March 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-42022-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-42022-1 Rating: moderate References: #1038980 #1191962 #1191963 #1192153 #1192154 #1192696 #1195230 #1195682 Cross-References: CVE-2017-8923 CVE-2021-23343 CVE-2021-32803 CVE-2021-32804 CVE-2021-3807 CVE-2021-3918 CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763 CVE-2022-22764 CVSS scores: CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-23343 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-23343 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-32803 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32803 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (NVD) : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-32804 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2021-3807 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-3918 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have bypassed permission confirmation during update - CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable - CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements - CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types - CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages - CVE-2022-22763: Script Execution during invalid object state - CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6 Firefox Extended Support Release 91.5.1 ESR (bsc#1195230) - Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-696=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-699=1 openSUSE-SLE-15.3-2022-704=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.6.0-152.15.1 MozillaFirefox-branding-upstream-91.6.0-152.15.1 MozillaFirefox-debuginfo-91.6.0-152.15.1 MozillaFirefox-debugsource-91.6.0-152.15.1 MozillaFirefox-devel-91.6.0-152.15.1 MozillaFirefox-translations-common-91.6.0-152.15.1 MozillaFirefox-translations-other-91.6.0-152.15.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.32.1 apache2-mod_php7-debuginfo-7.4.6-3.32.1 nodejs8-8.17.0-10.19.2 nodejs8-debuginfo-8.17.0-10.19.2 nodejs8-debugsource-8.17.0-10.19.2 nodejs8-devel-8.17.0-10.19.2 npm8-8.17.0-10.19.2 php7-7.4.6-3.32.1 php7-bcmath-7.4.6-3.32.1 php7-bcmath-debuginfo-7.4.6-3.32.1 php7-bz2-7.4.6-3.32.1 php7-bz2-debuginfo-7.4.6-3.32.1 php7-calendar-7.4.6-3.32.1 php7-calendar-debuginfo-7.4.6-3.32.1 php7-ctype-7.4.6-3.32.1 php7-ctype-debuginfo-7.4.6-3.32.1 php7-curl-7.4.6-3.32.1 php7-curl-debuginfo-7.4.6-3.32.1 php7-dba-7.4.6-3.32.1 php7-dba-debuginfo-7.4.6-3.32.1 php7-debuginfo-7.4.6-3.32.1 php7-debugsource-7.4.6-3.32.1 php7-devel-7.4.6-3.32.1 php7-dom-7.4.6-3.32.1 php7-dom-debuginfo-7.4.6-3.32.1 php7-embed-7.4.6-3.32.1 php7-embed-debuginfo-7.4.6-3.32.1 php7-enchant-7.4.6-3.32.1 php7-enchant-debuginfo-7.4.6-3.32.1 php7-exif-7.4.6-3.32.1 php7-exif-debuginfo-7.4.6-3.32.1 php7-fastcgi-7.4.6-3.32.1 php7-fastcgi-debuginfo-7.4.6-3.32.1 php7-fileinfo-7.4.6-3.32.1 php7-fileinfo-debuginfo-7.4.6-3.32.1 php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 php7-fpm-7.4.6-3.32.1 php7-fpm-debuginfo-7.4.6-3.32.1 php7-ftp-7.4.6-3.32.1 php7-ftp-debuginfo-7.4.6-3.32.1 php7-gd-7.4.6-3.32.1 php7-gd-debuginfo-7.4.6-3.32.1 php7-gettext-7.4.6-3.32.1 php7-gettext-debuginfo-7.4.6-3.32.1 php7-gmp-7.4.6-3.32.1 php7-gmp-debuginfo-7.4.6-3.32.1 php7-iconv-7.4.6-3.32.1 php7-iconv-debuginfo-7.4.6-3.32.1 php7-intl-7.4.6-3.32.1 php7-intl-debuginfo-7.4.6-3.32.1 php7-json-7.4.6-3.32.1 php7-json-debuginfo-7.4.6-3.32.1 php7-ldap-7.4.6-3.32.1 php7-ldap-debuginfo-7.4.6-3.32.1 php7-mbstring-7.4.6-3.32.1 php7-mbstring-debuginfo-7.4.6-3.32.1 php7-mysql-7.4.6-3.32.1 php7-mysql-debuginfo-7.4.6-3.32.1 php7-odbc-7.4.6-3.32.1 php7-odbc-debuginfo-7.4.6-3.32.1 php7-opcache-7.4.6-3.32.1 php7-opcache-debuginfo-7.4.6-3.32.1 php7-openssl-7.4.6-3.32.1 php7-openssl-debuginfo-7.4.6-3.32.1 php7-pcntl-7.4.6-3.32.1 php7-pcntl-debuginfo-7.4.6-3.32.1 php7-pdo-7.4.6-3.32.1 php7-pdo-debuginfo-7.4.6-3.32.1 php7-pgsql-7.4.6-3.32.1 php7-pgsql-debuginfo-7.4.6-3.32.1 php7-phar-7.4.6-3.32.1 php7-phar-debuginfo-7.4.6-3.32.1 php7-posix-7.4.6-3.32.1 php7-posix-debuginfo-7.4.6-3.32.1 php7-readline-7.4.6-3.32.1 php7-readline-debuginfo-7.4.6-3.32.1 php7-shmop-7.4.6-3.32.1 php7-shmop-debuginfo-7.4.6-3.32.1 php7-snmp-7.4.6-3.32.1 php7-snmp-debuginfo-7.4.6-3.32.1 php7-soap-7.4.6-3.32.1 php7-soap-debuginfo-7.4.6-3.32.1 php7-sockets-7.4.6-3.32.1 php7-sockets-debuginfo-7.4.6-3.32.1 php7-sodium-7.4.6-3.32.1 php7-sodium-debuginfo-7.4.6-3.32.1 php7-sqlite-7.4.6-3.32.1 php7-sqlite-debuginfo-7.4.6-3.32.1 php7-sysvmsg-7.4.6-3.32.1 php7-sysvmsg-debuginfo-7.4.6-3.32.1 php7-sysvsem-7.4.6-3.32.1 php7-sysvsem-debuginfo-7.4.6-3.32.1 php7-sysvshm-7.4.6-3.32.1 php7-sysvshm-debuginfo-7.4.6-3.32.1 php7-test-7.4.6-3.32.1 php7-tidy-7.4.6-3.32.1 php7-tidy-debuginfo-7.4.6-3.32.1 php7-tokenizer-7.4.6-3.32.1 php7-tokenizer-debuginfo-7.4.6-3.32.1 php7-xmlreader-7.4.6-3.32.1 php7-xmlreader-debuginfo-7.4.6-3.32.1 php7-xmlrpc-7.4.6-3.32.1 php7-xmlrpc-debuginfo-7.4.6-3.32.1 php7-xmlwriter-7.4.6-3.32.1 php7-xmlwriter-debuginfo-7.4.6-3.32.1 php7-xsl-7.4.6-3.32.1 php7-xsl-debuginfo-7.4.6-3.32.1 php7-zip-7.4.6-3.32.1 php7-zip-debuginfo-7.4.6-3.32.1 php7-zlib-7.4.6-3.32.1 php7-zlib-debuginfo-7.4.6-3.32.1 - openSUSE Leap 15.3 (noarch): nodejs8-docs-8.17.0-10.19.2 References: https://www.suse.com/security/cve/CVE-2017-8923.html https://www.suse.com/security/cve/CVE-2021-23343.html https://www.suse.com/security/cve/CVE-2021-32803.html https://www.suse.com/security/cve/CVE-2021-32804.html https://www.suse.com/security/cve/CVE-2021-3807.html https://www.suse.com/security/cve/CVE-2021-3918.html https://www.suse.com/security/cve/CVE-2022-22753.html https://www.suse.com/security/cve/CVE-2022-22754.html https://www.suse.com/security/cve/CVE-2022-22756.html https://www.suse.com/security/cve/CVE-2022-22759.html https://www.suse.com/security/cve/CVE-2022-22760.html https://www.suse.com/security/cve/CVE-2022-22761.html https://www.suse.com/security/cve/CVE-2022-22763.html https://www.suse.com/security/cve/CVE-2022-22764.html https://bugzilla.suse.com/1038980 https://bugzilla.suse.com/1191962 https://bugzilla.suse.com/1191963 https://bugzilla.suse.com/1192153 https://bugzilla.suse.com/1192154 https://bugzilla.suse.com/1192696 https://bugzilla.suse.com/1195230 https://bugzilla.suse.com/1195682

1 0

openSUSE-SU-42022-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-42022-1 Rating: moderate References: #1038980 #1195230 #1195682 Cross-References: CVE-2017-8923 CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763 CVE-2022-22764 CVSS scores: CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have bypassed permission confirmation during update - CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable - CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements - CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types - CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages - CVE-2022-22763: Script Execution during invalid object state - CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6 Firefox Extended Support Release 91.5.1 ESR (bsc#1195230) - Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-696=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-699=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.6.0-152.15.1 MozillaFirefox-branding-upstream-91.6.0-152.15.1 MozillaFirefox-debuginfo-91.6.0-152.15.1 MozillaFirefox-debugsource-91.6.0-152.15.1 MozillaFirefox-devel-91.6.0-152.15.1 MozillaFirefox-translations-common-91.6.0-152.15.1 MozillaFirefox-translations-other-91.6.0-152.15.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.32.1 apache2-mod_php7-debuginfo-7.4.6-3.32.1 php7-7.4.6-3.32.1 php7-bcmath-7.4.6-3.32.1 php7-bcmath-debuginfo-7.4.6-3.32.1 php7-bz2-7.4.6-3.32.1 php7-bz2-debuginfo-7.4.6-3.32.1 php7-calendar-7.4.6-3.32.1 php7-calendar-debuginfo-7.4.6-3.32.1 php7-ctype-7.4.6-3.32.1 php7-ctype-debuginfo-7.4.6-3.32.1 php7-curl-7.4.6-3.32.1 php7-curl-debuginfo-7.4.6-3.32.1 php7-dba-7.4.6-3.32.1 php7-dba-debuginfo-7.4.6-3.32.1 php7-debuginfo-7.4.6-3.32.1 php7-debugsource-7.4.6-3.32.1 php7-devel-7.4.6-3.32.1 php7-dom-7.4.6-3.32.1 php7-dom-debuginfo-7.4.6-3.32.1 php7-embed-7.4.6-3.32.1 php7-embed-debuginfo-7.4.6-3.32.1 php7-enchant-7.4.6-3.32.1 php7-enchant-debuginfo-7.4.6-3.32.1 php7-exif-7.4.6-3.32.1 php7-exif-debuginfo-7.4.6-3.32.1 php7-fastcgi-7.4.6-3.32.1 php7-fastcgi-debuginfo-7.4.6-3.32.1 php7-fileinfo-7.4.6-3.32.1 php7-fileinfo-debuginfo-7.4.6-3.32.1 php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 php7-fpm-7.4.6-3.32.1 php7-fpm-debuginfo-7.4.6-3.32.1 php7-ftp-7.4.6-3.32.1 php7-ftp-debuginfo-7.4.6-3.32.1 php7-gd-7.4.6-3.32.1 php7-gd-debuginfo-7.4.6-3.32.1 php7-gettext-7.4.6-3.32.1 php7-gettext-debuginfo-7.4.6-3.32.1 php7-gmp-7.4.6-3.32.1 php7-gmp-debuginfo-7.4.6-3.32.1 php7-iconv-7.4.6-3.32.1 php7-iconv-debuginfo-7.4.6-3.32.1 php7-intl-7.4.6-3.32.1 php7-intl-debuginfo-7.4.6-3.32.1 php7-json-7.4.6-3.32.1 php7-json-debuginfo-7.4.6-3.32.1 php7-ldap-7.4.6-3.32.1 php7-ldap-debuginfo-7.4.6-3.32.1 php7-mbstring-7.4.6-3.32.1 php7-mbstring-debuginfo-7.4.6-3.32.1 php7-mysql-7.4.6-3.32.1 php7-mysql-debuginfo-7.4.6-3.32.1 php7-odbc-7.4.6-3.32.1 php7-odbc-debuginfo-7.4.6-3.32.1 php7-opcache-7.4.6-3.32.1 php7-opcache-debuginfo-7.4.6-3.32.1 php7-openssl-7.4.6-3.32.1 php7-openssl-debuginfo-7.4.6-3.32.1 php7-pcntl-7.4.6-3.32.1 php7-pcntl-debuginfo-7.4.6-3.32.1 php7-pdo-7.4.6-3.32.1 php7-pdo-debuginfo-7.4.6-3.32.1 php7-pgsql-7.4.6-3.32.1 php7-pgsql-debuginfo-7.4.6-3.32.1 php7-phar-7.4.6-3.32.1 php7-phar-debuginfo-7.4.6-3.32.1 php7-posix-7.4.6-3.32.1 php7-posix-debuginfo-7.4.6-3.32.1 php7-readline-7.4.6-3.32.1 php7-readline-debuginfo-7.4.6-3.32.1 php7-shmop-7.4.6-3.32.1 php7-shmop-debuginfo-7.4.6-3.32.1 php7-snmp-7.4.6-3.32.1 php7-snmp-debuginfo-7.4.6-3.32.1 php7-soap-7.4.6-3.32.1 php7-soap-debuginfo-7.4.6-3.32.1 php7-sockets-7.4.6-3.32.1 php7-sockets-debuginfo-7.4.6-3.32.1 php7-sodium-7.4.6-3.32.1 php7-sodium-debuginfo-7.4.6-3.32.1 php7-sqlite-7.4.6-3.32.1 php7-sqlite-debuginfo-7.4.6-3.32.1 php7-sysvmsg-7.4.6-3.32.1 php7-sysvmsg-debuginfo-7.4.6-3.32.1 php7-sysvsem-7.4.6-3.32.1 php7-sysvsem-debuginfo-7.4.6-3.32.1 php7-sysvshm-7.4.6-3.32.1 php7-sysvshm-debuginfo-7.4.6-3.32.1 php7-test-7.4.6-3.32.1 php7-tidy-7.4.6-3.32.1 php7-tidy-debuginfo-7.4.6-3.32.1 php7-tokenizer-7.4.6-3.32.1 php7-tokenizer-debuginfo-7.4.6-3.32.1 php7-xmlreader-7.4.6-3.32.1 php7-xmlreader-debuginfo-7.4.6-3.32.1 php7-xmlrpc-7.4.6-3.32.1 php7-xmlrpc-debuginfo-7.4.6-3.32.1 php7-xmlwriter-7.4.6-3.32.1 php7-xmlwriter-debuginfo-7.4.6-3.32.1 php7-xsl-7.4.6-3.32.1 php7-xsl-debuginfo-7.4.6-3.32.1 php7-zip-7.4.6-3.32.1 php7-zip-debuginfo-7.4.6-3.32.1 php7-zlib-7.4.6-3.32.1 php7-zlib-debuginfo-7.4.6-3.32.1 References: https://www.suse.com/security/cve/CVE-2017-8923.html https://www.suse.com/security/cve/CVE-2022-22753.html https://www.suse.com/security/cve/CVE-2022-22754.html https://www.suse.com/security/cve/CVE-2022-22756.html https://www.suse.com/security/cve/CVE-2022-22759.html https://www.suse.com/security/cve/CVE-2022-22760.html https://www.suse.com/security/cve/CVE-2022-22761.html https://www.suse.com/security/cve/CVE-2022-22763.html https://www.suse.com/security/cve/CVE-2022-22764.html https://bugzilla.suse.com/1038980 https://bugzilla.suse.com/1195230 https://bugzilla.suse.com/1195682

1 0

openSUSE-RU-2022:0071-1: moderate: Recommended update for knewstuff, plasma5-desktop
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for knewstuff, plasma5-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0071-1 Rating: moderate References: #1196199 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for knewstuff, plasma5-desktop fixes the following issues: - Reduce requests to download.kde.org (boo#1196199). - Avoid requests to download.kde.org (boo#1196199). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-71=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-71=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): container-suseconnect-2.3.0-4.17.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): knewstuff-5.76.0-bp153.2.8.1 knewstuff-core-devel-5.76.0-bp153.2.8.1 knewstuff-devel-5.76.0-bp153.2.8.1 knewstuff-imports-5.76.0-bp153.2.8.1 knewstuff-quick-devel-5.76.0-bp153.2.8.1 libKF5NewStuff5-5.76.0-bp153.2.8.1 libKF5NewStuffCore5-5.76.0-bp153.2.8.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le x86_64): plasma5-desktop-5.18.6-bp153.3.5.1 plasma5-desktop-debuginfo-5.18.6-bp153.3.5.1 plasma5-desktop-debugsource-5.18.6-bp153.3.5.1 plasma5-desktop-emojier-5.18.6-bp153.3.5.1 plasma5-desktop-emojier-debuginfo-5.18.6-bp153.3.5.1 - openSUSE Backports SLE-15-SP3 (aarch64_ilp32): knewstuff-devel-64bit-5.76.0-bp153.2.8.1 libKF5NewStuff5-64bit-5.76.0-bp153.2.8.1 libKF5NewStuffCore5-64bit-5.76.0-bp153.2.8.1 - openSUSE Backports SLE-15-SP3 (noarch): libKF5NewStuff5-lang-5.76.0-bp153.2.8.1 plasma5-desktop-lang-5.18.6-bp153.3.5.1 - openSUSE Backports SLE-15-SP3 (x86_64): knewstuff-devel-32bit-5.76.0-bp153.2.8.1 libKF5NewStuff5-32bit-5.76.0-bp153.2.8.1 libKF5NewStuffCore5-32bit-5.76.0-bp153.2.8.1 References: https://bugzilla.suse.com/1196199

1 0

openSUSE-RU-42022-1: moderate: Recommended update for filesystem
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for filesystem ______________________________________________________________________________ Announcement ID: openSUSE-RU-42022-1 Rating: moderate References: #1190447 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for filesystem fixes the following issues: - Release ported filesystem to LTSS channels (bsc#1190447). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-692=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): filesystem-15.0-11.5.1 References: https://bugzilla.suse.com/1190447

1 0

openSUSE-SU-42022-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-42022-1 Rating: moderate References: #1038980 Cross-References: CVE-2017-8923 CVSS scores: CVE-2017-8923 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-8923 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: - CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-699=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): apache2-mod_php7-7.4.6-3.32.1 apache2-mod_php7-debuginfo-7.4.6-3.32.1 php7-7.4.6-3.32.1 php7-bcmath-7.4.6-3.32.1 php7-bcmath-debuginfo-7.4.6-3.32.1 php7-bz2-7.4.6-3.32.1 php7-bz2-debuginfo-7.4.6-3.32.1 php7-calendar-7.4.6-3.32.1 php7-calendar-debuginfo-7.4.6-3.32.1 php7-ctype-7.4.6-3.32.1 php7-ctype-debuginfo-7.4.6-3.32.1 php7-curl-7.4.6-3.32.1 php7-curl-debuginfo-7.4.6-3.32.1 php7-dba-7.4.6-3.32.1 php7-dba-debuginfo-7.4.6-3.32.1 php7-debuginfo-7.4.6-3.32.1 php7-debugsource-7.4.6-3.32.1 php7-devel-7.4.6-3.32.1 php7-dom-7.4.6-3.32.1 php7-dom-debuginfo-7.4.6-3.32.1 php7-embed-7.4.6-3.32.1 php7-embed-debuginfo-7.4.6-3.32.1 php7-enchant-7.4.6-3.32.1 php7-enchant-debuginfo-7.4.6-3.32.1 php7-exif-7.4.6-3.32.1 php7-exif-debuginfo-7.4.6-3.32.1 php7-fastcgi-7.4.6-3.32.1 php7-fastcgi-debuginfo-7.4.6-3.32.1 php7-fileinfo-7.4.6-3.32.1 php7-fileinfo-debuginfo-7.4.6-3.32.1 php7-firebird-7.4.6-3.32.1 php7-firebird-debuginfo-7.4.6-3.32.1 php7-fpm-7.4.6-3.32.1 php7-fpm-debuginfo-7.4.6-3.32.1 php7-ftp-7.4.6-3.32.1 php7-ftp-debuginfo-7.4.6-3.32.1 php7-gd-7.4.6-3.32.1 php7-gd-debuginfo-7.4.6-3.32.1 php7-gettext-7.4.6-3.32.1 php7-gettext-debuginfo-7.4.6-3.32.1 php7-gmp-7.4.6-3.32.1 php7-gmp-debuginfo-7.4.6-3.32.1 php7-iconv-7.4.6-3.32.1 php7-iconv-debuginfo-7.4.6-3.32.1 php7-intl-7.4.6-3.32.1 php7-intl-debuginfo-7.4.6-3.32.1 php7-json-7.4.6-3.32.1 php7-json-debuginfo-7.4.6-3.32.1 php7-ldap-7.4.6-3.32.1 php7-ldap-debuginfo-7.4.6-3.32.1 php7-mbstring-7.4.6-3.32.1 php7-mbstring-debuginfo-7.4.6-3.32.1 php7-mysql-7.4.6-3.32.1 php7-mysql-debuginfo-7.4.6-3.32.1 php7-odbc-7.4.6-3.32.1 php7-odbc-debuginfo-7.4.6-3.32.1 php7-opcache-7.4.6-3.32.1 php7-opcache-debuginfo-7.4.6-3.32.1 php7-openssl-7.4.6-3.32.1 php7-openssl-debuginfo-7.4.6-3.32.1 php7-pcntl-7.4.6-3.32.1 php7-pcntl-debuginfo-7.4.6-3.32.1 php7-pdo-7.4.6-3.32.1 php7-pdo-debuginfo-7.4.6-3.32.1 php7-pgsql-7.4.6-3.32.1 php7-pgsql-debuginfo-7.4.6-3.32.1 php7-phar-7.4.6-3.32.1 php7-phar-debuginfo-7.4.6-3.32.1 php7-posix-7.4.6-3.32.1 php7-posix-debuginfo-7.4.6-3.32.1 php7-readline-7.4.6-3.32.1 php7-readline-debuginfo-7.4.6-3.32.1 php7-shmop-7.4.6-3.32.1 php7-shmop-debuginfo-7.4.6-3.32.1 php7-snmp-7.4.6-3.32.1 php7-snmp-debuginfo-7.4.6-3.32.1 php7-soap-7.4.6-3.32.1 php7-soap-debuginfo-7.4.6-3.32.1 php7-sockets-7.4.6-3.32.1 php7-sockets-debuginfo-7.4.6-3.32.1 php7-sodium-7.4.6-3.32.1 php7-sodium-debuginfo-7.4.6-3.32.1 php7-sqlite-7.4.6-3.32.1 php7-sqlite-debuginfo-7.4.6-3.32.1 php7-sysvmsg-7.4.6-3.32.1 php7-sysvmsg-debuginfo-7.4.6-3.32.1 php7-sysvsem-7.4.6-3.32.1 php7-sysvsem-debuginfo-7.4.6-3.32.1 php7-sysvshm-7.4.6-3.32.1 php7-sysvshm-debuginfo-7.4.6-3.32.1 php7-test-7.4.6-3.32.1 php7-tidy-7.4.6-3.32.1 php7-tidy-debuginfo-7.4.6-3.32.1 php7-tokenizer-7.4.6-3.32.1 php7-tokenizer-debuginfo-7.4.6-3.32.1 php7-xmlreader-7.4.6-3.32.1 php7-xmlreader-debuginfo-7.4.6-3.32.1 php7-xmlrpc-7.4.6-3.32.1 php7-xmlrpc-debuginfo-7.4.6-3.32.1 php7-xmlwriter-7.4.6-3.32.1 php7-xmlwriter-debuginfo-7.4.6-3.32.1 php7-xsl-7.4.6-3.32.1 php7-xsl-debuginfo-7.4.6-3.32.1 php7-zip-7.4.6-3.32.1 php7-zip-debuginfo-7.4.6-3.32.1 php7-zlib-7.4.6-3.32.1 php7-zlib-debuginfo-7.4.6-3.32.1 References: https://www.suse.com/security/cve/CVE-2017-8923.html https://bugzilla.suse.com/1038980

1 0

openSUSE-RU-22022-1: important: Recommended update for yast2
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-22022-1 Rating: important References: #1195910 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2 fixes the following issues: - Do not strip surrounding white space in CDATA XML elements. (bsc#1195910) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-697=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): yast2-4.3.68-150300.3.17.1 yast2-logs-4.3.68-150300.3.17.1 References: https://bugzilla.suse.com/1195910

1 0

openSUSE-SU-2022:0070-1: important: Security update for nodejs-electron
by opensuse-security＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Security Update: Security update for nodejs-electron ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0070-1 Rating: important References: Cross-References: CVE-2021-30625 CVE-2021-30626 CVE-2021-30627 CVE-2021-30628 CVE-2021-30630 CVE-2021-30631 CVE-2021-30632 CVE-2021-30633 CVE-2021-37981 CVE-2021-37984 CVE-2021-37987 CVE-2021-37989 CVE-2021-37992 CVE-2021-37996 CVE-2021-37998 CVE-2021-38001 CVE-2021-38002 CVE-2021-38003 CVSS scores: CVE-2021-30625 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30626 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30627 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30628 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30630 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2021-30632 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30633 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-37981 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-37984 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-37987 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-37989 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-37992 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-37996 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-37998 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-38001 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-38002 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2021-38003 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: This update for nodejs-electron fixes the following issues: - Fix webpack-4 with OpenSSL 3.0 Update to version 16.0.9 * https://github.com/electron/electron/releases/tag/v16.0.9 Update to version 16.0.8 * https://github.com/electron/electron/releases/tag/v16.0.8 - Add devel package with node headers (e.g. for node-gyp) - Update to version 16.0.7 * https://github.com/electron/electron/releases/tag/v16.0.7 - Update to version 15.3.3 * https://github.com/electron/electron/releases/tag/v15.3.3 - Update to version 13.6.3 https://github.com/electron/electron/releases/tag/v13.6.3 - Update to version 13.6.2 https://github.com/electron/electron/releases/tag/v13.6.2 - Fix for CVE-2021-37998 - Fix for CVE-2021-38001 - Fix for CVE-2021-38002 - Fix for CVE-2021-38003 - Do not build with H264 - Update to version 13.6.1 https://github.com/electron/electron/releases/tag/v13.6.1 - Fix for CVE-2021-37981 - Fix for CVE-2021-37984 - Fix for CVE-2021-37987 - Fix for CVE-2021-37989 - Fix for CVE-2021-37992 - Fix for CVE-2021-37996 - Update to version 13.5.1 https://github.com/electron/electron/releases/tag/v13.5.1 - Update to version 13.5.0 https://github.com/electron/electron/releases/tag/v13.5.0 - Fix for CVE-2021-30627 - Fix for CVE-2021-30631 - Fix for CVE-2021-30632 - Fix for CVE-2021-30625 - Fix for CVE-2021-30626 - Fix for CVE-2021-30628 - Fix for CVE-2021-30630 - Fix for CVE-2021-30633 - Version 13.4.0 - Update to version 13.1.8 * https://github.com/electron/electron/releases/tag/v13.1.8 - Update to version 13.1.7 * https://github.com/electron/electron/releases/tag/v13.1.7 - Update to version 13.1.6 * https://github.com/electron/electron/releases/tag/v13.1.6 * https://github.com/electron/electron/releases/tag/v13.1.5 - Update to version 13.1.4 * https://github.com/electron/electron/releases/tag/v13.1.4 * https://github.com/electron/electron/releases/tag/v13.1.3 - Build with vaapi support - Install missing vk_swiftshader_icd.json - Update to version 13.1.2 * https://github.com/electron/electron/releases/tag/v13.1.2 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-70=1 Package List: - openSUSE Backports SLE-15-SP3 (x86_64): nodejs-electron-16.0.9-bp153.2.1 nodejs-electron-devel-16.0.9-bp153.2.1 References: https://www.suse.com/security/cve/CVE-2021-30625.html https://www.suse.com/security/cve/CVE-2021-30626.html https://www.suse.com/security/cve/CVE-2021-30627.html https://www.suse.com/security/cve/CVE-2021-30628.html https://www.suse.com/security/cve/CVE-2021-30630.html https://www.suse.com/security/cve/CVE-2021-30631.html https://www.suse.com/security/cve/CVE-2021-30632.html https://www.suse.com/security/cve/CVE-2021-30633.html https://www.suse.com/security/cve/CVE-2021-37981.html https://www.suse.com/security/cve/CVE-2021-37984.html https://www.suse.com/security/cve/CVE-2021-37987.html https://www.suse.com/security/cve/CVE-2021-37989.html https://www.suse.com/security/cve/CVE-2021-37992.html https://www.suse.com/security/cve/CVE-2021-37996.html https://www.suse.com/security/cve/CVE-2021-37998.html https://www.suse.com/security/cve/CVE-2021-38001.html https://www.suse.com/security/cve/CVE-2021-38002.html https://www.suse.com/security/cve/CVE-2021-38003.html

1 0

openSUSE-RU-2022:0687-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0687-1 Rating: moderate References: #1191668 #1192119 SLE-23394 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for libvirt fixes the following issues: - libxl: Mark auto-allocated graphics ports to used on reconnect. - libxl: Release all auto-allocated graphics ports. (bsc#1191668) - libxl: Add lock process indicator to saved VM state. (bsc#1191668) - spec: Weaken apparmor-abstractions dependency to Recommends. (bsc#1192119, jsc#SLE-23394) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-687=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-687=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libvirt-admin-7.1.0-150300.6.26.1 libvirt-admin-debuginfo-7.1.0-150300.6.26.1 - openSUSE Leap 15.4 (noarch): libvirt-bash-completion-7.1.0-150300.6.26.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirt-7.1.0-150300.6.26.1 libvirt-admin-7.1.0-150300.6.26.1 libvirt-admin-debuginfo-7.1.0-150300.6.26.1 libvirt-client-7.1.0-150300.6.26.1 libvirt-client-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-7.1.0-150300.6.26.1 libvirt-daemon-config-network-7.1.0-150300.6.26.1 libvirt-daemon-config-nwfilter-7.1.0-150300.6.26.1 libvirt-daemon-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-interface-7.1.0-150300.6.26.1 libvirt-daemon-driver-interface-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-lxc-7.1.0-150300.6.26.1 libvirt-daemon-driver-lxc-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-network-7.1.0-150300.6.26.1 libvirt-daemon-driver-network-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-nodedev-7.1.0-150300.6.26.1 libvirt-daemon-driver-nodedev-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-nwfilter-7.1.0-150300.6.26.1 libvirt-daemon-driver-nwfilter-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-qemu-7.1.0-150300.6.26.1 libvirt-daemon-driver-qemu-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-secret-7.1.0-150300.6.26.1 libvirt-daemon-driver-secret-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-core-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-core-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-disk-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-disk-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-gluster-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-gluster-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-iscsi-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-iscsi-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-iscsi-direct-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-logical-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-logical-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-mpath-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-mpath-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-scsi-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-scsi-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-hooks-7.1.0-150300.6.26.1 libvirt-daemon-lxc-7.1.0-150300.6.26.1 libvirt-daemon-qemu-7.1.0-150300.6.26.1 libvirt-debugsource-7.1.0-150300.6.26.1 libvirt-devel-7.1.0-150300.6.26.1 libvirt-libs-7.1.0-150300.6.26.1 libvirt-libs-debuginfo-7.1.0-150300.6.26.1 libvirt-lock-sanlock-7.1.0-150300.6.26.1 libvirt-lock-sanlock-debuginfo-7.1.0-150300.6.26.1 libvirt-nss-7.1.0-150300.6.26.1 libvirt-nss-debuginfo-7.1.0-150300.6.26.1 wireshark-plugin-libvirt-7.1.0-150300.6.26.1 wireshark-plugin-libvirt-debuginfo-7.1.0-150300.6.26.1 - openSUSE Leap 15.3 (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-7.1.0-150300.6.26.1 libvirt-daemon-driver-storage-rbd-debuginfo-7.1.0-150300.6.26.1 - openSUSE Leap 15.3 (noarch): libvirt-bash-completion-7.1.0-150300.6.26.1 libvirt-doc-7.1.0-150300.6.26.1 - openSUSE Leap 15.3 (x86_64): libvirt-client-32bit-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-driver-libxl-7.1.0-150300.6.26.1 libvirt-daemon-driver-libxl-debuginfo-7.1.0-150300.6.26.1 libvirt-daemon-xen-7.1.0-150300.6.26.1 libvirt-devel-32bit-7.1.0-150300.6.26.1 References: https://bugzilla.suse.com/1191668 https://bugzilla.suse.com/1192119

1 0

openSUSE-RU-2022:0686-1: moderate: Recommended update for powerpc-utils
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for powerpc-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0686-1 Rating: moderate References: #1187716 #1191147 #1194579 #1195413 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for powerpc-utils fixes the following issues: - errinjct: sanitize devspec output of a newline if one is present. (bsc#1194579) - Fix reported online memory in legacy format. (bsc#1191147) - lparstat: report LPAR name from 'lparcfg'. (bsc#1187716) - Install 'smt.state' as config file. (bsc#1195413) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-686=1 Package List: - openSUSE Leap 15.3 (ppc64le): powerpc-utils-1.3.9-150300.9.17.1 powerpc-utils-debuginfo-1.3.9-150300.9.17.1 powerpc-utils-debugsource-1.3.9-150300.9.17.1 References: https://bugzilla.suse.com/1187716 https://bugzilla.suse.com/1191147 https://bugzilla.suse.com/1194579 https://bugzilla.suse.com/1195413

1 0

openSUSE-RU-2022:0685-1: important: Recommended update for clingo, python-Sphinx_4_2_0, python-sphinxcontrib-applehelp, python-sphinxcontrib-devhelp, python-sphinxcontrib-htmlhelp, python-sphinxcontrib-jsmath, python-sphinxcontrib-qthelp, python-sphinxcontrib-serializinghtml, spack
by maintenance＠opensuse.org 03 Mar '22

03 Mar '22

openSUSE Recommended Update: Recommended update for clingo, python-Sphinx_4_2_0, python-sphinxcontrib-applehelp, python-sphinxcontrib-devhelp, python-sphinxcontrib-htmlhelp, python-sphinxcontrib-jsmath, python-sphinxcontrib-qthelp, python-sphinxcontrib-serializinghtml, spack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0685-1 Rating: important References: #1166965 #1193712 SLE-22137 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes and contains one feature can now be installed. Description: This update for clingo, python-Sphinx_4_2_0, python-sphinxcontrib-applehelp, python-sphinxcontrib-devhelp, python-sphinxcontrib-htmlhelp, python-sphinxcontrib-jsmath, python-sphinxcontrib-qthelp, python-sphinxcontrib-serializinghtml, spack fixes the following issues: - added python-cffi as Requires (bsc#1193712) - create a sub lib package - fix some build errors, remove unwanted files - update to version 5.5.0 - clingo is used by default for spack version earlier than 0.17 (jsc#SLE-22137) - first release for SUSE (from fedora spec) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-685=1 Package List: - openSUSE Leap 15.3 (noarch): spack-0.17.1-150300.5.8.2 spack-info-0.17.1-150300.5.8.3 spack-man-0.17.1-150300.5.8.3 spack-recipes-0.17.1-150300.5.8.2 References: https://bugzilla.suse.com/1166965 https://bugzilla.suse.com/1193712

1 0