer fixes the following issues: Update to version 0.1.0~9: * Fix oneshot mode to work correctly * Improve options for performance Update to version 0.1.0~8: * Update pool.json to include mirrorcache-jp Update to version 0.1.0~6: * Add pool.json * Add inotify watcher Update to version 0.1.0~4: * Improve journald output messages Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-80=1 Package List: - openSUSE Leap 15.3 (aarch64 x86_64): mirrorsorcerer-0.1.0~9-lp153.2.1 mirrorsorcerer-debuginfo-0.1.0~9-lp153.2.1 mirrorsorcerer-debugsource-0.1.0~9-lp153.2.1 References:

1 0

openSUSE-RU-2022:0808-1: moderate: Recommended update for procps
by maintenance＠opensuse.org 11 Mar '22

11 Mar '22

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0808-1 Rating: moderate References: #1195468 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for procps fixes the following issues: - Stop registering signal handler for SIGURG, to avoid `ps` failure if someone sends such signal. Without the signal handler, SIGURG will just be ignored. (bsc#1195468) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-808=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-808=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libprocps7-3.3.15-7.22.1 libprocps7-debuginfo-3.3.15-7.22.1 procps-3.3.15-7.22.1 procps-debuginfo-3.3.15-7.22.1 procps-debugsource-3.3.15-7.22.1 procps-devel-3.3.15-7.22.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libprocps7-3.3.15-7.22.1 libprocps7-debuginfo-3.3.15-7.22.1 procps-3.3.15-7.22.1 procps-debuginfo-3.3.15-7.22.1 procps-debugsource-3.3.15-7.22.1 procps-devel-3.3.15-7.22.1 References: https://bugzilla.suse.com/1195468

1 0

openSUSE-RU-2022:0806-1: important: Recommended update for powerpc-utils
by maintenance＠opensuse.org 11 Mar '22

11 Mar '22

openSUSE Recommended Update: Recommended update for powerpc-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0806-1 Rating: important References: #1196411 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for powerpc-utils fixes the following issues: - Fix lsslot showing "Unknown slot type" for recent PCIe slot types (bsc#1196411) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-806=1 Package List: - openSUSE Leap 15.3 (ppc64le): powerpc-utils-1.3.9-150300.9.20.1 powerpc-utils-debuginfo-1.3.9-150300.9.20.1 powerpc-utils-debugsource-1.3.9-150300.9.20.1 References: https://bugzilla.suse.com/1196411

1 0

openSUSE-SU-2022:0079-1: moderate: Security update for minidlna
by opensuse-security＠opensuse.org 11 Mar '22

11 Mar '22

openSUSE Security Update: Security update for minidlna ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0079-1 Rating: moderate References: #1181400 #1196814 Cross-References: CVE-2022-26505 CVSS scores: CVE-2022-26505 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for minidlna fixes the following issues: minidlna was updated to version 1.3.1 (boo#1196814) - Fixed a potential crash in SSDP request parsing. - Fixed a configure script failure on some platforms. - Protect against DNS rebinding attacks. (CVE-2022-26505) - Fix an socket leakage issue on some platforms. - Minor bug fixes. - add "su minidlna minidlna" to the logrotate config - Added hardening to systemd service(s) (boo#1181400). - Use sysusers macros to create minidlna user - Don't hardrequire logrotate, we don't write log files anymore Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-79=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): minidlna-1.3.1-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-26505.html https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1196814

1 0

openSUSE-SU-2022:0802-1: important: Security update for python-libxml2-python
by opensuse-security＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Security Update: Security update for python-libxml2-python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0802-1 Rating: important References: #1196490 Cross-References: CVE-2022-23308 CVSS scores: CVE-2022-23308 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-23308 (SUSE): 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-libxml2-python fixes the following issues: - CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-802=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-802=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-libxml2-python-debugsource-2.9.7-3.40.1 python2-libxml2-python-2.9.7-3.40.1 python2-libxml2-python-debuginfo-2.9.7-3.40.1 python3-libxml2-python-2.9.7-3.40.1 python3-libxml2-python-debuginfo-2.9.7-3.40.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-libxml2-python-debugsource-2.9.7-3.40.1 python2-libxml2-python-2.9.7-3.40.1 python2-libxml2-python-debuginfo-2.9.7-3.40.1 python3-libxml2-python-2.9.7-3.40.1 python3-libxml2-python-debuginfo-2.9.7-3.40.1 References: https://www.suse.com/security/cve/CVE-2022-23308.html https://bugzilla.suse.com/1196490

1 0

openSUSE-SU-2022:0803-1: important: Security update for python-lxml
by opensuse-security＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Security Update: Security update for python-lxml ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0803-1 Rating: important References: #1118088 #1179534 #1184177 #1193752 Cross-References: CVE-2018-19787 CVE-2020-27783 CVE-2021-28957 CVE-2021-43818 CVSS scores: CVE-2018-19787 (NVD) : 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2018-19787 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2020-27783 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-27783 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-28957 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-28957 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-43818 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2021-43818 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for python-lxml fixes the following issues: - CVE-2018-19787: Fixed XSS vulnerability via unescaped URL (bsc#1118088). - CVE-2021-28957: Fixed XSS vulnerability ia HTML5 attributes unescaped (bsc#1184177). - CVE-2021-43818: Fixed XSS vulnerability via script content in SVG images using data URIs (bnc#1193752). - CVE-2020-27783: Fixed mutation XSS with improper parser use (bnc#1179534). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-803=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-803=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-3.7.1 python-lxml-debugsource-4.7.1-3.7.1 python2-lxml-4.7.1-3.7.1 python2-lxml-debuginfo-4.7.1-3.7.1 python2-lxml-devel-4.7.1-3.7.1 python3-lxml-4.7.1-3.7.1 python3-lxml-debuginfo-4.7.1-3.7.1 python3-lxml-devel-4.7.1-3.7.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-3.7.1 python-lxml-debugsource-4.7.1-3.7.1 python2-lxml-4.7.1-3.7.1 python2-lxml-debuginfo-4.7.1-3.7.1 python2-lxml-devel-4.7.1-3.7.1 python3-lxml-4.7.1-3.7.1 python3-lxml-debuginfo-4.7.1-3.7.1 python3-lxml-devel-4.7.1-3.7.1 References: https://www.suse.com/security/cve/CVE-2018-19787.html https://www.suse.com/security/cve/CVE-2020-27783.html https://www.suse.com/security/cve/CVE-2021-28957.html https://www.suse.com/security/cve/CVE-2021-43818.html https://bugzilla.suse.com/1118088 https://bugzilla.suse.com/1179534 https://bugzilla.suse.com/1184177 https://bugzilla.suse.com/1193752

1 0

openSUSE-SU-2022:0804-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0804-1 Rating: important References: #1196809 Cross-References: CVE-2022-26485 CVE-2022-26486 CVSS scores: CVE-2022-26485 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26486 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 91.6.2 (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-804=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-804=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.2-8.59.1 MozillaThunderbird-debuginfo-91.6.2-8.59.1 MozillaThunderbird-debugsource-91.6.2-8.59.1 MozillaThunderbird-translations-common-91.6.2-8.59.1 MozillaThunderbird-translations-other-91.6.2-8.59.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.2-8.59.1 MozillaThunderbird-debuginfo-91.6.2-8.59.1 MozillaThunderbird-debugsource-91.6.2-8.59.1 MozillaThunderbird-translations-common-91.6.2-8.59.1 MozillaThunderbird-translations-other-91.6.2-8.59.1 References: https://www.suse.com/security/cve/CVE-2022-26485.html https://www.suse.com/security/cve/CVE-2022-26486.html https://bugzilla.suse.com/1196809

1 0

openSUSE-RU-2022:0799-1: moderate: Recommended update for sssd
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0799-1 Rating: moderate References: #1182058 #1195552 #1196166 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sssd fixes the following issues: - Remove caches only when performing a package downgrade. The sssd daemon takes care of upgrading the database format when necessary (bsc#1195552) - Fix 32-bit libraries package. Libraries were moved from sssd to sssd-common to fix bsc#1182058 and baselibs.conf was not updated accordingly; (bsc#1196166); Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-799=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-799=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): sssd-wbclient-1.16.1-150300.23.23.1 sssd-wbclient-debuginfo-1.16.1-150300.23.23.1 sssd-wbclient-devel-1.16.1-150300.23.23.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libipa_hbac-devel-1.16.1-150300.23.23.1 libipa_hbac0-1.16.1-150300.23.23.1 libipa_hbac0-debuginfo-1.16.1-150300.23.23.1 libnfsidmap-sss-1.16.1-150300.23.23.1 libnfsidmap-sss-debuginfo-1.16.1-150300.23.23.1 libsss_certmap-devel-1.16.1-150300.23.23.1 libsss_certmap0-1.16.1-150300.23.23.1 libsss_certmap0-debuginfo-1.16.1-150300.23.23.1 libsss_idmap-devel-1.16.1-150300.23.23.1 libsss_idmap0-1.16.1-150300.23.23.1 libsss_idmap0-debuginfo-1.16.1-150300.23.23.1 libsss_nss_idmap-devel-1.16.1-150300.23.23.1 libsss_nss_idmap0-1.16.1-150300.23.23.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.23.1 libsss_simpleifp-devel-1.16.1-150300.23.23.1 libsss_simpleifp0-1.16.1-150300.23.23.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.23.1 python3-ipa_hbac-1.16.1-150300.23.23.1 python3-ipa_hbac-debuginfo-1.16.1-150300.23.23.1 python3-sss-murmur-1.16.1-150300.23.23.1 python3-sss-murmur-debuginfo-1.16.1-150300.23.23.1 python3-sss_nss_idmap-1.16.1-150300.23.23.1 python3-sss_nss_idmap-debuginfo-1.16.1-150300.23.23.1 python3-sssd-config-1.16.1-150300.23.23.1 python3-sssd-config-debuginfo-1.16.1-150300.23.23.1 sssd-1.16.1-150300.23.23.1 sssd-ad-1.16.1-150300.23.23.1 sssd-ad-debuginfo-1.16.1-150300.23.23.1 sssd-common-1.16.1-150300.23.23.1 sssd-common-debuginfo-1.16.1-150300.23.23.1 sssd-dbus-1.16.1-150300.23.23.1 sssd-dbus-debuginfo-1.16.1-150300.23.23.1 sssd-debugsource-1.16.1-150300.23.23.1 sssd-ipa-1.16.1-150300.23.23.1 sssd-ipa-debuginfo-1.16.1-150300.23.23.1 sssd-krb5-1.16.1-150300.23.23.1 sssd-krb5-common-1.16.1-150300.23.23.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.23.1 sssd-krb5-debuginfo-1.16.1-150300.23.23.1 sssd-ldap-1.16.1-150300.23.23.1 sssd-ldap-debuginfo-1.16.1-150300.23.23.1 sssd-proxy-1.16.1-150300.23.23.1 sssd-proxy-debuginfo-1.16.1-150300.23.23.1 sssd-tools-1.16.1-150300.23.23.1 sssd-tools-debuginfo-1.16.1-150300.23.23.1 sssd-wbclient-1.16.1-150300.23.23.1 sssd-wbclient-debuginfo-1.16.1-150300.23.23.1 sssd-wbclient-devel-1.16.1-150300.23.23.1 sssd-winbind-idmap-1.16.1-150300.23.23.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.23.1 - openSUSE Leap 15.3 (x86_64): sssd-common-32bit-1.16.1-150300.23.23.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.23.1 References: https://bugzilla.suse.com/1182058 https://bugzilla.suse.com/1195552 https://bugzilla.suse.com/1196166

1 0

openSUSE-RU-2022:0787-1: moderate: Recommended update for openldap2
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0787-1 Rating: moderate References: PM-3288 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for openldap2 fixes the following issue: - restore CLDAP functionality in CLI tools (jsc#PM-3288) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-787=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-787=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libldap-2_4-2-2.4.46-9.61.1 libldap-2_4-2-debuginfo-2.4.46-9.61.1 openldap2-2.4.46-9.61.1 openldap2-back-meta-2.4.46-9.61.1 openldap2-back-meta-debuginfo-2.4.46-9.61.1 openldap2-back-perl-2.4.46-9.61.1 openldap2-back-perl-debuginfo-2.4.46-9.61.1 openldap2-back-sock-2.4.46-9.61.1 openldap2-back-sock-debuginfo-2.4.46-9.61.1 openldap2-back-sql-2.4.46-9.61.1 openldap2-back-sql-debuginfo-2.4.46-9.61.1 openldap2-client-2.4.46-9.61.1 openldap2-client-debuginfo-2.4.46-9.61.1 openldap2-contrib-2.4.46-9.61.1 openldap2-contrib-debuginfo-2.4.46-9.61.1 openldap2-debuginfo-2.4.46-9.61.1 openldap2-debugsource-2.4.46-9.61.1 openldap2-devel-2.4.46-9.61.1 openldap2-devel-static-2.4.46-9.61.1 openldap2-ppolicy-check-password-1.2-9.61.1 openldap2-ppolicy-check-password-debuginfo-1.2-9.61.1 - openSUSE Leap 15.4 (x86_64): libldap-2_4-2-32bit-2.4.46-9.61.1 libldap-2_4-2-32bit-debuginfo-2.4.46-9.61.1 openldap2-devel-32bit-2.4.46-9.61.1 - openSUSE Leap 15.4 (noarch): libldap-data-2.4.46-9.61.1 openldap2-doc-2.4.46-9.61.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libldap-2_4-2-2.4.46-9.61.1 libldap-2_4-2-debuginfo-2.4.46-9.61.1 openldap2-2.4.46-9.61.1 openldap2-back-meta-2.4.46-9.61.1 openldap2-back-meta-debuginfo-2.4.46-9.61.1 openldap2-back-perl-2.4.46-9.61.1 openldap2-back-perl-debuginfo-2.4.46-9.61.1 openldap2-back-sock-2.4.46-9.61.1 openldap2-back-sock-debuginfo-2.4.46-9.61.1 openldap2-back-sql-2.4.46-9.61.1 openldap2-back-sql-debuginfo-2.4.46-9.61.1 openldap2-client-2.4.46-9.61.1 openldap2-client-debuginfo-2.4.46-9.61.1 openldap2-contrib-2.4.46-9.61.1 openldap2-contrib-debuginfo-2.4.46-9.61.1 openldap2-debuginfo-2.4.46-9.61.1 openldap2-debugsource-2.4.46-9.61.1 openldap2-devel-2.4.46-9.61.1 openldap2-devel-static-2.4.46-9.61.1 openldap2-ppolicy-check-password-1.2-9.61.1 openldap2-ppolicy-check-password-debuginfo-1.2-9.61.1 - openSUSE Leap 15.3 (noarch): libldap-data-2.4.46-9.61.1 openldap2-doc-2.4.46-9.61.1 - openSUSE Leap 15.3 (x86_64): libldap-2_4-2-32bit-2.4.46-9.61.1 libldap-2_4-2-32bit-debuginfo-2.4.46-9.61.1 openldap2-devel-32bit-2.4.46-9.61.1 References:

1 0

openSUSE-RU-2022:0789-1: moderate: Recommended update for update-alternatives
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for update-alternatives ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0789-1 Rating: moderate References: #1195654 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for update-alternatives fixes the following issues: - Break bash - update-alternatives cycle rewrite of '%post' in 'lua'. (bsc#1195654) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-789=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-789=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-alternatives-1.19.0.4-4.3.1 update-alternatives-debuginfo-1.19.0.4-4.3.1 update-alternatives-debugsource-1.19.0.4-4.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-alternatives-1.19.0.4-4.3.1 update-alternatives-debuginfo-1.19.0.4-4.3.1 update-alternatives-debugsource-1.19.0.4-4.3.1 References: https://bugzilla.suse.com/1195654

1 0

openSUSE-RU-2022:0791-1: moderate: Recommended update for scap-security-guide
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for scap-security-guide ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0791-1 Rating: moderate References: ECO-3319 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for scap-security-guide fixes the following issues: scap-security-guide (ComplianceAsCode) was updated to 0.1.60 (jsc#ECO-3319) - Various bugfixes - New draft stig profile v1r1 for OL8 - New product Amazon EKS platform and initial CIS profiles - New product CentOS Stream 9, as a derivative from RHEL9 product Note that SUSE only supports for SUSE Linux Enterprise 12 and 15: - STIG profiles - HIPAA profiles - PCI-DSS profiles The CIS profile is community supplied and currently not supported by SUSE. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-791=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-791=1 Package List: - openSUSE Leap 15.4 (noarch): scap-security-guide-0.1.60-1.29.1 scap-security-guide-debian-0.1.60-1.29.1 scap-security-guide-redhat-0.1.60-1.29.1 scap-security-guide-ubuntu-0.1.60-1.29.1 - openSUSE Leap 15.3 (noarch): scap-security-guide-0.1.60-1.29.1 scap-security-guide-debian-0.1.60-1.29.1 scap-security-guide-redhat-0.1.60-1.29.1 scap-security-guide-ubuntu-0.1.60-1.29.1 References:

1 0

openSUSE-RU-2022:0796-1: moderate: Recommended update for golang-github-prometheus-prometheus
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for golang-github-prometheus-prometheus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0796-1 Rating: moderate References: #1196300 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-github-prometheus-prometheus fixes the following issues: - Fix Firewalld configuration file location (bsc#1196300) - Require Go 1.16+ - Do not build on s390 architecture. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-796=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-796=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-4.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-4.6.1 References: https://bugzilla.suse.com/1196300

1 0

openSUSE-RU-2022:0792-1: moderate: Recommended update for suse-build-key
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for suse-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0792-1 Rating: moderate References: #1194845 #1196494 #1196495 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for suse-build-key fixes the following issues: - The old SUSE PTF key was extended, but also move it to suse_ptf_key_old.asc (as it is a DSA1024 key). - Added a new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494) - Extended the expiry of SUSE Linux Enterprise 11 key (bsc#1194845) - Added SUSE Container signing key in PEM format for use e.g. by cosign. - The SUSE security key was replaced with 2022 edition (E-Mail usage only). (bsc#1196495) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-792=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-792=1 Package List: - openSUSE Leap 15.4 (noarch): suse-build-key-12.0-8.19.1 - openSUSE Leap 15.3 (noarch): suse-build-key-12.0-8.19.1 References: https://bugzilla.suse.com/1194845 https://bugzilla.suse.com/1196494 https://bugzilla.suse.com/1196495

1 0

openSUSE-RU-2022:0788-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0788-1 Rating: moderate References: #1195326 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libzypp, zypper fixes the following issues: - Fix handling of redirected command in-/output (bsc#1195326) This fixes delays at the end of zypper operations, where zypper unintentionally waits for appdata plugin scripts to complete. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-788=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libzypp-17.29.4-31.1 libzypp-debuginfo-17.29.4-31.1 libzypp-debugsource-17.29.4-31.1 libzypp-devel-17.29.4-31.1 libzypp-devel-doc-17.29.4-31.1 zypper-1.14.51-27.1 zypper-debuginfo-1.14.51-27.1 zypper-debugsource-1.14.51-27.1 - openSUSE Leap 15.3 (noarch): zypper-aptitude-1.14.51-27.1 zypper-log-1.14.51-27.1 zypper-needs-restarting-1.14.51-27.1 References: https://bugzilla.suse.com/1195326

1 0

openSUSE-RU-2022:0776-1: moderate: Recommended update for mutter
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for mutter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0776-1 Rating: moderate References: #1188759 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mutter fixes the following issues: - Improve mutter behavior when receiving a ClientMessage event, not to just assume that it's a WM_PROTOCOLS event but to actually check the type before using it (bsc#1188759) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-776=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-776=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libmutter-5-0-3.34.6-3.9.1 libmutter-5-0-debuginfo-3.34.6-3.9.1 mutter-data-3.34.6-3.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libmutter-5-0-3.34.6-3.9.1 libmutter-5-0-debuginfo-3.34.6-3.9.1 mutter-3.34.6-3.9.1 mutter-data-3.34.6-3.9.1 mutter-debuginfo-3.34.6-3.9.1 mutter-debugsource-3.34.6-3.9.1 mutter-devel-3.34.6-3.9.1 - openSUSE Leap 15.3 (noarch): mutter-lang-3.34.6-3.9.1 References: https://bugzilla.suse.com/1188759

1 0

openSUSE-OU-2022:0781-1: moderate: Optional update for SUSE Package Hub
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0781-1 Rating: moderate References: MSC-303 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 optional fixes and contains one feature can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: MozillaThunderbird, enigmail Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-781=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-781=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.1-8.56.1 MozillaThunderbird-debuginfo-91.6.1-8.56.1 MozillaThunderbird-debugsource-91.6.1-8.56.1 MozillaThunderbird-translations-common-91.6.1-8.56.1 MozillaThunderbird-translations-other-91.6.1-8.56.1 enigmail-2.2.4-3.27.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.1-8.56.1 MozillaThunderbird-debuginfo-91.6.1-8.56.1 MozillaThunderbird-debugsource-91.6.1-8.56.1 MozillaThunderbird-translations-common-91.6.1-8.56.1 MozillaThunderbird-translations-other-91.6.1-8.56.1 enigmail-2.2.4-3.27.1 References:

1 0

openSUSE-RU-2022:0780-1: moderate: Recommended update for nvme-cli
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for nvme-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0780-1 Rating: moderate References: #1193540 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nvme-cli fixes the following issues: - fabrics: fix 'nvme connect' segfault if transport type is omitted (bsc#1193540) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-780=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nvme-cli-1.13-150300.3.13.1 nvme-cli-debuginfo-1.13-150300.3.13.1 nvme-cli-debugsource-1.13-150300.3.13.1 nvme-cli-regress-script-1.13-150300.3.13.1 References: https://bugzilla.suse.com/1193540

1 0

openSUSE-SU-2022:0783-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0783-1 Rating: important References: #1196809 Cross-References: CVE-2022-26485 CVE-2022-26486 CVSS scores: CVE-2022-26485 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26486 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.1 ESR (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-783=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-783=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.6.1-152.19.1 MozillaFirefox-branding-upstream-91.6.1-152.19.1 MozillaFirefox-debuginfo-91.6.1-152.19.1 MozillaFirefox-debugsource-91.6.1-152.19.1 MozillaFirefox-devel-91.6.1-152.19.1 MozillaFirefox-translations-common-91.6.1-152.19.1 MozillaFirefox-translations-other-91.6.1-152.19.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.6.1-152.19.1 MozillaFirefox-branding-upstream-91.6.1-152.19.1 MozillaFirefox-debuginfo-91.6.1-152.19.1 MozillaFirefox-debugsource-91.6.1-152.19.1 MozillaFirefox-devel-91.6.1-152.19.1 MozillaFirefox-translations-common-91.6.1-152.19.1 MozillaFirefox-translations-other-91.6.1-152.19.1 References: https://www.suse.com/security/cve/CVE-2022-26485.html https://www.suse.com/security/cve/CVE-2022-26486.html https://bugzilla.suse.com/1196809

1 0

openSUSE-RU-2022:0775-1: moderate: Recommended update for pciutils
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for pciutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0775-1 Rating: moderate References: #1192862 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pciutils fixes the following issues: - Report the theoretical speeds for PCIe 5.0 and 6.0 (bsc#1192862) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-775=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-775=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpci3-3.5.6-150300.13.3.1 libpci3-debuginfo-3.5.6-150300.13.3.1 pciutils-3.5.6-150300.13.3.1 pciutils-debuginfo-3.5.6-150300.13.3.1 pciutils-debugsource-3.5.6-150300.13.3.1 pciutils-devel-3.5.6-150300.13.3.1 - openSUSE Leap 15.4 (x86_64): libpci3-32bit-3.5.6-150300.13.3.1 libpci3-32bit-debuginfo-3.5.6-150300.13.3.1 pciutils-devel-32bit-3.5.6-150300.13.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpci3-3.5.6-150300.13.3.1 libpci3-debuginfo-3.5.6-150300.13.3.1 pciutils-3.5.6-150300.13.3.1 pciutils-debuginfo-3.5.6-150300.13.3.1 pciutils-debugsource-3.5.6-150300.13.3.1 pciutils-devel-3.5.6-150300.13.3.1 - openSUSE Leap 15.3 (x86_64): libpci3-32bit-3.5.6-150300.13.3.1 libpci3-32bit-debuginfo-3.5.6-150300.13.3.1 pciutils-devel-32bit-3.5.6-150300.13.3.1 References: https://bugzilla.suse.com/1192862

1 0

openSUSE-SU-2022:0769-1: important: Security update for libcaca
by opensuse-security＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Security Update: Security update for libcaca ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0769-1 Rating: important References: #1184751 #1184752 Cross-References: CVE-2021-30498 CVE-2021-30499 CVSS scores: CVE-2021-30498 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30498 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30499 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30499 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libcaca fixes the following issues: - CVE-2021-30498, CVE-2021-30499: If an image has a size of 0x0, when exporting, no data is written and space is allocated for the header only, not taking into account that sprintf appends a NUL byte (bsc#1184751, bsc#1184752). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-769=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-769=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): caca-utils-0.99.beta19.git20171003-11.3.1 caca-utils-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca-debugsource-0.99.beta19.git20171003-11.3.1 libcaca-devel-0.99.beta19.git20171003-11.3.1 libcaca-ruby-0.99.beta19.git20171003-11.3.1 libcaca-ruby-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-0.99.beta19.git20171003-11.3.1 libcaca0-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-debuginfo-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.4 (x86_64): libcaca0-32bit-0.99.beta19.git20171003-11.3.1 libcaca0-32bit-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-32bit-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-32bit-debuginfo-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.4 (noarch): python3-caca-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): caca-utils-0.99.beta19.git20171003-11.3.1 caca-utils-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca-debugsource-0.99.beta19.git20171003-11.3.1 libcaca-devel-0.99.beta19.git20171003-11.3.1 libcaca-ruby-0.99.beta19.git20171003-11.3.1 libcaca-ruby-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-0.99.beta19.git20171003-11.3.1 libcaca0-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-debuginfo-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.3 (x86_64): libcaca0-32bit-0.99.beta19.git20171003-11.3.1 libcaca0-32bit-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-32bit-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-32bit-debuginfo-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.3 (noarch): python3-caca-0.99.beta19.git20171003-11.3.1 References: https://www.suse.com/security/cve/CVE-2021-30498.html https://www.suse.com/security/cve/CVE-2021-30499.html https://bugzilla.suse.com/1184751 https://bugzilla.suse.com/1184752

1 0

openSUSE-RU-2022:0078-1: moderate: Recommended update for go1.17
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for go1.17 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0078-1 Rating: moderate References: #1190649 #1196685 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for go1.17 fixes the following issues: Update to go1.17.6 released 2022-01-06. (bsc#1190649) - It includes fixes to the compiler, linker, runtime, and the crypto/x509, net/http, and reflect packages. * go#50165 crypto/x509: error parsing large ASN.1 identifiers * go#50073 runtime: race detector `SIGABRT` or `SIGSEGV` on macOS Monterey * go#49961 reflect: segmentation violation while using html/template * go#49921 x/net/http2: `http.Server.WriteTimeout` does not fire if the http2 stream's window is out of space. * go#49413 cmd/compile: internal compiler error: `Op...LECall and OpDereference have mismatched mem` * go#48116 runtime: mallocs cause `base outside usable address space` panic when running on iOS 14 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-78=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-78=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): go1.17-1.17.6-1.17.1 go1.17-doc-1.17.6-1.17.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.17-race-1.17.6-1.17.1 - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): audacity-2.2.2-bp153.3.6.1 - openSUSE Backports SLE-15-SP3 (noarch): audacity-lang-2.2.2-bp153.3.6.1 References: https://bugzilla.suse.com/1190649 https://bugzilla.suse.com/1196685

1 0

openSUSE-RU-2022:0771-1: moderate: Recommended update for libseccomp
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for libseccomp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0771-1 Rating: moderate References: #1196825 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libseccomp fixes the following issues: - Check if we have NR_openat2, avoid using its definition when not (bsc#1196825), this fixes build of systemd. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-771=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libseccomp-debugsource-2.5.3-150300.10.8.1 libseccomp-devel-2.5.3-150300.10.8.1 libseccomp-tools-2.5.3-150300.10.8.1 libseccomp-tools-debuginfo-2.5.3-150300.10.8.1 libseccomp2-2.5.3-150300.10.8.1 libseccomp2-debuginfo-2.5.3-150300.10.8.1 - openSUSE Leap 15.3 (x86_64): libseccomp2-32bit-2.5.3-150300.10.8.1 libseccomp2-32bit-debuginfo-2.5.3-150300.10.8.1 References: https://bugzilla.suse.com/1196825

1 0

openSUSE-SU-2022:0774-1: moderate: Security update for tcpdump
by opensuse-security＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0774-1 Rating: moderate References: #1195825 Cross-References: CVE-2018-16301 CVSS scores: CVE-2018-16301 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tcpdump fixes the following issues: - CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-774=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): tcpdump-4.9.2-3.18.1 tcpdump-debuginfo-4.9.2-3.18.1 tcpdump-debugsource-4.9.2-3.18.1 References: https://www.suse.com/security/cve/CVE-2018-16301.html https://bugzilla.suse.com/1195825

1 0

openSUSE-RU-2022:0772-1: moderate: Recommended update for icewm-theme-branding
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for icewm-theme-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0772-1 Rating: moderate References: #1195328 #1196336 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for icewm-theme-branding fixes the following issues: - Fix font configuration after google-droid-fonts update (bsc#1195328 bsc#1196336) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-772=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-772=1 Package List: - openSUSE Leap 15.4 (noarch): icewm-theme-branding-1.2.5-150300.5.3.1 - openSUSE Leap 15.3 (noarch): icewm-theme-branding-1.2.5-150300.5.3.1 References: https://bugzilla.suse.com/1195328 https://bugzilla.suse.com/1196336

1 0

openSUSE-RU-2022:0773-1: moderate: Recommended update for fwupd
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for fwupd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0773-1 Rating: moderate References: #1193921 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fwupd fixes the following issues: - Ignore non-PCI NVMe devices (e.g. NVMe-over-Fabrics) when probing (bsc#1193921) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-773=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-773=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libfwupdplugin1-1.5.8-150300.3.3.1 libfwupdplugin1-debuginfo-1.5.8-150300.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dfu-tool-1.5.8-150300.3.3.1 dfu-tool-debuginfo-1.5.8-150300.3.3.1 fwupd-1.5.8-150300.3.3.1 fwupd-debuginfo-1.5.8-150300.3.3.1 fwupd-debugsource-1.5.8-150300.3.3.1 fwupd-devel-1.5.8-150300.3.3.1 fwupdtpmevlog-1.5.8-150300.3.3.1 fwupdtpmevlog-debuginfo-1.5.8-150300.3.3.1 libfwupd2-1.5.8-150300.3.3.1 libfwupd2-debuginfo-1.5.8-150300.3.3.1 libfwupdplugin1-1.5.8-150300.3.3.1 libfwupdplugin1-debuginfo-1.5.8-150300.3.3.1 typelib-1_0-Fwupd-2_0-1.5.8-150300.3.3.1 typelib-1_0-FwupdPlugin-1_0-1.5.8-150300.3.3.1 - openSUSE Leap 15.3 (noarch): fwupd-lang-1.5.8-150300.3.3.1 References: https://bugzilla.suse.com/1193921

1 0

openSUSE-SU-2022:0770-1: moderate: Security update for buildah
by opensuse-security＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Security Update: Security update for buildah ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0770-1 Rating: moderate References: #1187812 #1192999 SLE-23503 Cross-References: CVE-2019-10214 CVE-2020-10696 CVE-2021-20206 CVSS scores: CVE-2019-10214 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-10214 (SUSE): 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2020-10696 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-10696 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-20206 (NVD) : 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-20206 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities, contains one feature is now available. Description: This update for buildah fixes the following issues: buildah was updated to version 1.23.1: Update to version 1.22.3: * Update dependencies * Post-branch commit * Accept repositories on login/logout Update to version 1.22.0: * c/image, c/storage, c/common vendor before Podman 3.3 release * Proposed patch for 3399 (shadowutils) * Fix handling of --restore shadow-utils * runtime-flag (debug) test: handle old & new runc * Allow dst and destination for target in secret mounts * Multi-arch: Always push updated version-tagged img * imagebuildah.stageExecutor.prepare(): remove pseudonym check * refine dangling filter * Chown with environment variables not set should fail * Just restore protections of shadow-utils * Remove specific kernel version number requirement from install.md * Multi-arch image workflow: Make steps generic * chroot: fix environment value leakage to intermediate processes * Update nix pin with `make nixpkgs` * buildah source - create and manage source images * Update cirrus-cron notification GH workflow * Reuse code from containers/common/pkg/parse * Cirrus: Freshen VM images * Fix excludes exception begining with / or ./ * Fix syntax for --manifest example * vendor containers/common@main * Cirrus: Drop dependence on fedora-minimal * Adjust conformance-test error-message regex * Workaround appearance of differing debug messages * Cirrus: Install docker from package cache * Switch rusagelogfile to use options.Out * Turn stdio back to blocking when command finishes * Add support for default network creation * Cirrus: Updates for master->main rename * Change references from master to main * Add `--env` and `--workingdir` flags to run command * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter * [CI:DOCS] push/pull: clarify supported transports * Remove unused function arguments * Create mountOptions for mount command flags * Extract version command implementation to function * Add --json flags to `mount` and `version` commands * copier.Put(): set xattrs after ownership * buildah add/copy: spelling * buildah copy and buildah add should support .containerignore * Remove unused util.StartsWithValidTransport * Fix documentation of the --format option of buildah push * Don't use alltransports.ParseImageName with known transports * man pages: clarify `rmi` removes dangling parents * [CI:DOCS] Fix links to c/image master branch * imagebuildah: use the specified logger for logging preprocessing warnings * Fix copy into workdir for a single file * Fix docs links due to branch rename * Update nix pin with `make nixpkgs` * fix(docs): typo * Move to v1.22.0-dev * Fix handling of auth.json file while in a user namespace * Add rusage-logfile flag to optionally send rusage to a file * imagebuildah: redo step logging * Add volumes to make running buildah within a container easier * Add and use a "copy" helper instead of podman load/save * Bump github.com/containers/common from 0.38.4 to 0.39.0 * containerImageRef/containerImageSource: don't buffer uncompressed layers * containerImageRef(): squashed images have no parent images * Sync. workflow across skopeo, buildah, and podman * Bump github.com/containers/storage from 1.31.1 to 1.31.2 * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95 * Bump to v1.21.1-dev [NO TESTS NEEDED] Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-770=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): buildah-1.23.1-150300.8.3.1 References: https://www.suse.com/security/cve/CVE-2019-10214.html https://www.suse.com/security/cve/CVE-2020-10696.html https://www.suse.com/security/cve/CVE-2021-20206.html https://bugzilla.suse.com/1187812 https://bugzilla.suse.com/1192999

1 0

openSUSE-SU-2022:0768-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 08 Mar '22

08 Mar '22

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0768-1 Rating: important References: #1185973 #1191580 #1194516 #1195536 #1195543 #1195612 #1195840 #1195897 #1195908 #1195949 #1195987 #1196079 #1196155 #1196584 #1196612 Cross-References: CVE-2021-44879 CVE-2022-0001 CVE-2022-0002 CVE-2022-0487 CVE-2022-0492 CVE-2022-0617 CVE-2022-0644 CVE-2022-24448 CVE-2022-24959 CVSS scores: CVE-2021-44879 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-44879 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0001 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0002 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0487 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-0487 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0492 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0617 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0617 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0644 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24448 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2022-24448 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-24959 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24959 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has 6 fixes is now available. Description: The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named "Branch Target Injection" and "Intra-Mode Branch History Injection" are now mitigated. The following security bugs were fixed: - CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580). - CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580). - CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079) - CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155). - CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987). - CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897). - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543). - CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612). The following non-security bugs were fixed: - crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840). - lib/iov_iter: initialize "flags" in new pipe_buffer (bsc#1196584). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-768=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-768=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): kernel-default-base-debuginfo-4.12.14-197.108.1 kernel-vanilla-4.12.14-197.108.1 kernel-vanilla-base-4.12.14-197.108.1 kernel-vanilla-base-debuginfo-4.12.14-197.108.1 kernel-vanilla-debuginfo-4.12.14-197.108.1 kernel-vanilla-debugsource-4.12.14-197.108.1 kernel-vanilla-devel-4.12.14-197.108.1 kernel-vanilla-devel-debuginfo-4.12.14-197.108.1 kernel-vanilla-livepatch-devel-4.12.14-197.108.1 - openSUSE Leap 15.4 (ppc64le x86_64): kernel-debug-base-4.12.14-197.108.1 kernel-debug-base-debuginfo-4.12.14-197.108.1 - openSUSE Leap 15.4 (x86_64): kernel-kvmsmall-base-4.12.14-197.108.1 kernel-kvmsmall-base-debuginfo-4.12.14-197.108.1 - openSUSE Leap 15.4 (s390x): kernel-default-man-4.12.14-197.108.1 kernel-zfcpdump-man-4.12.14-197.108.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): kernel-default-base-debuginfo-4.12.14-197.108.1 kernel-vanilla-4.12.14-197.108.1 kernel-vanilla-base-4.12.14-197.108.1 kernel-vanilla-base-debuginfo-4.12.14-197.108.1 kernel-vanilla-debuginfo-4.12.14-197.108.1 kernel-vanilla-debugsource-4.12.14-197.108.1 kernel-vanilla-devel-4.12.14-197.108.1 kernel-vanilla-devel-debuginfo-4.12.14-197.108.1 kernel-vanilla-livepatch-devel-4.12.14-197.108.1 - openSUSE Leap 15.3 (ppc64le x86_64): kernel-debug-base-4.12.14-197.108.1 kernel-debug-base-debuginfo-4.12.14-197.108.1 - openSUSE Leap 15.3 (x86_64): kernel-kvmsmall-base-4.12.14-197.108.1 kernel-kvmsmall-base-debuginfo-4.12.14-197.108.1 - openSUSE Leap 15.3 (s390x): kernel-default-man-4.12.14-197.108.1 kernel-zfcpdump-man-4.12.14-197.108.1 References: https://www.suse.com/security/cve/CVE-2021-44879.html https://www.suse.com/security/cve/CVE-2022-0001.html https://www.suse.com/security/cve/CVE-2022-0002.html https://www.suse.com/security/cve/CVE-2022-0487.html https://www.suse.com/security/cve/CVE-2022-0492.html https://www.suse.com/security/cve/CVE-2022-0617.html https://www.suse.com/security/cve/CVE-2022-0644.html https://www.suse.com/security/cve/CVE-2022-24448.html https://www.suse.com/security/cve/CVE-2022-24959.html https://bugzilla.suse.com/1185973 https://bugzilla.suse.com/1191580 https://bugzilla.suse.com/1194516 https://bugzilla.suse.com/1195536 https://bugzilla.suse.com/1195543 https://bugzilla.suse.com/1195612 https://bugzilla.suse.com/1195840 https://bugzilla.suse.com/1195897 https://bugzilla.suse.com/1195908 https://bugzilla.suse.com/1195949 https://bugzilla.suse.com/1195987 https://bugzilla.suse.com/1196079 https://bugzilla.suse.com/1196155 https://bugzilla.suse.com/1196584 https://bugzilla.suse.com/1196612

1 0

openSUSE-SU-2022:0755-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 08 Mar '22

08 Mar '22

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0755-1 Rating: important References: #1089644 #1154353 #1156395 #1157038 #1157923 #1176447 #1176940 #1178134 #1181147 #1181588 #1183872 #1187716 #1188404 #1189126 #1190812 #1190972 #1191580 #1191655 #1191741 #1192210 #1192483 #1193096 #1193233 #1193243 #1193787 #1194163 #1194967 #1195012 #1195081 #1195142 #1195352 #1195378 #1195476 #1195477 #1195478 #1195479 #1195480 #1195481 #1195482 #1195506 #1195516 #1195543 #1195668 #1195701 #1195798 #1195799 #1195823 #1195908 #1195928 #1195947 #1195957 #1195995 #1196195 #1196235 #1196339 #1196400 #1196403 #1196516 #1196584 #1196601 #1196612 #1196776 SLE-20807 SLE-22135 SLE-22494 Cross-References: CVE-2022-0001 CVE-2022-0002 CVE-2022-0492 CVE-2022-0516 CVE-2022-0847 CVE-2022-25375 CVSS scores: CVE-2022-0001 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0002 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0492 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0516 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0847 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25375 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-25375 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves 6 vulnerabilities, contains three features and has 56 fixes is now available. Description: The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named "Branch Target Injection" and "Intra-Mode Branch History Injection" are now mitigated. The following security bugs were fixed: - CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584). - CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580). - CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580). - CVE-2022-25375: The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory (bsc#1196235). - CVE-2022-0516: Fixed missing check in ioctl related to KVM in s390 allows kernel memory read/write (bsc#1195516). - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543). The following non-security bugs were fixed: - ACPI/IORT: Check node revision for PMCG resources (git-fixes). - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS GU603 (git-fixes). - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows (git-fixes). - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) (git-fixes). - ALSA: hda: Fix missing codec probe on Shenker Dock 15 (git-fixes). - ALSA: hda: Fix regression on forced probe mask option (git-fixes). - ALSA: usb-audio: Correct quirk for VF0770 (git-fixes). - ALSA: usb-audio: initialize variables that could ignore errors (git-fixes). - ASoC: Revert "ASoC: mediatek: Check for error clk pointer" (git-fixes). - ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name (git-fixes). - ASoC: fsl: Add missing error handling in pcm030_fabric_probe (git-fixes). - ASoC: max9759: fix underflow in speaker_gain_control_put() (git-fixes). - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() (git-fixes). - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() (git-fixes). - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (git-fixes). - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (git-fixes). - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (git-fixes). - ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes (git-fixes). - Align s390 NVME target options with other architectures (bsc#1188404, jsc#SLE-22494). - Bluetooth: refactor malicious adv data check (git-fixes). - EDAC/xgene: Fix deferred probing (bsc#1178134). - HID:Add support for UGTABLET WP5540 (git-fixes). - IB/cm: Avoid a loop when device has 255 ports (git-fixes) - IB/cma: Do not send IGMP leaves for sendonly Multicast groups (git-fixes). - IB/hfi1: Fix AIP early init panic (jsc#SLE-13208). - IB/hfi1: Fix error return code in parse_platform_config() (git-fixes) - IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (git-fixes) - IB/isert: Fix a use after free in isert_connect_request (git-fixes) - IB/mlx4: Separate tunnel and wire bufs parameters (git-fixes) - IB/mlx5: Add missing error code (git-fixes) - IB/mlx5: Add mutex destroy call to cap_mask_mutex mutex (git-fixes) - IB/mlx5: Fix error unwinding when set_has_smi_cap fails (git-fixes) - IB/mlx5: Return appropriate error code instead of ENOMEM (git-fixes) - IB/umad: Return EIO in case of when device disassociated (git-fixes) - IB/umad: Return EPOLLERR in case of when device disassociated (git-fixes) - Input: wm97xx: Simplify resource management (git-fixes). - KVM: remember position in kvm->vcpus array (bsc#1190972 LTC#194674). - NFS: Ensure the server had an up to date ctime before renaming (git-fixes). - NFSD: Fix the behavior of READ near OFFSET_MAX (bsc#1195957). - NFSv4: Handle case where the lookup of a directory fails (git-fixes). - NFSv4: nfs_atomic_open() can race when looking up a non-regular file (git-fixes). - PM: hibernate: Remove register_nosave_region_late() (git-fixes). - PM: s2idle: ACPI: Fix wakeup interrupts handling (git-fixes). - PM: wakeup: simplify the output logic of pm_show_wakelocks() (git-fixes). - RDMA/addr: Be strict with gid size (git-fixes) - RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res (git-fixes) - RDMA/bnxt_re: Fix error return code in bnxt_qplib_cq_process_terminal() (git-fixes) - RDMA/bnxt_re: Set queue pair state when being queried (git-fixes) - RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (git-fixes) - RDMA/cma: Use correct address when leaving multicast group (bsc#1181147). - RDMA/core: Always release restrack object (git-fixes) - RDMA/core: Do not access cm_id after its destruction (git-fixes) - RDMA/core: Do not indicate device ready when device enablement fails (git-fixes) - RDMA/core: Fix corrupted SL on passive side (git-fixes) - RDMA/core: Unify RoCE check and re-factor code (git-fixes) - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (git-fixes) - RDMA/cxgb4: Fix the reported max_recv_sge value (git-fixes) - RDMA/cxgb4: Validate the number of CQEs (git-fixes) - RDMA/cxgb4: add missing qpid increment (git-fixes) - RDMA/cxgb4: check for ipv6 address properly while destroying listener (git-fixes) - RDMA/hns: Add a check for current state before modifying QP (git-fixes) - RDMA/hns: Remove the portn field in UD SQ WQE (git-fixes) - RDMA/hns: Remove unnecessary access right set during INIT2INIT (git-fixes) - RDMA/i40iw: Address an mmap handler exploit in i40iw (git-fixes) - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (git-fixes) - RDMA/mlx5: Fix corruption of reg_pages in mlx5_ib_rereg_user_mr() (git-fixes) - RDMA/mlx5: Fix potential race between destroy and CQE poll (git-fixes) - RDMA/mlx5: Fix query DCT via DEVX (git-fixes) - RDMA/mlx5: Fix type warning of sizeof in __mlx5_ib_alloc_counters() (git-fixes) - RDMA/mlx5: Fix wrong free of blue flame register on error (git-fixes) - RDMA/mlx5: Issue FW command to destroy SRQ on reentry (git-fixes) - RDMA/mlx5: Recover from fatal event in dual port mode (git-fixes) - RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation (git-fixes) - RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (git-fixes) - RDMA/rxe: Clear all QP fields if creation failed (git-fixes) - RDMA/rxe: Compute PSN windows correctly (git-fixes) - RDMA/rxe: Correct skb on loopback path (git-fixes) - RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt (git-fixes) - RDMA/rxe: Fix coding error in rxe_recv.c (git-fixes) - RDMA/rxe: Fix missing kconfig dependency on CRYPTO (git-fixes) - RDMA/rxe: Remove useless code in rxe_recv.c (git-fixes) - RDMA/siw: Fix a use after free in siw_alloc_mr (git-fixes) - RDMA/siw: Fix calculation of tx_valid_cpus size (git-fixes) - RDMA/siw: Fix handling of zero-sized Read and Receive Queues. (git-fixes) - RDMA/siw: Properly check send and receive CQ pointers (git-fixes) - RDMA/siw: Release xarray entry (git-fixes) - RDMA/ucma: Protect mc during concurrent multicast leaves (bsc#1181147). - RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (git-fixes) - RDMA/uverbs: Fix a NULL vs IS_ERR() bug (git-fixes) - RDMA/uverbs: Tidy input validation of ib_uverbs_rereg_mr() (git-fixes) - RMDA/sw: Do not allow drivers using dma_virt_ops on highmem configs (git-fixes) - USB: core: Fix hang in usb_kill_urb by adding memory barriers (git-fixes). - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices (git-fixes). - USB: serial: cp210x: add CPI Bulk Coin Recycler id (git-fixes). - USB: serial: cp210x: add NCR Retail IO box id (git-fixes). - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 (git-fixes). - USB: serial: mos7840: fix probe error handling (git-fixes). - USB: serial: mos7840: remove duplicated 0xac24 device ID (git-fixes). - USB: serial: option: add ZTE MF286D modem (git-fixes). - ata: libata-core: Disable TRIM on M88V29 (git-fixes). - ax25: improve the incomplete fix to avoid UAF and NPD bugs (git-fixes). - blk-cgroup: fix missing put device in error path from blkg_conf_pref() (bsc#1195481). - blk-mq: always allow reserved allocation in hctx_may_queue (bsc#1193787). - blk-mq: avoid to iterate over stale request (bsc#1193787). - blk-mq: clear stale request in tags->rq before freeing one request pool (bsc#1193787). - blk-mq: clearing flush request reference in tags->rqs (bsc#1193787). - blk-mq: do not grab rq's refcount in blk_mq_check_expired() (bsc#1193787 git-fixes). - blk-mq: fix is_flush_rq (bsc#1193787 git-fixes). - blk-mq: fix kernel panic during iterating over flush request (bsc#1193787 git-fixes). - blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter (bsc#1193787). - blk-mq: introduce blk_mq_set_request_complete (git-fixes). - blk-mq: mark flush request as IDLE in flush_end_io() (bsc#1193787). - blk-tag: Hide spin_lock (bsc#1193787). - block: avoid double io accounting for flush request (bsc#1193787). - block: do not send a rezise udev event for hidden block device (bsc#1193096). - block: mark flush request as IDLE when it is really finished (bsc#1193787). - bonding: pair enable_port with slave_arr_updates (git-fixes). - bpf: Adjust BTF log size limit (git-fixes). - bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) (git-fixes). - btrfs: check for missing device in btrfs_trim_fs (bsc#1195701). - btrfs: check worker before need_preemptive_reclaim (bsc#1196195). - btrfs: do not do preemptive flushing if the majority is global rsv (bsc#1196195). - btrfs: do not include the global rsv size in the preemptive used amount (bsc#1196195). - btrfs: handle preemptive delalloc flushing slightly differently (bsc#1196195). - btrfs: make sure SB_I_VERSION does not get unset by remount (bsc#1192210). - btrfs: only clamp the first time we have to start flushing (bsc#1196195). - btrfs: only ignore delalloc if delalloc is much smaller than ordered (bsc#1196195). - btrfs: reduce the preemptive flushing threshold to 90% (bsc#1196195). - btrfs: take into account global rsv in need_preemptive_reclaim (bsc#1196195). - btrfs: use the global rsv size in the preemptive thresh calculation (bsc#1196195). - ceph: properly put ceph_string reference after async create attempt (bsc#1195798). - ceph: set pool_ns in new inode layout for async creates (bsc#1195799). - dma-buf: heaps: Fix potential spectre v1 gadget (git-fixes). - drm/amdgpu: fix logic inversion in check (git-fixes). - drm/i915/gvt: Make DRM_I915_GVT depend on X86 (git-fixes). - drm/i915/gvt: clean up kernel-doc in gtt.c (git-fixes). - drm/i915/opregion: check port number bounds for SWSCI display power state (git-fixes). - drm/i915/overlay: Prevent divide by zero bugs in scaling (git-fixes). - drm/i915: Correctly populate use_sagv_wm for all pipes (git-fixes). - drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV (git-fixes). - drm/msm/dsi: Fix missing put_device() call in dsi_get_phy (git-fixes). - drm/nouveau: fix off by one in BIOS boundary checking (git-fixes). - drm/panel: simple: Assign data from panel_dpi_probe() correctly (git-fixes). - drm/radeon: Fix backlight control on iMac 12,1 (git-fixes). - drm/rockchip: dw_hdmi: Do not leave clock enabled in error case (git-fixes). - drm/rockchip: vop: Correct RK3399 VOP register fields (git-fixes). - drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd (git-fixes). - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer (git-fixes). - ext4: check for inconsistent extents between index and leaf block (bsc#1194163 bsc#1196339). - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (bsc#1194163 bsc#1196339). - ext4: fix an use-after-free issue about data=journal writeback mode (bsc#1195482). - ext4: make sure quota gets properly shutdown on error (bsc#1195480). - ext4: prevent partial update of the extent blocks (bsc#1194163 bsc#1196339). - fsnotify: fix fsnotify hooks in pseudo filesystems (bsc#1195479). - fsnotify: invalidate dcache before IN_DELETE event (bsc#1195478). - gve: Add RX context (bsc#1191655). - gve: Add a jumbo-frame device option (bsc#1191655). - gve: Add consumed counts to ethtool stats (bsc#1191655). - gve: Add optional metadata descriptor type GVE_TXD_MTD (bsc#1191655). - gve: Correct order of processing device options (bsc#1191655). - gve: Fix GFP flags when allocing pages (git-fixes). - gve: Fix off by one in gve_tx_timeout() (bsc#1191655). - gve: Implement packet continuation for RX (bsc#1191655). - gve: Implement suspend/resume/shutdown (bsc#1191655). - gve: Move the irq db indexes out of the ntfy block struct (bsc#1191655). - gve: Recording rx queue before sending to napi (bsc#1191655). - gve: Recover from queue stall due to missed IRQ (bsc#1191655). - gve: Update gve_free_queue_page_list signature (bsc#1191655). - gve: Use kvcalloc() instead of kvzalloc() (bsc#1191655). - gve: fix for null pointer dereference (bsc#1191655). - gve: fix the wrong AdminQ buffer queue index check (bsc#1176940). - gve: fix unmatched u64_stats_update_end() (bsc#1191655). - gve: remove memory barrier around seqno (bsc#1191655). - i2c: brcmstb: fix support for DSL and CM variants (git-fixes). - i40e: Fix for failed to init adminq while VF reset (git-fixes). - i40e: Fix issue when maximum queues is exceeded (git-fixes). - i40e: Fix queues reservation for XDP (git-fixes). - i40e: Increase delay to 1 s after global EMP reset (git-fixes). - i40e: fix unsigned stat widths (git-fixes). - i40iw: Add support to make destroy QP synchronous (git-fixes) - ibmvnic: Allow queueing resets during probe (bsc#1196516 ltc#196391). - ibmvnic: clear fop when retrying probe (bsc#1196516 ltc#196391). - ibmvnic: complete init_done on transport events (bsc#1196516 ltc#196391). - ibmvnic: define flush_reset_queue helper (bsc#1196516 ltc#196391). - ibmvnic: do not release napi in __ibmvnic_open() (bsc#1195668 ltc#195811). - ibmvnic: free reset-work-item when flushing (bsc#1196516 ltc#196391). - ibmvnic: init init_done_rc earlier (bsc#1196516 ltc#196391). - ibmvnic: initialize rc before completing wait (bsc#1196516 ltc#196391). - ibmvnic: register netdev after init of adapter (bsc#1196516 ltc#196391). - ibmvnic: schedule failover only if vioctl fails (bsc#1196400 ltc#195815). - ice: fix IPIP and SIT TSO offload (git-fixes). - ice: fix an error code in ice_cfg_phy_fec() (jsc#SLE-12878). - ima: Allow template selection with ima_template[_fmt]= after ima_hash= (git-fixes). - ima: Do not print policy rule with inactive LSM labels (git-fixes). - ima: Remove ima_policy file before directory (git-fixes). - integrity: Make function integrity_add_key() static (git-fixes). - integrity: check the return value of audit_log_start() (git-fixes). - integrity: double check iint_cache was initialized (git-fixes). - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() (git-fixes). - iommu/amd: Remove useless irq affinity notifier (git-fixes). - iommu/amd: Restore GA log/tail pointer on host resume (git-fixes). - iommu/amd: X2apic mode: mask/unmask interrupts on suspend/resume (git-fixes). - iommu/amd: X2apic mode: re-enable after resume (git-fixes). - iommu/amd: X2apic mode: setup the INTX registers on mask/unmask (git-fixes). - iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure (git-fixes). - iommu/io-pgtable-arm: Fix table descriptor paddr formatting (git-fixes). - iommu/iova: Fix race between FQ timeout and teardown (git-fixes). - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() (git-fixes). - iwlwifi: fix use-after-free (git-fixes). - iwlwifi: pcie: fix locking when "HW not ready" (git-fixes). - iwlwifi: pcie: gen2: fix locking when "HW not ready" (git-fixes). - ixgbevf: Require large buffers for build_skb on 82599VF (git-fixes). - kABI fixup after adding vcpu_idx to struct kvm_cpu (bsc#1190972 LTC#194674). - kABI: Fix kABI for AMD IOMMU driver (git-fixes). - kabi: Hide changes to s390/AP structures (jsc#SLE-20807). - lib/iov_iter: initialize "flags" in new pipe_buffer (bsc#1196584). - libsubcmd: Fix use-after-free for realloc(..., 0) (git-fixes). - md/raid5: fix oops during stripe resizing (bsc#1181588). - misc: fastrpc: avoid double fput() on failed usercopy (git-fixes). - mmc: sdhci-of-esdhc: Check for error num after setting mask (git-fixes). - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status (git-fixes). - mtd: rawnand: gpmi: do not leak PM reference in error path (git-fixes). - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() (git-fixes). - net/ibmvnic: Cleanup workaround doing an EOI after partition migration (bsc#1089644 ltc#166495 ltc#165544 git-fixes). - net/mlx5e: Fix handling of wrong devices during bond netevent (jsc#SLE-15172). - net: macb: Align the dma and coherent dma masks (git-fixes). - net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE (bsc#1176447). - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs (git-fixes). - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs (git-fixes). - net: phy: marvell: configure RGMII delays for 88E1118 (git-fixes). - net: usb: qmi_wwan: Add support for Dell DW5829e (git-fixes). - nfp: flower: fix ida_idx not being released (bsc#1154353). - nfsd: allow delegation state ids to be revoked and then freed (bsc#1192483). - nfsd: allow lock state ids to be revoked and then freed (bsc#1192483). - nfsd: allow open state ids to be revoked and then freed (bsc#1192483). - nfsd: do not admin-revoke NSv4.0 state ids (bsc#1192483). - nfsd: prepare for supporting admin-revocation of state (bsc#1192483). - nvme-core: use list_add_tail_rcu instead of list_add_tail for nvme_init_ns_head (git-fixes). - nvme-fabrics: avoid double completions in nvmf_fail_nonready_command (git-fixes). - nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts() (bsc#1195012). - nvme-fabrics: ignore invalid fast_io_fail_tmo values (git-fixes). - nvme-fabrics: remove superfluous nvmf_host_put in nvmf_parse_options (git-fixes). - nvme-multipath: fix ANA state updates when a namespace is not present (git-fixes). - nvme-tcp: fix data digest pointer calculation (git-fixes). - nvme-tcp: fix incorrect h2cdata pdu offset accounting (git-fixes). - nvme-tcp: fix memory leak when freeing a queue (git-fixes). - nvme-tcp: fix possible use-after-completion (git-fixes). - nvme-tcp: validate R2T PDU in nvme_tcp_handle_r2t() (git-fixes). - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (git-fixes). - nvme: do not return an error from nvme_configure_metadata (git-fixes). - nvme: fix use after free when disconnecting a reconnecting ctrl (git-fixes). - nvme: introduce a nvme_host_path_error helper (git-fixes). - nvme: let namespace probing continue for unsupported features (git-fixes). - nvme: refactor ns->ctrl by request (git-fixes). - pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line (git-fixes). - pinctrl: intel: fix unexpected interrupt (git-fixes). - powerpc/64: Move paca allocation later in boot (bsc#1190812). - powerpc/64s: Fix debugfs_simple_attr.cocci warnings (bsc#1157038 bsc#1157923 ltc#182612 git-fixes). - powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending (bsc#1156395). - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" (bsc#1195995 ltc#196394). - powerpc/pseries: read the lpar name from the firmware (bsc#1187716 ltc#193451). - powerpc: Set crashkernel offset to mid of RMA region (bsc#1190812). - powerpc: add link stack flush mitigation status in debugfs (bsc#1157038 bsc#1157923 ltc#182612 git-fixes). - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (git-fixes). - rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev (git-fixes). - s390/AP: support new dynamic AP bus size limit (jsc#SLE-20807). - s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (git-fixes). - s390/bpf: Fix optimizing out zero-extensions (git-fixes). - s390/cio: make ccw_device_dma_* more robust (bsc#1193243 LTC#195549). - s390/cio: verify the driver availability for path_event call (bsc#1195928 LTC#196418). - s390/cpumf: Support for CPU Measurement Facility CSVN 7 (bsc#1195081 LTC#196088). - s390/cpumf: Support for CPU Measurement Sampling Facility LS bit (bsc#1195081 LTC#196088). - s390/pci: add s390_iommu_aperture kernel parameter (bsc#1193233 LTC#195540). - s390/pci: move pseudo-MMIO to prevent MIO overlap (bsc#1194967 LTC#196028). - s390/protvirt: fix error return code in uv_info_init() (jsc#SLE-22135). - s390/sclp: fix Secure-IPL facility detection (bsc#1191741 LTC#194816). - s390/uv: add prot virt guest/host indication files (jsc#SLE-22135). - s390/uv: fix prot virt host indication compilation (jsc#SLE-22135). - scripts/dtc: only append to HOST_EXTRACFLAGS instead of overwriting (git-fixes). - scsi: core: Add a new error code DID_TRANSPORT_MARGINAL in scsi.h (bsc#1195506). - scsi: core: Add limitless cmd retry support (bsc#1195506). - scsi: core: No retries on abort success (bsc#1195506). - scsi: kABI fix for 'eh_should_retry_cmd' (bsc#1195506). - scsi: lpfc: Add support for eh_should_retry_cmd() (bsc#1195506). - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (bsc#1189126). - scsi: qla2xxx: Add devids and conditionals for 28xx (bsc#1195823). - scsi: qla2xxx: Add marginal path handling support (bsc#1195506). - scsi: qla2xxx: Add ql2xnvme_queues module param to configure number of NVMe queues (bsc#1195823). - scsi: qla2xxx: Add qla2x00_async_done() for async routines (bsc#1195823). - scsi: qla2xxx: Add retry for exec firmware (bsc#1195823). - scsi: qla2xxx: Check for firmware dump already collected (bsc#1195823). - scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters (bsc#1195823). - scsi: qla2xxx: Fix device reconnect in loop topology (bsc#1195823). - scsi: qla2xxx: Fix premature hw access after PCI error (bsc#1195823). - scsi: qla2xxx: Fix scheduling while atomic (bsc#1195823). - scsi: qla2xxx: Fix stuck session in gpdb (bsc#1195823). - scsi: qla2xxx: Fix unmap of already freed sgl (bsc#1195823). - scsi: qla2xxx: Fix warning for missing error code (bsc#1195823). - scsi: qla2xxx: Fix warning message due to adisc being flushed (bsc#1195823). - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter (bsc#1195823). - scsi: qla2xxx: Implement ref count for SRB (bsc#1195823). - scsi: qla2xxx: Refactor asynchronous command initialization (bsc#1195823). - scsi: qla2xxx: Remove a declaration (bsc#1195823). - scsi: qla2xxx: Remove unused qla_sess_op_cmd_list from scsi_qla_host_t (bsc#1195823). - scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (bsc#1195823). - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (bsc#1195823). - scsi: qla2xxx: Update version to 10.02.07.200-k (bsc#1195823). - scsi: qla2xxx: Update version to 10.02.07.300-k (bsc#1195823). - scsi: qla2xxx: edif: Fix clang warning (bsc#1195823). - scsi: qla2xxx: edif: Fix inconsistent check of db_flags (bsc#1195823). - scsi: qla2xxx: edif: Reduce connection thrash (bsc#1195823). - scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe (bsc#1195823). - scsi: qla2xxx: edif: Tweak trace message (bsc#1195823). - scsi: scsi_transport_fc: Add a new rport state FC_PORTSTATE_MARGINAL (bsc#1195506). - scsi: scsi_transport_fc: Add store capability to rport port_state in sysfs (bsc#1195506). - scsi: target: iscsi: Fix cmd abort fabric stop race (bsc#1195286). - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices (bsc#1195378 LTC#196244). - scsi_transport_fc: kabi fix blank out FC_PORTSTATE_MARGINAL (bsc#1195506). - spi: bcm-qspi: check for valid cs before applying chip select (git-fixes). - spi: mediatek: Avoid NULL pointer crash in interrupt (git-fixes). - spi: meson-spicc: add IRQ check in meson_spicc_probe (git-fixes). - staging/fbtft: Fix backlight (git-fixes). - staging: fbtft: Fix error path in fbtft_driver_module_init() (git-fixes). - tracing: Do not inc err_log entry count if entry allocation fails (git-fixes). - tracing: Dump stacktrace trigger to the corresponding instance (git-fixes). - tracing: Fix smatch warning for null glob in event_hist_trigger_parse() (git-fixes). - tracing: Have traceon and traceoff trigger honor the instance (git-fixes). - tracing: Propagate is_signed to expression (git-fixes). - tty: Add support for Brainboxes UC cards (git-fixes). - udf: Fix NULL ptr deref when converting from inline format (bsc#1195476). - udf: Restore i_lenAlloc when inode expansion fails (bsc#1195477). - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge (git-fixes). - usb: dwc2: Fix NULL qh in dwc2_queue_transaction (git-fixes). - usb: dwc2: gadget: do not try to disable ep0 in dwc2_hsotg_suspend (git-fixes). - usb: dwc3: do not set gadget->is_otg flag (git-fixes). - usb: dwc3: gadget: Prevent core from processing stale TRBs (git-fixes). - usb: f_fs: Fix use-after-free for epfile (git-fixes). - usb: gadget: f_uac2: Define specific wTerminalType (git-fixes). - usb: gadget: rndis: check size of RNDIS_MSG_SET command (git-fixes). - usb: gadget: s3c: remove unused 'udc' variable (git-fixes). - usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition (git-fixes). - usb: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes). - usb: ulpi: Call of_node_put correctly (git-fixes). - usb: ulpi: Move of_node_put to ulpi_dev_release (git-fixes). - xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-755=1 Package List: - openSUSE Leap 15.3 (x86_64): cluster-md-kmp-azure-5.3.18-150300.38.47.1 cluster-md-kmp-azure-debuginfo-5.3.18-150300.38.47.1 dlm-kmp-azure-5.3.18-150300.38.47.1 dlm-kmp-azure-debuginfo-5.3.18-150300.38.47.1 gfs2-kmp-azure-5.3.18-150300.38.47.1 gfs2-kmp-azure-debuginfo-5.3.18-150300.38.47.1 kernel-azure-5.3.18-150300.38.47.1 kernel-azure-debuginfo-5.3.18-150300.38.47.1 kernel-azure-debugsource-5.3.18-150300.38.47.1 kernel-azure-devel-5.3.18-150300.38.47.1 kernel-azure-devel-debuginfo-5.3.18-150300.38.47.1 kernel-azure-extra-5.3.18-150300.38.47.1 kernel-azure-extra-debuginfo-5.3.18-150300.38.47.1 kernel-azure-livepatch-devel-5.3.18-150300.38.47.1 kernel-azure-optional-5.3.18-150300.38.47.1 kernel-azure-optional-debuginfo-5.3.18-150300.38.47.1 kernel-syms-azure-5.3.18-150300.38.47.1 kselftests-kmp-azure-5.3.18-150300.38.47.1 kselftests-kmp-azure-debuginfo-5.3.18-150300.38.47.1 ocfs2-kmp-azure-5.3.18-150300.38.47.1 ocfs2-kmp-azure-debuginfo-5.3.18-150300.38.47.1 reiserfs-kmp-azure-5.3.18-150300.38.47.1 reiserfs-kmp-azure-debuginfo-5.3.18-150300.38.47.1 - openSUSE Leap 15.3 (noarch): kernel-devel-azure-5.3.18-150300.38.47.1 kernel-source-azure-5.3.18-150300.38.47.1 References: https://www.suse.com/security/cve/CVE-2022-0001.html https://www.suse.com/security/cve/CVE-2022-0002.html https://www.suse.com/security/cve/CVE-2022-0492.html https://www.suse.com/security/cve/CVE-2022-0516.html https://www.suse.com/security/cve/CVE-2022-0847.html https://www.suse.com/security/cve/CVE-2022-25375.html https://bugzilla.suse.com/1089644 https://bugzilla.suse.com/1154353 https://bugzilla.suse.com/1156395 https://bugzilla.suse.com/1157038 https://bugzilla.suse.com/1157923 https://bugzilla.suse.com/1176447 https://bugzilla.suse.com/1176940 https://bugzilla.suse.com/1178134 https://bugzilla.suse.com/1181147 https://bugzilla.suse.com/1181588 https://bugzilla.suse.com/1183872 https://bugzilla.suse.com/1187716 https://bugzilla.suse.com/1188404 https://bugzilla.suse.com/1189126 https://bugzilla.suse.com/1190812 https://bugzilla.suse.com/1190972 https://bugzilla.suse.com/1191580 https://bugzilla.suse.com/1191655 https://bugzilla.suse.com/1191741 https://bugzilla.suse.com/1192210 https://bugzilla.suse.com/1192483 https://bugzilla.suse.com/1193096 https://bugzilla.suse.com/1193233 https://bugzilla.suse.com/1193243 https://bugzilla.suse.com/1193787 https://bugzilla.suse.com/1194163 https://bugzilla.suse.com/1194967 https://bugzilla.suse.com/1195012 https://bugzilla.suse.com/1195081 https://bugzilla.suse.com/1195142 https://bugzilla.suse.com/1195352 https://bugzilla.suse.com/1195378 https://bugzilla.suse.com/1195476 https://bugzilla.suse.com/1195477 https://bugzilla.suse.com/1195478 https://bugzilla.suse.com/1195479 https://bugzilla.suse.com/1195480 https://bugzilla.suse.com/1195481 https://bugzilla.suse.com/1195482 https://bugzilla.suse.com/1195506 https://bugzilla.suse.com/1195516 https://bugzilla.suse.com/1195543 https://bugzilla.suse.com/1195668 https://bugzilla.suse.com/1195701 https://bugzilla.suse.com/1195798 https://bugzilla.suse.com/1195799 https://bugzilla.suse.com/1195823 https://bugzilla.suse.com/1195908 https://bugzilla.suse.com/1195928 https://bugzilla.suse.com/1195947 https://bugzilla.suse.com/1195957 https://bugzilla.suse.com/1195995 https://bugzilla.suse.com/1196195 https://bugzilla.suse.com/1196235 https://bugzilla.suse.com/1196339 https://bugzilla.suse.com/1196400 https://bugzilla.suse.com/1196403 https://bugzilla.suse.com/1196516 https://bugzilla.suse.com/1196584 https://bugzilla.suse.com/1196601 https://bugzilla.suse.com/1196612 https://bugzilla.suse.com/1196776

1 0

openSUSE-SU-2022:0760-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 08 Mar '22

08 Mar '22

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0760-1 Rating: important References: #1089644 #1154353 #1157038 #1157923 #1176447 #1176940 #1178134 #1181147 #1181588 #1183872 #1187716 #1188404 #1189126 #1190812 #1190972 #1191580 #1191655 #1191741 #1192210 #1192483 #1193096 #1193233 #1193243 #1193787 #1194163 #1194967 #1195012 #1195081 #1195286 #1195352 #1195378 #1195506 #1195516 #1195543 #1195668 #1195701 #1195798 #1195799 #1195823 #1195908 #1195928 #1195947 #1195957 #1195995 #1196195 #1196235 #1196339 #1196373 #1196400 #1196403 #1196516 #1196584 #1196585 #1196601 #1196612 #1196776 SLE-20807 SLE-22135 SLE-22494 Cross-References: CVE-2022-0001 CVE-2022-0002 CVE-2022-0492 CVE-2022-0516 CVE-2022-0847 CVE-2022-25375 CVSS scores: CVE-2022-0001 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0002 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0492 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0516 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0847 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25375 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-25375 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 6 vulnerabilities, contains three features and has 50 fixes is now available. Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named "Branch Target Injection" and "Intra-Mode Branch History Injection" are now mitigated. The following security bugs were fixed: - CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580). - CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580). - CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584). - CVE-2022-25375: The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory (bnc#1196235 ). - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543). - CVE-2022-0516: Fixed missing check in ioctl related to KVM in s390 allows kernel memory read/write (bsc#1195516). The following non-security bugs were fixed: - ACPI/IORT: Check node revision for PMCG resources (git-fixes). - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS GU603 (git-fixes). - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows (git-fixes). - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) (git-fixes). - ALSA: hda: Fix missing codec probe on Shenker Dock 15 (git-fixes). - ALSA: hda: Fix regression on forced probe mask option (git-fixes). - ASoC: Revert "ASoC: mediatek: Check for error clk pointer" (git-fixes). - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() (git-fixes). - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() (git-fixes). - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (git-fixes). - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (git-fixes). - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (git-fixes). - Align s390 NVME target options with other architectures (bsc#1188404, jsc#SLE-22494). - Drop PCI xgene patch that caused a regression for mxl4 (bsc#1195352) - EDAC/xgene: Fix deferred probing (bsc#1178134). - HID:Add support for UGTABLET WP5540 (git-fixes). - IB/cma: Do not send IGMP leaves for sendonly Multicast groups (git-fixes). - IB/hfi1: Fix AIP early init panic (jsc#SLE-13208). - KVM: remember position in kvm->vcpus array (bsc#1190972 LTC#194674). - NFSD: Fix the behavior of READ near OFFSET_MAX (bsc#1195957). - PM: hibernate: Remove register_nosave_region_late() (git-fixes). - PM: s2idle: ACPI: Fix wakeup interrupts handling (git-fixes). - RDMA/cma: Use correct address when leaving multicast group (bsc#1181147). - RDMA/core: Always release restrack object (git-fixes) - RDMA/cxgb4: check for ipv6 address properly while destroying listener (git-fixes) - RDMA/siw: Release xarray entry (git-fixes) - RDMA/ucma: Protect mc during concurrent multicast leaves (bsc#1181147). - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices (git-fixes). - USB: serial: cp210x: add CPI Bulk Coin Recycler id (git-fixes). - USB: serial: cp210x: add NCR Retail IO box id (git-fixes). - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 (git-fixes). - USB: serial: mos7840: remove duplicated 0xac24 device ID (git-fixes). - USB: serial: option: add ZTE MF286D modem (git-fixes). - ata: libata-core: Disable TRIM on M88V29 (git-fixes). - ax25: improve the incomplete fix to avoid UAF and NPD bugs (git-fixes). - blk-mq: always allow reserved allocation in hctx_may_queue (bsc#1193787). - blk-mq: avoid to iterate over stale request (bsc#1193787). - blk-mq: clear stale request in tags->rq before freeing one request pool (bsc#1193787). - blk-mq: clearing flush request reference in tags->rqs (bsc#1193787). - blk-mq: do not grab rq's refcount in blk_mq_check_expired() (bsc#1193787 git-fixes). - blk-mq: fix is_flush_rq (bsc#1193787 git-fixes). - blk-mq: fix kernel panic during iterating over flush request (bsc#1193787 git-fixes). - blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter (bsc#1193787). - blk-mq: mark flush request as IDLE in flush_end_io() (bsc#1193787). - blk-tag: Hide spin_lock (bsc#1193787). - block: avoid double io accounting for flush request (bsc#1193787). - block: do not send a rezise udev event for hidden block device (bsc#1193096). - block: mark flush request as IDLE when it is really finished (bsc#1193787). - bonding: pair enable_port with slave_arr_updates (git-fixes). - bpf: Adjust BTF log size limit (git-fixes). - bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) (git-fixes). - btrfs: check for missing device in btrfs_trim_fs (bsc#1195701). - btrfs: check worker before need_preemptive_reclaim (bsc#1196195). - btrfs: do not do preemptive flushing if the majority is global rsv (bsc#1196195). - btrfs: do not include the global rsv size in the preemptive used amount (bsc#1196195). - btrfs: handle preemptive delalloc flushing slightly differently (bsc#1196195). - btrfs: make sure SB_I_VERSION does not get unset by remount (bsc#1192210). - btrfs: only clamp the first time we have to start flushing (bsc#1196195). - btrfs: only ignore delalloc if delalloc is much smaller than ordered (bsc#1196195). - btrfs: reduce the preemptive flushing threshold to 90% (bsc#1196195). - btrfs: take into account global rsv in need_preemptive_reclaim (bsc#1196195). - btrfs: use the global rsv size in the preemptive thresh calculation (bsc#1196195). - ceph: properly put ceph_string reference after async create attempt (bsc#1195798). - ceph: set pool_ns in new inode layout for async creates (bsc#1195799). - drm/amdgpu: fix logic inversion in check (git-fixes). - drm/i915/gvt: Make DRM_I915_GVT depend on X86 (git-fixes). - drm/i915/gvt: clean up kernel-doc in gtt.c (git-fixes). - drm/i915/opregion: check port number bounds for SWSCI display power state (git-fixes). - drm/i915: Correctly populate use_sagv_wm for all pipes (git-fixes). - drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV (git-fixes). - drm/panel: simple: Assign data from panel_dpi_probe() correctly (git-fixes). - drm/radeon: Fix backlight control on iMac 12,1 (git-fixes). - drm/rockchip: dw_hdmi: Do not leave clock enabled in error case (git-fixes). - drm/rockchip: vop: Correct RK3399 VOP register fields (git-fixes). - drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd (git-fixes). - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer (git-fixes). - ext4: check for inconsistent extents between index and leaf block (bsc#1194163 bsc#1196339). - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (bsc#1194163 bsc#1196339). - ext4: prevent partial update of the extent blocks (bsc#1194163 bsc#1196339). - gve: Add RX context (bsc#1191655). - gve: Add a jumbo-frame device option (bsc#1191655). - gve: Add consumed counts to ethtool stats (bsc#1191655). - gve: Add optional metadata descriptor type GVE_TXD_MTD (bsc#1191655). - gve: Correct order of processing device options (bsc#1191655). - gve: Fix GFP flags when allocing pages (git-fixes). - gve: Fix off by one in gve_tx_timeout() (bsc#1191655). - gve: Implement packet continuation for RX (bsc#1191655). - gve: Implement suspend/resume/shutdown (bsc#1191655). - gve: Move the irq db indexes out of the ntfy block struct (bsc#1191655). - gve: Recording rx queue before sending to napi (bsc#1191655). - gve: Recover from queue stall due to missed IRQ (bsc#1191655). - gve: Update gve_free_queue_page_list signature (bsc#1191655). - gve: Use kvcalloc() instead of kvzalloc() (bsc#1191655). - gve: fix for null pointer dereference (bsc#1191655). - gve: fix the wrong AdminQ buffer queue index check (bsc#1176940). - gve: fix unmatched u64_stats_update_end() (bsc#1191655). - gve: remove memory barrier around seqno (bsc#1191655). - i2c: brcmstb: fix support for DSL and CM variants (git-fixes). - i40e: Fix for failed to init adminq while VF reset (git-fixes). - i40e: Fix issue when maximum queues is exceeded (git-fixes). - i40e: Fix queues reservation for XDP (git-fixes). - i40e: Increase delay to 1 s after global EMP reset (git-fixes). - i40e: fix unsigned stat widths (git-fixes). - ibmvnic: Allow queueing resets during probe (bsc#1196516 ltc#196391). - ibmvnic: clear fop when retrying probe (bsc#1196516 ltc#196391). - ibmvnic: complete init_done on transport events (bsc#1196516 ltc#196391). - ibmvnic: define flush_reset_queue helper (bsc#1196516 ltc#196391). - ibmvnic: do not release napi in __ibmvnic_open() (bsc#1195668 ltc#195811). - ibmvnic: free reset-work-item when flushing (bsc#1196516 ltc#196391). - ibmvnic: init init_done_rc earlier (bsc#1196516 ltc#196391). - ibmvnic: initialize rc before completing wait (bsc#1196516 ltc#196391). - ibmvnic: register netdev after init of adapter (bsc#1196516 ltc#196391). - ibmvnic: schedule failover only if vioctl fails (bsc#1196400 ltc#195815). - ice: fix IPIP and SIT TSO offload (git-fixes). - ice: fix an error code in ice_cfg_phy_fec() (jsc#SLE-12878). - ima: Allow template selection with ima_template[_fmt]= after ima_hash= (git-fixes). - ima: Do not print policy rule with inactive LSM labels (git-fixes). - ima: Remove ima_policy file before directory (git-fixes). - integrity: Make function integrity_add_key() static (git-fixes). - integrity: check the return value of audit_log_start() (git-fixes). - integrity: double check iint_cache was initialized (git-fixes). - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() (git-fixes). - iommu/amd: Remove useless irq affinity notifier (git-fixes). - iommu/amd: Restore GA log/tail pointer on host resume (git-fixes). - iommu/amd: X2apic mode: mask/unmask interrupts on suspend/resume (git-fixes). - iommu/amd: X2apic mode: re-enable after resume (git-fixes). - iommu/amd: X2apic mode: setup the INTX registers on mask/unmask (git-fixes). - iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure (git-fixes). - iommu/io-pgtable-arm: Fix table descriptor paddr formatting (git-fixes). - iommu/iova: Fix race between FQ timeout and teardown (git-fixes). - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() (git-fixes). - iwlwifi: fix use-after-free (git-fixes). - iwlwifi: pcie: fix locking when "HW not ready" (git-fixes). - iwlwifi: pcie: gen2: fix locking when "HW not ready" (git-fixes). - ixgbevf: Require large buffers for build_skb on 82599VF (git-fixes). - kABI fixup after adding vcpu_idx to struct kvm_cpu (bsc#1190972 LTC#194674). - kABI: Fix kABI for AMD IOMMU driver (git-fixes). - kabi: Hide changes to s390/AP structures (jsc#SLE-20807). - lib/iov_iter: initialize "flags" in new pipe_buffer (bsc#1196584). - libsubcmd: Fix use-after-free for realloc(..., 0) (git-fixes). - md/raid5: fix oops during stripe resizing (bsc#1181588). - misc: fastrpc: avoid double fput() on failed usercopy (git-fixes). - mmc: sdhci-of-esdhc: Check for error num after setting mask (git-fixes). - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status (git-fixes). - mtd: rawnand: gpmi: do not leak PM reference in error path (git-fixes). - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() (git-fixes). - net/ibmvnic: Cleanup workaround doing an EOI after partition migration (bsc#1089644 ltc#166495 ltc#165544 git-fixes). - net/mlx5e: Fix handling of wrong devices during bond netevent (jsc#SLE-15172). - net: macb: Align the dma and coherent dma masks (git-fixes). - net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE (bsc#1176447). - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs (git-fixes). - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs (git-fixes). - net: phy: marvell: configure RGMII delays for 88E1118 (git-fixes). - net: usb: qmi_wwan: Add support for Dell DW5829e (git-fixes). - nfp: flower: fix ida_idx not being released (bsc#1154353). - nfsd: allow delegation state ids to be revoked and then freed (bsc#1192483). - nfsd: allow lock state ids to be revoked and then freed (bsc#1192483). - nfsd: allow open state ids to be revoked and then freed (bsc#1192483). - nfsd: do not admin-revoke NSv4.0 state ids (bsc#1192483). - nfsd: prepare for supporting admin-revocation of state (bsc#1192483). - nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts() (bsc#1195012). - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (git-fixes). - nvme: do not return an error from nvme_configure_metadata (git-fixes). - nvme: let namespace probing continue for unsupported features (git-fixes). - powerpc/64: Move paca allocation later in boot (bsc#1190812). - powerpc/64s: Fix debugfs_simple_attr.cocci warnings (bsc#1157038 bsc#1157923 ltc#182612 git-fixes). - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" (bsc#1195995 ltc#196394). - powerpc/pseries: read the lpar name from the firmware (bsc#1187716 ltc#193451). - powerpc: Set crashkernel offset to mid of RMA region (bsc#1190812). - powerpc: add link stack flush mitigation status in debugfs (bsc#1157038 bsc#1157923 ltc#182612 git-fixes). - s390/AP: support new dynamic AP bus size limit (jsc#SLE-20807). - s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (git-fixes). - s390/bpf: Fix optimizing out zero-extensions (git-fixes). - s390/cio: make ccw_device_dma_* more robust (bsc#1193243 LTC#195549). - s390/cio: verify the driver availability for path_event call (bsc#1195928 LTC#196418). - s390/cpumf: Support for CPU Measurement Facility CSVN 7 (bsc#1195081 LTC#196088). - s390/cpumf: Support for CPU Measurement Sampling Facility LS bit (bsc#1195081 LTC#196088). - s390/pci: add s390_iommu_aperture kernel parameter (bsc#1193233 LTC#195540). - s390/pci: move pseudo-MMIO to prevent MIO overlap (bsc#1194967 LTC#196028). - s390/protvirt: fix error return code in uv_info_init() (jsc#SLE-22135). - s390/sclp: fix Secure-IPL facility detection (bsc#1191741 LTC#194816). - s390/uv: add prot virt guest/host indication files (jsc#SLE-22135). - s390/uv: fix prot virt host indication compilation (jsc#SLE-22135). - scsi: core: Add a new error code DID_TRANSPORT_MARGINAL in scsi.h (bsc#1195506). - scsi: core: Add limitless cmd retry support (bsc#1195506). - scsi: core: No retries on abort success (bsc#1195506). - scsi: kABI fix for 'eh_should_retry_cmd' (bsc#1195506). - scsi: lpfc: Add support for eh_should_retry_cmd() (bsc#1195506). - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (bsc#1189126). - scsi: qla2xxx: Add devids and conditionals for 28xx (bsc#1195823). - scsi: qla2xxx: Add marginal path handling support (bsc#1195506). - scsi: qla2xxx: Add ql2xnvme_queues module param to configure number of NVMe queues (bsc#1195823). - scsi: qla2xxx: Add qla2x00_async_done() for async routines (bsc#1195823). - scsi: qla2xxx: Add retry for exec firmware (bsc#1195823). - scsi: qla2xxx: Check for firmware dump already collected (bsc#1195823). - scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters (bsc#1195823). - scsi: qla2xxx: Fix device reconnect in loop topology (bsc#1195823). - scsi: qla2xxx: Fix premature hw access after PCI error (bsc#1195823). - scsi: qla2xxx: Fix scheduling while atomic (bsc#1195823). - scsi: qla2xxx: Fix stuck session in gpdb (bsc#1195823). - scsi: qla2xxx: Fix unmap of already freed sgl (bsc#1195823). - scsi: qla2xxx: Fix warning for missing error code (bsc#1195823). - scsi: qla2xxx: Fix warning message due to adisc being flushed (bsc#1195823). - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter (bsc#1195823). - scsi: qla2xxx: Implement ref count for SRB (bsc#1195823). - scsi: qla2xxx: Refactor asynchronous command initialization (bsc#1195823). - scsi: qla2xxx: Remove a declaration (bsc#1195823). - scsi: qla2xxx: Remove unused qla_sess_op_cmd_list from scsi_qla_host_t (bsc#1195823). - scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (bsc#1195823). - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (bsc#1195823). - scsi: qla2xxx: Update version to 10.02.07.200-k (bsc#1195823). - scsi: qla2xxx: Update version to 10.02.07.300-k (bsc#1195823). - scsi: qla2xxx: edif: Fix clang warning (bsc#1195823). - scsi: qla2xxx: edif: Fix inconsistent check of db_flags (bsc#1195823). - scsi: qla2xxx: edif: Reduce connection thrash (bsc#1195823). - scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe (bsc#1195823). - scsi: qla2xxx: edif: Tweak trace message (bsc#1195823). - scsi: scsi_transport_fc: Add a new rport state FC_PORTSTATE_MARGINAL (bsc#1195506). - scsi: scsi_transport_fc: Add store capability to rport port_state in sysfs (bsc#1195506). - scsi: target: iscsi: Fix cmd abort fabric stop race (bsc#1195286). - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices (bsc#1195378 LTC#196244). - scsi_transport_fc: kabi fix blank out FC_PORTSTATE_MARGINAL (bsc#1195506). - staging/fbtft: Fix backlight (git-fixes). - staging: fbtft: Fix error path in fbtft_driver_module_init() (git-fixes). - tracing: Do not inc err_log entry count if entry allocation fails (git-fixes). - tracing: Dump stacktrace trigger to the corresponding instance (git-fixes). - tracing: Fix smatch warning for null glob in event_hist_trigger_parse() (git-fixes). - tracing: Have traceon and traceoff trigger honor the instance (git-fixes). - tracing: Propagate is_signed to expression (git-fixes). - usb: dwc2: Fix NULL qh in dwc2_queue_transaction (git-fixes). - usb: dwc2: gadget: do not try to disable ep0 in dwc2_hsotg_suspend (git-fixes). - usb: dwc3: do not set gadget->is_otg flag (git-fixes). - usb: dwc3: gadget: Prevent core from processing stale TRBs (git-fixes). - usb: f_fs: Fix use-after-free for epfile (git-fixes). - usb: gadget: f_uac2: Define specific wTerminalType (git-fixes). - usb: gadget: rndis: check size of RNDIS_MSG_SET command (git-fixes). - usb: gadget: s3c: remove unused 'udc' variable (git-fixes). - usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition (git-fixes). - usb: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes). - usb: ulpi: Call of_node_put correctly (git-fixes). - usb: ulpi: Move of_node_put to ulpi_dev_release (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-760=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-760=1 Package List: - openSUSE Leap 15.4 (aarch64 x86_64): cluster-md-kmp-preempt-5.3.18-150300.59.54.1 cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 dlm-kmp-preempt-5.3.18-150300.59.54.1 dlm-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 gfs2-kmp-preempt-5.3.18-150300.59.54.1 gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 kernel-preempt-5.3.18-150300.59.54.1 kernel-preempt-debuginfo-5.3.18-150300.59.54.1 kernel-preempt-debugsource-5.3.18-150300.59.54.1 kernel-preempt-devel-5.3.18-150300.59.54.1 kernel-preempt-devel-debuginfo-5.3.18-150300.59.54.1 kernel-preempt-extra-5.3.18-150300.59.54.1 kernel-preempt-extra-debuginfo-5.3.18-150300.59.54.1 kernel-preempt-livepatch-devel-5.3.18-150300.59.54.1 kernel-preempt-optional-5.3.18-150300.59.54.1 kernel-preempt-optional-debuginfo-5.3.18-150300.59.54.1 kselftests-kmp-preempt-5.3.18-150300.59.54.1 kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 ocfs2-kmp-preempt-5.3.18-150300.59.54.1 ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 reiserfs-kmp-preempt-5.3.18-150300.59.54.1 reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 - openSUSE Leap 15.4 (aarch64): dtb-al-5.3.18-150300.59.54.1 dtb-zte-5.3.18-150300.59.54.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cluster-md-kmp-default-5.3.18-150300.59.54.1 cluster-md-kmp-default-debuginfo-5.3.18-150300.59.54.1 dlm-kmp-default-5.3.18-150300.59.54.1 dlm-kmp-default-debuginfo-5.3.18-150300.59.54.1 gfs2-kmp-default-5.3.18-150300.59.54.1 gfs2-kmp-default-debuginfo-5.3.18-150300.59.54.1 kernel-default-5.3.18-150300.59.54.1 kernel-default-base-5.3.18-150300.59.54.1.150300.18.35.3 kernel-default-base-rebuild-5.3.18-150300.59.54.1.150300.18.35.3 kernel-default-debuginfo-5.3.18-150300.59.54.1 kernel-default-debugsource-5.3.18-150300.59.54.1 kernel-default-devel-5.3.18-150300.59.54.1 kernel-default-devel-debuginfo-5.3.18-150300.59.54.1 kernel-default-extra-5.3.18-150300.59.54.1 kernel-default-extra-debuginfo-5.3.18-150300.59.54.1 kernel-default-livepatch-5.3.18-150300.59.54.1 kernel-default-livepatch-devel-5.3.18-150300.59.54.1 kernel-default-optional-5.3.18-150300.59.54.1 kernel-default-optional-debuginfo-5.3.18-150300.59.54.1 kernel-obs-build-5.3.18-150300.59.54.1 kernel-obs-build-debugsource-5.3.18-150300.59.54.1 kernel-obs-qa-5.3.18-150300.59.54.1 kernel-syms-5.3.18-150300.59.54.1 kselftests-kmp-default-5.3.18-150300.59.54.1 kselftests-kmp-default-debuginfo-5.3.18-150300.59.54.1 ocfs2-kmp-default-5.3.18-150300.59.54.1 ocfs2-kmp-default-debuginfo-5.3.18-150300.59.54.1 reiserfs-kmp-default-5.3.18-150300.59.54.1 reiserfs-kmp-default-debuginfo-5.3.18-150300.59.54.1 - openSUSE Leap 15.3 (aarch64 x86_64): cluster-md-kmp-preempt-5.3.18-150300.59.54.1 cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 dlm-kmp-preempt-5.3.18-150300.59.54.1 dlm-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 gfs2-kmp-preempt-5.3.18-150300.59.54.1 gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 kernel-preempt-5.3.18-150300.59.54.1 kernel-preempt-debuginfo-5.3.18-150300.59.54.1 kernel-preempt-debugsource-5.3.18-150300.59.54.1 kernel-preempt-devel-5.3.18-150300.59.54.1 kernel-preempt-devel-debuginfo-5.3.18-150300.59.54.1 kernel-preempt-extra-5.3.18-150300.59.54.1 kernel-preempt-extra-debuginfo-5.3.18-150300.59.54.1 kernel-preempt-livepatch-devel-5.3.18-150300.59.54.1 kernel-preempt-optional-5.3.18-150300.59.54.1 kernel-preempt-optional-debuginfo-5.3.18-150300.59.54.1 kselftests-kmp-preempt-5.3.18-150300.59.54.1 kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 ocfs2-kmp-preempt-5.3.18-150300.59.54.1 ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 reiserfs-kmp-preempt-5.3.18-150300.59.54.1 reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.54.1 - openSUSE Leap 15.3 (ppc64le x86_64): kernel-debug-5.3.18-150300.59.54.1 kernel-debug-debuginfo-5.3.18-150300.59.54.1 kernel-debug-debugsource-5.3.18-150300.59.54.1 kernel-debug-devel-5.3.18-150300.59.54.1 kernel-debug-devel-debuginfo-5.3.18-150300.59.54.1 kernel-debug-livepatch-devel-5.3.18-150300.59.54.1 kernel-kvmsmall-5.3.18-150300.59.54.1 kernel-kvmsmall-debuginfo-5.3.18-150300.59.54.1 kernel-kvmsmall-debugsource-5.3.18-150300.59.54.1 kernel-kvmsmall-devel-5.3.18-150300.59.54.1 kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.54.1 kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.54.1 - openSUSE Leap 15.3 (aarch64): cluster-md-kmp-64kb-5.3.18-150300.59.54.1 cluster-md-kmp-64kb-debuginfo-5.3.18-150300.59.54.1 dlm-kmp-64kb-5.3.18-150300.59.54.1 dlm-kmp-64kb-debuginfo-5.3.18-150300.59.54.1 dtb-al-5.3.18-150300.59.54.1 dtb-allwinner-5.3.18-150300.59.54.1 dtb-altera-5.3.18-150300.59.54.1 dtb-amd-5.3.18-150300.59.54.1 dtb-amlogic-5.3.18-150300.59.54.1 dtb-apm-5.3.18-150300.59.54.1 dtb-arm-5.3.18-150300.59.54.1 dtb-broadcom-5.3.18-150300.59.54.1 dtb-cavium-5.3.18-150300.59.54.1 dtb-exynos-5.3.18-150300.59.54.1 dtb-freescale-5.3.18-150300.59.54.1 dtb-hisilicon-5.3.18-150300.59.54.1 dtb-lg-5.3.18-150300.59.54.1 dtb-marvell-5.3.18-150300.59.54.1 dtb-mediatek-5.3.18-150300.59.54.1 dtb-nvidia-5.3.18-150300.59.54.1 dtb-qcom-5.3.18-150300.59.54.1 dtb-renesas-5.3.18-150300.59.54.1 dtb-rockchip-5.3.18-150300.59.54.1 dtb-socionext-5.3.18-150300.59.54.1 dtb-sprd-5.3.18-150300.59.54.1 dtb-xilinx-5.3.18-150300.59.54.1 dtb-zte-5.3.18-150300.59.54.1 gfs2-kmp-64kb-5.3.18-150300.59.54.1 gfs2-kmp-64kb-debuginfo-5.3.18-150300.59.54.1 kernel-64kb-5.3.18-150300.59.54.1 kernel-64kb-debuginfo-5.3.18-150300.59.54.1 kernel-64kb-debugsource-5.3.18-150300.59.54.1 kernel-64kb-devel-5.3.18-150300.59.54.1 kernel-64kb-devel-debuginfo-5.3.18-150300.59.54.1 kernel-64kb-extra-5.3.18-150300.59.54.1 kernel-64kb-extra-debuginfo-5.3.18-150300.59.54.1 kernel-64kb-livepatch-devel-5.3.18-150300.59.54.1 kernel-64kb-optional-5.3.18-150300.59.54.1 kernel-64kb-optional-debuginfo-5.3.18-150300.59.54.1 kselftests-kmp-64kb-5.3.18-150300.59.54.1 kselftests-kmp-64kb-debuginfo-5.3.18-150300.59.54.1 ocfs2-kmp-64kb-5.3.18-150300.59.54.1 ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.54.1 reiserfs-kmp-64kb-5.3.18-150300.59.54.1 reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.54.1 - openSUSE Leap 15.3 (noarch): kernel-devel-5.3.18-150300.59.54.1 kernel-docs-5.3.18-150300.59.54.1 kernel-docs-html-5.3.18-150300.59.54.1 kernel-macros-5.3.18-150300.59.54.1 kernel-source-5.3.18-150300.59.54.1 kernel-source-vanilla-5.3.18-150300.59.54.1 - openSUSE Leap 15.3 (s390x): kernel-zfcpdump-5.3.18-150300.59.54.1 kernel-zfcpdump-debuginfo-5.3.18-150300.59.54.1 kernel-zfcpdump-debugsource-5.3.18-150300.59.54.1 References: https://www.suse.com/security/cve/CVE-2022-0001.html https://www.suse.com/security/cve/CVE-2022-0002.html https://www.suse.com/security/cve/CVE-2022-0492.html https://www.suse.com/security/cve/CVE-2022-0516.html https://www.suse.com/security/cve/CVE-2022-0847.html https://www.suse.com/security/cve/CVE-2022-25375.html https://bugzilla.suse.com/1089644 https://bugzilla.suse.com/1154353 https://bugzilla.suse.com/1157038 https://bugzilla.suse.com/1157923 https://bugzilla.suse.com/1176447 https://bugzilla.suse.com/1176940 https://bugzilla.suse.com/1178134 https://bugzilla.suse.com/1181147 https://bugzilla.suse.com/1181588 https://bugzilla.suse.com/1183872 https://bugzilla.suse.com/1187716 https://bugzilla.suse.com/1188404 https://bugzilla.suse.com/1189126 https://bugzilla.suse.com/1190812 https://bugzilla.suse.com/1190972 https://bugzilla.suse.com/1191580 https://bugzilla.suse.com/1191655 https://bugzilla.suse.com/1191741 https://bugzilla.suse.com/1192210 https://bugzilla.suse.com/1192483 https://bugzilla.suse.com/1193096 https://bugzilla.suse.com/1193233 https://bugzilla.suse.com/1193243 https://bugzilla.suse.com/1193787 https://bugzilla.suse.com/1194163 https://bugzilla.suse.com/1194967 https://bugzilla.suse.com/1195012 https://bugzilla.suse.com/1195081 https://bugzilla.suse.com/1195286 https://bugzilla.suse.com/1195352 https://bugzilla.suse.com/1195378 https://bugzilla.suse.com/1195506 https://bugzilla.suse.com/1195516 https://bugzilla.suse.com/1195543 https://bugzilla.suse.com/1195668 https://bugzilla.suse.com/1195701 https://bugzilla.suse.com/1195798 https://bugzilla.suse.com/1195799 https://bugzilla.suse.com/1195823 https://bugzilla.suse.com/1195908 https://bugzilla.suse.com/1195928 https://bugzilla.suse.com/1195947 https://bugzilla.suse.com/1195957 https://bugzilla.suse.com/1195995 https://bugzilla.suse.com/1196195 https://bugzilla.suse.com/1196235 https://bugzilla.suse.com/1196339 https://bugzilla.suse.com/1196373 https://bugzilla.suse.com/1196400 https://bugzilla.suse.com/1196403 https://bugzilla.suse.com/1196516 https://bugzilla.suse.com/1196584 https://bugzilla.suse.com/1196585 https://bugzilla.suse.com/1196601 https://bugzilla.suse.com/1196612 https://bugzilla.suse.com/1196776

1 0

openSUSE-OU-2022:0752-1: moderate: Optional update for SUSE Package Hub
by maintenance＠opensuse.org 08 Mar '22

08 Mar '22

openSUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0752-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: babl Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-752=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): babl-debugsource-0.1.72-3.2.1 babl-devel-0.1.72-3.2.1 libbabl-0_1-0-0.1.72-3.2.1 libbabl-0_1-0-debuginfo-0.1.72-3.2.1 typelib-1_0-Babl-0_1-0.1.72-3.2.1 - openSUSE Leap 15.3 (x86_64): libbabl-0_1-0-32bit-0.1.72-3.2.1 libbabl-0_1-0-32bit-debuginfo-0.1.72-3.2.1 References:

1 0

openSUSE-SU-2022:0743-1: important: Security update for cyrus-sasl
by opensuse-security＠opensuse.org 08 Mar '22

08 Mar '22

openSUSE Security Update: Security update for cyrus-sasl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0743-1 Rating: important References: #1194265 #1196036 Cross-References: CVE-2022-24407 CVSS scores: CVE-2022-24407 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24407 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for cyrus-sasl fixes the following issues: - CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036). The following non-security bugs were fixed: - postfix: sasl authentication with password fails (bsc#1194265). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-743=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-743=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cyrus-sasl-2.1.27-150300.4.6.1 cyrus-sasl-bdb-2.1.27-150300.4.6.1 cyrus-sasl-bdb-crammd5-2.1.27-150300.4.6.1 cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-debugsource-2.1.27-150300.4.6.1 cyrus-sasl-bdb-devel-2.1.27-150300.4.6.1 cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.6.1 cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-gs2-2.1.27-150300.4.6.1 cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-gssapi-2.1.27-150300.4.6.1 cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-ntlm-2.1.27-150300.4.6.1 cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-otp-2.1.27-150300.4.6.1 cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-plain-2.1.27-150300.4.6.1 cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-scram-2.1.27-150300.4.6.1 cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-crammd5-2.1.27-150300.4.6.1 cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-debugsource-2.1.27-150300.4.6.1 cyrus-sasl-devel-2.1.27-150300.4.6.1 cyrus-sasl-digestmd5-2.1.27-150300.4.6.1 cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-gs2-2.1.27-150300.4.6.1 cyrus-sasl-gs2-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-gssapi-2.1.27-150300.4.6.1 cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-bdb-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-bdb-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-ntlm-2.1.27-150300.4.6.1 cyrus-sasl-ntlm-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-otp-2.1.27-150300.4.6.1 cyrus-sasl-otp-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-plain-2.1.27-150300.4.6.1 cyrus-sasl-plain-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.6.1 cyrus-sasl-scram-2.1.27-150300.4.6.1 cyrus-sasl-scram-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.6.1 libsasl2-3-2.1.27-150300.4.6.1 libsasl2-3-debuginfo-2.1.27-150300.4.6.1 - openSUSE Leap 15.4 (x86_64): cyrus-sasl-32bit-2.1.27-150300.4.6.1 cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-crammd5-32bit-2.1.27-150300.4.6.1 cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-devel-32bit-2.1.27-150300.4.6.1 cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.6.1 cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-gssapi-32bit-2.1.27-150300.4.6.1 cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-32bit-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-otp-32bit-2.1.27-150300.4.6.1 cyrus-sasl-otp-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-plain-32bit-2.1.27-150300.4.6.1 cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-32bit-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-32bit-debuginfo-2.1.27-150300.4.6.1 libsasl2-3-32bit-2.1.27-150300.4.6.1 libsasl2-3-32bit-debuginfo-2.1.27-150300.4.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cyrus-sasl-2.1.27-150300.4.6.1 cyrus-sasl-bdb-2.1.27-150300.4.6.1 cyrus-sasl-bdb-crammd5-2.1.27-150300.4.6.1 cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-debugsource-2.1.27-150300.4.6.1 cyrus-sasl-bdb-devel-2.1.27-150300.4.6.1 cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.6.1 cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-gs2-2.1.27-150300.4.6.1 cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-gssapi-2.1.27-150300.4.6.1 cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-ntlm-2.1.27-150300.4.6.1 cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-otp-2.1.27-150300.4.6.1 cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-plain-2.1.27-150300.4.6.1 cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-bdb-scram-2.1.27-150300.4.6.1 cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-crammd5-2.1.27-150300.4.6.1 cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-debugsource-2.1.27-150300.4.6.1 cyrus-sasl-devel-2.1.27-150300.4.6.1 cyrus-sasl-digestmd5-2.1.27-150300.4.6.1 cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-gs2-2.1.27-150300.4.6.1 cyrus-sasl-gs2-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-gssapi-2.1.27-150300.4.6.1 cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-bdb-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-bdb-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-ntlm-2.1.27-150300.4.6.1 cyrus-sasl-ntlm-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-otp-2.1.27-150300.4.6.1 cyrus-sasl-otp-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-plain-2.1.27-150300.4.6.1 cyrus-sasl-plain-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.6.1 cyrus-sasl-scram-2.1.27-150300.4.6.1 cyrus-sasl-scram-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.6.1 libsasl2-3-2.1.27-150300.4.6.1 libsasl2-3-debuginfo-2.1.27-150300.4.6.1 - openSUSE Leap 15.3 (x86_64): cyrus-sasl-32bit-2.1.27-150300.4.6.1 cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-crammd5-32bit-2.1.27-150300.4.6.1 cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-devel-32bit-2.1.27-150300.4.6.1 cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.6.1 cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-gssapi-32bit-2.1.27-150300.4.6.1 cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-32bit-2.1.27-150300.4.6.1 cyrus-sasl-ldap-auxprop-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-otp-32bit-2.1.27-150300.4.6.1 cyrus-sasl-otp-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-plain-32bit-2.1.27-150300.4.6.1 cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-32bit-2.1.27-150300.4.6.1 cyrus-sasl-sqlauxprop-32bit-debuginfo-2.1.27-150300.4.6.1 libsasl2-3-32bit-2.1.27-150300.4.6.1 libsasl2-3-32bit-debuginfo-2.1.27-150300.4.6.1 References: https://www.suse.com/security/cve/CVE-2022-24407.html https://bugzilla.suse.com/1194265 https://bugzilla.suse.com/1196036

1 0

openSUSE-SU-2022:0077-1: important: Security update for opera
by opensuse-security＠opensuse.org 07 Mar '22

07 Mar '22

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0077-1 Rating: important References: Cross-References: CVE-2022-0603 CVE-2022-0604 CVE-2022-0605 CVE-2022-0606 CVE-2022-0607 CVE-2022-0608 CVE-2022-0609 CVE-2022-0610 Affected Products: openSUSE Leap 15.3:NonFree ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for opera fixes the following issues: Opera was updated to 84.0.4316.21: - CHR-8762 Update chromium on desktop-stable-98-4316 to 98.0.4758.102 - DNA-97333 ��Add a site�� label on start page tile barely visible - DNA-97691 Opera 84 translations - DNA-97767 Wrong string in FR - DNA-97855 Crash at ScopedProfileKeepAlive::~ScopedProfileKeepAlive() - DNA-97982 Enable #snap-upstream-implementation on all streams - The update to chromium 98.0.4758.102 fixes following issues: CVE-2022-0603, CVE-2022-0604, CVE-2022-0605, CVE-2022-0606, CVE-2022-0607, CVE-2022-0608, CVE-2022-0609, CVE-2022-0610 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3:NonFree: zypper in -t patch openSUSE-2022-77=1 Package List: - openSUSE Leap 15.3:NonFree (x86_64): opera-84.0.4316.21-lp153.2.39.1 References: https://www.suse.com/security/cve/CVE-2022-0603.html https://www.suse.com/security/cve/CVE-2022-0604.html https://www.suse.com/security/cve/CVE-2022-0605.html https://www.suse.com/security/cve/CVE-2022-0606.html https://www.suse.com/security/cve/CVE-2022-0607.html https://www.suse.com/security/cve/CVE-2022-0608.html https://www.suse.com/security/cve/CVE-2022-0609.html https://www.suse.com/security/cve/CVE-2022-0610.html

1 0

openSUSE-RU-2022:0740-1: moderate: Recommended update for supportutils-plugin-cloud-init
by maintenance＠opensuse.org 07 Mar '22

07 Mar '22

openSUSE Recommended Update: Recommended update for supportutils-plugin-cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0740-1 Rating: moderate References: #1195961 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for supportutils-plugin-cloud-init contains the following fixes: - Script name stripped for dashes and dots, which made the execution fail. (bsc#1195961) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-740=1 Package List: - openSUSE Leap 15.3 (noarch): supportutils-plugin-cloud-init-1.1-3.6.1 References: https://bugzilla.suse.com/1195961

1 0

openSUSE-RU-2022:0076-1: moderate: Recommended update for python-magic-wormhole
by maintenance＠opensuse.org 07 Mar '22

07 Mar '22

openSUSE Recommended Update: Recommended update for python-magic-wormhole ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0076-1 Rating: moderate References: #1195072 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-magic-wormhole fixes the following issues: - Module ipaddress is part of the standard library now (boo#1195072). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-76=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): python2-magic-wormhole-0.10.5-bp153.2.3.1 python3-magic-wormhole-0.10.5-bp153.2.3.1 References: https://bugzilla.suse.com/1195072

1 0

openSUSE-SU-2022:0075-1: important: Security update for chromium
by opensuse-security＠opensuse.org 07 Mar '22

07 Mar '22

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0075-1 Rating: important References: #1196641 Cross-References: CVE-2022-0789 CVE-2022-0790 CVE-2022-0791 CVE-2022-0792 CVE-2022-0793 CVE-2022-0794 CVE-2022-0795 CVE-2022-0796 CVE-2022-0797 CVE-2022-0798 CVE-2022-0799 CVE-2022-0800 CVE-2022-0801 CVE-2022-0802 CVE-2022-0803 CVE-2022-0804 CVE-2022-0805 CVE-2022-0806 CVE-2022-0807 CVE-2022-0808 CVE-2022-0809 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 99.0.4844.51 (boo#1196641) * CVE-2022-0789: Heap buffer overflow in ANGLE * CVE-2022-0790: Use after free in Cast UI * CVE-2022-0791: Use after free in Omnibox * CVE-2022-0792: Out of bounds read in ANGLE * CVE-2022-0793: Use after free in Views * CVE-2022-0794: Use after free in WebShare * CVE-2022-0795: Type Confusion in Blink Layout * CVE-2022-0796: Use after free in Media * CVE-2022-0797: Out of bounds memory access in Mojo * CVE-2022-0798: Use after free in MediaStream * CVE-2022-0799: Insufficient policy enforcement in Installer * CVE-2022-0800: Heap buffer overflow in Cast UI * CVE-2022-0801: Inappropriate implementation in HTML parser * CVE-2022-0802: Inappropriate implementation in Full screen mode * CVE-2022-0803: Inappropriate implementation in Permissions * CVE-2022-0804: Inappropriate implementation in Full screen mode * CVE-2022-0805: Use after free in Browser Switcher * CVE-2022-0806: Data leak in Canvas * CVE-2022-0807: Inappropriate implementation in Autofill * CVE-2022-0808: Use after free in Chrome OS Shell * CVE-2022-0809: Out of bounds memory access in WebXR Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-75=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-99.0.4844.51-bp153.2.66.1 chromium-99.0.4844.51-bp153.2.66.1 References: https://www.suse.com/security/cve/CVE-2022-0789.html https://www.suse.com/security/cve/CVE-2022-0790.html https://www.suse.com/security/cve/CVE-2022-0791.html https://www.suse.com/security/cve/CVE-2022-0792.html https://www.suse.com/security/cve/CVE-2022-0793.html https://www.suse.com/security/cve/CVE-2022-0794.html https://www.suse.com/security/cve/CVE-2022-0795.html https://www.suse.com/security/cve/CVE-2022-0796.html https://www.suse.com/security/cve/CVE-2022-0797.html https://www.suse.com/security/cve/CVE-2022-0798.html https://www.suse.com/security/cve/CVE-2022-0799.html https://www.suse.com/security/cve/CVE-2022-0800.html https://www.suse.com/security/cve/CVE-2022-0801.html https://www.suse.com/security/cve/CVE-2022-0802.html https://www.suse.com/security/cve/CVE-2022-0803.html https://www.suse.com/security/cve/CVE-2022-0804.html https://www.suse.com/security/cve/CVE-2022-0805.html https://www.suse.com/security/cve/CVE-2022-0806.html https://www.suse.com/security/cve/CVE-2022-0807.html https://www.suse.com/security/cve/CVE-2022-0808.html https://www.suse.com/security/cve/CVE-2022-0809.html https://bugzilla.suse.com/1196641

1 0

openSUSE-RU-2022:0739-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 07 Mar '22

07 Mar '22

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0739-1 Rating: moderate References: #1183229 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mdadm fixes the following issues: - Monitor: print message before quit for no array to monitor (bsc#1183229) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-739=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-739=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): mdadm-4.1-150300.24.9.1 mdadm-debuginfo-4.1-150300.24.9.1 mdadm-debugsource-4.1-150300.24.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): mdadm-4.1-150300.24.9.1 mdadm-debuginfo-4.1-150300.24.9.1 mdadm-debugsource-4.1-150300.24.9.1 References: https://bugzilla.suse.com/1183229

1 0

openSUSE-SU-2022:0074-1: moderate: Security update for perl-App-cpanminus
by opensuse-security＠opensuse.org 06 Mar '22

06 Mar '22

openSUSE Security Update: Security update for perl-App-cpanminus ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0074-1 Rating: moderate References: Cross-References: CVE-2020-16154 CVSS scores: CVE-2020-16154 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-App-cpanminus fixes the following issues: updated to 1.7045 see /usr/share/doc/packages/perl-App-cpanminus/Changes Security fixes: - [CVE-2020-16154] remove the functionality to verify CHECKSUMS signature updated to 1.7044 see /usr/share/doc/packages/perl-App-cpanminus/Changes Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-74=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): perl-App-cpanminus-1.7045-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-16154.html

1 0

openSUSE-RU-2022:0073-1: moderate: Recommended update for opi
by maintenance＠opensuse.org 05 Mar '22

05 Mar '22

openSUSE Recommended Update: Recommended update for opi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0073-1 Rating: moderate References: #1184786 #1195206 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for opi fixes the following issues: Version 2.4.4 - Fix for Alpha/Beta dist versions (boo#1195206) Version 2.4.3 - Fix for tumbleweed based MicroOS Version 2.4.2 * Changed - Switched to opensuse provided opi proxy Version 2.4.1 * Changed - Don't expect output to be a tty Version 2.4.0 * Added - Scrolling of results - Plugin for atom editor Version 2.3.0 * Changed - Fixed gpgcheck entry in add_repo() - Allowed using multiple query keywords that are combined using AND * Added - Plugin for sublime text - Plugin for yandex-disk Version 2.2.0 * Added - Plugin for MEGA - Plugin for Edge Beta - Argument parser with option for reverse output order Version 2.1.1 * Added - Plugin for Brave Browser Version 2.1.0 * Added - Support for dnf backend * Changed - Deduplicated packman repo creation code Version 2.0.0 * Added - Automated tests - Extensible Plugin interface for plugins (eg. this one) - Added plugins for chrome, dotnet, edge, teams, packman, plex, skype, slack, teamviewer, vivaldi, vscode, vscodium, zoom * Changed - Rewrote the complete tool in python3 - stop owning dirs provided by filesytem rpm (boo#1184786) Version 0.10.0 * Added - Microsoft Teams installer - Warning for personal repository - Fix appstream file location - Version 0.9.0 * Added - Help (-h, --help) and version (-v, --version) option * Changed - Filter out -devel, -docs and -lang packages - Don't show i586 packages on x86_64 system - Version 0.8.3 * Fixed - ffmpeg/libav packages due to Packman update - Version 2.4.4 - Fix for Alpha/Beta dist versions - Version 2.4.3 - Fix for tumbleweed based MicroOS - Version 2.4.2 - 2021-10-25 ## Changed - Switched to opensuse provided opi proxy - Version 2.4.1 - 2021-10-11 ## Changed - Don't expect output to be a tty - Version 2.4.0 - 2021-10-11 ## Added - Scroll results if they not fit on the screen - Plugin for atom editor # Version 2.3.0 - 2021-06-06 ### Changed - Fixed gpgcheck entry in `add_repo()` - Allowed using multiple query keywords that are combined using AND ### Added - Plugin for sublime text - Plugin for yandex-disk - Version 2.2.0 - 2021-08-20 ### Added - Plugin for MEGA - Plugin for Edge Beta - Argument parser with option for reverse output order - Version 2.1.1 - 2021-08-10 ### Added - Plugin for Brave Browser [#60](https://github.com/openSUSE/opi/pull/60) - Version 2.1.0 - 2021-07-05 ### Added - Support for dnf backend [#58](https://github.com/openSUSE/opi/pull/58) ### Changed - Deduplicated packman repo creation code - Version 2.0.0 - 2021-05-03 ### Added - [Automated tests](https://github.com/openSUSE/opi/actions) - Extensible Plugin interface for plugins (eg. [this one](https://github.com/openSUSE/opi/blob/master/opi/plugins/vivaldi.py)) - Added plugins for chrome, dotnet, edge, teams, packman, plex, skype, slack, teamviewer, vivaldi, vscode, vscodium, zoom ### Changed - Rewrote the complete tool in python3 - Version 0.10.0 - 2021-01-17 ### Added - Microsoft Teams installer [#34](https://github.com/openSUSE/opi/pulls/34) - Warning for personal repository [#35](https://github.com/openSUSE/opi/pulls/35) - Version 0.9.0 - 2020-10-03 ### Added - Help (-h, --help) and version (-v, --version) option ### Changed - Filter out -devel, -docs and -lang packages [#30](https://github.com/openSUSE/opi/pulls/30) - Don't show i586 packages on x86_64 system - Version 0.8.3 - 2020-07-25 ### Fixed - ffmpeg/libav packages due to Packman update - Version 0.8.2 - 2020-05-16 ### Fixed - Ghost process on XML parsing failure [#27](https://github.com/openSUSE/opi/pulls/27) - Version 0.8.1 - 2020-04-03 ### Fixed - OBS limit error when searching php, test, etc. - Version 0.8.0 ### Changed - Type number `0` to exit [#26](https://github.com/openSUSE/opi/pulls/26) - Version 0.7.1 ### Fixed - Missing `use File::Temp;` [#24](https://github.com/openSUSE/opi/issues/24) - Version 0.7.0 ### Changed - Force repo URL to HTTPS [#22](https://github.com/openSUSE/opi/issues/22) ### Fixed - Ctrl + C handling of spinner - Version 0.6.0 ### Added - Search spinner [#21](https://github.com/openSUSE/opi/issues/21) ### Fixed - Packman repo doesn't have *.repo file [#19](https://github.com/openSUSE/opi/issues/19) - Long version numbers are cutted [#17](https://github.com/openSUSE/opi/issues/17) - Version 0.5.2 ### Fixed - Trim "NAME" and "VERSION" string [#13](https://github.com/openSUSE/opi/issues/13) - Version 0.5.1 ### Fixed - Fix dependency not found issue [#11](https://github.com/openSUSE/opi/issues/11) - Version 0.5.0 ### Added - API proxy server to prevent hard-coded passwords in the script [#4](https://github.com/openSUSE/opi/issues/4) - Version 0.4.0 ### Added - PMBS (Packman Build Service) support [#5](https://github.com/openSUSE/opi/issues/5) - Version 0.3.2 ### Fixed - `opi opi` cannot find `opi` [#9](https://github.com/openSUSE/opi/issues/9) - Version 0.3.1 ### Fixed - Remove quotes from version number. So Leap and SLE can search packages. - Version 0.3.0 ### Added - Support SLE [#8](https://github.com/openSUSE/opi/issues/8) ### Changed - Better print column alignment - Version 0.2.0 ### Added - Install Packman Codecs with `opi packman` or `opi codecs` [#6](https://github.com/openSUSE/opi/issues/6) - Install Skype with `opi skype` [#6](https://github.com/openSUSE/opi/issues/6) - Install VS Code with `opi vs code` [#6](https://github.com/openSUSE/opi/issues/6) - Version 0.1.2 ### Fixed - Fixed lost of "noarch" packages [#3](https://github.com/openSUSE/opi/issues/3) - Be able to search with dashes in keywords [#2](https://github.com/openSUSE/opi/issues/2) - Version 0.1.1 ### Fixed - Removed XML dump which may cause problems. - Version 0.1.0 ### Added - Search packages from OBS - List properly sorted search result - Use different colors for official, experimental and personal projects - Choose package and install - Keep or remove repository after installation [Unreleased]: https://github.com/openSUSE/opi/compare/v0.10.0...HEAD [0.10.0]: https://github.com/openSUSE/opi/compare/v0.9.0...v0.10.0 [0.9.0]: https://github.com/openSUSE/opi/compare/v0.8.3...v0.9.0 [0.8.3]: https://github.com/openSUSE/opi/compare/v0.8.2...v0.8.3 [0.8.2]: https://github.com/openSUSE/opi/compare/v0.8.1...v0.8.2 [0.8.1]: https://github.com/openSUSE/opi/compare/v0.8.0...v0.8.1 [0.8.0]: https://github.com/openSUSE/opi/compare/v0.7.1...v0.8.0 [0.7.1]: https://github.com/openSUSE/opi/compare/v0.7.0...v0.7.1 [0.7.0]: https://github.com/openSUSE/opi/compare/v0.6.0...v0.7.0 [0.6.0]: https://github.com/openSUSE/opi/compare/v0.5.2...v0.6.0 [0.5.2]: https://github.com/openSUSE/opi/compare/v0.5.1...v0.5.2 [0.5.1]: https://github.com/openSUSE/opi/compare/v0.5.0...v0.5.1 [0.5.0]: https://github.com/openSUSE/opi/compare/v0.4.0...v0.5.0 [0.4.0]: https://github.com/openSUSE/opi/compare/v0.3.2...v0.4.0 [0.3.2]: https://github.com/openSUSE/opi/compare/v0.3.1...v0.3.2 [0.3.1]: https://github.com/openSUSE/opi/compare/v0.3.0...v0.3.1 [0.3.0]: https://github.com/openSUSE/opi/compare/v0.2.0...v0.3.0 [0.2.0]: https://github.com/openSUSE/opi/compare/v0.1.2...v0.2.0 [0.1.2]: https://github.com/openSUSE/opi/compare/v0.1.1...v0.1.2 [0.1.1]: https://github.com/openSUSE/opi/compare/v0.1.0...v0.1.1 [0.1.0]: https://github.com/openSUSE/opi/releases/tag/v0.1.0 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-73=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): opi-2.4.4-bp153.2.3.1 References: https://bugzilla.suse.com/1184786 https://bugzilla.suse.com/1195206

1 0

openSUSE-SU-2022:0735-1: important: Security update for zsh
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for zsh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0735-1 Rating: important References: #1163882 #1196435 Cross-References: CVE-2019-20044 CVE-2021-45444 CVSS scores: CVE-2019-20044 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2019-20044 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-45444 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-45444 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for zsh fixes the following issues: - CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be executed related to prompt expansion (bsc#1196435). - CVE-2019-20044: Fixed a vulnerability where shell privileges would not be properly dropped when unsetting the PRIVILEGED option (bsc#1163882). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-735=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-735=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): zsh-5.6-7.5.1 zsh-debuginfo-5.6-7.5.1 zsh-debugsource-5.6-7.5.1 zsh-htmldoc-5.6-7.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): zsh-5.6-7.5.1 zsh-debuginfo-5.6-7.5.1 zsh-debugsource-5.6-7.5.1 zsh-htmldoc-5.6-7.5.1 References: https://www.suse.com/security/cve/CVE-2019-20044.html https://www.suse.com/security/cve/CVE-2021-45444.html https://bugzilla.suse.com/1163882 https://bugzilla.suse.com/1196435

1 0

openSUSE-SU-2022:0731-1: important: Security update for mariadb
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0731-1 Rating: important References: #1195325 #1195334 #1195339 #1196016 SLE-22245 Cross-References: CVE-2021-46657 CVE-2021-46658 CVE-2021-46659 CVE-2021-46661 CVE-2021-46663 CVE-2021-46664 CVE-2021-46665 CVE-2021-46668 CVE-2022-24048 CVE-2022-24050 CVE-2022-24051 CVE-2022-24052 CVSS scores: CVE-2021-46657 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46657 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-46658 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46658 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-46659 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46659 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-46661 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46663 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46663 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46664 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46665 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46668 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-24048 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24050 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24051 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24052 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 12 vulnerabilities, contains one feature is now available. Description: This update for mariadb fixes the following issues: - Update to 10.5.15 (bsc#1196016): * 10.5.15: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 * 10.5.14: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659, bsc#1195339 - The following issues have already been fixed in this package but weren't previously mentioned in the changes file: CVE-2021-46658, bsc#1195334 CVE-2021-46657, bsc#1195325 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-731=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libmariadbd-devel-10.5.15-150300.3.15.1 libmariadbd19-10.5.15-150300.3.15.1 libmariadbd19-debuginfo-10.5.15-150300.3.15.1 mariadb-10.5.15-150300.3.15.1 mariadb-bench-10.5.15-150300.3.15.1 mariadb-bench-debuginfo-10.5.15-150300.3.15.1 mariadb-client-10.5.15-150300.3.15.1 mariadb-client-debuginfo-10.5.15-150300.3.15.1 mariadb-debuginfo-10.5.15-150300.3.15.1 mariadb-debugsource-10.5.15-150300.3.15.1 mariadb-rpm-macros-10.5.15-150300.3.15.1 mariadb-test-10.5.15-150300.3.15.1 mariadb-test-debuginfo-10.5.15-150300.3.15.1 mariadb-tools-10.5.15-150300.3.15.1 mariadb-tools-debuginfo-10.5.15-150300.3.15.1 - openSUSE Leap 15.3 (noarch): mariadb-errormessages-10.5.15-150300.3.15.1 References: https://www.suse.com/security/cve/CVE-2021-46657.html https://www.suse.com/security/cve/CVE-2021-46658.html https://www.suse.com/security/cve/CVE-2021-46659.html https://www.suse.com/security/cve/CVE-2021-46661.html https://www.suse.com/security/cve/CVE-2021-46663.html https://www.suse.com/security/cve/CVE-2021-46664.html https://www.suse.com/security/cve/CVE-2021-46665.html https://www.suse.com/security/cve/CVE-2021-46668.html https://www.suse.com/security/cve/CVE-2022-24048.html https://www.suse.com/security/cve/CVE-2022-24050.html https://www.suse.com/security/cve/CVE-2022-24051.html https://www.suse.com/security/cve/CVE-2022-24052.html https://bugzilla.suse.com/1195325 https://bugzilla.suse.com/1195334 https://bugzilla.suse.com/1195339 https://bugzilla.suse.com/1196016

1 0

openSUSE-SU-2022:0736-1: important: Security update for vim
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0736-1 Rating: important References: #1190533 #1190570 #1191893 #1192478 #1192481 #1193294 #1193298 #1194216 #1194556 #1195004 #1195066 #1195126 #1195202 #1195356 Cross-References: CVE-2021-3778 CVE-2021-3796 CVE-2021-3872 CVE-2021-3927 CVE-2021-3928 CVE-2021-3984 CVE-2021-4019 CVE-2021-4193 CVE-2021-46059 CVE-2022-0318 CVE-2022-0319 CVE-2022-0351 CVE-2022-0361 CVE-2022-0413 CVSS scores: CVE-2021-3778 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3778 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2021-3796 (NVD) : 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H CVE-2021-3796 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2021-3872 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3872 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3927 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3927 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3928 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-3928 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3984 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-3984 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-4019 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-4019 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-4193 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-4193 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2021-46059 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0318 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0319 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2022-0351 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0351 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2022-0361 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-0361 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2022-0413 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-0413 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for vim fixes the following issues: - CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004). - CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570). - CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893). - CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481). - CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478). - CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294). - CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298). - CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533). - CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216). - CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556). - CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066). - CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126). - CVE-2022-0361: Fixed buffer overflow (bsc#1195126). - CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-736=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-736=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gvim-8.0.1568-5.17.1 gvim-debuginfo-8.0.1568-5.17.1 vim-8.0.1568-5.17.1 vim-debuginfo-8.0.1568-5.17.1 vim-debugsource-8.0.1568-5.17.1 vim-small-8.0.1568-5.17.1 vim-small-debuginfo-8.0.1568-5.17.1 - openSUSE Leap 15.4 (noarch): vim-data-8.0.1568-5.17.1 vim-data-common-8.0.1568-5.17.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gvim-8.0.1568-5.17.1 gvim-debuginfo-8.0.1568-5.17.1 vim-8.0.1568-5.17.1 vim-debuginfo-8.0.1568-5.17.1 vim-debugsource-8.0.1568-5.17.1 vim-small-8.0.1568-5.17.1 vim-small-debuginfo-8.0.1568-5.17.1 - openSUSE Leap 15.3 (noarch): vim-data-8.0.1568-5.17.1 vim-data-common-8.0.1568-5.17.1 References: https://www.suse.com/security/cve/CVE-2021-3778.html https://www.suse.com/security/cve/CVE-2021-3796.html https://www.suse.com/security/cve/CVE-2021-3872.html https://www.suse.com/security/cve/CVE-2021-3927.html https://www.suse.com/security/cve/CVE-2021-3928.html https://www.suse.com/security/cve/CVE-2021-3984.html https://www.suse.com/security/cve/CVE-2021-4019.html https://www.suse.com/security/cve/CVE-2021-4193.html https://www.suse.com/security/cve/CVE-2021-46059.html https://www.suse.com/security/cve/CVE-2022-0318.html https://www.suse.com/security/cve/CVE-2022-0319.html https://www.suse.com/security/cve/CVE-2022-0351.html https://www.suse.com/security/cve/CVE-2022-0361.html https://www.suse.com/security/cve/CVE-2022-0413.html https://bugzilla.suse.com/1190533 https://bugzilla.suse.com/1190570 https://bugzilla.suse.com/1191893 https://bugzilla.suse.com/1192478 https://bugzilla.suse.com/1192481 https://bugzilla.suse.com/1193294 https://bugzilla.suse.com/1193298 https://bugzilla.suse.com/1194216 https://bugzilla.suse.com/1194556 https://bugzilla.suse.com/1195004 https://bugzilla.suse.com/1195066 https://bugzilla.suse.com/1195126 https://bugzilla.suse.com/1195202 https://bugzilla.suse.com/1195356

1 0

openSUSE-SU-2022:0713-1: important: Security update for expat
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0713-1 Rating: important References: #1196025 #1196026 #1196168 #1196169 #1196171 Cross-References: CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315 CVSS scores: CVE-2022-25235 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-25235 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-25236 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-25236 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-25313 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-25313 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-25314 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-25314 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-25315 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-25315 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025). - CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026). - CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168). - CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169). - CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-713=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): expat-2.2.5-3.15.1 expat-debuginfo-2.2.5-3.15.1 expat-debugsource-2.2.5-3.15.1 libexpat-devel-2.2.5-3.15.1 libexpat1-2.2.5-3.15.1 libexpat1-debuginfo-2.2.5-3.15.1 - openSUSE Leap 15.3 (x86_64): expat-32bit-debuginfo-2.2.5-3.15.1 libexpat-devel-32bit-2.2.5-3.15.1 libexpat1-32bit-2.2.5-3.15.1 libexpat1-32bit-debuginfo-2.2.5-3.15.1 References: https://www.suse.com/security/cve/CVE-2022-25235.html https://www.suse.com/security/cve/CVE-2022-25236.html https://www.suse.com/security/cve/CVE-2022-25313.html https://www.suse.com/security/cve/CVE-2022-25314.html https://www.suse.com/security/cve/CVE-2022-25315.html https://bugzilla.suse.com/1196025 https://bugzilla.suse.com/1196026 https://bugzilla.suse.com/1196168 https://bugzilla.suse.com/1196169 https://bugzilla.suse.com/1196171

1 0

openSUSE-SU-2022:0725-1: important: Security update for mariadb
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0725-1 Rating: important References: #1195325 #1195334 #1195339 #1196016 Cross-References: CVE-2021-46657 CVE-2021-46658 CVE-2021-46659 CVE-2021-46661 CVE-2021-46663 CVE-2021-46664 CVE-2021-46665 CVE-2021-46668 CVE-2022-24048 CVE-2022-24050 CVE-2022-24051 CVE-2022-24052 CVSS scores: CVE-2021-46657 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46657 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-46658 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46658 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-46659 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46659 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-46661 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46663 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46663 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46664 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46665 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46668 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-24048 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24050 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24051 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24052 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for mariadb fixes the following issues: - Update to 10.2.43 (bsc#1196016): 10.2.43: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 10.2.42: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659, bsc#1195339 - The following issues have already been fixed in this package but weren't previously mentioned in the changes file: CVE-2021-46658, bsc#1195334 CVE-2021-46657, bsc#1195325 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-725=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libmysqld-devel-10.2.43-3.51.1 libmysqld19-10.2.43-3.51.1 libmysqld19-debuginfo-10.2.43-3.51.1 References: https://www.suse.com/security/cve/CVE-2021-46657.html https://www.suse.com/security/cve/CVE-2021-46658.html https://www.suse.com/security/cve/CVE-2021-46659.html https://www.suse.com/security/cve/CVE-2021-46661.html https://www.suse.com/security/cve/CVE-2021-46663.html https://www.suse.com/security/cve/CVE-2021-46664.html https://www.suse.com/security/cve/CVE-2021-46665.html https://www.suse.com/security/cve/CVE-2021-46668.html https://www.suse.com/security/cve/CVE-2022-24048.html https://www.suse.com/security/cve/CVE-2022-24050.html https://www.suse.com/security/cve/CVE-2022-24051.html https://www.suse.com/security/cve/CVE-2022-24052.html https://bugzilla.suse.com/1195325 https://bugzilla.suse.com/1195334 https://bugzilla.suse.com/1195339 https://bugzilla.suse.com/1196016

1 0

openSUSE-SU-2022:0726-1: important: Security update for mariadb
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0726-1 Rating: important References: #1195325 #1195334 #1195339 #1196016 Cross-References: CVE-2021-46657 CVE-2021-46658 CVE-2021-46659 CVE-2021-46661 CVE-2021-46663 CVE-2021-46664 CVE-2021-46665 CVE-2021-46668 CVE-2022-24048 CVE-2022-24050 CVE-2022-24051 CVE-2022-24052 CVSS scores: CVE-2021-46657 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46657 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-46658 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46658 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-46659 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46659 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-46661 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46663 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46663 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46664 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46665 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-46668 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-24048 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24050 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24051 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24052 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for mariadb fixes the following issues: - Update to 10.4.24 (bsc#1196016): * 10.4.24: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 * 10.4.23: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659, bsc#1195339 - The following issues have already been fixed in this package but weren't previously mentioned in the changes file: CVE-2021-46658, bsc#1195334 CVE-2021-46657, bsc#1195325 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-726=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): mariadb-galera-10.4.24-3.25.1 References: https://www.suse.com/security/cve/CVE-2021-46657.html https://www.suse.com/security/cve/CVE-2021-46658.html https://www.suse.com/security/cve/CVE-2021-46659.html https://www.suse.com/security/cve/CVE-2021-46661.html https://www.suse.com/security/cve/CVE-2021-46663.html https://www.suse.com/security/cve/CVE-2021-46664.html https://www.suse.com/security/cve/CVE-2021-46665.html https://www.suse.com/security/cve/CVE-2021-46668.html https://www.suse.com/security/cve/CVE-2022-24048.html https://www.suse.com/security/cve/CVE-2022-24050.html https://www.suse.com/security/cve/CVE-2022-24051.html https://www.suse.com/security/cve/CVE-2022-24052.html https://bugzilla.suse.com/1195325 https://bugzilla.suse.com/1195334 https://bugzilla.suse.com/1195339 https://bugzilla.suse.com/1196016

1 0

openSUSE-SU-2022:0717-1: moderate: Security update for gnutls
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0717-1 Rating: moderate References: #1196167 Cross-References: CVE-2021-4209 CVSS scores: CVE-2021-4209 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gnutls fixes the following issues: - CVE-2021-4209: Fixed null pointer dereference in MD_UPDATE (bsc#1196167). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-717=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gnutls-3.6.7-14.16.1 gnutls-debuginfo-3.6.7-14.16.1 gnutls-debugsource-3.6.7-14.16.1 gnutls-guile-3.6.7-14.16.1 gnutls-guile-debuginfo-3.6.7-14.16.1 libgnutls-devel-3.6.7-14.16.1 libgnutls30-3.6.7-14.16.1 libgnutls30-debuginfo-3.6.7-14.16.1 libgnutls30-hmac-3.6.7-14.16.1 libgnutlsxx-devel-3.6.7-14.16.1 libgnutlsxx28-3.6.7-14.16.1 libgnutlsxx28-debuginfo-3.6.7-14.16.1 - openSUSE Leap 15.3 (x86_64): libgnutls-devel-32bit-3.6.7-14.16.1 libgnutls30-32bit-3.6.7-14.16.1 libgnutls30-32bit-debuginfo-3.6.7-14.16.1 libgnutls30-hmac-32bit-3.6.7-14.16.1 References: https://www.suse.com/security/cve/CVE-2021-4209.html https://bugzilla.suse.com/1196167

1 0

openSUSE-SU-2022:0727-1: moderate: Security update for libeconf, shadow and util-linux
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for libeconf, shadow and util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0727-1 Rating: moderate References: #1188507 #1192954 #1193632 #1194976 SLE-23384 SLE-23402 Cross-References: CVE-2021-3995 CVE-2021-3996 CVSS scores: CVE-2021-3995 (SUSE): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-3996 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities, contains two features and has two fixes is now available. Description: This security update for libeconf, shadow and util-linux fix the following issues: libeconf: - Add libeconf to SLE-Module-Basesystem_15-SP3 because needed by 'util-linux' and 'shadow' to fix autoyast handling of security related parameters (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402) Issues fixed in libeconf: - Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157) - Fixed different issues while writing string values to file. - Writing comments to file too. - Fixed crash while merging values. - Added econftool cat option (#146) - new API call: econf_readDirsHistory (showing ALL locations) - new API call: econf_getPath (absolute path of the configuration file) - Man pages libeconf.3 and econftool.8. - Handling multiline strings. - Added libeconf_ext which returns more information like line_nr, comments, path of the configuration file,... - Econftool, an command line interface for handling configuration files. - Generating HTML API documentation with doxygen. - Improving error handling and semantic file check. - Joining entries with the same key to one single entry if env variable ECONF_JOIN_SAME_ENTRIES has been set. shadow: - The legacy code does not support /etc/login.defs.d used by YaST. Enable libeconf to read it (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402) util-linux: - The legacy code does not support /etc/login.defs.d used by YaST. Enable libeconf to read it (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402) - Allow use of larger values for start sector to prevent `blockdev --report` aborting (bsc#1188507) - Fixed `blockdev --report` using non-space characters as a field separator (bsc#1188507) - CVE-2021-3995: Fixed unauthorized unmount in util-linux's libmount. (bsc#1194976) - CVE-2021-3996: Fixed unauthorized unmount in util-linux's libmount. (bsc#1194976) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-727=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libblkid-devel-2.36.2-150300.4.14.3 libblkid-devel-static-2.36.2-150300.4.14.3 libblkid1-2.36.2-150300.4.14.3 libblkid1-debuginfo-2.36.2-150300.4.14.3 libeconf-debugsource-0.4.4+git20220104.962774f-150300.3.6.2 libeconf-devel-0.4.4+git20220104.962774f-150300.3.6.2 libeconf0-0.4.4+git20220104.962774f-150300.3.6.2 libeconf0-debuginfo-0.4.4+git20220104.962774f-150300.3.6.2 libfdisk-devel-2.36.2-150300.4.14.3 libfdisk-devel-static-2.36.2-150300.4.14.3 libfdisk1-2.36.2-150300.4.14.3 libfdisk1-debuginfo-2.36.2-150300.4.14.3 libmount-devel-2.36.2-150300.4.14.3 libmount-devel-static-2.36.2-150300.4.14.3 libmount1-2.36.2-150300.4.14.3 libmount1-debuginfo-2.36.2-150300.4.14.3 libsmartcols-devel-2.36.2-150300.4.14.3 libsmartcols-devel-static-2.36.2-150300.4.14.3 libsmartcols1-2.36.2-150300.4.14.3 libsmartcols1-debuginfo-2.36.2-150300.4.14.3 libuuid-devel-2.36.2-150300.4.14.3 libuuid-devel-static-2.36.2-150300.4.14.3 libuuid1-2.36.2-150300.4.14.3 libuuid1-debuginfo-2.36.2-150300.4.14.3 python3-libmount-2.36.2-150300.4.14.2 python3-libmount-debuginfo-2.36.2-150300.4.14.2 python3-libmount-debugsource-2.36.2-150300.4.14.2 shadow-4.8.1-150300.4.3.8 shadow-debuginfo-4.8.1-150300.4.3.8 shadow-debugsource-4.8.1-150300.4.3.8 util-linux-2.36.2-150300.4.14.3 util-linux-debuginfo-2.36.2-150300.4.14.3 util-linux-debugsource-2.36.2-150300.4.14.3 util-linux-systemd-2.36.2-150300.4.14.2 util-linux-systemd-debuginfo-2.36.2-150300.4.14.2 util-linux-systemd-debugsource-2.36.2-150300.4.14.2 uuidd-2.36.2-150300.4.14.2 uuidd-debuginfo-2.36.2-150300.4.14.2 - openSUSE Leap 15.3 (x86_64): libblkid-devel-32bit-2.36.2-150300.4.14.3 libblkid1-32bit-2.36.2-150300.4.14.3 libblkid1-32bit-debuginfo-2.36.2-150300.4.14.3 libeconf0-32bit-0.4.4+git20220104.962774f-150300.3.6.2 libeconf0-32bit-debuginfo-0.4.4+git20220104.962774f-150300.3.6.2 libfdisk-devel-32bit-2.36.2-150300.4.14.3 libfdisk1-32bit-2.36.2-150300.4.14.3 libfdisk1-32bit-debuginfo-2.36.2-150300.4.14.3 libmount-devel-32bit-2.36.2-150300.4.14.3 libmount1-32bit-2.36.2-150300.4.14.3 libmount1-32bit-debuginfo-2.36.2-150300.4.14.3 libsmartcols-devel-32bit-2.36.2-150300.4.14.3 libsmartcols1-32bit-2.36.2-150300.4.14.3 libsmartcols1-32bit-debuginfo-2.36.2-150300.4.14.3 libuuid-devel-32bit-2.36.2-150300.4.14.3 libuuid1-32bit-2.36.2-150300.4.14.3 libuuid1-32bit-debuginfo-2.36.2-150300.4.14.3 - openSUSE Leap 15.3 (noarch): login_defs-4.8.1-150300.4.3.8 util-linux-lang-2.36.2-150300.4.14.3 References: https://www.suse.com/security/cve/CVE-2021-3995.html https://www.suse.com/security/cve/CVE-2021-3996.html https://bugzilla.suse.com/1188507 https://bugzilla.suse.com/1192954 https://bugzilla.suse.com/1193632 https://bugzilla.suse.com/1194976

1 0

openSUSE-SU-2022:0716-1: important: Security update for wpa_supplicant
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0716-1 Rating: important References: #1194732 #1194733 Cross-References: CVE-2022-23303 CVE-2022-23304 CVSS scores: CVE-2022-23303 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23303 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23304 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23304 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for wpa_supplicant fixes the following issues: - CVE-2022-23303: Fixed side-channel attacks in SAE (bsc#1194732). - CVE-2022-23304: Fixed side-channel attacks in EAP-pwd (bsc#1194733). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-716=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-716=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): wpa_supplicant-2.9-4.33.1 wpa_supplicant-debuginfo-2.9-4.33.1 wpa_supplicant-debugsource-2.9-4.33.1 wpa_supplicant-gui-2.9-4.33.1 wpa_supplicant-gui-debuginfo-2.9-4.33.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): wpa_supplicant-2.9-4.33.1 wpa_supplicant-debuginfo-2.9-4.33.1 wpa_supplicant-debugsource-2.9-4.33.1 wpa_supplicant-gui-2.9-4.33.1 wpa_supplicant-gui-debuginfo-2.9-4.33.1 References: https://www.suse.com/security/cve/CVE-2022-23303.html https://www.suse.com/security/cve/CVE-2022-23304.html https://bugzilla.suse.com/1194732 https://bugzilla.suse.com/1194733

1 0

openSUSE-SU-2022:0712-1: important: Security update for flatpak
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for flatpak ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0712-1 Rating: important References: #1194610 #1194611 Cross-References: CVE-2021-43860 CVE-2022-21682 CVSS scores: CVE-2021-43860 (NVD) : 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2022-21682 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2022-21682 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for flatpak fixes the following issues: Update to flatpak 1.10.7: - CVE-2022-21682: Introduce new option --nofilesystem=host:reset to support flatpak-builder 1.2.2 (bsc#1194611). - CVE-2021-43860: A malicious repository could hav sent invalid application metadata in a way that hides some of the app permissions displayed during installation (bsc#1194610). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-712=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): flatpak-1.10.7-4.12.1 flatpak-debuginfo-1.10.7-4.12.1 flatpak-debugsource-1.10.7-4.12.1 flatpak-devel-1.10.7-4.12.1 flatpak-zsh-completion-1.10.7-4.12.1 libflatpak0-1.10.7-4.12.1 libflatpak0-debuginfo-1.10.7-4.12.1 system-user-flatpak-1.10.7-4.12.1 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 References: https://www.suse.com/security/cve/CVE-2021-43860.html https://www.suse.com/security/cve/CVE-2022-21682.html https://bugzilla.suse.com/1194610 https://bugzilla.suse.com/1194611

1 0

openSUSE-FU-2022:0718-1: moderate: Feature update for duperemove
by maintenance＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Feature Update: Feature update for duperemove ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0718-1 Rating: moderate References: SLE-11306 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 feature fixes and contains one feature can now be installed. Description: This feature update for duperemove fixes the following issue: Update from version 0.11.beta4 to version 0.11.3 (jsc#SLE-11306) - Increase open file limit. - Create hash database file with 600 permission for improved security. - Read more data per pread, for v2 hashfile format this reduces the overall number of syscalls made which in turns results in better performance. - Fix truncated file handling, eliminating a an infinite loop case. Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-718=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-718=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): btrfs-extent-same-0.11.3-3.3.1 btrfs-extent-same-debuginfo-0.11.3-3.3.1 duperemove-0.11.3-3.3.1 duperemove-debuginfo-0.11.3-3.3.1 duperemove-debugsource-0.11.3-3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): btrfs-extent-same-0.11.3-3.3.1 btrfs-extent-same-debuginfo-0.11.3-3.3.1 duperemove-0.11.3-3.3.1 duperemove-debuginfo-0.11.3-3.3.1 duperemove-debugsource-0.11.3-3.3.1 References:

1 0

openSUSE-SU-2022:0720-1: moderate: Security update for containerd
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for containerd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0720-1 Rating: moderate References: #1196441 Cross-References: CVE-2022-23648 CVSS scores: CVE-2022-23648 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for containerd fixes the following issues: - CVE-2022-23648: A specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host (bsc#1196441). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-720=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-720=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): containerd-1.4.12-63.1 containerd-ctr-1.4.12-63.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): containerd-1.4.12-63.1 containerd-ctr-1.4.12-63.1 References: https://www.suse.com/security/cve/CVE-2022-23648.html https://bugzilla.suse.com/1196441

1 0

openSUSE-SU-2022:0724-1: important: Security update for go1.16
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for go1.16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0724-1 Rating: important References: #1182345 #1195834 #1195835 #1195838 Cross-References: CVE-2022-23772 CVE-2022-23773 CVE-2022-23806 CVSS scores: CVE-2022-23772 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-23772 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-23773 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-23773 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N CVE-2022-23806 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-23806 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for go1.16 fixes the following issues: - CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve (bsc#1195838). - CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption (bsc#1195835). - CVE-2022-23773: Fixed incorrect access control in cmd/go (bsc#1195834). The following non-security bugs were fixed: - go#50977 crypto/elliptic: IsOnCurve returns true for invalid field elements - go#50700 math/big: Rat.SetString may consume large amount of RAM and crash - go#50686 cmd/go: do not treat branches with semantic-version names as releases - go#50866 cmd/compile: incorrect use of CMN on arm64 - go#50832 runtime/race: NoRaceMutexPureHappensBefore failures - go#50811 cmd/go: remove bitbucket VCS probing - go#50780 runtime: incorrect frame information in traceback traversal may hang the process. - go#50721 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error - go#50682 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg - go#50645 testing: surprising interaction of subtests with TempDir - go#50585 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch - go#50245 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-724=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-724=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): go1.16-1.16.14-1.43.1 go1.16-doc-1.16.14-1.43.1 - openSUSE Leap 15.4 (aarch64 x86_64): go1.16-race-1.16.14-1.43.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): go1.16-1.16.14-1.43.1 go1.16-doc-1.16.14-1.43.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.16-race-1.16.14-1.43.1 References: https://www.suse.com/security/cve/CVE-2022-23772.html https://www.suse.com/security/cve/CVE-2022-23773.html https://www.suse.com/security/cve/CVE-2022-23806.html https://bugzilla.suse.com/1182345 https://bugzilla.suse.com/1195834 https://bugzilla.suse.com/1195835 https://bugzilla.suse.com/1195838

1 0

openSUSE-SU-2022:0723-1: important: Security update for go1.17
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for go1.17 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0723-1 Rating: important References: #1190649 #1195834 #1195835 #1195838 Cross-References: CVE-2022-23772 CVE-2022-23773 CVE-2022-23806 CVSS scores: CVE-2022-23772 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-23772 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-23773 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-23773 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N CVE-2022-23806 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-23806 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for go1.17 fixes the following issues: - CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve (bsc#1195838). - CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption (bsc#1195835). - CVE-2022-23773: Fixed incorrect access control in cmd/go (bsc#1195834). The following non-security bugs were fixed: - go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements - go#50701 math/big: Rat.SetString may consume large amount of RAM and crash - go#50687 cmd/go: do not treat branches with semantic-version names as releases - go#50942 cmd/asm: "compile: loop" compiler bug? - go#50867 cmd/compile: incorrect use of CMN on arm64 - go#50812 cmd/go: remove bitbucket VCS probing - go#50781 runtime: incorrect frame information in traceback traversal may hang the process. - go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error - go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg - go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch - go#50297 cmd/link: does not set section type of .init_array correctly - go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-723=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-723=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): go1.17-1.17.7-1.20.1 go1.17-doc-1.17.7-1.20.1 - openSUSE Leap 15.4 (aarch64 x86_64): go1.17-race-1.17.7-1.20.1 - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): go1.17-1.17.7-1.20.1 go1.17-doc-1.17.7-1.20.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.17-race-1.17.7-1.20.1 References: https://www.suse.com/security/cve/CVE-2022-23772.html https://www.suse.com/security/cve/CVE-2022-23773.html https://www.suse.com/security/cve/CVE-2022-23806.html https://bugzilla.suse.com/1190649 https://bugzilla.suse.com/1195834 https://bugzilla.suse.com/1195835 https://bugzilla.suse.com/1195838

1 0

openSUSE-SU-2022:0715-1: important: Security update for nodejs14
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for nodejs14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0715-1 Rating: important References: #1191962 #1191963 #1192153 #1192154 #1192696 Cross-References: CVE-2021-23343 CVE-2021-32803 CVE-2021-32804 CVE-2021-3807 CVE-2021-3918 CVSS scores: CVE-2021-23343 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23343 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-32803 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32803 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-3807 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3918 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for nodejs14 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963). - CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962). - CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696). - CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-715=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-715=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nodejs14-14.19.0-15.27.1 nodejs14-debuginfo-14.19.0-15.27.1 nodejs14-debugsource-14.19.0-15.27.1 nodejs14-devel-14.19.0-15.27.1 npm14-14.19.0-15.27.1 - openSUSE Leap 15.4 (noarch): nodejs14-docs-14.19.0-15.27.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs14-14.19.0-15.27.1 nodejs14-debuginfo-14.19.0-15.27.1 nodejs14-debugsource-14.19.0-15.27.1 nodejs14-devel-14.19.0-15.27.1 npm14-14.19.0-15.27.1 - openSUSE Leap 15.3 (noarch): nodejs14-docs-14.19.0-15.27.1 References: https://www.suse.com/security/cve/CVE-2021-23343.html https://www.suse.com/security/cve/CVE-2021-32803.html https://www.suse.com/security/cve/CVE-2021-32804.html https://www.suse.com/security/cve/CVE-2021-3807.html https://www.suse.com/security/cve/CVE-2021-3918.html https://bugzilla.suse.com/1191962 https://bugzilla.suse.com/1191963 https://bugzilla.suse.com/1192153 https://bugzilla.suse.com/1192154 https://bugzilla.suse.com/1192696

1 0

openSUSE-SU-2022:0722-1: important: Security update for wireshark
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0722-1 Rating: important References: #1195866 #1195867 #1195868 #1195869 #1195870 Cross-References: CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586 CVSS scores: CVE-2022-0581 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0581 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0582 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-0582 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0583 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0583 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0585 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0585 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0586 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0586 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for wireshark fixes the following issues: Update to Wireshark 3.6.2: - CVE-2022-0586: RTMPT dissector infinite loop (bsc#1195866) - CVE-2022-0585: Large loops in multiple dissectors (bsc#1195867) - CVE-2022-0583: PVFS dissector crash (bsc#1195868) - CVE-2022-0582: CSN.1 dissector crash (bsc#1195869) - CVE-2022-0581: CMS dissector crash (bsc#1195870) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-722=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-722=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libwireshark15-3.6.2-3.71.1 libwireshark15-debuginfo-3.6.2-3.71.1 libwiretap12-3.6.2-3.71.1 libwiretap12-debuginfo-3.6.2-3.71.1 libwsutil13-3.6.2-3.71.1 libwsutil13-debuginfo-3.6.2-3.71.1 wireshark-3.6.2-3.71.1 wireshark-debuginfo-3.6.2-3.71.1 wireshark-debugsource-3.6.2-3.71.1 wireshark-devel-3.6.2-3.71.1 wireshark-ui-qt-3.6.2-3.71.1 wireshark-ui-qt-debuginfo-3.6.2-3.71.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libwireshark15-3.6.2-3.71.1 libwireshark15-debuginfo-3.6.2-3.71.1 libwiretap12-3.6.2-3.71.1 libwiretap12-debuginfo-3.6.2-3.71.1 libwsutil13-3.6.2-3.71.1 libwsutil13-debuginfo-3.6.2-3.71.1 wireshark-3.6.2-3.71.1 wireshark-debuginfo-3.6.2-3.71.1 wireshark-debugsource-3.6.2-3.71.1 wireshark-devel-3.6.2-3.71.1 wireshark-ui-qt-3.6.2-3.71.1 wireshark-ui-qt-debuginfo-3.6.2-3.71.1 References: https://www.suse.com/security/cve/CVE-2022-0581.html https://www.suse.com/security/cve/CVE-2022-0582.html https://www.suse.com/security/cve/CVE-2022-0583.html https://www.suse.com/security/cve/CVE-2022-0585.html https://www.suse.com/security/cve/CVE-2022-0586.html https://bugzilla.suse.com/1195866 https://bugzilla.suse.com/1195867 https://bugzilla.suse.com/1195868 https://bugzilla.suse.com/1195869 https://bugzilla.suse.com/1195870

1 0

openSUSE-SU-2022:0705-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0705-1 Rating: important References: #1195064 #1195735 #1196133 Cross-References: CVE-2021-30934 CVE-2021-30936 CVE-2021-30951 CVE-2021-30952 CVE-2021-30953 CVE-2021-30954 CVE-2021-30984 CVE-2021-45481 CVE-2021-45482 CVE-2021-45483 CVE-2022-22589 CVE-2022-22590 CVE-2022-22592 CVE-2022-22620 CVSS scores: CVE-2021-30934 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30934 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30936 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30936 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30951 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30951 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30952 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30952 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30953 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30953 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30954 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30954 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30984 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30984 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-45481 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45482 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45483 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-22589 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N CVE-2022-22590 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-22592 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-22620 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.34.6 (bsc#1196133): - CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution. Update to version 2.34.5 (bsc#1195735): - CVE-2022-22589: A validation issue was addressed with improved input sanitization. - CVE-2022-22590: A use after free issue was addressed with improved memory management. - CVE-2022-22592: A logic issue was addressed with improved state management. Update to version 2.34.4 (bsc#1195064): - CVE-2021-30934: A buffer overflow issue was addressed with improved memory handling. - CVE-2021-30936: A use after free issue was addressed with improved memory management. - CVE-2021-30951: A use after free issue was addressed with improved memory management. - CVE-2021-30952: An integer overflow was addressed with improved input validation. - CVE-2021-30953: An out-of-bounds read was addressed with improved bounds checking. - CVE-2021-30954: A type confusion issue was addressed with improved memory handling. - CVE-2021-30984: A race condition was addressed with improved state handling. - CVE-2022-22594: A cross-origin issue in the IndexDB API was addressed with improved input validation. The following CVEs were addressed in a previous update: - CVE-2021-45481: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create. - CVE-2021-45482: A use-after-free in WebCore::ContainerNode::firstChild. - CVE-2021-45483: A use-after-free in WebCore::Frame::page. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-705=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-705=1 Package List: - openSUSE Leap 15.4 (noarch): libwebkit2gtk3-lang-2.34.6-29.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.34.6-29.1 libjavascriptcoregtk-4_0-18-debuginfo-2.34.6-29.1 libwebkit2gtk-4_0-37-2.34.6-29.1 libwebkit2gtk-4_0-37-debuginfo-2.34.6-29.1 typelib-1_0-JavaScriptCore-4_0-2.34.6-29.1 typelib-1_0-WebKit2-4_0-2.34.6-29.1 typelib-1_0-WebKit2WebExtension-4_0-2.34.6-29.1 webkit-jsc-4-2.34.6-29.1 webkit-jsc-4-debuginfo-2.34.6-29.1 webkit2gtk-4_0-injected-bundles-2.34.6-29.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.34.6-29.1 webkit2gtk3-debugsource-2.34.6-29.1 webkit2gtk3-devel-2.34.6-29.1 webkit2gtk3-minibrowser-2.34.6-29.1 webkit2gtk3-minibrowser-debuginfo-2.34.6-29.1 - openSUSE Leap 15.3 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.34.6-29.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.34.6-29.1 libwebkit2gtk-4_0-37-32bit-2.34.6-29.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.34.6-29.1 - openSUSE Leap 15.3 (noarch): libwebkit2gtk3-lang-2.34.6-29.1 References: https://www.suse.com/security/cve/CVE-2021-30934.html https://www.suse.com/security/cve/CVE-2021-30936.html https://www.suse.com/security/cve/CVE-2021-30951.html https://www.suse.com/security/cve/CVE-2021-30952.html https://www.suse.com/security/cve/CVE-2021-30953.html https://www.suse.com/security/cve/CVE-2021-30954.html https://www.suse.com/security/cve/CVE-2021-30984.html https://www.suse.com/security/cve/CVE-2021-45481.html https://www.suse.com/security/cve/CVE-2021-45482.html https://www.suse.com/security/cve/CVE-2021-45483.html https://www.suse.com/security/cve/CVE-2022-22589.html https://www.suse.com/security/cve/CVE-2022-22590.html https://www.suse.com/security/cve/CVE-2022-22592.html https://www.suse.com/security/cve/CVE-2022-22620.html https://bugzilla.suse.com/1195064 https://bugzilla.suse.com/1195735 https://bugzilla.suse.com/1196133

1 0

openSUSE-RU-2022:0711-1: moderate: Recommended update for sudo
by maintenance＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Recommended Update: Recommended update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0711-1 Rating: moderate References: #1181703 SLE-20068 SLE-22569 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains two features can now be installed. Description: This update for sudo fixes the following issues: - Add support in the LDAP filter for negated users (jsc#SLE-20068) - Restrict use of sudo -U other -l to people who have permission to run commands as that user (bsc#1181703, jsc#SLE-22569) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-711=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): sudo-1.9.5p2-150300.3.3.1 sudo-debuginfo-1.9.5p2-150300.3.3.1 sudo-debugsource-1.9.5p2-150300.3.3.1 sudo-devel-1.9.5p2-150300.3.3.1 sudo-plugin-python-1.9.5p2-150300.3.3.1 sudo-plugin-python-debuginfo-1.9.5p2-150300.3.3.1 sudo-test-1.9.5p2-150300.3.3.1 References: https://bugzilla.suse.com/1181703

1 0

openSUSE-SU-2022:0704-1: important: Security update for nodejs8
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for nodejs8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0704-1 Rating: important References: #1191962 #1191963 #1192153 #1192154 #1192696 Cross-References: CVE-2021-23343 CVE-2021-32803 CVE-2021-32804 CVE-2021-3807 CVE-2021-3918 CVSS scores: CVE-2021-23343 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23343 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-32803 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32803 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-3807 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3918 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for nodejs8 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963). - CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962). - CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696). - CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-704=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-704=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nodejs8-8.17.0-10.19.2 nodejs8-debuginfo-8.17.0-10.19.2 nodejs8-debugsource-8.17.0-10.19.2 nodejs8-devel-8.17.0-10.19.2 npm8-8.17.0-10.19.2 - openSUSE Leap 15.4 (noarch): nodejs8-docs-8.17.0-10.19.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs8-8.17.0-10.19.2 nodejs8-debuginfo-8.17.0-10.19.2 nodejs8-debugsource-8.17.0-10.19.2 nodejs8-devel-8.17.0-10.19.2 npm8-8.17.0-10.19.2 - openSUSE Leap 15.3 (noarch): nodejs8-docs-8.17.0-10.19.2 References: https://www.suse.com/security/cve/CVE-2021-23343.html https://www.suse.com/security/cve/CVE-2021-32803.html https://www.suse.com/security/cve/CVE-2021-32804.html https://www.suse.com/security/cve/CVE-2021-3807.html https://www.suse.com/security/cve/CVE-2021-3918.html https://bugzilla.suse.com/1191962 https://bugzilla.suse.com/1191963 https://bugzilla.suse.com/1192153 https://bugzilla.suse.com/1192154 https://bugzilla.suse.com/1192696

1 0

openSUSE-SU-2022:0699-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0699-1 Rating: moderate References: #1038980 Cross-References: CVE-2017-8923 CVSS scores: CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-699=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-699=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.32.1 apache2-mod_php7-debuginfo-7.4.6-3.32.1 php7-7.4.6-3.32.1 php7-bcmath-7.4.6-3.32.1 php7-bcmath-debuginfo-7.4.6-3.32.1 php7-bz2-7.4.6-3.32.1 php7-bz2-debuginfo-7.4.6-3.32.1 php7-calendar-7.4.6-3.32.1 php7-calendar-debuginfo-7.4.6-3.32.1 php7-ctype-7.4.6-3.32.1 php7-ctype-debuginfo-7.4.6-3.32.1 php7-curl-7.4.6-3.32.1 php7-curl-debuginfo-7.4.6-3.32.1 php7-dba-7.4.6-3.32.1 php7-dba-debuginfo-7.4.6-3.32.1 php7-debuginfo-7.4.6-3.32.1 php7-debugsource-7.4.6-3.32.1 php7-devel-7.4.6-3.32.1 php7-dom-7.4.6-3.32.1 php7-dom-debuginfo-7.4.6-3.32.1 php7-embed-7.4.6-3.32.1 php7-embed-debuginfo-7.4.6-3.32.1 php7-enchant-7.4.6-3.32.1 php7-enchant-debuginfo-7.4.6-3.32.1 php7-exif-7.4.6-3.32.1 php7-exif-debuginfo-7.4.6-3.32.1 php7-fastcgi-7.4.6-3.32.1 php7-fastcgi-debuginfo-7.4.6-3.32.1 php7-fileinfo-7.4.6-3.32.1 php7-fileinfo-debuginfo-7.4.6-3.32.1 php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 php7-fpm-7.4.6-3.32.1 php7-fpm-debuginfo-7.4.6-3.32.1 php7-ftp-7.4.6-3.32.1 php7-ftp-debuginfo-7.4.6-3.32.1 php7-gd-7.4.6-3.32.1 php7-gd-debuginfo-7.4.6-3.32.1 php7-gettext-7.4.6-3.32.1 php7-gettext-debuginfo-7.4.6-3.32.1 php7-gmp-7.4.6-3.32.1 php7-gmp-debuginfo-7.4.6-3.32.1 php7-iconv-7.4.6-3.32.1 php7-iconv-debuginfo-7.4.6-3.32.1 php7-intl-7.4.6-3.32.1 php7-intl-debuginfo-7.4.6-3.32.1 php7-json-7.4.6-3.32.1 php7-json-debuginfo-7.4.6-3.32.1 php7-ldap-7.4.6-3.32.1 php7-ldap-debuginfo-7.4.6-3.32.1 php7-mbstring-7.4.6-3.32.1 php7-mbstring-debuginfo-7.4.6-3.32.1 php7-mysql-7.4.6-3.32.1 php7-mysql-debuginfo-7.4.6-3.32.1 php7-odbc-7.4.6-3.32.1 php7-odbc-debuginfo-7.4.6-3.32.1 php7-opcache-7.4.6-3.32.1 php7-opcache-debuginfo-7.4.6-3.32.1 php7-openssl-7.4.6-3.32.1 php7-openssl-debuginfo-7.4.6-3.32.1 php7-pcntl-7.4.6-3.32.1 php7-pcntl-debuginfo-7.4.6-3.32.1 php7-pdo-7.4.6-3.32.1 php7-pdo-debuginfo-7.4.6-3.32.1 php7-pgsql-7.4.6-3.32.1 php7-pgsql-debuginfo-7.4.6-3.32.1 php7-phar-7.4.6-3.32.1 php7-phar-debuginfo-7.4.6-3.32.1 php7-posix-7.4.6-3.32.1 php7-posix-debuginfo-7.4.6-3.32.1 php7-readline-7.4.6-3.32.1 php7-readline-debuginfo-7.4.6-3.32.1 php7-shmop-7.4.6-3.32.1 php7-shmop-debuginfo-7.4.6-3.32.1 php7-snmp-7.4.6-3.32.1 php7-snmp-debuginfo-7.4.6-3.32.1 php7-soap-7.4.6-3.32.1 php7-soap-debuginfo-7.4.6-3.32.1 php7-sockets-7.4.6-3.32.1 php7-sockets-debuginfo-7.4.6-3.32.1 php7-sodium-7.4.6-3.32.1 php7-sodium-debuginfo-7.4.6-3.32.1 php7-sqlite-7.4.6-3.32.1 php7-sqlite-debuginfo-7.4.6-3.32.1 php7-sysvmsg-7.4.6-3.32.1 php7-sysvmsg-debuginfo-7.4.6-3.32.1 php7-sysvsem-7.4.6-3.32.1 php7-sysvsem-debuginfo-7.4.6-3.32.1 php7-sysvshm-7.4.6-3.32.1 php7-sysvshm-debuginfo-7.4.6-3.32.1 php7-test-7.4.6-3.32.1 php7-tidy-7.4.6-3.32.1 php7-tidy-debuginfo-7.4.6-3.32.1 php7-tokenizer-7.4.6-3.32.1 php7-tokenizer-debuginfo-7.4.6-3.32.1 php7-xmlreader-7.4.6-3.32.1 php7-xmlreader-debuginfo-7.4.6-3.32.1 php7-xmlrpc-7.4.6-3.32.1 php7-xmlrpc-debuginfo-7.4.6-3.32.1 php7-xmlwriter-7.4.6-3.32.1 php7-xmlwriter-debuginfo-7.4.6-3.32.1 php7-xsl-7.4.6-3.32.1 php7-xsl-debuginfo-7.4.6-3.32.1 php7-zip-7.4.6-3.32.1 php7-zip-debuginfo-7.4.6-3.32.1 php7-zlib-7.4.6-3.32.1 php7-zlib-debuginfo-7.4.6-3.32.1 References: https://www.suse.com/security/cve/CVE-2017-8923.html https://bugzilla.suse.com/1038980

1 0

openSUSE-RU-2022:20697-1: important: Recommended update for yast2
by maintenance＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:20697-1 Rating: important References: #1195910 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2 fixes the following issues: - Do not strip surrounding white space in CDATA XML elements. (bsc#1195910) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-697=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): yast2-4.3.68-150300.3.17.1 yast2-logs-4.3.68-150300.3.17.1 References: https://bugzilla.suse.com/1195910

1 0

openSUSE-SU-22022:20000-2: important: Security update for nodejs8
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for nodejs8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-22022:20000-2 Rating: important References: #1038980 #1191962 #1191963 #1192153 #1192154 #1192696 Cross-References: CVE-2017-8923 CVE-2021-23343 CVE-2021-32803 CVE-2021-32804 CVE-2021-3807 CVE-2021-3918 CVSS scores: CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-23343 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23343 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-32803 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32803 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-3807 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3918 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for nodejs8 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963). - CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962). - CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696). - CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-699=1 openSUSE-SLE-15.3-2022-704=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.32.1 apache2-mod_php7-debuginfo-7.4.6-3.32.1 nodejs8-8.17.0-10.19.2 nodejs8-debuginfo-8.17.0-10.19.2 nodejs8-debugsource-8.17.0-10.19.2 nodejs8-devel-8.17.0-10.19.2 npm8-8.17.0-10.19.2 php7-7.4.6-3.32.1 php7-bcmath-7.4.6-3.32.1 php7-bcmath-debuginfo-7.4.6-3.32.1 php7-bz2-7.4.6-3.32.1 php7-bz2-debuginfo-7.4.6-3.32.1 php7-calendar-7.4.6-3.32.1 php7-calendar-debuginfo-7.4.6-3.32.1 php7-ctype-7.4.6-3.32.1 php7-ctype-debuginfo-7.4.6-3.32.1 php7-curl-7.4.6-3.32.1 php7-curl-debuginfo-7.4.6-3.32.1 php7-dba-7.4.6-3.32.1 php7-dba-debuginfo-7.4.6-3.32.1 php7-debuginfo-7.4.6-3.32.1 php7-debugsource-7.4.6-3.32.1 php7-devel-7.4.6-3.32.1 php7-dom-7.4.6-3.32.1 php7-dom-debuginfo-7.4.6-3.32.1 php7-embed-7.4.6-3.32.1 php7-embed-debuginfo-7.4.6-3.32.1 php7-enchant-7.4.6-3.32.1 php7-enchant-debuginfo-7.4.6-3.32.1 php7-exif-7.4.6-3.32.1 php7-exif-debuginfo-7.4.6-3.32.1 php7-fastcgi-7.4.6-3.32.1 php7-fastcgi-debuginfo-7.4.6-3.32.1 php7-fileinfo-7.4.6-3.32.1 php7-fileinfo-debuginfo-7.4.6-3.32.1 php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 php7-fpm-7.4.6-3.32.1 php7-fpm-debuginfo-7.4.6-3.32.1 php7-ftp-7.4.6-3.32.1 php7-ftp-debuginfo-7.4.6-3.32.1 php7-gd-7.4.6-3.32.1 php7-gd-debuginfo-7.4.6-3.32.1 php7-gettext-7.4.6-3.32.1 php7-gettext-debuginfo-7.4.6-3.32.1 php7-gmp-7.4.6-3.32.1 php7-gmp-debuginfo-7.4.6-3.32.1 php7-iconv-7.4.6-3.32.1 php7-iconv-debuginfo-7.4.6-3.32.1 php7-intl-7.4.6-3.32.1 php7-intl-debuginfo-7.4.6-3.32.1 php7-json-7.4.6-3.32.1 php7-json-debuginfo-7.4.6-3.32.1 php7-ldap-7.4.6-3.32.1 php7-ldap-debuginfo-7.4.6-3.32.1 php7-mbstring-7.4.6-3.32.1 php7-mbstring-debuginfo-7.4.6-3.32.1 php7-mysql-7.4.6-3.32.1 php7-mysql-debuginfo-7.4.6-3.32.1 php7-odbc-7.4.6-3.32.1 php7-odbc-debuginfo-7.4.6-3.32.1 php7-opcache-7.4.6-3.32.1 php7-opcache-debuginfo-7.4.6-3.32.1 php7-openssl-7.4.6-3.32.1 php7-openssl-debuginfo-7.4.6-3.32.1 php7-pcntl-7.4.6-3.32.1 php7-pcntl-debuginfo-7.4.6-3.32.1 php7-pdo-7.4.6-3.32.1 php7-pdo-debuginfo-7.4.6-3.32.1 php7-pgsql-7.4.6-3.32.1 php7-pgsql-debuginfo-7.4.6-3.32.1 php7-phar-7.4.6-3.32.1 php7-phar-debuginfo-7.4.6-3.32.1 php7-posix-7.4.6-3.32.1 php7-posix-debuginfo-7.4.6-3.32.1 php7-readline-7.4.6-3.32.1 php7-readline-debuginfo-7.4.6-3.32.1 php7-shmop-7.4.6-3.32.1 php7-shmop-debuginfo-7.4.6-3.32.1 php7-snmp-7.4.6-3.32.1 php7-snmp-debuginfo-7.4.6-3.32.1 php7-soap-7.4.6-3.32.1 php7-soap-debuginfo-7.4.6-3.32.1 php7-sockets-7.4.6-3.32.1 php7-sockets-debuginfo-7.4.6-3.32.1 php7-sodium-7.4.6-3.32.1 php7-sodium-debuginfo-7.4.6-3.32.1 php7-sqlite-7.4.6-3.32.1 php7-sqlite-debuginfo-7.4.6-3.32.1 php7-sysvmsg-7.4.6-3.32.1 php7-sysvmsg-debuginfo-7.4.6-3.32.1 php7-sysvsem-7.4.6-3.32.1 php7-sysvsem-debuginfo-7.4.6-3.32.1 php7-sysvshm-7.4.6-3.32.1 php7-sysvshm-debuginfo-7.4.6-3.32.1 php7-test-7.4.6-3.32.1 php7-tidy-7.4.6-3.32.1 php7-tidy-debuginfo-7.4.6-3.32.1 php7-tokenizer-7.4.6-3.32.1 php7-tokenizer-debuginfo-7.4.6-3.32.1 php7-xmlreader-7.4.6-3.32.1 php7-xmlreader-debuginfo-7.4.6-3.32.1 php7-xmlrpc-7.4.6-3.32.1 php7-xmlrpc-debuginfo-7.4.6-3.32.1 php7-xmlwriter-7.4.6-3.32.1 php7-xmlwriter-debuginfo-7.4.6-3.32.1 php7-xsl-7.4.6-3.32.1 php7-xsl-debuginfo-7.4.6-3.32.1 php7-zip-7.4.6-3.32.1 php7-zip-debuginfo-7.4.6-3.32.1 php7-zlib-7.4.6-3.32.1 php7-zlib-debuginfo-7.4.6-3.32.1 - openSUSE Leap 15.3 (noarch): nodejs8-docs-8.17.0-10.19.2 References: https://www.suse.com/security/cve/CVE-2017-8923.html https://www.suse.com/security/cve/CVE-2021-23343.html https://www.suse.com/security/cve/CVE-2021-32803.html https://www.suse.com/security/cve/CVE-2021-32804.html https://www.suse.com/security/cve/CVE-2021-3807.html https://www.suse.com/security/cve/CVE-2021-3918.html https://bugzilla.suse.com/1038980 https://bugzilla.suse.com/1191962 https://bugzilla.suse.com/1191963 https://bugzilla.suse.com/1192153 https://bugzilla.suse.com/1192154 https://bugzilla.suse.com/1192696

1 0

openSUSE-SU-2022:40696-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:40696-1 Rating: important References: #1195230 #1195682 Cross-References: CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763 CVE-2022-22764 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have bypassed permission confirmation during update - CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable - CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements - CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types - CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages - CVE-2022-22763: Script Execution during invalid object state - CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6 Firefox Extended Support Release 91.5.1 ESR (bsc#1195230) - Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-696=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.6.0-152.15.1 MozillaFirefox-branding-upstream-91.6.0-152.15.1 MozillaFirefox-debuginfo-91.6.0-152.15.1 MozillaFirefox-debugsource-91.6.0-152.15.1 MozillaFirefox-devel-91.6.0-152.15.1 MozillaFirefox-translations-common-91.6.0-152.15.1 MozillaFirefox-translations-other-91.6.0-152.15.1 References: https://www.suse.com/security/cve/CVE-2022-22753.html https://www.suse.com/security/cve/CVE-2022-22754.html https://www.suse.com/security/cve/CVE-2022-22756.html https://www.suse.com/security/cve/CVE-2022-22759.html https://www.suse.com/security/cve/CVE-2022-22760.html https://www.suse.com/security/cve/CVE-2022-22761.html https://www.suse.com/security/cve/CVE-2022-22763.html https://www.suse.com/security/cve/CVE-2022-22764.html https://bugzilla.suse.com/1195230 https://bugzilla.suse.com/1195682

1 0

openSUSE-RU-2022:40692-1: moderate: Recommended update for filesystem
by maintenance＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Recommended Update: Recommended update for filesystem ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:40692-1 Rating: moderate References: #1190447 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for filesystem fixes the following issues: - Release ported filesystem to LTSS channels (bsc#1190447). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-692=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): filesystem-15.0-11.5.1 References: https://bugzilla.suse.com/1190447

1 0

openSUSE-SU-22022:20000-2: moderate: Security update for php7
by opensuse-security＠opensuse.org 04 Mar '22

04 Mar '22

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-22022:20000-2 Rating: moderate References: #1038980 Cross-References: CVE-2017-8923 CVSS scores: CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-699=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.32.1 apache2-mod_php7-debuginfo-7.4.6-3.32.1 php7-7.4.6-3.32.1 php7-bcmath-7.4.6-3.32.1 php7-bcmath-debuginfo-7.4.6-3.32.1 php7-bz2-7.4.6-3.32.1 php7-bz2-debuginfo-7.4.6-3.32.1 php7-calendar-7.4.6-3.32.1 php7-calendar-debuginfo-7.4.6-3.32.1 php7-ctype-7.4.6-3.32.1 php7-ctype-debuginfo-7.4.6-3.32.1 php7-curl-7.4.6-3.32.1 php7-curl-debuginfo-7.4.6-3.32.1 php7-dba-7.4.6-3.32.1 php7-dba-debuginfo-7.4.6-3.32.1 php7-debuginfo-7.4.6-3.32.1 php7-debugsource-7.4.6-3.32.1 php7-devel-7.4.6-3.32.1 php7-dom-7.4.6-3.32.1 php7-dom-debuginfo-7.4.6-3.32.1 php7-embed-7.4.6-3.32.1 php7-embed-debuginfo-7.4.6-3.32.1 php7-enchant-7.4.6-3.32.1 php7-enchant-debuginfo-7.4.6-3.32.1 php7-exif-7.4.6-3.32.1 php7-exif-debuginfo-7.4.6-3.32.1 php7-fastcgi-7.4.6-3.32.1 php7-fastcgi-debuginfo-7.4.6-3.32.1 php7-fileinfo-7.4.6-3.32.1 php7-fileinfo-debuginfo-7.4.6-3.32.1 php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 php7-fpm-7.4.6-3.32.1 php7-fpm-debuginfo-7.4.6-3.32.1 php7-ftp-7.4.6-3.32.1 php7-ftp-debuginfo-7.4.6-3.32.1 php7-gd-7.4.6-3.32.1 php7-gd-debuginfo-7.4.6-3.32.1 php7-gettext-7.4.6-3.32.1 php7-gettext-debuginfo-7.4.6-3.32.1 php7-gmp-7.4.6-3.32.1 php7-gmp-debuginfo-7.4.6-3.32.1 php7-iconv-7.4.6-3.32.1 php7-iconv-debuginfo-7.4.6-3.32.1 php7-intl-7.4.6-3.32.1 php7-intl-debuginfo-7.4.6-3.32.1 php7-json-7.4.6-3.32.1 php7-json-debuginfo-7.4.6-3.32.1 php7-ldap-7.4.6-3.32.1 php7-ldap-debuginfo-7.4.6-3.32.1 php7-mbstring-7.4.6-3.32.1 php7-mbstring-debuginfo-7.4.6-3.32.1 php7-mysql-7.4.6-3.32.1 php7-mysql-debuginfo-7.4.6-3.32.1 php7-odbc-7.4.6-3.32.1 php7-odbc-debuginfo-7.4.6-3.32.1 php7-opcache-7.4.6-3.32.1 php7-opcache-debuginfo-7.4.6-3.32.1 php7-openssl-7.4.6-3.32.1 php7-openssl-debuginfo-7.4.6-3.32.1 php7-pcntl-7.4.6-3.32.1 php7-pcntl-debuginfo-7.4.6-3.32.1 php7-pdo-7.4.6-3.32.1 php7-pdo-debuginfo-7.4.6-3.32.1 php7-pgsql-7.4.6-3.32.1 php7-pgsql-debuginfo-7.4.6-3.32.1 php7-phar-7.4.6-3.32.1 php7-phar-debuginfo-7.4.6-3.32.1 php7-posix-7.4.6-3.32.1 php7-posix-debuginfo-7.4.6-3.32.1 php7-readline-7.4.6-3.32.1 php7-readline-debuginfo-7.4.6-3.32.1 php7-shmop-7.4.6-3.32.1 php7-shmop-debuginfo-7.4.6-3.32.1 php7-snmp-7.4.6-3.32.1 php7-snmp-debuginfo-7.4.6-3.32.1 php7-soap-7.4.6-3.32.1 php7-soap-debuginfo-7.4.6-3.32.1 php7-sockets-7.4.6-3.32.1 php7-sockets-debuginfo-7.4.6-3.32.1 php7-sodium-7.4.6-3.32.1 php7-sodium-debuginfo-7.4.6-3.32.1 php7-sqlite-7.4.6-3.32.1 php7-sqlite-debuginfo-7.4.6-3.32.1 php7-sysvmsg-7.4.6-3.32.1 php7-sysvmsg-debuginfo-7.4.6-3.32.1 php7-sysvsem-7.4.6-3.32.1 php7-sysvsem-debuginfo-7.4.6-3.32.1 php7-sysvshm-7.4.6-3.32.1 php7-sysvshm-debuginfo-7.4.6-3.32.1 php7-test-7.4.6-3.32.1 php7-tidy-7.4.6-3.32.1 php7-tidy-debuginfo-7.4.6-3.32.1 php7-tokenizer-7.4.6-3.32.1 php7-tokenizer-debuginfo-7.4.6-3.32.1 php7-xmlreader-7.4.6-3.32.1 php7-xmlreader-debuginfo-7.4.6-3.32.1 php7-xmlrpc-7.4.6-3.32.1 php7-xmlrpc-debuginfo-7.4.6-3.32.1 php7-xmlwriter-7.4.6-3.32.1 php7-xmlwriter-debuginfo-7.4.6-3.32.1 php7-xsl-7.4.6-3.32.1 php7-xsl-debuginfo-7.4.6-3.32.1 php7-zip-7.4.6-3.32.1 php7-zip-debuginfo-7.4.6-3.32.1 php7-zlib-7.4.6-3.32.1 php7-zlib-debuginfo-7.4.6-3.32.1 References: https://www.suse.com/security/cve/CVE-2017-8923.html https://bugzilla.suse.com/1038980

1 0

openSUSE-SU-2022:0072-1: moderate: Security update for bitcoin
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for bitcoin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0072-1 Rating: moderate References: Cross-References: CVE-2021-3195 CVSS scores: CVE-2021-3195 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bitcoin fixes the following issues: Update to version 0.21.2 * P2P protocol and network code * use NetPermissions::HasFlag() in CConnman::Bind() * Rate limit the processing of rumoured addresses * Wallet * Do not iterate a directory if having an error while accessing it * RPC * Reset scantxoutset progress before inferring descriptors * Build System * depends: update Qt 5.9 source url * Update Windows code signing certificate * Use custom MacOS code signing tool * Fix build with Boost 1.77.0 * Tests and QA * Build with --enable-werror by default, and document exceptions * Fix intermittent feature_taproot issue * Fix macOS brew install command * add missing ECCVerifyHandle to base_encode_decode * Run fuzzer task for the master branch only * GUI * Do not use QClipboard::Selection on Windows and macOS. * Remove user input from URI error message * Draw "eye" sign at the beginning of watch-only addresses * Miscellaneous * Fix crash when parsing command line with -noincludeconf=0 * util: Properly handle -noincludeconf on command line (take 2) Update to version 0.21.1 * Consensus: * Speedy trial support for versionbits * Speedy trial activation parameters for Taproot * P2P protocol and network code * allow CSubNet of non-IP networks * Avoid UBSan warning in ProcessMessage * Wallet * Introduce DeferredSignatureChecker and have SignatureExtractorClass subclass it * Avoid requesting fee rates multiple times during coin selection * RPC and other APIs: * Disallow sendtoaddress and sendmany when private keys disabled CVE-2021-3195 Update to version 0.21.0: * For full details see release-notes-0.21.0.md Update to version 0.20.1 * Mining * Fix GBT: Restore "!segwit" and "csv" to "rules" key * P2P protocol and network code * Replace automatic bans with discouragement filter * Wallet * Handle concurrent wallet loading * Minimal fix to restore conflicted transaction notifications * RPC and other APIs * Increment input value sum only once per UTXO in decodepsbt * psbt: Increment input value sum only once per UTXO in decodepsbt * psbt: Include and allow both non_witness_utxo and witness_utxo for segwit inputs * GUI * Add missing QPainterPath include * update Qt base translations for macOS release * Misc * util: Don't reference errno when pthread fails * Fix locking on WSL using flock instead of fcntl Update to version 0.20.0: * See https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-no tes-0.20.0.md - Do not run bitcoind in daemon mode. Running it not as a background process makes it working properly with journald (instead of writing logs in /var/log). Update to version 0.19.1: * Wallet * Fix origfee return for bumpfee with feerate arg * Fix unique_ptr usage in boost::signals2 * Fix issue with conflicted mempool tx in listsinceblock * Bug: IsUsedDestination shouldn't use key id as script id for ScriptHash * IsUsedDestination should count any known single-key address * Reset reused transactions cache * RPC and other APIs * cli: Fix fatal leveldb error when specifying -blockfilterindex=basic twice * require second argument only for scantxoutset start action * zmq: Fix due to invalid argument and multiple notifiers * psbt: handle unspendable psbts * psbt: check that various indexes and amounts are within bounds * GUI * Fix missing qRegisterMetaType for size_t * disable File->CreateWallet during startup * Fix comparison function signature * Fix unintialized WalletView::progressDialog * Tests and QA * Appveyor improvement - text file for vcpkg package list * fix "bitcoind already running" warnings on macOS * add missing #include to fix compiler errors * Platform support * Update msvc build for Visual Studio 2019 v16.4 * Updates to appveyor config for VS2019 and Qt5.9.8 + msvc project fixes * bug-fix macos: give free bytes to F_PREALLOCATE * Miscellaneous * init: Stop indexes on shutdown after ChainStateFlushed callback * util: Add missing headers to util/fees.cpp * Unbreak build with Boost 1.72.0 * scripts: Fix symbol-check & security-check argument passing * Log to net category for exceptions in ProcessMessages * Update univalue subtree Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-72=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): bitcoin-qt5-0.21.2-bp153.2.3.1 bitcoin-test-0.21.2-bp153.2.3.1 bitcoin-utils-0.21.2-bp153.2.3.1 bitcoind-0.21.2-bp153.2.3.1 libbitcoinconsensus-devel-0.21.2-bp153.2.3.1 libbitcoinconsensus0-0.21.2-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-3195.html

1 0

openSUSE-SU-42022-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-42022-1 Rating: moderate References: #1038980 #1191962 #1191963 #1192153 #1192154 #1192696 #1195230 #1195682 Cross-References: CVE-2017-8923 CVE-2021-23343 CVE-2021-32803 CVE-2021-32804 CVE-2021-3807 CVE-2021-3918 CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763 CVE-2022-22764 CVSS scores: CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-23343 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23343 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-32803 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32803 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-3807 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3918 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have bypassed permission confirmation during update - CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable - CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements - CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types - CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages - CVE-2022-22763: Script Execution during invalid object state - CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6 Firefox Extended Support Release 91.5.1 ESR (bsc#1195230) - Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-696=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-699=1 openSUSE-SLE-15.3-2022-704=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.6.0-152.15.1 MozillaFirefox-branding-upstream-91.6.0-152.15.1 MozillaFirefox-debuginfo-91.6.0-152.15.1 MozillaFirefox-debugsource-91.6.0-152.15.1 MozillaFirefox-devel-91.6.0-152.15.1 MozillaFirefox-translations-common-91.6.0-152.15.1 MozillaFirefox-translations-other-91.6.0-152.15.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.32.1 apache2-mod_php7-debuginfo-7.4.6-3.32.1 nodejs8-8.17.0-10.19.2 nodejs8-debuginfo-8.17.0-10.19.2 nodejs8-debugsource-8.17.0-10.19.2 nodejs8-devel-8.17.0-10.19.2 npm8-8.17.0-10.19.2 php7-7.4.6-3.32.1 php7-bcmath-7.4.6-3.32.1 php7-bcmath-debuginfo-7.4.6-3.32.1 php7-bz2-7.4.6-3.32.1 php7-bz2-debuginfo-7.4.6-3.32.1 php7-calendar-7.4.6-3.32.1 php7-calendar-debuginfo-7.4.6-3.32.1 php7-ctype-7.4.6-3.32.1 php7-ctype-debuginfo-7.4.6-3.32.1 php7-curl-7.4.6-3.32.1 php7-curl-debuginfo-7.4.6-3.32.1 php7-dba-7.4.6-3.32.1 php7-dba-debuginfo-7.4.6-3.32.1 php7-debuginfo-7.4.6-3.32.1 php7-debugsource-7.4.6-3.32.1 php7-devel-7.4.6-3.32.1 php7-dom-7.4.6-3.32.1 php7-dom-debuginfo-7.4.6-3.32.1 php7-embed-7.4.6-3.32.1 php7-embed-debuginfo-7.4.6-3.32.1 php7-enchant-7.4.6-3.32.1 php7-enchant-debuginfo-7.4.6-3.32.1 php7-exif-7.4.6-3.32.1 php7-exif-debuginfo-7.4.6-3.32.1 php7-fastcgi-7.4.6-3.32.1 php7-fastcgi-debuginfo-7.4.6-3.32.1 php7-fileinfo-7.4.6-3.32.1 php7-fileinfo-debuginfo-7.4.6-3.32.1 php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 php7-fpm-7.4.6-3.32.1 php7-fpm-debuginfo-7.4.6-3.32.1 php7-ftp-7.4.6-3.32.1 php7-ftp-debuginfo-7.4.6-3.32.1 php7-gd-7.4.6-3.32.1 php7-gd-debuginfo-7.4.6-3.32.1 php7-gettext-7.4.6-3.32.1 php7-gettext-debuginfo-7.4.6-3.32.1 php7-gmp-7.4.6-3.32.1 php7-gmp-debuginfo-7.4.6-3.32.1 php7-iconv-7.4.6-3.32.1 php7-iconv-debuginfo-7.4.6-3.32.1 php7-intl-7.4.6-3.32.1 php7-intl-debuginfo-7.4.6-3.32.1 php7-json-7.4.6-3.32.1 php7-json-debuginfo-7.4.6-3.32.1 php7-ldap-7.4.6-3.32.1 php7-ldap-debuginfo-7.4.6-3.32.1 php7-mbstring-7.4.6-3.32.1 php7-mbstring-debuginfo-7.4.6-3.32.1 php7-mysql-7.4.6-3.32.1 php7-mysql-debuginfo-7.4.6-3.32.1 php7-odbc-7.4.6-3.32.1 php7-odbc-debuginfo-7.4.6-3.32.1 php7-opcache-7.4.6-3.32.1 php7-opcache-debuginfo-7.4.6-3.32.1 php7-openssl-7.4.6-3.32.1 php7-openssl-debuginfo-7.4.6-3.32.1 php7-pcntl-7.4.6-3.32.1 php7-pcntl-debuginfo-7.4.6-3.32.1 php7-pdo-7.4.6-3.32.1 php7-pdo-debuginfo-7.4.6-3.32.1 php7-pgsql-7.4.6-3.32.1 php7-pgsql-debuginfo-7.4.6-3.32.1 php7-phar-7.4.6-3.32.1 php7-phar-debuginfo-7.4.6-3.32.1 php7-posix-7.4.6-3.32.1 php7-posix-debuginfo-7.4.6-3.32.1 php7-readline-7.4.6-3.32.1 php7-readline-debuginfo-7.4.6-3.32.1 php7-shmop-7.4.6-3.32.1 php7-shmop-debuginfo-7.4.6-3.32.1 php7-snmp-7.4.6-3.32.1 php7-snmp-debuginfo-7.4.6-3.32.1 php7-soap-7.4.6-3.32.1 php7-soap-debuginfo-7.4.6-3.32.1 php7-sockets-7.4.6-3.32.1 php7-sockets-debuginfo-7.4.6-3.32.1 php7-sodium-7.4.6-3.32.1 php7-sodium-debuginfo-7.4.6-3.32.1 php7-sqlite-7.4.6-3.32.1 php7-sqlite-debuginfo-7.4.6-3.32.1 php7-sysvmsg-7.4.6-3.32.1 php7-sysvmsg-debuginfo-7.4.6-3.32.1 php7-sysvsem-7.4.6-3.32.1 php7-sysvsem-debuginfo-7.4.6-3.32.1 php7-sysvshm-7.4.6-3.32.1 php7-sysvshm-debuginfo-7.4.6-3.32.1 php7-test-7.4.6-3.32.1 php7-tidy-7.4.6-3.32.1 php7-tidy-debuginfo-7.4.6-3.32.1 php7-tokenizer-7.4.6-3.32.1 php7-tokenizer-debuginfo-7.4.6-3.32.1 php7-xmlreader-7.4.6-3.32.1 php7-xmlreader-debuginfo-7.4.6-3.32.1 php7-xmlrpc-7.4.6-3.32.1 php7-xmlrpc-debuginfo-7.4.6-3.32.1 php7-xmlwriter-7.4.6-3.32.1 php7-xmlwriter-debuginfo-7.4.6-3.32.1 php7-xsl-7.4.6-3.32.1 php7-xsl-debuginfo-7.4.6-3.32.1 php7-zip-7.4.6-3.32.1 php7-zip-debuginfo-7.4.6-3.32.1 php7-zlib-7.4.6-3.32.1 php7-zlib-debuginfo-7.4.6-3.32.1 - openSUSE Leap 15.3 (noarch): nodejs8-docs-8.17.0-10.19.2 References: https://www.suse.com/security/cve/CVE-2017-8923.html https://www.suse.com/security/cve/CVE-2021-23343.html https://www.suse.com/security/cve/CVE-2021-32803.html https://www.suse.com/security/cve/CVE-2021-32804.html https://www.suse.com/security/cve/CVE-2021-3807.html https://www.suse.com/security/cve/CVE-2021-3918.html https://www.suse.com/security/cve/CVE-2022-22753.html https://www.suse.com/security/cve/CVE-2022-22754.html https://www.suse.com/security/cve/CVE-2022-22756.html https://www.suse.com/security/cve/CVE-2022-22759.html https://www.suse.com/security/cve/CVE-2022-22760.html https://www.suse.com/security/cve/CVE-2022-22761.html https://www.suse.com/security/cve/CVE-2022-22763.html https://www.suse.com/security/cve/CVE-2022-22764.html https://bugzilla.suse.com/1038980 https://bugzilla.suse.com/1191962 https://bugzilla.suse.com/1191963 https://bugzilla.suse.com/1192153 https://bugzilla.suse.com/1192154 https://bugzilla.suse.com/1192696 https://bugzilla.suse.com/1195230 https://bugzilla.suse.com/1195682

1 0

openSUSE-SU-42022-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-42022-1 Rating: moderate References: #1038980 #1195230 #1195682 Cross-References: CVE-2017-8923 CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763 CVE-2022-22764 CVSS scores: CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have bypassed permission confirmation during update - CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable - CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements - CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types - CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages - CVE-2022-22763: Script Execution during invalid object state - CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6 Firefox Extended Support Release 91.5.1 ESR (bsc#1195230) - Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-696=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-699=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.6.0-152.15.1 MozillaFirefox-branding-upstream-91.6.0-152.15.1 MozillaFirefox-debuginfo-91.6.0-152.15.1 MozillaFirefox-debugsource-91.6.0-152.15.1 MozillaFirefox-devel-91.6.0-152.15.1 MozillaFirefox-translations-common-91.6.0-152.15.1 MozillaFirefox-translations-other-91.6.0-152.15.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.32.1 apache2-mod_php7-debuginfo-7.4.6-3.32.1 php7-7.4.6-3.32.1 php7-bcmath-7.4.6-3.32.1 php7-bcmath-debuginfo-7.4.6-3.32.1 php7-bz2-7.4.6-3.32.1 php7-bz2-debuginfo-7.4.6-3.32.1 php7-calendar-7.4.6-3.32.1 php7-calendar-debuginfo-7.4.6-3.32.1 php7-ctype-7.4.6-3.32.1 php7-ctype-debuginfo-7.4.6-3.32.1 php7-curl-7.4.6-3.32.1 php7-curl-debuginfo-7.4.6-3.32.1 php7-dba-7.4.6-3.32.1 php7-dba-debuginfo-7.4.6-3.32.1 php7-debuginfo-7.4.6-3.32.1 php7-debugsource-7.4.6-3.32.1 php7-devel-7.4.6-3.32.1 php7-dom-7.4.6-3.32.1 php7-dom-debuginfo-7.4.6-3.32.1 php7-embed-7.4.6-3.32.1 php7-embed-debuginfo-7.4.6-3.32.1 php7-enchant-7.4.6-3.32.1 php7-enchant-debuginfo-7.4.6-3.32.1 php7-exif-7.4.6-3.32.1 php7-exif-debuginfo-7.4.6-3.32.1 php7-fastcgi-7.4.6-3.32.1 php7-fastcgi-debuginfo-7.4.6-3.32.1 php7-fileinfo-7.4.6-3.32.1 php7-fileinfo-debuginfo-7.4.6-3.32.1 php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 php7-fpm-7.4.6-3.32.1 php7-fpm-debuginfo-7.4.6-3.32.1 php7-ftp-7.4.6-3.32.1 php7-ftp-debuginfo-7.4.6-3.32.1 php7-gd-7.4.6-3.32.1 php7-gd-debuginfo-7.4.6-3.32.1 php7-gettext-7.4.6-3.32.1 php7-gettext-debuginfo-7.4.6-3.32.1 php7-gmp-7.4.6-3.32.1 php7-gmp-debuginfo-7.4.6-3.32.1 php7-iconv-7.4.6-3.32.1 php7-iconv-debuginfo-7.4.6-3.32.1 php7-intl-7.4.6-3.32.1 php7-intl-debuginfo-7.4.6-3.32.1 php7-json-7.4.6-3.32.1 php7-json-debuginfo-7.4.6-3.32.1 php7-ldap-7.4.6-3.32.1 php7-ldap-debuginfo-7.4.6-3.32.1 php7-mbstring-7.4.6-3.32.1 php7-mbstring-debuginfo-7.4.6-3.32.1 php7-mysql-7.4.6-3.32.1 php7-mysql-debuginfo-7.4.6-3.32.1 php7-odbc-7.4.6-3.32.1 php7-odbc-debuginfo-7.4.6-3.32.1 php7-opcache-7.4.6-3.32.1 php7-opcache-debuginfo-7.4.6-3.32.1 php7-openssl-7.4.6-3.32.1 php7-openssl-debuginfo-7.4.6-3.32.1 php7-pcntl-7.4.6-3.32.1 php7-pcntl-debuginfo-7.4.6-3.32.1 php7-pdo-7.4.6-3.32.1 php7-pdo-debuginfo-7.4.6-3.32.1 php7-pgsql-7.4.6-3.32.1 php7-pgsql-debuginfo-7.4.6-3.32.1 php7-phar-7.4.6-3.32.1 php7-phar-debuginfo-7.4.6-3.32.1 php7-posix-7.4.6-3.32.1 php7-posix-debuginfo-7.4.6-3.32.1 php7-readline-7.4.6-3.32.1 php7-readline-debuginfo-7.4.6-3.32.1 php7-shmop-7.4.6-3.32.1 php7-shmop-debuginfo-7.4.6-3.32.1 php7-snmp-7.4.6-3.32.1 php7-snmp-debuginfo-7.4.6-3.32.1 php7-soap-7.4.6-3.32.1 php7-soap-debuginfo-7.4.6-3.32.1 php7-sockets-7.4.6-3.32.1 php7-sockets-debuginfo-7.4.6-3.32.1 php7-sodium-7.4.6-3.32.1 php7-sodium-debuginfo-7.4.6-3.32.1 php7-sqlite-7.4.6-3.32.1 php7-sqlite-debuginfo-7.4.6-3.32.1 php7-sysvmsg-7.4.6-3.32.1 php7-sysvmsg-debuginfo-7.4.6-3.32.1 php7-sysvsem-7.4.6-3.32.1 php7-sysvsem-debuginfo-7.4.6-3.32.1 php7-sysvshm-7.4.6-3.32.1 php7-sysvshm-debuginfo-7.4.6-3.32.1 php7-test-7.4.6-3.32.1 php7-tidy-7.4.6-3.32.1 php7-tidy-debuginfo-7.4.6-3.32.1 php7-tokenizer-7.4.6-3.32.1 php7-tokenizer-debuginfo-7.4.6-3.32.1 php7-xmlreader-7.4.6-3.32.1 php7-xmlreader-debuginfo-7.4.6-3.32.1 php7-xmlrpc-7.4.6-3.32.1 php7-xmlrpc-debuginfo-7.4.6-3.32.1 php7-xmlwriter-7.4.6-3.32.1 php7-xmlwriter-debuginfo-7.4.6-3.32.1 php7-xsl-7.4.6-3.32.1 php7-xsl-debuginfo-7.4.6-3.32.1 php7-zip-7.4.6-3.32.1 php7-zip-debuginfo-7.4.6-3.32.1 php7-zlib-7.4.6-3.32.1 php7-zlib-debuginfo-7.4.6-3.32.1 References: https://www.suse.com/security/cve/CVE-2017-8923.html https://www.suse.com/security/cve/CVE-2022-22753.html https://www.suse.com/security/cve/CVE-2022-22754.html https://www.suse.com/security/cve/CVE-2022-22756.html https://www.suse.com/security/cve/CVE-2022-22759.html https://www.suse.com/security/cve/CVE-2022-22760.html https://www.suse.com/security/cve/CVE-2022-22761.html https://www.suse.com/security/cve/CVE-2022-22763.html https://www.suse.com/security/cve/CVE-2022-22764.html https://bugzilla.suse.com/1038980 https://bugzilla.suse.com/1195230 https://bugzilla.suse.com/1195682

1 0

openSUSE-RU-2022:0071-1: moderate: Recommended update for knewstuff, plasma5-desktop
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for knewstuff, plasma5-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0071-1 Rating: moderate References: #1196199 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for knewstuff, plasma5-desktop fixes the following issues: - Reduce requests to download.kde.org (boo#1196199). - Avoid requests to download.kde.org (boo#1196199). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-71=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-71=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): container-suseconnect-2.3.0-4.17.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): knewstuff-5.76.0-bp153.2.8.1 knewstuff-core-devel-5.76.0-bp153.2.8.1 knewstuff-devel-5.76.0-bp153.2.8.1 knewstuff-imports-5.76.0-bp153.2.8.1 knewstuff-quick-devel-5.76.0-bp153.2.8.1 libKF5NewStuff5-5.76.0-bp153.2.8.1 libKF5NewStuffCore5-5.76.0-bp153.2.8.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le x86_64): plasma5-desktop-5.18.6-bp153.3.5.1 plasma5-desktop-debuginfo-5.18.6-bp153.3.5.1 plasma5-desktop-debugsource-5.18.6-bp153.3.5.1 plasma5-desktop-emojier-5.18.6-bp153.3.5.1 plasma5-desktop-emojier-debuginfo-5.18.6-bp153.3.5.1 - openSUSE Backports SLE-15-SP3 (aarch64_ilp32): knewstuff-devel-64bit-5.76.0-bp153.2.8.1 libKF5NewStuff5-64bit-5.76.0-bp153.2.8.1 libKF5NewStuffCore5-64bit-5.76.0-bp153.2.8.1 - openSUSE Backports SLE-15-SP3 (noarch): libKF5NewStuff5-lang-5.76.0-bp153.2.8.1 plasma5-desktop-lang-5.18.6-bp153.3.5.1 - openSUSE Backports SLE-15-SP3 (x86_64): knewstuff-devel-32bit-5.76.0-bp153.2.8.1 libKF5NewStuff5-32bit-5.76.0-bp153.2.8.1 libKF5NewStuffCore5-32bit-5.76.0-bp153.2.8.1 References: https://bugzilla.suse.com/1196199

1 0

openSUSE-RU-42022-1: moderate: Recommended update for filesystem
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for filesystem ______________________________________________________________________________ Announcement ID: openSUSE-RU-42022-1 Rating: moderate References: #1190447 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for filesystem fixes the following issues: - Release ported filesystem to LTSS channels (bsc#1190447). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-692=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): filesystem-15.0-11.5.1 References: https://bugzilla.suse.com/1190447

1 0

openSUSE-SU-42022-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-42022-1 Rating: moderate References: #1038980 Cross-References: CVE-2017-8923 CVSS scores: CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-699=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.32.1 apache2-mod_php7-debuginfo-7.4.6-3.32.1 php7-7.4.6-3.32.1 php7-bcmath-7.4.6-3.32.1 php7-bcmath-debuginfo-7.4.6-3.32.1 php7-bz2-7.4.6-3.32.1 php7-bz2-debuginfo-7.4.6-3.32.1 php7-calendar-7.4.6-3.32.1 php7-calendar-debuginfo-7.4.6-3.32.1 php7-ctype-7.4.6-3.32.1 php7-ctype-debuginfo-7.4.6-3.32.1 php7-curl-7.4.6-3.32.1 php7-curl-debuginfo-7.4.6-3.32.1 php7-dba-7.4.6-3.32.1 php7-dba-debuginfo-7.4.6-3.32.1 php7-debuginfo-7.4.6-3.32.1 php7-debugsource-7.4.6-3.32.1 php7-devel-7.4.6-3.32.1 php7-dom-7.4.6-3.32.1 php7-dom-debuginfo-7.4.6-3.32.1 php7-embed-7.4.6-3.32.1 php7-embed-debuginfo-7.4.6-3.32.1 php7-enchant-7.4.6-3.32.1 php7-enchant-debuginfo-7.4.6-3.32.1 php7-exif-7.4.6-3.32.1 php7-exif-debuginfo-7.4.6-3.32.1 php7-fastcgi-7.4.6-3.32.1 php7-fastcgi-debuginfo-7.4.6-3.32.1 php7-fileinfo-7.4.6-3.32.1 php7-fileinfo-debuginfo-7.4.6-3.32.1 php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 php7-fpm-7.4.6-3.32.1 php7-fpm-debuginfo-7.4.6-3.32.1 php7-ftp-7.4.6-3.32.1 php7-ftp-debuginfo-7.4.6-3.32.1 php7-gd-7.4.6-3.32.1 php7-gd-debuginfo-7.4.6-3.32.1 php7-gettext-7.4.6-3.32.1 php7-gettext-debuginfo-7.4.6-3.32.1 php7-gmp-7.4.6-3.32.1 php7-gmp-debuginfo-7.4.6-3.32.1 php7-iconv-7.4.6-3.32.1 php7-iconv-debuginfo-7.4.6-3.32.1 php7-intl-7.4.6-3.32.1 php7-intl-debuginfo-7.4.6-3.32.1 php7-json-7.4.6-3.32.1 php7-json-debuginfo-7.4.6-3.32.1 php7-ldap-7.4.6-3.32.1 php7-ldap-debuginfo-7.4.6-3.32.1 php7-mbstring-7.4.6-3.32.1 php7-mbstring-debuginfo-7.4.6-3.32.1 php7-mysql-7.4.6-3.32.1 php7-mysql-debuginfo-7.4.6-3.32.1 php7-odbc-7.4.6-3.32.1 php7-odbc-debuginfo-7.4.6-3.32.1 php7-opcache-7.4.6-3.32.1 php7-opcache-debuginfo-7.4.6-3.32.1 php7-openssl-7.4.6-3.32.1 php7-openssl-debuginfo-7.4.6-3.32.1 php7-pcntl-7.4.6-3.32.1 php7-pcntl-debuginfo-7.4.6-3.32.1 php7-pdo-7.4.6-3.32.1 php7-pdo-debuginfo-7.4.6-3.32.1 php7-pgsql-7.4.6-3.32.1 php7-pgsql-debuginfo-7.4.6-3.32.1 php7-phar-7.4.6-3.32.1 php7-phar-debuginfo-7.4.6-3.32.1 php7-posix-7.4.6-3.32.1 php7-posix-debuginfo-7.4.6-3.32.1 php7-readline-7.4.6-3.32.1 php7-readline-debuginfo-7.4.6-3.32.1 php7-shmop-7.4.6-3.32.1 php7-shmop-debuginfo-7.4.6-3.32.1 php7-snmp-7.4.6-3.32.1 php7-snmp-debuginfo-7.4.6-3.32.1 php7-soap-7.4.6-3.32.1 php7-soap-debuginfo-7.4.6-3.32.1 php7-sockets-7.4.6-3.32.1 php7-sockets-debuginfo-7.4.6-3.32.1 php7-sodium-7.4.6-3.32.1 php7-sodium-debuginfo-7.4.6-3.32.1 php7-sqlite-7.4.6-3.32.1 php7-sqlite-debuginfo-7.4.6-3.32.1 php7-sysvmsg-7.4.6-3.32.1 php7-sysvmsg-debuginfo-7.4.6-3.32.1 php7-sysvsem-7.4.6-3.32.1 php7-sysvsem-debuginfo-7.4.6-3.32.1 php7-sysvshm-7.4.6-3.32.1 php7-sysvshm-debuginfo-7.4.6-3.32.1 php7-test-7.4.6-3.32.1 php7-tidy-7.4.6-3.32.1 php7-tidy-debuginfo-7.4.6-3.32.1 php7-tokenizer-7.4.6-3.32.1 php7-tokenizer-debuginfo-7.4.6-3.32.1 php7-xmlreader-7.4.6-3.32.1 php7-xmlreader-debuginfo-7.4.6-3.32.1 php7-xmlrpc-7.4.6-3.32.1 php7-xmlrpc-debuginfo-7.4.6-3.32.1 php7-xmlwriter-7.4.6-3.32.1 php7-xmlwriter-debuginfo-7.4.6-3.32.1 php7-xsl-7.4.6-3.32.1 php7-xsl-debuginfo-7.4.6-3.32.1 php7-zip-7.4.6-3.32.1 php7-zip-debuginfo-7.4.6-3.32.1 php7-zlib-7.4.6-3.32.1 php7-zlib-debuginfo-7.4.6-3.32.1 References: https://www.suse.com/security/cve/CVE-2017-8923.html https://bugzilla.suse.com/1038980

1 0

openSUSE-RU-22022-1: important: Recommended update for yast2
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-22022-1 Rating: important References: #1195910 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2 fixes the following issues: - Do not strip surrounding white space in CDATA XML elements. (bsc#1195910) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-697=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): yast2-4.3.68-150300.3.17.1 yast2-logs-4.3.68-150300.3.17.1 References: https://bugzilla.suse.com/1195910

1 0

openSUSE-SU-2022:0070-1: important: Security update for nodejs-electron
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for nodejs-electron ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0070-1 Rating: important References: Cross-References: CVE-2021-30625 CVE-2021-30626 CVE-2021-30627 CVE-2021-30628 CVE-2021-30630 CVE-2021-30631 CVE-2021-30632 CVE-2021-30633 CVE-2021-37981 CVE-2021-37984 CVE-2021-37987 CVE-2021-37989 CVE-2021-37992 CVE-2021-37996 CVE-2021-37998 CVE-2021-38001 CVE-2021-38002 CVE-2021-38003 CVSS scores: CVE-2021-30625 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30626 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30627 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30628 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30630 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2021-30632 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30633 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-37981 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-37984 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-37987 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-37989 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-37992 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-37996 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-37998 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-38001 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-38002 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-38003 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: This update for nodejs-electron fixes the following issues: - Fix webpack-4 with OpenSSL 3.0 Update to version 16.0.9 * https://github.com/electron/electron/releases/tag/v16.0.9 Update to version 16.0.8 * https://github.com/electron/electron/releases/tag/v16.0.8 - Add devel package with node headers (e.g. for node-gyp) - Update to version 16.0.7 * https://github.com/electron/electron/releases/tag/v16.0.7 - Update to version 15.3.3 * https://github.com/electron/electron/releases/tag/v15.3.3 - Update to version 13.6.3 https://github.com/electron/electron/releases/tag/v13.6.3 - Update to version 13.6.2 https://github.com/electron/electron/releases/tag/v13.6.2 - Fix for CVE-2021-37998 - Fix for CVE-2021-38001 - Fix for CVE-2021-38002 - Fix for CVE-2021-38003 - Do not build with H264 - Update to version 13.6.1 https://github.com/electron/electron/releases/tag/v13.6.1 - Fix for CVE-2021-37981 - Fix for CVE-2021-37984 - Fix for CVE-2021-37987 - Fix for CVE-2021-37989 - Fix for CVE-2021-37992 - Fix for CVE-2021-37996 - Update to version 13.5.1 https://github.com/electron/electron/releases/tag/v13.5.1 - Update to version 13.5.0 https://github.com/electron/electron/releases/tag/v13.5.0 - Fix for CVE-2021-30627 - Fix for CVE-2021-30631 - Fix for CVE-2021-30632 - Fix for CVE-2021-30625 - Fix for CVE-2021-30626 - Fix for CVE-2021-30628 - Fix for CVE-2021-30630 - Fix for CVE-2021-30633 - Version 13.4.0 - Update to version 13.1.8 * https://github.com/electron/electron/releases/tag/v13.1.8 - Update to version 13.1.7 * https://github.com/electron/electron/releases/tag/v13.1.7 - Update to version 13.1.6 * https://github.com/electron/electron/releases/tag/v13.1.6 * https://github.com/electron/electron/releases/tag/v13.1.5 - Update to version 13.1.4 * https://github.com/electron/electron/releases/tag/v13.1.4 * https://github.com/electron/electron/releases/tag/v13.1.3 - Build with vaapi support - Install missing vk_swiftshader_icd.json - Update to version 13.1.2 * https://github.com/electron/electron/releases/tag/v13.1.2 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-70=1 Package List: - openSUSE Backports SLE-15-SP3 (x86_64): nodejs-electron-16.0.9-bp153.2.1 nodejs-electron-devel-16.0.9-bp153.2.1 References: https://www.suse.com/security/cve/CVE-2021-30625.html https://www.suse.com/security/cve/CVE-2021-30626.html https://www.suse.com/security/cve/CVE-2021-30627.html https://www.suse.com/security/cve/CVE-2021-30628.html https://www.suse.com/security/cve/CVE-2021-30630.html https://www.suse.com/security/cve/CVE-2021-30631.html https://www.suse.com/security/cve/CVE-2021-30632.html https://www.suse.com/security/cve/CVE-2021-30633.html https://www.suse.com/security/cve/CVE-2021-37981.html https://www.suse.com/security/cve/CVE-2021-37984.html https://www.suse.com/security/cve/CVE-2021-37987.html https://www.suse.com/security/cve/CVE-2021-37989.html https://www.suse.com/security/cve/CVE-2021-37992.html https://www.suse.com/security/cve/CVE-2021-37996.html https://www.suse.com/security/cve/CVE-2021-37998.html https://www.suse.com/security/cve/CVE-2021-38001.html https://www.suse.com/security/cve/CVE-2021-38002.html https://www.suse.com/security/cve/CVE-2021-38003.html

1 0

openSUSE-RU-2022:0687-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0687-1 Rating: moderate References: #1191668 #1192119 SLE-23394 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for libvirt fixes the following issues: - libxl: Mark auto-allocated graphics ports to used on reconnect. - libxl: Release all auto-allocated graphics ports. (bsc#1191668) - libxl: Add lock process indicator to saved VM state. (bsc#1191668) - spec: Weaken apparmor-abstractions dependency to Recommends. (bsc#1192119, jsc#SLE-23394) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-687=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-687=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libvirt-admin-7.1.0-150300.6.26.1 libvirt-admin-debuginfo-7.1.0-150300.6.26.1 - openSUSE Leap 15.4 (noarch): libvirt-bash-completion-7.1.0-150300.6.26.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirt-7.1.0-150300.6.26.1 libvirt-admin-7.1.0-150300.6.26.1 libvirt-admin-debuginfo-7.1.0-150300.6.26.1 libvirt-client-7.1.0-150300.6.26.1 libvirt-client-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-7.1.0-150300.6.26.1 libvirt-daemon-config-network-7.1.0-150300.6.26.1 libvirt-daemon-config-nwfilter-7.1.0-150300.6.26.1 libvirt-daemon-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-interface-7.1.0-150300.6.26.1 libvirt-daemon-driver-interface-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-lxc-7.1.0-150300.6.26.1 libvirt-daemon-driver-lxc-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-network-7.1.0-150300.6.26.1 libvirt-daemon-driver-network-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-nodedev-7.1.0-150300.6.26.1 libvirt-daemon-driver-nodedev-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-nwfilter-7.1.0-150300.6.26.1 libvirt-daemon-driver-nwfilter-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-qemu-7.1.0-150300.6.26.1 libvirt-daemon-driver-qemu-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-secret-7.1.0-150300.6.26.1 libvirt-daemon-driver-secret-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-core-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-core-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-disk-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-disk-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-gluster-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-gluster-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-iscsi-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-iscsi-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-iscsi-direct-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-logical-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-logical-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-mpath-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-mpath-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-scsi-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-scsi-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-hooks-7.1.0-150300.6.26.1 libvirt-daemon-lxc-7.1.0-150300.6.26.1 libvirt-daemon-qemu-7.1.0-150300.6.26.1 libvirt-debugsource-7.1.0-150300.6.26.1 libvirt-devel-7.1.0-150300.6.26.1 libvirt-libs-7.1.0-150300.6.26.1 libvirt-libs-debuginfo-7.1.0-150300.6.26.1 libvirt-lock-sanlock-7.1.0-150300.6.26.1 libvirt-lock-sanlock-debuginfo-7.1.0-150300.6.26.1 libvirt-nss-7.1.0-150300.6.26.1 libvirt-nss-debuginfo-7.1.0-150300.6.26.1 wireshark-plugin-libvirt-7.1.0-150300.6.26.1 wireshark-plugin-libvirt-debuginfo-7.1.0-150300.6.26.1 - openSUSE Leap 15.3 (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-rbd-debuginfo-7.1.0-150300.6.26.1 - openSUSE Leap 15.3 (noarch): libvirt-bash-completion-7.1.0-150300.6.26.1 libvirt-doc-7.1.0-150300.6.26.1 - openSUSE Leap 15.3 (x86_64): libvirt-client-32bit-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-libxl-7.1.0-150300.6.26.1 libvirt-daemon-driver-libxl-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-xen-7.1.0-150300.6.26.1 libvirt-devel-32bit-7.1.0-150300.6.26.1 References: https://bugzilla.suse.com/1191668 https://bugzilla.suse.com/1192119

1 0

openSUSE-RU-2022:0686-1: moderate: Recommended update for powerpc-utils
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for powerpc-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0686-1 Rating: moderate References: #1187716 #1191147 #1194579 #1195413 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for powerpc-utils fixes the following issues: - errinjct: sanitize devspec output of a newline if one is present. (bsc#1194579) - Fix reported online memory in legacy format. (bsc#1191147) - lparstat: report LPAR name from 'lparcfg'. (bsc#1187716) - Install 'smt.state' as config file. (bsc#1195413) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-686=1 Package List: - openSUSE Leap 15.3 (ppc64le): powerpc-utils-1.3.9-150300.9.17.1 powerpc-utils-debuginfo-1.3.9-150300.9.17.1 powerpc-utils-debugsource-1.3.9-150300.9.17.1 References: https://bugzilla.suse.com/1187716 https://bugzilla.suse.com/1191147 https://bugzilla.suse.com/1194579 https://bugzilla.suse.com/1195413

1 0

openSUSE-RU-2022:0685-1: important: Recommended update for clingo, python-Sphinx_4_2_0, python-sphinxcontrib-applehelp, python-sphinxcontrib-devhelp, python-sphinxcontrib-htmlhelp, python-sphinxcontrib-jsmath, python-sphinxcontrib-qthelp, python-sphinxcontrib-serializinghtml, spack
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for clingo, python-Sphinx_4_2_0, python-sphinxcontrib-applehelp, python-sphinxcontrib-devhelp, python-sphinxcontrib-htmlhelp, python-sphinxcontrib-jsmath, python-sphinxcontrib-qthelp, python-sphinxcontrib-serializinghtml, spack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0685-1 Rating: important References: #1166965 #1193712 SLE-22137 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for clingo, python-Sphinx_4_2_0, python-sphinxcontrib-applehelp, python-sphinxcontrib-devhelp, python-sphinxcontrib-htmlhelp, python-sphinxcontrib-jsmath, python-sphinxcontrib-qthelp, python-sphinxcontrib-serializinghtml, spack fixes the following issues: - added python-cffi as Requires (bsc#1193712) - create a sub lib package - fix some build errors, remove unwanted files - update to version 5.5.0 - clingo is used by default for spack version earlier than 0.17 (jsc#SLE-22137) - first release for SUSE (from fedora spec) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-685=1 Package List: - openSUSE Leap 15.3 (noarch): spack-0.17.1-150300.5.8.2 spack-info-0.17.1-150300.5.8.3 spack-man-0.17.1-150300.5.8.3 spack-recipes-0.17.1-150300.5.8.2 References: https://bugzilla.suse.com/1166965 https://bugzilla.suse.com/1193712

1 0

openSUSE-RU-2022:0681-1: critical: Recommended update for cloud-regionsrv-client
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for cloud-regionsrv-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0681-1 Rating: critical References: #1195414 #1195564 #1196305 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for cloud-regionsrv-client fixes the following issues: - Update -addon-azure to 1.0.2 (bsc#1196305) - Fix regression in the cloud-regionsrv-client' with OnDemand images - Update to version 10.0.0 (bsc#1195414, bsc#1195564) - Refactor removes check_registration() function in utils implementation - Only start the registration service for PAYG images - addon-azure sub-package to version 1.0.1 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-681=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-681=1 Package List: - openSUSE Leap 15.4 (noarch): cloud-regionsrv-client-10.0.0-6.62.1 cloud-regionsrv-client-addon-azure-1.0.2-6.62.1 cloud-regionsrv-client-generic-config-1.0.0-6.62.1 cloud-regionsrv-client-plugin-azure-2.0.0-6.62.1 cloud-regionsrv-client-plugin-ec2-1.0.2-6.62.1 cloud-regionsrv-client-plugin-gce-1.0.0-6.62.1 - openSUSE Leap 15.3 (noarch): cloud-regionsrv-client-10.0.0-6.62.1 cloud-regionsrv-client-generic-config-1.0.0-6.62.1 cloud-regionsrv-client-plugin-azure-2.0.0-6.62.1 cloud-regionsrv-client-plugin-ec2-1.0.2-6.62.1 cloud-regionsrv-client-plugin-gce-1.0.0-6.62.1 References: https://bugzilla.suse.com/1195414 https://bugzilla.suse.com/1195564 https://bugzilla.suse.com/1196305

1 0

openSUSE-RU-2022:0682-1: important: Recommended update for supportutils-plugin-suse-public-cloud
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for supportutils-plugin-suse-public-cloud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0682-1 Rating: important References: #1195095 #1195096 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for supportutils-plugin-suse-public-cloud fixes the following issues: - Update to version 1.0.6 (bsc#1195095, bsc#1195096) - Include cloud-init logs whenever they are present - Update the packages we track in AWS, Azure, and Google - Include the ecs logs for AWS ECS instances Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-682=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-682=1 Package List: - openSUSE Leap 15.4 (noarch): supportutils-plugin-suse-public-cloud-1.0.6-3.9.1 - openSUSE Leap 15.3 (noarch): supportutils-plugin-suse-public-cloud-1.0.6-3.9.1 References: https://bugzilla.suse.com/1195095 https://bugzilla.suse.com/1195096

1 0

openSUSE-RU-2022:0069-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0069-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: Update to version 1.0.2 + Bugfixes: + Fixed showing menu when clicking icon for collection and internet search tool buttons + Fixed ignoring devices with system mounts as defined by GIO (#410). + Fixed updating database when deleting songs from filesystem devices. + Fixed unregistered metatype when listing songs from MTP devices with Qt 6. + Fixed using entered password when testing Subsonic settings before pressing save (#879). + Fixed downloading Subsonic album covers. + Fixed subsonic album covers downloaded several times for each album when MD5 authentication was enabled (#885). + Fixed volume going to 100% when pressing volume down with MRPIS2 and global shortcuts (#884). + Fixed incorrect rounding when setting volume through MPRIS2 (#894). + Fixed delete from disk not showing up in the menu when one or more CUE songs were selected. + Fixed possible crashes when switching songs when fading is enabled (#890). + Fixed X11 global shortcuts not working unless window was in focus with Qt 6.2 and higher (#893). + Fixed scrobbler re-sending scrobbles to fast on error (#898). + Enhancements + Log Qt version on startup. + Added button for deleting existing Subsonic songs (#883). + Make collection watcher ignore files with "qt_temp" filename and tmp extension. + Require Qt 5.9 or higher. + Added scrollbars to edit tag dialog (#888). + Added advanced settings for configuring collection watcher. + Disable open audio CD menu when compiled without audio CD support. + Replaced use of deprecated QMouseEvent constructor as of Qt 6.4. + Replaced use of deprecated QCryptographicHash::addData overload as of Qt 6.4. + Removed features: + Removed broken "nomedia" / "nomusic" file handling. Update to version 1.0.1 + Bugfixes: + Fixed collection and internet search filter tool button menu arrow overlap (#796). + Fixed stop after this track button with Qt 6 (#795). + Fixed not updating the URL when songs were moved on disk when the fingerprinting feature is enabled. + Fixed SQL query error for songs with an invalid modification time (#815). + Fixed blocky rendering of the currently playing track with high resolution screens (#794). + Fixed incorrect playlist column filesize for radio streams. + Fixed deleting embedded album cover from Ogg songs. + Fixed parsing of Cue tracks with 1-digit minutes (#836). + Fixed updating of playlist summary after reloading items when adding songs from files outside of the collection (#848). + Fixed always saving metadata when saving playlists for Tidal, Qobuz and Subsonic songs independent of playlist setting (#851). + Fixed setting media shortcuts when using kglobalaccel (#849). + Fixed parsing of Genius lyrics when they are sometimes received in a different HTML format. + Fixed saving MP4 specific tags as UTF-8 (#830). + Fixed clearing "manually set" cover when saving album covers embedded from outside of the tag editor (#858). + Fixed aborting collection scan when Strawberry exists to avoid hang on exit. + Fixed resuming collection scan when adding a new directory after collection scan was aborted. + Fixed excluding hidden songs from the collection. + Disabled moodbar for CUE songs since they can not be supported properly (#865). + Enhancements: + Made playlist header column text elided (#801). + Added support for reading and writing playcounts and ratings from/to tags. + Added support for setting rating using the edit tag dialog. + Added setting to enable/disable playlist toolbar (#809). + Added component type, content_rating type and releases to AppStream data file (#806). + Removed unused "mark as listened" option in organize dialog. + Fixed some clazy warnings and narrowing conversions in the source code. + Replaced uses of macros in the source code. + Added a more user-friendly error message when receiving encrypted streams from Tidal (#824). + Added support for port-pattern entered in the device textbox when using Jack as output (#828). + Added Spanish (Spain) translation. + Added support for more CUE filenames (#835). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-69=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): strawberry-1.0.2-bp153.2.6.1 References:

1 0

openSUSE-SU-2022:0068-1: important: Security update for shapelib
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for shapelib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0068-1 Rating: important References: #1196236 Cross-References: CVE-2022-0699 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for shapelib fixes the following issues: - CVE-2022-0699: Fixed a Double-free vulnerability in contrib/shpsort.c Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-68=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): libshp-devel-1.5.0-bp153.2.3.1 libshp2-1.5.0-bp153.2.3.1 shapelib-1.5.0-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-0699.html https://bugzilla.suse.com/1196236

1 0

openSUSE-SU-2022:0067-1: important: Security update for libdxfrw, librecad
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for libdxfrw, librecad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0067-1 Rating: important References: #1192936 #1192937 #1192938 Cross-References: CVE-2021-21898 CVE-2021-21899 CVE-2021-21900 CVSS scores: CVE-2021-21898 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21899 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21900 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libdxfrw, librecad fixes the following issues: - Update to version 1.0.1+git.20220109: * fixed ambiguous error for DRW_Dimension::parseDwg() * fixed enless while()-loop for pre 2004 versions * dwgReader::readDwgObjects() stop reading after 1st error * dwgReader::readDwgEntities() stop reading after 1st error * replace ENTRY_PARSE macro with template method * remove unused DRW_Class::parseCode() method * protect vector<>.reserve() calls * Added NULL check for hatch code 93 * Fix bounds check in DRW_LWPolyline * fix, check maxClassNum for valid value * fixed wrong 2010+ check for 64-bit size * Set compiler warnings on by default, because makes harder for bugs to go undetected. modified: CMakeLists.txt * Fixed fall through and other warnings (#54) * fix "Vertex ID" printout - Update to version 1.0.1+git.20211110: * fixed heap use after free vulnerability CVE-2021-21900 (boo#1192938) * minor improvements to dwg2dxf, formatting and message output on success * fixed heap buffer overflow vulnerability CVE-2021-21899 (boo#1192937) * dwg2dxf - enable debug output of libdxfrw by command line switch * fixed out-of-bounds write vulnerability CVE-2021-21898 (boo#1192936) * fixed please note section formatting * updated README.md for LibreCAD_3 branch and sf.net successor * fixed LibreCAD 2 issue #1371, read failed with binary DXF * Use ununordered_map instead of map * manual merge changes from LibreCAD2 * and much more - Update to version 1.0.1+git.20200429: * Fix includes install dir * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages * Add archive destination in install * Install DXFRW::dxfrw target * Remove duplicate target properties * Remove version from pkg-config file * Let CMake handle C++11 compiler definition * Change minimal required CMake version to 3.0 * cmake: add doc target * README.md: fix typo * cmake: generate and install pkgconfig * cmake: add one for dwg2dxf * cmake: set library VERSIONs * cmake: use GNUInstallDirs - Update to version 0.6.3+git.20190501: * Add build status and update example link * Add Travis-CI script * [#10] Fix compilation on GCC * Fix bugs with .dwg import of TEXT and MTEXT entities * This was unnecessary * Link libdxfrw against libstdc++ * Return an error when the file ends prematurely * Add version getter * Fix polyline 2d/3d write * Initialize return buffers in GetRawChar8 et al. - update to 2.2.0-rc3 * major release * DWG imports are more reliable now * and a lot more of bugfixes and improvements Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-67=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): libdxfrw-devel-1.0.1+git.20220109-bp153.2.3.1 libdxfrw-tools-1.0.1+git.20220109-bp153.2.3.1 libdxfrw1-1.0.1+git.20220109-bp153.2.3.1 - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): librecad-2.2.0~rc3-bp153.2.3.1 librecad-debuginfo-2.2.0~rc3-bp153.2.3.1 librecad-debugsource-2.2.0~rc3-bp153.2.3.1 - openSUSE Backports SLE-15-SP3 (noarch): librecad-parts-2.2.0~rc3-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-21898.html https://www.suse.com/security/cve/CVE-2021-21899.html https://www.suse.com/security/cve/CVE-2021-21900.html https://bugzilla.suse.com/1192936 https://bugzilla.suse.com/1192937 https://bugzilla.suse.com/1192938

1 0

openSUSE-SU-2022:0675-1: moderate: Security update for ldns
by opensuse-security＠opensuse.org 02 Mar '22

02 Mar '22

openSUSE Security Update: Security update for ldns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0675-1 Rating: moderate References: #1195057 #1195058 Cross-References: CVE-2020-19860 CVE-2020-19861 CVSS scores: CVE-2020-19860 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2020-19860 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2020-19861 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ldns fixes the following issues: - CVE-2020-19860: Fixed heap-based out of bounds read when verifying a zone file (bsc#1195057). - CVE-2020-19861: Fixed heap-based out of bounds read in ldns_nsec3_salt_data() (bsc#1195058). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-675=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-675=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): ldns-1.7.0-4.6.1 ldns-debuginfo-1.7.0-4.6.1 ldns-debugsource-1.7.0-4.6.1 ldns-devel-1.7.0-4.6.1 libldns2-1.7.0-4.6.1 libldns2-debuginfo-1.7.0-4.6.1 perl-DNS-LDNS-1.7.0-4.6.1 perl-DNS-LDNS-debuginfo-1.7.0-4.6.1 python3-ldns-1.7.0-4.6.1 python3-ldns-debuginfo-1.7.0-4.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ldns-1.7.0-4.6.1 ldns-debuginfo-1.7.0-4.6.1 ldns-debugsource-1.7.0-4.6.1 ldns-devel-1.7.0-4.6.1 libldns2-1.7.0-4.6.1 libldns2-debuginfo-1.7.0-4.6.1 perl-DNS-LDNS-1.7.0-4.6.1 perl-DNS-LDNS-debuginfo-1.7.0-4.6.1 python3-ldns-1.7.0-4.6.1 python3-ldns-debuginfo-1.7.0-4.6.1 References: https://www.suse.com/security/cve/CVE-2020-19860.html https://www.suse.com/security/cve/CVE-2020-19861.html https://bugzilla.suse.com/1195057 https://bugzilla.suse.com/1195058

1 0

openSUSE-SU-2022:0679-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 02 Mar '22

02 Mar '22

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0679-1 Rating: moderate References: #1038980 #1081790 #1192050 #1193041 Cross-References: CVE-2015-9253 CVE-2017-8923 CVE-2021-21703 CVE-2021-21707 CVSS scores: CVE-2015-9253 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2015-9253 (SUSE): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-21703 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-21703 (SUSE): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-21707 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-21707 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for php7 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050). - CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041). - CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980). - CVE-2015-9253: Fixed endless loop when the master process restarts a child process using program execution functions (bsc#1081790). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-679=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): php7-wddx-7.2.5-4.89.4 php7-wddx-debuginfo-7.2.5-4.89.4 References: https://www.suse.com/security/cve/CVE-2015-9253.html https://www.suse.com/security/cve/CVE-2017-8923.html https://www.suse.com/security/cve/CVE-2021-21703.html https://www.suse.com/security/cve/CVE-2021-21707.html https://bugzilla.suse.com/1038980 https://bugzilla.suse.com/1081790 https://bugzilla.suse.com/1192050 https://bugzilla.suse.com/1193041

1 0

openSUSE-RU-2022:0064-1: moderate: Recommended update for trivy
by maintenance＠opensuse.org 02 Mar '22

02 Mar '22

openSUSE Recommended Update: Recommended update for trivy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0064-1 Rating: moderate References: SLE-18339 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for trivy fixes the following issues: This adds the Container security scanner Trivy 0.22.0 to PackageHub and openSUSE Leap 15.3. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-64=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): trivy-0.22.0-bp153.2.1 References:

1 0

openSUSE-RU-2022:0066-1: moderate: Recommended update for python-attrs, python-configparser, python-importlib-metadata, python-zipp
by maintenance＠opensuse.org 02 Mar '22

02 Mar '22

openSUSE Recommended Update: Recommended update for python-attrs, python-configparser, python-importlib-metadata, python-zipp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0066-1 Rating: moderate References: #1073845 SLE-18626 SLE-18627 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains two features can now be installed. Description: This update for python-attrs, python-configparser, python-importlib-metadata, python-zipp fixes the following issues: python-attrs was updated to 19.3.0 * Fixed auto_attribs usage when default values cannot be compared directly with ==, such as numpy arrays. - update to version 19.2.0: * Backward-incompatible Changes + Removed deprecated "Attribute" attribute "convert" per scheduled removal on 2019/1. This planned deprecation is tracked in issue `#307 <https://github.com/python-attrs/attrs/issues/307>`_. `#504 <https://github.com/python-attrs/attrs/issues/504>`_ + "__lt__", "__le__", "__gt__", and "__ge__" do not consider subclasses comparable anymore. This has been deprecated since 18.2.0 and was raising a "DeprecationWarning" for over a year. `#570 <https://github.com/python-attrs/attrs/issues/570>`_ * Deprecations + The "cmp" argument to "attr.s()" and "attr.ib()" is now deprecated. Please use "eq" to add equality methods ("__eq__" and "__ne__") and "order" to add ordering methods ("__lt__", "__le__", "__gt__", and "__ge__") instead �� just like with `dataclasses <https://docs.python.org/3/library/dataclasses.html>`_. Both are effectively "True" by default but it's enough to set "eq=False" to disable both at once. Passing "eq=False, order=True" explicitly will raise a "ValueError" though. Since this is arguably a deeper backward-compatibility break, it will have an extended deprecation period until 2021-06-01. After that day, the "cmp" argument will be removed. "attr.Attribute" also isn't orderable anymore. `#574 <https://github.com/python-attrs/attrs/issues/574>`_ * Changes + Updated "attr.validators.__all__" to include new validators added in `#425`_. `#517 <https://github.com/python-attrs/attrs/issues/517>`_ + Slotted classes now use a pure Python mechanism to rewrite the "__class__" cell when rebuilding the class, so "super()" works even on environments where "ctypes" is not installed. `#522 <https://github.com/python-attrs/attrs/issues/522>`_ + When collecting attributes using "@attr.s(auto_attribs=True)", attributes with a default of "None" are now deleted too. `#523 <https://github.com/python-attrs/attrs/issues/523>`_, `#556 <https://github.com/python-attrs/attrs/issues/556>`_ + Fixed "attr.validators.deep_iterable()" and "attr.validators.deep_mapping()" type stubs. `#533 <https://github.com/python-attrs/attrs/issues/533>`_ + "attr.validators.is_callable()" validator now raises an exception "attr.exceptions.NotCallableError", a subclass of "TypeError", informing the received value. `#536 <https://github.com/python-attrs/attrs/issues/536>`_ + "@attr.s(auto_exc=True)" now generates classes that are hashable by ID, as the documentation always claimed it would. `#543 <https://github.com/python-attrs/attrs/issues/543>`_, `#563 <https://github.com/python-attrs/attrs/issues/563>`_ + Added "attr.validators.matches_re()" that checks string attributes whether they match a regular expression. `#552 <https://github.com/python-attrs/attrs/issues/552>`_ + Keyword-only attributes ("kw_only=True") and attributes that are excluded from the "attrs"'s "__init__" ("init=False") now can appear before mandatory attributes. `#559 <https://github.com/python-attrs/attrs/issues/559>`_ + The fake filename for generated methods is now more stable. It won't change when you restart the process. `#560 <https://github.com/python-attrs/attrs/issues/560>`_ + The value passed to "@attr.ib(repr=��)" can now be either a boolean (as before) or a callable. That callable must return a string and is then used for formatting the attribute by the generated "__repr__()" method. `#568 <https://github.com/python-attrs/attrs/issues/568>`_ + Added "attr.__version_info__" that can be used to reliably check the version of "attrs" and write forward- and backward-compatible code. Please check out the `section on deprecated APIs <http://www.attrs.org/en/stable/api.html#deprecated-apis>`_ on how to use it. `#580 <https://github.com/python-attrs/attrs/issues/580>`_ - update to 19.1.0 * Fixed a bug where deserialized objects with cache_hash=True could have incorrect hash code values * Add is_callable, deep_iterable, and deep_mapping validators. * Fixed stub files to prevent errors raised by mypy's disallow_any_generics = True option. * Attributes with init=False now can follow after kw_only=True attributes. * attrs now has first class support for defining exception classes. * Clarified documentation for hashing to warn that hashable objects should be deeply immutable - update to version 18.2.0: * Deprecations + Comparing subclasses using "<", ">", "<=", and ">=" is now deprecated. The docs always claimed that instances are only compared if the types are identical, so this is a first step to conform to the docs. Equality operators ("==" and "!=") were always strict in this regard. issue 394 * Changes + "attrs" now ships its own PEP 484 type hints. Together with mypy's "attrs" plugin, you've got all you need for writing statically typed code in both Python 2 and 3! At that occasion, we've also added `narrative docs` about type annotations in "attrs". issue #238 + Added *kw_only* arguments to "attr.ib" and "attr.s", and a corresponding *kw_only* attribute to "attr.Attribute". This change makes it possible to have a generated "__init__" with keyword-only arguments on Python 3, relaxing the required ordering of default and non-default valued attributes. issues #281, #411 + The test suite now runs with "hypothesis.HealthCheck.too_slow" disabled to prevent CI breakage on slower computers. issues #364, #396 + "attr.validators.in_()" now raises a "ValueError" with a useful message even if the options are a string and the value is not a string. issue #383 + "attr.asdict()" now properly handles deeply nested lists and dictionaries. issue #395 + Added "attr.converters.default_if_none()" that allows to replace "None" values in attributes. For example "attr.ib(converter=default_if_none(""))" replaces "None" by empty strings. issues #400, #414 + Fixed a reference leak where the original class would remain live after being replaced when "slots=True" is set. isue #407 + Slotted classes can now be made weakly referenceable by passing "@attr.s(weakref_slot=True)". issue #420 + Added *cache_hash* option to "@attr.s" which causes the hash code to be computed once and stored on the object. issue #425 + Attributes can be named "property" and "itemgetter" now. issue #430 + It is now possible to override a base class' class variable using only class annotations. issue #431 - update to version 18.1.0: * "x=X(); x.cycle = x; repr(x)" will no longer raise a "RecursionError", and will instead show as "X(x=...)". * "attr.ib(factory=f)" is now syntactic sugar for the common case of "attr.ib(default=attr.Factory(f))". * Added "attr.field_dict()" to return an ordered dictionary of "attrs" attributes for a class, whose keys are the attribute names. * The order of attributes that are passed into "attr.make_class()" or the "these" argument of "@attr.s()" is now retained if the dictionary is ordered (i.e. "dict" on Python 3.6 and later, "collections.OrderedDict" otherwise). * Before, the order was always determined by the order in which the attributes have been defined which may not be desirable when creating classes programatically. * In slotted classes, "__getstate__" and "__setstate__" now ignore the "__weakref__" attribute. * Setting the cell type is now completely best effort. This fixes "attrs" on Jython. We cannot make any guarantees regarding Jython though, because our test suite cannot run due to dependency incompatabilities. * If "attr.s" is passed a *these* argument, it will not attempt to remove attributes with the same name from the class body anymore. * The hash of "attr.NOTHING" is now vegan and faster on 32bit Python builds. * The overhead of instantiating frozen dict classes is virtually eliminated. * Generated "__init__" methods now have an "__annotations__" attribute derived from the types of the fields. * We have restructured the documentation a bit to account for "attrs"' growth in scope. Instead of putting everything into the `examples <http://www.attrs.org/en/stable/examples.html>`_ page, we have started to extract narrative chapters. - update to version 17.4.0: * Backward-incompatible Changes + The traversal of MROs when using multiple inheritance was backward: If you defined a class "C" that subclasses "A" and "B" like "C(A, B)", "attrs" would have collected the attributes from "B" *before* those of "A". This is now fixed and means that in classes that employ multiple inheritance, the output of "__repr__" and the order of positional arguments in "__init__" changes. Due to the nature of this bug, a proper deprecation cycle was unfortunately impossible. Generally speaking, it's advisable to prefer "kwargs"-based initialization anyways �� *especially* if you employ multiple inheritance and diamond-shaped hierarchies. + The "__repr__" set by "attrs" no longer produces an "AttributeError" when the instance is missing some of the specified attributes (either through deleting or after using "init=False" on some attributes). This can break code that relied on "repr(attr_cls_instance)" raising "AttributeError" to check if any attr-specified members were unset. If you were using this, you can implement a custom method for checking this:: def has_unset_members(self): for field in attr.fields(type(self)): try: getattr(self, field.name) except AttributeError: return True return False * Deprecations + The "attr.ib(convert=callable)" option is now deprecated in favor of "attr.ib(converter=callable)". This is done to achieve consistency with other noun-based arguments like *validator*. *convert* will keep working until at least January 2019 while raising a "DeprecationWarning". * Changes + Generated "__hash__" methods now hash the class type along with the attribute values. Until now the hashes of two classes with the same values were identical which was a bug. The generated method is also *much* faster now. + "attr.ib"��s "metadata" argument now defaults to a unique empty "dict" instance instead of sharing a common empty "dict" for all. The singleton empty "dict" is still enforced. + "ctypes" is optional now however if it's missing, a bare "super()" will not work in slots classes. This should only happen in special environments like Google App Engine. + The attribute redefinition feature introduced in 17.3.0 now takes into account if an attribute is redefined via multiple inheritance. In that case, the definition that is closer to the base of the class hierarchy wins. + Subclasses of "auto_attribs=True" can be empty now. + Equality tests are *much* faster now. + All generated methods now have correct "__module__", "__name__", and (on Python 3) "__qualname__" attributes. - add test requirements, run tests conditionally (not BuildRequiring pytest fixes boo#1073845) - update to version 17.3.0: * Backward-incompatible Changes + Attributes are not defined on the class body anymore. This means that if you define a class "C" with an attribute "x", the class will *not* have an attribute "x" for introspection anymore. Instead of "C.x", use "attr.fields(C).x" or look at "C.__attrs_attrs__". The old behavior has been deprecated since version 16.1. (`#253 <https://github.com/python-attrs/attrs/issues/253>`_) * Changes + "super()" and "__class__" now work on Python 3 when "slots=True". (`#102 <https://github.com/python-attrs/attrs/issues/102>`_, `#226 <https://github.com/python-attrs/attrs/issues/226>`_, `#269 <https://github.com/python-attrs/attrs/issues/269>`_, `#270 <https://github.com/python-attrs/attrs/issues/270>`_, `#272 <https://github.com/python-attrs/attrs/issues/272>`_)- Added "type" argument to "attr.ib()" and corresponding "type" attribute to "attr.Attribute". This change paves the way for automatic type checking and serialization (though as of this release "attrs" does not make use of it). In Python 3.6 or higher, the value of "attr.Attribute.type" can alternately be set using variable type annotations (see `PEP 526 <https://www.python.org/dev/peps/pep-0526/>`_). (`#151 <https://github.com/python-attrs/attrs/issues/151>`_, `#214 <https://github.com/python-attrs/attrs/issues/214>`_, `#215 <https://github.com/python-attrs/attrs/issues/215>`_, `#239 <https://github.com/python-attrs/attrs/issues/239>`_) + The combination of "str=True" and "slots=True" now works on Python 2. (`#198 <https://github.com/python-attrs/attrs/issues/198>`_) + "attr.Factory" is hashable again. (`#204 <https://github.com/python-attrs/attrs/issues/204>`_) + Subclasses now can overwrite attribute definitions of their superclass. That means that you can -- for example -- change the default value for an attribute by redefining it. (`#221 <https://github.com/python-attrs/attrs/issues/221>`_, `#229 <https://github.com/python-attrs/attrs/issues/229>`_) + Added new option "auto_attribs" to "@attr.s" that allows to collect annotated fields without setting them to "attr.ib()". Setting a field to an "attr.ib()" is still possible to supply options like validators. Setting it to any other value is treated like it was passed as "attr.ib(default=value)" -- passing an instance of "attr.Factory" also works as expected. (`#262 <https://github.com/python-attrs/attrs/issues/262>`_, `#277 <https://github.com/python-attrs/attrs/issues/277>`_) + Instances of classes created using "attr.make_class()" can now be pickled. (`#282 <https://github.com/python-attrs/attrs/issues/282>`_) - update to 17.2.0: - Validators are hashable again. - ``attrs`` will set the ``__hash__()`` method to ``None`` by default now. The way hashes were handled before was in conflict with `Python's specification This *may* break some software although this breakage is most likely just surfacing of latent bugs. You can always make ``attrs`` create the ``__hash__()`` method using ``(a)attr.s(hash=True)``. See `#136`_ for the rationale of this change. - Correspondingly, ``attr.ib``'s ``hash`` argument is ``None`` by default too and mirrors the ``cmp`` argument as it should. - ``attr.assoc()`` is now deprecated in favor of ``attr.evolve()`` and will stop working in 2018. - Fix default hashing behavior. Now *hash* mirrors the value of *cmp* and classes are unhashable by default. - Added ``attr.evolve()`` that, given an instance of an ``attrs`` class and field changes as keyword arguments, will instantiate a copy of the given instance with the changes applied. - ``FrozenInstanceError`` is now raised when trying to delete an attribute from a frozen class. - Frozen-ness of classes is now inherited. - ``__attrs_post_init__()`` is now run if validation is disabled. - Added ``attr.validators.in_(options)`` that, given the allowed `options`, checks whether the attribute value is in it. This can be used to check constants, enums, mappings, etc. - Added ``attr.validators.and_()`` that composes multiple validators into one. - For convenience, the ``validator`` argument of ``(a)attr.s`` now can take a ``list`` of validators that are wrapped using ``and_()``. - Accordingly, ``attr.validators.optional()`` now can take a ``list`` of validators too. - Validators can now be defined conveniently inline by using the attribute as a decorator. - ``attr.Factory()`` now has a ``takes_self`` argument that makes the initializer to pass the partially initialized instance into the factory. In other words you can define attribute defaults based on other attributes. - Default factories can now also be defined inline using decorators. They are *always* passed the partially initialized instance. - Conversion can now be made optional using ``attr.converters.optional()``. - ``attr.make_class()`` now accepts the keyword argument ``bases`` which allows for subclassing. - Metaclasses are now preserved with ``slots=True``. - Attributes now can have user-defined metadata which greatly improves ``attrs``'s extensibility. - Allow for a ``__attrs_post_init__()`` method that -- if defined -- will get called at the end of the ``attrs``-generated ``__init__()`` method. - Added ``(a)attr.s(str=True)`` that will optionally create a ``__str__()`` method that is identical to ``__repr__()``. - ``__name__`` is not overwritten with ``__qualname__`` for ``attr.s(slots=True)`` classes anymore. - Added ``attr.astuple()`` that -- similarly to ``attr.asdict()`` -- returns the instance as a tuple. - Converts now work with frozen classes. - Instantiation of ``attrs`` classes with converters is now significantly faster. - Pickling now works with ``__slots__`` classes. - ``attr.assoc()`` now works with ``__slots__`` classes. - The tuple returned by ``attr.fields()`` now also allows to access the ``Attribute`` instances by name. - All instances where function arguments were called ``cl`` have been changed to the more Pythonic ``cls``. - Accessing ``Attribute`` instances on class objects is now deprecated and will stop working in 2017. - The serious business aliases ``attr.attributes`` and ``attr.attr`` have been deprecated in favor of ``attr.attrs`` and ``attr.attrib`` which are much more consistent and frankly obvious in hindsight. - ``attr.asdict()``\ 's ``dict_factory`` arguments is now propagated on recursion. - ``attr.asdict()``, ``attr.has()`` and ``attr.fields()`` are significantly faster. - Add ``attr.attrs`` and ``attr.attrib`` as a more consistent aliases for ``attr.s`` and ``attr.ib``. - Add ``frozen`` option to ``attr.s`` that will make instances best-effort immutable. - ``attr.asdict()`` now takes ``retain_collection_types`` as an argument. - Convert to singlespec - update to 16.0.0 Backward-incompatible changes: * Python 3.3 and 2.6 aren��t supported anymore. They may work by chance but any effort to keep them working has ceased. The last Python 2.6 release was on October 29, 2013 and isn��t supported by the CPython core team anymore. Major Python packages like Django and Twisted dropped Python 2.6 a while ago already. Python 3.3 never had a significant user base and wasn��t part of any distribution��s LTS release. Changes: * __slots__ have arrived! Classes now can automatically be slots-style (and save your precious memory) just by passing slots=True. #35 * Allow the case of initializing attributes that are set to init=False. This allows for clean initializer parameter lists while being able to initialize attributes to default values. #32 * attr.asdict can now produce arbitrary mappings instead of Python dicts when provided with a dict_factory argument. #40 Multiple performance improvements. python-configparser was updated to 3.7.3: * Issue #34: Temporarily degrade to use ASCII for author's name. * Repackaged using setuptools_scm for file discovery and other features from `skeleton <https://pypi.org/project/skeleton`_. Fixes #33. * Package now unconditionally installs the configparser module. - Update to 3.7.1 * Fixed issue on Python 2.x when future is present (gh#jaraco/configparser#30) - Update to 3.7.0 * Merge functionality from Python 3.7.2. Now ConfigParser accepts bytes paths as well as any PathLike object, including those found in the pathlib2 backport <https://pypi.org/project/pathlib2/>. - Update to 3.5.3 * Reverted the limit on DeprecationWarning, as it had unintended consequences (gh#jaraco/configparser#27) - Update to 3.5.2 * Use environment markers to indicate the 'ordereddict' dependency for Python 2.6 (gh#jaraco/configparser#23) * Limit DeprecationWarning when a filename is indicated as a bytestring on Python 2. Now the warning is only emitted when py3kwarning is indicated (gh#jaraco/configparser#24) - Update to 3.5.1 * jaraco adopts the package. * Moved hosting to GitHub. * Updated backports namespace package to conform with other packages sharing the namespace (gh#jaraco/configparser#21) - Remove superfluous devel dependency for noarch package - Switch to singlespec package - Build for python3 < 3.5 - Make structure consistent with other backports packages - Remove backports subpackage. Since configparser is unmaintained, this is being moved to the maintained configparser2 package. - %{python_sitelib}/backports is a namespace package, and so under python 2.x it must have a proper %{python_sitelib}/backports/__init__.py file. python-backports provides this __init__.py to prevent backports packages from conflicting. Please see the following links for more details: https://pypi.python.org/pypi/backports/ https://www.python.org/dev/peps/pep-0420/%23namespace-packages-today - Split backports directory into subpackage to allow the various packages that share the backports namespace to avoid conflicts. python-importlib-metadata was updated to 1.5.0: * Additional performance optimizations in FastPath now saves an additional 20% on a typical call. * Correct for issue where PyOxidizer finder has no ``__module__`` attribute. Closes #110. - update to 1.4.0 * Renamed package parameter to distribution_name. * For better compatibility with the stdlib implementation and to avoid the same distributions being discovered by the stdlib and backport implementations, the backport now disables the stdlib DistributionFinder during initialization (import time). * Project adopts semver for versioning. * EntryPoints are now pickleable. * Dropped support for Python 3.4. * Fixed repr(EntryPoint) on PyPy. * Repaired project metadata to correctly declare the python_requires directive. * Through careful optimization, distribution() is 3-4x faster. * When searching through sys.path, if any error occurs attempting to list a path entry, that entry is skipped, making the system much more lenient to errors. - Update to 0.21: * various minor fixes - update to 0.19 * restrain over-eager egg metadata resolution. * Add support for entry points with colons in the name. * Parse entry points case sensitively. * Add a version constraint on the backport configparser package - This package is part of python 3.8 and we don't need to build it there - Do not require importlib_resources on python3.7 where it is part of core python - Fixup the requires for the SLE-12 build - Enable python-pathlib2 build dependency for suse_version < 1500 to fix SLE-12 build - Remove do-not-test-pip.patch as it seems no longer needed - Update to 0.17: * Don't crash if there exists an EGG-INFO directory on sys.path. * Update docstrings to match PEP 8. Closes #63. * Merged modules into one module. Closes #62. * Add support for eggs. !65; Closes #19. * Support generic zip files (not just wheels). Closes #59 * Support zip files with multiple distributions in them. Closes #60 * Fully expose the public API in importlib_metadata.__all__. * The Distribution ABC is now officially part of the public API. * Fixed support for older single file egg-info formats. Closes #43. * Fixed a testing bug when $CWD has spaces in the path. Closes #50. * Fixed issue where entry points without an attribute would raise an Exception. * Removed unused name parameter from entry_points(). Closes #44. * DistributionFinder classes must now be instantiated before being placed on sys.meta_path. - Add missing setuptools_scm dependency to fix generated egg.info - Some packages request importlib_metadata to ease living provide this symbol too - Add do-not-test-pip.patch so tests depending on pip are not used (they fail when the tests are run without tox) python-zipp was updated to 0.6.0: * When adding implicit dirs, ensure that ancestral directories are added and that duplicates are excluded. * The library now relies on more_itertools. - update to 0.5.1 * Declared package as backport. - Update to 0.5.0 * no changelog found * Added runtime dependencies python-unittest2 and python-contextlib2 - version update to 0.4.0 * #4: Add support for zip files with implied directories. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-66=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-66=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cargo-1.56.1-21.12.1 cargo1.56-1.56.1-7.3.2 cargo1.56-debuginfo-1.56.1-7.3.2 rust-1.56.1-21.12.1 rust1.56-1.56.1-7.3.2 rust1.56-debuginfo-1.56.1-7.3.2 - openSUSE Backports SLE-15-SP3 (noarch): python2-attrs-19.3.0-bp153.2.1 python2-configparser-3.7.3-bp153.2.1 python2-importlib-metadata-1.5.0-bp153.2.1 python2-zipp-0.6.0-bp153.2.1 python3-attrs-19.3.0-bp153.2.1 python3-importlib-metadata-1.5.0-bp153.2.1 python3-zipp-0.6.0-bp153.2.1 References: https://bugzilla.suse.com/1073845

1 0

openSUSE-SU-2022:0065-1: important: Security update for envoy-proxy
by opensuse-security＠opensuse.org 02 Mar '22

02 Mar '22

openSUSE Security Update: Security update for envoy-proxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0065-1 Rating: important References: #1167073 #1173559 #1180121 Cross-References: CVE-2020-12603 CVE-2020-12604 CVE-2020-12605 CVE-2020-35471 CVE-2020-8663 CVSS scores: CVE-2020-12603 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-12604 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-12605 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-35471 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-35471 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for envoy-proxy fixes the following issues: Update to 1.14.6: - CVE-2020-35471: Fixed a denial of service via dropped and truncated UDP datagrams (boo#1180121). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-65=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le x86_64): envoy-proxy-1.14.6-bp153.3.4.1 envoy-proxy-source-1.14.6-bp153.3.4.1 References: https://www.suse.com/security/cve/CVE-2020-12603.html https://www.suse.com/security/cve/CVE-2020-12604.html https://www.suse.com/security/cve/CVE-2020-12605.html https://www.suse.com/security/cve/CVE-2020-35471.html https://www.suse.com/security/cve/CVE-2020-8663.html https://bugzilla.suse.com/1167073 https://bugzilla.suse.com/1173559 https://bugzilla.suse.com/1180121

1 0

openSUSE-RU-2022:0063-1: moderate: Recommended update for fish3
by maintenance＠opensuse.org 02 Mar '22

02 Mar '22

openSUSE Recommended Update: Recommended update for fish3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0063-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update ships the new package fish3 to openSUSE Leap 15.3 and Package Hub 15-SP3. Update to 3.3.1: * The prompt and command line are redrawn correctly in response to universal variable changes. * A superfluous error that was produced when setting the PATH or CDPATH environment variables to include colon-delimited components that do not exist was removed. * The Vi mode indicator in the prompt is repainted correctly after Ctrl-C cancels the current command. Update to 3.2.2: * Background jobs no longer interfere with syntax highlighting (fish 3.2.1 regression) * The command-not-found handler used suggestions from pacman on Arch Linux, but this caused major slowdowns on some systems and has been disabled * Certain programs (such as lazygit) could create situations where fish would not receive keystrokes correctly, but it is now more robust in these situations * Completions for aura and tshark should no longer produce errors. * fish will no longer hang on exit if another process is in the foreground on macOS * Arguments longer than 1024 characters no longer trigger excessive CPU usage on macOS Update to 3.2.1: * Commands in key bindings are run with fish's internal terminal modes, instead of the terminal modes typically used for commands. This fixes a bug introduced in 3.2.0, where text would unexpectedly appear on the terminal, especially when pasting * Prompts which use the internal __fish_print_pipestatus function will display correctly rather than carrying certain modifiers (such as bold) further than intended * Redirections to internal file descriptors is allowed again, reversing the changes in 3.2.0. This fixes a problem with Midnight Commander Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-63=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): fish3-3.3.1-bp153.2.7.1 fish3-devel-3.3.1-bp153.2.7.1 References:

1 0

openSUSE-RU-2022:0674-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 02 Mar '22

02 Mar '22

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0674-1 Rating: moderate References: #1187512 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-network fixes the following issues: - Don't crash at the end of installation when storing wifi configuration for NetworkManager. (bsc#1187512) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-674=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): augeas-1.10.1-3.5.1 augeas-debuginfo-1.10.1-3.5.1 augeas-debugsource-1.10.1-3.5.1 augeas-devel-1.10.1-3.5.1 augeas-lense-tests-1.10.1-3.5.1 augeas-lenses-1.10.1-3.5.1 libaugeas0-1.10.1-3.5.1 libaugeas0-debuginfo-1.10.1-3.5.1 - openSUSE Leap 15.3 (noarch): yast2-network-4.3.81-150300.3.25.1 - openSUSE Leap 15.3 (x86_64): augeas-devel-32bit-1.10.1-3.5.1 libaugeas0-32bit-1.10.1-3.5.1 libaugeas0-32bit-debuginfo-1.10.1-3.5.1 References: https://bugzilla.suse.com/1187512

1 0

openSUSE-SU-2022:0658-1: moderate: Security update for mysql-connector-java
by opensuse-security＠opensuse.org 02 Mar '22

02 Mar '22

openSUSE Security Update: Security update for mysql-connector-java ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0658-1 Rating: moderate References: #1195557 PM-3307 Cross-References: CVE-2021-2471 CVSS scores: CVE-2021-2471 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H CVE-2021-2471 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability, contains one feature is now available. Description: This update for mysql-connector-java fixes the following issues: - CVE-2021-2471: Fixed unauthorized access to critical data or complete access to all MySQL Connectors (bsc#1195557). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-658=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-658=1 Package List: - openSUSE Leap 15.4 (noarch): mysql-connector-java-5.1.47-3.6.1 - openSUSE Leap 15.3 (noarch): mysql-connector-java-5.1.47-3.6.1 References: https://www.suse.com/security/cve/CVE-2021-2471.html https://bugzilla.suse.com/1195557

1 0

openSUSE-SU-2022:0657-1: important: Security update for nodejs12
by opensuse-security＠opensuse.org 02 Mar '22

02 Mar '22

openSUSE Security Update: Security update for nodejs12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0657-1 Rating: important References: #1191962 #1191963 #1192153 #1192154 #1192696 Cross-References: CVE-2021-23343 CVE-2021-32803 CVE-2021-32804 CVE-2021-3807 CVE-2021-3918 CVSS scores: CVE-2021-23343 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23343 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-32803 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32803 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-3807 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3918 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for nodejs12 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963). - CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962). - CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696). - CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-657=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-657=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nodejs12-12.22.10-4.29.3 nodejs12-debuginfo-12.22.10-4.29.3 nodejs12-debugsource-12.22.10-4.29.3 nodejs12-devel-12.22.10-4.29.3 npm12-12.22.10-4.29.3 - openSUSE Leap 15.4 (noarch): nodejs12-docs-12.22.10-4.29.3 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nodejs12-12.22.10-4.29.3 nodejs12-debuginfo-12.22.10-4.29.3 nodejs12-debugsource-12.22.10-4.29.3 nodejs12-devel-12.22.10-4.29.3 npm12-12.22.10-4.29.3 - openSUSE Leap 15.3 (noarch): nodejs12-docs-12.22.10-4.29.3 References: https://www.suse.com/security/cve/CVE-2021-23343.html https://www.suse.com/security/cve/CVE-2021-32803.html https://www.suse.com/security/cve/CVE-2021-32804.html https://www.suse.com/security/cve/CVE-2021-3807.html https://www.suse.com/security/cve/CVE-2021-3918.html https://bugzilla.suse.com/1191962 https://bugzilla.suse.com/1191963 https://bugzilla.suse.com/1192153 https://bugzilla.suse.com/1192154 https://bugzilla.suse.com/1192696

1 0

openSUSE-SU-2022:0058-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0058-1 Rating: important References: #1144018 #1181400 #1194020 #1194215 #1194681 Cross-References: CVE-2020-15803 CVE-2021-27927 CVE-2021-4126 CVE-2021-44538 CVE-2022-23134 CVSS scores: CVE-2020-15803 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-15803 (SUSE): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N CVE-2021-4126 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-44538 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23134 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-23134 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.4.1 - CVE-2021-4126: OpenPGP signature status doesn't consider additional message content. (bsc#1194215) - CVE-2021-44538: Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow. (bsc#1194020) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-58=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-58=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.4.1-8.48.1 MozillaThunderbird-debuginfo-91.4.1-8.48.1 MozillaThunderbird-debugsource-91.4.1-8.48.1 MozillaThunderbird-translations-common-91.4.1-8.48.1 MozillaThunderbird-translations-other-91.4.1-8.48.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): zabbix-agent-4.0.38-bp153.2.3.1 zabbix-java-gateway-4.0.38-bp153.2.3.1 zabbix-phpfrontend-4.0.38-bp153.2.3.1 zabbix-proxy-4.0.38-bp153.2.3.1 zabbix-proxy-mysql-4.0.38-bp153.2.3.1 zabbix-proxy-postgresql-4.0.38-bp153.2.3.1 zabbix-proxy-sqlite-4.0.38-bp153.2.3.1 zabbix-server-4.0.38-bp153.2.3.1 zabbix-server-mysql-4.0.38-bp153.2.3.1 zabbix-server-postgresql-4.0.38-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-15803.html https://www.suse.com/security/cve/CVE-2021-27927.html https://www.suse.com/security/cve/CVE-2021-4126.html https://www.suse.com/security/cve/CVE-2021-44538.html https://www.suse.com/security/cve/CVE-2022-23134.html https://bugzilla.suse.com/1144018 https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1194020 https://bugzilla.suse.com/1194215 https://bugzilla.suse.com/1194681

1 0

openSUSE-RU-2022:0057-1: moderate: Recommended update for python-apiron
by maintenance＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Recommended Update: Recommended update for python-apiron ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0057-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: python-apiron was updated to last version with python 3.6 support. Update to 5.1.0: * Ability to specify proxies for a Service definition so all calls to the service use the defined proxies * Ability to specify auth for a Service definition so all calls to the service use the defined authentication * Ability to specify return_raw_response_object at the endpoint level, overridden by any value specified at call time Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-57=1 Package List: - openSUSE Leap 15.3 (noarch): python3-apiron-5.1.0-lp153.2.3.1 References:

1 0

openSUSE-SU-2022:0061-1: moderate: Security update for mc
by opensuse-security＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Security Update: Security update for mc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0061-1 Rating: moderate References: #1190180 Cross-References: CVE-2021-36370 CVSS scores: CVE-2021-36370 (SUSE): 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mc fixes the following issues: Midnight Commander 4.8.27: * Core - Reimplement version detection (#3603, #4249) - Significantly reduce rebuilt time after version change (#2252, #4266) - Drop automatic migration of configuration from ~/.mc to XDG-based directories (#3682) - zsh: support custom configuration file: ~/.local/share/mc/.zshrc (#4203) - Widgets: implement WST_VISIBLE state to show/hide widgets (#2919) - Find File: add Follow symlinks option (#2020) * VFS - extfs: support unrar-6 (#4154) - extfs: support official 7z binary (7zz) (#4239) - ftpfs: apply file list parser from lftp project (#2841, #3174) * Editor - Word completion: get candidates from all open files (#4160) - etags: get rid of hardcoded list length and window width (#4132) - Update syntax files: - python (#4140) - Add syntax highlighting: - Verilog and SystemVerilog? header files (#4215) - JSON (#4250) - openrc-run scripts (#4246) * Misc - Filehighlight of c++ and h++ files as sources (#4194) - Filehighlight of JSON files as documents (#4250) - Support of alacritty terminal emulator (��https://github.com/alacritty/alacritty) (#4248) - Support of foot terminal emulator (��https://codeberg.org/dnkl/foot) (#4251) - Support of (alt+)shift+arrow keys in st terminal emulator (st.suckless.org) (#4267) - Mouse support in screen: don't check variable (#4233) - mc.ext: support fb2 e-books (#4167) - ext.d: use mediainfo to view info about various media files (#4167) - Remove OS/distro-specific package-related stuff from source tree (#4217) * Fixes - FTBFS against NCurses on OS X 10.9.5 (#4181) - Segfault on dialog before panels get visible (#4244) - Crash if shadow is out of screen (build against NCurses) (#4192) - Crash in search (#4222) - Crash on startup with enabled subshell in FreeBSD (workaround) (#4213) - Hang on start randomly with zsh as subshell (#4198) - If command line is invisible it's partially displayed (#4182) - Broken handling of zip archives (#4180, #4183) - Broken handling of jar files as zip archives (#4223) - Timestamps of symlinks, sockets, fifos, etc are not preserved after copy/move (#3985) - %view action in the user menu doesn't work on no-exec filesystem (#4242) - Hardlinks are not colored by file type or extension (#3375) - mcedit: silent macro makes terminal disrupted (#4171) - mcedit: disrupting of TAGS file path (#4207) - vfs: unable to browse compressed tar archives (#4191) - sftpfs vfs: CVE-2021-36370: server fingerprint isn't verified (discovered by AUT-milCERT during an audit of open source software) (#4259) - ftpfs vfs: month of file is always January (#4260) - Tests: log files are written by libcheck and automake simultaneously (#3986) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-61=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): mc-4.8.27-bp153.2.3.1 - openSUSE Backports SLE-15-SP3 (noarch): mc-lang-4.8.27-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-36370.html https://bugzilla.suse.com/1190180

1 0

openSUSE-RU-2022:0059-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0059-1 Rating: moderate References: #1181400 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gnuhealth was updated to fix: - Added missing dependency python3-Pillow. - Added hardening to systemd service(s) (bsc#1181400). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-59=1 Package List: - openSUSE Leap 15.3 (noarch): gnuhealth-3.8.0-lp153.4.3.1 gnuhealth-orthanc-3.8.0-lp153.4.3.1 References: https://bugzilla.suse.com/1181400

1 0

openSUSE-RU-2022:0060-1: moderate: Recommended update for python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient
by maintenance＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Recommended Update: Recommended update for python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0060-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient fixes the following issues: Various openstack related python modules have been updated: - python-congressclient, python-ironic-inspector-client, python-masakariclient, python-mistralclient, python-saharaclient, python-senlinclient Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-60=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): python-congressclient-doc-2.0.1-bp153.2.3.1 python-masakariclient-doc-6.0.0-bp153.2.3.1 python-mistralclient-doc-4.0.1-bp153.2.3.1 python-saharaclient-doc-3.1.0-bp153.2.3.1 python-senlinclient-doc-2.0.1-bp153.2.3.1 python3-congressclient-2.0.1-bp153.2.3.1 python3-ironic-inspector-client-4.1.0-bp153.2.3.1 python3-masakariclient-6.0.0-bp153.2.3.1 python3-mistralclient-4.0.1-bp153.2.3.1 python3-saharaclient-3.1.0-bp153.2.3.1 python3-senlinclient-2.0.1-bp153.2.3.1 References:

1 0

openSUSE-SU-2022:0062-1: important: Security update for cobbler
by opensuse-security＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Security Update: Security update for cobbler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0062-1 Rating: important References: #1184561 #1185679 #1186124 #1189458 #1193671 #1193673 #1193675 #1193676 #1193678 #1194333 #1195906 #1195918 Cross-References: CVE-2021-40323 CVE-2021-40324 CVE-2021-40325 CVE-2021-45082 CVE-2021-45083 CVE-2021-45942 CVSS scores: CVE-2021-40323 (SUSE): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2021-40324 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-40325 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-45082 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-45083 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2021-45083 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N CVE-2021-45942 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45942 (SUSE): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 6 fixes is now available. Description: This update for cobbler fixes the following issues: - CVE-2021-45083: Fixed unsafe permissions on sensitive files (bsc#1193671). - CVE-2021-45082: Fixed incomplete template sanitation (bsc#1193678). - CVE-2021-40323, CVE-2021-40324, CVE-2021-40325: Fixed Remote Code Execution in the XMLRPC API which additionally allowed arbitrary file read and write as root (boo#1189458). The following non-security bugs were fixed: - Fix issues with installation module logging and validation (boo#1195918) - Move configuration files ownership to apache (boo#1195906) - Remove hardcoded test credentials (boo#1193673) - Prevent log pollution (boo#1193675) - Missing sanity check on MongoDB configuration file (boo#1193676) - Avoid traceback when building tftp files for ppc arch system when boot_loader is not set (boo#1185679) - Prevent some race conditions when writting tftpboot files and the destination directory is not existing (boo#1186124) - Fix trail stripping in case of using UTF symbols (boo#1184561) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-62=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-62=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libIlmImf-2_2-23-2.2.1-3.41.1 libIlmImf-2_2-23-debuginfo-2.2.1-3.41.1 libIlmImfUtil-2_2-23-2.2.1-3.41.1 libIlmImfUtil-2_2-23-debuginfo-2.2.1-3.41.1 openexr-2.2.1-3.41.1 openexr-debuginfo-2.2.1-3.41.1 openexr-debugsource-2.2.1-3.41.1 openexr-devel-2.2.1-3.41.1 openexr-doc-2.2.1-3.41.1 - openSUSE Leap 15.3 (x86_64): libIlmImf-2_2-23-32bit-2.2.1-3.41.1 libIlmImf-2_2-23-32bit-debuginfo-2.2.1-3.41.1 libIlmImfUtil-2_2-23-32bit-2.2.1-3.41.1 libIlmImfUtil-2_2-23-32bit-debuginfo-2.2.1-3.41.1 - openSUSE Backports SLE-15-SP3 (noarch): cobbler-3.1.2-bp153.2.3.1 cobbler-tests-3.1.2-bp153.2.3.1 cobbler-web-3.1.2-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-40323.html https://www.suse.com/security/cve/CVE-2021-40324.html https://www.suse.com/security/cve/CVE-2021-40325.html https://www.suse.com/security/cve/CVE-2021-45082.html https://www.suse.com/security/cve/CVE-2021-45083.html https://www.suse.com/security/cve/CVE-2021-45942.html https://bugzilla.suse.com/1184561 https://bugzilla.suse.com/1185679 https://bugzilla.suse.com/1186124 https://bugzilla.suse.com/1189458 https://bugzilla.suse.com/1193671 https://bugzilla.suse.com/1193673 https://bugzilla.suse.com/1193675 https://bugzilla.suse.com/1193676 https://bugzilla.suse.com/1193678 https://bugzilla.suse.com/1194333 https://bugzilla.suse.com/1195906 https://bugzilla.suse.com/1195918

1 0