March 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0099-1: Recommended update for tryton and proteus
by maintenance＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Recommended Update: Recommended update for tryton and proteus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0099-1 Rating: low References: #1193533 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for trytond packages and proteus fixes the following issues: - trytond_account was updated to version 5.0.23 bugfix release - trytond was updated to version 5.0.46 bugfix release - trytond_purchase was updated to version 5.0.11 bugfix release - proteus was updated to version 5.0.12 bugfix release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-99=1 openSUSE-SLE-15.3-2022-99=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-99=1 Package List: - openSUSE Leap 15.3 (noarch): proteus-5.0.12-lp153.2.3.3 trytond-5.0.46-lp153.2.3.1 trytond_account-5.0.23-lp153.2.3.3 trytond_purchase-5.0.11-lp153.2.3.3 yast2-samba-client-4.3.4-3.6.1 - openSUSE Backports SLE-15-SP3 (noarch): python2-pydot3-1.0.9-bp153.2.2.1 python2-python-sql-1.1.0-bp153.2.2.1 python3-pydot3-1.0.9-bp153.2.2.1 python3-python-sql-1.1.0-bp153.2.2.1 References: https://bugzilla.suse.com/1193533

1 0

openSUSE-SU-2022:0096-1: important: Security update for fish3
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for fish3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0096-1 Rating: important References: #1197139 Cross-References: CVE-2022-20001 CVSS scores: CVE-2022-20001 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-20001 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for fish3 fixes the following issues: - CVE-2022-20001: Navigating to a compromised git repository may lead to arbitrary code execution (bsc#1197139) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-96=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): fish3-3.3.1-bp153.2.10.1 fish3-devel-3.3.1-bp153.2.10.1 References: https://www.suse.com/security/cve/CVE-2022-20001.html https://bugzilla.suse.com/1197139

1 0

openSUSE-RU-2022:0101-1: moderate: Recommended update for trivy
by maintenance＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Recommended Update: Recommended update for trivy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0101-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: trivy was updated to fix the following issues: Update to version 0.24.4: * fix(docker): Getting images without a tag (#1852) * docs(gitlab-ci): Use environment variables TRIVY_CACHE_DIR and TRIVY_NO_PROGRESS (#1801) Update to version 0.24.3: * chore(issue labels): added new labels (#1839) * refactor: clarify db update warning messages (#1808) * chore(ci): change trivy vulnerability scan for every day (#1838) * feat(helm): make Trivy service name configurable (#1825) * chore(deps): updated sprig to version v3.2.2. (#1814) * chore(deps): updated testcontainers-go to version v0.12.0 (#1822) * docs: add packages.config for .NET (#1823) * build: sign container image (#1668) * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.4.0 to 0.5.0 (#1778) * docs: fix Installation documentation (#1804) * fix(report): ensure json report got a final new line (#1797) * fix(terraform): resolve panics in defsec (#1811) * feat(docker): Label images based on OCI image spec (#1793) * fix(helm): indentation for ServiceAccount annotations (#1795) * fix(hcl): fix panic in hcl2json (#1791) * chore(helm): remove psp from helm manifest (#1315) * build: Replace `make protoc` with `for loop` to return an error (#1655) * fix: ASFF template to match ASFF schema (#1685) * feat(helm): Add support for server token (#1734) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-101=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 s390x x86_64): trivy-0.24.4-bp153.5.1 References:

1 0

openSUSE-SU-2022:1064-1: moderate: Security update for python2-numpy
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for python2-numpy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1064-1 Rating: moderate References: #1193907 #1193911 #1193913 Cross-References: CVE-2021-33430 CVE-2021-41495 CVE-2021-41496 CVSS scores: CVE-2021-33430 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-33430 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-41495 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-41495 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-41496 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-41496 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python2-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907). - CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1064=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python2-numpy-1.16.5-150200.3.5.1 python2-numpy-debuginfo-1.16.5-150200.3.5.1 python2-numpy-debugsource-1.16.5-150200.3.5.1 python2-numpy-devel-1.16.5-150200.3.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): python-numpy_1_16_5-gnu-hpc-debugsource-1.16.5-150200.3.5.1 python2-numpy-gnu-hpc-1.16.5-150200.3.5.1 python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-debuginfo-1.16.5-150200.3.5.1 python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1 References: https://www.suse.com/security/cve/CVE-2021-33430.html https://www.suse.com/security/cve/CVE-2021-41495.html https://www.suse.com/security/cve/CVE-2021-41496.html https://bugzilla.suse.com/1193907 https://bugzilla.suse.com/1193911 https://bugzilla.suse.com/1193913

1 0

openSUSE-SU-2022:1065-1: important: Security update for kernel-firmware
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1065-1 Rating: important References: #1186938 #1188662 #1192953 #1195786 #1196333 Cross-References: CVE-2021-0066 CVE-2021-0071 CVE-2021-0072 CVE-2021-0076 CVE-2021-0161 CVE-2021-0164 CVE-2021-0165 CVE-2021-0166 CVE-2021-0168 CVE-2021-0170 CVE-2021-0172 CVE-2021-0173 CVE-2021-0174 CVE-2021-0175 CVE-2021-0176 CVE-2021-0183 CVE-2021-33139 CVE-2021-33155 CVSS scores: CVE-2021-0066 (NVD) : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-0066 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-0071 (NVD) : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-0072 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0072 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0076 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-0076 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-0161 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0161 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0164 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-0164 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-0165 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0165 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0166 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0166 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0168 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0168 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0170 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0170 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0172 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0172 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0173 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0173 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0174 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0174 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0175 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0175 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0176 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2021-0176 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2021-0183 (NVD) : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-0183 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-33139 (NVD) : 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33139 (SUSE): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33155 (NVD) : 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-33155 (SUSE): 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: This update for kernel-firmware fixes the following issues: Update Intel Wireless firmware for 9xxx (INTEL-SA-00539, bsc#1196333): CVE-2021-0161: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0164: Improper access control in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access. CVE-2021-0165: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0066: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access. CVE-2021-0166: Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0168: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0170: Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an authenticated user to potentially enable information disclosure via local access. CVE-2021-0172: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0173: Improper Validation of Consistency within input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0174: Improper Use of Validation Framework in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0175: Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0076: Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable denial of service via local access. CVE-2021-0176: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable denial of service via local access. CVE-2021-0183: Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0072: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable information disclosure via local access. CVE-2021-0071: Improper input validation in firmware for some Intel PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. Update Intel Bluetooth firmware (INTEL-SA-00604,bsc#1195786): - CVE-2021-33139: Improper conditions check in firmware for some Intel Wireless Bluetooth and Killer Bluetooth products before may allow an authenticated user to potentially enable denial of service via adjacent access. - CVE-2021-33155: Improper input validation in firmware for some Intel Wireless Bluetooth and Killer Bluetooth products before may allow an authenticated user to potentially enable denial of service via adjacent access. Bug fixes: - Updated the AMD SEV firmware (bsc#1186938) - Reduced the LZMA2 dictionary size (bsc#1188662) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1065=1 Package List: - openSUSE Leap 15.3 (noarch): kernel-firmware-20210208-150300.4.7.1 kernel-firmware-all-20210208-150300.4.7.1 kernel-firmware-amdgpu-20210208-150300.4.7.1 kernel-firmware-ath10k-20210208-150300.4.7.1 kernel-firmware-ath11k-20210208-150300.4.7.1 kernel-firmware-atheros-20210208-150300.4.7.1 kernel-firmware-bluetooth-20210208-150300.4.7.1 kernel-firmware-bnx2-20210208-150300.4.7.1 kernel-firmware-brcm-20210208-150300.4.7.1 kernel-firmware-chelsio-20210208-150300.4.7.1 kernel-firmware-dpaa2-20210208-150300.4.7.1 kernel-firmware-i915-20210208-150300.4.7.1 kernel-firmware-intel-20210208-150300.4.7.1 kernel-firmware-iwlwifi-20210208-150300.4.7.1 kernel-firmware-liquidio-20210208-150300.4.7.1 kernel-firmware-marvell-20210208-150300.4.7.1 kernel-firmware-media-20210208-150300.4.7.1 kernel-firmware-mediatek-20210208-150300.4.7.1 kernel-firmware-mellanox-20210208-150300.4.7.1 kernel-firmware-mwifiex-20210208-150300.4.7.1 kernel-firmware-network-20210208-150300.4.7.1 kernel-firmware-nfp-20210208-150300.4.7.1 kernel-firmware-nvidia-20210208-150300.4.7.1 kernel-firmware-platform-20210208-150300.4.7.1 kernel-firmware-prestera-20210208-150300.4.7.1 kernel-firmware-qlogic-20210208-150300.4.7.1 kernel-firmware-radeon-20210208-150300.4.7.1 kernel-firmware-realtek-20210208-150300.4.7.1 kernel-firmware-serial-20210208-150300.4.7.1 kernel-firmware-sound-20210208-150300.4.7.1 kernel-firmware-ti-20210208-150300.4.7.1 kernel-firmware-ueagle-20210208-150300.4.7.1 kernel-firmware-usb-network-20210208-150300.4.7.1 ucode-amd-20210208-150300.4.7.1 References: https://www.suse.com/security/cve/CVE-2021-0066.html https://www.suse.com/security/cve/CVE-2021-0071.html https://www.suse.com/security/cve/CVE-2021-0072.html https://www.suse.com/security/cve/CVE-2021-0076.html https://www.suse.com/security/cve/CVE-2021-0161.html https://www.suse.com/security/cve/CVE-2021-0164.html https://www.suse.com/security/cve/CVE-2021-0165.html https://www.suse.com/security/cve/CVE-2021-0166.html https://www.suse.com/security/cve/CVE-2021-0168.html https://www.suse.com/security/cve/CVE-2021-0170.html https://www.suse.com/security/cve/CVE-2021-0172.html https://www.suse.com/security/cve/CVE-2021-0173.html https://www.suse.com/security/cve/CVE-2021-0174.html https://www.suse.com/security/cve/CVE-2021-0175.html https://www.suse.com/security/cve/CVE-2021-0176.html https://www.suse.com/security/cve/CVE-2021-0183.html https://www.suse.com/security/cve/CVE-2021-33139.html https://www.suse.com/security/cve/CVE-2021-33155.html https://bugzilla.suse.com/1186938 https://bugzilla.suse.com/1188662 https://bugzilla.suse.com/1192953 https://bugzilla.suse.com/1195786 https://bugzilla.suse.com/1196333

1 0

openSUSE-SU-2022:0097-1: important: Security update for icingaweb2
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for icingaweb2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0097-1 Rating: important References: #1196911 #1196913 Cross-References: CVE-2022-24714 CVE-2022-24715 CVSS scores: CVE-2022-24714 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-24715 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24715 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for icingaweb2 fixes the following issues: icingaweb2 was updated to 2.8.6 This is a security release. * Security Fixes - CVE-2022-24715: SSH resources allow arbitrary code execution for authenticated users (GHSA-v9mv-h52f-7g63 boo#1196911) - CVE-2022-24714: Unwanted disclosure of hosts and related data, linked to decommissioned services (GHSA-qcmg-vr56-x9wf boo#1196913) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-97=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): icingacli-2.8.6-bp153.2.3.1 icingaweb2-2.8.6-bp153.2.3.1 icingaweb2-common-2.8.6-bp153.2.3.1 icingaweb2-vendor-HTMLPurifier-2.8.6-bp153.2.3.1 icingaweb2-vendor-JShrink-2.8.6-bp153.2.3.1 icingaweb2-vendor-Parsedown-2.8.6-bp153.2.3.1 icingaweb2-vendor-dompdf-2.8.6-bp153.2.3.1 icingaweb2-vendor-lessphp-2.8.6-bp153.2.3.1 icingaweb2-vendor-zf1-2.8.6-bp153.2.3.1 php-Icinga-2.8.6-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-24714.html https://www.suse.com/security/cve/CVE-2022-24715.html https://bugzilla.suse.com/1196911 https://bugzilla.suse.com/1196913

1 0

openSUSE-RU-2022:1066-1: important: Recommended update for mlocate
by maintenance＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Recommended Update: Recommended update for mlocate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1066-1 Rating: important References: #1195144 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mlocate fixes the following issues: - Require `apparmor-abstractions`, because `apparmor.service` will fail if `mlocate` is installed. (bsc#1195144) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1066=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): mlocate-0.26-150100.7.3.2 mlocate-debuginfo-0.26-150100.7.3.2 mlocate-debugsource-0.26-150100.7.3.2 - openSUSE Leap 15.3 (noarch): mlocate-lang-0.26-150100.7.3.2 References: https://bugzilla.suse.com/1195144

1 0

openSUSE-SU-2022:0100-1: moderate: Security update for abcm2ps
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for abcm2ps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0100-1 Rating: moderate References: #1197355 Cross-References: CVE-2021-32434 CVE-2021-32435 CVE-2021-32436 CVSS scores: CVE-2021-32434 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-32435 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-32436 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for abcm2ps fixes the following issues: Update to 8.14.13: * fix: don't start/stop slurs above/below decorations * fix: crash when too many notes in a grace note sequence (#102) * fix: crash when too big value in M: (#103) * fix: loop or crash when too big width of y (space) (#104) * fix: bad font definition with SVG output when spaces in font name * fix: bad check of note length again (#106) * fix: handle %%staffscale at the global level (#108) * fix: bad vertical offset of lyrics when mysic line starts with empty staves Update to 8.14.12: Fixes: * crash when "%%break 1" and no measure bar in the tune * crash when duplicated voice ending on %%staves with repeat variant * crash when voice duplication with symbols without width * crash or bad output when null value in %%scale * problem when only bars in 2 voices followed %%staves of the second voice only * crash when tuplet error in grace note sequence * crash when grace note with empty tuplet * crash when many broken rhythms after a single grace note * access outside the deco array when error in U: * crash when !xstem! with no note in the previous voice * crash on tuplet without any note/rest * crash when grace notes at end of line and voice overlay * crash when !trem2! at start of a grace note sequence * crash when wrong duration in 2 voice overlays and bad ties * crash when accidental without a note at start of line after K: (CVE-2021-32435) * array overflow when wrong duration in voice overlay (CVE-2021-32434, CVE-2021-32436) * loss of left margin after first page since previous commit * no respect of %%leftmargin with -E or -g * bad placement of chord symbols when in a music line with only invisible rests Syntax: * Accept and remove one or two '%'s at start of all %%beginxxx lines Generation: * Move the CSS from XHTML to SVG Update to 8.14.11: * fix: error "'staffwidth' too small" when generating sample3.abc Update to 8.14.10: * fix: bad glyph when defined by SVG containing 'v' in * fix: bad check of note length since commit 191fa55 * fix: memory corruption when error in %%staves/%%score * fix: crash when too big note duration * fix: crash when staff width too small Update to 8.14.9: * fix: bad natural accidental when %%MIDI temperamentequal Update to 8.14.8: * fix: no respect the width in %%staffbreak * fix: don't draw a staff when only %%staffbreak inside * fix: bad repeat bracket when continued on next line, line starting by a bar * fix: bad tuplet bracket again when at end of a voice overlay sequence * fix: bad tuplet bracket when at end of a voice overlay sequence * handle '%%MIDI temperamentequal ' * accept '^1' and '_1' as microtone accidentals Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-100=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): abcm2ps-8.14.13-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-32434.html https://www.suse.com/security/cve/CVE-2021-32435.html https://www.suse.com/security/cve/CVE-2021-32436.html https://bugzilla.suse.com/1197355

1 0

openSUSE-SU-2022:0098-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0098-1 Rating: moderate References: #1196905 #1196908 #1196952 Cross-References: CVE-2021-41239 CVE-2021-41241 CVE-2021-41741 CVSS scores: CVE-2021-41239 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-41239 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: nextcloud was updated to 21.0.9: - CVE-2021-41239 (CWE-200): user enumeration setting not obeyed in User Status API (boo#1196905) - CVE-2021-41241 (CWE-863): groupfolders advanced permissions is not obeyed for subfolders (boo#1196908) - CVE-2021-41741 (CWE-400): High memory usage for generating preview of broken image (boo#1196952) - For more changes see https://nextcloud.com/changelog/#21-0-9 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-98=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): nextcloud-21.0.9-bp153.2.12.1 nextcloud-apache-21.0.9-bp153.2.12.1 References: https://www.suse.com/security/cve/CVE-2021-41239.html https://www.suse.com/security/cve/CVE-2021-41241.html https://www.suse.com/security/cve/CVE-2021-41741.html https://bugzilla.suse.com/1196905 https://bugzilla.suse.com/1196908 https://bugzilla.suse.com/1196952

1 0

openSUSE-SU-2022:0095-1: moderate: Security update for openSUSE-build-key
by opensuse-security＠opensuse.org 31 Mar '22

31 Mar '22

openSUSE Security Update: Security update for openSUSE-build-key ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0095-1 Rating: moderate References: #1197293 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for openSUSE-build-key fixes the following issues: - Disabled the SLE11 build key as SLE11 is EOL now, also key was 1024bit RSA (removed gpg-pubkey-307e3d54-5aaa90a5.asc) Also obsolete old build key. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-95=1 Package List: - openSUSE Leap 15.3 (noarch): openSUSE-build-key-1.0-lp153.4.8.1 References: https://bugzilla.suse.com/1197293

1 0

openSUSE-RU-2022:1047-1: moderate: Recommended update for pam
by maintenance＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Recommended Update: Recommended update for pam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1047-1 Rating: moderate References: #1196093 #1197024 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for pam fixes the following issues: - Define _pam_vendordir as the variable is needed by systemd and others. (bsc#1196093) - Between allocating the variable "ai" and free'ing them, there are two "return NO" were we don't free this variable. This patch inserts freaddrinfo() calls before the "return NO;"s. (bsc#1197024) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1047=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1047=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): pam-1.3.0-150000.6.55.3 pam-debuginfo-1.3.0-150000.6.55.3 pam-debugsource-1.3.0-150000.6.55.3 pam-devel-1.3.0-150000.6.55.3 pam-extra-1.3.0-150000.6.55.3 pam-extra-debuginfo-1.3.0-150000.6.55.3 - openSUSE Leap 15.4 (x86_64): pam-32bit-1.3.0-150000.6.55.3 pam-32bit-debuginfo-1.3.0-150000.6.55.3 pam-devel-32bit-1.3.0-150000.6.55.3 pam-extra-32bit-1.3.0-150000.6.55.3 pam-extra-32bit-debuginfo-1.3.0-150000.6.55.3 - openSUSE Leap 15.4 (noarch): pam-doc-1.3.0-150000.6.55.3 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): pam-1.3.0-150000.6.55.3 pam-debuginfo-1.3.0-150000.6.55.3 pam-debugsource-1.3.0-150000.6.55.3 pam-devel-1.3.0-150000.6.55.3 pam-extra-1.3.0-150000.6.55.3 pam-extra-debuginfo-1.3.0-150000.6.55.3 - openSUSE Leap 15.3 (noarch): pam-doc-1.3.0-150000.6.55.3 - openSUSE Leap 15.3 (x86_64): pam-32bit-1.3.0-150000.6.55.3 pam-32bit-debuginfo-1.3.0-150000.6.55.3 pam-devel-32bit-1.3.0-150000.6.55.3 pam-extra-32bit-1.3.0-150000.6.55.3 pam-extra-32bit-debuginfo-1.3.0-150000.6.55.3 References: https://bugzilla.suse.com/1196093 https://bugzilla.suse.com/1197024

1 0

openSUSE-SU-2022:1061-1: important: Security update for zlib
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1061-1 Rating: important References: #1197459 Cross-References: CVE-2018-25032 CVSS scores: CVE-2018-25032 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for zlib fixes the following issues: - CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1061=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1061=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libminizip1-1.2.11-150000.3.30.1 libminizip1-debuginfo-1.2.11-150000.3.30.1 libz1-1.2.11-150000.3.30.1 libz1-debuginfo-1.2.11-150000.3.30.1 minizip-devel-1.2.11-150000.3.30.1 zlib-debugsource-1.2.11-150000.3.30.1 zlib-devel-1.2.11-150000.3.30.1 zlib-devel-static-1.2.11-150000.3.30.1 - openSUSE Leap 15.4 (x86_64): libminizip1-32bit-1.2.11-150000.3.30.1 libminizip1-32bit-debuginfo-1.2.11-150000.3.30.1 libz1-32bit-1.2.11-150000.3.30.1 libz1-32bit-debuginfo-1.2.11-150000.3.30.1 zlib-devel-32bit-1.2.11-150000.3.30.1 zlib-devel-static-32bit-1.2.11-150000.3.30.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libminizip1-1.2.11-150000.3.30.1 libminizip1-debuginfo-1.2.11-150000.3.30.1 libz1-1.2.11-150000.3.30.1 libz1-debuginfo-1.2.11-150000.3.30.1 minizip-devel-1.2.11-150000.3.30.1 zlib-debugsource-1.2.11-150000.3.30.1 zlib-devel-1.2.11-150000.3.30.1 zlib-devel-static-1.2.11-150000.3.30.1 - openSUSE Leap 15.3 (x86_64): libminizip1-32bit-1.2.11-150000.3.30.1 libminizip1-32bit-debuginfo-1.2.11-150000.3.30.1 libz1-32bit-1.2.11-150000.3.30.1 libz1-32bit-debuginfo-1.2.11-150000.3.30.1 zlib-devel-32bit-1.2.11-150000.3.30.1 zlib-devel-static-32bit-1.2.11-150000.3.30.1 References: https://www.suse.com/security/cve/CVE-2018-25032.html https://bugzilla.suse.com/1197459

1 0

openSUSE-RU-2022:0093-1: important: Recommended update for helm
by maintenance＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Recommended Update: Recommended update for helm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0093-1 Rating: important References: #1192489 SLE-21196 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for helm fixes the following issues: Helm was updated to version 3.8.0 (jsc#SLE-21196): * OCI registry support for charts is now generally available. It has graduated out of being an experiment. Some changes over Helm 3.7 include: * When setting a chart in the dependencies as OCI the version can be set to a range, like other dependencies * SemVer tags that include build information can be pushed and used. OCI registries don't support + as a tag character. Helm translates the + to _ when stored as a tag * helm registry login now follows the same structure as the Docker CLI for storing credentials. The same location for registry configuration can be passed to both Helm and the Docker CLI * A --list-repo-url flag has been added to helm search hub to quickly show the repositories URL. * Release names are validated during installation * Added support for installing Helm on Windows via Cygwin * Added support for Kubernetes 1.23 Update to version 3.6.3: * Ensure RawPath match Path when resolving reference * Set Helm as manager for managedFields * fix(dep update): helm dep update is not respecting the "version" stipulated in the requirements * fix(doc): fix kube client interface doc. (#9882) * use TLS client information from repo config when downloading a chart * Adding test for user/pass without repo on Helm install * Fix the url being set by WithURL on the getters * tweak basic handling * keep existing behavior of returning ErrReleaseNotFound when release(s) failed to decode * fix(sql storage): Query() should return ErrReleaseNotFound immediately when no records are found * Add Test cases for repository-config without file extension * Correctly determine repository-config lockfile path * Fixed Test * Added test for lint mode * Fail message is now the same as the required message. Fixed #8973 Helm function 'fail' should not fail when doing 'helm lint' * fix helm dep build/update doesn't inherit --insecure-skip-tls-verify from helm repo add Update to version 3.6.2: * Fix the url being set by WithURL on the getters * Adding test for user/pass without repo on Helm install Update to version 3.6.1: * tweak basic handling Update to version 3.6.0: * bump version to v3.6.0 * chore: update testdata to use the new ingress template * feat: add networking.k8s.io/v1 support to ingress template * Moving myself to maintainer emeritus * upgrade to kubernetes 1.21 * Fix capabilities changes leaking into other tests * Add tests for template --kube-version * feat(helm): Support setting --kube-version * fix(ci) update ci to use main branch * Update references to default branch name as it has changed to main * Add ReadyChecker to decouple ready check logic from --wait * chore(deps): Bump github.com/deislabs/oras from v0.10.0 to v0.11.1 and drop replace * Add/update deprecation notices * Wrap validation error instead of recreating * Move default to avoid nil check * Add name validation rules for object kinds * Improve description for version flag. * chore: Spelling (#9410) * chore(deps): Bump k8s.io/klog/v2 from 2.5.0 to 2.8.0 * chore(deps): Bump github.com/containerd/containerd from 1.4.3 to 1.4.4 * chore(deps): Bump github.com/lib/pq from 1.9.0 to 1.10.0 * Bump github.com/spf13/cobra from 1.1.1 to 1.1.3 * Cleanup mpodule dependencies * feat(comp): Uninstall accepts multiple releases * new key for technosophos (#9478) * chore(deps): Bump github.com/sirupsen/logrus from 1.7.0 to 1.8.1 * add flag trimpath in the go build command * stick to 0.20.4 * updated unit tests to conform with helm best practices * corrected order of helm lint coalescing of multiple values files * upgrade to v0.21.0-beta.0 * Fix the example for --time-format flag * Use kube libraries v0.20.4 * Added s390x support to get script * add test to ensure OCIGetter registryClient is set * initialize registry client in oci getter * feat(comp): Add descriptions for output format * feat(comp): Add descriptions for --version comp * feat(comp): Add descriptions for revision comp * feat(comp): Add descriptions for kube-context comp * feat(comp): Add descriptions for plugin completion * feat(comp): Add descriptions for release name comp * feat(comp): Improve completion for plugin commands * fix(cmd): Show that flags can be used for zsh/fish * use relative linking * formatting * more words * keep it concise * docs(CONTRIBUTING): writing a HIP * update test expectation for new template error string * Add darwin/arm64 (Apple Silicon) support * fix windows tests * fix(test): Increase golangci-lint timeout * fix(helm): get/get-helm-3 whitespace support in runAsRoot * fix release sha256 * feat(comp): Completion for the docs --type flag * Bump github.com/jmoiron/sqlx from 1.2.0 to 1.3.1 * Updating golangci-lint to 1.36.0 * chore(go.mod): bump Masterminds/{spring,goutils} and deislabs/oras * fix(*): Validate metadata semver and printable characters * Bump github.com/mitchellh/copystructure from 1.0.0 to 1.1.1 * closes #9312 * Fix-9253: Change the deprecated charts repo URL in release notes * Fix `helm list --offset` cli help string * Define GPG_PUBRING to make pubring configurable * Bump github.com/mattn/go-shellwords from 1.0.10 to 1.0.11 * Bump k8s.io/klog/v2 from 2.4.0 to 2.5.0 * Upgrade to oras v0.9.0 (#9269) * use kube libraries v0.20.2 * print warning message instead of debug message when ~/.config exists but is not accessible * Update default ingress values section to correspond with template * chore(Makefile): add target to generate golden files * Fix dep build with OCI based charts * Fix typo in comment * bump version to * fix(Makefile): rebuild the binary if go.mod has changed * fix(pkg/storage): If storage.Create fails to clean up recent release versions, return an error * test(pkg/storage): Verify that storage.Create returns an error if it fails to clean up least-recent release versions * Bump github.com/containerd/containerd from 1.3.4 to 1.4.3 * Improve the console output for resource policy keep to align with helm2. Update to version 3.5.4: * Add/update deprecation notices * Wrap validation error instead of recreating * Move default to avoid nil check * Add name validation rules for object kinds * Use kube libraries v0.20.4 Update to version 3.5.3: * Fix the example for --time-format flag * Improve the console output for resource policy keep to align with helm2. * test(pkg/storage): Verify that storage.Create returns an error if it fails to clean up least-recent release versions * fix(pkg/storage): If storage.Create fails to clean up recent release versions, return an error * fix(test): Increase golangci-lint timeout * fix release sha256 * Fix-9253: Change the deprecated charts repo URL in release notes * Update default ingress values section to correspond with template * use kube libraries v0.20.2 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-93=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-93=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenssl-1_1-devel-1.1.1d-11.38.1 libopenssl1_1-1.1.1d-11.38.1 libopenssl1_1-debuginfo-1.1.1d-11.38.1 libopenssl1_1-hmac-1.1.1d-11.38.1 openssl-1_1-1.1.1d-11.38.1 openssl-1_1-debuginfo-1.1.1d-11.38.1 openssl-1_1-debugsource-1.1.1d-11.38.1 - openSUSE Leap 15.3 (noarch): openssl-1_1-doc-1.1.1d-11.38.1 - openSUSE Leap 15.3 (x86_64): libopenssl-1_1-devel-32bit-1.1.1d-11.38.1 libopenssl1_1-32bit-1.1.1d-11.38.1 libopenssl1_1-32bit-debuginfo-1.1.1d-11.38.1 libopenssl1_1-hmac-32bit-1.1.1d-11.38.1 - openSUSE Backports SLE-15-SP3 (i586 ppc64le s390x x86_64): helm-3.8.0-bp153.2.3.4 - openSUSE Backports SLE-15-SP3 (noarch): helm-bash-completion-3.8.0-bp153.2.3.4 helm-fish-completion-3.8.0-bp153.2.3.4 helm-zsh-completion-3.8.0-bp153.2.3.4 References: https://bugzilla.suse.com/1192489

1 0

openSUSE-SU-2022:1059-1: important: Security update for salt
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1059-1 Rating: important References: #1197417 Cross-References: CVE-2022-22934 CVE-2022-22935 CVE-2022-22936 CVE-2022-22941 CVSS scores: CVE-2022-22934 (SUSE): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22935 (SUSE): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-22936 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-22941 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for salt fixes the following issues: - CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417) - CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417) - CVE-2022-22936: Prevent job and fileserver replays (bsc#1197417) - CVE-2022-22941: Fixed targeting bug, especially visible when using syndic and user auth. (bsc#1197417) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1059=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python3-salt-3002.2-150300.53.10.1 salt-3002.2-150300.53.10.1 salt-api-3002.2-150300.53.10.1 salt-cloud-3002.2-150300.53.10.1 salt-doc-3002.2-150300.53.10.1 salt-master-3002.2-150300.53.10.1 salt-minion-3002.2-150300.53.10.1 salt-proxy-3002.2-150300.53.10.1 salt-ssh-3002.2-150300.53.10.1 salt-standalone-formulas-configuration-3002.2-150300.53.10.1 salt-syndic-3002.2-150300.53.10.1 salt-transactional-update-3002.2-150300.53.10.1 - openSUSE Leap 15.3 (noarch): salt-bash-completion-3002.2-150300.53.10.1 salt-fish-completion-3002.2-150300.53.10.1 salt-zsh-completion-3002.2-150300.53.10.1 References: https://www.suse.com/security/cve/CVE-2022-22934.html https://www.suse.com/security/cve/CVE-2022-22935.html https://www.suse.com/security/cve/CVE-2022-22936.html https://www.suse.com/security/cve/CVE-2022-22941.html https://bugzilla.suse.com/1197417

1 0

openSUSE-RU-2022:1046-1: moderate: Recommended update for firewalld
by maintenance＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Recommended Update: Recommended update for firewalld ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1046-1 Rating: moderate References: #1191837 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for firewalld fixes the following issues: - Fixed ability to setting the default zone to external during installation (bsc#1191837) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1046=1 Package List: - openSUSE Leap 15.3 (noarch): firewall-applet-0.9.3-150300.3.3.1 firewall-config-0.9.3-150300.3.3.1 firewall-macros-0.9.3-150300.3.3.1 firewalld-0.9.3-150300.3.3.1 firewalld-lang-0.9.3-150300.3.3.1 python3-firewall-0.9.3-150300.3.3.1 References: https://bugzilla.suse.com/1191837

1 0

openSUSE-RU-2022:0094-1: moderate: Recommended update for kiwi-templates-JeOS
by maintenance＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Recommended Update: Recommended update for kiwi-templates-JeOS ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0094-1 Rating: moderate References: #1194484 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kiwi-templates-JeOS fixes the following issues: - Add rw to the default boot options to fix /etc/machine-id setup (boo#1194484, see also gh#OSInside/kiwi#1650) - Don't delete the dbus machine-id, it's a symlink Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-94=1 Package List: - openSUSE Leap 15.3 (noarch): kiwi-templates-JeOS-15.3-lp153.7.3.1 References: https://bugzilla.suse.com/1194484

1 0

openSUSE-SU-2022:1037-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1037-1 Rating: important References: #1176447 #1176774 #1178134 #1179439 #1181147 #1191428 #1192273 #1193731 #1193787 #1193864 #1194463 #1194516 #1195211 #1195254 #1195403 #1195612 #1195897 #1195905 #1195939 #1195949 #1195987 #1196079 #1196095 #1196132 #1196155 #1196299 #1196301 #1196433 #1196468 #1196472 #1196627 #1196723 #1196779 #1196830 #1196836 #1196866 #1196868 Cross-References: CVE-2021-0920 CVE-2021-39657 CVE-2021-44879 CVE-2022-0487 CVE-2022-0617 CVE-2022-0644 CVE-2022-24448 CVE-2022-24958 CVE-2022-24959 CVE-2022-25258 CVE-2022-25636 CVE-2022-26490 CVSS scores: CVE-2021-0920 (NVD) : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0920 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-39657 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2021-44879 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-44879 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0487 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-0487 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0617 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0617 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0644 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24448 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2022-24448 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-24958 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24958 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24959 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24959 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-25258 (NVD) : 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-25258 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25636 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25636 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26490 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26490 (SUSE): 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has 25 fixes is now available. Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to nf_tables_offload (bsc#1196299). - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830). - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2022-24448: Fixed an issue if an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612). - CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079) - CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd(). (bsc#1196155) - CVE-2022-25258: The USB Gadget subsystem lacked certain validation of interface OS descriptor requests, which could have lead to memory corruption (bsc#1196096). - CVE-2022-24958: drivers/usb/gadget/legacy/inode.c mishandled dev->buf release (bsc#1195905). - CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897). - CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987). - CVE-2021-0920: Fixed a local privilege escalation due to a use-after-free vulnerability in unix_scm_to_skb of af_unix (bsc#1193731). - CVE-2021-39657: Fixed an information leak in the Universal Flash Storage subsystem (bsc#1193864). The following non-security bugs were fixed: - ALSA: intel_hdmi: Fix reference to PCM buffer address (git-fixes). - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (git-fixes). - ARM: Fix kgdb breakpoint for Thumb2 (git-fixes). - ASoC: cs4265: Fix the duplicated control name (git-fixes). - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (git-fixes). - ASoC: rt5668: do not block workqueue if card is unbound (git-fixes). - ASoC: rt5682: do not block workqueue if card is unbound (git-fixes). - Bluetooth: btusb: Add missing Chicony device for Realtek RTL8723BE (bsc#1196779). - EDAC/altera: Fix deferred probing (bsc#1178134). - HID: add mapping for KEY_ALL_APPLICATIONS (git-fixes). - HID: add mapping for KEY_DICTATE (git-fixes). - Hand over the maintainership to SLE15-SP3 maintainers - IB/hfi1: Correct guard on eager buffer deallocation (git-fixes). - IB/hfi1: Fix early init panic (git-fixes). - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (git-fixes). - IB/hfi1: Insure use of smp_processor_id() is preempt disabled (git-fixes). - IB/rdmavt: Validate remote_addr during loopback atomic tests (git-fixes). - Input: clear BTN_RIGHT/MIDDLE on buttonpads (git-fixes). - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (git-fixes). - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (git-fixes). - RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" (git-fixes). - RDMA/cma: Do not change route.addr.src_addr outside state checks (bsc#1181147). - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry (git-fixes). - RDMA/cma: Remove open coding of overflow checking for private_data_len (git-fixes). - RDMA/core: Do not infoleak GRH fields (git-fixes). - RDMA/core: Let ib_find_gid() continue search even after empty entry (git-fixes). - RDMA/cxgb4: Set queue pair state when being queried (git-fixes). - RDMA/hns: Validate the pkey index (git-fixes). - RDMA/ib_srp: Fix a deadlock (git-fixes). - RDMA/mlx4: Do not continue event handler after memory allocation failure (git-fixes). - RDMA/rtrs-clt: Fix possible double free in error case (jsc#SLE-15176). - RDMA/rxe: Fix a typo in opcode name (git-fixes). - RDMA/siw: Fix broken RDMA Read Fence/Resume logic (git-fixes). - RDMA/uverbs: Check for null return of kmalloc_array (git-fixes). - RDMA/uverbs: Remove the unnecessary assignment (git-fixes). - Revert "USB: serial: ch341: add new Product ID for CH341A" (git-fixes). - SUNRPC: avoid race between mod_timer() and del_timer_sync() (bnc#1195403). - USB: gadget: validate endpoint index for xilinx udc (git-fixes). - USB: gadget: validate interface OS descriptor requests (git-fixes). - USB: hub: Clean up use of port initialization schemes and retries (git-fixes). - USB: serial: option: add Telit LE910R1 compositions (git-fixes). - USB: serial: option: add support for DW5829e (git-fixes). - USB: zaurus: support another broken Zaurus (git-fixes). - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (git-fixes). - asix: fix uninit-value in asix_mdio_read() (git-fixes). - ata: pata_hpt37x: disable primary channel on HPT371 (git-fixes). - batman-adv: Do not expect inter-netns unique iflink indices (git-fixes). - batman-adv: Request iflink once in batadv-on-batadv check (git-fixes). - batman-adv: Request iflink once in batadv_get_real_netdevice (git-fixes). - blk-mq: do not free tags if the tag_set is used by other device in queue initialztion (bsc#1193787). - bnxt_en: Fix active FEC reporting to ethtool (jsc#SLE-16649). - bnxt_en: Fix incorrect multicast rx mask setting when not requested (git-fixes). - bnxt_en: Fix occasional ethtool -t loopback test failures (git-fixes). - bnxt_en: Fix offline ethtool selftest with RDMA enabled (git-fixes). - bonding: force carrier update when releasing slave (git-fixes). - can: gs_usb: change active_channels's type from atomic_t to u8 (git-fixes). - cgroup-v1: Correct privileges check in release_agent writes (bsc#1196723). - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning (bsc#1196868). - clk: jz4725b: fix mmc0 clock gating (git-fixes). - cpufreq: schedutil: Use kobject release() method to free (git-fixes) - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() (bsc#1196866). - cputime, cpuacct: Include guest time in user time in (git-fixes) - dma-direct: Fix potential NULL pointer dereference (bsc#1196472 ltc#192278). - dma-mapping: Allow mixing bypass and mapped DMA operation (bsc#1196472 ltc#192278). - dmaengine: shdma: Fix runtime PM imbalance on error (git-fixes). - drm/amdgpu: disable MMHUB PG for Picasso (git-fixes). - drm/edid: Always set RGB444 (git-fixes). - drm/i915/dg1: Wait for pcode/uncore handshake at startup (bsc#1195211). - drm/i915/gen11+: Only load DRAM information from pcode (bsc#1195211). - drm/i915: Nuke not needed members of dram_info (bsc#1195211). - drm/i915: Remove memory frequency calculation (bsc#1195211). - drm/i915: Rename is_16gb_dimm to wm_lv_0_adjust_needed (bsc#1195211). - efivars: Respect "block" flag in efivar_entry_set_safe() (git-fixes). - exfat: fix i_blocks for files truncated over 4 GiB (git-fixes). - exfat: fix incorrect loading of i_blocks for large files (git-fixes). - firmware: arm_scmi: Remove space in MODULE_ALIAS name (git-fixes). - gpio: rockchip: Reset int_bothedge when changing trigger (git-fixes). - gpio: tegra186: Fix chip_data type confusion (git-fixes). - gtp: remove useless rcu_read_lock() (git-fixes). - hamradio: fix macro redefine warning (git-fixes). - i2c: bcm2835: Avoid clock stretching timeouts (git-fixes). - iavf: Fix missing check for running netdev (git-fixes). - ice: initialize local variable 'tlv' (jsc#SLE-12878). - igc: igc_read_phy_reg_gpy: drop premature return (git-fixes). - igc: igc_write_phy_reg_gpy: drop premature return (git-fixes). - iio: Fix error handling for PM (git-fixes). - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits (git-fixes). - iio: adc: men_z188_adc: Fix a resource leak in an error handling path (git-fixes). - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (git-fixes). - mac80211: fix forwarded mesh frames AC & queue selection (git-fixes). - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (git-fixes). - mac80211_hwsim: report NOACK frames in tx_status (git-fixes). - mask out added spinlock in rndis_params (git-fixes). - net/mlx5: Fix possible deadlock on rule deletion (git-fixes). - net/mlx5: Fix wrong limitation of metadata match on ecpf (git-fixes). - net/mlx5: Update the list of the PCI supported devices (git-fixes). - net/mlx5: Update the list of the PCI supported devices (git-fixes). - net/mlx5e: Fix modify header actions memory leak (git-fixes). - net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468). - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (git-fixes). - net/mlx5e: TC, Reject rules with drop and modify hdr action (git-fixes). - net/mlx5e: TC, Reject rules with forward and drop actions (git-fixes). - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (jsc#SLE-15172). - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (jsc#SLE-15172). - net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration (git-fixes). - net: ethernet: ti: cpsw: disable PTPv1 hw timestamping advertisement (git-fixes). - net: fix up skbs delta_truesize in UDP GRO frag_list (bsc#1176447). - net: hns3: Clear the CMDQ registers before unmapping BAR region (git-fixes). - net: sfc: Replace in_interrupt() usage (git-fixes). - net: tipc: validate domain record count on input (bsc#1195254). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (git-fixes). - netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1176447). - netsec: ignore 'phy-mode' device property on ACPI systems (git-fixes). - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (git-fixes). - nl80211: Handle nla_memdup failures in handle_nan_filter (git-fixes). - ntb: intel: fix port config status offset for SPR (git-fixes). - nvme-multipath: use vmalloc for ANA log buffer (bsc#1193787). - nvme-rdma: fix possible use-after-free in transport error_recovery work (git-fixes). - nvme-tcp: fix possible use-after-free in transport error_recovery work (git-fixes). - nvme: fix a possible use-after-free in controller reset during load (git-fixes). - powerpc/dma: Fallback to dma_ops when persistent memory present (bsc#1196472 ltc#192278). Update config files. - powerpc/fadump: register for fadump as early as possible (bsc#1179439 ltc#190038). - powerpc/mm: Remove dcache flush from memory remove (bsc#1196433 ltc#196449). - powerpc/powernv/memtrace: Fix dcache flushing (bsc#1196433 ltc#196449). - powerpc/pseries/iommu: Fix window size for direct mapping with pmem (bsc#1196472 ltc#192278). - sched/core: Mitigate race (git-fixes) - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (git-fixes). - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (git-fixes). - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() (git-fixes). - scsi: nsp_cs: Check of ioremap return value (git-fixes). - scsi: qedf: Fix potential dereference of NULL pointer (git-fixes). - scsi: smartpqi: Add PCI IDs (bsc#1196627). - scsi: ufs: Fix race conditions related to driver data (git-fixes). - selftests: mlxsw: tc_police_scale: Make test more robust (bsc#1176774). - soc: fsl: Correct MAINTAINERS database (QUICC ENGINE LIBRARY) (git-fixes). - soc: fsl: Correct MAINTAINERS database (SOC) (git-fixes). - soc: fsl: qe: Check of ioremap return value (git-fixes). - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (git-fixes). - sr9700: sanity check for packet length (bsc#1196836). - tracing: Fix return value of __setup handlers (git-fixes). - tty: n_gsm: fix encoding of control signal octet bit DV (git-fixes). - tty: n_gsm: fix proper link termination after failed open (git-fixes). - usb: dwc2: use well defined macros for power_down (git-fixes). - usb: dwc3: gadget: Let the interrupt handler disable bottom halves (git-fixes). - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (git-fixes). - usb: gadget: rndis: add spinlock for rndis response list (git-fixes). - usb: hub: Fix usb enumeration issue due to address0 race (git-fixes). - vrf: Fix fast path output packet handling with async Netfilter rules (git-fixes). - xhci: Prevent futile URB re-submissions due to incorrect return value (git-fixes). - xhci: re-initialize the HC during resume if HCE was set (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1037=1 Package List: - openSUSE Leap 15.3 (x86_64): cluster-md-kmp-azure-5.3.18-150300.38.50.1 cluster-md-kmp-azure-debuginfo-5.3.18-150300.38.50.1 dlm-kmp-azure-5.3.18-150300.38.50.1 dlm-kmp-azure-debuginfo-5.3.18-150300.38.50.1 gfs2-kmp-azure-5.3.18-150300.38.50.1 gfs2-kmp-azure-debuginfo-5.3.18-150300.38.50.1 kernel-azure-5.3.18-150300.38.50.1 kernel-azure-debuginfo-5.3.18-150300.38.50.1 kernel-azure-debugsource-5.3.18-150300.38.50.1 kernel-azure-devel-5.3.18-150300.38.50.1 kernel-azure-devel-debuginfo-5.3.18-150300.38.50.1 kernel-azure-extra-5.3.18-150300.38.50.1 kernel-azure-extra-debuginfo-5.3.18-150300.38.50.1 kernel-azure-livepatch-devel-5.3.18-150300.38.50.1 kernel-azure-optional-5.3.18-150300.38.50.1 kernel-azure-optional-debuginfo-5.3.18-150300.38.50.1 kernel-syms-azure-5.3.18-150300.38.50.1 kselftests-kmp-azure-5.3.18-150300.38.50.1 kselftests-kmp-azure-debuginfo-5.3.18-150300.38.50.1 ocfs2-kmp-azure-5.3.18-150300.38.50.1 ocfs2-kmp-azure-debuginfo-5.3.18-150300.38.50.1 reiserfs-kmp-azure-5.3.18-150300.38.50.1 reiserfs-kmp-azure-debuginfo-5.3.18-150300.38.50.1 - openSUSE Leap 15.3 (noarch): kernel-devel-azure-5.3.18-150300.38.50.1 kernel-source-azure-5.3.18-150300.38.50.1 References: https://www.suse.com/security/cve/CVE-2021-0920.html https://www.suse.com/security/cve/CVE-2021-39657.html https://www.suse.com/security/cve/CVE-2021-44879.html https://www.suse.com/security/cve/CVE-2022-0487.html https://www.suse.com/security/cve/CVE-2022-0617.html https://www.suse.com/security/cve/CVE-2022-0644.html https://www.suse.com/security/cve/CVE-2022-24448.html https://www.suse.com/security/cve/CVE-2022-24958.html https://www.suse.com/security/cve/CVE-2022-24959.html https://www.suse.com/security/cve/CVE-2022-25258.html https://www.suse.com/security/cve/CVE-2022-25636.html https://www.suse.com/security/cve/CVE-2022-26490.html https://bugzilla.suse.com/1176447 https://bugzilla.suse.com/1176774 https://bugzilla.suse.com/1178134 https://bugzilla.suse.com/1179439 https://bugzilla.suse.com/1181147 https://bugzilla.suse.com/1191428 https://bugzilla.suse.com/1192273 https://bugzilla.suse.com/1193731 https://bugzilla.suse.com/1193787 https://bugzilla.suse.com/1193864 https://bugzilla.suse.com/1194463 https://bugzilla.suse.com/1194516 https://bugzilla.suse.com/1195211 https://bugzilla.suse.com/1195254 https://bugzilla.suse.com/1195403 https://bugzilla.suse.com/1195612 https://bugzilla.suse.com/1195897 https://bugzilla.suse.com/1195905 https://bugzilla.suse.com/1195939 https://bugzilla.suse.com/1195949 https://bugzilla.suse.com/1195987 https://bugzilla.suse.com/1196079 https://bugzilla.suse.com/1196095 https://bugzilla.suse.com/1196132 https://bugzilla.suse.com/1196155 https://bugzilla.suse.com/1196299 https://bugzilla.suse.com/1196301 https://bugzilla.suse.com/1196433 https://bugzilla.suse.com/1196468 https://bugzilla.suse.com/1196472 https://bugzilla.suse.com/1196627 https://bugzilla.suse.com/1196723 https://bugzilla.suse.com/1196779 https://bugzilla.suse.com/1196830 https://bugzilla.suse.com/1196836 https://bugzilla.suse.com/1196866 https://bugzilla.suse.com/1196868

1 0

openSUSE-SU-2022:1039-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1039-1 Rating: important References: #1176447 #1176774 #1178134 #1179439 #1181147 #1191428 #1192273 #1193731 #1193787 #1193864 #1194463 #1194516 #1194943 #1195051 #1195211 #1195254 #1195353 #1195403 #1195612 #1195897 #1195905 #1195939 #1195949 #1195987 #1196079 #1196095 #1196130 #1196132 #1196155 #1196299 #1196301 #1196433 #1196468 #1196472 #1196488 #1196627 #1196723 #1196779 #1196830 #1196836 #1196866 #1196868 #1196956 #1196959 Cross-References: CVE-2021-0920 CVE-2021-39657 CVE-2021-39698 CVE-2021-44879 CVE-2021-45402 CVE-2022-0487 CVE-2022-0617 CVE-2022-0644 CVE-2022-23036 CVE-2022-23037 CVE-2022-23038 CVE-2022-23039 CVE-2022-23040 CVE-2022-23041 CVE-2022-23042 CVE-2022-24448 CVE-2022-24958 CVE-2022-24959 CVE-2022-25258 CVE-2022-25636 CVE-2022-26490 CVE-2022-26966 CVSS scores: CVE-2021-0920 (NVD) : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-0920 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-39657 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2021-39698 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-39698 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-44879 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-44879 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45402 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-45402 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L CVE-2022-0487 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-0487 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-0617 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0617 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-0644 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-23036 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23036 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23037 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23037 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23038 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23038 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23039 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23039 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23040 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23040 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23041 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23041 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-23042 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23042 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2022-24448 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2022-24448 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-24958 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24958 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24959 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-24959 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-25258 (NVD) : 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-25258 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25636 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25636 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26490 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-26490 (SUSE): 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-26966 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-26966 (SUSE): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 22 vulnerabilities and has 22 fixes is now available. Description: The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to nf_tables_offload (bsc#1196299). - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830). - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2022-24448: Fixed an issue if an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612). - CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079) - CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd(). (bsc#1196155) - CVE-2022-25258: The USB Gadget subsystem lacked certain validation of interface OS descriptor requests, which could have lead to memory corruption (bsc#1196096). - CVE-2022-24958: drivers/usb/gadget/legacy/inode.c mishandled dev->buf release (bsc#1195905). - CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897). - CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987). - CVE-2021-0920: Fixed a local privilege escalation due to a use-after-free vulnerability in unix_scm_to_skb of af_unix (bsc#1193731). - CVE-2021-39657: Fixed an information leak in the Universal Flash Storage subsystem (bsc#1193864). - CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from heap memory via crafted frame lengths from a device (bsc#1196836). - CVE-2021-39698: Fixed a possible memory corruption due to a use after free in aio_poll_complete_work. This could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1196956) - CVE-2021-45402: The check_alu_op function in kernel/bpf/verifier.c did not properly update bounds while handling the mov32 instruction, which allowed local users to obtain potentially sensitive address information (bsc#1196130). - CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040, CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers. (bsc#1196488) The following non-security bugs were fixed: - ALSA: intel_hdmi: Fix reference to PCM buffer address (git-fixes). - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (git-fixes). - ARM: Fix kgdb breakpoint for Thumb2 (git-fixes). - ASoC: cs4265: Fix the duplicated control name (git-fixes). - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (git-fixes). - ASoC: rt5668: do not block workqueue if card is unbound (git-fixes). - ASoC: rt5682: do not block workqueue if card is unbound (git-fixes). - Bluetooth: btusb: Add missing Chicony device for Realtek RTL8723BE (bsc#1196779). - EDAC/altera: Fix deferred probing (bsc#1178134). - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() (bsc#1178134). - HID: add mapping for KEY_ALL_APPLICATIONS (git-fixes). - HID: add mapping for KEY_DICTATE (git-fixes). - Hand over the maintainership to SLE15-SP3 maintainers - IB/hfi1: Correct guard on eager buffer deallocation (git-fixes). - IB/hfi1: Fix early init panic (git-fixes). - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (git-fixes). - IB/hfi1: Insure use of smp_processor_id() is preempt disabled (git-fixes). - IB/rdmavt: Validate remote_addr during loopback atomic tests (git-fixes). - Input: clear BTN_RIGHT/MIDDLE on buttonpads (git-fixes). - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (git-fixes). - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (git-fixes). - NFC: port100: fix use-after-free in port100_send_complete (git-fixes). - RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" (git-fixes). - RDMA/cma: Do not change route.addr.src_addr outside state checks (bsc#1181147). - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry (git-fixes). - RDMA/cma: Remove open coding of overflow checking for private_data_len (git-fixes). - RDMA/core: Do not infoleak GRH fields (git-fixes). - RDMA/core: Let ib_find_gid() continue search even after empty entry (git-fixes). - RDMA/cxgb4: Set queue pair state when being queried (git-fixes). - RDMA/hns: Validate the pkey index (git-fixes). - RDMA/ib_srp: Fix a deadlock (git-fixes). - RDMA/mlx4: Do not continue event handler after memory allocation failure (git-fixes). - RDMA/rtrs-clt: Fix possible double free in error case (jsc#SLE-15176). - RDMA/rxe: Fix a typo in opcode name (git-fixes). - RDMA/siw: Fix broken RDMA Read Fence/Resume logic (git-fixes). - RDMA/uverbs: Check for null return of kmalloc_array (git-fixes). - RDMA/uverbs: Remove the unnecessary assignment (git-fixes). - Revert "USB: serial: ch341: add new Product ID for CH341A" (git-fixes). - SUNRPC: avoid race between mod_timer() and del_timer_sync() (bnc#1195403). - USB: gadget: validate endpoint index for xilinx udc (git-fixes). - USB: gadget: validate interface OS descriptor requests (git-fixes). - USB: hub: Clean up use of port initialization schemes and retries (git-fixes). - USB: serial: option: add Telit LE910R1 compositions (git-fixes). - USB: serial: option: add support for DW5829e (git-fixes). - USB: zaurus: support another broken Zaurus (git-fixes). - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (git-fixes). - asix: fix uninit-value in asix_mdio_read() (git-fixes). - ata: pata_hpt37x: disable primary channel on HPT371 (git-fixes). - ax25: Fix NULL pointer dereference in ax25_kill_by_device (git-fixes). - batman-adv: Do not expect inter-netns unique iflink indices (git-fixes). - batman-adv: Request iflink once in batadv-on-batadv check (git-fixes). - batman-adv: Request iflink once in batadv_get_real_netdevice (git-fixes). - blk-mq: do not free tags if the tag_set is used by other device in queue initialztion (bsc#1193787). - bnxt_en: Fix active FEC reporting to ethtool (jsc#SLE-16649). - bnxt_en: Fix incorrect multicast rx mask setting when not requested (git-fixes). - bnxt_en: Fix occasional ethtool -t loopback test failures (git-fixes). - bnxt_en: Fix offline ethtool selftest with RDMA enabled (git-fixes). - bonding: force carrier update when releasing slave (git-fixes). - build initrd without systemd This reduces the size of the initrd by over 25%, which improves startup time of the virtual machine by 0.5-0.6s on very fast machines, more on slower ones. - can: gs_usb: change active_channels's type from atomic_t to u8 (git-fixes). - cgroup-v1: Correct privileges check in release_agent writes (bsc#1196723). - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning (bsc#1196868). - clk: jz4725b: fix mmc0 clock gating (git-fixes). - constraints: Also adjust disk requirement for x86 and s390. - constraints: Increase disk space for aarch64 - cpufreq: schedutil: Use kobject release() method to free (git-fixes) - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() (bsc#1196866). - cputime, cpuacct: Include guest time in user time in (git-fixes) - dma-direct: Fix potential NULL pointer dereference (bsc#1196472 ltc#192278). - dma-mapping: Allow mixing bypass and mapped DMA operation (bsc#1196472 ltc#192278). - dmaengine: shdma: Fix runtime PM imbalance on error (git-fixes). - drm/amdgpu: disable MMHUB PG for Picasso (git-fixes). - drm/edid: Always set RGB444 (git-fixes). - drm/i915/dg1: Wait for pcode/uncore handshake at startup (bsc#1195211). - drm/i915/gen11+: Only load DRAM information from pcode (bsc#1195211). - drm/i915: Nuke not needed members of dram_info (bsc#1195211). - drm/i915: Remove memory frequency calculation (bsc#1195211). - drm/i915: Rename is_16gb_dimm to wm_lv_0_adjust_needed (bsc#1195211). - drm/sun4i: mixer: Fix P010 and P210 format numbers (git-fixes). - efivars: Respect "block" flag in efivar_entry_set_safe() (git-fixes). - exfat: fix i_blocks for files truncated over 4 GiB (git-fixes). - exfat: fix incorrect loading of i_blocks for large files (git-fixes). - firmware: arm_scmi: Remove space in MODULE_ALIAS name (git-fixes). - fix rpm build warning tumbleweed rpm is adding these warnings to the log: It's not recommended to have unversioned Obsoletes: Obsoletes: microcode_ctl - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (git-fixes). - gpio: rockchip: Reset int_bothedge when changing trigger (git-fixes). - gpio: tegra186: Fix chip_data type confusion (git-fixes). - gpio: ts4900: Do not set DAT and OE together (git-fixes). - gpiolib: acpi: Convert ACPI value of debounce to microseconds (git-fixes). - gtp: remove useless rcu_read_lock() (git-fixes). - hamradio: fix macro redefine warning (git-fixes). - i2c: bcm2835: Avoid clock stretching timeouts (git-fixes). - iavf: Fix missing check for running netdev (git-fixes). - ice: initialize local variable 'tlv' (jsc#SLE-12878). - igc: igc_read_phy_reg_gpy: drop premature return (git-fixes). - igc: igc_write_phy_reg_gpy: drop premature return (git-fixes). - iio: Fix error handling for PM (git-fixes). - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits (git-fixes). - iio: adc: men_z188_adc: Fix a resource leak in an error handling path (git-fixes). - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (git-fixes). - kernel-binary.spec.in: Move 20-kernel-default-extra.conf to the correctr directory (bsc#1195051). - kernel-binary.spec: Also exclude the kernel signing key from devel package. There is a check in OBS that fails when it is included. Also the key is not reproducible. Fixes: bb988d4625a3 ("kernel-binary: Do not include sourcedir in certificate path.") - kernel-binary.spec: Do not use the default certificate path (bsc#1194943). Using the the default path is broken since Linux 5.17 - kernel-binary: Do not include sourcedir in certificate path. The certs macro runs before build directory is set up so it creates the aggregate of supplied certificates in the source directory. Using this file directly as the certificate in kernel config works but embeds the source directory path in the kernel config. To avoid this symlink the certificate to the build directory and use relative path to refer to it. Also fabricate a certificate in the same location in build directory when none is provided. - kernel-obs-build: include 9p (boo#1195353) To be able to share files between host and the qemu vm of the build script, the 9p and 9p_virtio kernel modules need to be included in the initrd of kernel-obs-build. - mac80211: fix forwarded mesh frames AC & queue selection (git-fixes). - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (git-fixes). - mac80211_hwsim: report NOACK frames in tx_status (git-fixes). - mask out added spinlock in rndis_params (git-fixes). - mmc: meson: Fix usage of meson_mmc_post_req() (git-fixes). - net/mlx5: Fix possible deadlock on rule deletion (git-fixes). - net/mlx5: Fix wrong limitation of metadata match on ecpf (git-fixes). - net/mlx5: Update the list of the PCI supported devices (git-fixes). - net/mlx5: Update the list of the PCI supported devices (git-fixes). - net/mlx5e: Fix modify header actions memory leak (git-fixes). - net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468). - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (git-fixes). - net/mlx5e: TC, Reject rules with drop and modify hdr action (git-fixes). - net/mlx5e: TC, Reject rules with forward and drop actions (git-fixes). - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (jsc#SLE-15172). - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (jsc#SLE-15172). - net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration (git-fixes). - net: ethernet: ti: cpsw: disable PTPv1 hw timestamping advertisement (git-fixes). - net: fix up skbs delta_truesize in UDP GRO frag_list (bsc#1176447). - net: hns3: Clear the CMDQ registers before unmapping BAR region (git-fixes). - net: phy: DP83822: clear MISR2 register to disable interrupts (git-fixes). - net: sfc: Replace in_interrupt() usage (git-fixes). - net: tipc: validate domain record count on input (bsc#1195254). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (git-fixes). - netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1176447). - netsec: ignore 'phy-mode' device property on ACPI systems (git-fixes). - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (git-fixes). - nl80211: Handle nla_memdup failures in handle_nan_filter (git-fixes). - ntb: intel: fix port config status offset for SPR (git-fixes). - nvme-multipath: use vmalloc for ANA log buffer (bsc#1193787). - nvme-rdma: fix possible use-after-free in transport error_recovery work (git-fixes). - nvme-tcp: fix possible use-after-free in transport error_recovery work (git-fixes). - nvme: fix a possible use-after-free in controller reset during load (git-fixes). - powerpc/dma: Fallback to dma_ops when persistent memory present (bsc#1196472 ltc#192278). Update config files. - powerpc/fadump: register for fadump as early as possible (bsc#1179439 ltc#190038). - powerpc/mm: Remove dcache flush from memory remove (bsc#1196433 ltc#196449). - powerpc/powernv/memtrace: Fix dcache flushing (bsc#1196433 ltc#196449). - powerpc/pseries/iommu: Fix window size for direct mapping with pmem (bsc#1196472 ltc#192278). - rpm/*.spec.in: Use https:// urls - rpm/arch-symbols,guards,*driver: Replace Novell with SUSE. - rpm/check-for-config-changes: Ignore PAHOLE_VERSION. - rpm/kernel-docs.spec.in: use %%license for license declarations Limited to SLE15+ to avoid compatibility nightmares. - rpm/kernel-source.spec.in: call fdupes per subpackage It is a waste of time to do a global fdupes when we have subpackages. - rpm: SC2006: Use $(...) notation instead of legacy backticked `...`. - sched/core: Mitigate race (git-fixes) - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (git-fixes). - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (git-fixes). - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() (git-fixes). - scsi: nsp_cs: Check of ioremap return value (git-fixes). - scsi: qedf: Fix potential dereference of NULL pointer (git-fixes). - scsi: smartpqi: Add PCI IDs (bsc#1196627). - scsi: ufs: Fix race conditions related to driver data (git-fixes). - selftests: mlxsw: tc_police_scale: Make test more robust (bsc#1176774). - soc: fsl: Correct MAINTAINERS database (QUICC ENGINE LIBRARY) (git-fixes). - soc: fsl: Correct MAINTAINERS database (SOC) (git-fixes). - soc: fsl: qe: Check of ioremap return value (git-fixes). - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (git-fixes). - sr9700: sanity check for packet length (bsc#1196836). - staging: gdm724x: fix use after free in gdm_lte_rx() (git-fixes). - tracing: Fix return value of __setup handlers (git-fixes). - tty: n_gsm: fix encoding of control signal octet bit DV (git-fixes). - tty: n_gsm: fix proper link termination after failed open (git-fixes). - usb: dwc2: Fix Stalling a Non-Isochronous OUT EP (git-fixes). - usb: dwc2: gadget: Fix GOUTNAK flow for Slave mode (git-fixes). - usb: dwc2: gadget: Fix kill_all_requests race (git-fixes). - usb: dwc2: use well defined macros for power_down (git-fixes). - usb: dwc3: gadget: Let the interrupt handler disable bottom halves (git-fixes). - usb: dwc3: meson-g12a: Disable the regulator in the error handling path of the probe (git-fixes). - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (git-fixes). - usb: gadget: rndis: add spinlock for rndis response list (git-fixes). - usb: host: xen-hcd: add missing unlock in error path (git-fixes). - usb: hub: Fix locking issues with address0_mutex (git-fixes). - usb: hub: Fix usb enumeration issue due to address0 race (git-fixes). - vrf: Fix fast path output packet handling with async Netfilter rules (git-fixes). - xen/usb: do not use gnttab_end_foreign_access() in xenhcd_gnttab_done() (bsc#1196488, XSA-396). - xhci: Prevent futile URB re-submissions due to incorrect return value (git-fixes). - xhci: re-initialize the HC during resume if HCE was set (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1039=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1039=1 Package List: - openSUSE Leap 15.4 (aarch64 x86_64): cluster-md-kmp-preempt-5.3.18-150300.59.60.4 cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 dlm-kmp-preempt-5.3.18-150300.59.60.4 dlm-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 gfs2-kmp-preempt-5.3.18-150300.59.60.4 gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-5.3.18-150300.59.60.4 kernel-preempt-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-debugsource-5.3.18-150300.59.60.4 kernel-preempt-devel-5.3.18-150300.59.60.4 kernel-preempt-devel-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-extra-5.3.18-150300.59.60.4 kernel-preempt-extra-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-livepatch-devel-5.3.18-150300.59.60.4 kernel-preempt-optional-5.3.18-150300.59.60.4 kernel-preempt-optional-debuginfo-5.3.18-150300.59.60.4 kselftests-kmp-preempt-5.3.18-150300.59.60.4 kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 ocfs2-kmp-preempt-5.3.18-150300.59.60.4 ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 reiserfs-kmp-preempt-5.3.18-150300.59.60.4 reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 - openSUSE Leap 15.4 (aarch64): dtb-al-5.3.18-150300.59.60.4 dtb-zte-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cluster-md-kmp-default-5.3.18-150300.59.60.4 cluster-md-kmp-default-debuginfo-5.3.18-150300.59.60.4 dlm-kmp-default-5.3.18-150300.59.60.4 dlm-kmp-default-debuginfo-5.3.18-150300.59.60.4 gfs2-kmp-default-5.3.18-150300.59.60.4 gfs2-kmp-default-debuginfo-5.3.18-150300.59.60.4 kernel-default-5.3.18-150300.59.60.4 kernel-default-base-5.3.18-150300.59.60.4.150300.18.37.5 kernel-default-base-rebuild-5.3.18-150300.59.60.4.150300.18.37.5 kernel-default-debuginfo-5.3.18-150300.59.60.4 kernel-default-debugsource-5.3.18-150300.59.60.4 kernel-default-devel-5.3.18-150300.59.60.4 kernel-default-devel-debuginfo-5.3.18-150300.59.60.4 kernel-default-extra-5.3.18-150300.59.60.4 kernel-default-extra-debuginfo-5.3.18-150300.59.60.4 kernel-default-livepatch-5.3.18-150300.59.60.4 kernel-default-livepatch-devel-5.3.18-150300.59.60.4 kernel-default-optional-5.3.18-150300.59.60.4 kernel-default-optional-debuginfo-5.3.18-150300.59.60.4 kernel-obs-build-5.3.18-150300.59.60.4 kernel-obs-build-debugsource-5.3.18-150300.59.60.4 kernel-obs-qa-5.3.18-150300.59.60.4 kernel-syms-5.3.18-150300.59.60.4 kselftests-kmp-default-5.3.18-150300.59.60.4 kselftests-kmp-default-debuginfo-5.3.18-150300.59.60.4 ocfs2-kmp-default-5.3.18-150300.59.60.4 ocfs2-kmp-default-debuginfo-5.3.18-150300.59.60.4 reiserfs-kmp-default-5.3.18-150300.59.60.4 reiserfs-kmp-default-debuginfo-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (ppc64le x86_64): kernel-debug-5.3.18-150300.59.60.4 kernel-debug-debuginfo-5.3.18-150300.59.60.4 kernel-debug-debugsource-5.3.18-150300.59.60.4 kernel-debug-devel-5.3.18-150300.59.60.4 kernel-debug-devel-debuginfo-5.3.18-150300.59.60.4 kernel-debug-livepatch-devel-5.3.18-150300.59.60.4 kernel-kvmsmall-5.3.18-150300.59.60.4 kernel-kvmsmall-debuginfo-5.3.18-150300.59.60.4 kernel-kvmsmall-debugsource-5.3.18-150300.59.60.4 kernel-kvmsmall-devel-5.3.18-150300.59.60.4 kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.60.4 kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (aarch64 x86_64): cluster-md-kmp-preempt-5.3.18-150300.59.60.4 cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 dlm-kmp-preempt-5.3.18-150300.59.60.4 dlm-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 gfs2-kmp-preempt-5.3.18-150300.59.60.4 gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-5.3.18-150300.59.60.4 kernel-preempt-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-debugsource-5.3.18-150300.59.60.4 kernel-preempt-devel-5.3.18-150300.59.60.4 kernel-preempt-devel-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-extra-5.3.18-150300.59.60.4 kernel-preempt-extra-debuginfo-5.3.18-150300.59.60.4 kernel-preempt-livepatch-devel-5.3.18-150300.59.60.4 kernel-preempt-optional-5.3.18-150300.59.60.4 kernel-preempt-optional-debuginfo-5.3.18-150300.59.60.4 kselftests-kmp-preempt-5.3.18-150300.59.60.4 kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 ocfs2-kmp-preempt-5.3.18-150300.59.60.4 ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 reiserfs-kmp-preempt-5.3.18-150300.59.60.4 reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (aarch64): cluster-md-kmp-64kb-5.3.18-150300.59.60.4 cluster-md-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 dlm-kmp-64kb-5.3.18-150300.59.60.4 dlm-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 dtb-al-5.3.18-150300.59.60.4 dtb-allwinner-5.3.18-150300.59.60.4 dtb-altera-5.3.18-150300.59.60.4 dtb-amd-5.3.18-150300.59.60.4 dtb-amlogic-5.3.18-150300.59.60.4 dtb-apm-5.3.18-150300.59.60.4 dtb-arm-5.3.18-150300.59.60.4 dtb-broadcom-5.3.18-150300.59.60.4 dtb-cavium-5.3.18-150300.59.60.4 dtb-exynos-5.3.18-150300.59.60.4 dtb-freescale-5.3.18-150300.59.60.4 dtb-hisilicon-5.3.18-150300.59.60.4 dtb-lg-5.3.18-150300.59.60.4 dtb-marvell-5.3.18-150300.59.60.4 dtb-mediatek-5.3.18-150300.59.60.4 dtb-nvidia-5.3.18-150300.59.60.4 dtb-qcom-5.3.18-150300.59.60.4 dtb-renesas-5.3.18-150300.59.60.4 dtb-rockchip-5.3.18-150300.59.60.4 dtb-socionext-5.3.18-150300.59.60.4 dtb-sprd-5.3.18-150300.59.60.4 dtb-xilinx-5.3.18-150300.59.60.4 dtb-zte-5.3.18-150300.59.60.4 gfs2-kmp-64kb-5.3.18-150300.59.60.4 gfs2-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 kernel-64kb-5.3.18-150300.59.60.4 kernel-64kb-debuginfo-5.3.18-150300.59.60.4 kernel-64kb-debugsource-5.3.18-150300.59.60.4 kernel-64kb-devel-5.3.18-150300.59.60.4 kernel-64kb-devel-debuginfo-5.3.18-150300.59.60.4 kernel-64kb-extra-5.3.18-150300.59.60.4 kernel-64kb-extra-debuginfo-5.3.18-150300.59.60.4 kernel-64kb-livepatch-devel-5.3.18-150300.59.60.4 kernel-64kb-optional-5.3.18-150300.59.60.4 kernel-64kb-optional-debuginfo-5.3.18-150300.59.60.4 kselftests-kmp-64kb-5.3.18-150300.59.60.4 kselftests-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 ocfs2-kmp-64kb-5.3.18-150300.59.60.4 ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 reiserfs-kmp-64kb-5.3.18-150300.59.60.4 reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (noarch): kernel-devel-5.3.18-150300.59.60.4 kernel-docs-5.3.18-150300.59.60.4 kernel-docs-html-5.3.18-150300.59.60.4 kernel-macros-5.3.18-150300.59.60.4 kernel-source-5.3.18-150300.59.60.4 kernel-source-vanilla-5.3.18-150300.59.60.4 - openSUSE Leap 15.3 (s390x): kernel-zfcpdump-5.3.18-150300.59.60.4 kernel-zfcpdump-debuginfo-5.3.18-150300.59.60.4 kernel-zfcpdump-debugsource-5.3.18-150300.59.60.4 References: https://www.suse.com/security/cve/CVE-2021-0920.html https://www.suse.com/security/cve/CVE-2021-39657.html https://www.suse.com/security/cve/CVE-2021-39698.html https://www.suse.com/security/cve/CVE-2021-44879.html https://www.suse.com/security/cve/CVE-2021-45402.html https://www.suse.com/security/cve/CVE-2022-0487.html https://www.suse.com/security/cve/CVE-2022-0617.html https://www.suse.com/security/cve/CVE-2022-0644.html https://www.suse.com/security/cve/CVE-2022-23036.html https://www.suse.com/security/cve/CVE-2022-23037.html https://www.suse.com/security/cve/CVE-2022-23038.html https://www.suse.com/security/cve/CVE-2022-23039.html https://www.suse.com/security/cve/CVE-2022-23040.html https://www.suse.com/security/cve/CVE-2022-23041.html https://www.suse.com/security/cve/CVE-2022-23042.html https://www.suse.com/security/cve/CVE-2022-24448.html https://www.suse.com/security/cve/CVE-2022-24958.html https://www.suse.com/security/cve/CVE-2022-24959.html https://www.suse.com/security/cve/CVE-2022-25258.html https://www.suse.com/security/cve/CVE-2022-25636.html https://www.suse.com/security/cve/CVE-2022-26490.html https://www.suse.com/security/cve/CVE-2022-26966.html https://bugzilla.suse.com/1176447 https://bugzilla.suse.com/1176774 https://bugzilla.suse.com/1178134 https://bugzilla.suse.com/1179439 https://bugzilla.suse.com/1181147 https://bugzilla.suse.com/1191428 https://bugzilla.suse.com/1192273 https://bugzilla.suse.com/1193731 https://bugzilla.suse.com/1193787 https://bugzilla.suse.com/1193864 https://bugzilla.suse.com/1194463 https://bugzilla.suse.com/1194516 https://bugzilla.suse.com/1194943 https://bugzilla.suse.com/1195051 https://bugzilla.suse.com/1195211 https://bugzilla.suse.com/1195254 https://bugzilla.suse.com/1195353 https://bugzilla.suse.com/1195403 https://bugzilla.suse.com/1195612 https://bugzilla.suse.com/1195897 https://bugzilla.suse.com/1195905 https://bugzilla.suse.com/1195939 https://bugzilla.suse.com/1195949 https://bugzilla.suse.com/1195987 https://bugzilla.suse.com/1196079 https://bugzilla.suse.com/1196095 https://bugzilla.suse.com/1196130 https://bugzilla.suse.com/1196132 https://bugzilla.suse.com/1196155 https://bugzilla.suse.com/1196299 https://bugzilla.suse.com/1196301 https://bugzilla.suse.com/1196433 https://bugzilla.suse.com/1196468 https://bugzilla.suse.com/1196472 https://bugzilla.suse.com/1196488 https://bugzilla.suse.com/1196627 https://bugzilla.suse.com/1196723 https://bugzilla.suse.com/1196779 https://bugzilla.suse.com/1196830 https://bugzilla.suse.com/1196836 https://bugzilla.suse.com/1196866 https://bugzilla.suse.com/1196868 https://bugzilla.suse.com/1196956 https://bugzilla.suse.com/1196959

1 0

openSUSE-SU-2022:1040-1: moderate: Security update for protobuf
by opensuse-security＠opensuse.org 30 Mar '22

30 Mar '22

openSUSE Security Update: Security update for protobuf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1040-1 Rating: moderate References: #1195258 Cross-References: CVE-2021-22570 CVSS scores: CVE-2021-22570 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-22570 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1040=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1040=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libprotobuf-lite20-3.9.2-4.12.1 libprotobuf-lite20-debuginfo-3.9.2-4.12.1 libprotobuf20-3.9.2-4.12.1 libprotobuf20-debuginfo-3.9.2-4.12.1 libprotoc20-3.9.2-4.12.1 libprotoc20-debuginfo-3.9.2-4.12.1 protobuf-debugsource-3.9.2-4.12.1 protobuf-devel-3.9.2-4.12.1 protobuf-devel-debuginfo-3.9.2-4.12.1 protobuf-java-3.9.2-4.12.1 python2-protobuf-3.9.2-4.12.1 python3-protobuf-3.9.2-4.12.1 - openSUSE Leap 15.4 (x86_64): libprotobuf-lite20-32bit-3.9.2-4.12.1 libprotobuf-lite20-32bit-debuginfo-3.9.2-4.12.1 libprotobuf20-32bit-3.9.2-4.12.1 libprotobuf20-32bit-debuginfo-3.9.2-4.12.1 libprotoc20-32bit-3.9.2-4.12.1 libprotoc20-32bit-debuginfo-3.9.2-4.12.1 - openSUSE Leap 15.4 (noarch): protobuf-source-3.9.2-4.12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libprotobuf-lite20-3.9.2-4.12.1 libprotobuf-lite20-debuginfo-3.9.2-4.12.1 libprotobuf20-3.9.2-4.12.1 libprotobuf20-debuginfo-3.9.2-4.12.1 libprotoc20-3.9.2-4.12.1 libprotoc20-debuginfo-3.9.2-4.12.1 protobuf-debugsource-3.9.2-4.12.1 protobuf-devel-3.9.2-4.12.1 protobuf-devel-debuginfo-3.9.2-4.12.1 protobuf-java-3.9.2-4.12.1 python2-protobuf-3.9.2-4.12.1 python3-protobuf-3.9.2-4.12.1 - openSUSE Leap 15.3 (x86_64): libprotobuf-lite20-32bit-3.9.2-4.12.1 libprotobuf-lite20-32bit-debuginfo-3.9.2-4.12.1 libprotobuf20-32bit-3.9.2-4.12.1 libprotobuf20-32bit-debuginfo-3.9.2-4.12.1 libprotoc20-32bit-3.9.2-4.12.1 libprotoc20-32bit-debuginfo-3.9.2-4.12.1 - openSUSE Leap 15.3 (noarch): protobuf-source-3.9.2-4.12.1 References: https://www.suse.com/security/cve/CVE-2021-22570.html https://bugzilla.suse.com/1195258

1 0

openSUSE-RU-2022:1033-1: moderate: Recommended update for java-11-openjdk
by maintenance＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Recommended Update: Recommended update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1033-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for java-11-openjdk fixes the following issues: - Build failure on Solaris. - Unable to connect to https://google.com using java.net.HttpClient. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1033=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1033=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): java-11-openjdk-11.0.14.1-3.77.5 java-11-openjdk-accessibility-11.0.14.1-3.77.5 java-11-openjdk-accessibility-debuginfo-11.0.14.1-3.77.5 java-11-openjdk-debugsource-11.0.14.1-3.77.5 java-11-openjdk-demo-11.0.14.1-3.77.5 java-11-openjdk-devel-11.0.14.1-3.77.5 java-11-openjdk-headless-11.0.14.1-3.77.5 java-11-openjdk-jmods-11.0.14.1-3.77.5 java-11-openjdk-src-11.0.14.1-3.77.5 - openSUSE Leap 15.4 (noarch): java-11-openjdk-javadoc-11.0.14.1-3.77.5 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): java-11-openjdk-11.0.14.1-3.77.5 java-11-openjdk-accessibility-11.0.14.1-3.77.5 java-11-openjdk-accessibility-debuginfo-11.0.14.1-3.77.5 java-11-openjdk-debugsource-11.0.14.1-3.77.5 java-11-openjdk-demo-11.0.14.1-3.77.5 java-11-openjdk-devel-11.0.14.1-3.77.5 java-11-openjdk-headless-11.0.14.1-3.77.5 java-11-openjdk-jmods-11.0.14.1-3.77.5 java-11-openjdk-src-11.0.14.1-3.77.5 - openSUSE Leap 15.3 (noarch): java-11-openjdk-javadoc-11.0.14.1-3.77.5 References:

1 0

openSUSE-SU-2022:1027-1: important: Security update for java-1_8_0-ibm
by opensuse-security＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Security Update: Security update for java-1_8_0-ibm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1027-1 Rating: important References: #1194925 #1194926 #1194927 #1194928 #1194929 #1194930 #1194931 #1194932 #1194933 #1194934 #1194935 #1194937 #1194939 #1194940 #1194941 #1195146 #1196500 #1197126 Cross-References: CVE-2022-21248 CVE-2022-21271 CVE-2022-21277 CVE-2022-21282 CVE-2022-21283 CVE-2022-21291 CVE-2022-21293 CVE-2022-21294 CVE-2022-21296 CVE-2022-21299 CVE-2022-21305 CVE-2022-21340 CVE-2022-21341 CVE-2022-21349 CVE-2022-21360 CVE-2022-21365 CVE-2022-21366 CVSS scores: CVE-2022-21248 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21248 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21271 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21271 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21277 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21277 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21282 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21282 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21283 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21283 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21291 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21291 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21293 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21296 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21296 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21299 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21305 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21305 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21340 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21340 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21349 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21349 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 17 vulnerabilities and has one errata is now available. Description: This update for java-1_8_0-ibm fixes the following issues: Update Java 8.0 to Service Refresh 7 Fix Pack 5 (bsc#1197126). Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-2022-21277, CVE-2022-21299, CVE-2022-21296, CVE-2022-21282, CVE-2022-21294, CVE-2022-21293, CVE-2022-21291, CVE-2022-21283, CVE-2022-21248, CVE-2022-21271. Non-securtiy fix: - Fixed a broken symlink for javaws (bsc#1195146). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1027=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1027=1 Package List: - openSUSE Leap 15.4 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-demo-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-devel-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-src-1.8.0_sr7.5-150000.3.56.1 - openSUSE Leap 15.4 (x86_64): java-1_8_0-ibm-32bit-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-alsa-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-devel-32bit-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-plugin-1.8.0_sr7.5-150000.3.56.1 - openSUSE Leap 15.3 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-demo-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-devel-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-src-1.8.0_sr7.5-150000.3.56.1 - openSUSE Leap 15.3 (x86_64): java-1_8_0-ibm-32bit-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-alsa-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-devel-32bit-1.8.0_sr7.5-150000.3.56.1 java-1_8_0-ibm-plugin-1.8.0_sr7.5-150000.3.56.1 References: https://www.suse.com/security/cve/CVE-2022-21248.html https://www.suse.com/security/cve/CVE-2022-21271.html https://www.suse.com/security/cve/CVE-2022-21277.html https://www.suse.com/security/cve/CVE-2022-21282.html https://www.suse.com/security/cve/CVE-2022-21283.html https://www.suse.com/security/cve/CVE-2022-21291.html https://www.suse.com/security/cve/CVE-2022-21293.html https://www.suse.com/security/cve/CVE-2022-21294.html https://www.suse.com/security/cve/CVE-2022-21296.html https://www.suse.com/security/cve/CVE-2022-21299.html https://www.suse.com/security/cve/CVE-2022-21305.html https://www.suse.com/security/cve/CVE-2022-21340.html https://www.suse.com/security/cve/CVE-2022-21341.html https://www.suse.com/security/cve/CVE-2022-21349.html https://www.suse.com/security/cve/CVE-2022-21360.html https://www.suse.com/security/cve/CVE-2022-21365.html https://www.suse.com/security/cve/CVE-2022-21366.html https://bugzilla.suse.com/1194925 https://bugzilla.suse.com/1194926 https://bugzilla.suse.com/1194927 https://bugzilla.suse.com/1194928 https://bugzilla.suse.com/1194929 https://bugzilla.suse.com/1194930 https://bugzilla.suse.com/1194931 https://bugzilla.suse.com/1194932 https://bugzilla.suse.com/1194933 https://bugzilla.suse.com/1194934 https://bugzilla.suse.com/1194935 https://bugzilla.suse.com/1194937 https://bugzilla.suse.com/1194939 https://bugzilla.suse.com/1194940 https://bugzilla.suse.com/1194941 https://bugzilla.suse.com/1195146 https://bugzilla.suse.com/1196500 https://bugzilla.suse.com/1197126

1 0

openSUSE-RU-2022:1028-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1028-1 Rating: moderate References: #1194220 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chrony fixes the following issues: - Disable "ntsdumpdir" in default config, because augeas-lenses cannot parse it during installation of SUSE Linux Enterprise Micro 5.1 and openSUSE Leap 15.3 (bsc#1194220). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1028=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): chrony-4.1-150300.16.9.1 chrony-debuginfo-4.1-150300.16.9.1 chrony-debugsource-4.1-150300.16.9.1 - openSUSE Leap 15.3 (noarch): chrony-pool-empty-4.1-150300.16.9.1 chrony-pool-openSUSE-4.1-150300.16.9.1 chrony-pool-suse-4.1-150300.16.9.1 References: https://bugzilla.suse.com/1194220

1 0

openSUSE-SU-2022:1029-1: important: Security update for openvpn
by opensuse-security＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Security Update: Security update for openvpn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1029-1 Rating: important References: #1197341 Cross-References: CVE-2022-0547 CVSS scores: CVE-2022-0547 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openvpn fixes the following issues: - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1029=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1029=1 Package List: - openSUSE Leap 15.4 (aarch64): openvpn-2.4.3-150000.5.10.1 openvpn-auth-pam-plugin-2.4.3-150000.5.10.1 openvpn-auth-pam-plugin-debuginfo-2.4.3-150000.5.10.1 openvpn-debuginfo-2.4.3-150000.5.10.1 openvpn-debugsource-2.4.3-150000.5.10.1 openvpn-devel-2.4.3-150000.5.10.1 openvpn-down-root-plugin-2.4.3-150000.5.10.1 openvpn-down-root-plugin-debuginfo-2.4.3-150000.5.10.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): openvpn-2.4.3-150000.5.10.1 openvpn-auth-pam-plugin-2.4.3-150000.5.10.1 openvpn-auth-pam-plugin-debuginfo-2.4.3-150000.5.10.1 openvpn-debuginfo-2.4.3-150000.5.10.1 openvpn-debugsource-2.4.3-150000.5.10.1 openvpn-devel-2.4.3-150000.5.10.1 openvpn-down-root-plugin-2.4.3-150000.5.10.1 openvpn-down-root-plugin-debuginfo-2.4.3-150000.5.10.1 References: https://www.suse.com/security/cve/CVE-2022-0547.html https://bugzilla.suse.com/1197341

1 0

openSUSE-SU-2022:1031-1: important: Security update for apache2
by opensuse-security＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1031-1 Rating: important References: #1197091 #1197095 #1197096 #1197098 Cross-References: CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23943 CVSS scores: CVE-2022-22719 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-22719 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-22720 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22720 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2022-22721 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-22721 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-23943 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23943 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for apache2 fixes the following issues: - CVE-2022-23943: heap out-of-bounds write in mod_sed (bsc#1197098). - CVE-2022-22720: HTTP request smuggling due to incorrect error handling (bsc#1197095). - CVE-2022-22719: use of uninitialized value of in r:parsebody in mod_lua (bsc#1197091). - CVE-2022-22721: possible buffer overflow with very large or unlimited LimitXMLRequestBody (bsc#1197096). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1031=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-2.4.51-150200.3.42.1 apache2-debuginfo-2.4.51-150200.3.42.1 apache2-debugsource-2.4.51-150200.3.42.1 apache2-devel-2.4.51-150200.3.42.1 apache2-event-2.4.51-150200.3.42.1 apache2-event-debuginfo-2.4.51-150200.3.42.1 apache2-example-pages-2.4.51-150200.3.42.1 apache2-prefork-2.4.51-150200.3.42.1 apache2-prefork-debuginfo-2.4.51-150200.3.42.1 apache2-utils-2.4.51-150200.3.42.1 apache2-utils-debuginfo-2.4.51-150200.3.42.1 apache2-worker-2.4.51-150200.3.42.1 apache2-worker-debuginfo-2.4.51-150200.3.42.1 - openSUSE Leap 15.3 (noarch): apache2-doc-2.4.51-150200.3.42.1 References: https://www.suse.com/security/cve/CVE-2022-22719.html https://www.suse.com/security/cve/CVE-2022-22720.html https://www.suse.com/security/cve/CVE-2022-22721.html https://www.suse.com/security/cve/CVE-2022-23943.html https://bugzilla.suse.com/1197091 https://bugzilla.suse.com/1197095 https://bugzilla.suse.com/1197096 https://bugzilla.suse.com/1197098

1 0

openSUSE-RU-2022:1021-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 29 Mar '22

29 Mar '22

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1021-1 Rating: moderate References: #1195899 SLE-23868 SLE-23870 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains two features can now be installed. Description: This update for systemd fixes the following issues: - allow setting external core size to infinity (bsc#1195899 jsc#SLE-23868 jsc#SLE-23870) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1021=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1021=1 Package List: - openSUSE Leap 15.4 (noarch): systemd-bash-completion-234-24.108.1 - openSUSE Leap 15.3 (noarch): systemd-bash-completion-234-24.108.1 References: https://bugzilla.suse.com/1195899

1 0

openSUSE-RU-2022:0092-1: moderate: Recommended update for python-wxPython
by maintenance＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Recommended Update: Recommended update for python-wxPython ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0092-1 Rating: moderate References: #1095747 #1194593 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-wxPython fixes the following issues: Update to 4.0.7.post2: * Bugfix to switch to AVFoundation instead of QTKit Update to 4.0.7.post1 * This post-release just fixes a problem with the numpy dependency constraint for Python 2.7. (#1415) * Bug fixes in wx.lib.calendar: key navigation across month boundaries is now possible; key navigation now sets the date and fires the EVT_CALENDAR event; setter APIs now set the date correctly (#1230). * Switch to using a wx.Overlay in the Widget Inspection Tool to highlight widgets when running on a GTK3 port. * Fixed issue in wx.lib.agw.customtreectrl where label editor could remain stuck forever (#1235). * Fix a sometimes crash when using a wx.Overlay by letting the wx.DCOverlay hold a reference to the DC, to ensure that the DCOverlay is destroyed first. (PR#1301) * Ported the embedding sample from Classic, which shows how to use wxPython from a C++ wxWidgets application that embeds Python. (PR #1353) * Fixed wx.GetApp() to use wxWidgets' global wxApp instance instead of maintaining its own pointer. This way, if the wxApp is created by C++ code wxPython will still be able to get access to it. (#1126) * Several other PRs have been backported from the master branch (which will become wxPython 4.1.0), the full list can be seen here: https://github.com/wxWidgets/Phoenix/pull/1357 * Fixed a probably rare, but fatal bug on OSX when calling certain overloaded virtual methods with implementations in Python. * Fixed char pointers in generated stub code to have a valid pointer value. * Reverted the change that loads up install_requires from the contents of requirements.txt. Split the requirements.txt file into one for install and one for development. * Added missing HtmlWindow.ScrollToAnchor method, and also a couple methods in HtmlCell too. (#1141) * Added missing setters for the wheel-related properties in wx.MouseEvent. (#1140) * Updated wxWidgets commit reference, bringing fixes for #1140, #1086 and #1147. * Fix the use of the output parameter in HtmlWindow.OnOpeningURL the same way it was fixed in HtmlWindowInterface.OnHTMLOpeningURL. (#1068) * Fixed a crashing bug when using a member of a transient wx.VisualAttributes object. Also set the attributes to be read-only to simplify the fix. (#1198). * Updated the sip being used in wxPython builds to version 4.19.16. * Added helper functions to check results of wxWidgets configure during the build of wxPython. Currently used to determine if the wx webview, glcanvas, and media libraries should be added to the link command. (#1138) * Fixed scrollbar issue with ListCtrlAutoWidthMixin (#1215) * Fixed file access in the wx.py and wx.tools.pywxrc packages to be Python 2 and 3 compatible. (#1193, #1156) * Fixes for building with Python 3.8 on Linux. (#1227) Update to 4.0.4 * Fixed an issue where wx.lib.intctrl would erroneously attempt to use long on Python3. (#898) * Include the MSVC runtime DLLs for Python 3.7 builds too. * Clear LIBPATH_PYEXT and LIB_PYEXT for linux builds too. (#904) * Added a dependency on the Pillow package since it's used in some wx.lib.agw modules. (PR #908) * Add flag to hide page in wx.lib.agw.aui.notebook. (#895) * Switch wx.lib.plot to issue deprecation warnings with PlotPendingDeprecation so it doesn't have to enable all warnings to get them to be shown by default. (#902) * Added a Python 3.7 builder on Fedora 28. (#925) * Fix the object ownership transfer for wx.Menu.Insert() (#931) * Added wx.Treebook.GetTreeCtrl, wx.Listbook.GetListView and wx.Choicebook.GetChoiceCtrl. (#918) * Removed the wx.BookCtrlBase.RemovePage workaround as it was causing problems and doesn't seem to be necessary any more. The existing wxWidgets assertions are catching the out of range error just fine, however if wxWidgets was built without the debug helpers turned on then it could still cause a crash. (#888) * Reverted the changes which removed the content of the wx.lib.pubsub package and encouraged users to switch to the real PyPubSub package instead. Removing it caused more issues than were expected so it has been restored and the code updated to PyPubSub v3.3.0. Version 4.0.0 is available upstream, but it is not compatible with Python 2.7. Now, wx.lib.pubsub is actually deprecated instead of just trying to pass control over to the upstream PyPubSub library. (#932) * Improve calltip stability in pyshell. (#941) * Fix TypeError in wx.lib.throbber. (#924) * Fix missing parameter tool_id in wx.lib.agw.ribbon.toolbar.RibbonToolBar.AddToggleTool. (#947) * Add a step to wx.Config.ReadInt to attempt converting from long to int under python2. (#384) * Add virtual behavior for wx.RichTextCtrl and wx.TextCtrl's Copy/Cut/Paste methods and their Can* counterparts. (#954) * Fix IO type in wx.lib.agw.thumbnailctrl (#959) * Fix type error that would occur using pycolourchooser. (#957) * Optimize line drawing in HyperTreeList. (#973) * Add wrapper for wx.StaticBox.GetBordersForSizer and use it in the demo to do platform-specific layout of the items in the StaticBox. (#974) * Update wx.Point, wx.RealPoint, and wx.Size to use floating point arithmetic when conducting scalar multiplication (#971) * Fix load/save bugs in PySlices (PR#978) * Replace deprecated PIL.Image.tostring (PR#1005) * Fix rendering and mouse sensitivity in UltimateListCtrl when adding HyperText items. (#1010) * Added a parameter to lib.agw.CustomTreeCtrl.SetItemWindow(), to allow positioning the Window (a small image) on the left of text in a CustomTreeItem. (#PR886). * Declared DeleteAllPages in the notebook subclasses, so the proper C++ implementation will be called. (#972) * Removed wx.lib.floatbar, which has been deprecated forever and probably hasn't been working in nearly as long. (#976) * Updated SIP to version 4.19.13. * Fix an issue in wx.lib.agw.aui.AuiManager where the orientation of an AuiToolBar would not be updated when calling LoadPerspective. (#917) * Fixed a bug in wx.FileSystemHandler.OpenFile where the object ownership was not being transferred correctly, causing a crash after a premature object deletion. (#926) * Fixed wx.ListCtrl.Append when wx.LC_SORT style is used, so appending items out of order does not lose the data for the remaining columns. (#906) * Add wx.Accessible, it's Windows-only, will raise a NotImplementedError exception on the other platforms. (#958) * Added the ability to generate stub classes for use when optional wxWidgets features are not part of the build. So far, stubs are available for wx.Accessible, wx.FileSystemWatcher, wx.glcanvas, wx.media and wx.html2. * Moved the wxpy_api.h file into the wx package at wx/include/wxPython so it will be included in the wheel file. (#961) * Fixed how string data is added to a virtual file-like object in wx.MemoryFSHandler. All strings are now added to the file as utf-8 encoded data, in both Python2 and Python3, and will be read from the virtual file the same way. If you need to use some other encoding for some reason you can first convert the text to a bytesarray or other buffer protocol compatible object and then create the virtual file from that data. (#969) * Performance update for wx.lib.agw.customtreectrl (#1049) * Ensure that colours set in wx.lib.agw.customtreectrl.TreeItemAttr are instances of wx.Colour. (#1032) * Fix drawing of ticks in wx.lib.agw.speedmeter when there are negative bounds values. (#1013) * wxWidgets for Mac includes the wxJoystick class now, also update the demo. (#997) * Fix wx.html.HtmlPrintout to not be seen as an abstract class, so it can be instantiated. (#1060) * Fix wx.aui.AuiNotbook.SetArtProvider to properly transfer ownership of the art object from Python to C++. This possible double-deletion and related crashing problems. (#1061) * Fixed the wrappers for wx.html.HtmlWindow.OnOpeningURL to properly handle the redirect output parameter. (#1068) This is a backwards-incompatible change, please see the Migration Guide for details. * TabNavigatorWindow works similarly to other programs now. It's resizable and draggable so if user has tons of files with long names, it isn't an irritation anymore plastered right in the middle of the screen and can't be worked with easily and ESC now cancels the popup with a proper returnId. (#1096) * Added missing methods in wx.ListBox, SetItemForegroundColour, SetItemBackgroundColour and SetItemFont. (#1095) * Backported a fix in wxWidgets that avoids crashing in hhctrl.ocx when using context sensitive help in 64-bit builds on Windows. (#1104) - Update to 4.0.3 * Fixed a linking problem on macOS. The new waf added an explicit link to the Python shared library which meant that it would try to load it at runtime, even if a different Python (such as Anaconda, EDM or Homebrew) was used to import wxPython. This, of course, caused runtime errors. (#892) * Sort pages by dock_pos when added to automatic (agw.aui) notebook. (#882) * Fix a bug in py.introspect.getTokens. (#889) * Added Vagrant configuration for Fedora-28. Removed Fedora-23 (#884) * Added wrappers for the wx.WindowIDRef class and added the wx.NewIdRef function. These will make it possible to create reserved Window IDs using the same mechanism which is used when passing wx.ID_ANY to a widget constructor. The object returned by wx.NewIdRef will automatically convert to an int when passing it to a window constructor, and can also be used as the source in a Bind(). (#896) * Fixed issue when sys.prefix is not unicode (Python2) and when its contents are not translatable to utf-8. - Update to 4.0.2 * Fixed wx.html2.EVT_WEBVIEW_NAVIGATING event not being sent on some versions of Linux. (#741) * wx.Sizers can now be used as an iterator to iterate over the items within the sizer. (#738) * Fix Python3 division in ThumbnailCtrl. (#746) * Fix leaking image list in CheckListCtrlMixin (#752) * All items marked as deprecated in the wxWidgets interface (documentation) files will now throw a DeprecationWarning when used from wxPython. Many of these items are disappearing in 4.1 so it's important to ensure they are deprecated at runtime too instead of just in the docs. (#749) * Ensure that the attribute list given to the GLCanvas constructor is zero-terminated like it was in Classic. (#770) * Updated to the wxWidgets 3.0.4 release version. * Added the wxWidgets version number to the tail end of the string returned by wx.version(). * Bind EVT_WINDOW_DESTROY event only to the tree windows in CustomTreeCtrl, since otherwise it would be caught when child windows are destroyed too, which causes problems in this case. (#778) * Fixed a problem where wx.TreeCtrl.OnCompareItems was not being called in derived classes on Windows. This was due to an optimization that wasn't compatible with how the classes are wrapped. (#774) * Added wrappers for wx.ClassInfo and exposed wx.Object.GetClassInfo. This class is part of wxWidgets' internal type information system and although it is not very useful for Python applications it is useful for debugging some internal wxPython issues. * Removed the wx.lib.pubsub package, and replaced it with code that imports the standalone PyPubSub in order remain compatible with older code that still uses wx.lib.pubsub. (#782, #792) * Fixed bug in wx.lib.intctrl (#790) * Fixed subclassing of wx.TextCompleter and wx.TextCompleterSimple (#827) * Fixes for Python3 compatibility in PyCrust. (#823) * Fix wxGet to be able to use pip v10. (#817) * Change winid parameter in wx.ScrolledWindow to id, for consistency. (#816) * Ensure that the page exists in book controls GetPage and RemovePage methods. At least one of the wx ports do not do this. (#830) * Added missing wx.NumberEntryDialog * Change wx.TextCompleterSimple.GetCompletions to send the list of strings as a return value, rather than a parameter that gets filled. (#836) * Enabled the wx.GraphicsContext.Create(metaFileDC) wrapper (#811) * Metafile support is also available on OSX, so wx.msw.Metafile and wx.msw.MetafileDC have been moved to the core wx module. So they can now be accessed as wx.Metafile and wx.MetafileDC. * Updated the waf tool used by the build to version 2.0.7. This fixes problems with building for Python 3.7. * Fixed alignment in buttons on MSW which have had foreground or background colors set. (#815) * Fix for unexpected assertion inside wx.aui.AuiMDIChildFrame.Close. * Fix a bug in setting AuiDockingGuide size. (#727) * Remove unnecessary AUI notebook updating, and use wx.BufferedDC in Repaint() to mitigate flicker. (wx.lib.agw.aui). (#851, #686) * Fixed crashing bug when using client data with items in wx.dataview.DataViewTreeCtrl. (#856) * Detach wx.Control in AuiToolbar from current sizer before attach to a new one. (#843) * Fixed a problem in wx.lib.mixins.listctrl.TextEditMixin where the height of the editor widget could be set to zero. (See discussion in #849) * Fix a bug in calculating whether a tool fits into the AuiToolBar. (#863) * Override SetForegroundColour and SetBackgroundColour in MaskedEditMixin (#808) * Add an explicit wx.GraphicsContext.Create overload for wx.AutoBufferedPaintDC. (#783) * Return original AGW window style in AuiToolBar.GetAGWWindowStyleFlag. (#870) * Fix a bug in group management on wx.lib.masked.numctrl; the previous code used truediv ('/') to calculate _groupSpace, but in python 3.x this leads to a float result, instead of an integer as was expected. Using floordiv ('//') instead to solve the problem. (#865) * Hide the window when the tool does not fit into AuiToolBar. (#872) * Fixed the virtual dispatch code for the PGEditor.GetValueFromControl method to properly pass the parameters to the Python implementation, and also fixed how the return value is handled. (#742) * Fixed all implementations of the PGProperty.StringToValue and IntToValue methods to treat the value parameter as a return value. (#742) * Add missing wx.adv.EVT_CALENDAR_WEEK_CLICKED (#875) * Fixed the stock labels to conform to Windows design guidelines. (#787) * Always reset floating size and style when floating a toolbar in agw.aui. (#880) - Move "wx/*.so" libraries to main package, remove devel package (boo#1095747) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-92=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-92=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): rsyslog-8.2106.0-4.16.1 rsyslog-debuginfo-8.2106.0-4.16.1 rsyslog-debugsource-8.2106.0-4.16.1 rsyslog-diag-tools-8.2106.0-4.16.1 rsyslog-diag-tools-debuginfo-8.2106.0-4.16.1 rsyslog-doc-8.2106.0-4.16.1 rsyslog-module-dbi-8.2106.0-4.16.1 rsyslog-module-dbi-debuginfo-8.2106.0-4.16.1 rsyslog-module-elasticsearch-8.2106.0-4.16.1 rsyslog-module-elasticsearch-debuginfo-8.2106.0-4.16.1 rsyslog-module-gcrypt-8.2106.0-4.16.1 rsyslog-module-gcrypt-debuginfo-8.2106.0-4.16.1 rsyslog-module-gssapi-8.2106.0-4.16.1 rsyslog-module-gssapi-debuginfo-8.2106.0-4.16.1 rsyslog-module-gtls-8.2106.0-4.16.1 rsyslog-module-gtls-debuginfo-8.2106.0-4.16.1 rsyslog-module-mmnormalize-8.2106.0-4.16.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-4.16.1 rsyslog-module-mysql-8.2106.0-4.16.1 rsyslog-module-mysql-debuginfo-8.2106.0-4.16.1 rsyslog-module-omamqp1-8.2106.0-4.16.1 rsyslog-module-omamqp1-debuginfo-8.2106.0-4.16.1 rsyslog-module-omhttpfs-8.2106.0-4.16.1 rsyslog-module-omhttpfs-debuginfo-8.2106.0-4.16.1 rsyslog-module-omtcl-8.2106.0-4.16.1 rsyslog-module-omtcl-debuginfo-8.2106.0-4.16.1 rsyslog-module-ossl-8.2106.0-4.16.1 rsyslog-module-ossl-debuginfo-8.2106.0-4.16.1 rsyslog-module-pgsql-8.2106.0-4.16.1 rsyslog-module-pgsql-debuginfo-8.2106.0-4.16.1 rsyslog-module-relp-8.2106.0-4.16.1 rsyslog-module-relp-debuginfo-8.2106.0-4.16.1 rsyslog-module-snmp-8.2106.0-4.16.1 rsyslog-module-snmp-debuginfo-8.2106.0-4.16.1 rsyslog-module-udpspoof-8.2106.0-4.16.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-4.16.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): python2-wxPython-4.0.7.post2-bp153.2.1 python2-wxPython-lang-4.0.7.post2-bp153.2.1 python3-wxPython-4.0.7.post2-bp153.2.1 python3-wxPython-lang-4.0.7.post2-bp153.2.1 References: https://bugzilla.suse.com/1095747 https://bugzilla.suse.com/1194593

1 0

openSUSE-SU-2022:0091-1: important: Security update for apache2
by opensuse-security＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0091-1 Rating: important References: #1193942 #1193943 #1197552 SLE-22733 SLE-22849 Cross-References: CVE-2021-44224 CVE-2021-44790 CVE-2022-1096 CVSS scores: CVE-2021-44224 (NVD) : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2021-44224 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-44790 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-44790 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities, contains two features is now available. Description: This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849) It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log. Also fixed: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943) - CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-91=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-91=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-2.4.51-3.37.1 apache2-debuginfo-2.4.51-3.37.1 apache2-debugsource-2.4.51-3.37.1 apache2-devel-2.4.51-3.37.1 apache2-event-2.4.51-3.37.1 apache2-event-debuginfo-2.4.51-3.37.1 apache2-example-pages-2.4.51-3.37.1 apache2-prefork-2.4.51-3.37.1 apache2-prefork-debuginfo-2.4.51-3.37.1 apache2-utils-2.4.51-3.37.1 apache2-utils-debuginfo-2.4.51-3.37.1 apache2-worker-2.4.51-3.37.1 apache2-worker-debuginfo-2.4.51-3.37.1 - openSUSE Leap 15.3 (noarch): apache2-doc-2.4.51-3.37.1 - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-99.0.4844.84-bp153.2.75.1 chromium-99.0.4844.84-bp153.2.75.1 References: https://www.suse.com/security/cve/CVE-2021-44224.html https://www.suse.com/security/cve/CVE-2021-44790.html https://www.suse.com/security/cve/CVE-2022-1096.html https://bugzilla.suse.com/1193942 https://bugzilla.suse.com/1193943 https://bugzilla.suse.com/1197552

1 0

openSUSE-RU-2022:0957-1: moderate: Recommended update for trilinos
by maintenance＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Recommended Update: Recommended update for trilinos ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0957-1 Rating: moderate References: #1194648 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for trilinos fixes the following issues: - Update to version 13.2.0 For information on changes consult the release notes of its sub-packages. - Add dependency for library package to devel package. - Fix by calculating the relative path elements between the 'cmake' directory and the installation directory. This works only if 'Trilinos_INSTALL_LIB_DIR' is relative, while other parts of the code allow it to be absolute. (bsc#1194648) - Fix doc building. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-957=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenblas-gnu-hpc-0.3.13-150300.5.2.2 libopenblas-gnu-hpc-devel-0.3.13-150300.5.2.2 libopenblas-pthreads-gnu-hpc-0.3.13-150300.5.2.2 libopenblas-pthreads-gnu-hpc-devel-0.3.13-150300.5.2.2 libopenblas-pthreads_0_3_13-gnu-hpc-0.3.13-150300.5.2.2 libopenblas-pthreads_0_3_13-gnu-hpc-debuginfo-0.3.13-150300.5.2.2 libopenblas-pthreads_0_3_13-gnu-hpc-devel-0.3.13-150300.5.2.2 libopenblas_0_3_13-gnu-hpc-0.3.13-150300.5.2.2 libopenblas_0_3_13-gnu-hpc-debuginfo-0.3.13-150300.5.2.2 libopenblas_0_3_13-gnu-hpc-devel-0.3.13-150300.5.2.2 libopenblas_openmp-devel-0.3.13-150300.5.2.2 libopenblas_openmp0-0.3.13-150300.5.2.2 libopenblas_openmp0-debuginfo-0.3.13-150300.5.2.2 libopenblas_pthreads-devel-0.3.13-150300.5.2.3 libopenblas_pthreads0-0.3.13-150300.5.2.3 libopenblas_pthreads0-debuginfo-0.3.13-150300.5.2.3 libopenblas_serial-devel-0.3.13-150300.5.2.2 libopenblas_serial0-0.3.13-150300.5.2.2 libopenblas_serial0-debuginfo-0.3.13-150300.5.2.2 lua-lmod-8.4.28-150300.3.2.3 lua-lmod-debuginfo-8.4.28-150300.3.2.3 lua51-luafilesystem-1.7.0-3.2.3 lua51-luafilesystem-debuginfo-1.7.0-3.2.3 lua51-luafilesystem-debugsource-1.7.0-3.2.3 lua51-luaposix-34.1.1-3.2.3 lua51-luaposix-debuginfo-34.1.1-3.2.3 lua51-luaterm-0.07-5.2.3 lua51-luaterm-debuginfo-0.07-5.2.3 lua51-luaterm-debugsource-0.07-5.2.3 lua53-luafilesystem-1.7.0-3.2.3 lua53-luafilesystem-debuginfo-1.7.0-3.2.3 lua53-luafilesystem-debugsource-1.7.0-3.2.3 lua53-luaposix-34.1.1-3.2.3 lua53-luaposix-debuginfo-34.1.1-3.2.3 lua53-luaterm-0.07-5.2.3 lua53-luaterm-debuginfo-0.07-5.2.3 lua53-luaterm-debugsource-0.07-5.2.3 mpich-3.3.2-150300.9.2.2 mpich-debuginfo-3.3.2-150300.9.2.2 mpich-debugsource-3.3.2-150300.9.2.2 mpich-devel-3.3.2-150300.9.2.2 mpich-gnu-hpc-3.3.2-150300.9.2.2 mpich-gnu-hpc-devel-3.3.2-150300.9.2.2 mpich-gnu-hpc-devel-static-3.3.2-150300.9.2.2 mpich-ofi-3.3.2-150300.9.2.2 mpich-ofi-debuginfo-3.3.2-150300.9.2.2 mpich-ofi-debugsource-3.3.2-150300.9.2.2 mpich-ofi-devel-3.3.2-150300.9.2.2 mpich-ofi-gnu-hpc-3.3.2-150300.9.2.2 mpich-ofi-gnu-hpc-devel-3.3.2-150300.9.2.2 mpich-ofi-gnu-hpc-devel-static-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-debuginfo-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-debugsource-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-devel-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-devel-static-3.3.2-150300.9.2.2 mpich-ofi_3_3_2-gnu-hpc-macros-devel-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-debuginfo-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-debugsource-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-devel-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-devel-static-3.3.2-150300.9.2.2 mpich_3_3_2-gnu-hpc-macros-devel-3.3.2-150300.9.2.2 openblas-devel-0.3.13-150300.5.2.2 openblas-pthreads_0_3_13-gnu-hpc-debugsource-0.3.13-150300.5.2.2 openblas-pthreads_0_3_13-gnu-hpc-devel-static-0.3.13-150300.5.2.2 openblas_0_3_13-gnu-hpc-debugsource-0.3.13-150300.5.2.2 openblas_0_3_13-gnu-hpc-devel-static-0.3.13-150300.5.2.2 openblas_openmp-debugsource-0.3.13-150300.5.2.2 openblas_openmp-devel-static-0.3.13-150300.5.2.2 openblas_pthreads-debugsource-0.3.13-150300.5.2.3 openblas_pthreads-devel-static-0.3.13-150300.5.2.3 openblas_serial-debugsource-0.3.13-150300.5.2.2 openblas_serial-devel-static-0.3.13-150300.5.2.2 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libtrilinos-gnu-mpich-hpc-13.2.0-150300.3.3.3 libtrilinos-gnu-mvapich2-hpc-13.2.0-150300.3.3.3 libtrilinos-gnu-openmpi2-hpc-13.2.0-150300.3.3.3 libtrilinos-gnu-openmpi3-hpc-13.2.0-150300.3.3.3 libtrilinos-gnu-openmpi4-hpc-13.2.0-150300.3.3.2 - openSUSE Leap 15.3 (noarch): gnu-compilers-hpc-1.4-3.16.2 gnu-compilers-hpc-devel-1.4-3.16.2 gnu-compilers-hpc-macros-devel-1.4-3.16.2 gnu10-compilers-hpc-1.4-3.16.2 gnu10-compilers-hpc-devel-1.4-3.16.2 gnu10-compilers-hpc-macros-devel-1.4-3.16.2 gnu11-compilers-hpc-1.4-3.16.2 gnu11-compilers-hpc-devel-1.4-3.16.2 gnu11-compilers-hpc-macros-devel-1.4-3.16.2 gnu8-compilers-hpc-1.4-3.16.2 gnu8-compilers-hpc-devel-1.4-3.16.2 gnu8-compilers-hpc-macros-devel-1.4-3.16.2 gnu9-compilers-hpc-1.4-3.16.2 gnu9-compilers-hpc-devel-1.4-3.16.2 gnu9-compilers-hpc-macros-devel-1.4-3.16.2 lua-lmod-doc-8.4.28-150300.3.2.3 luaposix-doc-34.1.1-3.2.3 mpich-gnu-hpc-macros-devel-3.3.2-150300.9.2.2 mpich-ofi-gnu-hpc-macros-devel-3.3.2-150300.9.2.2 openblas-devel-headers-0.3.13-150300.5.2.2 trilinos-gnu-mpich-hpc-devel-13.2.0-150300.3.3.3 trilinos-gnu-mvapich2-hpc-devel-13.2.0-150300.3.3.3 trilinos-gnu-openmpi2-hpc-devel-13.2.0-150300.3.3.3 trilinos-gnu-openmpi3-hpc-devel-13.2.0-150300.3.3.3 trilinos-gnu-openmpi4-hpc-devel-13.2.0-150300.3.3.2 trilinos-hpc-doc-13.2.0-150300.3.3.3 References: https://bugzilla.suse.com/1194648

1 0

openSUSE-SU-2022:0953-1: moderate: Security update for perl-DBD-SQLite
by opensuse-security＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Security Update: Security update for perl-DBD-SQLite ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0953-1 Rating: moderate References: #1195771 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for perl-DBD-SQLite fixes the following issues: - updated to 1.66 - Use external sqlite3 library rather than internal code. (bsc#1195771) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-953=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-953=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): perl-DBD-SQLite-1.66-150300.3.3.1 perl-DBD-SQLite-debuginfo-1.66-150300.3.3.1 perl-DBD-SQLite-debugsource-1.66-150300.3.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): perl-DBD-SQLite-1.66-150300.3.3.1 perl-DBD-SQLite-debuginfo-1.66-150300.3.3.1 perl-DBD-SQLite-debugsource-1.66-150300.3.3.1 References: https://bugzilla.suse.com/1195771

1 0

openSUSE-SU-2022:0954-1: moderate: Security update for wavpack
by opensuse-security＠opensuse.org 28 Mar '22

28 Mar '22

openSUSE Security Update: Security update for wavpack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0954-1 Rating: moderate References: #1197020 Cross-References: CVE-2021-44269 CVSS scores: CVE-2021-44269 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-44269 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wavpack fixes the following issues: - CVE-2021-44269: Fixed out of bounds read in processing .wav files (bsc#1197020). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-954=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-954=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libwavpack1-5.4.0-4.12.1 libwavpack1-debuginfo-5.4.0-4.12.1 wavpack-5.4.0-4.12.1 wavpack-debuginfo-5.4.0-4.12.1 wavpack-debugsource-5.4.0-4.12.1 wavpack-devel-5.4.0-4.12.1 - openSUSE Leap 15.4 (x86_64): libwavpack1-32bit-5.4.0-4.12.1 libwavpack1-32bit-debuginfo-5.4.0-4.12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libwavpack1-5.4.0-4.12.1 libwavpack1-debuginfo-5.4.0-4.12.1 wavpack-5.4.0-4.12.1 wavpack-debuginfo-5.4.0-4.12.1 wavpack-debugsource-5.4.0-4.12.1 wavpack-devel-5.4.0-4.12.1 - openSUSE Leap 15.3 (x86_64): libwavpack1-32bit-5.4.0-4.12.1 libwavpack1-32bit-debuginfo-5.4.0-4.12.1 References: https://www.suse.com/security/cve/CVE-2021-44269.html https://bugzilla.suse.com/1197020

1 0

openSUSE-RU-2022:0952-1: moderate: Recommended update for rpmlint
by maintenance＠opensuse.org 25 Mar '22

25 Mar '22

openSUSE Recommended Update: Recommended update for rpmlint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0952-1 Rating: moderate References: #1178848 #1194799 #1196149 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for rpmlint fixes the following issues: - Add tukitd dbus whitelist (bsc#1196149) - Add kpmcore whitelisting (bsc#1178848). - Add whitelisting for NetworkManager nm-priv helper for SLE-15-SP4 (bsc#1194799). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-952=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-952=1 Package List: - openSUSE Leap 15.4 (noarch): rpmlint-1.10-7.45.1 - openSUSE Leap 15.3 (noarch): rpmlint-1.10-7.45.1 References: https://bugzilla.suse.com/1178848 https://bugzilla.suse.com/1194799 https://bugzilla.suse.com/1196149

1 0

openSUSE-RU-2022:0948-1: moderate: Recommended update for sudo
by maintenance＠opensuse.org 25 Mar '22

25 Mar '22

openSUSE Recommended Update: Recommended update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0948-1 Rating: moderate References: #1193446 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sudo fixes the following issues: - Fix user set timeout not being honored (bsc#1193446) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-948=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): sudo-1.9.5p2-150300.3.6.1 sudo-debuginfo-1.9.5p2-150300.3.6.1 sudo-debugsource-1.9.5p2-150300.3.6.1 sudo-devel-1.9.5p2-150300.3.6.1 sudo-plugin-python-1.9.5p2-150300.3.6.1 sudo-plugin-python-debuginfo-1.9.5p2-150300.3.6.1 sudo-test-1.9.5p2-150300.3.6.1 References: https://bugzilla.suse.com/1193446

1 0

openSUSE-FU-2022:0950-1: moderate: Feature update for lifecycle-data-sle-module-development-tools
by maintenance＠opensuse.org 25 Mar '22

25 Mar '22

openSUSE Feature Update: Feature update for lifecycle-data-sle-module-development-tools ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0950-1 Rating: moderate References: ECO-2373 SLE-16821 SLE-16822 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 feature fixes and contains three features can now be installed. Description: This feature update for lifecycle-data-sle-module-development-tools fixes the following issues: - Added expiration data for GCC 10 yearly update for the Toolchain/Development modules (jsc#ECO-2373, jsc#SLE-16821, jsc#SLE-16822) Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-950=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-950=1 Package List: - openSUSE Leap 15.4 (noarch): lifecycle-data-sle-module-development-tools-1-3.13.1 - openSUSE Leap 15.3 (noarch): lifecycle-data-sle-module-development-tools-1-3.13.1 References:

1 0

openSUSE-RU-2022:0947-1: moderate: Recommended update for dapl
by maintenance＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Recommended Update: Recommended update for dapl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0947-1 Rating: moderate References: #1047218 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dapl fixes the following issues: - Allow to override build date in order to allow for reproducible builds. (bsc#1047218) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-947=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-947=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): dapl-2.1.10-3.6.1 dapl-debug-2.1.10-3.6.1 dapl-debug-debuginfo-2.1.10-3.6.1 dapl-debug-debugsource-2.1.10-3.6.1 dapl-debug-devel-2.1.10-3.6.1 dapl-debug-libs-2.1.10-3.6.1 dapl-debug-libs-debuginfo-2.1.10-3.6.1 dapl-debug-utils-2.1.10-3.6.1 dapl-debug-utils-debuginfo-2.1.10-3.6.1 dapl-debuginfo-2.1.10-3.6.1 dapl-debugsource-2.1.10-3.6.1 dapl-devel-2.1.10-3.6.1 dapl-utils-2.1.10-3.6.1 dapl-utils-debuginfo-2.1.10-3.6.1 libdat2-2-2.1.10-3.6.1 libdat2-2-debuginfo-2.1.10-3.6.1 - openSUSE Leap 15.4 (x86_64): dapl-devel-32bit-2.1.10-3.6.1 libdat2-2-32bit-2.1.10-3.6.1 libdat2-2-32bit-debuginfo-2.1.10-3.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dapl-2.1.10-3.6.1 dapl-debug-2.1.10-3.6.1 dapl-debug-debuginfo-2.1.10-3.6.1 dapl-debug-debugsource-2.1.10-3.6.1 dapl-debug-devel-2.1.10-3.6.1 dapl-debug-libs-2.1.10-3.6.1 dapl-debug-libs-debuginfo-2.1.10-3.6.1 dapl-debug-utils-2.1.10-3.6.1 dapl-debug-utils-debuginfo-2.1.10-3.6.1 dapl-debuginfo-2.1.10-3.6.1 dapl-debugsource-2.1.10-3.6.1 dapl-devel-2.1.10-3.6.1 dapl-utils-2.1.10-3.6.1 dapl-utils-debuginfo-2.1.10-3.6.1 libdat2-2-2.1.10-3.6.1 libdat2-2-debuginfo-2.1.10-3.6.1 - openSUSE Leap 15.3 (x86_64): dapl-devel-32bit-2.1.10-3.6.1 libdat2-2-32bit-2.1.10-3.6.1 libdat2-2-32bit-debuginfo-2.1.10-3.6.1 References: https://bugzilla.suse.com/1047218

1 0

openSUSE-SU-2022:0946-1: important: Security update for bind
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0946-1 Rating: important References: #1197135 Cross-References: CVE-2021-25220 CVSS scores: CVE-2021-25220 (SUSE): 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose caching rules (bsc#1197135). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-946=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-946=1 Package List: - openSUSE Leap 15.4 (x86_64): bind-devel-32bit-9.16.6-150000.12.60.1 libbind9-1600-32bit-9.16.6-150000.12.60.1 libbind9-1600-32bit-debuginfo-9.16.6-150000.12.60.1 libdns1605-32bit-9.16.6-150000.12.60.1 libdns1605-32bit-debuginfo-9.16.6-150000.12.60.1 libirs1601-32bit-9.16.6-150000.12.60.1 libirs1601-32bit-debuginfo-9.16.6-150000.12.60.1 libisc1606-32bit-9.16.6-150000.12.60.1 libisc1606-32bit-debuginfo-9.16.6-150000.12.60.1 libisccc1600-32bit-9.16.6-150000.12.60.1 libisccc1600-32bit-debuginfo-9.16.6-150000.12.60.1 libisccfg1600-32bit-9.16.6-150000.12.60.1 libisccfg1600-32bit-debuginfo-9.16.6-150000.12.60.1 libns1604-32bit-9.16.6-150000.12.60.1 libns1604-32bit-debuginfo-9.16.6-150000.12.60.1 - openSUSE Leap 15.3 (x86_64): bind-devel-32bit-9.16.6-150000.12.60.1 libbind9-1600-32bit-9.16.6-150000.12.60.1 libbind9-1600-32bit-debuginfo-9.16.6-150000.12.60.1 libdns1605-32bit-9.16.6-150000.12.60.1 libdns1605-32bit-debuginfo-9.16.6-150000.12.60.1 libirs1601-32bit-9.16.6-150000.12.60.1 libirs1601-32bit-debuginfo-9.16.6-150000.12.60.1 libisc1606-32bit-9.16.6-150000.12.60.1 libisc1606-32bit-debuginfo-9.16.6-150000.12.60.1 libisccc1600-32bit-9.16.6-150000.12.60.1 libisccc1600-32bit-debuginfo-9.16.6-150000.12.60.1 libisccfg1600-32bit-9.16.6-150000.12.60.1 libisccfg1600-32bit-debuginfo-9.16.6-150000.12.60.1 libns1604-32bit-9.16.6-150000.12.60.1 libns1604-32bit-debuginfo-9.16.6-150000.12.60.1 References: https://www.suse.com/security/cve/CVE-2021-25220.html https://bugzilla.suse.com/1197135

1 0

openSUSE-SU-2022:0945-1: important: Security update for bind
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0945-1 Rating: important References: #1197135 Cross-References: CVE-2021-25220 CVSS scores: CVE-2021-25220 (SUSE): 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose caching rules (bsc#1197135). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-945=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-945=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): bind-chrootenv-9.16.6-150300.22.16.1 bind-devel-9.16.6-150300.22.16.1 libbind9-1600-9.16.6-150300.22.16.1 libbind9-1600-debuginfo-9.16.6-150300.22.16.1 libdns1605-9.16.6-150300.22.16.1 libdns1605-debuginfo-9.16.6-150300.22.16.1 libirs-devel-9.16.6-150300.22.16.1 libirs1601-9.16.6-150300.22.16.1 libirs1601-debuginfo-9.16.6-150300.22.16.1 libisc1606-9.16.6-150300.22.16.1 libisc1606-debuginfo-9.16.6-150300.22.16.1 libisccc1600-9.16.6-150300.22.16.1 libisccc1600-debuginfo-9.16.6-150300.22.16.1 libisccfg1600-9.16.6-150300.22.16.1 libisccfg1600-debuginfo-9.16.6-150300.22.16.1 libns1604-9.16.6-150300.22.16.1 libns1604-debuginfo-9.16.6-150300.22.16.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): bind-9.16.6-150300.22.16.1 bind-chrootenv-9.16.6-150300.22.16.1 bind-debuginfo-9.16.6-150300.22.16.1 bind-debugsource-9.16.6-150300.22.16.1 bind-devel-9.16.6-150300.22.16.1 bind-utils-9.16.6-150300.22.16.1 bind-utils-debuginfo-9.16.6-150300.22.16.1 libbind9-1600-9.16.6-150300.22.16.1 libbind9-1600-debuginfo-9.16.6-150300.22.16.1 libdns1605-9.16.6-150300.22.16.1 libdns1605-debuginfo-9.16.6-150300.22.16.1 libirs-devel-9.16.6-150300.22.16.1 libirs1601-9.16.6-150300.22.16.1 libirs1601-debuginfo-9.16.6-150300.22.16.1 libisc1606-9.16.6-150300.22.16.1 libisc1606-debuginfo-9.16.6-150300.22.16.1 libisccc1600-9.16.6-150300.22.16.1 libisccc1600-debuginfo-9.16.6-150300.22.16.1 libisccfg1600-9.16.6-150300.22.16.1 libisccfg1600-debuginfo-9.16.6-150300.22.16.1 libns1604-9.16.6-150300.22.16.1 libns1604-debuginfo-9.16.6-150300.22.16.1 - openSUSE Leap 15.3 (noarch): bind-doc-9.16.6-150300.22.16.1 python3-bind-9.16.6-150300.22.16.1 References: https://www.suse.com/security/cve/CVE-2021-25220.html https://bugzilla.suse.com/1197135

1 0

openSUSE-SU-2022:0944-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0944-1 Rating: moderate References: #1022528 #1188572 #1189528 Cross-References: CVE-2017-5601 CVE-2021-36976 CVSS scores: CVE-2017-5601 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2017-5601 (SUSE): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L CVE-2021-36976 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-36976 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for libarchive fixes the following issues: - CVE-2021-36976: Fixed an invalid memory access that could cause data corruption (bsc#1188572). Non-security updates: - Updated references for CVE-2017-5601, which was already fixed in a previous version (bsc#1022528 bsc#1189528). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-944=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): bsdtar-3.4.2-150200.4.3.1 bsdtar-debuginfo-3.4.2-150200.4.3.1 libarchive-debugsource-3.4.2-150200.4.3.1 libarchive-devel-3.4.2-150200.4.3.1 libarchive13-3.4.2-150200.4.3.1 libarchive13-debuginfo-3.4.2-150200.4.3.1 - openSUSE Leap 15.3 (x86_64): libarchive13-32bit-3.4.2-150200.4.3.1 libarchive13-32bit-debuginfo-3.4.2-150200.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-5601.html https://www.suse.com/security/cve/CVE-2021-36976.html https://bugzilla.suse.com/1022528 https://bugzilla.suse.com/1188572 https://bugzilla.suse.com/1189528

1 0

openSUSE-SU-2022:0943-1: moderate: Security update for slirp4netns
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for slirp4netns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0943-1 Rating: moderate References: #1179467 Cross-References: CVE-2020-29130 CVSS scores: CVE-2020-29130 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2020-29130 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slirp4netns fixes the following issues: - CVE-2020-29130: Fixed an invalid memory access while processing ARP packets (bsc#1179467). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-943=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-943=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): slirp4netns-0.4.7-3.15.1 slirp4netns-debuginfo-0.4.7-3.15.1 slirp4netns-debugsource-0.4.7-3.15.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): slirp4netns-0.4.7-3.15.1 slirp4netns-debuginfo-0.4.7-3.15.1 slirp4netns-debugsource-0.4.7-3.15.1 References: https://www.suse.com/security/cve/CVE-2020-29130.html https://bugzilla.suse.com/1179467

1 0

openSUSE-SU-2022:0942-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0942-1 Rating: moderate References: #1186819 Cross-References: CVE-2021-3572 CVSS scores: CVE-2021-3572 (SUSE): 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-942=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-942=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.21.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.21.1 python3-3.6.15-150300.10.21.1 python3-base-3.6.15-150300.10.21.1 python3-base-debuginfo-3.6.15-150300.10.21.1 python3-core-debugsource-3.6.15-150300.10.21.1 python3-curses-3.6.15-150300.10.21.1 python3-curses-debuginfo-3.6.15-150300.10.21.1 python3-dbm-3.6.15-150300.10.21.1 python3-dbm-debuginfo-3.6.15-150300.10.21.1 python3-debuginfo-3.6.15-150300.10.21.1 python3-debugsource-3.6.15-150300.10.21.1 python3-devel-3.6.15-150300.10.21.1 python3-devel-debuginfo-3.6.15-150300.10.21.1 python3-doc-3.6.15-150300.10.21.1 python3-doc-devhelp-3.6.15-150300.10.21.1 python3-idle-3.6.15-150300.10.21.1 python3-testsuite-3.6.15-150300.10.21.1 python3-testsuite-debuginfo-3.6.15-150300.10.21.1 python3-tk-3.6.15-150300.10.21.1 python3-tk-debuginfo-3.6.15-150300.10.21.1 python3-tools-3.6.15-150300.10.21.1 - openSUSE Leap 15.4 (x86_64): libpython3_6m1_0-32bit-3.6.15-150300.10.21.1 libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.21.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.15-150300.10.21.1 libpython3_6m1_0-debuginfo-3.6.15-150300.10.21.1 python3-3.6.15-150300.10.21.1 python3-base-3.6.15-150300.10.21.1 python3-base-debuginfo-3.6.15-150300.10.21.1 python3-core-debugsource-3.6.15-150300.10.21.1 python3-curses-3.6.15-150300.10.21.1 python3-curses-debuginfo-3.6.15-150300.10.21.1 python3-dbm-3.6.15-150300.10.21.1 python3-dbm-debuginfo-3.6.15-150300.10.21.1 python3-debuginfo-3.6.15-150300.10.21.1 python3-debugsource-3.6.15-150300.10.21.1 python3-devel-3.6.15-150300.10.21.1 python3-devel-debuginfo-3.6.15-150300.10.21.1 python3-doc-3.6.15-150300.10.21.1 python3-doc-devhelp-3.6.15-150300.10.21.1 python3-idle-3.6.15-150300.10.21.1 python3-testsuite-3.6.15-150300.10.21.1 python3-testsuite-debuginfo-3.6.15-150300.10.21.1 python3-tk-3.6.15-150300.10.21.1 python3-tk-debuginfo-3.6.15-150300.10.21.1 python3-tools-3.6.15-150300.10.21.1 - openSUSE Leap 15.3 (x86_64): libpython3_6m1_0-32bit-3.6.15-150300.10.21.1 libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.21.1 References: https://www.suse.com/security/cve/CVE-2021-3572.html https://bugzilla.suse.com/1186819

1 0

openSUSE-RU-2022:0090-1: moderate: Recommended update for chromium
by maintenance＠opensuse.org 24 Mar '22

24 Mar '22

openSUSE Recommended Update: Recommended update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0090-1 Rating: moderate References: #1197332 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chromium fixes the following issues: Update to version 99.0.4844.82: - Fixed a potential problem in Hangouts (boo#1197332) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-90=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-99.0.4844.82-bp153.2.72.1 chromium-99.0.4844.82-bp153.2.72.1 References: https://bugzilla.suse.com/1197332

1 0

openSUSE-SU-2022:0089-1: moderate: Security update for nextcloud
by opensuse-security＠opensuse.org 23 Mar '22

23 Mar '22

openSUSE Security Update: Security update for nextcloud ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0089-1 Rating: moderate References: #1196905 #1196908 #1196952 Cross-References: CVE-2021-41239 CVE-2021-41241 CVE-2021-41741 CVSS scores: CVE-2021-41239 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-41239 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-41241 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for nextcloud fixes the following issues: nextcloud was updated to 21.0.9: - CVE-2021-41239 (CWE-200): user enumeration setting not obeyed in User Status API (boo#1196905) - CVE-2021-41241 (CWE-863): groupfolders advanced permissions is not obeyed for subfolders (boo#1196908) - CVE-2021-41741 (CWE-400): High memory usage for generating preview of broken image (boo#1196952) - For more changes see https://nextcloud.com/changelog/#21-0-9 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-89=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nextcloud-21.0.9-37.1 nextcloud-apache-21.0.9-37.1 References: https://www.suse.com/security/cve/CVE-2021-41239.html https://www.suse.com/security/cve/CVE-2021-41241.html https://www.suse.com/security/cve/CVE-2021-41741.html https://bugzilla.suse.com/1196905 https://bugzilla.suse.com/1196908 https://bugzilla.suse.com/1196952

1 0

openSUSE-SU-2022:0940-1: important: Security update for xen
by opensuse-security＠opensuse.org 23 Mar '22

23 Mar '22

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0940-1 Rating: important References: #1027519 #1191668 #1194267 #1196915 Cross-References: CVE-2021-26401 CVE-2022-0001 CVE-2022-0002 CVSS scores: CVE-2021-26401 (NVD) : 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2021-26401 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0001 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0001 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0002 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-0002 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for xen fixes the following issues: Update Xen to version 4.14.4 (bsc#1027519) Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named "Branch Target Injection" and "Intra-Mode Branch History Injection" are now mitigated. Security issues fixed: - CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: BHB speculation issues (bsc#1196915). Non-security issues fixed: - Fixed issue around xl and virsh operation - virsh list not giving any output (bsc#1191668). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-940=1 Package List: - openSUSE Leap 15.3 (aarch64 x86_64): xen-4.14.4_02-150300.3.21.1 xen-debugsource-4.14.4_02-150300.3.21.1 xen-devel-4.14.4_02-150300.3.21.1 xen-doc-html-4.14.4_02-150300.3.21.1 xen-libs-4.14.4_02-150300.3.21.1 xen-libs-debuginfo-4.14.4_02-150300.3.21.1 xen-tools-4.14.4_02-150300.3.21.1 xen-tools-debuginfo-4.14.4_02-150300.3.21.1 xen-tools-domU-4.14.4_02-150300.3.21.1 xen-tools-domU-debuginfo-4.14.4_02-150300.3.21.1 - openSUSE Leap 15.3 (x86_64): xen-libs-32bit-4.14.4_02-150300.3.21.1 xen-libs-32bit-debuginfo-4.14.4_02-150300.3.21.1 - openSUSE Leap 15.3 (noarch): xen-tools-xendomains-wait-disk-4.14.4_02-150300.3.21.1 References: https://www.suse.com/security/cve/CVE-2021-26401.html https://www.suse.com/security/cve/CVE-2022-0001.html https://www.suse.com/security/cve/CVE-2022-0002.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1191668 https://bugzilla.suse.com/1194267 https://bugzilla.suse.com/1196915

1 0

openSUSE-RU-2022:0936-1: moderate: Recommended update for filesystem and systemd-rpm-macros
by maintenance＠opensuse.org 22 Mar '22

22 Mar '22

openSUSE Recommended Update: Recommended update for filesystem and systemd-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0936-1 Rating: moderate References: #1196275 #1196406 SLE-20639 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for filesystem and systemd-rpm-macros fixes the following issues: filesystem: - Add path /lib/modprobe.d (bsc#1196275, jsc#SLE-20639) systemd-rpm-macros: - Make %_modprobedir point to /lib/modprobe.d (bsc#1196275, bsc#1196406) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-936=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-936=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): filesystem-15.0-11.8.1 - openSUSE Leap 15.4 (noarch): systemd-rpm-macros-11-7.27.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): filesystem-15.0-11.8.1 - openSUSE Leap 15.3 (noarch): systemd-rpm-macros-11-7.27.1 References: https://bugzilla.suse.com/1196275 https://bugzilla.suse.com/1196406

1 0

openSUSE-SU-2022:0930-1: important: Security update for qemu
by opensuse-security＠opensuse.org 22 Mar '22

22 Mar '22

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0930-1 Rating: important References: #1178049 #1192525 #1193364 #1193545 #1194938 #1195161 #1196087 #1196737 Cross-References: CVE-2021-3930 CVE-2022-0358 CVSS scores: CVE-2021-3930 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2021-3930 (SUSE): 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L CVE-2022-0358 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has 6 fixes is now available. Description: This update for qemu fixes the following issues: - CVE-2022-0358: Fixed a potential privilege escalation via virtiofsd (bsc#1195161). - CVE-2021-3930: Fixed a potential denial of service in the emulated SCSI device (bsc#1192525). Non-security fixes: - Fixed a kernel data corruption via a long kernel boot cmdline (bsc#1196737). - Included vmxcap in the qemu-tools package (bsc#1193364). - Fixed package dependencies (bsc#1196087). - Fixed an issue were PowerPC firmwares would not be built for non-PowerPC builds (bsc#1193545). - Fixed multiple issues in I/O (bsc#1178049 bsc#1194938). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-930=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-5.2.0-150300.112.4 qemu-arm-5.2.0-150300.112.4 qemu-arm-debuginfo-5.2.0-150300.112.4 qemu-audio-alsa-5.2.0-150300.112.4 qemu-audio-alsa-debuginfo-5.2.0-150300.112.4 qemu-audio-pa-5.2.0-150300.112.4 qemu-audio-pa-debuginfo-5.2.0-150300.112.4 qemu-audio-spice-5.2.0-150300.112.4 qemu-audio-spice-debuginfo-5.2.0-150300.112.4 qemu-block-curl-5.2.0-150300.112.4 qemu-block-curl-debuginfo-5.2.0-150300.112.4 qemu-block-dmg-5.2.0-150300.112.4 qemu-block-dmg-debuginfo-5.2.0-150300.112.4 qemu-block-gluster-5.2.0-150300.112.4 qemu-block-gluster-debuginfo-5.2.0-150300.112.4 qemu-block-iscsi-5.2.0-150300.112.4 qemu-block-iscsi-debuginfo-5.2.0-150300.112.4 qemu-block-nfs-5.2.0-150300.112.4 qemu-block-nfs-debuginfo-5.2.0-150300.112.4 qemu-block-rbd-5.2.0-150300.112.4 qemu-block-rbd-debuginfo-5.2.0-150300.112.4 qemu-block-ssh-5.2.0-150300.112.4 qemu-block-ssh-debuginfo-5.2.0-150300.112.4 qemu-chardev-baum-5.2.0-150300.112.4 qemu-chardev-baum-debuginfo-5.2.0-150300.112.4 qemu-chardev-spice-5.2.0-150300.112.4 qemu-chardev-spice-debuginfo-5.2.0-150300.112.4 qemu-debuginfo-5.2.0-150300.112.4 qemu-debugsource-5.2.0-150300.112.4 qemu-extra-5.2.0-150300.112.4 qemu-extra-debuginfo-5.2.0-150300.112.4 qemu-guest-agent-5.2.0-150300.112.4 qemu-guest-agent-debuginfo-5.2.0-150300.112.4 qemu-hw-display-qxl-5.2.0-150300.112.4 qemu-hw-display-qxl-debuginfo-5.2.0-150300.112.4 qemu-hw-display-virtio-gpu-5.2.0-150300.112.4 qemu-hw-display-virtio-gpu-debuginfo-5.2.0-150300.112.4 qemu-hw-display-virtio-gpu-pci-5.2.0-150300.112.4 qemu-hw-display-virtio-gpu-pci-debuginfo-5.2.0-150300.112.4 qemu-hw-display-virtio-vga-5.2.0-150300.112.4 qemu-hw-display-virtio-vga-debuginfo-5.2.0-150300.112.4 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.112.4 qemu-hw-s390x-virtio-gpu-ccw-debuginfo-5.2.0-150300.112.4 qemu-hw-usb-redirect-5.2.0-150300.112.4 qemu-hw-usb-redirect-debuginfo-5.2.0-150300.112.4 qemu-hw-usb-smartcard-5.2.0-150300.112.4 qemu-hw-usb-smartcard-debuginfo-5.2.0-150300.112.4 qemu-ivshmem-tools-5.2.0-150300.112.4 qemu-ivshmem-tools-debuginfo-5.2.0-150300.112.4 qemu-ksm-5.2.0-150300.112.4 qemu-lang-5.2.0-150300.112.4 qemu-linux-user-5.2.0-150300.112.3 qemu-linux-user-debuginfo-5.2.0-150300.112.3 qemu-linux-user-debugsource-5.2.0-150300.112.3 qemu-ppc-5.2.0-150300.112.4 qemu-ppc-debuginfo-5.2.0-150300.112.4 qemu-s390x-5.2.0-150300.112.4 qemu-s390x-debuginfo-5.2.0-150300.112.4 qemu-testsuite-5.2.0-150300.112.7 qemu-tools-5.2.0-150300.112.4 qemu-tools-debuginfo-5.2.0-150300.112.4 qemu-ui-curses-5.2.0-150300.112.4 qemu-ui-curses-debuginfo-5.2.0-150300.112.4 qemu-ui-gtk-5.2.0-150300.112.4 qemu-ui-gtk-debuginfo-5.2.0-150300.112.4 qemu-ui-opengl-5.2.0-150300.112.4 qemu-ui-opengl-debuginfo-5.2.0-150300.112.4 qemu-ui-spice-app-5.2.0-150300.112.4 qemu-ui-spice-app-debuginfo-5.2.0-150300.112.4 qemu-ui-spice-core-5.2.0-150300.112.4 qemu-ui-spice-core-debuginfo-5.2.0-150300.112.4 qemu-vhost-user-gpu-5.2.0-150300.112.4 qemu-vhost-user-gpu-debuginfo-5.2.0-150300.112.4 qemu-x86-5.2.0-150300.112.4 qemu-x86-debuginfo-5.2.0-150300.112.4 - openSUSE Leap 15.3 (s390x x86_64): qemu-kvm-5.2.0-150300.112.4 - openSUSE Leap 15.3 (noarch): qemu-SLOF-5.2.0-150300.112.4 qemu-ipxe-1.0.0+-150300.112.4 qemu-microvm-5.2.0-150300.112.4 qemu-seabios-1.14.0_0_g155821a-150300.112.4 qemu-sgabios-8-150300.112.4 qemu-skiboot-5.2.0-150300.112.4 qemu-vgabios-1.14.0_0_g155821a-150300.112.4 References: https://www.suse.com/security/cve/CVE-2021-3930.html https://www.suse.com/security/cve/CVE-2022-0358.html https://bugzilla.suse.com/1178049 https://bugzilla.suse.com/1192525 https://bugzilla.suse.com/1193364 https://bugzilla.suse.com/1193545 https://bugzilla.suse.com/1194938 https://bugzilla.suse.com/1195161 https://bugzilla.suse.com/1196087 https://bugzilla.suse.com/1196737

1 0

openSUSE-FU-2022:0925-1: Test update for SUSE:SLE-15-SP4:Update (feature)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Feature Update: Test update for SUSE:SLE-15-SP4:Update (feature) ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0925-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one feature fix can now be installed. Description: This is a feature test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-925=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-925=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-feature-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-feature-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0919-1: Test update for SUSE:SLE-15-SP4:Update (relogin-suggested)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (relogin-suggested) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0919-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a relogin-suggested test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-919=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-919=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-relogin-suggested-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-relogin-suggested-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-OU-2022:0922-1: Test update for SUSE:SLE-15-SP4:Update (optional)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Optional Update: Test update for SUSE:SLE-15-SP4:Update (optional) ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0922-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This is a optional test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-922=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-922=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-optional-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-optional-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0920-1: Test update for SUSE:SLE-15-SP4:Update (affects-package-manager)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (affects-package-manager) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0920-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a affects-package-manager test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-920=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-920=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-affects-package-manager-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-affects-package-manager-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0927-1: Test update for SUSE:SLE-15-SP4:Update (interactive)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (interactive) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0927-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a interactive test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-927=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-927=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-interactive-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-interactive-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0926-1: Test update for SUSE:SLE-15-SP4:Update (reboot-needed)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (reboot-needed) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0926-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a reboot-needed test update for SUSE:SLE-15-SP4:Update Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-926=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-926=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-reboot-needed-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-reboot-needed-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-SU-2022:0923-1: important: Test update for SUSE:SLE-15-SP4:Update (security)
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Test update for SUSE:SLE-15-SP4:Update (security) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0923-1 Rating: important References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This is a security test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-923=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-923=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-security-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-security-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0924-1: Test update for SUSE:SLE-15-SP4:Update (trivial)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (trivial) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0924-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a trivial test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-924=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-924=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-trivial-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-trivial-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0921-1: Test update for SUSE:SLE-15-SP4:Update (retracted)
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Test update for SUSE:SLE-15-SP4:Update (retracted) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0921-1 Rating: low References: #1194507 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a retracted test update for SUSE:SLE-15-SP4:Update Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-921=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-921=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-test-retracted-5.1-150200.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-test-retracted-5.1-150200.35.1 References: https://bugzilla.suse.com/1194507

1 0

openSUSE-RU-2022:0914-1: Recommended update for qemu
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Recommended update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0914-1 Rating: low References: Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for qemu fixes the following issues: Increased the build version number to avoid downgrade issues. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-914=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-914=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): qemu-s390-4.2.1-150200.66.3 qemu-s390-debuginfo-4.2.1-150200.66.3 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): qemu-s390-4.2.1-150200.66.3 qemu-s390-debuginfo-4.2.1-150200.66.3 References:

1 0

openSUSE-SU-2022:0088-1: important: Security update for htmldoc
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Security update for htmldoc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0088-1 Rating: important References: #1192357 #1194303 #1194304 #1194487 #1195758 Cross-References: CVE-2021-40985 CVE-2021-43579 CVE-2021-45944 CVE-2021-45949 CVE-2022-0534 CVSS scores: CVE-2021-40985 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-40985 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2021-43579 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-43579 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-45944 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45944 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-45949 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-45949 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0534 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-0534 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: htmldoc was updated to fix issues: - CVE-2021-40985: Fixed buffer overflow may lead to DoS via a crafted BMP image (bsc#1192357) - CVE-2021-43579: Fixed stack-based buffer overflow in image_load_bmp() results in remote code execution if the victim converts an HTML document linking to a crafted BMP file (bsc#1194487) - CVE-2022-0534: Fixed stack out-of-bounds read in gif_get_code() when opening a malicious GIF file results in a segmentation fault (bsc#1195758) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-88=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-88=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): ghostscript-9.52-161.1 ghostscript-debuginfo-9.52-161.1 ghostscript-debugsource-9.52-161.1 ghostscript-devel-9.52-161.1 ghostscript-x11-9.52-161.1 ghostscript-x11-debuginfo-9.52-161.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): htmldoc-1.8.28-9.1 References: https://www.suse.com/security/cve/CVE-2021-40985.html https://www.suse.com/security/cve/CVE-2021-43579.html https://www.suse.com/security/cve/CVE-2021-45944.html https://www.suse.com/security/cve/CVE-2021-45949.html https://www.suse.com/security/cve/CVE-2022-0534.html https://bugzilla.suse.com/1192357 https://bugzilla.suse.com/1194303 https://bugzilla.suse.com/1194304 https://bugzilla.suse.com/1194487 https://bugzilla.suse.com/1195758

1 0

openSUSE-SU-2022:0915-1: moderate: Security update for lapack
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Security update for lapack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0915-1 Rating: moderate References: #1193562 Cross-References: CVE-2021-4048 CVSS scores: CVE-2021-4048 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2021-4048 (SUSE): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lapack fixes the following issues: - CVE-2021-4048: Fixed an out of bounds read when user input was not validated properly (bsc#1193562). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-915=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-915=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): blas-devel-3.5.0-4.6.1 blas-devel-static-3.5.0-4.6.1 lapack-debugsource-3.5.0-4.6.1 lapack-devel-3.5.0-4.6.1 lapack-devel-static-3.5.0-4.6.1 lapacke-devel-3.5.0-4.6.1 lapacke-devel-static-3.5.0-4.6.1 libblas3-3.5.0-4.6.1 libblas3-debuginfo-3.5.0-4.6.1 liblapack3-3.5.0-4.6.1 liblapack3-debuginfo-3.5.0-4.6.1 liblapacke3-3.5.0-4.6.1 liblapacke3-debuginfo-3.5.0-4.6.1 - openSUSE Leap 15.4 (x86_64): blas-devel-32bit-3.5.0-4.6.1 lapack-devel-32bit-3.5.0-4.6.1 lapacke-devel-32bit-3.5.0-4.6.1 libblas3-32bit-3.5.0-4.6.1 libblas3-32bit-debuginfo-3.5.0-4.6.1 liblapack3-32bit-3.5.0-4.6.1 liblapack3-32bit-debuginfo-3.5.0-4.6.1 liblapacke3-32bit-3.5.0-4.6.1 liblapacke3-32bit-debuginfo-3.5.0-4.6.1 - openSUSE Leap 15.4 (noarch): blas-man-3.5.0-4.6.1 lapack-man-3.5.0-4.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): blas-devel-3.5.0-4.6.1 blas-devel-static-3.5.0-4.6.1 lapack-debugsource-3.5.0-4.6.1 lapack-devel-3.5.0-4.6.1 lapack-devel-static-3.5.0-4.6.1 lapacke-devel-3.5.0-4.6.1 lapacke-devel-static-3.5.0-4.6.1 libblas3-3.5.0-4.6.1 libblas3-debuginfo-3.5.0-4.6.1 liblapack3-3.5.0-4.6.1 liblapack3-debuginfo-3.5.0-4.6.1 liblapacke3-3.5.0-4.6.1 liblapacke3-debuginfo-3.5.0-4.6.1 - openSUSE Leap 15.3 (noarch): blas-man-3.5.0-4.6.1 lapack-man-3.5.0-4.6.1 - openSUSE Leap 15.3 (x86_64): blas-devel-32bit-3.5.0-4.6.1 lapack-devel-32bit-3.5.0-4.6.1 lapacke-devel-32bit-3.5.0-4.6.1 libblas3-32bit-3.5.0-4.6.1 libblas3-32bit-debuginfo-3.5.0-4.6.1 liblapack3-32bit-3.5.0-4.6.1 liblapack3-32bit-debuginfo-3.5.0-4.6.1 liblapacke3-32bit-3.5.0-4.6.1 liblapacke3-32bit-debuginfo-3.5.0-4.6.1 References: https://www.suse.com/security/cve/CVE-2021-4048.html https://bugzilla.suse.com/1193562

1 0

openSUSE-FU-2022:0911-1: moderate: Feature update for libbluray
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Feature Update: Feature update for libbluray ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0911-1 Rating: moderate References: SLE-23838 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 feature fixes and contains one feature can now be installed. Description: This feature update for libbluray fixes the following issues: Update to version 1.3.0 (jsc#SLE-23838): - Remove unused dependencies from pkgconfig(libbluray) - Enable build against java-devel >= 10. - Add functions to list and read BD-ROM files. - Add initial support for .fmts files. - Add initial support for OpenJDK 11. - Add initial support for UHD disc BD-J menus. - Add support for AWT mouse events (BD-J). - Add support for compiling .jar file with Java 9+ compiler. - Add support for separate key pressed / typed / released user input events. - Enable playback without menus when index.bdmv is missing. - Fix JVM bootstrap issues with some Java 9 versions. - Fix build with Java 1.6. - Fix build with OpenJDK 12 / 13. - Fix creating organization and disc specific BD-J BUDA directories. - Fix memory leak - Fix loading classes with Windows Java 8. - Fix loading libmmbd in Windows 64-bit. - Fix long delay in "Evangelion, You are (not) alone" menu. - Fix mark triggering when multiple marks are passed during single read(). - Fix playback of discs without normal titles (only TopMenu / FirstPlay title). - Fix playback of some broken BD-J discs. - Fix polygon-based BD-J graphics primitives. - Fix reading resources indirectly from mounted .jar file. - Fix resetting user-selected streams when playing without menus. - Fix seek bar pop-up at chapter boundary with some discs. - Fix sign extended bytes when reading single bytes in BDJ. - Fix stack overflow when using Java9+ with debugger connection. - Improve BD-J compability. - Improve JVM and .jar file probing. - Improve Java 8+ compability. - Improve UHD metadata support. - Improve error resilience and stability. - Improve main title selection. - Improve missing/broken playlist handling. - Improve portability. - Move AWT classes to separate .jar file. - Rename list_titles to bd_list_titles and add it to installed programs. - Update libudfread submodule repository URL. - Use external libudfread when available. Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-911=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-911=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libbluray-debugsource-1.3.0-150300.10.3.1 libbluray-devel-1.3.0-150300.10.3.1 libbluray-tools-1.3.0-150300.10.3.1 libbluray-tools-debuginfo-1.3.0-150300.10.3.1 libbluray2-1.3.0-150300.10.3.1 libbluray2-debuginfo-1.3.0-150300.10.3.1 - openSUSE Leap 15.4 (noarch): libbluray-bdj-1.3.0-150300.10.3.1 - openSUSE Leap 15.4 (x86_64): libbluray2-32bit-1.3.0-150300.10.3.1 libbluray2-32bit-debuginfo-1.3.0-150300.10.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libbluray-debugsource-1.3.0-150300.10.3.1 libbluray-devel-1.3.0-150300.10.3.1 libbluray-tools-1.3.0-150300.10.3.1 libbluray-tools-debuginfo-1.3.0-150300.10.3.1 libbluray2-1.3.0-150300.10.3.1 libbluray2-debuginfo-1.3.0-150300.10.3.1 - openSUSE Leap 15.3 (noarch): libbluray-bdj-1.3.0-150300.10.3.1 - openSUSE Leap 15.3 (x86_64): libbluray2-32bit-1.3.0-150300.10.3.1 libbluray2-32bit-debuginfo-1.3.0-150300.10.3.1 References:

1 0

openSUSE-SU-2022:0087-1: important: Security update for icingaweb2
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Security update for icingaweb2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0087-1 Rating: important References: #1196911 #1196913 Cross-References: CVE-2022-24714 CVE-2022-24715 CVSS scores: CVE-2022-24714 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-24715 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-24715 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for icingaweb2 fixes the following issues: icingaweb2 was updated to 2.8.6 This is a security release. * Security Fixes - CVE-2022-24715: SSH resources allow arbitrary code execution for authenticated users (GHSA-v9mv-h52f-7g63 boo#1196911) - CVE-2022-24714: Unwanted disclosure of hosts and related data, linked to decommissioned services (GHSA-qcmg-vr56-x9wf boo#1196913) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2022-87=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): icingacli-2.8.6-15.1 icingaweb2-2.8.6-15.1 icingaweb2-common-2.8.6-15.1 icingaweb2-vendor-HTMLPurifier-2.8.6-15.1 icingaweb2-vendor-JShrink-2.8.6-15.1 icingaweb2-vendor-Parsedown-2.8.6-15.1 icingaweb2-vendor-dompdf-2.8.6-15.1 icingaweb2-vendor-lessphp-2.8.6-15.1 icingaweb2-vendor-zf1-2.8.6-15.1 php-Icinga-2.8.6-15.1 References: https://www.suse.com/security/cve/CVE-2022-24714.html https://www.suse.com/security/cve/CVE-2022-24715.html https://bugzilla.suse.com/1196911 https://bugzilla.suse.com/1196913

1 0

openSUSE-SU-2022:0906-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0906-1 Rating: important References: #1196900 Cross-References: CVE-2022-26381 CVE-2022-26383 CVE-2022-26384 CVE-2022-26386 CVE-2022-26387 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: Updated to version 91.7 (bsc#1196900): - CVE-2022-26381: Fixed an invalid memory access due to text reflow when SVG objects were present. - CVE-2022-26383: Fixed an issue where, when resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. - CVE-2022-26384: Fixed an iframe XSS sandbox bypass when allow-popups was used on the iframe. - CVE-2022-26386: Fixed an issue where downloadable temporary files were accessible to other local users. - CVE-2022-26387: Fixed a potential add-on signature verification bypass due to a race condition. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-906=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-906=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.7.0-150200.8.62.7 MozillaThunderbird-debuginfo-91.7.0-150200.8.62.7 MozillaThunderbird-debugsource-91.7.0-150200.8.62.7 MozillaThunderbird-translations-common-91.7.0-150200.8.62.7 MozillaThunderbird-translations-other-91.7.0-150200.8.62.7 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.7.0-150200.8.62.7 MozillaThunderbird-debuginfo-91.7.0-150200.8.62.7 MozillaThunderbird-debugsource-91.7.0-150200.8.62.7 MozillaThunderbird-translations-common-91.7.0-150200.8.62.7 MozillaThunderbird-translations-other-91.7.0-150200.8.62.7 References: https://www.suse.com/security/cve/CVE-2022-26381.html https://www.suse.com/security/cve/CVE-2022-26383.html https://www.suse.com/security/cve/CVE-2022-26384.html https://www.suse.com/security/cve/CVE-2022-26386.html https://www.suse.com/security/cve/CVE-2022-26387.html https://bugzilla.suse.com/1196900

1 0

openSUSE-RU-2022:0905-1: important: Recommended update for util-linux
by maintenance＠opensuse.org 21 Mar '22

21 Mar '22

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0905-1 Rating: important References: #1172427 #1194642 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for util-linux fixes the following issues: - Prevent root owning of `/var/lib/libuuid/clock.txt`. (bsc#1194642) - Make uuidd lock state file usable and time based UUIDs safer. (bsc#1194642) - Fix `su -s` bash completion. (bsc#1172427) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-905=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libblkid-devel-2.36.2-150300.4.17.1 libblkid-devel-static-2.36.2-150300.4.17.1 libblkid1-2.36.2-150300.4.17.1 libblkid1-debuginfo-2.36.2-150300.4.17.1 libfdisk-devel-2.36.2-150300.4.17.1 libfdisk-devel-static-2.36.2-150300.4.17.1 libfdisk1-2.36.2-150300.4.17.1 libfdisk1-debuginfo-2.36.2-150300.4.17.1 libmount-devel-2.36.2-150300.4.17.1 libmount-devel-static-2.36.2-150300.4.17.1 libmount1-2.36.2-150300.4.17.1 libmount1-debuginfo-2.36.2-150300.4.17.1 libsmartcols-devel-2.36.2-150300.4.17.1 libsmartcols-devel-static-2.36.2-150300.4.17.1 libsmartcols1-2.36.2-150300.4.17.1 libsmartcols1-debuginfo-2.36.2-150300.4.17.1 libuuid-devel-2.36.2-150300.4.17.1 libuuid-devel-static-2.36.2-150300.4.17.1 libuuid1-2.36.2-150300.4.17.1 libuuid1-debuginfo-2.36.2-150300.4.17.1 python3-libmount-2.36.2-150300.4.17.1 python3-libmount-debuginfo-2.36.2-150300.4.17.1 python3-libmount-debugsource-2.36.2-150300.4.17.1 util-linux-2.36.2-150300.4.17.1 util-linux-debuginfo-2.36.2-150300.4.17.1 util-linux-debugsource-2.36.2-150300.4.17.1 util-linux-systemd-2.36.2-150300.4.17.1 util-linux-systemd-debuginfo-2.36.2-150300.4.17.1 util-linux-systemd-debugsource-2.36.2-150300.4.17.1 uuidd-2.36.2-150300.4.17.1 uuidd-debuginfo-2.36.2-150300.4.17.1 - openSUSE Leap 15.3 (x86_64): libblkid-devel-32bit-2.36.2-150300.4.17.1 libblkid1-32bit-2.36.2-150300.4.17.1 libblkid1-32bit-debuginfo-2.36.2-150300.4.17.1 libfdisk-devel-32bit-2.36.2-150300.4.17.1 libfdisk1-32bit-2.36.2-150300.4.17.1 libfdisk1-32bit-debuginfo-2.36.2-150300.4.17.1 libmount-devel-32bit-2.36.2-150300.4.17.1 libmount1-32bit-2.36.2-150300.4.17.1 libmount1-32bit-debuginfo-2.36.2-150300.4.17.1 libsmartcols-devel-32bit-2.36.2-150300.4.17.1 libsmartcols1-32bit-2.36.2-150300.4.17.1 libsmartcols1-32bit-debuginfo-2.36.2-150300.4.17.1 libuuid-devel-32bit-2.36.2-150300.4.17.1 libuuid1-32bit-2.36.2-150300.4.17.1 libuuid1-32bit-debuginfo-2.36.2-150300.4.17.1 - openSUSE Leap 15.3 (noarch): util-linux-lang-2.36.2-150300.4.17.1 References: https://bugzilla.suse.com/1172427 https://bugzilla.suse.com/1194642

1 0

openSUSE-RU-2022:0086-1: moderate: Recommended update for yast2-theme
by maintenance＠opensuse.org 20 Mar '22

20 Mar '22

openSUSE Recommended Update: Recommended update for yast2-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0086-1 Rating: moderate References: Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This is a test update for yast2-theme. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2022-86=1 Package List: - openSUSE Leap 15.4 (noarch): yast2-theme-4.4.4-lp154.2.4.1 yast2-theme-breeze-4.4.4-lp154.2.4.1 yast2-theme-oxygen-4.4.4-lp154.2.4.1 References:

1 0

openSUSE-SU-2022:0085-1: important: Security update for chromium
by opensuse-security＠opensuse.org 20 Mar '22

20 Mar '22

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0085-1 Rating: important References: #1197163 Cross-References: CVE-2022-0971 CVE-2022-0972 CVE-2022-0973 CVE-2022-0974 CVE-2022-0975 CVE-2022-0976 CVE-2022-0977 CVE-2022-0978 CVE-2022-0979 CVE-2022-0980 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to version 99.0.4844.74 (boo#1197163) * CVE-2022-0971: Use after free in Blink Layout * CVE-2022-0972: Use after free in Extensions * CVE-2022-0973: Use after free in Safe Browsing * CVE-2022-0974: Use after free in Splitscreen * CVE-2022-0975: Use after free in ANGLE * CVE-2022-0976: Heap buffer overflow in GPU * CVE-2022-0977: Use after free in Browser UI * CVE-2022-0978: Use after free in ANGLE * CVE-2022-0979: Use after free in Safe Browsing * CVE-2022-0980: Use after free in New Tab Page * Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-85=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-99.0.4844.74-bp153.2.69.1 chromium-99.0.4844.74-bp153.2.69.1 References: https://www.suse.com/security/cve/CVE-2022-0971.html https://www.suse.com/security/cve/CVE-2022-0972.html https://www.suse.com/security/cve/CVE-2022-0973.html https://www.suse.com/security/cve/CVE-2022-0974.html https://www.suse.com/security/cve/CVE-2022-0975.html https://www.suse.com/security/cve/CVE-2022-0976.html https://www.suse.com/security/cve/CVE-2022-0977.html https://www.suse.com/security/cve/CVE-2022-0978.html https://www.suse.com/security/cve/CVE-2022-0979.html https://www.suse.com/security/cve/CVE-2022-0980.html https://bugzilla.suse.com/1197163

1 0

openSUSE-RU-2022:0084-1: moderate: Recommended update for dosfstools
by maintenance＠opensuse.org 19 Mar '22

19 Mar '22

openSUSE Recommended Update: Recommended update for dosfstools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0084-1 Rating: moderate References: #1172863 #1188401 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dosfstools fixes the following issues: - To be able to create filesystems compatible with previous version, add -g command line option to mkfs (bsc#1188401) - BREAKING CHANGES: After fixing of bsc#1172863 in the last update, mkfs started to create different images than before. Applications that depend on exact FAT file format (e. g. embedded systems) may be broken in two ways: * The introduction of the alignment may create smaller images than before, with a different positions of important image elements. It can break existing software that expect images in doststools <= 4.1 style. To work around these problems, use "-a" command line argument. * The new image may contain a different geometry values. Geometry sensitive applications expecting doststools <= 4.1 style images can fails to accept different geometry values. There is no direct work around for this problem. But you can take the old image, use "file -s $IMAGE", check its "sectors/track" and "heads", and use them in the newly introduced "-g" command line argument. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-84=1 openSUSE-SLE-15.3-2022-84=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dosfstools-4.1-3.6.1 dosfstools-debuginfo-4.1-3.6.1 dosfstools-debugsource-4.1-3.6.1 - openSUSE Leap 15.3 (noarch): virtualbox-guest-desktop-icons-6.1.32-lp153.2.24.1 virtualbox-guest-source-6.1.32-lp153.2.24.1 virtualbox-host-source-6.1.32-lp153.2.24.1 - openSUSE Leap 15.3 (x86_64): python3-virtualbox-6.1.32-lp153.2.24.1 python3-virtualbox-debuginfo-6.1.32-lp153.2.24.1 virtualbox-6.1.32-lp153.2.24.1 virtualbox-debuginfo-6.1.32-lp153.2.24.1 virtualbox-debugsource-6.1.32-lp153.2.24.1 virtualbox-devel-6.1.32-lp153.2.24.1 virtualbox-guest-tools-6.1.32-lp153.2.24.1 virtualbox-guest-tools-debuginfo-6.1.32-lp153.2.24.1 virtualbox-guest-x11-6.1.32-lp153.2.24.1 virtualbox-guest-x11-debuginfo-6.1.32-lp153.2.24.1 virtualbox-kmp-debugsource-6.1.32-lp153.2.24.1 virtualbox-kmp-default-6.1.32_k5.3.18_150300.59.54-lp153.2.24.1 virtualbox-kmp-default-debuginfo-6.1.32_k5.3.18_150300.59.54-lp153.2.24.1 virtualbox-kmp-preempt-6.1.32_k5.3.18_150300.59.54-lp153.2.24.1 virtualbox-kmp-preempt-debuginfo-6.1.32_k5.3.18_150300.59.54-lp153.2.24.1 virtualbox-qt-6.1.32-lp153.2.24.1 virtualbox-qt-debuginfo-6.1.32-lp153.2.24.1 virtualbox-vnc-6.1.32-lp153.2.24.1 virtualbox-websrv-6.1.32-lp153.2.24.1 virtualbox-websrv-debuginfo-6.1.32-lp153.2.24.1 References: https://bugzilla.suse.com/1172863 https://bugzilla.suse.com/1188401

1 0

openSUSE-RU-2022:0904-1: moderate: Recommended update for go1.18
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Recommended Update: Recommended update for go1.18 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0904-1 Rating: moderate References: #1193742 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.18 fixes the following issues: go1.18 (released 2022-03-15) is a major release of Go. (boo#1193742) go1.18.x minor releases will be provided through February 2023, please see: https://github.com/golang/go/wiki/Go-Release-Cycle Go 1.18 is a significant release, including changes to the language, implementation of the toolchain, runtime, and libraries. Go 1.18 arrives seven months after Go 1.17. As always, the release maintains the Go 1 promise of compatibility. We expect almost all Go programs to continue to compile and run as before. * See release notes https://golang.org/doc/go1.18. Excerpts relevant to OBS environment and for SUSE/openSUSE follow: * Go 1.18 includes an implementation of generic features as described by the Type Parameters Proposal. This includes major but fully backward-compatible changes to the language. * The Go 1.18 compiler now correctly reports declared but not used errors for variables that are set inside a function literal but are never used. Before Go 1.18, the compiler did not report an error in such cases. This fixes long-outstanding compiler issue go#8560. * The Go 1.18 compiler now reports an overflow when passing a rune constant expression such as '1' << 32 as an argument to the predeclared functions print and println, consistent with the behavior of user-defined functions. Before Go 1.18, the compiler did not report an error in such cases but silently accepted such constant arguments if they fit into an int64. Since go vet always pointed out this error, the number of affected programs is likely very small. * AMD64: Go 1.18 introduces the new GOAMD64 environment variable, which selects at compile time a minimum target version of the AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each higher level requires, and takes advantage of, additional processor features. A detailed description can be found here. The GOAMD64 environment variable defaults to v1. * RISC-V: The 64-bit RISC-V architecture on Linux (the linux/riscv64 port) now supports the c-archive and c-shared build modes. * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later. * Fuzzing: Go 1.18 includes an implementation of fuzzing as described by the fuzzing proposal. See the fuzzing landing page to get started. Please be aware that fuzzing can consume a lot of memory and may impact your machine��s performance while it runs. * go get: go get no longer builds or installs packages in module-aware mode. go get is now dedicated to adjusting dependencies in go.mod. Effectively, the -d flag is always enabled. To install the latest version of an executable outside the context of the current module, use go install example.com/cmd@latest. Any version query may be used instead of latest. This form of go install was added in Go 1.16, so projects supporting older versions may need to provide install instructions for both go install and go get. go get now reports an error when used outside a module, since there is no go.mod file to update. In GOPATH mode (with GO111MODULE=off), go get still builds and installs packages, as before. * Automatic go.mod and go.sum updates: The go mod graph, go mod vendor, go mod verify, and go mod why subcommands no longer automatically update the go.mod and go.sum files. (Those files can be updated explicitly using go get, go mod tidy, or go mod download.) * go version: The go command now embeds version control information in binaries. It includes the currently checked-out revision, commit time, and a flag indicating whether edited or untracked files are present. Version control information is embedded if the go command is invoked in a directory within a Git, Mercurial, Fossil, or Bazaar repository, and the main package and its containing main module are in the same repository. This information may be omitted using the flag -buildvcs=false. Additionally, the go command embeds information about the build, including build and tool tags (set with -tags), compiler, assembler, and linker flags (like -gcflags), whether cgo was enabled, and if it was, the values of the cgo environment variables (like CGO_CFLAGS). Both VCS and build information may be read together with module information using go version -m file or runtime/debug.ReadBuildInfo (for the currently running binary) or the new debug/buildinfo package. The underlying data format of the embedded build information can change with new go releases, so an older version of go may not handle the build information produced with a newer version of go. To read the version information from a binary built with go 1.18, use the go version command and the debug/buildinfo package from go 1.18+. * go mod download: If the main module's go.mod file specifies go 1.17 or higher, go mod download without arguments now downloads source code for only the modules explicitly required in the main module's go.mod file. (In a go 1.17 or higher module, that set already includes all dependencies needed to build the packages and tests in the main module.) To also download source code for transitive dependencies, use go mod download all. * go mod vendor: The go mod vendor subcommand now supports a -o flag to set the output directory. (Other go commands still read from the vendor directory at the module root when loading packages with -mod=vendor, so the main use for this flag is for third-party tools that need to collect package source code.) * go mod tidy: The go mod tidy command now retains additional checksums in the go.sum file for modules whose source code is needed to verify that each imported package is provided by only one module in the build list. Because this condition is rare and failure to apply it results in a build error, this change is not conditioned on the go version in the main module's go.mod file. * go work: The go command now supports a "Workspace" mode. If a go.work file is found in the working directory or a parent directory, or one is specified using the GOWORK environment variable, it will put the go command into workspace mode. In workspace mode, the go.work file will be used to determine the set of main modules used as the roots for module resolution, instead of using the normally-found go.mod file to specify the single main module. For more information see the go work documentation. * go build -asan: The go build command and related commands now support an -asan flag that enables interoperation with C (or C++) code compiled with the address sanitizer (C compiler option -fsanitize=address). * //go:build lines: Go 1.17 introduced //go:build lines as a more readable way to write build constraints, instead of // +build lines. As of Go 1.17, gofmt adds //go:build lines to match existing +build lines and keeps them in sync, while go vet diagnoses when they are out of sync. Since the release of Go 1.18 marks the end of support for Go 1.16, all supported versions of Go now understand //go:build lines. In Go 1.18, go fix now removes the now-obsolete // +build lines in modules declaring go 1.17 or later in their go.mod files. For more information, see https://go.dev/design/draft-gobuild. * go vet: The vet tool is updated to support generic code. In most cases, it reports an error in generic code whenever it would report an error in the equivalent non-generic code after substituting for type parameters with a type from their type set. * go vet: The cmd/vet checkers copylock, printf, sortslice, testinggoroutine, and tests have all had moderate precision improvements to handle additional code patterns. This may lead to newly reported errors in existing packages. * Runtime: The garbage collector now includes non-heap sources of garbage collector work (e.g., stack scanning) when determining how frequently to run. As a result, garbage collector overhead is more predictable when these sources are significant. For most applications these changes will be negligible; however, some Go applications may now use less memory and spend more time on garbage collection, or vice versa, than before. The intended workaround is to tweak GOGC where necessary. The runtime now returns memory to the operating system more efficiently and has been tuned to work more aggressively as a result. * Compiler: Go 1.17 implemented a new way of passing function arguments and results using registers instead of the stack on 64-bit x86 architecture on selected operating systems. Go 1.18 expands the supported platforms to include 64-bit ARM (GOARCH=arm64), big- and little-endian 64-bit PowerPC (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture (GOARCH=amd64) on all operating systems. On 64-bit ARM and 64-bit PowerPC systems, benchmarking shows typical performance improvements of 10% or more. As mentioned in the Go 1.17 release notes, this change does not affect the functionality of any safe Go code and is designed to have no impact on most assembly code. See the Go 1.17 release notes for more details. * Compiler: The compiler now can inline functions that contain range loops or labeled for loops. * Compiler: The new -asan compiler option supports the new go command -asan option. * Compiler: Because the compiler's type checker was replaced in its entirety to support generics, some error messages now may use different wording than before. In some cases, pre-Go 1.18 error messages provided more detail or were phrased in a more helpful way. We intend to address these cases in Go 1.19. Because of changes in the compiler related to supporting generics, the Go 1.18 compile speed can be roughly 15% slower than the Go 1.17 compile speed. The execution time of the compiled code is not affected. We intend to improve the speed of the compiler in Go 1.19. * Linker: The linker emits far fewer relocations. As a result, most codebases will link faster, require less memory to link, and generate smaller binaries. Tools that process Go binaries should use Go 1.18's debug/gosym package to transparently handle both old and new binaries. * Linker: The new -asan linker option supports the new go command -asan option. * Bootstrap: When building a Go release from source and GOROOT_BOOTSTRAP is not set, previous versions of Go looked for a Go 1.4 or later bootstrap toolchain in the directory $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17 or later for bootstrap, and this change should make the transition smoother. For more details, see go#44505. * The new debug/buildinfo package provides access to module versions, version control information, and build flags embedded in executable files built by the go command. The same information is also available via runtime/debug.ReadBuildInfo for the currently running binary and via go version -m on the command line. * The new net/netip package defines a new IP address type, Addr. Compared to the existing net.IP type, the netip.Addr type takes less memory, is immutable, and is comparable so it supports == and can be used as a map key. * TLS 1.0 and 1.1 disabled by default client-side: If Config.MinVersion is not set, it now defaults to TLS 1.2 for client connections. Any safely up-to-date server is expected to support TLS 1.2, and browsers have required it since 2020. TLS 1.0 and 1.1 are still supported by setting Config.MinVersion to VersionTLS10. The server-side default is unchanged at TLS 1.0. The default can be temporarily reverted to TLS 1.0 by setting the GODEBUG=tls10default=1 environment variable. This option will be removed in Go 1.19. * Rejecting SHA-1 certificates: crypto/x509 will now reject certificates signed with the SHA-1 hash function. This doesn't apply to self-signed root certificates. Practical attacks against SHA-1 have been demonstrated since 2017 and publicly trusted Certificate Authorities have not issued SHA-1 certificates since 2015. This can be temporarily reverted by setting the GODEBUG=x509sha1=1 environment variable. This option will be removed in Go 1.19. * crypto/elliptic The P224, P384, and P521 curve implementations are now all backed by code generated by the addchain and fiat-crypto projects, the latter of which is based on a formally-verified model of the arithmetic operations. They now use safer complete formulas and internal APIs. P-224 and P-384 are now approximately four times faster. All specific curve implementations are now constant-time. Operating on invalid curve points (those for which the IsOnCurve method returns false, and which are never returned by Unmarshal or a Curve method operating on a valid point) has always been undefined behavior, can lead to key recovery attacks, and is now unsupported by the new backend. If an invalid point is supplied to a P224, P384, or P521 method, that method will now return a random point. The behavior might change to an explicit panic in a future release. * crypto/tls: The new Conn.NetConn method allows access to the underlying net.Conn. * crypto/x509: Certificate.Verify now uses platform APIs to verify certificate validity on macOS and iOS when it is called with a nil VerifyOpts.Roots or when using the root pool returned from SystemCertPool. SystemCertPool is now available on Windows. * crypto/x509: CertPool.Subjects is deprecated. On Windows, macOS, and iOS the CertPool returned by SystemCertPool will return a pool which does not include system roots in the slice returned by Subjects, as a static list can't appropriately represent the platform policies and might not be available at all from the platform APIs. * crypto/x509: Support for signing certificates using signature algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA, SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19. * net/http: When looking up a domain name containing non-ASCII characters, the Unicode-to-ASCII conversion is now done in accordance with Nontransitional Processing as defined in the Unicode IDNA Compatibility Processing standard (UTS #46). The interpretation of four distinct runes are changed: ��, ��, zero-width joiner U+200D, and zero-width non-joiner U+200C. Nontransitional Processing is consistent with most applications and web browsers. * os/user: User.GroupIds now uses a Go native implementation when cgo is not available. * runtime/debug: The BuildInfo struct has two new fields, containing additional information about how the binary was built: GoVersion holds the version of Go used to build the binary. Settings is a slice of BuildSettings structs holding key/value pairs describing the build. * runtime/pprof: The CPU profiler now uses per-thread timers on Linux. This increases the maximum CPU usage that a profile can observe, and reduces some forms of bias. * syscall: The new function SyscallN has been introduced for Windows, allowing for calls with arbitrary number of arguments. As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15, and Syscall18 are deprecated in favor of SyscallN. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-904=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-904=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): go1.18-1.18-1.8.1 go1.18-doc-1.18-1.8.1 - openSUSE Leap 15.4 (aarch64 x86_64): go1.18-race-1.18-1.8.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): go1.18-1.18-1.8.1 go1.18-doc-1.18-1.8.1 - openSUSE Leap 15.3 (aarch64 x86_64): go1.18-race-1.18-1.8.1 References: https://bugzilla.suse.com/1193742

1 0

openSUSE-OU-2022:0902-1: moderate: Optional update for SUSE Package Hub
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0902-1 Rating: moderate References: MSC-303 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 optional fixes and contains one feature can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: argyllcms, csync Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-902=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-902=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): csync-0.50.0-3.5.1 csync-debuginfo-0.50.0-3.5.1 csync-debugsource-0.50.0-3.5.1 libcsync-devel-0.50.0-3.5.1 libcsync-devel-doc-0.50.0-3.5.1 libcsync-doc-0.50.0-3.5.1 libcsync-plugin-owncloud-0.50.0-3.5.1 libcsync-plugin-owncloud-debuginfo-0.50.0-3.5.1 libcsync-plugin-sftp-0.50.0-3.5.1 libcsync-plugin-sftp-debuginfo-0.50.0-3.5.1 libcsync-plugin-smb-0.50.0-3.5.1 libcsync-plugin-smb-debuginfo-0.50.0-3.5.1 libcsync0-0.50.0-3.5.1 libcsync0-debuginfo-0.50.0-3.5.1 - openSUSE Leap 15.4 (x86_64): libcsync0-32bit-0.50.0-3.5.1 libcsync0-32bit-debuginfo-0.50.0-3.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): argyllcms-1.9.2-4.2.1 argyllcms-debuginfo-1.9.2-4.2.1 argyllcms-debugsource-1.9.2-4.2.1 argyllcms-doc-1.9.2-4.2.1 csync-0.50.0-3.5.1 csync-debuginfo-0.50.0-3.5.1 csync-debugsource-0.50.0-3.5.1 libcsync-devel-0.50.0-3.5.1 libcsync-devel-doc-0.50.0-3.5.1 libcsync-doc-0.50.0-3.5.1 libcsync-plugin-owncloud-0.50.0-3.5.1 libcsync-plugin-owncloud-debuginfo-0.50.0-3.5.1 libcsync-plugin-sftp-0.50.0-3.5.1 libcsync-plugin-sftp-debuginfo-0.50.0-3.5.1 libcsync-plugin-smb-0.50.0-3.5.1 libcsync-plugin-smb-debuginfo-0.50.0-3.5.1 libcsync0-0.50.0-3.5.1 libcsync0-debuginfo-0.50.0-3.5.1 - openSUSE Leap 15.3 (x86_64): libcsync0-32bit-0.50.0-3.5.1 libcsync0-32bit-debuginfo-0.50.0-3.5.1 References:

1 0

openSUSE-SU-2022:0083-1: moderate: Security update for weechat
by opensuse-security＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Security Update: Security update for weechat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0083-1 Rating: moderate References: #1190206 Cross-References: CVE-2021-40516 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for weechat fixes the following issues: update to 3.2.1: * CVE-2021-40516: relay: fix crash when decoding a malformed websocket frame (boo#1190206) update to 3.2 main changes: * use XDG directories by default (config, data, cache, runtime) * add support of IRC SASL mechanisms SCRAM-SHA-1, SCRAM-SHA-256 and SCRAM-SHA-512 * automatically load system certificates without giving a hardcoded path to the file with certificates * add options to customize commands executed on system signals received (SIGHUP, SIGQUIT, SIGTERM, SIGUSR1, SIGUSR2) * add bar item "tls_version" and buflist format * add signals "cursor_start" and "cursor_end" * add function crypto_hmac in API * add translated string in evaluation of expressions with "translate:xxx" * add info "weechat_daemon" * add Python stub for WeeChat API * add variables "${tg_shell_argc}" and "${tg_shell_argvN}" in command trigger evaluated strings * many bugs fixed. for all changes, please visit: https://weechat.org/files/changelog/ChangeLog-3.2.html update to 3.1 New features * core: add options weechat.look.hotlist_update_on_buffer_switch and weechat.look.read_marker_update_on_buffer_switch (issue #992, issue #993) * core: add option sec.crypt.passphrase_command to read passphrase from an external program on startup, remove option sec.crypt.passphrase_file (issue #141) * core: improve debug in command /eval: display more verbose debug with two "-d", add indentation and colors * core: add options "setvar" and "delvar" in command /buffer, rename option "localvar" to "listvar" * core: add buffer local variable "completion_default_template" (evaluated) to override the value of option "weechat.completion.default_template" (issue #1600) * core: add option "recreate" in command /filter * core: add raw string in evaluation of expressions with "raw:xxx" (issue #1611) * core: add evaluation of conditions in evaluation of expressions with "eval_cond:xxx" (issue #1582) * api: add info_hashtable "secured_data" * irc: add info "irc_is_message_ignored" * irc: add server option "default_chantypes", used when the server does not send them in message 005 (issue #1610) * trigger: add variable "${tg_trigger_name}" in command trigger evaluated strings (issue #1580) - Bug fixes * core: fix quoted line in cursor mode (issue #1602) * core: fix wrong size of the new window after vertical split (issue #1612) * core: do not remove quotes in arguments of command /eval as they can be part of the evaluated expression/condition (issue #1601) * core: display an error when the buffer is not found with command /command -buffer * buflist: add option buflist.look.use_items to speed up display of buflist (issue #1613) * irc: add bar item "irc_nick_prefix" * irc: fix separator between nick and host in bar item "irc_nick_host" * irc: fix completion of commands /halfop and /dehalfop - Documentation * do not build weechat-headless man page if headless binary is disabled (issue #1607) update to 3.0.1: * exec: fix search of command by identifier * spell: fix refresh of bar item "spell_suggest" when the input becomes empty (issue #1586) * spell: fix crash with IRC color codes in command line (issue #1589) update to 3.0 New features * api: add optional list of colors in infos "nick_color" and "nick_color_name" (issue #1565) * api: add argument "bytes" in function string_dyn_concat * api: add function string_color_code_size (issue #1547) * exec: add option "-oerr" to send stderr to buffer (now disabled by default) (issue #1566) * fset: add option fset.look.auto_refresh (issue #1553) * irc: add pointer to irc_nick in focus of bar item "buffer_nicklist" (issue #1535, issue #1538) * irc: allow to send text on buffers with commands /allchan, /allpv and /allserv * irc: evaluate command executed by commands /allchan, /allpv and /allserv (issue #1536) * script: add option script.scripts.download_enabled (issue #1548) * trigger: add variable "tg_argc" in data set by command trigger (issue #1576) * trigger: add variable "tg_trigger_name" in data set by all triggers (issue #1567, issue #1568) Bug fixes * core: set "notify_level" to 3 if there is a highlight in the line (issue #1529) * core: do not add line with highlight and tag "notify_none" to hotlist (issue #1529) * irc: remove SASL timeout message displayed by error after successful SASL authentication (issue #1515) * irc: send all channels in a single JOIN command when reconnecting to the server (issue #1551) * script: do not automatically download list of scripts on startup if the file is too old (issue #1548) * spell: properly skip WeeChat and IRC color codes when checking words in input (issue #1547) * trigger: fix recursive calls to triggers using regex (issue #1546) * trigger: add ${tg_tags} !!- ,notify_none, in conditions of default trigger "beep" (issue #1529) - Tests * core: add tests on GUI line functions - Build * core: disable debug by default in autotools build * tests: fix compilation with CppUTest �� 4.0 - new .desktop file from weechat sources - update to 2.9 - New features * core: add bar option "color_bg_inactive": color for window bars in inactive window (issue #732) * core: add Alacritty title escape sequence support (issue #1517) * core: display notify level for current buffer with command /buffer notify (issue #1505) * core: count only visible nicks in bar item "buffer_nicklist_count", add bar items "buffer_nicklist_count_groups" and "buffer_nicklist_count_all" (issue #1506) * core: set default size for input bar to 0 (automatic) (issue #1498) * core: add default key Alt+Enter to insert a newline (issue #1498) * core: add flag "input_multiline" in buffer (issue #984, issue #1063) * core: add a scalable WeeChat logo (SVG) (issue #1454, issue #1456) * core: add base 16/32/64 encoding/decoding in evaluation of expressions with "base_encode:base,xxx" and "base_decode:base,xxx" * core: add case sensitive wildcard matching comparison operator (==* and !!*) and case sensitive/insensitive include comparison operators (==-, !!-, =-, !-) in evaluation of expressions * core: add default key Alt+Shift+N to toggle nicklist bar * core: add command line option "--stdout" in weechat-headless binary to log to stdout rather than ~/.weechat/weechat.log (issue #1475, issue #1477) * core: reload configuration files on SIGHUP (issue #1476) * api: add pointer "_bar_window" in hashtable sent to hook focus callback (issue #1450) * api: add info_hashtable "focus_info" (issue #1245, issue #1257) * api: rename function hook_completion_get_string to completion_get_string and hook_completion_list_add to completion_list_add * api: add functions completion_new, completion_search and completion_free * api: add hdata "completion_word" * buflist: add default key Alt+Shift+B to toggle buflist * buflist: add options enable/disable/toggle in command /buflist * buflist: evaluate option buflist.look.sort so that sort can be customized for each of the three buflist bar items (issue #1465) * irc: add support of UTF8MAPPING (issue #1528) * irc: display account messages in buffers (issue #1250) * python: add WeeChat sharedir python directory to PYTHONPATH (issue #1537) * relay: increase default limits for IRC backlog options * relay: add command "handshake" in weechat relay protocol and nonce to prevent replay attacks, add options relay.network.password_hash_algo, relay.network.password_hash_iterations, relay.network.nonce_size (issue #1474) * relay: add command "completion" in weechat relay protocol to perform a completion on a string at a given position (issue #1484) * relay: add option relay.network.auth_timeout * relay: update default colors for client status * relay: add status "waiting_auth" in irc and weechat protocols (issue #1358) * trigger: evaluate arguments of command when the trigger is created (issue #1472) - Bug fixes * core: fix command /window scroll_beyond_end when buffer has fewer lines than chat height (issue #1509) * core: force buffer property "time_for_each_line" to 0 for buffers with free content (issue #1485) * core: don��t collapse consecutive newlines in lines displayed before the first buffer is created * core: don��t remove consecutive newlines when pasting text (issue #1500) * core: don��t collapse consecutive newlines in bar content (issue #1500) * core: fix WEECHAT_SHAREDIR with CMake build (issue #1461) * core: fix memory leak in calculation of expression on FreeBSD (issue #1469) * core: fix resize of a bar when its size is 0 (automatic) (issue #1470) * api: fix use of pointer after free in function key_unbind * api: replace plugin and buffer name by buffer pointer in argument "modifier_data" sent to weechat_print modifier callback (issue #42) * buflist: add "window" pointer in bar item evaluation only if it��s not NULL (if bar type is "window") * exec: fix use of same task id for different tasks (issue #1491) * fifo: fix errors when writing in the FIFO pipe (issue #713) * guile: enable again /guile eval (issue #1514) * irc: use new default chantypes "#&" when the server does not send it * irc: add support of optional server in info "irc_is_nick", fix check of nick using UTF8MAPPING isupport value (issue #1528) * irc: fix add of ignore with flags in regex, display full ignore mask in list of ignores (issue #1518) * irc: do not remove spaces at the end of users messages received (issue #1513) * irc: fix realname delimiter color in WHO/WHOX response (issue #1497) * irc: reuse a buffer with wrong type "channel" when a private message is received (issue #869) * python: fix crash when invalid UTF-8 string is in a WeeChat hashtable converted to a Python dict (issue #1463) * relay: add missing field "notify_level" in message "_buffer_line_added" (issue #1529) * relay: fix slow send of data to clients when SSL is enabled * trigger: only return trigger��s return code when condition evaluates to true (issue #592) * trigger: fix truncated trigger command with commands /trigger input|output|recreate * trigger: do not hide values of options with /set command in cmd_pass trigger - Documentation * add includes directory * merge 53 auto-generated files into 11 files * fix broken literal blocks in Japanese docs with Firefox (issue #1466) - Tests * core: add CI with GitHub Actions, move codecov.io upload to GitHub Actions * core: switch to Ubuntu Bionic on Travis CI, use pylint3 to lint Python scripts * core: run tests on plugins only if the plugins are enabled and compiled * irc: add tests on IRC color and channel functions - Build * javascript: disable build by default and remove Debian packaging of JavaScript plugin (issue #360) * core: make GnuTLS a required dependency * core: fix build with CMake 3.17.0 * core: fix build with cygport on Cygwin Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-83=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): weechat-3.2.1-bp153.2.3.1 weechat-devel-3.2.1-bp153.2.3.1 weechat-lua-3.2.1-bp153.2.3.1 weechat-perl-3.2.1-bp153.2.3.1 weechat-python-3.2.1-bp153.2.3.1 weechat-ruby-3.2.1-bp153.2.3.1 weechat-spell-3.2.1-bp153.2.3.1 weechat-tcl-3.2.1-bp153.2.3.1 - openSUSE Backports SLE-15-SP3 (noarch): weechat-lang-3.2.1-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-40516.html https://bugzilla.suse.com/1190206

1 0

openSUSE-RU-2022:0082-1: moderate: Recommended update for helm
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Recommended Update: Recommended update for helm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0082-1 Rating: moderate References: SLE-21196 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for helm fixes the following issues: Update to version 3.8.0 (jsc#SLE-21196): * OCI registry support for charts is now generally available. It has graduated out of being an experiment. Some changes over Helm 3.7 include: * When setting a chart in the dependencies as OCI the version can be set to a range, like other dependencies * SemVer tags that include build information can be pushed and used. OCI registries don't support + as a tag character. Helm translates the + to _ when stored as a tag * helm registry login now follows the same structure as the Docker CLI for storing credentials. The same location for registry configuration can be passed to both Helm and the Docker CLI * A --list-repo-url flag has been added to helm search hub to quickly show the repositories URL. * Release names are validated during installation * Added support for installing Helm on Windows via Cygwin * Added support for Kubernetes 1.23 Update to version 3.6.3: * Ensure RawPath match Path when resolving reference * Set Helm as manager for managedFields * fix(dep update): helm dep update is not respecting the "version" stipulated in the requirements * fix(doc): fix kube client interface doc. (#9882) * use TLS client information from repo config when downloading a chart * Adding test for user/pass without repo on Helm install * Fix the url being set by WithURL on the getters * tweak basic handling * keep existing behavior of returning ErrReleaseNotFound when release(s) failed to decode * fix(sql storage): Query() should return ErrReleaseNotFound immediately when no records are found * Add Test cases for repository-config without file extension * Correctly determine repository-config lockfile path Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2022-82=1 Package List: - openSUSE Backports SLE-15-SP2 (ppc64le s390x x86_64): helm-3.8.0-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): helm-bash-completion-3.8.0-bp152.2.3.1 helm-fish-completion-3.8.0-bp152.2.3.1 helm-zsh-completion-3.8.0-bp152.2.3.1 References:

1 0

openSUSE-SU-2022:0901-1: important: Security update for frr
by opensuse-security＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Security Update: Security update for frr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0901-1 Rating: important References: #1180217 #1196503 #1196504 #1196505 #1196506 #1196507 Cross-References: CVE-2022-26125 CVE-2022-26126 CVE-2022-26127 CVE-2022-26128 CVE-2022-26129 CVSS scores: CVE-2022-26125 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26125 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26126 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26126 (SUSE): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2022-26127 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26127 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26128 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26128 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-26129 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26129 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for frr fixes the following issues: - CVE-2022-26125, CVE-2022-26126: Fixed buffer overflows in unpack_tlv_router_cap() (bsc#1196505, bsc#1196506). - CVE-2022-26127: Fixed heap buffer overflow in babel_packet_examin() (bsc#1196503). - CVE-2022-26128: Fixed buffer overflows in babel_packet_examin() (bsc#1196507). - CVE-2022-26129: Fixed buffer overflows in parse_hello_subtlv(), parse_ihu_subtlv() and parse_update_subtlv() (bsc#1196504). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-901=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-901=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.3.1 frr-debuginfo-7.4-150300.4.3.1 frr-debugsource-7.4-150300.4.3.1 frr-devel-7.4-150300.4.3.1 libfrr0-7.4-150300.4.3.1 libfrr0-debuginfo-7.4-150300.4.3.1 libfrr_pb0-7.4-150300.4.3.1 libfrr_pb0-debuginfo-7.4-150300.4.3.1 libfrrcares0-7.4-150300.4.3.1 libfrrcares0-debuginfo-7.4-150300.4.3.1 libfrrfpm_pb0-7.4-150300.4.3.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.3.1 libfrrgrpc_pb0-7.4-150300.4.3.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.3.1 libfrrospfapiclient0-7.4-150300.4.3.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.3.1 libfrrsnmp0-7.4-150300.4.3.1 libfrrsnmp0-debuginfo-7.4-150300.4.3.1 libfrrzmq0-7.4-150300.4.3.1 libfrrzmq0-debuginfo-7.4-150300.4.3.1 libmlag_pb0-7.4-150300.4.3.1 libmlag_pb0-debuginfo-7.4-150300.4.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.3.1 frr-debuginfo-7.4-150300.4.3.1 frr-debugsource-7.4-150300.4.3.1 frr-devel-7.4-150300.4.3.1 libfrr0-7.4-150300.4.3.1 libfrr0-debuginfo-7.4-150300.4.3.1 libfrr_pb0-7.4-150300.4.3.1 libfrr_pb0-debuginfo-7.4-150300.4.3.1 libfrrcares0-7.4-150300.4.3.1 libfrrcares0-debuginfo-7.4-150300.4.3.1 libfrrfpm_pb0-7.4-150300.4.3.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.3.1 libfrrgrpc_pb0-7.4-150300.4.3.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.3.1 libfrrospfapiclient0-7.4-150300.4.3.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.3.1 libfrrsnmp0-7.4-150300.4.3.1 libfrrsnmp0-debuginfo-7.4-150300.4.3.1 libfrrzmq0-7.4-150300.4.3.1 libfrrzmq0-debuginfo-7.4-150300.4.3.1 libmlag_pb0-7.4-150300.4.3.1 libmlag_pb0-debuginfo-7.4-150300.4.3.1 References: https://www.suse.com/security/cve/CVE-2022-26125.html https://www.suse.com/security/cve/CVE-2022-26126.html https://www.suse.com/security/cve/CVE-2022-26127.html https://www.suse.com/security/cve/CVE-2022-26128.html https://www.suse.com/security/cve/CVE-2022-26129.html https://bugzilla.suse.com/1180217 https://bugzilla.suse.com/1196503 https://bugzilla.suse.com/1196504 https://bugzilla.suse.com/1196505 https://bugzilla.suse.com/1196506 https://bugzilla.suse.com/1196507

1 0

openSUSE-RU-2022:0898-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Recommended Update: Recommended update for lifecycle-data-sle-module-live-patching ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0898-1 Rating: moderate References: #1020320 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lifecycle-data-sle-module-live-patching fixes the following issues: - Added data for 5_3_18-150300_59_43, 5_3_18-24_99, 5_3_18-59_40. (bsc#1020320) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-898=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-898=1 Package List: - openSUSE Leap 15.4 (noarch): lifecycle-data-sle-module-live-patching-15-4.69.1 - openSUSE Leap 15.3 (noarch): lifecycle-data-sle-module-live-patching-15-4.69.1 References: https://bugzilla.suse.com/1020320

1 0

openSUSE-RU-2022:0899-1: moderate: Recommended update for smartmontools
by maintenance＠opensuse.org 18 Mar '22

18 Mar '22

openSUSE Recommended Update: Recommended update for smartmontools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0899-1 Rating: moderate References: #1195785 SLE-21751 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for smartmontools fixes the following issues: - Restart smartd and generate smartd_opts only if there are real sysconfig changes; do not trigger generate_smartd_opts by YaST, systemd is enough. (bsc#1195785) - Update smartmontools to the latest version from the upstream branch. (jsc#SLE-21751) - Fix update needed logic. - update to 7.2 (jsc#SLE-21751): - smartctl: New option '--json=y[c]' selects YAML output. - smartctl '-i': Prints ATA TRIM and Zoned Device capabilities. - smartctl '-j': Fixed 'scsi_grown_defect_list' value. - smartctl '-a': Prints SCSI 'Accumulated power on time'. - smartctl '-n POWERMODE': SCSI support. - smartctl '-s standby,now' and '-s standby,off': SCSI support. - smartctl '-c': NVMe 1.4 additions. - smartd: Support for staggered self-tests. - smartd: No longer writes attribute log if no attributes were read due to standby mode or other error. - smartd: Now resolves symlinks before device names are checked for duplicates. - smartd: Fixed SMARTD_DEVICETYPE environment variable if DEVICESCAN is used without '-d TYPE'. - ATA: Device type '-d jmb39x-q,N' for JMB39x protocol variant used by some QNAP NAS devices. - ATA: Device type '-d jms56x,N' for JMS562 USB to SATA RAID bridges. - SCSI: Improved heuristics for log subpages of new and very old disks. - NVMe: Log transfer size limited to avoid device or kernel crashes. - NVMEe/USB: Device type '-d sntrealtek' for Realtek RTL9210 USB to NVMe bridges. - update-smart-drivedb: New option '--branch X.Y'. - HDD, SSD and USB additions to drive database. - Dropped support for pre-C99 snprintf(). - configure: Dropped option '--without-working-snprintf'. - configure: Fixed '-fstack-protector*' detection. - Linux: Various fixes of smartd.service file (bsc#1183699). - Darwin: NVMe log support. - FreeBSD: Device scan does no longer include T_ENCLOSURE devices. - NetBSD: Fixed timeout handling. - NetBSD big endian: Fixed ATA register handling. - OpenBSD: Fixed timeout handling. - Windows: Dropped backward compatibility fixes for very old compilers. - Update to version 7.1: - smartctl: Fixed bogus exception on unknown form factor value. - smartctl '--json=cg': Suppresses extra spaces also in 'g' format. - smartctl '-i': ATA ACS-4 and ACS-5 enhancements. - smartd: No longer truncates very long device names in warning emails. - smartd: No longer skips scheduled tests if system clock has been adjusted to the past. - smartd '-A': Attribute logs now use local time instead of UTC. - Autodetection of '-d sntjmicron' type for JMicron USB to NVMe bridges. - Fixed segfault on CCISS transfer sizes. - Fixed smartd.service 'Type' if libsystemd-dev is not available. - Fixed '/dev/megaraid_sas_ioctl_node' fd leak. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-899=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-899=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): smartmontools-7.2-150300.8.5.1 smartmontools-debuginfo-7.2-150300.8.5.1 smartmontools-debugsource-7.2-150300.8.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): smartmontools-7.2-150300.8.5.1 smartmontools-debuginfo-7.2-150300.8.5.1 smartmontools-debugsource-7.2-150300.8.5.1 References: https://bugzilla.suse.com/1195785

1 0

openSUSE-RU-2022:0893-1: moderate: Recommended update for postgresql13
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for postgresql13 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0893-1 Rating: moderate References: #1190740 #1195680 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for postgresql13 fixes the following issues: - Upgrade to 13.6: (bsc#1195680) * https://www.postgresql.org/docs/13/release-13-6.html * Reindexing might be needed after applying this upgrade, so please read the release notes carefully. - Add constraints file with 12GB of memory for s390x as a workaround. (bsc#1190740) - Add a llvmjit-devel subpackage to pull in the right versions of clang and llvm for building extensions. - Fix some mistakes in the interdependencies between the implementation packages and their noarch counterpart. - Update the BuildIgnore section. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-893=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-893=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): postgresql13-13.6-5.25.1 postgresql13-contrib-13.6-5.25.1 postgresql13-contrib-debuginfo-13.6-5.25.1 postgresql13-debuginfo-13.6-5.25.1 postgresql13-debugsource-13.6-5.25.1 postgresql13-devel-13.6-5.25.1 postgresql13-devel-debuginfo-13.6-5.25.1 postgresql13-llvmjit-13.6-5.25.1 postgresql13-llvmjit-debuginfo-13.6-5.25.1 postgresql13-plperl-13.6-5.25.1 postgresql13-plperl-debuginfo-13.6-5.25.1 postgresql13-plpython-13.6-5.25.1 postgresql13-plpython-debuginfo-13.6-5.25.1 postgresql13-pltcl-13.6-5.25.1 postgresql13-pltcl-debuginfo-13.6-5.25.1 postgresql13-server-13.6-5.25.1 postgresql13-server-debuginfo-13.6-5.25.1 postgresql13-server-devel-13.6-5.25.1 postgresql13-server-devel-debuginfo-13.6-5.25.1 postgresql13-test-13.6-5.25.1 - openSUSE Leap 15.4 (noarch): postgresql13-docs-13.6-5.25.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postgresql13-13.6-5.25.1 postgresql13-contrib-13.6-5.25.1 postgresql13-contrib-debuginfo-13.6-5.25.1 postgresql13-debuginfo-13.6-5.25.1 postgresql13-debugsource-13.6-5.25.1 postgresql13-devel-13.6-5.25.1 postgresql13-devel-debuginfo-13.6-5.25.1 postgresql13-llvmjit-13.6-5.25.1 postgresql13-llvmjit-debuginfo-13.6-5.25.1 postgresql13-plperl-13.6-5.25.1 postgresql13-plperl-debuginfo-13.6-5.25.1 postgresql13-plpython-13.6-5.25.1 postgresql13-plpython-debuginfo-13.6-5.25.1 postgresql13-pltcl-13.6-5.25.1 postgresql13-pltcl-debuginfo-13.6-5.25.1 postgresql13-server-13.6-5.25.1 postgresql13-server-debuginfo-13.6-5.25.1 postgresql13-server-devel-13.6-5.25.1 postgresql13-server-devel-debuginfo-13.6-5.25.1 postgresql13-test-13.6-5.25.1 - openSUSE Leap 15.3 (noarch): postgresql13-docs-13.6-5.25.1 References: https://bugzilla.suse.com/1190740 https://bugzilla.suse.com/1195680

1 0

openSUSE-SU-2022:0886-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0886-1 Rating: moderate References: #1196456 SLE-18214 Cross-References: CVE-2021-25636 CVSS scores: CVE-2021-25636 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-25636 (SUSE): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability, contains one feature is now available. Description: This update for libreoffice fixes the following issues: Update to version 7.2.5.1 (jsc#SLE-18214): - CVE-2021-25636: Fixed an incorrect vadidation of digitally signed documents (bsc#1196456). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-886=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-886=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): libreoffice-7.2.5.1-150300.14.22.18.3 libreoffice-base-7.2.5.1-150300.14.22.18.3 libreoffice-base-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-base-drivers-postgresql-7.2.5.1-150300.14.22.18.3 libreoffice-base-drivers-postgresql-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-calc-7.2.5.1-150300.14.22.18.3 libreoffice-calc-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-calc-extensions-7.2.5.1-150300.14.22.18.3 libreoffice-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-debugsource-7.2.5.1-150300.14.22.18.3 libreoffice-draw-7.2.5.1-150300.14.22.18.3 libreoffice-draw-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-filters-optional-7.2.5.1-150300.14.22.18.3 libreoffice-gnome-7.2.5.1-150300.14.22.18.3 libreoffice-gnome-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-gtk3-7.2.5.1-150300.14.22.18.3 libreoffice-gtk3-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-impress-7.2.5.1-150300.14.22.18.3 libreoffice-impress-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-librelogo-7.2.5.1-150300.14.22.18.3 libreoffice-mailmerge-7.2.5.1-150300.14.22.18.3 libreoffice-math-7.2.5.1-150300.14.22.18.3 libreoffice-math-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-officebean-7.2.5.1-150300.14.22.18.3 libreoffice-officebean-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-pyuno-7.2.5.1-150300.14.22.18.3 libreoffice-pyuno-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-qt5-7.2.5.1-150300.14.22.18.3 libreoffice-qt5-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-doc-7.2.5.1-150300.14.22.18.3 libreoffice-writer-7.2.5.1-150300.14.22.18.3 libreoffice-writer-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-writer-extensions-7.2.5.1-150300.14.22.18.3 libreofficekit-7.2.5.1-150300.14.22.18.3 libreofficekit-devel-7.2.5.1-150300.14.22.18.3 - openSUSE Leap 15.4 (noarch): libreoffice-branding-upstream-7.2.5.1-150300.14.22.18.3 libreoffice-gdb-pretty-printers-7.2.5.1-150300.14.22.18.3 libreoffice-glade-7.2.5.1-150300.14.22.18.3 libreoffice-icon-themes-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-af-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-am-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ar-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-as-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ast-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-be-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bg-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bn_IN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-br-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-brx-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bs-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ca-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ca_valencia-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ckb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-cs-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-cy-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-da-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-de-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dgo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dsb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dz-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-el-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en_GB-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en_ZA-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-eo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-es-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-et-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-eu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fa-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fur-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fy-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ga-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gd-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gug-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-he-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hsb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-id-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-is-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-it-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ja-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ka-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kab-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-km-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kmr_Latn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ko-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kok-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ks-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lt-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lv-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mai-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ml-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mni-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-my-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ne-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nso-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-oc-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-om-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-or-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pa-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pt_BR-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pt_PT-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ro-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ru-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-rw-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sa_IN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sat-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sd-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-si-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sid-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sq-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ss-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-st-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sv-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sw_TZ-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-szl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ta-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-te-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tg-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-th-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ts-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tt-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ug-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-uk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-uz-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ve-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-vec-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-vi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-xh-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zh_CN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zh_TW-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zu-7.2.5.1-150300.14.22.18.3 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): libreoffice-7.2.5.1-150300.14.22.18.3 libreoffice-base-7.2.5.1-150300.14.22.18.3 libreoffice-base-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-base-drivers-postgresql-7.2.5.1-150300.14.22.18.3 libreoffice-base-drivers-postgresql-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-calc-7.2.5.1-150300.14.22.18.3 libreoffice-calc-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-calc-extensions-7.2.5.1-150300.14.22.18.3 libreoffice-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-debugsource-7.2.5.1-150300.14.22.18.3 libreoffice-draw-7.2.5.1-150300.14.22.18.3 libreoffice-draw-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-filters-optional-7.2.5.1-150300.14.22.18.3 libreoffice-gnome-7.2.5.1-150300.14.22.18.3 libreoffice-gnome-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-gtk3-7.2.5.1-150300.14.22.18.3 libreoffice-gtk3-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-impress-7.2.5.1-150300.14.22.18.3 libreoffice-impress-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-librelogo-7.2.5.1-150300.14.22.18.3 libreoffice-mailmerge-7.2.5.1-150300.14.22.18.3 libreoffice-math-7.2.5.1-150300.14.22.18.3 libreoffice-math-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-officebean-7.2.5.1-150300.14.22.18.3 libreoffice-officebean-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-pyuno-7.2.5.1-150300.14.22.18.3 libreoffice-pyuno-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-qt5-7.2.5.1-150300.14.22.18.3 libreoffice-qt5-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-sdk-doc-7.2.5.1-150300.14.22.18.3 libreoffice-writer-7.2.5.1-150300.14.22.18.3 libreoffice-writer-debuginfo-7.2.5.1-150300.14.22.18.3 libreoffice-writer-extensions-7.2.5.1-150300.14.22.18.3 libreofficekit-7.2.5.1-150300.14.22.18.3 libreofficekit-devel-7.2.5.1-150300.14.22.18.3 - openSUSE Leap 15.3 (noarch): libreoffice-branding-upstream-7.2.5.1-150300.14.22.18.3 libreoffice-gdb-pretty-printers-7.2.5.1-150300.14.22.18.3 libreoffice-glade-7.2.5.1-150300.14.22.18.3 libreoffice-icon-themes-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-af-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-am-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ar-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-as-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ast-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-be-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bg-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bn_IN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-br-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-brx-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-bs-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ca-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ca_valencia-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ckb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-cs-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-cy-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-da-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-de-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dgo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dsb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-dz-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-el-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en_GB-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-en_ZA-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-eo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-es-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-et-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-eu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fa-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fur-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-fy-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ga-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gd-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-gug-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-he-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hsb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-hu-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-id-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-is-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-it-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ja-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ka-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kab-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-km-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kmr_Latn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ko-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-kok-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ks-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lo-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lt-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-lv-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mai-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ml-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mni-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-mr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-my-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nb-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ne-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-nso-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-oc-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-om-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-or-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pa-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pt_BR-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-pt_PT-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ro-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ru-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-rw-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sa_IN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sat-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sd-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-si-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sid-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sq-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ss-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-st-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sv-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-sw_TZ-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-szl-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ta-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-te-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tg-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-th-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tn-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tr-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ts-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-tt-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ug-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-uk-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-uz-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-ve-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-vec-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-vi-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-xh-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zh_CN-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zh_TW-7.2.5.1-150300.14.22.18.3 libreoffice-l10n-zu-7.2.5.1-150300.14.22.18.3 References: https://www.suse.com/security/cve/CVE-2021-25636.html https://bugzilla.suse.com/1196456

1 0

openSUSE-RU-2022:0889-1: moderate: Recommended update for postgresql10
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0889-1 Rating: moderate References: #1190740 #1195680 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for postgresql10 fixes the following issues: Upgrade to version 10.20 (bsc#1195680): - Reindexing might be needed after applying this upgrade, so please read the release notes carefully https://www.postgresql.org/docs/10/release-10-20.html - Add constraints file with 12GB of memory for s390x as a workaround (bsc#1190740) - Add a llvmjit-devel subpackage to pull in the right versions of clang and llvm for building extensions - Fix some mistakes in the interdependencies between the implementation packages and their noarch counterpart Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-889=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-889=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): postgresql10-10.20-8.44.1 postgresql10-contrib-10.20-8.44.1 postgresql10-contrib-debuginfo-10.20-8.44.1 postgresql10-debuginfo-10.20-8.44.1 postgresql10-debugsource-10.20-8.44.1 postgresql10-plperl-10.20-8.44.1 postgresql10-plperl-debuginfo-10.20-8.44.1 postgresql10-plpython-10.20-8.44.1 postgresql10-plpython-debuginfo-10.20-8.44.1 postgresql10-pltcl-10.20-8.44.1 postgresql10-pltcl-debuginfo-10.20-8.44.1 postgresql10-server-10.20-8.44.1 postgresql10-server-debuginfo-10.20-8.44.1 postgresql10-test-10.20-8.44.1 - openSUSE Leap 15.4 (noarch): postgresql10-docs-10.20-8.44.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postgresql10-10.20-8.44.1 postgresql10-contrib-10.20-8.44.1 postgresql10-contrib-debuginfo-10.20-8.44.1 postgresql10-debuginfo-10.20-8.44.1 postgresql10-debugsource-10.20-8.44.1 postgresql10-plperl-10.20-8.44.1 postgresql10-plperl-debuginfo-10.20-8.44.1 postgresql10-plpython-10.20-8.44.1 postgresql10-plpython-debuginfo-10.20-8.44.1 postgresql10-pltcl-10.20-8.44.1 postgresql10-pltcl-debuginfo-10.20-8.44.1 postgresql10-server-10.20-8.44.1 postgresql10-server-debuginfo-10.20-8.44.1 postgresql10-test-10.20-8.44.1 - openSUSE Leap 15.3 (noarch): postgresql10-docs-10.20-8.44.1 References: https://bugzilla.suse.com/1190740 https://bugzilla.suse.com/1195680

1 0

openSUSE-RU-2022:0888-1: moderate: Recommended update for avahi
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for avahi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0888-1 Rating: moderate References: #1179060 #1194561 #1195614 #1196282 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for avahi fixes the following issues: - Change python3-Twisted to a soft dependency. It is not available on SLED or PackageHub, and it is only needed by avahi-bookmarks (bsc#1196282) - Fix warning when Twisted is not available - Have python3-avahi require python3-dbus-python, not the python 2 dbus-1-python package (bsc#1195614) - Ensure that NetworkManager or wicked have already started before initializing (bsc#1194561) - Move sftp-ssh and ssh services to the doc directory. They allow a host's up/down status to be easily discovered and should not be enabled by default (bsc#1179060) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-888=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-888=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libavahi-ui0-0.7-3.18.1 libavahi-ui0-debuginfo-0.7-3.18.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): avahi-0.7-3.18.1 avahi-autoipd-0.7-3.18.1 avahi-autoipd-debuginfo-0.7-3.18.1 avahi-compat-howl-devel-0.7-3.18.1 avahi-compat-mDNSResponder-devel-0.7-3.18.1 avahi-debuginfo-0.7-3.18.1 avahi-debugsource-0.7-3.18.1 avahi-glib2-debugsource-0.7-3.18.1 avahi-utils-0.7-3.18.1 avahi-utils-debuginfo-0.7-3.18.1 avahi-utils-gtk-0.7-3.18.1 avahi-utils-gtk-debuginfo-0.7-3.18.1 libavahi-client3-0.7-3.18.1 libavahi-client3-debuginfo-0.7-3.18.1 libavahi-common3-0.7-3.18.1 libavahi-common3-debuginfo-0.7-3.18.1 libavahi-core7-0.7-3.18.1 libavahi-core7-debuginfo-0.7-3.18.1 libavahi-devel-0.7-3.18.1 libavahi-glib-devel-0.7-3.18.1 libavahi-glib1-0.7-3.18.1 libavahi-glib1-debuginfo-0.7-3.18.1 libavahi-gobject-devel-0.7-3.18.1 libavahi-gobject0-0.7-3.18.1 libavahi-gobject0-debuginfo-0.7-3.18.1 libavahi-ui-gtk3-0-0.7-3.18.1 libavahi-ui-gtk3-0-debuginfo-0.7-3.18.1 libavahi-ui0-0.7-3.18.1 libavahi-ui0-debuginfo-0.7-3.18.1 libdns_sd-0.7-3.18.1 libdns_sd-debuginfo-0.7-3.18.1 libhowl0-0.7-3.18.1 libhowl0-debuginfo-0.7-3.18.1 python3-avahi-0.7-3.18.1 python3-avahi-gtk-0.7-3.18.1 typelib-1_0-Avahi-0_6-0.7-3.18.1 - openSUSE Leap 15.3 (x86_64): avahi-32bit-debuginfo-0.7-3.18.1 libavahi-client3-32bit-0.7-3.18.1 libavahi-client3-32bit-debuginfo-0.7-3.18.1 libavahi-common3-32bit-0.7-3.18.1 libavahi-common3-32bit-debuginfo-0.7-3.18.1 libavahi-glib1-32bit-0.7-3.18.1 libavahi-glib1-32bit-debuginfo-0.7-3.18.1 libdns_sd-32bit-0.7-3.18.1 libdns_sd-32bit-debuginfo-0.7-3.18.1 - openSUSE Leap 15.3 (noarch): avahi-lang-0.7-3.18.1 References: https://bugzilla.suse.com/1179060 https://bugzilla.suse.com/1194561 https://bugzilla.suse.com/1195614 https://bugzilla.suse.com/1196282

1 0

openSUSE-OU-2022:0885-1: moderate: Optional update for SUSE Package Hub
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0885-1 Rating: moderate References: MSC-303 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 optional fixes and contains one feature can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: freerdp, libgsm Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-885=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-885=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libgsm-debugsource-1.0.14-3.2.1 libgsm-devel-1.0.14-3.2.1 libgsm-utils-1.0.14-3.2.1 libgsm-utils-debuginfo-1.0.14-3.2.1 libgsm1-1.0.14-3.2.1 libgsm1-debuginfo-1.0.14-3.2.1 - openSUSE Leap 15.4 (x86_64): libgsm-devel-32bit-1.0.14-3.2.1 libgsm1-32bit-1.0.14-3.2.1 libgsm1-32bit-debuginfo-1.0.14-3.2.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): freerdp-2.1.2-15.12.1 freerdp-debuginfo-2.1.2-15.12.1 freerdp-debugsource-2.1.2-15.12.1 freerdp-devel-2.1.2-15.12.1 freerdp-proxy-2.1.2-15.12.1 freerdp-proxy-debuginfo-2.1.2-15.12.1 freerdp-server-2.1.2-15.12.1 freerdp-server-debuginfo-2.1.2-15.12.1 freerdp-wayland-2.1.2-15.12.1 freerdp-wayland-debuginfo-2.1.2-15.12.1 libfreerdp2-2.1.2-15.12.1 libfreerdp2-debuginfo-2.1.2-15.12.1 libgsm-debugsource-1.0.14-3.2.1 libgsm-devel-1.0.14-3.2.1 libgsm-utils-1.0.14-3.2.1 libgsm-utils-debuginfo-1.0.14-3.2.1 libgsm1-1.0.14-3.2.1 libgsm1-debuginfo-1.0.14-3.2.1 libuwac0-0-2.1.2-15.12.1 libuwac0-0-debuginfo-2.1.2-15.12.1 libwinpr2-2.1.2-15.12.1 libwinpr2-debuginfo-2.1.2-15.12.1 uwac0-0-devel-2.1.2-15.12.1 winpr2-devel-2.1.2-15.12.1 - openSUSE Leap 15.3 (x86_64): libgsm-devel-32bit-1.0.14-3.2.1 libgsm1-32bit-1.0.14-3.2.1 libgsm1-32bit-debuginfo-1.0.14-3.2.1 References:

1 0

openSUSE-RU-2022:0884-1: moderate: Recommended update for python-jsonschema, python-rfc3987, python-strict-rfc3339
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for python-jsonschema, python-rfc3987, python-strict-rfc3339 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0884-1 Rating: moderate References: #1082318 SLE-18756 SLE-23374 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains two features can now be installed. Description: This update for python-jsonschema, python-rfc3987, python-strict-rfc3339 fixes the following issues: - Add patch to fix build with new webcolors. - update to version 3.2.0 (jsc#SLE-18756): * Added a format_nongpl setuptools extra, which installs only format dependencies that are non-GPL (#619). - specfile: * require python-importlib-metadata - update to version 3.1.1: * Temporarily revert the switch to js-regex until #611 and #612 are resolved. - changes from version 3.1.0: - Regular expressions throughout schemas now respect the ECMA 262 dialect, as recommended by the specification (#609). - Activate more of the test suite - Remove tests and benchmarking from the runtime package - Update to v3.0.2 - Fixed a bug where 0 and False were considered equal by const and enum - from v3.0.1 - Fixed a bug where extending validators did not preserve their notion of which validator property contains $id information. - Update to 3.0.1: - Support for Draft 6 and Draft 7 - Draft 7 is now the default - New TypeChecker object for more complex type definitions (and overrides) - Falling back to isodate for the date-time format checker is no longer attempted, in accordance with the specification - Use %license instead of %doc (bsc#1082318) - Remove hashbang from runtime module - Replace PyPI URL with https://github.com/dgerber/rfc3987 - Activate doctests - Add missing runtime dependency on timezone - Replace dead link with GitHub URL - Activate test suite - Trim bias from descriptions. - Initial commit, needed by flex Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-884=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-884=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-pyrsistent-debuginfo-0.14.4-3.2.1 python-pyrsistent-debugsource-0.14.4-3.2.1 python2-pyrsistent-0.14.4-3.2.1 python2-pyrsistent-debuginfo-0.14.4-3.2.1 python3-pyrsistent-0.14.4-3.2.1 python3-pyrsistent-debuginfo-0.14.4-3.2.1 - openSUSE Leap 15.4 (noarch): python-six-doc-1.14.0-12.1 python2-attrs-19.3.0-3.4.1 python2-backports-4.0.0-3.2.1 python2-configparser2-4.0.0-3.2.1 python2-six-1.14.0-12.1 python3-attrs-19.3.0-3.4.1 python3-backports-4.0.0-3.2.1 python3-configparser2-4.0.0-3.2.1 python3-six-1.14.0-12.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-pyrsistent-debuginfo-0.14.4-3.2.1 python-pyrsistent-debugsource-0.14.4-3.2.1 python2-pyrsistent-0.14.4-3.2.1 python2-pyrsistent-debuginfo-0.14.4-3.2.1 python3-pyrsistent-0.14.4-3.2.1 python3-pyrsistent-debuginfo-0.14.4-3.2.1 - openSUSE Leap 15.3 (noarch): python-six-doc-1.14.0-12.1 python2-attrs-19.3.0-3.4.1 python2-backports-4.0.0-3.2.1 python2-configparser2-4.0.0-3.2.1 python2-six-1.14.0-12.1 python3-attrs-19.3.0-3.4.1 python3-backports-4.0.0-3.2.1 python3-configparser2-4.0.0-3.2.1 python3-six-1.14.0-12.1 References: https://bugzilla.suse.com/1082318

1 0

openSUSE-RU-2022:0892-1: Recommended update for libyui
by maintenance＠opensuse.org 17 Mar '22

17 Mar '22

openSUSE Recommended Update: Recommended update for libyui ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0892-1 Rating: low References: #1195114 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libyui fixes the following issue: - Add package libyui-qt-pkg15 to Basesystem (bsc#1195114). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-892=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libyui-bindings-debuginfo-4.1.5-150300.3.8.7 libyui-bindings-debugsource-4.1.5-150300.3.8.7 libyui-debugsource-4.1.5-150300.3.8.7 libyui-devel-4.1.5-150300.3.8.7 libyui-ncurses-debugsource-4.1.5-150300.3.8.7 libyui-ncurses-devel-4.1.5-150300.3.8.7 libyui-ncurses-pkg-debugsource-4.1.5-150300.3.8.1 libyui-ncurses-pkg-devel-4.1.5-150300.3.8.1 libyui-ncurses-pkg15-4.1.5-150300.3.8.1 libyui-ncurses-pkg15-debuginfo-4.1.5-150300.3.8.1 libyui-ncurses-rest-api-debugsource-4.1.5-150300.3.8.6 libyui-ncurses-rest-api-devel-4.1.5-150300.3.8.6 libyui-ncurses-rest-api15-4.1.5-150300.3.8.6 libyui-ncurses-rest-api15-debuginfo-4.1.5-150300.3.8.6 libyui-ncurses-tools-4.1.5-150300.3.8.7 libyui-ncurses15-4.1.5-150300.3.8.7 libyui-ncurses15-debuginfo-4.1.5-150300.3.8.7 libyui-qt-debugsource-4.1.5-150300.3.8.6 libyui-qt-devel-4.1.5-150300.3.8.6 libyui-qt-graph-debugsource-4.1.5-150300.3.8.6 libyui-qt-graph-devel-4.1.5-150300.3.8.6 libyui-qt-graph15-4.1.5-150300.3.8.6 libyui-qt-graph15-debuginfo-4.1.5-150300.3.8.6 libyui-qt-pkg-debugsource-4.1.5-150300.3.8.1 libyui-qt-pkg-devel-4.1.5-150300.3.8.1 libyui-qt-pkg15-4.1.5-150300.3.8.1 libyui-qt-pkg15-debuginfo-4.1.5-150300.3.8.1 libyui-qt-rest-api-debugsource-4.1.5-150300.3.8.6 libyui-qt-rest-api-devel-4.1.5-150300.3.8.6 libyui-qt-rest-api15-4.1.5-150300.3.8.6 libyui-qt-rest-api15-debuginfo-4.1.5-150300.3.8.6 libyui-qt15-4.1.5-150300.3.8.6 libyui-qt15-debuginfo-4.1.5-150300.3.8.6 libyui-rest-api-debugsource-4.1.5-150300.3.8.6 libyui-rest-api-devel-4.1.5-150300.3.8.6 libyui-rest-api15-4.1.5-150300.3.8.6 libyui-rest-api15-debuginfo-4.1.5-150300.3.8.6 libyui15-4.1.5-150300.3.8.7 libyui15-debuginfo-4.1.5-150300.3.8.7 perl-yui-4.1.5-150300.3.8.7 perl-yui-debuginfo-4.1.5-150300.3.8.7 python3-yui-4.1.5-150300.3.8.7 python3-yui-debuginfo-4.1.5-150300.3.8.7 ruby-yui-4.1.5-150300.3.8.7 ruby-yui-debuginfo-4.1.5-150300.3.8.7 References: https://bugzilla.suse.com/1195114

1 0

openSUSE-SU-2022:0081-1: important: Security update for ansible
by opensuse-security＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Security Update: Security update for ansible ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0081-1 Rating: important References: #1099808 #1112959 #1118896 #1126503 #1137528 #1157968 #1157969 #1164133 #1164134 #1164135 #1164136 #1164137 #1164138 #1164139 #1164140 #1165393 #1166389 #1167440 #1167532 #1167873 #1171162 #1174145 #1174302 #1180816 #1180942 #1181119 #1181935 Cross-References: CVE-2018-10875 CVE-2018-16837 CVE-2019-10156 CVE-2019-14846 CVE-2019-14904 CVE-2019-14905 CVE-2020-10684 CVE-2020-10685 CVE-2020-10691 CVE-2020-10729 CVE-2020-14330 CVE-2020-14332 CVE-2020-1733 CVE-2020-1734 CVE-2020-1735 CVE-2020-1736 CVE-2020-1737 CVE-2020-1738 CVE-2020-1739 CVE-2020-1740 CVE-2020-1746 CVE-2020-1753 CVE-2021-20178 CVE-2021-20180 CVE-2021-20191 CVE-2021-20228 CVSS scores: CVE-2018-10875 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2018-10875 (SUSE): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2018-16837 (NVD) : 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2018-16837 (SUSE): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-10156 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2019-10156 (SUSE): 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N CVE-2019-14846 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2019-14846 (SUSE): 2.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N CVE-2019-14904 (NVD) : 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L CVE-2019-14904 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2019-14905 (NVD) : 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L CVE-2019-14905 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-10684 (NVD) : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2020-10685 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-10685 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-10691 (NVD) : 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVE-2020-10691 (SUSE): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVE-2020-10729 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-10729 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-14330 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-14330 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2020-14332 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-14332 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-1733 (NVD) : 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L CVE-2020-1733 (SUSE): 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L CVE-2020-1734 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L CVE-2020-1735 (NVD) : 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N CVE-2020-1735 (SUSE): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVE-2020-1736 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2020-1736 (SUSE): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N CVE-2020-1737 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-1737 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H CVE-2020-1738 (NVD) : 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L CVE-2020-1738 (SUSE): 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L CVE-2020-1739 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2020-1739 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2020-1740 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-1740 (SUSE): 3.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N CVE-2020-1746 (NVD) : 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-1746 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2020-1753 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20178 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20178 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-20180 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-20191 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-20191 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVE-2021-20228 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-20228 (SUSE): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves 26 vulnerabilities and has one errata is now available. Description: Ansible was updated to 2.9.21 to fix lots of bugs and security issues. Update to version 2.9.20, maintenance release containing numerous bugfixes. Update to version 2.9.19 with minor changes and a few bug fixes. Update to version 2.9.18: * CVE-2021-20228 where default and fallback values for no_log parameters to modules were not previously masked. (bsc#1181935) * CVE-2021-20178 where several parameters to the snmp_facts module were logged and displayed despite containing sensitive information. (bsc#1180816) * CVE-2021-20180 where several parameters to the bitbucket_pipeline_variable were logged and displayed despite containing sensitive information. (bsc#1180942) * CVE-2021-20191 which addresses a number of modules whose parameters were logged and displayed despite containing sensitive information. For the full list of affected modules, refer to the changelog linked below. (bsc#1181119) Update to version 2.9.17 with minor changes and a few bug fixes. Update to version 2.9.16 with minor changes and many bug fixes. update to version 2.9.15 with following breaking change: * ansible-galaxy login command has been removed update to version 2.9.14 with many small improvements and bug fixes, most notably: * kubectl - connection plugin now redact kubectl_token and kubectl_password in console log (CVE-2020-1753 bsc#1166389). update to version 2.9.13 with many bug fixes, most notably: * A security issue was addressed in the "dnf" module, which previously did not check GPG signatures of packages. * A bug in the "cron" module was fixed. In some cases prior to this fix, the module would inadvertently remove cron entries. update to version 2.9.12 with many bug fixes, most notably the following security fixes: * security issue - copy - Redact the value of the no_log 'content' parameter in the result's invocation.module_args in check mode. Previously when used with check mode and with '-vvv', the module would not censor the content if a change would be made to the destination path. (CVE-2020-14332 bsc#1174302) * security issue atomic_move - change default permissions when creating temporary files so they are not world readable (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736 bsc#1164134) * Fix warning for default permission change when no mode is specified. Follow up to https://github.com/ansible/ansible/issues/67794. (CVE-2020-1736) * Sanitize no_log values from any response keys that might be returned from the uri module (CVE-2020-14330 bsc#1174145). * reset logging level to INFO due to CVE-2019-14846. update to version 2.9.11 with many bug fixes update to version 2.9.10 with many bug fixes. - Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733 (bsc#1164140) update to version 2.9.9 * fix for a regression introduced in 2.9.8 update to version 2.9.8, maintenance release containing numerous bugfixes update to version 2.9.7 with many bug fixes, especially for these security issues: - bsc#1164140 CVE-2020-1733 - insecure temporary directory when running become_user from become directive - bsc#1164139 CVE-2020-1734 shell enabled by default in a pipe lookup plugin subprocess - bsc#1164137 CVE-2020-1735 - path injection on dest parameter in fetch module - bsc#1164134 CVE-2020-1736 atomic_move primitive sets permissive permissions - bsc#1164138 CVE-2020-1737 - Extract-Zip function in win_unzip module does not check extracted path - bsc#1164136 CVE-2020-1738 module package can be selected by the ansible facts - bsc#1164133 CVE-2020-1739 - svn module leaks password when specified as a parameter - bsc#1164135 CVE-2020-1740 - secrets readable after ansible-vault edit - bsc#1165393 CVE-2020-1746 - information disclosure issue in ldap_attr and ldap_entry modules - bsc#1166389 CVE-2020-1753 - kubectl connection plugin leaks sensitive information - bsc#1167532 CVE-2020-10684 - code injection when using ansible_facts as a subkey - bsc#1167440 CVE-2020-10685 - modules which use files encrypted with vault are not properly cleaned up - bsc#1167873 CVE-2020-10691 - archive traversal vulnerability in ansible-galaxy collection install [2] Fixed before 2.9.6, but not yet listed: - bsc#1171162 CVE-2020-10729 two random password lookups in same task return same value - bsc#1157968 CVE-2019-14904 vulnerability in solaris_zone module via crafted solaris zone - bsc#1157969 CVE-2019-14905 malicious code could craft filename in nxos_file_copy module - bsc#1112959 CVE-2018-16837 Information leak in "user" module patch added - (bsc#1137528) CVE-2019-10156: ansible: templating causing an - bsc#1118896 CVE-2018-16876 Information disclosure in vvv+ mode with no_log on (https://github.com/ansible/ansible/pull/49569) - Includes fix for bsc#1099808 (CVE-2018-10875) ansible.cfg is being read from current working directory allowing possible code execution Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-81=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): ansible-2.9.21-bp153.2.3.1 ansible-doc-2.9.21-bp153.2.3.1 ansible-test-2.9.21-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10875.html https://www.suse.com/security/cve/CVE-2018-16837.html https://www.suse.com/security/cve/CVE-2019-10156.html https://www.suse.com/security/cve/CVE-2019-14846.html https://www.suse.com/security/cve/CVE-2019-14904.html https://www.suse.com/security/cve/CVE-2019-14905.html https://www.suse.com/security/cve/CVE-2020-10684.html https://www.suse.com/security/cve/CVE-2020-10685.html https://www.suse.com/security/cve/CVE-2020-10691.html https://www.suse.com/security/cve/CVE-2020-10729.html https://www.suse.com/security/cve/CVE-2020-14330.html https://www.suse.com/security/cve/CVE-2020-14332.html https://www.suse.com/security/cve/CVE-2020-1733.html https://www.suse.com/security/cve/CVE-2020-1734.html https://www.suse.com/security/cve/CVE-2020-1735.html https://www.suse.com/security/cve/CVE-2020-1736.html https://www.suse.com/security/cve/CVE-2020-1737.html https://www.suse.com/security/cve/CVE-2020-1738.html https://www.suse.com/security/cve/CVE-2020-1739.html https://www.suse.com/security/cve/CVE-2020-1740.html https://www.suse.com/security/cve/CVE-2020-1746.html https://www.suse.com/security/cve/CVE-2020-1753.html https://www.suse.com/security/cve/CVE-2021-20178.html https://www.suse.com/security/cve/CVE-2021-20180.html https://www.suse.com/security/cve/CVE-2021-20191.html https://www.suse.com/security/cve/CVE-2021-20228.html https://bugzilla.suse.com/1099808 https://bugzilla.suse.com/1112959 https://bugzilla.suse.com/1118896 https://bugzilla.suse.com/1126503 https://bugzilla.suse.com/1137528 https://bugzilla.suse.com/1157968 https://bugzilla.suse.com/1157969 https://bugzilla.suse.com/1164133 https://bugzilla.suse.com/1164134 https://bugzilla.suse.com/1164135 https://bugzilla.suse.com/1164136 https://bugzilla.suse.com/1164137 https://bugzilla.suse.com/1164138 https://bugzilla.suse.com/1164139 https://bugzilla.suse.com/1164140 https://bugzilla.suse.com/1165393 https://bugzilla.suse.com/1166389 https://bugzilla.suse.com/1167440 https://bugzilla.suse.com/1167532 https://bugzilla.suse.com/1167873 https://bugzilla.suse.com/1171162 https://bugzilla.suse.com/1174145 https://bugzilla.suse.com/1174302 https://bugzilla.suse.com/1180816 https://bugzilla.suse.com/1180942 https://bugzilla.suse.com/1181119 https://bugzilla.suse.com/1181935

1 0

openSUSE-SU-2022:0872-1: important: Security update for stunnel
by opensuse-security＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Security Update: Security update for stunnel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0872-1 Rating: important References: #1181400 #1182529 SLE-20679 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes and contains one feature can now be installed. Description: This update for stunnel fixes the following issues: Update to 5.62 including new features and bugfixes: * Security bugfixes - The "redirect" option was fixed to properly handle unauthenticated requests (bsc#1182529). - Fixed a double free with OpenSSL older than 1.1.0. - Added hardening to systemd service (bsc#1181400). * New features - Added new "protocol = capwin" and "protocol = capwinctrl" configuration file options. - Added support for the new SSL_set_options() values. - Added a bash completion script. - New 'sessionResume' service-level option to allow or disallow session resumption - Download fresh ca-certs.pem for each new release. - New 'protocolHeader' service-level option to insert custom 'connect' protocol negotiation headers. This feature can be used to impersonate other software (e.g. web browsers). - 'protocolHost' can also be used to control the client SMTP protocol negotiation HELO/EHLO value. - Initial FIPS 3.0 support. - Client-side "protocol = ldap" support * Bugfixes - Fixed a transfer() loop bug. - Fixed reloading configuration with "systemctl reload stunnel.service". - Fixed incorrect messages logged for OpenSSL errors. - Fixed 'redirect' with 'protocol'. This combination is not supported by 'smtp', 'pop3' and 'imap' protocols. - X.509v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificates. - Fixed a tiny memory leak in configuration file reload error handling. - Fixed engine initialization. - FIPS TLS feature is reported when a provider or container is available, and not when FIPS control API is available. - Fix configuration reload when compression is used - Fix test suite fixed not to require external connectivity Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-872=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-872=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - openSUSE Leap 15.4 (noarch): stunnel-doc-5.62-3.14.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - openSUSE Leap 15.3 (noarch): stunnel-doc-5.62-3.14.1 References: https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1182529

1 0

openSUSE-SU-2022:0873-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0873-1 Rating: important References: #1193314 #1193444 #1193491 #1194926 #1194928 #1194929 #1194931 #1194932 #1194933 #1194934 #1194935 #1194937 #1194939 #1194940 #1194941 #1195163 Cross-References: CVE-2022-21248 CVE-2022-21282 CVE-2022-21283 CVE-2022-21293 CVE-2022-21294 CVE-2022-21296 CVE-2022-21299 CVE-2022-21305 CVE-2022-21340 CVE-2022-21341 CVE-2022-21349 CVE-2022-21360 CVE-2022-21365 CVSS scores: CVE-2022-21248 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21248 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21282 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21282 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21283 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21283 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21296 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21296 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21299 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21305 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21305 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21340 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21340 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21349 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21349 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has three fixes is now available. Description: This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u322 (icedtea-3.22.0) Including the following security fixes: - CVE-2022-21248, bsc#1194926: Enhance cross VM serialization - CVE-2022-21283, bsc#1194937: Better String matching - CVE-2022-21293, bsc#1194935: Improve String constructions - CVE-2022-21294, bsc#1194934: Enhance construction of Identity maps - CVE-2022-21282, bsc#1194933: Better resolution of URIs - CVE-2022-21296, bsc#1194932: Improve SAX Parser configuration management - CVE-2022-21299, bsc#1194931: Improved scanning of XML entities - CVE-2022-21305, bsc#1194939: Better array indexing - CVE-2022-21340, bsc#1194940: Verify Jar Verification - CVE-2022-21341, bsc#1194941: Improve serial forms for transport - CVE-2022-21349: Improve Solaris font rendering - CVE-2022-21360, bsc#1194929: Enhance BMP image support - CVE-2022-21365, bsc#1194928: Enhanced BMP processing Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-873=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-873=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.322-3.64.2 java-1_8_0-openjdk-accessibility-1.8.0.322-3.64.2 java-1_8_0-openjdk-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-debugsource-1.8.0.322-3.64.2 java-1_8_0-openjdk-demo-1.8.0.322-3.64.2 java-1_8_0-openjdk-demo-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-devel-1.8.0.322-3.64.2 java-1_8_0-openjdk-devel-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-headless-1.8.0.322-3.64.2 java-1_8_0-openjdk-headless-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-src-1.8.0.322-3.64.2 - openSUSE Leap 15.4 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.322-3.64.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): java-1_8_0-openjdk-1.8.0.322-3.64.2 java-1_8_0-openjdk-accessibility-1.8.0.322-3.64.2 java-1_8_0-openjdk-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-debugsource-1.8.0.322-3.64.2 java-1_8_0-openjdk-demo-1.8.0.322-3.64.2 java-1_8_0-openjdk-demo-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-devel-1.8.0.322-3.64.2 java-1_8_0-openjdk-devel-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-headless-1.8.0.322-3.64.2 java-1_8_0-openjdk-headless-debuginfo-1.8.0.322-3.64.2 java-1_8_0-openjdk-src-1.8.0.322-3.64.2 - openSUSE Leap 15.3 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.322-3.64.2 References: https://www.suse.com/security/cve/CVE-2022-21248.html https://www.suse.com/security/cve/CVE-2022-21282.html https://www.suse.com/security/cve/CVE-2022-21283.html https://www.suse.com/security/cve/CVE-2022-21293.html https://www.suse.com/security/cve/CVE-2022-21294.html https://www.suse.com/security/cve/CVE-2022-21296.html https://www.suse.com/security/cve/CVE-2022-21299.html https://www.suse.com/security/cve/CVE-2022-21305.html https://www.suse.com/security/cve/CVE-2022-21340.html https://www.suse.com/security/cve/CVE-2022-21341.html https://www.suse.com/security/cve/CVE-2022-21349.html https://www.suse.com/security/cve/CVE-2022-21360.html https://www.suse.com/security/cve/CVE-2022-21365.html https://bugzilla.suse.com/1193314 https://bugzilla.suse.com/1193444 https://bugzilla.suse.com/1193491 https://bugzilla.suse.com/1194926 https://bugzilla.suse.com/1194928 https://bugzilla.suse.com/1194929 https://bugzilla.suse.com/1194931 https://bugzilla.suse.com/1194932 https://bugzilla.suse.com/1194933 https://bugzilla.suse.com/1194934 https://bugzilla.suse.com/1194935 https://bugzilla.suse.com/1194937 https://bugzilla.suse.com/1194939 https://bugzilla.suse.com/1194940 https://bugzilla.suse.com/1194941 https://bugzilla.suse.com/1195163

1 0

openSUSE-RU-2022:0874-1: moderate: Recommended update for openldap2
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0874-1 Rating: moderate References: #1197004 PM-3288 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for openldap2 fixes the following issue: - Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression (bsc#1197004) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-874=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-874=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libldap-2_4-2-2.4.46-9.64.1 libldap-2_4-2-debuginfo-2.4.46-9.64.1 openldap2-2.4.46-9.64.1 openldap2-back-meta-2.4.46-9.64.1 openldap2-back-meta-debuginfo-2.4.46-9.64.1 openldap2-back-perl-2.4.46-9.64.1 openldap2-back-perl-debuginfo-2.4.46-9.64.1 openldap2-back-sock-2.4.46-9.64.1 openldap2-back-sock-debuginfo-2.4.46-9.64.1 openldap2-back-sql-2.4.46-9.64.1 openldap2-back-sql-debuginfo-2.4.46-9.64.1 openldap2-client-2.4.46-9.64.1 openldap2-client-debuginfo-2.4.46-9.64.1 openldap2-contrib-2.4.46-9.64.1 openldap2-contrib-debuginfo-2.4.46-9.64.1 openldap2-debuginfo-2.4.46-9.64.1 openldap2-debugsource-2.4.46-9.64.1 openldap2-devel-2.4.46-9.64.1 openldap2-devel-static-2.4.46-9.64.1 openldap2-ppolicy-check-password-1.2-9.64.1 openldap2-ppolicy-check-password-debuginfo-1.2-9.64.1 - openSUSE Leap 15.4 (noarch): libldap-data-2.4.46-9.64.1 openldap2-doc-2.4.46-9.64.1 - openSUSE Leap 15.4 (x86_64): libldap-2_4-2-32bit-2.4.46-9.64.1 libldap-2_4-2-32bit-debuginfo-2.4.46-9.64.1 openldap2-devel-32bit-2.4.46-9.64.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libldap-2_4-2-2.4.46-9.64.1 libldap-2_4-2-debuginfo-2.4.46-9.64.1 openldap2-2.4.46-9.64.1 openldap2-back-meta-2.4.46-9.64.1 openldap2-back-meta-debuginfo-2.4.46-9.64.1 openldap2-back-perl-2.4.46-9.64.1 openldap2-back-perl-debuginfo-2.4.46-9.64.1 openldap2-back-sock-2.4.46-9.64.1 openldap2-back-sock-debuginfo-2.4.46-9.64.1 openldap2-back-sql-2.4.46-9.64.1 openldap2-back-sql-debuginfo-2.4.46-9.64.1 openldap2-client-2.4.46-9.64.1 openldap2-client-debuginfo-2.4.46-9.64.1 openldap2-contrib-2.4.46-9.64.1 openldap2-contrib-debuginfo-2.4.46-9.64.1 openldap2-debuginfo-2.4.46-9.64.1 openldap2-debugsource-2.4.46-9.64.1 openldap2-devel-2.4.46-9.64.1 openldap2-devel-static-2.4.46-9.64.1 openldap2-ppolicy-check-password-1.2-9.64.1 openldap2-ppolicy-check-password-debuginfo-1.2-9.64.1 - openSUSE Leap 15.3 (noarch): libldap-data-2.4.46-9.64.1 openldap2-doc-2.4.46-9.64.1 - openSUSE Leap 15.3 (x86_64): libldap-2_4-2-32bit-2.4.46-9.64.1 libldap-2_4-2-32bit-debuginfo-2.4.46-9.64.1 openldap2-devel-32bit-2.4.46-9.64.1 References: https://bugzilla.suse.com/1197004

1 0

openSUSE-RU-2022:0876-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0876-1 Rating: moderate References: #1188970 #1196577 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xorg-x11-server fixes the following issue: - Fix segmentation fault during terminal switches with multiple attached displays. (bsc#1188970) - Fix a regression that may cause gdm/lightdm fail to start. (bsc#1196577) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-876=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-876=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): xorg-x11-server-wayland-1.20.3-22.5.47.1 xorg-x11-server-wayland-debuginfo-1.20.3-22.5.47.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): xorg-x11-server-1.20.3-22.5.47.1 xorg-x11-server-debuginfo-1.20.3-22.5.47.1 xorg-x11-server-debugsource-1.20.3-22.5.47.1 xorg-x11-server-extra-1.20.3-22.5.47.1 xorg-x11-server-extra-debuginfo-1.20.3-22.5.47.1 xorg-x11-server-sdk-1.20.3-22.5.47.1 xorg-x11-server-source-1.20.3-22.5.47.1 xorg-x11-server-wayland-1.20.3-22.5.47.1 xorg-x11-server-wayland-debuginfo-1.20.3-22.5.47.1 References: https://bugzilla.suse.com/1188970 https://bugzilla.suse.com/1196577

1 0

openSUSE-SU-2022:0870-1: important: Security update for java-1_8_0-openj9
by opensuse-security＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Security Update: Security update for java-1_8_0-openj9 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0870-1 Rating: important References: #1194925 #1194926 #1194927 #1194928 #1194929 #1194930 #1194931 #1194932 #1194933 #1194934 #1194935 #1194939 #1194940 #1194941 Cross-References: CVE-2022-21248 CVE-2022-21277 CVE-2022-21282 CVE-2022-21291 CVE-2022-21293 CVE-2022-21294 CVE-2022-21296 CVE-2022-21299 CVE-2022-21305 CVE-2022-21340 CVE-2022-21341 CVE-2022-21360 CVE-2022-21365 CVE-2022-21366 CVSS scores: CVE-2022-21248 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21248 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21277 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21277 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21282 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21282 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21291 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21291 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21293 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21296 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21296 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21299 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21305 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21305 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21340 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21340 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0: - Fixing the following vulnerabilities: CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930), CVE-2022-21282 (bsc#1194933), CVE-2022-21291 (bsc#1194925), CVE-2022-21293 (bsc#1194935), CVE-2022-21294 (bsc#1194934), CVE-2022-21296 (bsc#1194932), CVE-2022-21299 (bsc#1194931), CVE-2022-21305 (bsc#1194939), CVE-2022-21340 (bsc#1194940), CVE-2022-21341 (bsc#1194941), CVE-2022-21360 (bsc#1194929), CVE-2022-21365 (bsc#1194928), CVE-2022-21366 (bsc#1194927). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-870=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-870=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): java-1_8_0-openj9-1.8.0.322-3.21.2 java-1_8_0-openj9-accessibility-1.8.0.322-3.21.2 java-1_8_0-openj9-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-debugsource-1.8.0.322-3.21.2 java-1_8_0-openj9-demo-1.8.0.322-3.21.2 java-1_8_0-openj9-demo-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-devel-1.8.0.322-3.21.2 java-1_8_0-openj9-devel-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-headless-1.8.0.322-3.21.2 java-1_8_0-openj9-headless-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-src-1.8.0.322-3.21.2 - openSUSE Leap 15.4 (noarch): java-1_8_0-openj9-javadoc-1.8.0.322-3.21.2 - openSUSE Leap 15.3 (ppc64le s390x x86_64): java-1_8_0-openj9-1.8.0.322-3.21.2 java-1_8_0-openj9-accessibility-1.8.0.322-3.21.2 java-1_8_0-openj9-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-debugsource-1.8.0.322-3.21.2 java-1_8_0-openj9-demo-1.8.0.322-3.21.2 java-1_8_0-openj9-demo-debuginfo-1.8.0.322-3.21.2 java-1_8_0-openj9-devel-1.8.0.322-3.21.2 java-1_8_0-openj9-headless-1.8.0.322-3.21.2 java-1_8_0-openj9-src-1.8.0.322-3.21.2 - openSUSE Leap 15.3 (noarch): java-1_8_0-openj9-javadoc-1.8.0.322-3.21.2 References: https://www.suse.com/security/cve/CVE-2022-21248.html https://www.suse.com/security/cve/CVE-2022-21277.html https://www.suse.com/security/cve/CVE-2022-21282.html https://www.suse.com/security/cve/CVE-2022-21291.html https://www.suse.com/security/cve/CVE-2022-21293.html https://www.suse.com/security/cve/CVE-2022-21294.html https://www.suse.com/security/cve/CVE-2022-21296.html https://www.suse.com/security/cve/CVE-2022-21299.html https://www.suse.com/security/cve/CVE-2022-21305.html https://www.suse.com/security/cve/CVE-2022-21340.html https://www.suse.com/security/cve/CVE-2022-21341.html https://www.suse.com/security/cve/CVE-2022-21360.html https://www.suse.com/security/cve/CVE-2022-21365.html https://www.suse.com/security/cve/CVE-2022-21366.html https://bugzilla.suse.com/1194925 https://bugzilla.suse.com/1194926 https://bugzilla.suse.com/1194927 https://bugzilla.suse.com/1194928 https://bugzilla.suse.com/1194929 https://bugzilla.suse.com/1194930 https://bugzilla.suse.com/1194931 https://bugzilla.suse.com/1194932 https://bugzilla.suse.com/1194933 https://bugzilla.suse.com/1194934 https://bugzilla.suse.com/1194935 https://bugzilla.suse.com/1194939 https://bugzilla.suse.com/1194940 https://bugzilla.suse.com/1194941

1 0

openSUSE-FU-2022:0868-1: moderate: Feature update for tcl and tk
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Feature Update: Feature update for tcl and tk ______________________________________________________________________________ Announcement ID: openSUSE-FU-2022:0868-1 Rating: moderate References: #1138797 #1185662 #1195257 #903017 SLE-21016 SLE-23284 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability, contains two features and has three fixes is now available. Description: This feature update for tcl and tk fixes the following issues: Update tcl and tk to version 8.6.12 (jsc#SLE-21016, jsc#SLE-23284): - Move tcl.macros to /usr/lib/rpm/macros.d (bsc#1185662) - Use FAT LTO objects in order to provide proper static library (bsc#1138797) - Fix a bug in itcl that was affecting iwidgets (bsc#903017) - Add [combobox current] support "end" index - Add fixes in [text] bindings - Add missing "deferred clear code" support to GIF photo images - Add new virtual event <<TkWorldChanged>> - Add new keycodes: CodeInput, SingleCandidate, MultipleCandidate, PreviousCandidate - Add new support for POSIX error: EILSEQ - Add new command [tcl::unsupported::corotype] - Add new command [tcl::unsupported::timerate] for performance testing - Add new option -state to [ttk::scale] - Add portable keycodes: OE, oe, Ydiaeresis - Add support for backrefs in [array names -regexp] - Add support for Unicode 14 - Disfavor Master/Slave terminology - Enhance [oo::object] to acquire or lose a class identity dynamically - Fix canvas rotated text overlap detection - Fix canvas closed polylines yo fully honor -joinstyle - Fix display of Long non-wrapped lines in text - Fix display treeview focus ring when -selectmode none - Fix focus events not to break entry validation - Fix [package prefer stable] failing case - Fix auto_path initialization by Safe Base interps - Fix bad interaction between grab and mouse pointer warp - Fix borderwidth calculations on menu items - Fix cascade tearoff menu redraw artifacts - Fix coords rounding when drawing canvas items - Fix corrupt result from [$c postscript] with -file or -channel - Fix errno management in socket full close - Fix failure when a [proc] argument name is computed, not literal - Fix focus on unmapped windows - Fix handling of duplicates in spinbox -values list - Fix incomplete read of multi-image GIF - Fix initialization order of static package in wish - Fix issue when trying to display angled text without Xft - Fix issue with font initialization when no font is installed - Fix problems with Noto Color Emoji font - Fix race conditions in [file delete] and [file mkdir] - Fix Std channel initialization for multi-thread operations - Fix tearoff menu redraw artifacts - Fix up arrow key in [text] to correctly move cursor to index 1.0 - Fix various cursor issues - Fix various encoding issues - Fix various fontchooser issues - Fix various issues causing crashes and hang in - Fix various memory issues - Fix various scrolling bugs and add improvements - Fix 32/64-bit confusion of FS DIR operations reported for AIX - Improve appearance of text selection in [*entry] widgets - Improve checkbutton handling of -selectcolor - Improve handling of resolution changes - Improve multi-thread safety when Xft is in use - Improve ttk high-contrast-mode support - Improve emoji support - Improve legacy support for [tk_setPalette] - Make combobox -postoffset option work with default style - Make spinbox use proper names in query of option database - Menu flaws when empty menubar clicked - New index argument in [$menubutton post x y index] - Preserve canvas tag list order during add/delete - Prevent cross-manager loops of geom management - Rewrite of zlib inflation for multi-stream and completeness - Run fileevents in proper thread after [thread::attach $channel] - Stop [unload] corruption of list of loaded packages - Stop app switching exposing withdrawn windows as zombies - Tk now denied access to PRIMARY selection from safe interps - TkpDrawAngledCharsInContext leaked a CGColor - Try to restore Tcl's [update] command when Tk is unloaded - Changed [info * methods] to include mixins - [package require] is now NR-enabled The following fixes might show some potential incompatibilities with existing software: - Revised [binary (en|de)code base64] for RFC compliance and roundtrip - Tcl_DStringAppendElement # quoting precision, dstring-2.13, dstring-3.10 - Extended [clock scan] ISO format and time zone support - Allow for select/copy from disabled text widget on all platforms - Revised case of [info loaded] module names - [info hostname] reports DNS name, not NetBIOS name - Force -eofchar \032 when evaluating library scripts - Revised error messages: "too few" => "not enough" - Performed rewrite of Tk event loop to prevent ring overflow - Refactored all MouseWheel bindings - Revised precision of ::scale widget tick mark values - Prevent transient window cycles (crashed on Aqua) - Builds no longer use -lieee - Quoting of command line arguments by [exec] on Windows revised. Prior quoting rules left holes where some values would not pass through, but could trigger substitutions or program execution. See https://core.tcl-lang.org/tcl/info/21b0629c81 - [lreplace] accepts all out-of-range index values Patch Instructions: To install this openSUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-868=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-868=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): tcl-8.6.12-150300.14.3.1 tcl-debuginfo-8.6.12-150300.14.3.1 tcl-debugsource-8.6.12-150300.14.3.1 tcl-devel-8.6.12-150300.14.3.1 tk-8.6.12-150300.10.3.1 tk-debuginfo-8.6.12-150300.10.3.1 tk-debugsource-8.6.12-150300.10.3.1 tk-devel-8.6.12-150300.10.3.1 - openSUSE Leap 15.4 (x86_64): tcl-32bit-8.6.12-150300.14.3.1 tcl-32bit-debuginfo-8.6.12-150300.14.3.1 tk-32bit-8.6.12-150300.10.3.1 tk-32bit-debuginfo-8.6.12-150300.10.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): tcl-8.6.12-150300.14.3.1 tcl-debuginfo-8.6.12-150300.14.3.1 tcl-debugsource-8.6.12-150300.14.3.1 tcl-devel-8.6.12-150300.14.3.1 tk-8.6.12-150300.10.3.1 tk-debuginfo-8.6.12-150300.10.3.1 tk-debugsource-8.6.12-150300.10.3.1 tk-devel-8.6.12-150300.10.3.1 - openSUSE Leap 15.3 (x86_64): tcl-32bit-8.6.12-150300.14.3.1 tcl-32bit-debuginfo-8.6.12-150300.14.3.1 tk-32bit-8.6.12-150300.10.3.1 tk-32bit-debuginfo-8.6.12-150300.10.3.1 References: https://www.suse.com/security/cve/CVE-2021-35331.html https://bugzilla.suse.com/1138797 https://bugzilla.suse.com/1185662 https://bugzilla.suse.com/1195257 https://bugzilla.suse.com/903017

1 0

openSUSE-RU-2022:0869-1: moderate: Recommended update for s390-tools
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for s390-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0869-1 Rating: moderate References: #1196439 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for s390-tools fixes the following issues: - Fix ziomon throughput calculation. Use time interval, during which read and write requests were started and finished, for calculation of throughput of zfcp adapter instead of d2c time of read and write requests (bsc#1196439) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-869=1 Package List: - openSUSE Leap 15.3 (s390x): libekmfweb1-2.15.1-150300.8.17.1 libekmfweb1-debuginfo-2.15.1-150300.8.17.1 libekmfweb1-devel-2.15.1-150300.8.17.1 osasnmpd-2.15.1-150300.8.17.1 osasnmpd-debuginfo-2.15.1-150300.8.17.1 s390-tools-2.15.1-150300.8.17.1 s390-tools-debuginfo-2.15.1-150300.8.17.1 s390-tools-debugsource-2.15.1-150300.8.17.1 s390-tools-hmcdrvfs-2.15.1-150300.8.17.1 s390-tools-hmcdrvfs-debuginfo-2.15.1-150300.8.17.1 s390-tools-zdsfs-2.15.1-150300.8.17.1 s390-tools-zdsfs-debuginfo-2.15.1-150300.8.17.1 References: https://bugzilla.suse.com/1196439

1 0

openSUSE-RU-2022:0864-1: important: Recommended update for SAPHanaSR
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for SAPHanaSR ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0864-1 Rating: important References: #1174557 #1181765 #1182201 #1182545 #1182774 #1189530 #1189531 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for SAPHanaSR fixes the following issues: - Add systemd support for the resource agent to interact with the new SAP unit files for sapstartsrv. As the new version of the SAP Startup Framework will use systemd unit files to control the sapstartsrv process instead of the previous used SysV init script, the handling of sapstartsrv inside the resource agents is adapted to support both ways. (bsc#1189530, bsc#1189531) - The resource start and stop timeout is now configurable by increasing the timeout for the action 'start' and/or 'stop'. 95% of this action timeouts will be used to calculate the new resource start and stop timeout for the 'WaitforStarted' and 'WaitforStopped' functions. If the new, calculated timeout value is less than '3600', it will be set to '3600', so that we do not decrease this timeout by accident. (bsc#1182545) - Change promotion scoring during maintenance procedure to prevent that both sides have an equal promotion scoring after refresh which might result in a critical promotion of the secondary. (bsc#1174557) - Update of man page SAPHanaSR.py.7 - correct the supported HANA version (bsc#1182201) - If the $hdbState command fails to retrieve the current state of the System Replication, the resource agent now uses the system_replication/actual_mode attribute (if available) from the global.ini file as a fallback. This should prevent some confusing and misleading log messages during a takeover and solves the problem of a not working takeover back (after a successful first takeover) (bsc#1181765) - Add dedicated logging of HANA_CALL problems. It is now possible to identify if the called `hana` command or the needed `su` command throws the error, and for further hints it logs the stderr output. Additionally it is possible to get regular log messages for the used commands, their return code and their stderr output by enabling the 'debug' mode of the resource agents (bsc#1182774) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-864=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-864=1 Package List: - openSUSE Leap 15.4 (noarch): SAPHanaSR-0.155.0-4.17.1 SAPHanaSR-doc-0.155.0-4.17.1 - openSUSE Leap 15.3 (noarch): SAPHanaSR-0.155.0-4.17.1 SAPHanaSR-doc-0.155.0-4.17.1 References: https://bugzilla.suse.com/1174557 https://bugzilla.suse.com/1181765 https://bugzilla.suse.com/1182201 https://bugzilla.suse.com/1182545 https://bugzilla.suse.com/1182774 https://bugzilla.suse.com/1189530 https://bugzilla.suse.com/1189531

1 0

openSUSE-RU-2022:0863-1: important: Recommended update for sapstartsrv-resource-agents
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for sapstartsrv-resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0863-1 Rating: important References: #1189529 #1193568 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sapstartsrv-resource-agents fixes the following issues: - Add systemd support for the resource agent to interact with the new SAP unit files for sapstartsrv. As the new version of the SAP Startup Framework uses systemd unit files to control the sapstartsrv process instead of the previous used SysV init script, handling of sapstartsrv inside the resource agents is adapted to support both ways (bsc#1189529) - Prevent false posivite with pgrep in function '_get_status' (bsc#1193568) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-863=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-863=1 Package List: - openSUSE Leap 15.4 (noarch): sapstartsrv-resource-agents-0.9.0+git.1645795466.55a8cca-1.12.1 - openSUSE Leap 15.3 (noarch): sapstartsrv-resource-agents-0.9.0+git.1645795466.55a8cca-1.12.1 References: https://bugzilla.suse.com/1189529 https://bugzilla.suse.com/1193568

1 0

openSUSE-RU-2022:0862-1: important: Recommended update for SAPHanaSR-ScaleOut
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for SAPHanaSR-ScaleOut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0862-1 Rating: important References: #1182774 #1189532 #1189533 #1189540 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for SAPHanaSR-ScaleOut fixes the following issues: - Add systemd support for the resource agent to interact with the new SAP unit files for sapstartsrv. As the new version of the SAP Startup Framework uses systemd unit files to control the sapstartsrv process instead of the previous used SysV init script, the handling of sapstartsrv inside the resource agents is adapted to support both ways. (bsc#1189532, bsc#1189533) - Add dedicated logging of HANA_CALL problems. It is now possible to identify if the called `hana` command or the needed `su` command throws the error, and for further hints it logs the stderr output. Additionally it is possible to get regular log messages for the used commands, their return code and their stderr output by enabling the 'debug' mode of the resource agents. (bsc#1182774) - Add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give control over the hook runtime. Default is 'all-on' which means there are 3 cib calls performed inside the hook script. Changing the value of 'cib_access' inside the global.ini file to'site-on' to perform the absolute minimum cib calls (only one). (bsc#1189540) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-862=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-862=1 Package List: - openSUSE Leap 15.4 (noarch): SAPHanaSR-ScaleOut-0.181.0-30.1 SAPHanaSR-ScaleOut-doc-0.181.0-30.1 - openSUSE Leap 15.3 (noarch): SAPHanaSR-ScaleOut-0.181.0-30.1 SAPHanaSR-ScaleOut-doc-0.181.0-30.1 References: https://bugzilla.suse.com/1182774 https://bugzilla.suse.com/1189532 https://bugzilla.suse.com/1189533 https://bugzilla.suse.com/1189540

1 0

openSUSE-RU-2022:0861-1: moderate: Recommended update for openssl-1_1
by maintenance＠opensuse.org 16 Mar '22

16 Mar '22

openSUSE Recommended Update: Recommended update for openssl-1_1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0861-1 Rating: moderate References: #1182959 #1195149 #1195792 #1195856 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for openssl-1_1 fixes the following issues: openssl-1_1: - Fix PAC pointer authentication in ARM (bsc#1195856) - Pull libopenssl-1_1 when updating openssl-1_1 with the same version (bsc#1195792) - FIPS: Fix function and reason error codes (bsc#1182959) - Enable zlib compression support (bsc#1195149) glibc: - Resolve installation issue of `glibc-devel` in SUSE Linux Enterprise Micro 5.1 linux-glibc-devel: - Resolve installation issue of `linux-kernel-headers` in SUSE Linux Enterprise Micro 5.1 libxcrypt: - Resolve installation issue of `libxcrypt-devel` in SUSE Linux Enterprise Micro 5.1 zlib: - Resolve installation issue of `zlib-devel` in SUSE Linux Enterprise Micro 5.1 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-861=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-861=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): glibc-2.31-150300.20.7 glibc-debuginfo-2.31-150300.20.7 glibc-debugsource-2.31-150300.20.7 glibc-devel-2.31-150300.20.7 glibc-devel-debuginfo-2.31-150300.20.7 glibc-devel-static-2.31-150300.20.7 glibc-extra-2.31-150300.20.7 glibc-extra-debuginfo-2.31-150300.20.7 glibc-locale-2.31-150300.20.7 glibc-locale-base-2.31-150300.20.7 glibc-locale-base-debuginfo-2.31-150300.20.7 glibc-profile-2.31-150300.20.7 glibc-utils-2.31-150300.20.1 glibc-utils-debuginfo-2.31-150300.20.1 glibc-utils-src-debugsource-2.31-150300.20.1 libcrypt1-4.4.15-150300.4.2.41 libcrypt1-debuginfo-4.4.15-150300.4.2.41 libminizip1-1.2.11-3.26.10 libminizip1-debuginfo-1.2.11-3.26.10 libxcrypt-debugsource-4.4.15-150300.4.2.41 libxcrypt-devel-4.4.15-150300.4.2.41 libxcrypt-devel-static-4.4.15-150300.4.2.41 libz1-1.2.11-3.26.10 libz1-debuginfo-1.2.11-3.26.10 minizip-devel-1.2.11-3.26.10 nscd-2.31-150300.20.7 nscd-debuginfo-2.31-150300.20.7 zlib-debugsource-1.2.11-3.26.10 zlib-devel-1.2.11-3.26.10 zlib-devel-static-1.2.11-3.26.10 - openSUSE Leap 15.4 (noarch): glibc-html-2.31-150300.20.7 glibc-i18ndata-2.31-150300.20.7 glibc-info-2.31-150300.20.7 glibc-lang-2.31-150300.20.7 - openSUSE Leap 15.4 (x86_64): glibc-32bit-2.31-150300.20.7 glibc-32bit-debuginfo-2.31-150300.20.7 glibc-devel-32bit-2.31-150300.20.7 glibc-devel-32bit-debuginfo-2.31-150300.20.7 glibc-devel-static-32bit-2.31-150300.20.7 glibc-locale-base-32bit-2.31-150300.20.7 glibc-locale-base-32bit-debuginfo-2.31-150300.20.7 glibc-profile-32bit-2.31-150300.20.7 glibc-utils-32bit-2.31-150300.20.1 glibc-utils-32bit-debuginfo-2.31-150300.20.1 libcrypt1-32bit-4.4.15-150300.4.2.41 libcrypt1-32bit-debuginfo-4.4.15-150300.4.2.41 libminizip1-32bit-1.2.11-3.26.10 libminizip1-32bit-debuginfo-1.2.11-3.26.10 libxcrypt-devel-32bit-4.4.15-150300.4.2.41 libz1-32bit-1.2.11-3.26.10 libz1-32bit-debuginfo-1.2.11-3.26.10 zlib-devel-32bit-1.2.11-3.26.10 zlib-devel-static-32bit-1.2.11-3.26.10 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): glibc-2.31-150300.20.7 glibc-debuginfo-2.31-150300.20.7 glibc-debugsource-2.31-150300.20.7 glibc-devel-2.31-150300.20.7 glibc-devel-debuginfo-2.31-150300.20.7 glibc-devel-static-2.31-150300.20.7 glibc-extra-2.31-150300.20.7 glibc-extra-debuginfo-2.31-150300.20.7 glibc-locale-2.31-150300.20.7 glibc-locale-base-2.31-150300.20.7 glibc-locale-base-debuginfo-2.31-150300.20.7 glibc-profile-2.31-150300.20.7 glibc-utils-2.31-150300.20.1 glibc-utils-debuginfo-2.31-150300.20.1 glibc-utils-src-debugsource-2.31-150300.20.1 libcrypt1-4.4.15-150300.4.2.41 libcrypt1-debuginfo-4.4.15-150300.4.2.41 libminizip1-1.2.11-3.26.10 libminizip1-debuginfo-1.2.11-3.26.10 libopenssl-1_1-devel-1.1.1d-11.43.1 libopenssl1_1-1.1.1d-11.43.1 libopenssl1_1-debuginfo-1.1.1d-11.43.1 libopenssl1_1-hmac-1.1.1d-11.43.1 libxcrypt-debugsource-4.4.15-150300.4.2.41 libxcrypt-devel-4.4.15-150300.4.2.41 libxcrypt-devel-static-4.4.15-150300.4.2.41 libz1-1.2.11-3.26.10 libz1-debuginfo-1.2.11-3.26.10 linux-glibc-devel-5.3-3.2.10 minizip-devel-1.2.11-3.26.10 nscd-2.31-150300.20.7 nscd-debuginfo-2.31-150300.20.7 openssl-1_1-1.1.1d-11.43.1 openssl-1_1-debuginfo-1.1.1d-11.43.1 openssl-1_1-debugsource-1.1.1d-11.43.1 zlib-debugsource-1.2.11-3.26.10 zlib-devel-1.2.11-3.26.10 zlib-devel-static-1.2.11-3.26.10 - openSUSE Leap 15.3 (x86_64): glibc-32bit-2.31-150300.20.7 glibc-32bit-debuginfo-2.31-150300.20.7 glibc-devel-32bit-2.31-150300.20.7 glibc-devel-32bit-debuginfo-2.31-150300.20.7 glibc-devel-static-32bit-2.31-150300.20.7 glibc-locale-base-32bit-2.31-150300.20.7 glibc-locale-base-32bit-debuginfo-2.31-150300.20.7 glibc-profile-32bit-2.31-150300.20.7 glibc-utils-32bit-2.31-150300.20.1 glibc-utils-32bit-debuginfo-2.31-150300.20.1 libcrypt1-32bit-4.4.15-150300.4.2.41 libcrypt1-32bit-debuginfo-4.4.15-150300.4.2.41 libminizip1-32bit-1.2.11-3.26.10 libminizip1-32bit-debuginfo-1.2.11-3.26.10 libopenssl-1_1-devel-32bit-1.1.1d-11.43.1 libopenssl1_1-32bit-1.1.1d-11.43.1 libopenssl1_1-32bit-debuginfo-1.1.1d-11.43.1 libopenssl1_1-hmac-32bit-1.1.1d-11.43.1 libxcrypt-devel-32bit-4.4.15-150300.4.2.41 libz1-32bit-1.2.11-3.26.10 libz1-32bit-debuginfo-1.2.11-3.26.10 zlib-devel-32bit-1.2.11-3.26.10 zlib-devel-static-32bit-1.2.11-3.26.10 - openSUSE Leap 15.3 (noarch): glibc-html-2.31-150300.20.7 glibc-i18ndata-2.31-150300.20.7 glibc-info-2.31-150300.20.7 glibc-lang-2.31-150300.20.7 openssl-1_1-doc-1.1.1d-11.43.1 References: https://bugzilla.suse.com/1182959 https://bugzilla.suse.com/1195149 https://bugzilla.suse.com/1195792 https://bugzilla.suse.com/1195856

1 0

openSUSE-SU-2022:0856-1: important: Security update for openssl-1_0_0
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for openssl-1_0_0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0856-1 Rating: important References: #1196877 Cross-References: CVE-2022-0778 CVSS scores: CVE-2022-0778 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openssl-1_0_0 fixes the following issues: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-856=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-856=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libopenssl-1_0_0-devel-1.0.2p-3.49.1 libopenssl10-1.0.2p-3.49.1 libopenssl10-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-1.0.2p-3.49.1 libopenssl1_0_0-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-hmac-1.0.2p-3.49.1 libopenssl1_0_0-steam-1.0.2p-3.49.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-1.0.2p-3.49.1 openssl-1_0_0-cavs-1.0.2p-3.49.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-debugsource-1.0.2p-3.49.1 - openSUSE Leap 15.4 (noarch): openssl-1_0_0-doc-1.0.2p-3.49.1 - openSUSE Leap 15.4 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-3.49.1 libopenssl1_0_0-32bit-1.0.2p-3.49.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-hmac-32bit-1.0.2p-3.49.1 libopenssl1_0_0-steam-32bit-1.0.2p-3.49.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-3.49.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libopenssl-1_0_0-devel-1.0.2p-3.49.1 libopenssl10-1.0.2p-3.49.1 libopenssl10-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-1.0.2p-3.49.1 libopenssl1_0_0-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-hmac-1.0.2p-3.49.1 libopenssl1_0_0-steam-1.0.2p-3.49.1 libopenssl1_0_0-steam-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-1.0.2p-3.49.1 openssl-1_0_0-cavs-1.0.2p-3.49.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-debuginfo-1.0.2p-3.49.1 openssl-1_0_0-debugsource-1.0.2p-3.49.1 - openSUSE Leap 15.3 (noarch): openssl-1_0_0-doc-1.0.2p-3.49.1 - openSUSE Leap 15.3 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-3.49.1 libopenssl1_0_0-32bit-1.0.2p-3.49.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-3.49.1 libopenssl1_0_0-hmac-32bit-1.0.2p-3.49.1 libopenssl1_0_0-steam-32bit-1.0.2p-3.49.1 libopenssl1_0_0-steam-32bit-debuginfo-1.0.2p-3.49.1 References: https://www.suse.com/security/cve/CVE-2022-0778.html https://bugzilla.suse.com/1196877

1 0

openSUSE-SU-2022:0847-1: important: Security update for php7
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0847-1 Rating: important References: #1196252 Cross-References: CVE-2021-21708 CVSS scores: CVE-2021-21708 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-21708 (SUSE): 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2021-21708: Fixed a memory corruption issue when processing integers from an untrusted source (bsc#1196252). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-847=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-847=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): php7-firebird-7.4.6-3.35.1 php7-firebird-debuginfo-7.4.6-3.35.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.35.1 apache2-mod_php7-debuginfo-7.4.6-3.35.1 php7-7.4.6-3.35.1 php7-bcmath-7.4.6-3.35.1 php7-bcmath-debuginfo-7.4.6-3.35.1 php7-bz2-7.4.6-3.35.1 php7-bz2-debuginfo-7.4.6-3.35.1 php7-calendar-7.4.6-3.35.1 php7-calendar-debuginfo-7.4.6-3.35.1 php7-ctype-7.4.6-3.35.1 php7-ctype-debuginfo-7.4.6-3.35.1 php7-curl-7.4.6-3.35.1 php7-curl-debuginfo-7.4.6-3.35.1 php7-dba-7.4.6-3.35.1 php7-dba-debuginfo-7.4.6-3.35.1 php7-debuginfo-7.4.6-3.35.1 php7-debugsource-7.4.6-3.35.1 php7-devel-7.4.6-3.35.1 php7-dom-7.4.6-3.35.1 php7-dom-debuginfo-7.4.6-3.35.1 php7-embed-7.4.6-3.35.1 php7-embed-debuginfo-7.4.6-3.35.1 php7-enchant-7.4.6-3.35.1 php7-enchant-debuginfo-7.4.6-3.35.1 php7-exif-7.4.6-3.35.1 php7-exif-debuginfo-7.4.6-3.35.1 php7-fastcgi-7.4.6-3.35.1 php7-fastcgi-debuginfo-7.4.6-3.35.1 php7-fileinfo-7.4.6-3.35.1 php7-fileinfo-debuginfo-7.4.6-3.35.1 php7-firebird-7.4.6-3.35.1 php7-firebird-debuginfo-7.4.6-3.35.1 php7-fpm-7.4.6-3.35.1 php7-fpm-debuginfo-7.4.6-3.35.1 php7-ftp-7.4.6-3.35.1 php7-ftp-debuginfo-7.4.6-3.35.1 php7-gd-7.4.6-3.35.1 php7-gd-debuginfo-7.4.6-3.35.1 php7-gettext-7.4.6-3.35.1 php7-gettext-debuginfo-7.4.6-3.35.1 php7-gmp-7.4.6-3.35.1 php7-gmp-debuginfo-7.4.6-3.35.1 php7-iconv-7.4.6-3.35.1 php7-iconv-debuginfo-7.4.6-3.35.1 php7-intl-7.4.6-3.35.1 php7-intl-debuginfo-7.4.6-3.35.1 php7-json-7.4.6-3.35.1 php7-json-debuginfo-7.4.6-3.35.1 php7-ldap-7.4.6-3.35.1 php7-ldap-debuginfo-7.4.6-3.35.1 php7-mbstring-7.4.6-3.35.1 php7-mbstring-debuginfo-7.4.6-3.35.1 php7-mysql-7.4.6-3.35.1 php7-mysql-debuginfo-7.4.6-3.35.1 php7-odbc-7.4.6-3.35.1 php7-odbc-debuginfo-7.4.6-3.35.1 php7-opcache-7.4.6-3.35.1 php7-opcache-debuginfo-7.4.6-3.35.1 php7-openssl-7.4.6-3.35.1 php7-openssl-debuginfo-7.4.6-3.35.1 php7-pcntl-7.4.6-3.35.1 php7-pcntl-debuginfo-7.4.6-3.35.1 php7-pdo-7.4.6-3.35.1 php7-pdo-debuginfo-7.4.6-3.35.1 php7-pgsql-7.4.6-3.35.1 php7-pgsql-debuginfo-7.4.6-3.35.1 php7-phar-7.4.6-3.35.1 php7-phar-debuginfo-7.4.6-3.35.1 php7-posix-7.4.6-3.35.1 php7-posix-debuginfo-7.4.6-3.35.1 php7-readline-7.4.6-3.35.1 php7-readline-debuginfo-7.4.6-3.35.1 php7-shmop-7.4.6-3.35.1 php7-shmop-debuginfo-7.4.6-3.35.1 php7-snmp-7.4.6-3.35.1 php7-snmp-debuginfo-7.4.6-3.35.1 php7-soap-7.4.6-3.35.1 php7-soap-debuginfo-7.4.6-3.35.1 php7-sockets-7.4.6-3.35.1 php7-sockets-debuginfo-7.4.6-3.35.1 php7-sodium-7.4.6-3.35.1 php7-sodium-debuginfo-7.4.6-3.35.1 php7-sqlite-7.4.6-3.35.1 php7-sqlite-debuginfo-7.4.6-3.35.1 php7-sysvmsg-7.4.6-3.35.1 php7-sysvmsg-debuginfo-7.4.6-3.35.1 php7-sysvsem-7.4.6-3.35.1 php7-sysvsem-debuginfo-7.4.6-3.35.1 php7-sysvshm-7.4.6-3.35.1 php7-sysvshm-debuginfo-7.4.6-3.35.1 php7-test-7.4.6-3.35.1 php7-tidy-7.4.6-3.35.1 php7-tidy-debuginfo-7.4.6-3.35.1 php7-tokenizer-7.4.6-3.35.1 php7-tokenizer-debuginfo-7.4.6-3.35.1 php7-xmlreader-7.4.6-3.35.1 php7-xmlreader-debuginfo-7.4.6-3.35.1 php7-xmlrpc-7.4.6-3.35.1 php7-xmlrpc-debuginfo-7.4.6-3.35.1 php7-xmlwriter-7.4.6-3.35.1 php7-xmlwriter-debuginfo-7.4.6-3.35.1 php7-xsl-7.4.6-3.35.1 php7-xsl-debuginfo-7.4.6-3.35.1 php7-zip-7.4.6-3.35.1 php7-zip-debuginfo-7.4.6-3.35.1 php7-zlib-7.4.6-3.35.1 php7-zlib-debuginfo-7.4.6-3.35.1 References: https://www.suse.com/security/cve/CVE-2021-21708.html https://bugzilla.suse.com/1196252

1 0

openSUSE-RU-2022:0848-1: moderate: Recommended update for kiwi-templates-JeOS
by maintenance＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Recommended Update: Recommended update for kiwi-templates-JeOS ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0848-1 Rating: moderate References: #1194484 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kiwi-templates-JeOS fixes the following issues: - Fix /etc/machine-id setup by appending 'rw' to the default boot options (bsc#1194484) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-848=1 Package List: - openSUSE Leap 15.3 (noarch): kiwi-templates-JeOS-15.3-150300.4.7.1 References: https://bugzilla.suse.com/1194484

1 0

openSUSE-RU-2022:0849-1: important: Recommended update for python-kiwi
by maintenance＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0849-1 Rating: important References: #1196644 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kiwi fixes the following issues: - Don't exit the script on deprecated function use (bsc#1196644) * The "exit 0" stops processing of the calling script with a success exit code, which leads to incomplete and broken images. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-849=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): dracut-kiwi-lib-9.24.16-3.47.1 dracut-kiwi-live-9.24.16-3.47.1 dracut-kiwi-oem-dump-9.24.16-3.47.1 dracut-kiwi-oem-repart-9.24.16-3.47.1 dracut-kiwi-overlay-9.24.16-3.47.1 kiwi-man-pages-9.24.16-3.47.1 kiwi-systemdeps-9.24.16-3.47.1 kiwi-systemdeps-bootloaders-9.24.16-3.47.1 kiwi-systemdeps-containers-9.24.16-3.47.1 kiwi-systemdeps-core-9.24.16-3.47.1 kiwi-systemdeps-disk-images-9.24.16-3.47.1 kiwi-systemdeps-filesystems-9.24.16-3.47.1 kiwi-systemdeps-image-validation-9.24.16-3.47.1 kiwi-systemdeps-iso-media-9.24.16-3.47.1 kiwi-tools-9.24.16-3.47.1 kiwi-tools-debuginfo-9.24.16-3.47.1 python-kiwi-debugsource-9.24.16-3.47.1 python3-kiwi-9.24.16-3.47.1 - openSUSE Leap 15.3 (x86_64): kiwi-pxeboot-9.24.16-3.47.1 References: https://bugzilla.suse.com/1196644

1 0

openSUSE-SU-2022:0843-1: moderate: Security update for rust, rust1.58, rust1.59
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for rust, rust1.58, rust1.59 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0843-1 Rating: moderate References: #1194767 Cross-References: CVE-2022-21658 CVSS scores: CVE-2022-21658 (NVD) : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-21658 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rust, rust1.58, rust1.59 fixes the following issues: This update provides both rust1.58 and rust1.59. Changes in rust1.58: - Add recommends for GCC for installs to be able to link. - Add suggests for lld/clang which are faster than gcc for linking to allow users choice on what they use. - CVE-2022-21658: Resolve race condition in std::fs::remove_dir_all (bsc#1194767) Version 1.58.0 (2022-01-13) ========================== Language -------- - [Format strings can now capture arguments simply by writing `{ident}` in the string.][90473] This works in all macros accepting format strings. Support for this in `panic!` (`panic!("{ident}")`) requires the 2021 edition; panic invocations in previous editions that appear to be trying to use this will result in a warning lint about not having the intended effect. - [`*const T` pointers can now be dereferenced in const contexts.][89551] - [The rules for when a generic struct implements `Unsize` have been relaxed.][90417] Compiler -------- - [Add LLVM CFI support to the Rust compiler][89652] - [Stabilize -Z strip as -C strip][90058]. Note that while release builds already don't add debug symbols for the code you compile, the compiled standard library that ships with Rust includes debug symbols, so you may want to use the `strip` option to remove these symbols to produce smaller release binaries. Note that this release only includes support in rustc, not directly in cargo. - [Add support for LLVM coverage mapping format versions 5 and 6][91207] - [Emit LLVM optimization remarks when enabled with `-Cremark`][90833] - [Update the minimum external LLVM to 12][90175] - [Add `x86_64-unknown-none` at Tier 3*][89062] - [Build musl dist artifacts with debuginfo enabled][90733]. When building release binaries using musl, you may want to use the newly stabilized strip option to remove these debug symbols, reducing the size of your binaries. - [Don't abort compilation after giving a lint error][87337] - [Error messages point at the source of trait bound obligations in more places][89580] \* Refer to Rust's [platform support page][platform-support-doc] for more information on Rust's tiered platform support. Libraries --------- - [All remaining functions in the standard library have `#[must_use]` annotations where appropriate][89692], producing a warning when ignoring their return value. This helps catch mistakes such as expecting a function to mutate a value in place rather than return a new value. - [Paths are automatically canonicalized on Windows for operations that support it][89174] - [Re-enable debug checks for `copy` and `copy_nonoverlapping`][90041] - [Implement `RefUnwindSafe` for `Rc<T>`][87467] - [Make RSplit<T, P>: Clone not require T: Clone][90117] - [Implement `Termination` for `Result<Infallible, E>`][88601]. This allows writing `fn main() -> Result<Infallible, ErrorType>`, for a program whose successful exits never involve returning from `main` (for instance, a program that calls `exit`, or that uses `exec` to run another program). Stabilized APIs --------------- - [`Metadata::is_symlink`] - [`Path::is_symlink`] - [`{integer}::saturating_div`] - [`Option::unwrap_unchecked`] - [`Result::unwrap_unchecked`] - [`Result::unwrap_err_unchecked`] - [`NonZero{unsigned}::is_power_of_two`] - [`File::options`] These APIs are now usable in const contexts: - [`Duration::new`] - [`Duration::checked_add`] - [`Duration::saturating_add`] - [`Duration::checked_sub`] - [`Duration::saturating_sub`] - [`Duration::checked_mul`] - [`Duration::saturating_mul`] - [`Duration::checked_div`] - [`MaybeUninit::as_ptr`] - [`MaybeUninit::as_mut_ptr`] - [`MaybeUninit::assume_init`] - [`MaybeUninit::assume_init_ref`] Cargo ----- - [Add --message-format for install command][cargo/10107] - [Warn when alias shadows external subcommand][cargo/10082] Rustdoc ------- - [Show all Deref implementations recursively in rustdoc][90183] - [Use computed visibility in rustdoc][88447] Compatibility Notes ------------------- - [Try all stable method candidates first before trying unstable ones][90329]. This change ensures that adding new nightly-only methods to the Rust standard library will not break code invoking methods of the same name from traits outside the standard library. - Windows: [`std::process::Command` will no longer search the current directory for executables.][87704] - [All proc-macro backward-compatibility lints are now deny-by-default.][88041] - [proc_macro: Append .0 to unsuffixed float if it would otherwise become int token][90297] - [Refactor weak symbols in std::sys::unix][90846]. This optimizes accesses to glibc functions, by avoiding the use of dlopen. This does not increase the [minimum expected version of glibc](https://doc.rust-lang.org/nightly/rustc/platform-support.html). However, software distributions that use symbol versions to detect library dependencies, and which take weak symbols into account in that analysis, may detect rust binaries as requiring newer versions of glibc. - [rustdoc now rejects some unexpected semicolons in doctests][91026] Version 1.59.0 (2022-02-24) ========================== Language -------- - [Stabilize default arguments for const generics][90207] - [Stabilize destructuring assignment][90521] - [Relax private in public lint on generic bounds and where clauses of trait impls][90586] - [Stabilize asm! and global_asm! for x86, x86_64, ARM, Aarch64, and RISC-V][91728] Compiler -------- - [Stabilize new symbol mangling format, leaving it opt-in (-Csymbol-mangling-version=v0)][90128] - [Emit LLVM optimization remarks when enabled with `-Cremark`][90833] - [Fix sparc64 ABI for aggregates with floating point members][91003] - [Warn when a `#[test]`-like built-in attribute macro is present multiple times.][91172] - [Add support for riscv64gc-unknown-freebsd][91284] - [Stabilize `-Z emit-future-incompat` as `--json future-incompat`][91535] Libraries --------- - [Remove unnecessary bounds for some Hash{Map,Set} methods][91593] Stabilized APIs --------------- - [`std::thread::available_parallelism`][available_parallelism] - [`Result::copied`][result-copied] - [`Result::cloned`][result-cloned] - [`arch::asm!`][asm] - [`arch::global_asm!`][global_asm] - [`ops::ControlFlow::is_break`][is_break] - [`ops::ControlFlow::is_continue`][is_continue] - [`TryFrom<char> for u8`][try_from_char_u8] - [`char::TryFromCharError`][try_from_char_err] implementing `Clone`, `Debug`, `Display`, `PartialEq`, `Copy`, `Eq`, `Error` - [`iter::zip`][zip] - [`NonZeroU8::is_power_of_two`][is_power_of_two8] - [`NonZeroU16::is_power_of_two`][is_power_of_two16] - [`NonZeroU32::is_power_of_two`][is_power_of_two32] - [`NonZeroU64::is_power_of_two`][is_power_of_two64] - [`NonZeroU128::is_power_of_two`][is_power_of_two128] - [`DoubleEndedIterator for ToLowercase`][lowercase] - [`DoubleEndedIterator for ToUppercase`][uppercase] - [`TryFrom<&mut [T]> for [T; N]`][tryfrom_ref_arr] - [`UnwindSafe for Once`][unwindsafe_once] - [`RefUnwindSafe for Once`][refunwindsafe_once] - [armv8 neon intrinsics for aarch64][stdarch/1266] Const-stable: - [`mem::MaybeUninit::as_ptr`][muninit_ptr] - [`mem::MaybeUninit::assume_init`][muninit_init] - [`mem::MaybeUninit::assume_init_ref`][muninit_init_ref] - [`ffi::CStr::from_bytes_with_nul_unchecked`][cstr_from_bytes] Cargo ----- - [Stabilize the `strip` profile option][cargo/10088] - [Stabilize future-incompat-report][cargo/10165] - [Support abbreviating `--release` as `-r`][cargo/10133] - [Support `term.quiet` configuration][cargo/10152] - [Remove `--host` from cargo {publish,search,login}][cargo/10145] Compatibility Notes ------------------- - [Refactor weak symbols in std::sys::unix][90846] This may add new, versioned, symbols when building with a newer glibc, as the standard library uses weak linkage rather than dynamically attempting to load certain symbols at runtime. - [Deprecate crate_type and crate_name nested inside `#![cfg_attr]`][83744] This adds a future compatibility lint to supporting the use of cfg_attr wrapping either crate_type or crate_name specification within Rust files; it is recommended that users migrate to setting the equivalent command line flags. - [Remove effect of `#[no_link]` attribute on name resolution][92034] This may expose new names, leading to conflicts with preexisting names in a given namespace and a compilation failure. - [Cargo will document libraries before binaries.][cargo/10172] - [Respect doc=false in dependencies, not just the root crate][cargo/10201] - [Weaken guarantee around advancing underlying iterators in zip][83791] - [Make split_inclusive() on an empty slice yield an empty output][89825] - [Update std::env::temp_dir to use GetTempPath2 on Windows when available.][89999] Changes in rust wrapper package: - Update to version 1.59.0 - for details see the rust1.59 package - Update package description to help users choose what tooling to install. - Provide rust+cargo by cargo: all cargo<n> package provide this symbol too. Having the meta package provide it allows OBS to have a generic prefernece on the meta package for all packages 'just' requiring rust+cargo. - Update to version 1.58.0 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-843=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-843=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cargo-1.59.0-150300.21.20.1 rust-1.59.0-150300.21.20.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cargo-1.59.0-150300.21.20.1 cargo1.58-1.58.0-150300.7.3.1 cargo1.58-debuginfo-1.58.0-150300.7.3.1 cargo1.59-1.59.0-150300.7.4.2 cargo1.59-debuginfo-1.59.0-150300.7.4.2 rust-1.59.0-150300.21.20.1 rust1.58-1.58.0-150300.7.3.1 rust1.58-debuginfo-1.58.0-150300.7.3.1 rust1.59-1.59.0-150300.7.4.2 rust1.59-debuginfo-1.59.0-150300.7.4.2 References: https://www.suse.com/security/cve/CVE-2022-21658.html https://bugzilla.suse.com/1194767

1 0

openSUSE-SU-2022:0841-1: important: Security update for libqt5-qtbase
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0841-1 Rating: important References: #1195386 #1196501 Cross-References: CVE-2022-23853 CVE-2022-25255 CVSS scores: CVE-2022-23853 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-23853 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-25255 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-25255 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libqt5-qtbase fixes the following issues: - CVE-2022-23853, CVE-2022-25255: Avoid unintentionally using binaries from CWD (bsc#1195386, bsc#1196501). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-841=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libQt5Bootstrap-devel-static-5.12.7-4.17.1 libQt5Concurrent-devel-5.12.7-4.17.1 libQt5Concurrent5-5.12.7-4.17.1 libQt5Concurrent5-debuginfo-5.12.7-4.17.1 libQt5Core-devel-5.12.7-4.17.1 libQt5Core5-5.12.7-4.17.1 libQt5Core5-debuginfo-5.12.7-4.17.1 libQt5DBus-devel-5.12.7-4.17.1 libQt5DBus-devel-debuginfo-5.12.7-4.17.1 libQt5DBus5-5.12.7-4.17.1 libQt5DBus5-debuginfo-5.12.7-4.17.1 libQt5Gui-devel-5.12.7-4.17.1 libQt5Gui5-5.12.7-4.17.1 libQt5Gui5-debuginfo-5.12.7-4.17.1 libQt5KmsSupport-devel-static-5.12.7-4.17.1 libQt5Network-devel-5.12.7-4.17.1 libQt5Network5-5.12.7-4.17.1 libQt5Network5-debuginfo-5.12.7-4.17.1 libQt5OpenGL-devel-5.12.7-4.17.1 libQt5OpenGL5-5.12.7-4.17.1 libQt5OpenGL5-debuginfo-5.12.7-4.17.1 libQt5OpenGLExtensions-devel-static-5.12.7-4.17.1 libQt5PlatformHeaders-devel-5.12.7-4.17.1 libQt5PlatformSupport-devel-static-5.12.7-4.17.1 libQt5PrintSupport-devel-5.12.7-4.17.1 libQt5PrintSupport5-5.12.7-4.17.1 libQt5PrintSupport5-debuginfo-5.12.7-4.17.1 libQt5Sql-devel-5.12.7-4.17.1 libQt5Sql5-5.12.7-4.17.1 libQt5Sql5-debuginfo-5.12.7-4.17.1 libQt5Sql5-mysql-5.12.7-4.17.1 libQt5Sql5-mysql-debuginfo-5.12.7-4.17.1 libQt5Sql5-postgresql-5.12.7-4.17.1 libQt5Sql5-postgresql-debuginfo-5.12.7-4.17.1 libQt5Sql5-sqlite-5.12.7-4.17.1 libQt5Sql5-sqlite-debuginfo-5.12.7-4.17.1 libQt5Sql5-unixODBC-5.12.7-4.17.1 libQt5Sql5-unixODBC-debuginfo-5.12.7-4.17.1 libQt5Test-devel-5.12.7-4.17.1 libQt5Test5-5.12.7-4.17.1 libQt5Test5-debuginfo-5.12.7-4.17.1 libQt5Widgets-devel-5.12.7-4.17.1 libQt5Widgets5-5.12.7-4.17.1 libQt5Widgets5-debuginfo-5.12.7-4.17.1 libQt5Xml-devel-5.12.7-4.17.1 libQt5Xml5-5.12.7-4.17.1 libQt5Xml5-debuginfo-5.12.7-4.17.1 libqt5-qtbase-common-devel-5.12.7-4.17.1 libqt5-qtbase-common-devel-debuginfo-5.12.7-4.17.1 libqt5-qtbase-debugsource-5.12.7-4.17.1 libqt5-qtbase-devel-5.12.7-4.17.1 libqt5-qtbase-examples-5.12.7-4.17.1 libqt5-qtbase-examples-debuginfo-5.12.7-4.17.1 libqt5-qtbase-platformtheme-gtk3-5.12.7-4.17.1 libqt5-qtbase-platformtheme-gtk3-debuginfo-5.12.7-4.17.1 libqt5-qtbase-platformtheme-xdgdesktopportal-5.12.7-4.17.1 libqt5-qtbase-platformtheme-xdgdesktopportal-debuginfo-5.12.7-4.17.1 - openSUSE Leap 15.3 (x86_64): libQt5Bootstrap-devel-static-32bit-5.12.7-4.17.1 libQt5Concurrent-devel-32bit-5.12.7-4.17.1 libQt5Concurrent5-32bit-5.12.7-4.17.1 libQt5Concurrent5-32bit-debuginfo-5.12.7-4.17.1 libQt5Core-devel-32bit-5.12.7-4.17.1 libQt5Core5-32bit-5.12.7-4.17.1 libQt5Core5-32bit-debuginfo-5.12.7-4.17.1 libQt5DBus-devel-32bit-5.12.7-4.17.1 libQt5DBus-devel-32bit-debuginfo-5.12.7-4.17.1 libQt5DBus5-32bit-5.12.7-4.17.1 libQt5DBus5-32bit-debuginfo-5.12.7-4.17.1 libQt5Gui-devel-32bit-5.12.7-4.17.1 libQt5Gui5-32bit-5.12.7-4.17.1 libQt5Gui5-32bit-debuginfo-5.12.7-4.17.1 libQt5Network-devel-32bit-5.12.7-4.17.1 libQt5Network5-32bit-5.12.7-4.17.1 libQt5Network5-32bit-debuginfo-5.12.7-4.17.1 libQt5OpenGL-devel-32bit-5.12.7-4.17.1 libQt5OpenGL5-32bit-5.12.7-4.17.1 libQt5OpenGL5-32bit-debuginfo-5.12.7-4.17.1 libQt5OpenGLExtensions-devel-static-32bit-5.12.7-4.17.1 libQt5PlatformSupport-devel-static-32bit-5.12.7-4.17.1 libQt5PrintSupport-devel-32bit-5.12.7-4.17.1 libQt5PrintSupport5-32bit-5.12.7-4.17.1 libQt5PrintSupport5-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql-devel-32bit-5.12.7-4.17.1 libQt5Sql5-32bit-5.12.7-4.17.1 libQt5Sql5-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql5-mysql-32bit-5.12.7-4.17.1 libQt5Sql5-mysql-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql5-postgresql-32bit-5.12.7-4.17.1 libQt5Sql5-postgresql-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql5-sqlite-32bit-5.12.7-4.17.1 libQt5Sql5-sqlite-32bit-debuginfo-5.12.7-4.17.1 libQt5Sql5-unixODBC-32bit-5.12.7-4.17.1 libQt5Sql5-unixODBC-32bit-debuginfo-5.12.7-4.17.1 libQt5Test-devel-32bit-5.12.7-4.17.1 libQt5Test5-32bit-5.12.7-4.17.1 libQt5Test5-32bit-debuginfo-5.12.7-4.17.1 libQt5Widgets-devel-32bit-5.12.7-4.17.1 libQt5Widgets5-32bit-5.12.7-4.17.1 libQt5Widgets5-32bit-debuginfo-5.12.7-4.17.1 libQt5Xml-devel-32bit-5.12.7-4.17.1 libQt5Xml5-32bit-5.12.7-4.17.1 libQt5Xml5-32bit-debuginfo-5.12.7-4.17.1 libqt5-qtbase-examples-32bit-5.12.7-4.17.1 libqt5-qtbase-examples-32bit-debuginfo-5.12.7-4.17.1 - openSUSE Leap 15.3 (noarch): libQt5Core-private-headers-devel-5.12.7-4.17.1 libQt5DBus-private-headers-devel-5.12.7-4.17.1 libQt5Gui-private-headers-devel-5.12.7-4.17.1 libQt5KmsSupport-private-headers-devel-5.12.7-4.17.1 libQt5Network-private-headers-devel-5.12.7-4.17.1 libQt5OpenGL-private-headers-devel-5.12.7-4.17.1 libQt5PlatformSupport-private-headers-devel-5.12.7-4.17.1 libQt5PrintSupport-private-headers-devel-5.12.7-4.17.1 libQt5Sql-private-headers-devel-5.12.7-4.17.1 libQt5Test-private-headers-devel-5.12.7-4.17.1 libQt5Widgets-private-headers-devel-5.12.7-4.17.1 libqt5-qtbase-private-headers-devel-5.12.7-4.17.1 References: https://www.suse.com/security/cve/CVE-2022-23853.html https://www.suse.com/security/cve/CVE-2022-25255.html https://bugzilla.suse.com/1195386 https://bugzilla.suse.com/1196501

1 0

openSUSE-SU-2022:0845-1: moderate: Security update for chrony
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0845-1 Rating: moderate References: #1099272 #1115529 #1128846 #1162964 #1172113 #1173277 #1174075 #1174911 #1180689 #1181826 #1187906 #1190926 #1194229 SLE-17334 Cross-References: CVE-2020-14367 CVSS scores: CVE-2020-14367 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVE-2020-14367 (SUSE): 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability, contains one feature and has 12 fixes is now available. Description: This update for chrony fixes the following issues: Chrony was updated to 4.1, bringing features and bugfixes. Update to 4.1 * Add support for NTS servers specified by IP address (matching Subject Alternative Name in server certificate) * Add source-specific configuration of trusted certificates * Allow multiple files and directories with trusted certificates * Allow multiple pairs of server keys and certificates * Add copy option to server/pool directive * Increase PPS lock limit to 40% of pulse interval * Perform source selection immediately after loading dump files * Reload dump files for addresses negotiated by NTS-KE server * Update seccomp filter and add less restrictive level * Restart ongoing name resolution on online command * Fix dump files to not include uncorrected offset * Fix initstepslew to accept time from own NTP clients * Reset NTP address and port when no longer negotiated by NTS-KE server - Ensure the correct pool packages are installed for openSUSE and SLE (bsc#1180689). - Fix pool package dependencies, so that SLE prefers chrony-pool-suse over chrony-pool-empty. (bsc#1194229) - Enable syscallfilter unconditionally [bsc#1181826]. Update to 4.0 - Enhancements - Add support for Network Time Security (NTS) authentication - Add support for AES-CMAC keys (AES128, AES256) with Nettle - Add authselectmode directive to control selection of unauthenticated sources - Add binddevice, bindacqdevice, bindcmddevice directives - Add confdir directive to better support fragmented configuration - Add sourcedir directive and "reload sources" command to support dynamic NTP sources specified in files - Add clockprecision directive - Add dscp directive to set Differentiated Services Code Point (DSCP) - Add -L option to limit log messages by severity - Add -p option to print whole configuration with included files - Add -U option to allow start under non-root user - Allow maxsamples to be set to 1 for faster update with -q/-Q option - Avoid replacing NTP sources with sources that have unreachable address - Improve pools to repeat name resolution to get "maxsources" sources - Improve source selection with trusted sources - Improve NTP loop test to prevent synchronisation to itself - Repeat iburst when NTP source is switched from offline state to online - Update clock synchronisation status and leap status more frequently - Update seccomp filter - Add "add pool" command - Add "reset sources" command to drop all measurements - Add authdata command to print details about NTP authentication - Add selectdata command to print details about source selection - Add -N option and sourcename command to print original names of sources - Add -a option to some commands to print also unresolved sources - Add -k, -p, -r options to clients command to select, limit, reset data - Bug fixes - Don��t set interface for NTP responses to allow asymmetric routing - Handle RTCs that don��t support interrupts - Respond to command requests with correct address on multihomed hosts - Removed features - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320) - Drop support for long (non-standard) MACs in NTPv4 packets (chrony 2.x clients using non-MD5/SHA1 keys need to use option "version 3") - Drop support for line editing with GNU Readline - By default we don't write log files but log to journald, so only recommend logrotate. - Adjust and rename the sysconfig file, so that it matches the expectations of chronyd.service (bsc#1173277). Update to 3.5.1: * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911) - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075) - Use iburst in the default pool statements to speed up initial synchronisation (bsc#1172113). Update to 3.5: + Add support for more accurate reading of PHC on Linux 5.0 + Add support for hardware timestamping on interfaces with read-only timestamping configuration + Add support for memory locking and real-time priority on FreeBSD, NetBSD, Solaris + Update seccomp filter to work on more architectures + Validate refclock driver options + Fix bindaddress directive on FreeBSD + Fix transposition of hardware RX timestamp on Linux 4.13 and later + Fix building on non-glibc systems - Fix location of helper script in chrony-dnssrv@.service (bsc#1128846). - Read runtime servers from /var/run/netconfig/chrony.servers to fix bsc#1099272. - Move chrony-helper to /usr/lib/chrony/helper, because there should be no executables in /usr/share. Update to version 3.4 * Enhancements + Add filter option to server/pool/peer directive + Add minsamples and maxsamples options to hwtimestamp directive + Add support for faster frequency adjustments in Linux 4.19 + Change default pidfile to /var/run/chrony/chronyd.pid to allow chronyd without root privileges to remove it on exit + Disable sub-second polling intervals for distant NTP sources + Extend range of supported sub-second polling intervals + Get/set IPv4 destination/source address of NTP packets on FreeBSD + Make burst options and command useful with short polling intervals + Modify auto_offline option to activate when sending request failed + Respond from interface that received NTP request if possible + Add onoffline command to switch between online and offline state according to current system network configuration + Improve example NetworkManager dispatcher script * Bug fixes + Avoid waiting in Linux getrandom system call + Fix PPS support on FreeBSD and NetBSD Update to version 3.3 * Enhancements: + Add burst option to server/pool directive + Add stratum and tai options to refclock directive + Add support for Nettle crypto library + Add workaround for missing kernel receive timestamps on Linux + Wait for late hardware transmit timestamps + Improve source selection with unreachable sources + Improve protection against replay attacks on symmetric mode + Allow PHC refclock to use socket in /var/run/chrony + Add shutdown command to stop chronyd + Simplify format of response to manual list command + Improve handling of unknown responses in chronyc * Bug fixes: + Respond to NTPv1 client requests with zero mode + Fix -x option to not require CAP_SYS_TIME under non-root user + Fix acquisitionport directive to work with privilege separation + Fix handling of socket errors on Linux to avoid high CPU usage + Fix chronyc to not get stuck in infinite loop after clock step Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-845=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): augeas-1.10.1-3.9.1 augeas-debuginfo-1.10.1-3.9.1 augeas-debugsource-1.10.1-3.9.1 augeas-devel-1.10.1-3.9.1 augeas-lense-tests-1.10.1-3.9.1 augeas-lenses-1.10.1-3.9.1 chrony-4.1-150300.16.3.1 chrony-debuginfo-4.1-150300.16.3.1 chrony-debugsource-4.1-150300.16.3.1 libaugeas0-1.10.1-3.9.1 libaugeas0-debuginfo-1.10.1-3.9.1 - openSUSE Leap 15.3 (x86_64): augeas-devel-32bit-1.10.1-3.9.1 libaugeas0-32bit-1.10.1-3.9.1 libaugeas0-32bit-debuginfo-1.10.1-3.9.1 - openSUSE Leap 15.3 (noarch): chrony-pool-empty-4.1-150300.16.3.1 chrony-pool-openSUSE-4.1-150300.16.3.1 chrony-pool-suse-4.1-150300.16.3.1 References: https://www.suse.com/security/cve/CVE-2020-14367.html https://bugzilla.suse.com/1099272 https://bugzilla.suse.com/1115529 https://bugzilla.suse.com/1128846 https://bugzilla.suse.com/1162964 https://bugzilla.suse.com/1172113 https://bugzilla.suse.com/1173277 https://bugzilla.suse.com/1174075 https://bugzilla.suse.com/1174911 https://bugzilla.suse.com/1180689 https://bugzilla.suse.com/1181826 https://bugzilla.suse.com/1187906 https://bugzilla.suse.com/1190926 https://bugzilla.suse.com/1194229

1 0

openSUSE-SU-2022:0844-1: important: Security update for expat
by opensuse-security＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0844-1 Rating: important References: #1196025 #1196784 Cross-References: CVE-2022-25236 CVSS scores: CVE-2022-25236 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-25236 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-844=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): expat-2.2.5-3.19.1 expat-debuginfo-2.2.5-3.19.1 expat-debugsource-2.2.5-3.19.1 libexpat-devel-2.2.5-3.19.1 libexpat1-2.2.5-3.19.1 libexpat1-debuginfo-2.2.5-3.19.1 - openSUSE Leap 15.3 (x86_64): expat-32bit-debuginfo-2.2.5-3.19.1 libexpat-devel-32bit-2.2.5-3.19.1 libexpat1-32bit-2.2.5-3.19.1 libexpat1-32bit-debuginfo-2.2.5-3.19.1 References: https://www.suse.com/security/cve/CVE-2022-25236.html https://bugzilla.suse.com/1196025 https://bugzilla.suse.com/1196784

1 0

openSUSE-RU-2022:0846-1: moderate: Recommended update for log4j
by maintenance＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Recommended Update: Recommended update for log4j ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0846-1 Rating: moderate References: SLE-23508 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update ships log4j 2.17.1 to the SUSE Linux Enterprise Basesystem module. (jsc#SLE-23508) - Removed alias log4j:log4j from log4j-1.2-api, since it is not a drop-in replacement Update to 2.17.1. Fixed bugs: - JdbcAppender now uses JndiManager to access JNDI resources. JNDI is only enabled when system property log4j2.enableJndiJdbc is set to true. - Remove unused method. - ExtendedLoggerWrapper.logMessage no longer double-logs when location is requested. - log4j-to-slf4j no longer re-interpolates formatted message contents. - Correct SpringLookup package name in Interpolator. - log4j-to-slf4j takes the provided MessageFactory into account. - Fix MapLookup to lookup MapMessage before DefaultMap. - Buffered I/O checked had inverted logic in RollingFileAppenderBuidler. - Fix NPE when input is null in StrSubstitutor.replace(String, Properties). - Lookups with no prefix only read values from the configuration properties as expected. - Reduce ignored package scope of KafkaAppender. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-846=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-846=1 Package List: - openSUSE Leap 15.4 (noarch): jackson-annotations-2.10.2-3.2.1 jackson-annotations-javadoc-2.10.2-3.2.1 jackson-core-2.10.2-3.2.1 jackson-core-javadoc-2.10.2-3.2.1 jackson-databind-2.10.5.1-3.5.1 jackson-databind-javadoc-2.10.5.1-3.5.1 log4j-2.17.1-4.20.1 log4j-javadoc-2.17.1-4.20.1 log4j-jcl-2.17.1-4.20.1 log4j-slf4j-2.17.1-4.20.1 - openSUSE Leap 15.3 (noarch): jackson-annotations-2.10.2-3.2.1 jackson-annotations-javadoc-2.10.2-3.2.1 jackson-core-2.10.2-3.2.1 jackson-core-javadoc-2.10.2-3.2.1 jackson-databind-2.10.5.1-3.5.1 jackson-databind-javadoc-2.10.5.1-3.5.1 log4j-2.17.1-4.20.1 log4j-javadoc-2.17.1-4.20.1 log4j-jcl-2.17.1-4.20.1 log4j-slf4j-2.17.1-4.20.1 References:

1 0

openSUSE-RU-2022:0836-1: moderate: Recommended update for gdb
by maintenance＠opensuse.org 15 Mar '22

15 Mar '22

openSUSE Recommended Update: Recommended update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0836-1 Rating: moderate References: SLE-22287 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for gdb fixes the following issues: - Support for new IBM Z Hardware - GDB Part (jsc#SLE-22287) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-836=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-836=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gdb-11.1-8.30.1 gdb-debuginfo-11.1-8.30.1 gdb-debugsource-11.1-8.30.1 gdb-testresults-11.1-8.30.1 gdbserver-11.1-8.30.1 gdbserver-debuginfo-11.1-8.30.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gdb-11.1-8.30.1 gdb-debuginfo-11.1-8.30.1 gdb-debugsource-11.1-8.30.1 gdb-testresults-11.1-8.30.1 gdbserver-11.1-8.30.1 gdbserver-debuginfo-11.1-8.30.1 References:

1 0

openSUSE-RU-2022:0833-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0833-1 Rating: moderate References: #1195656 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-iscsi fixes the following issue: - Update to latest upstream, including test cleanup, minor bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-833=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-833=1 Package List: - openSUSE Leap 15.4 (aarch64): iscsiuio-0.7.8.6-150300.32.15.1 iscsiuio-debuginfo-0.7.8.6-150300.32.15.1 libopeniscsiusr0_2_0-2.1.6-150300.32.15.1 libopeniscsiusr0_2_0-debuginfo-2.1.6-150300.32.15.1 open-iscsi-2.1.6-150300.32.15.1 open-iscsi-debuginfo-2.1.6-150300.32.15.1 open-iscsi-debugsource-2.1.6-150300.32.15.1 open-iscsi-devel-2.1.6-150300.32.15.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): iscsiuio-0.7.8.6-150300.32.15.1 iscsiuio-debuginfo-0.7.8.6-150300.32.15.1 libopeniscsiusr0_2_0-2.1.6-150300.32.15.1 libopeniscsiusr0_2_0-debuginfo-2.1.6-150300.32.15.1 open-iscsi-2.1.6-150300.32.15.1 open-iscsi-debuginfo-2.1.6-150300.32.15.1 open-iscsi-debugsource-2.1.6-150300.32.15.1 open-iscsi-devel-2.1.6-150300.32.15.1 References: https://bugzilla.suse.com/1195656

1 0

openSUSE-SU-2022:0821-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0821-1 Rating: important References: #1196900 Cross-References: CVE-2022-26381 CVE-2022-26383 CVE-2022-26384 CVE-2022-26386 CVE-2022-26387 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.7.0 ESR (bsc#1196900): - CVE-2022-26383: Browser window spoof using fullscreen mode - CVE-2022-26384: iframe allow-scripts sandbox bypass - CVE-2022-26387: Time-of-check time-of-use bug when verifying add-on signatures - CVE-2022-26381: Use-after-free in text reflows - CVE-2022-26386: Temporary files downloaded to /tmp and accessible by other local users Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-821=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-821=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-branding-upstream-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-branding-upstream-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 References: https://www.suse.com/security/cve/CVE-2022-26381.html https://www.suse.com/security/cve/CVE-2022-26383.html https://www.suse.com/security/cve/CVE-2022-26384.html https://www.suse.com/security/cve/CVE-2022-26386.html https://www.suse.com/security/cve/CVE-2022-26387.html https://bugzilla.suse.com/1196900

1 0

openSUSE-SU-2022:0823-1: moderate: Security update for protobuf
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for protobuf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0823-1 Rating: moderate References: #1195258 Cross-References: CVE-2021-22570 CVSS scores: CVE-2021-22570 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-22570 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-823=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-823=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libprotobuf-lite15-3.5.0-5.5.1 libprotobuf-lite15-debuginfo-3.5.0-5.5.1 libprotobuf15-3.5.0-5.5.1 libprotobuf15-debuginfo-3.5.0-5.5.1 libprotoc15-3.5.0-5.5.1 libprotoc15-debuginfo-3.5.0-5.5.1 - openSUSE Leap 15.4 (x86_64): libprotobuf-lite15-32bit-3.5.0-5.5.1 libprotobuf-lite15-32bit-debuginfo-3.5.0-5.5.1 libprotobuf15-32bit-3.5.0-5.5.1 libprotobuf15-32bit-debuginfo-3.5.0-5.5.1 libprotoc15-32bit-3.5.0-5.5.1 libprotoc15-32bit-debuginfo-3.5.0-5.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libprotobuf-lite15-3.5.0-5.5.1 libprotobuf-lite15-debuginfo-3.5.0-5.5.1 libprotobuf15-3.5.0-5.5.1 libprotobuf15-debuginfo-3.5.0-5.5.1 libprotoc15-3.5.0-5.5.1 libprotoc15-debuginfo-3.5.0-5.5.1 - openSUSE Leap 15.3 (x86_64): libprotobuf-lite15-32bit-3.5.0-5.5.1 libprotobuf-lite15-32bit-debuginfo-3.5.0-5.5.1 libprotobuf15-32bit-3.5.0-5.5.1 libprotobuf15-32bit-debuginfo-3.5.0-5.5.1 libprotoc15-32bit-3.5.0-5.5.1 libprotoc15-32bit-debuginfo-3.5.0-5.5.1 References: https://www.suse.com/security/cve/CVE-2021-22570.html https://bugzilla.suse.com/1195258

1 0

openSUSE-SU-2022:0817-1: moderate: Security update for xstream
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for xstream ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0817-1 Rating: moderate References: #1195458 Cross-References: CVE-2021-43859 CVSS scores: CVE-2021-43859 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-43859 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xstream fixes the following issues: - CVE-2021-43859: Fixed a denial of service when unmarshalling highly recursive collections or maps (bsc#1195458). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-817=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-817=1 Package List: - openSUSE Leap 15.4 (noarch): xstream-1.4.19-3.18.2 xstream-benchmark-1.4.19-3.18.2 xstream-javadoc-1.4.19-3.18.2 xstream-parent-1.4.19-3.18.2 - openSUSE Leap 15.3 (noarch): xstream-1.4.19-3.18.2 xstream-benchmark-1.4.19-3.18.2 xstream-javadoc-1.4.19-3.18.2 xstream-parent-1.4.19-3.18.2 References: https://www.suse.com/security/cve/CVE-2021-43859.html https://bugzilla.suse.com/1195458

1 0

openSUSE-SU-2022:0816-1: moderate: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0816-1 Rating: moderate References: #1194925 #1194926 #1194927 #1194928 #1194929 #1194930 #1194931 #1194932 #1194933 #1194934 #1194935 #1194937 #1194939 #1194940 #1194941 Cross-References: CVE-2022-21248 CVE-2022-21277 CVE-2022-21282 CVE-2022-21283 CVE-2022-21291 CVE-2022-21293 CVE-2022-21294 CVE-2022-21296 CVE-2022-21299 CVE-2022-21305 CVE-2022-21340 CVE-2022-21341 CVE-2022-21360 CVE-2022-21365 CVE-2022-21366 CVSS scores: CVE-2022-21248 (NVD) : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21248 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21277 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21277 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21282 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21282 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21283 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21283 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21291 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21291 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21293 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21293 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21294 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21296 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21296 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-21299 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21299 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21305 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21305 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2022-21340 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21340 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21341 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21360 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21365 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-21366 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. (bnc#1194926) - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. (bnc#1194930) - CVE-2022-21282: Fixed Insufficient URI checks in the XSLT TransformerImpl. (bnc#1194933) - CVE-2022-21283: Fixed unexpected exception thrown in regex Pattern. (bnc#1194937) - CVE-2022-21291: Fixed Incorrect marking of writeable fields. (bnc#1194925) - CVE-2022-21293: Fixed Incomplete checks of StringBuffer and StringBuilder during deserialization. (bnc#1194935) - CVE-2022-21294: Fixed Incorrect IdentityHashMap size checks during deserialization. (bnc#1194934) - CVE-2022-21296: Fixed Incorrect access checks in XMLEntityManager. (bnc#1194932) - CVE-2022-21299: Fixed Infinite loop related to incorrect handling of newlines in XMLEntityScanner. (bnc#1194931) - CVE-2022-21305: Fixed Array indexing issues in LIRGenerator. (bnc#1194939) - CVE-2022-21340: Fixed Excessive resource use when reading JAR manifest attributes. (bnc#1194940) - CVE-2022-21341: Fixed OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream. (bnc#1194941) - CVE-2022-21360: Fixed Excessive memory allocation in BMPImageReader. (bnc#1194929) - CVE-2022-21365: Fixed Integer overflow in BMPImageReader. (bnc#1194928) - CVE-2022-21366: Fixed Excessive memory allocation in TIFF*Decompressor. (bnc#1194927) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-816=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): java-11-openjdk-11.0.14.0-3.74.2 java-11-openjdk-accessibility-11.0.14.0-3.74.2 java-11-openjdk-accessibility-debuginfo-11.0.14.0-3.74.2 java-11-openjdk-debugsource-11.0.14.0-3.74.2 java-11-openjdk-demo-11.0.14.0-3.74.2 java-11-openjdk-devel-11.0.14.0-3.74.2 java-11-openjdk-headless-11.0.14.0-3.74.2 java-11-openjdk-jmods-11.0.14.0-3.74.2 java-11-openjdk-src-11.0.14.0-3.74.2 - openSUSE Leap 15.3 (noarch): java-11-openjdk-javadoc-11.0.14.0-3.74.2 References: https://www.suse.com/security/cve/CVE-2022-21248.html https://www.suse.com/security/cve/CVE-2022-21277.html https://www.suse.com/security/cve/CVE-2022-21282.html https://www.suse.com/security/cve/CVE-2022-21283.html https://www.suse.com/security/cve/CVE-2022-21291.html https://www.suse.com/security/cve/CVE-2022-21293.html https://www.suse.com/security/cve/CVE-2022-21294.html https://www.suse.com/security/cve/CVE-2022-21296.html https://www.suse.com/security/cve/CVE-2022-21299.html https://www.suse.com/security/cve/CVE-2022-21305.html https://www.suse.com/security/cve/CVE-2022-21340.html https://www.suse.com/security/cve/CVE-2022-21341.html https://www.suse.com/security/cve/CVE-2022-21360.html https://www.suse.com/security/cve/CVE-2022-21365.html https://www.suse.com/security/cve/CVE-2022-21366.html https://bugzilla.suse.com/1194925 https://bugzilla.suse.com/1194926 https://bugzilla.suse.com/1194927 https://bugzilla.suse.com/1194928 https://bugzilla.suse.com/1194929 https://bugzilla.suse.com/1194930 https://bugzilla.suse.com/1194931 https://bugzilla.suse.com/1194932 https://bugzilla.suse.com/1194933 https://bugzilla.suse.com/1194934 https://bugzilla.suse.com/1194935 https://bugzilla.suse.com/1194937 https://bugzilla.suse.com/1194939 https://bugzilla.suse.com/1194940 https://bugzilla.suse.com/1194941

1 0

openSUSE-SU-2022:0818-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0818-1 Rating: important References: #1195255 #1196137 Cross-References: CVE-2022-23181 CVSS scores: CVE-2022-23181 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-23181 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for tomcat fixes the following issues: Security issues fixed: - CVE-2022-23181: Make calculation of session storage location more robust (bsc#1195255) - Remove log4j (bsc#1196137) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-818=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-818=1 Package List: - openSUSE Leap 15.4 (noarch): tomcat-9.0.36-19.1 tomcat-admin-webapps-9.0.36-19.1 tomcat-docs-webapp-9.0.36-19.1 tomcat-el-3_0-api-9.0.36-19.1 tomcat-embed-9.0.36-19.1 tomcat-javadoc-9.0.36-19.1 tomcat-jsp-2_3-api-9.0.36-19.1 tomcat-jsvc-9.0.36-19.1 tomcat-lib-9.0.36-19.1 tomcat-servlet-4_0-api-9.0.36-19.1 tomcat-webapps-9.0.36-19.1 - openSUSE Leap 15.3 (noarch): tomcat-9.0.36-19.1 tomcat-admin-webapps-9.0.36-19.1 tomcat-docs-webapp-9.0.36-19.1 tomcat-el-3_0-api-9.0.36-19.1 tomcat-embed-9.0.36-19.1 tomcat-javadoc-9.0.36-19.1 tomcat-jsp-2_3-api-9.0.36-19.1 tomcat-jsvc-9.0.36-19.1 tomcat-lib-9.0.36-19.1 tomcat-servlet-4_0-api-9.0.36-19.1 tomcat-webapps-9.0.36-19.1 References: https://www.suse.com/security/cve/CVE-2022-23181.html https://bugzilla.suse.com/1195255 https://bugzilla.suse.com/1196137

1 0

openSUSE-SU-2022:0815-1: moderate: Security update for flac
by opensuse-security＠opensuse.org 14 Mar '22

14 Mar '22

openSUSE Security Update: Security update for flac ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0815-1 Rating: moderate References: #1196660 Cross-References: CVE-2021-0561 CVSS scores: CVE-2021-0561 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0561 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for flac fixes the following issues: - CVE-2021-0561: Fixed out of bound write in append_to_verify_fifo_interleaved_ (bsc#1196660). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-815=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-815=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): flac-1.3.2-3.9.1 flac-debuginfo-1.3.2-3.9.1 flac-debugsource-1.3.2-3.9.1 flac-devel-1.3.2-3.9.1 libFLAC++6-1.3.2-3.9.1 libFLAC++6-debuginfo-1.3.2-3.9.1 libFLAC8-1.3.2-3.9.1 libFLAC8-debuginfo-1.3.2-3.9.1 - openSUSE Leap 15.4 (x86_64): flac-devel-32bit-1.3.2-3.9.1 libFLAC++6-32bit-1.3.2-3.9.1 libFLAC++6-32bit-debuginfo-1.3.2-3.9.1 libFLAC8-32bit-1.3.2-3.9.1 libFLAC8-32bit-debuginfo-1.3.2-3.9.1 - openSUSE Leap 15.4 (noarch): flac-doc-1.3.2-3.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): flac-1.3.2-3.9.1 flac-debuginfo-1.3.2-3.9.1 flac-debugsource-1.3.2-3.9.1 flac-devel-1.3.2-3.9.1 libFLAC++6-1.3.2-3.9.1 libFLAC++6-debuginfo-1.3.2-3.9.1 libFLAC8-1.3.2-3.9.1 libFLAC8-debuginfo-1.3.2-3.9.1 - openSUSE Leap 15.3 (x86_64): flac-devel-32bit-1.3.2-3.9.1 libFLAC++6-32bit-1.3.2-3.9.1 libFLAC++6-32bit-debuginfo-1.3.2-3.9.1 libFLAC8-32bit-1.3.2-3.9.1 libFLAC8-32bit-debuginfo-1.3.2-3.9.1 - openSUSE Leap 15.3 (noarch): flac-doc-1.3.2-3.9.1 References: https://www.suse.com/security/cve/CVE-2021-0561.html https://bugzilla.suse.com/1196660

1 0

openSUSE-RU-2022:0080-1: moderate: Recommended update for mirrorsorcerer
by maintenance＠opensuse.org 11 Mar '22

11 Mar '22

openSUSE Recommended Update: Recommended update for mirrorsorcerer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0080-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for mirrorsorcerer fixes the following issues: Update to version 0.1.0~9: * Fix oneshot mode to work correctly * Improve options for performance Update to version 0.1.0~8: * Update pool.json to include mirrorcache-jp Update to version 0.1.0~6: * Add pool.json * Add inotify watcher Update to version 0.1.0~4: * Improve journald output messages Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-80=1 Package List: - openSUSE Leap 15.3 (aarch64 x86_64): mirrorsorcerer-0.1.0~9-lp153.2.1 mirrorsorcerer-debuginfo-0.1.0~9-lp153.2.1 mirrorsorcerer-debugsource-0.1.0~9-lp153.2.1 References:

1 0

openSUSE-RU-2022:0808-1: moderate: Recommended update for procps
by maintenance＠opensuse.org 11 Mar '22

11 Mar '22

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0808-1 Rating: moderate References: #1195468 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for procps fixes the following issues: - Stop registering signal handler for SIGURG, to avoid `ps` failure if someone sends such signal. Without the signal handler, SIGURG will just be ignored. (bsc#1195468) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-808=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-808=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libprocps7-3.3.15-7.22.1 libprocps7-debuginfo-3.3.15-7.22.1 procps-3.3.15-7.22.1 procps-debuginfo-3.3.15-7.22.1 procps-debugsource-3.3.15-7.22.1 procps-devel-3.3.15-7.22.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libprocps7-3.3.15-7.22.1 libprocps7-debuginfo-3.3.15-7.22.1 procps-3.3.15-7.22.1 procps-debuginfo-3.3.15-7.22.1 procps-debugsource-3.3.15-7.22.1 procps-devel-3.3.15-7.22.1 References: https://bugzilla.suse.com/1195468

1 0

openSUSE-RU-2022:0806-1: important: Recommended update for powerpc-utils
by maintenance＠opensuse.org 11 Mar '22

11 Mar '22

openSUSE Recommended Update: Recommended update for powerpc-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0806-1 Rating: important References: #1196411 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for powerpc-utils fixes the following issues: - Fix lsslot showing "Unknown slot type" for recent PCIe slot types (bsc#1196411) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-806=1 Package List: - openSUSE Leap 15.3 (ppc64le): powerpc-utils-1.3.9-150300.9.20.1 powerpc-utils-debuginfo-1.3.9-150300.9.20.1 powerpc-utils-debugsource-1.3.9-150300.9.20.1 References: https://bugzilla.suse.com/1196411

1 0

openSUSE-SU-2022:0079-1: moderate: Security update for minidlna
by opensuse-security＠opensuse.org 11 Mar '22

11 Mar '22

openSUSE Security Update: Security update for minidlna ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0079-1 Rating: moderate References: #1181400 #1196814 Cross-References: CVE-2022-26505 CVSS scores: CVE-2022-26505 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for minidlna fixes the following issues: minidlna was updated to version 1.3.1 (boo#1196814) - Fixed a potential crash in SSDP request parsing. - Fixed a configure script failure on some platforms. - Protect against DNS rebinding attacks. (CVE-2022-26505) - Fix an socket leakage issue on some platforms. - Minor bug fixes. - add "su minidlna minidlna" to the logrotate config - Added hardening to systemd service(s) (boo#1181400). - Use sysusers macros to create minidlna user - Don't hardrequire logrotate, we don't write log files anymore Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-79=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): minidlna-1.3.1-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-26505.html https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1196814

1 0

openSUSE-SU-2022:0802-1: important: Security update for python-libxml2-python
by opensuse-security＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Security Update: Security update for python-libxml2-python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0802-1 Rating: important References: #1196490 Cross-References: CVE-2022-23308 CVSS scores: CVE-2022-23308 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-23308 (SUSE): 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-libxml2-python fixes the following issues: - CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-802=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-802=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-libxml2-python-debugsource-2.9.7-3.40.1 python2-libxml2-python-2.9.7-3.40.1 python2-libxml2-python-debuginfo-2.9.7-3.40.1 python3-libxml2-python-2.9.7-3.40.1 python3-libxml2-python-debuginfo-2.9.7-3.40.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-libxml2-python-debugsource-2.9.7-3.40.1 python2-libxml2-python-2.9.7-3.40.1 python2-libxml2-python-debuginfo-2.9.7-3.40.1 python3-libxml2-python-2.9.7-3.40.1 python3-libxml2-python-debuginfo-2.9.7-3.40.1 References: https://www.suse.com/security/cve/CVE-2022-23308.html https://bugzilla.suse.com/1196490

1 0

openSUSE-SU-2022:0803-1: important: Security update for python-lxml
by opensuse-security＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Security Update: Security update for python-lxml ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0803-1 Rating: important References: #1118088 #1179534 #1184177 #1193752 Cross-References: CVE-2018-19787 CVE-2020-27783 CVE-2021-28957 CVE-2021-43818 CVSS scores: CVE-2018-19787 (NVD) : 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2018-19787 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2020-27783 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-27783 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-28957 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-28957 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-43818 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVE-2021-43818 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for python-lxml fixes the following issues: - CVE-2018-19787: Fixed XSS vulnerability via unescaped URL (bsc#1118088). - CVE-2021-28957: Fixed XSS vulnerability ia HTML5 attributes unescaped (bsc#1184177). - CVE-2021-43818: Fixed XSS vulnerability via script content in SVG images using data URIs (bnc#1193752). - CVE-2020-27783: Fixed mutation XSS with improper parser use (bnc#1179534). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-803=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-803=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-3.7.1 python-lxml-debugsource-4.7.1-3.7.1 python2-lxml-4.7.1-3.7.1 python2-lxml-debuginfo-4.7.1-3.7.1 python2-lxml-devel-4.7.1-3.7.1 python3-lxml-4.7.1-3.7.1 python3-lxml-debuginfo-4.7.1-3.7.1 python3-lxml-devel-4.7.1-3.7.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-lxml-debuginfo-4.7.1-3.7.1 python-lxml-debugsource-4.7.1-3.7.1 python2-lxml-4.7.1-3.7.1 python2-lxml-debuginfo-4.7.1-3.7.1 python2-lxml-devel-4.7.1-3.7.1 python3-lxml-4.7.1-3.7.1 python3-lxml-debuginfo-4.7.1-3.7.1 python3-lxml-devel-4.7.1-3.7.1 References: https://www.suse.com/security/cve/CVE-2018-19787.html https://www.suse.com/security/cve/CVE-2020-27783.html https://www.suse.com/security/cve/CVE-2021-28957.html https://www.suse.com/security/cve/CVE-2021-43818.html https://bugzilla.suse.com/1118088 https://bugzilla.suse.com/1179534 https://bugzilla.suse.com/1184177 https://bugzilla.suse.com/1193752

1 0

openSUSE-SU-2022:0804-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0804-1 Rating: important References: #1196809 Cross-References: CVE-2022-26485 CVE-2022-26486 CVSS scores: CVE-2022-26485 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26486 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 91.6.2 (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-804=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-804=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.2-8.59.1 MozillaThunderbird-debuginfo-91.6.2-8.59.1 MozillaThunderbird-debugsource-91.6.2-8.59.1 MozillaThunderbird-translations-common-91.6.2-8.59.1 MozillaThunderbird-translations-other-91.6.2-8.59.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.2-8.59.1 MozillaThunderbird-debuginfo-91.6.2-8.59.1 MozillaThunderbird-debugsource-91.6.2-8.59.1 MozillaThunderbird-translations-common-91.6.2-8.59.1 MozillaThunderbird-translations-other-91.6.2-8.59.1 References: https://www.suse.com/security/cve/CVE-2022-26485.html https://www.suse.com/security/cve/CVE-2022-26486.html https://bugzilla.suse.com/1196809

1 0

openSUSE-RU-2022:0799-1: moderate: Recommended update for sssd
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0799-1 Rating: moderate References: #1182058 #1195552 #1196166 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sssd fixes the following issues: - Remove caches only when performing a package downgrade. The sssd daemon takes care of upgrading the database format when necessary (bsc#1195552) - Fix 32-bit libraries package. Libraries were moved from sssd to sssd-common to fix bsc#1182058 and baselibs.conf was not updated accordingly; (bsc#1196166); Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-799=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-799=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): sssd-wbclient-1.16.1-150300.23.23.1 sssd-wbclient-debuginfo-1.16.1-150300.23.23.1 sssd-wbclient-devel-1.16.1-150300.23.23.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libipa_hbac-devel-1.16.1-150300.23.23.1 libipa_hbac0-1.16.1-150300.23.23.1 libipa_hbac0-debuginfo-1.16.1-150300.23.23.1 libnfsidmap-sss-1.16.1-150300.23.23.1 libnfsidmap-sss-debuginfo-1.16.1-150300.23.23.1 libsss_certmap-devel-1.16.1-150300.23.23.1 libsss_certmap0-1.16.1-150300.23.23.1 libsss_certmap0-debuginfo-1.16.1-150300.23.23.1 libsss_idmap-devel-1.16.1-150300.23.23.1 libsss_idmap0-1.16.1-150300.23.23.1 libsss_idmap0-debuginfo-1.16.1-150300.23.23.1 libsss_nss_idmap-devel-1.16.1-150300.23.23.1 libsss_nss_idmap0-1.16.1-150300.23.23.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.23.1 libsss_simpleifp-devel-1.16.1-150300.23.23.1 libsss_simpleifp0-1.16.1-150300.23.23.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.23.1 python3-ipa_hbac-1.16.1-150300.23.23.1 python3-ipa_hbac-debuginfo-1.16.1-150300.23.23.1 python3-sss-murmur-1.16.1-150300.23.23.1 python3-sss-murmur-debuginfo-1.16.1-150300.23.23.1 python3-sss_nss_idmap-1.16.1-150300.23.23.1 python3-sss_nss_idmap-debuginfo-1.16.1-150300.23.23.1 python3-sssd-config-1.16.1-150300.23.23.1 python3-sssd-config-debuginfo-1.16.1-150300.23.23.1 sssd-1.16.1-150300.23.23.1 sssd-ad-1.16.1-150300.23.23.1 sssd-ad-debuginfo-1.16.1-150300.23.23.1 sssd-common-1.16.1-150300.23.23.1 sssd-common-debuginfo-1.16.1-150300.23.23.1 sssd-dbus-1.16.1-150300.23.23.1 sssd-dbus-debuginfo-1.16.1-150300.23.23.1 sssd-debugsource-1.16.1-150300.23.23.1 sssd-ipa-1.16.1-150300.23.23.1 sssd-ipa-debuginfo-1.16.1-150300.23.23.1 sssd-krb5-1.16.1-150300.23.23.1 sssd-krb5-common-1.16.1-150300.23.23.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.23.1 sssd-krb5-debuginfo-1.16.1-150300.23.23.1 sssd-ldap-1.16.1-150300.23.23.1 sssd-ldap-debuginfo-1.16.1-150300.23.23.1 sssd-proxy-1.16.1-150300.23.23.1 sssd-proxy-debuginfo-1.16.1-150300.23.23.1 sssd-tools-1.16.1-150300.23.23.1 sssd-tools-debuginfo-1.16.1-150300.23.23.1 sssd-wbclient-1.16.1-150300.23.23.1 sssd-wbclient-debuginfo-1.16.1-150300.23.23.1 sssd-wbclient-devel-1.16.1-150300.23.23.1 sssd-winbind-idmap-1.16.1-150300.23.23.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.23.1 - openSUSE Leap 15.3 (x86_64): sssd-common-32bit-1.16.1-150300.23.23.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.23.1 References: https://bugzilla.suse.com/1182058 https://bugzilla.suse.com/1195552 https://bugzilla.suse.com/1196166

1 0

openSUSE-RU-2022:0787-1: moderate: Recommended update for openldap2
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0787-1 Rating: moderate References: PM-3288 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for openldap2 fixes the following issue: - restore CLDAP functionality in CLI tools (jsc#PM-3288) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-787=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-787=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libldap-2_4-2-2.4.46-9.61.1 libldap-2_4-2-debuginfo-2.4.46-9.61.1 openldap2-2.4.46-9.61.1 openldap2-back-meta-2.4.46-9.61.1 openldap2-back-meta-debuginfo-2.4.46-9.61.1 openldap2-back-perl-2.4.46-9.61.1 openldap2-back-perl-debuginfo-2.4.46-9.61.1 openldap2-back-sock-2.4.46-9.61.1 openldap2-back-sock-debuginfo-2.4.46-9.61.1 openldap2-back-sql-2.4.46-9.61.1 openldap2-back-sql-debuginfo-2.4.46-9.61.1 openldap2-client-2.4.46-9.61.1 openldap2-client-debuginfo-2.4.46-9.61.1 openldap2-contrib-2.4.46-9.61.1 openldap2-contrib-debuginfo-2.4.46-9.61.1 openldap2-debuginfo-2.4.46-9.61.1 openldap2-debugsource-2.4.46-9.61.1 openldap2-devel-2.4.46-9.61.1 openldap2-devel-static-2.4.46-9.61.1 openldap2-ppolicy-check-password-1.2-9.61.1 openldap2-ppolicy-check-password-debuginfo-1.2-9.61.1 - openSUSE Leap 15.4 (x86_64): libldap-2_4-2-32bit-2.4.46-9.61.1 libldap-2_4-2-32bit-debuginfo-2.4.46-9.61.1 openldap2-devel-32bit-2.4.46-9.61.1 - openSUSE Leap 15.4 (noarch): libldap-data-2.4.46-9.61.1 openldap2-doc-2.4.46-9.61.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libldap-2_4-2-2.4.46-9.61.1 libldap-2_4-2-debuginfo-2.4.46-9.61.1 openldap2-2.4.46-9.61.1 openldap2-back-meta-2.4.46-9.61.1 openldap2-back-meta-debuginfo-2.4.46-9.61.1 openldap2-back-perl-2.4.46-9.61.1 openldap2-back-perl-debuginfo-2.4.46-9.61.1 openldap2-back-sock-2.4.46-9.61.1 openldap2-back-sock-debuginfo-2.4.46-9.61.1 openldap2-back-sql-2.4.46-9.61.1 openldap2-back-sql-debuginfo-2.4.46-9.61.1 openldap2-client-2.4.46-9.61.1 openldap2-client-debuginfo-2.4.46-9.61.1 openldap2-contrib-2.4.46-9.61.1 openldap2-contrib-debuginfo-2.4.46-9.61.1 openldap2-debuginfo-2.4.46-9.61.1 openldap2-debugsource-2.4.46-9.61.1 openldap2-devel-2.4.46-9.61.1 openldap2-devel-static-2.4.46-9.61.1 openldap2-ppolicy-check-password-1.2-9.61.1 openldap2-ppolicy-check-password-debuginfo-1.2-9.61.1 - openSUSE Leap 15.3 (noarch): libldap-data-2.4.46-9.61.1 openldap2-doc-2.4.46-9.61.1 - openSUSE Leap 15.3 (x86_64): libldap-2_4-2-32bit-2.4.46-9.61.1 libldap-2_4-2-32bit-debuginfo-2.4.46-9.61.1 openldap2-devel-32bit-2.4.46-9.61.1 References:

1 0

openSUSE-RU-2022:0789-1: moderate: Recommended update for update-alternatives
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for update-alternatives ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0789-1 Rating: moderate References: #1195654 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for update-alternatives fixes the following issues: - Break bash - update-alternatives cycle rewrite of '%post' in 'lua'. (bsc#1195654) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-789=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-789=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): update-alternatives-1.19.0.4-4.3.1 update-alternatives-debuginfo-1.19.0.4-4.3.1 update-alternatives-debugsource-1.19.0.4-4.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): update-alternatives-1.19.0.4-4.3.1 update-alternatives-debuginfo-1.19.0.4-4.3.1 update-alternatives-debugsource-1.19.0.4-4.3.1 References: https://bugzilla.suse.com/1195654

1 0

openSUSE-RU-2022:0791-1: moderate: Recommended update for scap-security-guide
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for scap-security-guide ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0791-1 Rating: moderate References: ECO-3319 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for scap-security-guide fixes the following issues: scap-security-guide (ComplianceAsCode) was updated to 0.1.60 (jsc#ECO-3319) - Various bugfixes - New draft stig profile v1r1 for OL8 - New product Amazon EKS platform and initial CIS profiles - New product CentOS Stream 9, as a derivative from RHEL9 product Note that SUSE only supports for SUSE Linux Enterprise 12 and 15: - STIG profiles - HIPAA profiles - PCI-DSS profiles The CIS profile is community supplied and currently not supported by SUSE. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-791=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-791=1 Package List: - openSUSE Leap 15.4 (noarch): scap-security-guide-0.1.60-1.29.1 scap-security-guide-debian-0.1.60-1.29.1 scap-security-guide-redhat-0.1.60-1.29.1 scap-security-guide-ubuntu-0.1.60-1.29.1 - openSUSE Leap 15.3 (noarch): scap-security-guide-0.1.60-1.29.1 scap-security-guide-debian-0.1.60-1.29.1 scap-security-guide-redhat-0.1.60-1.29.1 scap-security-guide-ubuntu-0.1.60-1.29.1 References:

1 0

openSUSE-RU-2022:0796-1: moderate: Recommended update for golang-github-prometheus-prometheus
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for golang-github-prometheus-prometheus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0796-1 Rating: moderate References: #1196300 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-github-prometheus-prometheus fixes the following issues: - Fix Firewalld configuration file location (bsc#1196300) - Require Go 1.16+ - Do not build on s390 architecture. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-796=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-796=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-4.6.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): golang-github-prometheus-prometheus-2.32.1-4.6.1 References: https://bugzilla.suse.com/1196300

1 0

openSUSE-RU-2022:0792-1: moderate: Recommended update for suse-build-key
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for suse-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0792-1 Rating: moderate References: #1194845 #1196494 #1196495 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for suse-build-key fixes the following issues: - The old SUSE PTF key was extended, but also move it to suse_ptf_key_old.asc (as it is a DSA1024 key). - Added a new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494) - Extended the expiry of SUSE Linux Enterprise 11 key (bsc#1194845) - Added SUSE Container signing key in PEM format for use e.g. by cosign. - The SUSE security key was replaced with 2022 edition (E-Mail usage only). (bsc#1196495) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-792=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-792=1 Package List: - openSUSE Leap 15.4 (noarch): suse-build-key-12.0-8.19.1 - openSUSE Leap 15.3 (noarch): suse-build-key-12.0-8.19.1 References: https://bugzilla.suse.com/1194845 https://bugzilla.suse.com/1196494 https://bugzilla.suse.com/1196495

1 0

openSUSE-RU-2022:0788-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 10 Mar '22

10 Mar '22

openSUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0788-1 Rating: moderate References: #1195326 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libzypp, zypper fixes the following issues: - Fix handling of redirected command in-/output (bsc#1195326) This fixes delays at the end of zypper operations, where zypper unintentionally waits for appdata plugin scripts to complete. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-788=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libzypp-17.29.4-31.1 libzypp-debuginfo-17.29.4-31.1 libzypp-debugsource-17.29.4-31.1 libzypp-devel-17.29.4-31.1 libzypp-devel-doc-17.29.4-31.1 zypper-1.14.51-27.1 zypper-debuginfo-1.14.51-27.1 zypper-debugsource-1.14.51-27.1 - openSUSE Leap 15.3 (noarch): zypper-aptitude-1.14.51-27.1 zypper-log-1.14.51-27.1 zypper-needs-restarting-1.14.51-27.1 References: https://bugzilla.suse.com/1195326

1 0

openSUSE-RU-2022:0776-1: moderate: Recommended update for mutter
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for mutter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0776-1 Rating: moderate References: #1188759 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mutter fixes the following issues: - Improve mutter behavior when receiving a ClientMessage event, not to just assume that it's a WM_PROTOCOLS event but to actually check the type before using it (bsc#1188759) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-776=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-776=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libmutter-5-0-3.34.6-3.9.1 libmutter-5-0-debuginfo-3.34.6-3.9.1 mutter-data-3.34.6-3.9.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libmutter-5-0-3.34.6-3.9.1 libmutter-5-0-debuginfo-3.34.6-3.9.1 mutter-3.34.6-3.9.1 mutter-data-3.34.6-3.9.1 mutter-debuginfo-3.34.6-3.9.1 mutter-debugsource-3.34.6-3.9.1 mutter-devel-3.34.6-3.9.1 - openSUSE Leap 15.3 (noarch): mutter-lang-3.34.6-3.9.1 References: https://bugzilla.suse.com/1188759

1 0

openSUSE-OU-2022:0781-1: moderate: Optional update for SUSE Package Hub
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:0781-1 Rating: moderate References: MSC-303 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 optional fixes and contains one feature can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: MozillaThunderbird, enigmail Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-781=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-781=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.1-8.56.1 MozillaThunderbird-debuginfo-91.6.1-8.56.1 MozillaThunderbird-debugsource-91.6.1-8.56.1 MozillaThunderbird-translations-common-91.6.1-8.56.1 MozillaThunderbird-translations-other-91.6.1-8.56.1 enigmail-2.2.4-3.27.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-91.6.1-8.56.1 MozillaThunderbird-debuginfo-91.6.1-8.56.1 MozillaThunderbird-debugsource-91.6.1-8.56.1 MozillaThunderbird-translations-common-91.6.1-8.56.1 MozillaThunderbird-translations-other-91.6.1-8.56.1 enigmail-2.2.4-3.27.1 References:

1 0

openSUSE-RU-2022:0780-1: moderate: Recommended update for nvme-cli
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for nvme-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0780-1 Rating: moderate References: #1193540 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nvme-cli fixes the following issues: - fabrics: fix 'nvme connect' segfault if transport type is omitted (bsc#1193540) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-780=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nvme-cli-1.13-150300.3.13.1 nvme-cli-debuginfo-1.13-150300.3.13.1 nvme-cli-debugsource-1.13-150300.3.13.1 nvme-cli-regress-script-1.13-150300.3.13.1 References: https://bugzilla.suse.com/1193540

1 0

openSUSE-SU-2022:0783-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0783-1 Rating: important References: #1196809 Cross-References: CVE-2022-26485 CVE-2022-26486 CVSS scores: CVE-2022-26485 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-26486 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.1 ESR (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-783=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-783=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.6.1-152.19.1 MozillaFirefox-branding-upstream-91.6.1-152.19.1 MozillaFirefox-debuginfo-91.6.1-152.19.1 MozillaFirefox-debugsource-91.6.1-152.19.1 MozillaFirefox-devel-91.6.1-152.19.1 MozillaFirefox-translations-common-91.6.1-152.19.1 MozillaFirefox-translations-other-91.6.1-152.19.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.6.1-152.19.1 MozillaFirefox-branding-upstream-91.6.1-152.19.1 MozillaFirefox-debuginfo-91.6.1-152.19.1 MozillaFirefox-debugsource-91.6.1-152.19.1 MozillaFirefox-devel-91.6.1-152.19.1 MozillaFirefox-translations-common-91.6.1-152.19.1 MozillaFirefox-translations-other-91.6.1-152.19.1 References: https://www.suse.com/security/cve/CVE-2022-26485.html https://www.suse.com/security/cve/CVE-2022-26486.html https://bugzilla.suse.com/1196809

1 0

openSUSE-RU-2022:0775-1: moderate: Recommended update for pciutils
by maintenance＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Recommended Update: Recommended update for pciutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0775-1 Rating: moderate References: #1192862 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pciutils fixes the following issues: - Report the theoretical speeds for PCIe 5.0 and 6.0 (bsc#1192862) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-775=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-775=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpci3-3.5.6-150300.13.3.1 libpci3-debuginfo-3.5.6-150300.13.3.1 pciutils-3.5.6-150300.13.3.1 pciutils-debuginfo-3.5.6-150300.13.3.1 pciutils-debugsource-3.5.6-150300.13.3.1 pciutils-devel-3.5.6-150300.13.3.1 - openSUSE Leap 15.4 (x86_64): libpci3-32bit-3.5.6-150300.13.3.1 libpci3-32bit-debuginfo-3.5.6-150300.13.3.1 pciutils-devel-32bit-3.5.6-150300.13.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpci3-3.5.6-150300.13.3.1 libpci3-debuginfo-3.5.6-150300.13.3.1 pciutils-3.5.6-150300.13.3.1 pciutils-debuginfo-3.5.6-150300.13.3.1 pciutils-debugsource-3.5.6-150300.13.3.1 pciutils-devel-3.5.6-150300.13.3.1 - openSUSE Leap 15.3 (x86_64): libpci3-32bit-3.5.6-150300.13.3.1 libpci3-32bit-debuginfo-3.5.6-150300.13.3.1 pciutils-devel-32bit-3.5.6-150300.13.3.1 References: https://bugzilla.suse.com/1192862

1 0

openSUSE-SU-2022:0769-1: important: Security update for libcaca
by opensuse-security＠opensuse.org 09 Mar '22

09 Mar '22

openSUSE Security Update: Security update for libcaca ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0769-1 Rating: important References: #1184751 #1184752 Cross-References: CVE-2021-30498 CVE-2021-30499 CVSS scores: CVE-2021-30498 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30498 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30499 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-30499 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libcaca fixes the following issues: - CVE-2021-30498, CVE-2021-30499: If an image has a size of 0x0, when exporting, no data is written and space is allocated for the header only, not taking into account that sprintf appends a NUL byte (bsc#1184751, bsc#1184752). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-769=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-769=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): caca-utils-0.99.beta19.git20171003-11.3.1 caca-utils-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca-debugsource-0.99.beta19.git20171003-11.3.1 libcaca-devel-0.99.beta19.git20171003-11.3.1 libcaca-ruby-0.99.beta19.git20171003-11.3.1 libcaca-ruby-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-0.99.beta19.git20171003-11.3.1 libcaca0-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-debuginfo-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.4 (x86_64): libcaca0-32bit-0.99.beta19.git20171003-11.3.1 libcaca0-32bit-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-32bit-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-32bit-debuginfo-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.4 (noarch): python3-caca-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): caca-utils-0.99.beta19.git20171003-11.3.1 caca-utils-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca-debugsource-0.99.beta19.git20171003-11.3.1 libcaca-devel-0.99.beta19.git20171003-11.3.1 libcaca-ruby-0.99.beta19.git20171003-11.3.1 libcaca-ruby-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-0.99.beta19.git20171003-11.3.1 libcaca0-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-debuginfo-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.3 (x86_64): libcaca0-32bit-0.99.beta19.git20171003-11.3.1 libcaca0-32bit-debuginfo-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-32bit-0.99.beta19.git20171003-11.3.1 libcaca0-plugins-32bit-debuginfo-0.99.beta19.git20171003-11.3.1 - openSUSE Leap 15.3 (noarch): python3-caca-0.99.beta19.git20171003-11.3.1 References: https://www.suse.com/security/cve/CVE-2021-30498.html https://www.suse.com/security/cve/CVE-2021-30499.html https://bugzilla.suse.com/1184751 https://bugzilla.suse.com/1184752

1 0