March 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:0055-1: moderate: Recommended update for rsyslog
by maintenance＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0055-1 Rating: moderate References: #1029961 #1160414 #1178490 #1182653 #1195650 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for rsyslog fixes the following issues: - Upgrade to rsyslog 8.2106.0: * The prime new feature is support for TLS and non-TLS connections via imtcp in parallel. Furthermore, most TLS parameters can now be overriden at the input() level. The notable exceptions are certificate files, something that is due to be implemented as next step. * New global option "parser.supportCompressionExtension" This permits to turn off rsyslog's single-message compression extension when it interferes with non-syslog message processing (the parser subsystem expects syslog messages, not generic text) closes https://github.com/rsyslog/rsyslog/issues/4598 * imtcp: add more override config params to input() It is now possible to override all module parameters at the input() level. Module parameters serve as defaults. Existing configs need no modification. * imtcp: add stream driver parameter to input() configuration This permits to have different inputs use different stream drivers and stream driver parameters. * imtcp: permit to run multiple inputs in parallel Previously, a single server was used to run all imtcp inputs. This had a couple of drawsbacks. First and foremost, we could not use different stream drivers in the varios inputs. This patch now provides a baseline to do that, but does still not implement the capability (in this sense it is a staging patch). Secondly, we now ensure that each input has at least one exclusive thread for processing, untangling the performance of multiple inputs from each other. * tcpsrv bugfix: potential sluggishnes and hang on shutdown tcpsrv is used by multiple other modules (imtcp, imdiag, imgssapi, and, in theory, also others - even ones we do not know about). However, the internal synchornization did not properly take multiple tcpsrv users in consideration. As such, a single user could hang under some circumstances. This was caused by improperly awaking all users from a pthread condition wait. That in turn could lead to some sluggish behaviour and, in rare cases, a hang at shutdown. Note: it was highly unlikely to experience real problems with the officially provided modules. * refactoring of syslog/tcp driver parameter passing This has now been generalized to a parameter block, which makes it much cleaner and also easier to add new parameters in the future. * config script: add re_match_i() and re_extract_i() functions This provides case-insensitive regex functionality. - Upgrade to rsyslog 8.2104.0: * rainerscript: call getgrnam_r repeatedly to get all group members (bsc#1178490) * new built-in function get_property() to access property vars * mmdblookup: add support for mmdb DB reload on HUP * new contributed function module fmunflatten * test bugfix: some tests did not work with newer TLS library versions - Update 'remote.conf' example file to new 'Address' and 'Port' notation. (bsc#1182653) - Upgrade to rsyslog 8.2102.0: * omfwd: add stats counter for sent bytes * omfwd: add error reporting configuration option * action stats counter bugfix: failure count was not properly incremented * action stats counter bugfix: resume count was not incremented * omfwd bugfix: segfault or error if port not given * lookup table bugfix: data race on lookup table reload * testbench modernization * testbench: fix invalid sequence of kafka tests runs * testbench: fix kafkacat issues * testbench: fix year-dependendt clickhouse test - Upgrade to rsyslog 8.2012.0: * testbench bugfix: some tests did not work in make distcheck * immark: rewrite with many improvements * usability: re-phrase error message to help users better understand cause * add new system property $now-unixtimestamp * omfwd: add new rate limit option * omfwd bug: param "StreamDriver.PermitExpiredCerts" is not "off" by default - prepare usrmerge (bsc#1029961) - remove legacy stuff from specfile * sysvinit is not supported anymore, so remove all tests related to systemv in the specfile - Upgrade to rsyslog 8.2010.0: * gnutls TLS subsystem bugfix: handshake error handling * core/msg bugfix: memory leak * core/msg bugfix: segfault in jsonPathFindNext() when <root> not an object * openssl TLS subsystem: improvments of error and status messages * core bugfix: do not create empty JSON objects on non-existent key access * gnutls subsysem bugfix: potential hang on session closure * core/network bugfix: obey net.enableDNS=off when querying local hostname * core bugfix: potential segfault on query of PROGRAMNAME property * imtcp bugfix: broken connection not necessariy detected * new module: imhttp - http input * mmdarwin bugfix: potential zero uuid when reusing existing one * imdocker bugfix: build issue on some platforms * omudpspoof bugfix: make compatbile with Solaris build * testbench fix: python 3 incompatibility * core bugfix: segfault if disk-queue file cannot be created * cosmetic: fix dummy module name in debug output * config bugfix: intended warning emitted as error - Upgrade to rsyslog 8.2008.0 - Added custom unit file rsyslog.service because systemd service file was removed from upstream project - Use systemd_ordering instead of requiring to make rsyslog useable in containers. - Fix the URL for bug reporting, should not point to 'novell.com'. (bsc#1173433) - Add support for 'omkafka'. - Avoid build error with gcc flag '-fno-common'. (bsc#1160414) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-55=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-55=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): librdkafka-debugsource-0.11.6-1.8.1 librdkafka-devel-0.11.6-1.8.1 librdkafka1-0.11.6-1.8.1 librdkafka1-debuginfo-0.11.6-1.8.1 rsyslog-8.2106.0-4.13.1 rsyslog-debuginfo-8.2106.0-4.13.1 rsyslog-debugsource-8.2106.0-4.13.1 rsyslog-diag-tools-8.2106.0-4.13.1 rsyslog-diag-tools-debuginfo-8.2106.0-4.13.1 rsyslog-doc-8.2106.0-4.13.1 rsyslog-module-elasticsearch-8.2106.0-4.13.1 rsyslog-module-elasticsearch-debuginfo-8.2106.0-4.13.1 rsyslog-module-gcrypt-8.2106.0-4.13.1 rsyslog-module-gcrypt-debuginfo-8.2106.0-4.13.1 rsyslog-module-gssapi-8.2106.0-4.13.1 rsyslog-module-gssapi-debuginfo-8.2106.0-4.13.1 rsyslog-module-gtls-8.2106.0-4.13.1 rsyslog-module-gtls-debuginfo-8.2106.0-4.13.1 rsyslog-module-mmnormalize-8.2106.0-4.13.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-4.13.1 rsyslog-module-mysql-8.2106.0-4.13.1 rsyslog-module-mysql-debuginfo-8.2106.0-4.13.1 rsyslog-module-omamqp1-8.2106.0-4.13.1 rsyslog-module-omamqp1-debuginfo-8.2106.0-4.13.1 rsyslog-module-omhttpfs-8.2106.0-4.13.1 rsyslog-module-omhttpfs-debuginfo-8.2106.0-4.13.1 rsyslog-module-omtcl-8.2106.0-4.13.1 rsyslog-module-omtcl-debuginfo-8.2106.0-4.13.1 rsyslog-module-ossl-8.2106.0-4.13.1 rsyslog-module-ossl-debuginfo-8.2106.0-4.13.1 rsyslog-module-pgsql-8.2106.0-4.13.1 rsyslog-module-pgsql-debuginfo-8.2106.0-4.13.1 rsyslog-module-relp-8.2106.0-4.13.1 rsyslog-module-relp-debuginfo-8.2106.0-4.13.1 rsyslog-module-snmp-8.2106.0-4.13.1 rsyslog-module-snmp-debuginfo-8.2106.0-4.13.1 - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): audacity-2.2.2-bp153.3.3.1 - openSUSE Backports SLE-15-SP3 (noarch): audacity-lang-2.2.2-bp153.3.3.1 References: https://bugzilla.suse.com/1029961 https://bugzilla.suse.com/1160414 https://bugzilla.suse.com/1178490 https://bugzilla.suse.com/1182653 https://bugzilla.suse.com/1195650

1 0

openSUSE-SU-2022:0054-1: moderate: Security update for sphinx
by opensuse-security＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Security Update: Security update for sphinx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0054-1 Rating: moderate References: #1157590 #1195227 Cross-References: CVE-2020-29050 CVSS scores: CVE-2020-29050 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for sphinx fixes the following issues: - CVE-2020-29050: SphinxSearch in Sphinx Technologies Sphinx allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). (boo#1195227) - update to 2.0.6 release Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-54=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): libsphinxclient-0_0_1-2.2.11-lp153.2.3.1 libsphinxclient-devel-2.2.11-lp153.2.3.1 sphinx-2.2.11-lp153.2.3.1 sphinx-debuginfo-2.2.11-lp153.2.3.1 sphinx-debugsource-2.2.11-lp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-29050.html https://bugzilla.suse.com/1157590 https://bugzilla.suse.com/1195227

1 0

openSUSE-RU-2022:0651-1: important: Recommended update for crmsh
by maintenance＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0651-1 Rating: important References: #1194026 #1194615 #1194870 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Fix SBD not to overwrite SYSCONFIG_SBD and sbd-disk-metadata if input is 'n' during the configuration (bsc#1194870) - Fix help output of `crm cluster crash_test -h` (bsc#1194615) - Fix information message when the user need to change login shell (bsc#1194026) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-651=1 Package List: - openSUSE Leap 15.3 (noarch): crmsh-4.3.1+20220208.73603501-5.74.1 crmsh-scripts-4.3.1+20220208.73603501-5.74.1 crmsh-test-4.3.1+20220208.73603501-5.74.1 References: https://bugzilla.suse.com/1194026 https://bugzilla.suse.com/1194615 https://bugzilla.suse.com/1194870

1 0

openSUSE-RU-2022:0652-1: moderate: Recommended update for raspberrypi-eeprom
by maintenance＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Recommended Update: Recommended update for raspberrypi-eeprom ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0652-1 Rating: moderate References: #1194950 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for raspberrypi-eeprom fixes the following issues: Update to version 2021.04.29 (bsc#1194950) - Use upstream version schema (year.month.day) instead of arbitrary 0.0 - Add support for NVMe to the bootloader with a new NVMe boot mode - Add support for [cm4] and [pi400] config conditionals filters - TFTP - reply to duplicate ACKS - Skip rendering of HDMI diagnostics display for the first 8 seconds unless an error occurs - Add support for the BCM2711 XHCI controller - BOOT_ORDER 0x5 - Add XHCI protocol layer fixes for non-VLI controllers - Avoid USB MSD timeout of there is only one device - Fix recovery.bin error handler so that the LED error pattern is still displayed even if HDMI or SDRAM fail - Fix GPIO expander reset issue on some Pi4B 1.1 to 1.3 boards - Fix regression for GPIO expander reset change which caused PMIC reset to get card out of 1V8 mode to be missed - Timeout USB MSD commands and move to the next boot mode if a device stops responding - Add support for booting from the BCM2711 XHCI controller which is the USB-C socket on Pi 4B / Pi 400 and the type A sockets on Compute Module 4 IO board - Validate SDRAM in recovery mode Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-652=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-652=1 Package List: - openSUSE Leap 15.4 (noarch): raspberrypi-eeprom-2021.04.29-150300.3.3.1 raspberrypi-eeprom-firmware-2021.04.29-150300.3.3.1 - openSUSE Leap 15.3 (noarch): raspberrypi-eeprom-2021.04.29-150300.3.3.1 raspberrypi-eeprom-firmware-2021.04.29-150300.3.3.1 References: https://bugzilla.suse.com/1194950

1 0

openSUSE-RU-2022:0053-1: moderate: Recommended update for variety
by maintenance＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Recommended Update: Recommended update for variety ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0053-1 Rating: moderate References: #1187718 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for variety fixes the following issues: - Add subtle missed python-gobject-Gdk, python-pycairo and python-requests runtime requirements due to setup.py not checking them up, but Util.py import them (boo#1187718). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-53=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): variety-0.6.6-bp153.2.3.1 References: https://bugzilla.suse.com/1187718

1 0

openSUSE-RU-2022:0604-1: Recommended update for rsyslog
by maintenance＠opensuse.org 01 Mar '22

01 Mar '22

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0604-1 Rating: low References: #1194669 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rsyslog fixes the following issues: - update config example in remote.conf to match upstream documentation (bsc#1194669) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-604=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): rsyslog-8.2106.0-4.22.1 rsyslog-debuginfo-8.2106.0-4.22.1 rsyslog-debugsource-8.2106.0-4.22.1 rsyslog-diag-tools-8.2106.0-4.22.1 rsyslog-diag-tools-debuginfo-8.2106.0-4.22.1 rsyslog-doc-8.2106.0-4.22.1 rsyslog-module-dbi-8.2106.0-4.22.1 rsyslog-module-dbi-debuginfo-8.2106.0-4.22.1 rsyslog-module-elasticsearch-8.2106.0-4.22.1 rsyslog-module-elasticsearch-debuginfo-8.2106.0-4.22.1 rsyslog-module-gcrypt-8.2106.0-4.22.1 rsyslog-module-gcrypt-debuginfo-8.2106.0-4.22.1 rsyslog-module-gssapi-8.2106.0-4.22.1 rsyslog-module-gssapi-debuginfo-8.2106.0-4.22.1 rsyslog-module-gtls-8.2106.0-4.22.1 rsyslog-module-gtls-debuginfo-8.2106.0-4.22.1 rsyslog-module-mmnormalize-8.2106.0-4.22.1 rsyslog-module-mmnormalize-debuginfo-8.2106.0-4.22.1 rsyslog-module-mysql-8.2106.0-4.22.1 rsyslog-module-mysql-debuginfo-8.2106.0-4.22.1 rsyslog-module-omamqp1-8.2106.0-4.22.1 rsyslog-module-omamqp1-debuginfo-8.2106.0-4.22.1 rsyslog-module-omhttpfs-8.2106.0-4.22.1 rsyslog-module-omhttpfs-debuginfo-8.2106.0-4.22.1 rsyslog-module-omtcl-8.2106.0-4.22.1 rsyslog-module-omtcl-debuginfo-8.2106.0-4.22.1 rsyslog-module-ossl-8.2106.0-4.22.1 rsyslog-module-ossl-debuginfo-8.2106.0-4.22.1 rsyslog-module-pgsql-8.2106.0-4.22.1 rsyslog-module-pgsql-debuginfo-8.2106.0-4.22.1 rsyslog-module-relp-8.2106.0-4.22.1 rsyslog-module-relp-debuginfo-8.2106.0-4.22.1 rsyslog-module-snmp-8.2106.0-4.22.1 rsyslog-module-snmp-debuginfo-8.2106.0-4.22.1 rsyslog-module-udpspoof-8.2106.0-4.22.1 rsyslog-module-udpspoof-debuginfo-8.2106.0-4.22.1 References: https://bugzilla.suse.com/1194669

1 0