April 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2022:1132-1: moderate: Recommended update for kdump
by maintenance＠opensuse.org 08 Apr '22

08 Apr '22

openSUSE Recommended Update: Recommended update for kdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1132-1 Rating: moderate References: #1189923 #1197069 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kdump fixes the following issues: - Fix return code when no watchdog sysfs entry is found (bsc#1197069) - Add watchdog modules to kdump initrd to ensure kernel crash dumps are properly collected before a machine is rebooted by a watchdog (bsc#1189923) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1132=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): kdump-0.9.0-150300.18.8.1 kdump-debuginfo-0.9.0-150300.18.8.1 kdump-debugsource-0.9.0-150300.18.8.1 References: https://bugzilla.suse.com/1189923 https://bugzilla.suse.com/1197069

1 0

openSUSE-RU-2022:1138-1: moderate: Recommended update for gnome-shell
by maintenance＠opensuse.org 08 Apr '22

08 Apr '22

openSUSE Recommended Update: Recommended update for gnome-shell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1138-1 Rating: moderate References: #1185944 #1187571 #1190745 #1196708 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for gnome-shell fixes the following issues: - Show message "Multiple logins are not supported" when mixed locally/remotely login. (bsc#1190745) - Fix grab issue when destroying open popup menu. (bsc#1187571) - The previous code always restarted whole ECalClientView when it received any changes in it, which could sometimes lead to constant repeated restarts of the view. (bsc#1185944) - Fix the failed login when remotely login. (bsc#1196708) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1138=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gnome-shell-3.34.5-150300.10.5.1 gnome-shell-calendar-3.34.5-150300.10.5.1 gnome-shell-calendar-debuginfo-3.34.5-150300.10.5.1 gnome-shell-debuginfo-3.34.5-150300.10.5.1 gnome-shell-debugsource-3.34.5-150300.10.5.1 gnome-shell-devel-3.34.5-150300.10.5.1 - openSUSE Leap 15.3 (noarch): gnome-shell-lang-3.34.5-150300.10.5.1 References: https://bugzilla.suse.com/1185944 https://bugzilla.suse.com/1187571 https://bugzilla.suse.com/1190745 https://bugzilla.suse.com/1196708

1 0

openSUSE-OU-2022:1134-1: moderate: Optional update for SUSE Package Hub
by maintenance＠opensuse.org 08 Apr '22

08 Apr '22

openSUSE Optional Update: Optional update for SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2022:1134-1 Rating: moderate References: MSC-303 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 optional fixes and contains one feature can now be installed. Description: This optional update provides the following changes: - Provide binaries for non x86_64 architectures directly to SUSE Package Hub. - There are no visible changes for the final user. - Affected source packages: gfbgraph, librest, gnome-online-accounts, gcr Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1134=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1134=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): librest-0_7-0-0.8.1-3.2.1 librest-0_7-0-debuginfo-0.8.1-3.2.1 librest-debugsource-0.8.1-3.2.1 librest-devel-0.8.1-3.2.1 typelib-1_0-Rest-0_7-0.8.1-3.2.1 - openSUSE Leap 15.4 (x86_64): librest-0_7-0-32bit-0.8.1-3.2.1 librest-0_7-0-32bit-debuginfo-0.8.1-3.2.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gcr-data-3.34.0-5.2.1 gcr-debugsource-3.34.0-5.2.1 gcr-prompter-3.34.0-5.2.1 gcr-prompter-debuginfo-3.34.0-5.2.1 gcr-ssh-askpass-3.34.0-5.2.1 gcr-ssh-askpass-debuginfo-3.34.0-5.2.1 gcr-viewer-3.34.0-5.2.1 gcr-viewer-debuginfo-3.34.0-5.2.1 gfbgraph-debugsource-0.2.3-3.2.1 gfbgraph-devel-0.2.3-3.2.1 gnome-online-accounts-3.34.1-3.2.1 gnome-online-accounts-debuginfo-3.34.1-3.2.1 gnome-online-accounts-debugsource-3.34.1-3.2.1 gnome-online-accounts-devel-3.34.1-3.2.1 libgck-1-0-3.34.0-5.2.1 libgck-1-0-debuginfo-3.34.0-5.2.1 libgck-devel-3.34.0-5.2.1 libgcr-3-1-3.34.0-5.2.1 libgcr-3-1-debuginfo-3.34.0-5.2.1 libgcr-devel-3.34.0-5.2.1 libgfbgraph-0_2-0-0.2.3-3.2.1 libgfbgraph-0_2-0-debuginfo-0.2.3-3.2.1 libgoa-1_0-0-3.34.1-3.2.1 libgoa-1_0-0-debuginfo-3.34.1-3.2.1 libgoa-backend-1_0-1-3.34.1-3.2.1 libgoa-backend-1_0-1-debuginfo-3.34.1-3.2.1 librest-0_7-0-0.8.1-3.2.1 librest-0_7-0-debuginfo-0.8.1-3.2.1 librest-debugsource-0.8.1-3.2.1 librest-devel-0.8.1-3.2.1 typelib-1_0-GFBGraph-0_2-0.2.3-3.2.1 typelib-1_0-Gck-1-3.34.0-5.2.1 typelib-1_0-Gcr-3-3.34.0-5.2.1 typelib-1_0-GcrUi-3-3.34.0-5.2.1 typelib-1_0-Goa-1_0-3.34.1-3.2.1 typelib-1_0-Rest-0_7-0.8.1-3.2.1 - openSUSE Leap 15.3 (x86_64): libgck-1-0-32bit-3.34.0-5.2.1 libgck-1-0-32bit-debuginfo-3.34.0-5.2.1 libgck-devel-32bit-3.34.0-5.2.1 libgcr-3-1-32bit-3.34.0-5.2.1 libgcr-3-1-32bit-debuginfo-3.34.0-5.2.1 libgcr-devel-32bit-3.34.0-5.2.1 libgoa-1_0-0-32bit-3.34.1-3.2.1 libgoa-1_0-0-32bit-debuginfo-3.34.1-3.2.1 libgoa-backend-1_0-1-32bit-3.34.1-3.2.1 libgoa-backend-1_0-1-32bit-debuginfo-3.34.1-3.2.1 librest-0_7-0-32bit-0.8.1-3.2.1 librest-0_7-0-32bit-debuginfo-0.8.1-3.2.1 - openSUSE Leap 15.3 (noarch): gcr-lang-3.34.0-5.2.1 gnome-online-accounts-lang-3.34.1-3.2.1 References:

1 0

openSUSE-SU-2022:0108-1: important: Security update for seamonkey
by opensuse-security＠opensuse.org 08 Apr '22

08 Apr '22

openSUSE Security Update: Security update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0108-1 Rating: important References: #1185055 #1188564 #1188565 #1191902 #1191904 #1191905 #1191909 #1191910 #1191911 #1191913 #1191914 #1192052 #1194198 #1194232 #1197518 Cross-References: CVE-2021-2163 CVE-2021-2341 CVE-2021-2369 CVE-2021-35556 CVE-2021-35559 CVE-2021-35560 CVE-2021-35564 CVE-2021-35565 CVE-2021-35578 CVE-2021-35586 CVE-2021-35588 CVE-2021-41035 CVSS scores: CVE-2021-2163 (NVD) : 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-2163 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2021-2341 (NVD) : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2021-2341 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2021-2369 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2021-2369 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2021-35556 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35556 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35559 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35560 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-35560 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-35564 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-35564 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-35565 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35565 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35578 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35578 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35586 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35586 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-35588 (NVD) : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2021-35588 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2021-41035 (SUSE): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has three fixes is now available. Description: SeaMonkey was updated to 2.53.11.1: Update to SeaMonkey 2.53.11.1 * Fix edge case when setting IntersectionObserver threshold bug 1758291. * OAuth2 prefs should use realuserName instead of username bug 1518126. * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains the relevant Firefox 60.8 security fixes. * SeaMonkey 2.53.11.1 shares most parts of the mail and news code with Thunderbird. Please read the Thunderbird 60.8.0 release notes for specific security fixes in this release. * Additional important security fixes up to Current Firefox 91.7 and Thunderbird 91.7 ESR plus many enhancements have been backported. We will continue to enhance SeaMonkey security in subsequent 2.53.x beta and release versions as fast as we are able to. * Remove obsolete MOZ_EXTENSIONS check in suite * Add connect button to cZ Networks Editor * Remove freenode remnants from ChatZilla in SeaMonkey * Prefer secure over insecure protocol in network list in ChatZilla * Composer - Change tag textbox is not removed after use * Clean up repo links in debugQA * Fix misspelled references to macOS in suite * Remove obsolete references to Java and Flash * Help button not working in delete cert dialog * Rearrange Message Filter Dialog to make room for new features * Use Insert key as shortcut to create new message filters * Rename some variables used in SeaMonkey's FilterListDialog to match Thunderbird's * Implement Copy to New message filter functionality * Add move to top / bottom buttons to message filters * Add preference to not prompt for message filter deletion * Clean up folder handling in FilterListDialog * Add refresh function to Filter list dialog so that it can be updated when already open and new filters are added externally * Use listbox rather than tree in FilterListDialog * MsgFilterList(args) should take targetFilter and pass it to FilterListDialog * Mail&News' start.xhtml: "We" link broken * Add search functionality to filter dialog Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-108=1 openSUSE-SLE-15.3-2022-108=1 Package List: - openSUSE Leap 15.3 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 java-1_8_0-ibm-demo-1.8.0_sr7.0-3.53.1 java-1_8_0-ibm-devel-1.8.0_sr7.0-3.53.1 java-1_8_0-ibm-src-1.8.0_sr7.0-3.53.1 - openSUSE Leap 15.3 (i586 x86_64): seamonkey-2.53.11.1-lp153.17.5.1 seamonkey-debuginfo-2.53.11.1-lp153.17.5.1 seamonkey-debugsource-2.53.11.1-lp153.17.5.1 seamonkey-dom-inspector-2.53.11.1-lp153.17.5.1 seamonkey-irc-2.53.11.1-lp153.17.5.1 - openSUSE Leap 15.3 (x86_64): java-1_8_0-ibm-32bit-1.8.0_sr7.0-3.53.1 java-1_8_0-ibm-alsa-1.8.0_sr7.0-3.53.1 java-1_8_0-ibm-devel-32bit-1.8.0_sr7.0-3.53.1 java-1_8_0-ibm-plugin-1.8.0_sr7.0-3.53.1 References: https://www.suse.com/security/cve/CVE-2021-2163.html https://www.suse.com/security/cve/CVE-2021-2341.html https://www.suse.com/security/cve/CVE-2021-2369.html https://www.suse.com/security/cve/CVE-2021-35556.html https://www.suse.com/security/cve/CVE-2021-35559.html https://www.suse.com/security/cve/CVE-2021-35560.html https://www.suse.com/security/cve/CVE-2021-35564.html https://www.suse.com/security/cve/CVE-2021-35565.html https://www.suse.com/security/cve/CVE-2021-35578.html https://www.suse.com/security/cve/CVE-2021-35586.html https://www.suse.com/security/cve/CVE-2021-35588.html https://www.suse.com/security/cve/CVE-2021-41035.html https://bugzilla.suse.com/1185055 https://bugzilla.suse.com/1188564 https://bugzilla.suse.com/1188565 https://bugzilla.suse.com/1191902 https://bugzilla.suse.com/1191904 https://bugzilla.suse.com/1191905 https://bugzilla.suse.com/1191909 https://bugzilla.suse.com/1191910 https://bugzilla.suse.com/1191911 https://bugzilla.suse.com/1191913 https://bugzilla.suse.com/1191914 https://bugzilla.suse.com/1192052 https://bugzilla.suse.com/1194198 https://bugzilla.suse.com/1194232 https://bugzilla.suse.com/1197518

1 0

openSUSE-SU-2022:1127-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 07 Apr '22

07 Apr '22

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1127-1 Rating: important References: #1197698 #1197903 Cross-References: CVE-2022-1097 CVE-2022-1196 CVE-2022-24713 CVE-2022-28281 CVE-2022-28282 CVE-2022-28285 CVE-2022-28286 CVE-2022-28289 CVSS scores: CVE-2022-24713 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-24713 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.8.0 ESR (bsc#1197903): MFSA 2022-14 (bsc#1197903) * CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use * CVE-2022-28281: Fixed an out of bounds write due to unexpected WebAuthN Extensions * CVE-2022-1196: Fixed a use-after-free after VR Process destruction * CVE-2022-28282: Fixed a use-after-free in DocumentL10n::TranslateDocument * CVE-2022-28285: Fixed incorrect AliasSet used in JIT Codegen * CVE-2022-28286: Fixed that iframe contents could be rendered outside the border * CVE-2022-24713: Fixed a denial of service via complex regular expressions * CVE-2022-28289: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8 The following non-security bugs were fixed: - Adjust rust dependency for SP3 and later. TW uses always the newest version of rust, but we don't, so we can't use the rust+cargo notation, which would need both < and >= requirements. (bsc#1197698) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1127=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1127=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.8.0-150200.152.26.1 MozillaFirefox-branding-upstream-91.8.0-150200.152.26.1 MozillaFirefox-debuginfo-91.8.0-150200.152.26.1 MozillaFirefox-debugsource-91.8.0-150200.152.26.1 MozillaFirefox-devel-91.8.0-150200.152.26.1 MozillaFirefox-translations-common-91.8.0-150200.152.26.1 MozillaFirefox-translations-other-91.8.0-150200.152.26.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.8.0-150200.152.26.1 MozillaFirefox-branding-upstream-91.8.0-150200.152.26.1 MozillaFirefox-debuginfo-91.8.0-150200.152.26.1 MozillaFirefox-debugsource-91.8.0-150200.152.26.1 MozillaFirefox-devel-91.8.0-150200.152.26.1 MozillaFirefox-translations-common-91.8.0-150200.152.26.1 MozillaFirefox-translations-other-91.8.0-150200.152.26.1 References: https://www.suse.com/security/cve/CVE-2022-1097.html https://www.suse.com/security/cve/CVE-2022-1196.html https://www.suse.com/security/cve/CVE-2022-24713.html https://www.suse.com/security/cve/CVE-2022-28281.html https://www.suse.com/security/cve/CVE-2022-28282.html https://www.suse.com/security/cve/CVE-2022-28285.html https://www.suse.com/security/cve/CVE-2022-28286.html https://www.suse.com/security/cve/CVE-2022-28289.html https://bugzilla.suse.com/1197698 https://bugzilla.suse.com/1197903

1 0

openSUSE-RU-2022:1126-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 07 Apr '22

07 Apr '22

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1126-1 Rating: moderate References: #1197297 #1197788 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for nfs-utils fixes the following issues: - Ensure `sloppy` is added correctly for newer kernels. (bsc#1197297) * This is required for kernels since 5.6 (like in SUSE Linux Enterprise 15 SP4), and it's safe for all kernels. - Fix the source build with new `glibc` like in SUSE Linux Enterprise 15 SP4. (bsc#1197788) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1126=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1126=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nfs-client-2.1.1-150100.10.24.1 nfs-client-debuginfo-2.1.1-150100.10.24.1 nfs-doc-2.1.1-150100.10.24.1 nfs-kernel-server-2.1.1-150100.10.24.1 nfs-kernel-server-debuginfo-2.1.1-150100.10.24.1 nfs-utils-debuginfo-2.1.1-150100.10.24.1 nfs-utils-debugsource-2.1.1-150100.10.24.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): nfs-client-2.1.1-150100.10.24.1 nfs-client-debuginfo-2.1.1-150100.10.24.1 nfs-doc-2.1.1-150100.10.24.1 nfs-kernel-server-2.1.1-150100.10.24.1 nfs-kernel-server-debuginfo-2.1.1-150100.10.24.1 nfs-utils-debuginfo-2.1.1-150100.10.24.1 nfs-utils-debugsource-2.1.1-150100.10.24.1 References: https://bugzilla.suse.com/1197297 https://bugzilla.suse.com/1197788

1 0

openSUSE-SU-2022:0105-1: important: Security update for pdns-recursor
by opensuse-security＠opensuse.org 07 Apr '22

07 Apr '22

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0105-1 Rating: important References: #1197525 Cross-References: CVE-2022-27227 CVSS scores: CVE-2022-27227 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27227 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pdns-recursor fixes the following issues: - CVE-2022-27227: Fixed incomplete validation of incoming IXFR transfers. It applies to setups retrieving one or more RPZ zones from a remote server if the network path to the server is not trusted. (boo#1197525) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-105=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): pdns-recursor-4.3.5-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-27227.html https://bugzilla.suse.com/1197525

1 0

openSUSE-SU-2022:0104-1: important: Security update for SDL2
by opensuse-security＠opensuse.org 07 Apr '22

07 Apr '22

openSUSE Security Update: Security update for SDL2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0104-1 Rating: important References: #1181201 #1181202 #1197525 Cross-References: CVE-2020-14409 CVE-2020-14410 CVE-2022-27227 CVSS scores: CVE-2020-14409 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-14409 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-14410 (NVD) : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2020-14410 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-27227 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27227 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for SDL2 fixes the following issues: - CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202). - CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-104=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-104=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): SDL2-debugsource-2.0.8-11.3.1 libSDL2-2_0-0-2.0.8-11.3.1 libSDL2-2_0-0-debuginfo-2.0.8-11.3.1 libSDL2-devel-2.0.8-11.3.1 - openSUSE Leap 15.3 (x86_64): libSDL2-2_0-0-32bit-2.0.8-11.3.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-11.3.1 libSDL2-devel-32bit-2.0.8-11.3.1 - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): pdns-4.3.1-bp153.2.3.1 pdns-backend-geoip-4.3.1-bp153.2.3.1 pdns-backend-godbc-4.3.1-bp153.2.3.1 pdns-backend-ldap-4.3.1-bp153.2.3.1 pdns-backend-lua-4.3.1-bp153.2.3.1 pdns-backend-mysql-4.3.1-bp153.2.3.1 pdns-backend-postgresql-4.3.1-bp153.2.3.1 pdns-backend-remote-4.3.1-bp153.2.3.1 pdns-backend-sqlite3-4.3.1-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-14409.html https://www.suse.com/security/cve/CVE-2020-14410.html https://www.suse.com/security/cve/CVE-2022-27227.html https://bugzilla.suse.com/1181201 https://bugzilla.suse.com/1181202 https://bugzilla.suse.com/1197525

1 0

openSUSE-RU-2022:1124-1: Recommended update for compat-libpthread-nonshared
by maintenance＠opensuse.org 06 Apr '22

06 Apr '22

openSUSE Recommended Update: Recommended update for compat-libpthread-nonshared ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1124-1 Rating: low References: #1197272 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for compat-libpthread-nonshared fixes the following issues: - Also build s390x version (bsc#1197272) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1124=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1124=1 Package List: - openSUSE Leap 15.4 (x86_64): compat-libpthread-nonshared-0-150300.3.6.1 compat-libpthread-nonshared-32bit-0-150300.3.6.1 - openSUSE Leap 15.3 (x86_64): compat-libpthread-nonshared-0-150300.3.6.1 compat-libpthread-nonshared-32bit-0-150300.3.6.1 References: https://bugzilla.suse.com/1197272

1 0

openSUSE-RU-2022:1119-1: moderate: Recommended update for supportutils
by maintenance＠opensuse.org 06 Apr '22

06 Apr '22

openSUSE Recommended Update: Recommended update for supportutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1119-1 Rating: moderate References: #1189028 #1190315 #1190943 #1191096 #1191794 #1193204 #1193732 #1193868 #1195797 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for supportutils fixes the following issues: - Add command `blkid` - Add email.txt based on OPTION_EMAIL (bsc#1189028) - Add rpcinfo -p output #116 - Add s390x specific files and output - Add shared memory as a log directory for emergency use (bsc#1190943) - Fix cron package for RPM validation (bsc#1190315) - Fix for invalid argument during updates (bsc#1193204) - Fix iscsi initiator name (bsc#1195797) - Improve `lsblk` readability with `--ascsi` option - Include 'multipath -t' output in mpio.txt - Include /etc/sssd/conf.d configuration files - Include udev rules in /lib/udev/rules.d/ - Made /proc directory and network names spaces configurable (bsc#1193868) - Prepare future installation of binaries to /usr/sbin instead of /sbin. This does not affect SUSE Linux Enterprise 15 Serivce Pack 3 and 4 (bsc#1191096) - Move localmessage/warm logs out of messages.txt to new localwarn.txt - Optimize configuration files - Remove chronyc DNS lookups with -n switch (bsc#1193732) - Remove duplicate commands in network.txt - Remove duplicate firewalld status output - getappcore identifies compressed core files (bsc#1191794) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1119=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1119=1 Package List: - openSUSE Leap 15.4 (noarch): supportutils-3.1.20-150300.7.35.10.1 - openSUSE Leap 15.3 (noarch): supportutils-3.1.20-150300.7.35.10.1 References: https://bugzilla.suse.com/1189028 https://bugzilla.suse.com/1190315 https://bugzilla.suse.com/1190943 https://bugzilla.suse.com/1191096 https://bugzilla.suse.com/1191794 https://bugzilla.suse.com/1193204 https://bugzilla.suse.com/1193732 https://bugzilla.suse.com/1193868 https://bugzilla.suse.com/1195797

1 0