April 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2022:1100-1: important: Security update for 389-ds
by opensuse-security＠opensuse.org 04 Apr '22

04 Apr '22

openSUSE Security Update: Security update for 389-ds ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1100-1 Rating: important References: #1194068 #1194084 #1197275 #1197345 Cross-References: CVE-2022-0918 CVE-2022-0996 CVSS scores: CVE-2022-0918 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0918 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0996 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-0996 (SUSE): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for 389-ds fixes the following issues: - CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275). - CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345). - Resolved LDAP-Support not working with DHCP by adding required schema (bsc#1194068) - Resolved multiple index migration bug (bsc#1194084) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1100=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): 389-ds-1.4.4.19~git28.b12c72226-150300.3.12.1 389-ds-debuginfo-1.4.4.19~git28.b12c72226-150300.3.12.1 389-ds-debugsource-1.4.4.19~git28.b12c72226-150300.3.12.1 389-ds-devel-1.4.4.19~git28.b12c72226-150300.3.12.1 389-ds-snmp-1.4.4.19~git28.b12c72226-150300.3.12.1 389-ds-snmp-debuginfo-1.4.4.19~git28.b12c72226-150300.3.12.1 lib389-1.4.4.19~git28.b12c72226-150300.3.12.1 libsvrcore0-1.4.4.19~git28.b12c72226-150300.3.12.1 libsvrcore0-debuginfo-1.4.4.19~git28.b12c72226-150300.3.12.1 References: https://www.suse.com/security/cve/CVE-2022-0918.html https://www.suse.com/security/cve/CVE-2022-0996.html https://bugzilla.suse.com/1194068 https://bugzilla.suse.com/1194084 https://bugzilla.suse.com/1197275 https://bugzilla.suse.com/1197345

1 0

openSUSE-RU-2022:1098-1: moderate: Recommended update for davfs2
by maintenance＠opensuse.org 04 Apr '22

04 Apr '22

openSUSE Recommended Update: Recommended update for davfs2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1098-1 Rating: moderate References: #1188967 #1193733 #1194537 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for davfs2 fixes the following issues: - Fix potential crash on umount (bsc#1194537) - Check for valid server etag property (bsc#1193733) - Fix cached file attributes (bsc#1188967) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1098=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1098=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): davfs2-1.5.4-150000.3.8.1 davfs2-debuginfo-1.5.4-150000.3.8.1 davfs2-debugsource-1.5.4-150000.3.8.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): davfs2-1.5.4-150000.3.8.1 davfs2-debuginfo-1.5.4-150000.3.8.1 davfs2-debugsource-1.5.4-150000.3.8.1 References: https://bugzilla.suse.com/1188967 https://bugzilla.suse.com/1193733 https://bugzilla.suse.com/1194537

1 0

openSUSE-RU-2022:1099-1: moderate: Recommended update for aaa_base
by maintenance＠opensuse.org 04 Apr '22

04 Apr '22

openSUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1099-1 Rating: moderate References: #1194883 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aaa_base fixes the following issues: - Set net.ipv4.ping_group_range to allow ICMP ping (bsc#1194883) - Include all fixes and changes for systemwide inputrc to remove the 8 bit escape sequence which interfere with UTF-8 multi byte characters as well as support the vi mode of readline library Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1099=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1099=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): aaa_base-84.87+git20180409.04c9dae-3.57.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-3.57.1 aaa_base-debugsource-84.87+git20180409.04c9dae-3.57.1 aaa_base-extras-84.87+git20180409.04c9dae-3.57.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-3.57.1 aaa_base-wsl-84.87+git20180409.04c9dae-3.57.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): aaa_base-84.87+git20180409.04c9dae-3.57.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-3.57.1 aaa_base-debugsource-84.87+git20180409.04c9dae-3.57.1 aaa_base-extras-84.87+git20180409.04c9dae-3.57.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-3.57.1 aaa_base-wsl-84.87+git20180409.04c9dae-3.57.1 References: https://bugzilla.suse.com/1194883

1 0

openSUSE-RU-2022:1095-1: moderate: Recommended update for sssd
by maintenance＠opensuse.org 04 Apr '22

04 Apr '22

openSUSE Recommended Update: Recommended update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1095-1 Rating: moderate References: #1190775 #1196564 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sssd fixes the following issues: - Fix a crash caused by a read-after-free condition. (bsc#1196564) - Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attribute. (bsc#1190775) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1095=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1095=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): sssd-wbclient-1.16.1-150300.23.26.1 sssd-wbclient-debuginfo-1.16.1-150300.23.26.1 sssd-wbclient-devel-1.16.1-150300.23.26.1 - openSUSE Leap 15.4 (x86_64): sssd-common-32bit-1.16.1-150300.23.26.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.26.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libipa_hbac-devel-1.16.1-150300.23.26.1 libipa_hbac0-1.16.1-150300.23.26.1 libipa_hbac0-debuginfo-1.16.1-150300.23.26.1 libnfsidmap-sss-1.16.1-150300.23.26.1 libnfsidmap-sss-debuginfo-1.16.1-150300.23.26.1 libsss_certmap-devel-1.16.1-150300.23.26.1 libsss_certmap0-1.16.1-150300.23.26.1 libsss_certmap0-debuginfo-1.16.1-150300.23.26.1 libsss_idmap-devel-1.16.1-150300.23.26.1 libsss_idmap0-1.16.1-150300.23.26.1 libsss_idmap0-debuginfo-1.16.1-150300.23.26.1 libsss_nss_idmap-devel-1.16.1-150300.23.26.1 libsss_nss_idmap0-1.16.1-150300.23.26.1 libsss_nss_idmap0-debuginfo-1.16.1-150300.23.26.1 libsss_simpleifp-devel-1.16.1-150300.23.26.1 libsss_simpleifp0-1.16.1-150300.23.26.1 libsss_simpleifp0-debuginfo-1.16.1-150300.23.26.1 python3-ipa_hbac-1.16.1-150300.23.26.1 python3-ipa_hbac-debuginfo-1.16.1-150300.23.26.1 python3-sss-murmur-1.16.1-150300.23.26.1 python3-sss-murmur-debuginfo-1.16.1-150300.23.26.1 python3-sss_nss_idmap-1.16.1-150300.23.26.1 python3-sss_nss_idmap-debuginfo-1.16.1-150300.23.26.1 python3-sssd-config-1.16.1-150300.23.26.1 python3-sssd-config-debuginfo-1.16.1-150300.23.26.1 sssd-1.16.1-150300.23.26.1 sssd-ad-1.16.1-150300.23.26.1 sssd-ad-debuginfo-1.16.1-150300.23.26.1 sssd-common-1.16.1-150300.23.26.1 sssd-common-debuginfo-1.16.1-150300.23.26.1 sssd-dbus-1.16.1-150300.23.26.1 sssd-dbus-debuginfo-1.16.1-150300.23.26.1 sssd-debugsource-1.16.1-150300.23.26.1 sssd-ipa-1.16.1-150300.23.26.1 sssd-ipa-debuginfo-1.16.1-150300.23.26.1 sssd-krb5-1.16.1-150300.23.26.1 sssd-krb5-common-1.16.1-150300.23.26.1 sssd-krb5-common-debuginfo-1.16.1-150300.23.26.1 sssd-krb5-debuginfo-1.16.1-150300.23.26.1 sssd-ldap-1.16.1-150300.23.26.1 sssd-ldap-debuginfo-1.16.1-150300.23.26.1 sssd-proxy-1.16.1-150300.23.26.1 sssd-proxy-debuginfo-1.16.1-150300.23.26.1 sssd-tools-1.16.1-150300.23.26.1 sssd-tools-debuginfo-1.16.1-150300.23.26.1 sssd-wbclient-1.16.1-150300.23.26.1 sssd-wbclient-debuginfo-1.16.1-150300.23.26.1 sssd-wbclient-devel-1.16.1-150300.23.26.1 sssd-winbind-idmap-1.16.1-150300.23.26.1 sssd-winbind-idmap-debuginfo-1.16.1-150300.23.26.1 - openSUSE Leap 15.3 (x86_64): sssd-common-32bit-1.16.1-150300.23.26.1 sssd-common-32bit-debuginfo-1.16.1-150300.23.26.1 References: https://bugzilla.suse.com/1190775 https://bugzilla.suse.com/1196564

1 0

openSUSE-RU-2022:1097-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 04 Apr '22

04 Apr '22

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1097-1 Rating: moderate References: #1197045 #1197046 #1197269 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for xorg-x11-server fixes the following issues: - sync pci ids with Mesa 20.2.4 (bsc#1197046) - sync GL driver PCI IDs with Mesa. (bsc#1197045) - avoid consequently failing page flip. (bsc#1197269) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1097=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1097=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): xorg-x11-server-wayland-1.20.3-150200.22.5.52.1 xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.52.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): xorg-x11-server-1.20.3-150200.22.5.52.1 xorg-x11-server-debuginfo-1.20.3-150200.22.5.52.1 xorg-x11-server-debugsource-1.20.3-150200.22.5.52.1 xorg-x11-server-extra-1.20.3-150200.22.5.52.1 xorg-x11-server-extra-debuginfo-1.20.3-150200.22.5.52.1 xorg-x11-server-sdk-1.20.3-150200.22.5.52.1 xorg-x11-server-source-1.20.3-150200.22.5.52.1 xorg-x11-server-wayland-1.20.3-150200.22.5.52.1 xorg-x11-server-wayland-debuginfo-1.20.3-150200.22.5.52.1 References: https://bugzilla.suse.com/1197045 https://bugzilla.suse.com/1197046 https://bugzilla.suse.com/1197269

1 0

openSUSE-RU-2022:0102-1: moderate: Recommended update for python-ipython
by maintenance＠opensuse.org 02 Apr '22

02 Apr '22

openSUSE Recommended Update: Recommended update for python-ipython ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0102-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-ipython fixes the following issues: - Skip failing test_nest_embed on aarch64. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-102=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): python3-ipython-7.13.0-bp153.2.3.1 python3-ipython-iptest-7.13.0-bp153.2.3.1 References:

1 0

openSUSE-RU-2022:1092-1: critical: Recommended update for cloud-regionsrv-client
by maintenance＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Recommended Update: Recommended update for cloud-regionsrv-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1092-1 Rating: critical References: #1195414 #1195564 #1197113 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for cloud-regionsrv-client fixes the following issues: - Update to version 10.0.2 + Fix name of logfile in error message + Fix variable scoping to properly detect registration error + Cleanup any artifacts on registration failure + Fix latent bug with /etc/hosts population + Do not throw error when attemting to unregister a system that is not registered + Skip extension registration if the extension is recommended by the baseproduct as it gets automatically installed - Update to version 10.0.1 (bsc#1197113) + Provide status feedback on registration, success or failure + Log warning message if data provider is configured but no data can be retrieved - Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564) + The repo enablement timer cannot depend on 'guestregister.service' Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1092=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1092=1 Package List: - openSUSE Leap 15.4 (noarch): cloud-regionsrv-client-10.0.2-150000.6.65.1 cloud-regionsrv-client-addon-azure-1.0.3-150000.6.65.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.65.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.65.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.65.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.65.1 - openSUSE Leap 15.3 (noarch): cloud-regionsrv-client-10.0.2-150000.6.65.1 cloud-regionsrv-client-generic-config-1.0.0-150000.6.65.1 cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.65.1 cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.65.1 cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.65.1 References: https://bugzilla.suse.com/1195414 https://bugzilla.suse.com/1195564 https://bugzilla.suse.com/1197113

1 0

openSUSE-SU-2022:1091-1: moderate: Security update for python
by opensuse-security＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1091-1 Rating: moderate References: #1175619 #1186819 #1194146 #1195396 Cross-References: CVE-2021-3572 CVE-2021-4189 CVE-2022-0391 CVSS scores: CVE-2021-3572 (SUSE): 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N CVE-2021-4189 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-0391 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2022-0391 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for python fixes the following issues: - CVE-2022-0391: Fixed URL sanitization containing ASCII newline and tabs in urlparse (bsc#1195396). - CVE-2021-4189: Fixed ftplib not to trust the PASV response (bsc#1194146). - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1091=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1091=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-150000.38.2 libpython2_7-1_0-debuginfo-2.7.18-150000.38.2 python-2.7.18-150000.38.1 python-base-2.7.18-150000.38.2 python-base-debuginfo-2.7.18-150000.38.2 python-base-debugsource-2.7.18-150000.38.2 python-curses-2.7.18-150000.38.1 python-curses-debuginfo-2.7.18-150000.38.1 python-debuginfo-2.7.18-150000.38.1 python-debugsource-2.7.18-150000.38.1 python-demo-2.7.18-150000.38.1 python-devel-2.7.18-150000.38.2 python-gdbm-2.7.18-150000.38.1 python-gdbm-debuginfo-2.7.18-150000.38.1 python-idle-2.7.18-150000.38.1 python-tk-2.7.18-150000.38.1 python-tk-debuginfo-2.7.18-150000.38.1 python-xml-2.7.18-150000.38.2 python-xml-debuginfo-2.7.18-150000.38.2 - openSUSE Leap 15.4 (noarch): python-doc-2.7.18-150000.38.1 python-doc-pdf-2.7.18-150000.38.1 - openSUSE Leap 15.4 (x86_64): libpython2_7-1_0-32bit-2.7.18-150000.38.2 libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.38.2 python-32bit-2.7.18-150000.38.1 python-32bit-debuginfo-2.7.18-150000.38.1 python-base-32bit-2.7.18-150000.38.2 python-base-32bit-debuginfo-2.7.18-150000.38.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-150000.38.2 libpython2_7-1_0-debuginfo-2.7.18-150000.38.2 python-2.7.18-150000.38.1 python-base-2.7.18-150000.38.2 python-base-debuginfo-2.7.18-150000.38.2 python-base-debugsource-2.7.18-150000.38.2 python-curses-2.7.18-150000.38.1 python-curses-debuginfo-2.7.18-150000.38.1 python-debuginfo-2.7.18-150000.38.1 python-debugsource-2.7.18-150000.38.1 python-demo-2.7.18-150000.38.1 python-devel-2.7.18-150000.38.2 python-gdbm-2.7.18-150000.38.1 python-gdbm-debuginfo-2.7.18-150000.38.1 python-idle-2.7.18-150000.38.1 python-tk-2.7.18-150000.38.1 python-tk-debuginfo-2.7.18-150000.38.1 python-xml-2.7.18-150000.38.2 python-xml-debuginfo-2.7.18-150000.38.2 - openSUSE Leap 15.3 (x86_64): libpython2_7-1_0-32bit-2.7.18-150000.38.2 libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.38.2 python-32bit-2.7.18-150000.38.1 python-32bit-debuginfo-2.7.18-150000.38.1 python-base-32bit-2.7.18-150000.38.2 python-base-32bit-debuginfo-2.7.18-150000.38.2 - openSUSE Leap 15.3 (noarch): python-doc-2.7.18-150000.38.1 python-doc-pdf-2.7.18-150000.38.1 References: https://www.suse.com/security/cve/CVE-2021-3572.html https://www.suse.com/security/cve/CVE-2021-4189.html https://www.suse.com/security/cve/CVE-2022-0391.html https://bugzilla.suse.com/1175619 https://bugzilla.suse.com/1186819 https://bugzilla.suse.com/1194146 https://bugzilla.suse.com/1195396

1 0

openSUSE-RU-2022:1074-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1074-1 Rating: moderate References: #1193531 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-init contains the following fixes: - Enable broader systemctl location. (bsc#1193531) - Remove unneeded BuildRequires on python3-nose. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1074=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1074=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cloud-init-21.2-8.54.2 cloud-init-config-suse-21.2-8.54.2 cloud-init-doc-21.2-8.54.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): cloud-init-21.2-8.54.2 cloud-init-config-suse-21.2-8.54.2 cloud-init-doc-21.2-8.54.2 References: https://bugzilla.suse.com/1193531

1 0

openSUSE-SU-2022:1073-1: moderate: Security update for yaml-cpp
by opensuse-security＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Security Update: Security update for yaml-cpp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:1073-1 Rating: moderate References: #1121227 #1121230 #1122004 #1122021 Cross-References: CVE-2018-20573 CVE-2018-20574 CVE-2019-6285 CVE-2019-6292 CVSS scores: CVE-2018-20573 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-20573 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2018-20574 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2018-20574 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-6285 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-6285 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2019-6292 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-6292 (SUSE): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for yaml-cpp fixes the following issues: - CVE-2018-20573: Fixed remote DOS via a crafted YAML file in function Scanner:EnsureTokensInQueue (bsc#1121227). - CVE-2018-20574: Fixed remote DOS via a crafted YAML file in function SingleDocParser:HandleFlowMap (bsc#1121230). - CVE-2019-6285: Fixed remote DOS via a crafted YAML file in function SingleDocParser::HandleFlowSequence (bsc#1122004). - CVE-2019-6292: Fixed DOS by stack consumption in singledocparser.cpp (bsc#1122021). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1073=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libyaml-cpp0_6-0.6.1-4.5.1 libyaml-cpp0_6-debuginfo-0.6.1-4.5.1 yaml-cpp-debugsource-0.6.1-4.5.1 yaml-cpp-devel-0.6.1-4.5.1 References: https://www.suse.com/security/cve/CVE-2018-20573.html https://www.suse.com/security/cve/CVE-2018-20574.html https://www.suse.com/security/cve/CVE-2019-6285.html https://www.suse.com/security/cve/CVE-2019-6292.html https://bugzilla.suse.com/1121227 https://bugzilla.suse.com/1121230 https://bugzilla.suse.com/1122004 https://bugzilla.suse.com/1122021

1 0

openSUSE-RU-2022:1070-1: Recommended update for release-notes-sles
by maintenance＠opensuse.org 01 Apr '22

01 Apr '22

openSUSE Recommended Update: Recommended update for release-notes-sles ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:1070-1 Rating: low References: #933411 SLE-14763 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix and contains one feature can now be installed. Description: This update for release-notes-sles fixes the following issues: Update the release notes to version 15.3.20220324. (bsc#933411) - Move KubeVirt out of technology previews for Intel 64/AMD64 (x86-64) - Fix GICv4.1 acronym in aarch64. (jsc#SLE-14763) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1070=1 Package List: - openSUSE Leap 15.3 (noarch): release-notes-sles-15.3.20220324-150300.3.23.1 References: https://bugzilla.suse.com/933411

1 0