openSUSE Updates June 2022

updates@lists.opensuse.org

2 participants
123 discussions

openSUSE-RU-2022:10024-1: moderate: Recommended update for atop
by maintenance＠opensuse.org 23 Jun '22

23 Jun '22

openSUSE Recommended Update: Recommended update for atop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10024-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for atop fixes the following issues: atop was updated to 2.7.1: * Correct disk stats in atopsar (#182) * Explicit type definition in atop.service (#180) Update to 2.7.0: * Describe (un)restricted view in first screen * Cosmetic change * Determine (un)restricted view by verifying suid instead of euid. * Do not ignore unknown network interface * Parseable output: optionally exchange spaces in command * No setuid by default * Correct conversion to 2.7 raw files * Corrected type * Only show per-node NUMA stats when more than 1 node * Prepare man pages for version 2.7 * Prepare atopconvert for version 2.7 * Detect logrotation for process accounting with psacct/acct * Speed and duplex mode not correctly filled for interface * Bug solution related to discards * Support discard counter for disks and skip unused disks * ifprop.c: fix ioctl parameter after handshaking with kernel * Show gigabits/sec instead of megabits/sec for Infiniband #131 * CVE: use execvp with a specified path to avoid PATH hijacking * Correct memory busy logic in atopsar * Add parseable output for per-node NUMA counters * Additions to NUMA counters Table overflow checks * Gather and show per numa cpu related statistics * Gather and show per numa memory related statistics * Correction in handling of zswap and ksm counters * Support containers created by podman * Cleanup old messages * Do not change owner to root in Makefile (#76) * Support process accounting log /var/log/account/pacct (#138) * Polish do_perfevents when atop built with NOPERFEVENT * Do not use doconvert funtion to validate counter (#160) * New counter for number of NUMA pages migrated * Modify field order and priority of paging counters * Small text modification for migrated counter * Avoid non-initialized prestat by introducing extra pointer * Function 'calcdiff' (deviate.c) used uninitialized prestat struct * Reserver space for future counters. * Clean up ignored files * Variable number of positions for sortitem * Adapt man page of atop for state selection (add state 'I'). * Allow thread state 'I' with state selection (key 'Q') * Count idle threads as non-interruptible threads * Uninitialized index might cause segmentation fault. * Support NVMe multipath disk statistics * Support page migration counter * photosyst.c: fix build on musl * Use of struct ethtool_link_settings should be conditional * Cosmetic change (source code layout) * Various bug fixes and in general add 'thread' to all messages * Properly define if interface is virtual or physical * Add license info to various include files (solves issue #144) * HTTP statistics modified from -h flag to -o flag (#152) * Possible buffer overflow with huge number of seconds Number of seconds will be limited to 5 positions. * Possible buffer overflow with average disk I/O * Allow process selection based on specific process states. * Correct definition of environment variable LOGOPTS * Switch to using curses vw_printw as vwprintw is deprecated * Support multiple counters 'allocstall_' in /proc/vmstat. * Avoid integer overflow when calculating PSI percentages. * Suppress irrelevant counters (solves issue #148) * Add the number of OOM kills to the -s report * Record the number of process stalls to run memory compaction * Make clean removes atopsar now (issue 145) * Add counter for the number of OOM kills to the PAG line * Add counters for zswap and KSM. * ifprop.c: fix build with kernel < 4.6 * Fix initifprop() when obtaining properties of all interfaces * Fixed rounding problems in the average-per-second mode. Update to version 2.6.0 * Sort threads within process. * Individual threads within a process (key 'y') are shown in the order of their TID. With the additional key 'Y' threads within a process are sorted based on the current sort criterium. * Show the WCHAN per thread. * With the key 'W' is active, the wait channel is determined per thread and shown with the scheduling information (key 's'). * Show runqueue delay per thread/process. * For every process (cumulated) and every thread the time spent waiting on the runqueue is shown as value 'RDELAY'. * Show other modified/new metrics: + PSI pressure during interval time is shown + Counter 'avio' (average I/O time) for fast disks in microseconds or nanoseconds + Counter 'zfarc' showing the current size of the ARC (cache) for ZFSonlinux + Counter 'swcac' showing the current size of the swap cache + Counter LOCKSZ showing the virtual locked memory size * Avoid crash with very high load average values. * Fix errors in reading InfiniBand states. * Support of rawlog files spanning multiple days. * The time specification to define the begin time (-b flag) and end time (-e flag) of both atop and atopsar is [YYYYMMDD]hhmm now * This also applies to the branch key ('b') when using atop interactively. * Support reading rawlog from a pipe. * Rawlog data can be read from a pipe by atop and atopsar with the option '-r -'. In this way, concatenated rawlog data from the command atopcat can be directly processed. * New program atopcat, the program atopcat concatenates rawlog files and writes this data to stdout. The output can be redirected to a new rawlog file or to atop/atopsar directly via a pipe (see option '-r -' of these commands). In this way e.g. weekly or monthly reports or extractions can be created. Update to version 2.5.0 Modifications for atop: * Avoid using perf counters in VM New option 'perfevents' in the atoprc file to define if the Instructions Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the Instructions Per Cycle counter will not be retrieved on VMs due to the overhead of reading this counter in a guest. * Improve daily rotation of logfile for systemd-based systems. Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop, /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily, /var/log/atop/dummy_after and /var/log/atop/dummy_before by atop-rotate.service and atop-rotate.timer. * Bug fixes: Correction of PSI value 'io full'. Use smaps_rollup (if present) instead of smaps for better performance. Use writev instead of 3 single writes to avoid logfile corruption. Modified handling of error messages (remain visible after window is closed). Correct CID for containers created by Kubernetes. Allow reading a logfile via a named pipe (non-seekable). Modifications for atopconvert: * Show version of input file (even if only one parameter specified). General: * The format of the raw file is compatible with version 2.4. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10024=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): atop-2.7.1-bp154.2.3.1 atop-daemon-2.7.1-bp154.2.3.1 References:

1 0

openSUSE-SU-2022:10023-1: important: Security update for tor
by opensuse-security＠opensuse.org 22 Jun '22

22 Jun '22

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10023-1 Rating: important References: #1200672 Cross-References: CVE-2022-33903 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tor fixes the following issues: tor was updated to 0.4.7.8: * Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious endpoint. (TROVE-2022-001, CVE-2022-33903, boo#1200672) * Regenerate fallback directories generated on June 17, 2022. * Update the geoip files to match the IPFire Location Database, as retrieved on 2022/06/17. * Allow the rseq system call in the sandbox * logging bug fixes Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10023=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10023=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): tor-0.4.7.8-bp154.2.3.1 tor-debuginfo-0.4.7.8-bp154.2.3.1 tor-debugsource-0.4.7.8-bp154.2.3.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le x86_64): tor-0.4.7.8-bp153.2.15.1 References: https://www.suse.com/security/cve/CVE-2022-33903.html https://bugzilla.suse.com/1200672

1 0

SUSE-RU-2022:2157-1: moderate: Recommended update for binutils
by maintenance＠opensuse.org 22 Jun '22

22 Jun '22

SUSE Recommended Update: Recommended update for binutils ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2157-1 Rating: moderate References: #1198458 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for binutils fixes the following issues: - For building the shim 15.6~rc1 and later versions aarch64 image, objcopy needs to support efi-app-aarch64 target. (bsc#1198458) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2157=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2157=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-2157=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-2157=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-2157=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-2157=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2157=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2157=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): binutils-2.37-150100.7.37.1 binutils-debuginfo-2.37-150100.7.37.1 binutils-debugsource-2.37-150100.7.37.1 binutils-devel-2.37-150100.7.37.1 binutils-gold-2.37-150100.7.37.1 binutils-gold-debuginfo-2.37-150100.7.37.1 bpftrace-0.14.0-150400.3.2.2 cross-arm-binutils-2.37-150100.7.37.1 cross-arm-binutils-debuginfo-2.37-150100.7.37.1 cross-arm-binutils-debugsource-2.37-150100.7.37.1 cross-avr-binutils-2.37-150100.7.37.1 cross-avr-binutils-debuginfo-2.37-150100.7.37.1 cross-avr-binutils-debugsource-2.37-150100.7.37.1 cross-epiphany-binutils-2.37-150100.7.37.1 cross-epiphany-binutils-debuginfo-2.37-150100.7.37.1 cross-epiphany-binutils-debugsource-2.37-150100.7.37.1 cross-hppa-binutils-2.37-150100.7.37.1 cross-hppa-binutils-debuginfo-2.37-150100.7.37.1 cross-hppa-binutils-debugsource-2.37-150100.7.37.1 cross-hppa64-binutils-2.37-150100.7.37.1 cross-hppa64-binutils-debuginfo-2.37-150100.7.37.1 cross-hppa64-binutils-debugsource-2.37-150100.7.37.1 cross-i386-binutils-2.37-150100.7.37.1 cross-i386-binutils-debuginfo-2.37-150100.7.37.1 cross-i386-binutils-debugsource-2.37-150100.7.37.1 cross-ia64-binutils-2.37-150100.7.37.1 cross-ia64-binutils-debuginfo-2.37-150100.7.37.1 cross-ia64-binutils-debugsource-2.37-150100.7.37.1 cross-m68k-binutils-2.37-150100.7.37.1 cross-m68k-binutils-debuginfo-2.37-150100.7.37.1 cross-m68k-binutils-debugsource-2.37-150100.7.37.1 cross-mips-binutils-2.37-150100.7.37.1 cross-mips-binutils-debuginfo-2.37-150100.7.37.1 cross-mips-binutils-debugsource-2.37-150100.7.37.1 cross-ppc-binutils-2.37-150100.7.37.1 cross-ppc-binutils-debuginfo-2.37-150100.7.37.1 cross-ppc-binutils-debugsource-2.37-150100.7.37.1 cross-ppc64-binutils-2.37-150100.7.37.1 cross-ppc64-binutils-debuginfo-2.37-150100.7.37.1 cross-ppc64-binutils-debugsource-2.37-150100.7.37.1 cross-riscv64-binutils-2.37-150100.7.37.1 cross-riscv64-binutils-debuginfo-2.37-150100.7.37.1 cross-riscv64-binutils-debugsource-2.37-150100.7.37.1 cross-rx-binutils-2.37-150100.7.37.1 cross-rx-binutils-debuginfo-2.37-150100.7.37.1 cross-rx-binutils-debugsource-2.37-150100.7.37.1 cross-s390-binutils-2.37-150100.7.37.1 cross-s390-binutils-debuginfo-2.37-150100.7.37.1 cross-s390-binutils-debugsource-2.37-150100.7.37.1 cross-sparc-binutils-2.37-150100.7.37.1 cross-sparc-binutils-debuginfo-2.37-150100.7.37.1 cross-sparc-binutils-debugsource-2.37-150100.7.37.1 cross-sparc64-binutils-2.37-150100.7.37.1 cross-sparc64-binutils-debuginfo-2.37-150100.7.37.1 cross-sparc64-binutils-debugsource-2.37-150100.7.37.1 cross-spu-binutils-2.37-150100.7.37.1 cross-spu-binutils-debuginfo-2.37-150100.7.37.1 cross-spu-binutils-debugsource-2.37-150100.7.37.1 libctf-nobfd0-2.37-150100.7.37.1 libctf-nobfd0-debuginfo-2.37-150100.7.37.1 libctf0-2.37-150100.7.37.1 libctf0-debuginfo-2.37-150100.7.37.1 - openSUSE Leap 15.4 (aarch64 ppc64le x86_64): cross-s390x-binutils-2.37-150100.7.37.1 cross-s390x-binutils-debuginfo-2.37-150100.7.37.1 cross-s390x-binutils-debugsource-2.37-150100.7.37.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x): cross-x86_64-binutils-2.37-150100.7.37.1 cross-x86_64-binutils-debuginfo-2.37-150100.7.37.1 cross-x86_64-binutils-debugsource-2.37-150100.7.37.1 - openSUSE Leap 15.4 (ppc64le s390x x86_64): cross-aarch64-binutils-2.37-150100.7.37.1 cross-aarch64-binutils-debuginfo-2.37-150100.7.37.1 cross-aarch64-binutils-debugsource-2.37-150100.7.37.1 - openSUSE Leap 15.4 (aarch64 s390x x86_64): cross-ppc64le-binutils-2.37-150100.7.37.1 cross-ppc64le-binutils-debuginfo-2.37-150100.7.37.1 cross-ppc64le-binutils-debugsource-2.37-150100.7.37.1 - openSUSE Leap 15.4 (noarch): bpftrace-tools-0.14.0-150400.3.2.2 - openSUSE Leap 15.4 (x86_64): binutils-devel-32bit-2.37-150100.7.37.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): binutils-2.37-150100.7.37.1 binutils-debuginfo-2.37-150100.7.37.1 binutils-debugsource-2.37-150100.7.37.1 binutils-devel-2.37-150100.7.37.1 binutils-gold-2.37-150100.7.37.1 binutils-gold-debuginfo-2.37-150100.7.37.1 bpftrace-0.11.4-150300.3.11.4 cross-arm-binutils-2.37-150100.7.37.1 cross-arm-binutils-debuginfo-2.37-150100.7.37.1 cross-arm-binutils-debugsource-2.37-150100.7.37.1 cross-avr-binutils-2.37-150100.7.37.1 cross-avr-binutils-debuginfo-2.37-150100.7.37.1 cross-avr-binutils-debugsource-2.37-150100.7.37.1 cross-epiphany-binutils-2.37-150100.7.37.1 cross-epiphany-binutils-debuginfo-2.37-150100.7.37.1 cross-epiphany-binutils-debugsource-2.37-150100.7.37.1 cross-hppa-binutils-2.37-150100.7.37.1 cross-hppa-binutils-debuginfo-2.37-150100.7.37.1 cross-hppa-binutils-debugsource-2.37-150100.7.37.1 cross-hppa64-binutils-2.37-150100.7.37.1 cross-hppa64-binutils-debuginfo-2.37-150100.7.37.1 cross-hppa64-binutils-debugsource-2.37-150100.7.37.1 cross-i386-binutils-2.37-150100.7.37.1 cross-i386-binutils-debuginfo-2.37-150100.7.37.1 cross-i386-binutils-debugsource-2.37-150100.7.37.1 cross-ia64-binutils-2.37-150100.7.37.1 cross-ia64-binutils-debuginfo-2.37-150100.7.37.1 cross-ia64-binutils-debugsource-2.37-150100.7.37.1 cross-m68k-binutils-2.37-150100.7.37.1 cross-m68k-binutils-debuginfo-2.37-150100.7.37.1 cross-m68k-binutils-debugsource-2.37-150100.7.37.1 cross-mips-binutils-2.37-150100.7.37.1 cross-mips-binutils-debuginfo-2.37-150100.7.37.1 cross-mips-binutils-debugsource-2.37-150100.7.37.1 cross-ppc-binutils-2.37-150100.7.37.1 cross-ppc-binutils-debuginfo-2.37-150100.7.37.1 cross-ppc-binutils-debugsource-2.37-150100.7.37.1 cross-ppc64-binutils-2.37-150100.7.37.1 cross-ppc64-binutils-debuginfo-2.37-150100.7.37.1 cross-ppc64-binutils-debugsource-2.37-150100.7.37.1 cross-riscv64-binutils-2.37-150100.7.37.1 cross-riscv64-binutils-debuginfo-2.37-150100.7.37.1 cross-riscv64-binutils-debugsource-2.37-150100.7.37.1 cross-rx-binutils-2.37-150100.7.37.1 cross-rx-binutils-debuginfo-2.37-150100.7.37.1 cross-rx-binutils-debugsource-2.37-150100.7.37.1 cross-s390-binutils-2.37-150100.7.37.1 cross-s390-binutils-debuginfo-2.37-150100.7.37.1 cross-s390-binutils-debugsource-2.37-150100.7.37.1 cross-sparc-binutils-2.37-150100.7.37.1 cross-sparc-binutils-debuginfo-2.37-150100.7.37.1 cross-sparc-binutils-debugsource-2.37-150100.7.37.1 cross-sparc64-binutils-2.37-150100.7.37.1 cross-sparc64-binutils-debuginfo-2.37-150100.7.37.1 cross-sparc64-binutils-debugsource-2.37-150100.7.37.1 cross-spu-binutils-2.37-150100.7.37.1 cross-spu-binutils-debuginfo-2.37-150100.7.37.1 cross-spu-binutils-debugsource-2.37-150100.7.37.1 libctf-nobfd0-2.37-150100.7.37.1 libctf-nobfd0-debuginfo-2.37-150100.7.37.1 libctf0-2.37-150100.7.37.1 libctf0-debuginfo-2.37-150100.7.37.1 - openSUSE Leap 15.3 (aarch64 ppc64le x86_64): cross-s390x-binutils-2.37-150100.7.37.1 cross-s390x-binutils-debuginfo-2.37-150100.7.37.1 cross-s390x-binutils-debugsource-2.37-150100.7.37.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x): cross-x86_64-binutils-2.37-150100.7.37.1 cross-x86_64-binutils-debuginfo-2.37-150100.7.37.1 cross-x86_64-binutils-debugsource-2.37-150100.7.37.1 - openSUSE Leap 15.3 (ppc64le s390x x86_64): cross-aarch64-binutils-2.37-150100.7.37.1 cross-aarch64-binutils-debuginfo-2.37-150100.7.37.1 cross-aarch64-binutils-debugsource-2.37-150100.7.37.1 - openSUSE Leap 15.3 (aarch64 s390x x86_64): cross-ppc64le-binutils-2.37-150100.7.37.1 cross-ppc64le-binutils-debuginfo-2.37-150100.7.37.1 cross-ppc64le-binutils-debugsource-2.37-150100.7.37.1 - openSUSE Leap 15.3 (x86_64): binutils-devel-32bit-2.37-150100.7.37.1 - openSUSE Leap 15.3 (noarch): bpftrace-tools-0.11.4-150300.3.11.4 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x x86_64): binutils-debuginfo-2.37-150100.7.37.1 binutils-debugsource-2.37-150100.7.37.1 binutils-gold-2.37-150100.7.37.1 binutils-gold-debuginfo-2.37-150100.7.37.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): binutils-debuginfo-2.37-150100.7.37.1 binutils-debugsource-2.37-150100.7.37.1 binutils-gold-2.37-150100.7.37.1 binutils-gold-debuginfo-2.37-150100.7.37.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): bpftrace-0.14.0-150400.3.2.2 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch): bpftrace-tools-0.14.0-150400.3.2.2 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (x86_64): binutils-debugsource-2.37-150100.7.37.1 binutils-devel-32bit-2.37-150100.7.37.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): bpftrace-0.11.4-150300.3.11.4 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (x86_64): binutils-debugsource-2.37-150100.7.37.1 binutils-devel-32bit-2.37-150100.7.37.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch): bpftrace-tools-0.11.4-150300.3.11.4 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): binutils-2.37-150100.7.37.1 binutils-debuginfo-2.37-150100.7.37.1 binutils-debugsource-2.37-150100.7.37.1 binutils-devel-2.37-150100.7.37.1 libctf-nobfd0-2.37-150100.7.37.1 libctf-nobfd0-debuginfo-2.37-150100.7.37.1 libctf0-2.37-150100.7.37.1 libctf0-debuginfo-2.37-150100.7.37.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): binutils-2.37-150100.7.37.1 binutils-debuginfo-2.37-150100.7.37.1 binutils-debugsource-2.37-150100.7.37.1 binutils-devel-2.37-150100.7.37.1 libctf-nobfd0-2.37-150100.7.37.1 libctf-nobfd0-debuginfo-2.37-150100.7.37.1 libctf0-2.37-150100.7.37.1 libctf0-debuginfo-2.37-150100.7.37.1 References: https://bugzilla.suse.com/1198458

1 0

SUSE-RU-2022:2156-1: important: Recommended updates for python3-dnspython and python3-zypp-plugin:
by maintenance＠opensuse.org 22 Jun '22

22 Jun '22

SUSE Recommended Update: Recommended updates for python3-dnspython and python3-zypp-plugin: ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2156-1 Rating: important References: Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: - Add python3-dnspython and python3-zypp-plugin to unrestricted channels. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2156=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2156=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2022-2156=1 - SUSE Linux Enterprise Module for Public Cloud 15: zypper in -t patch SUSE-SLE-Module-Public-Cloud-Unrestricted-15-2022-2156=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-2156=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-2156=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2156=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2156=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2156=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2156=1 Package List: - openSUSE Leap 15.4 (noarch): python3-dnspython-1.15.0-150000.3.2.1 python3-zypp-plugin-0.6.3-150000.4.2.1 - openSUSE Leap 15.3 (noarch): python2-dnspython-1.15.0-150000.3.2.1 python2-zypp-plugin-0.6.3-150000.4.2.1 python3-dnspython-1.15.0-150000.3.2.1 python3-zypp-plugin-0.6.3-150000.4.2.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (noarch): python2-zypp-plugin-0.6.3-150000.4.2.1 - SUSE Linux Enterprise Module for Public Cloud 15 (noarch): python3-dnspython-1.15.0-150000.3.2.1 python3-zypp-plugin-0.6.3-150000.4.2.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (noarch): python2-dnspython-1.15.0-150000.3.2.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (noarch): python2-dnspython-1.15.0-150000.3.2.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): python3-dnspython-1.15.0-150000.3.2.1 python3-zypp-plugin-0.6.3-150000.4.2.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): python3-dnspython-1.15.0-150000.3.2.1 python3-zypp-plugin-0.6.3-150000.4.2.1 - SUSE Linux Enterprise Micro 5.2 (noarch): python3-zypp-plugin-0.6.3-150000.4.2.1 - SUSE Linux Enterprise Micro 5.1 (noarch): python3-zypp-plugin-0.6.3-150000.4.2.1 References:

1 0

openSUSE-SU-2022:10022-1: moderate: Security update for trivy
by opensuse-security＠opensuse.org 21 Jun '22

21 Jun '22

openSUSE Security Update: Security update for trivy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10022-1 Rating: moderate References: #1199760 Cross-References: CVE-2022-23648 CVE-2022-28946 CVSS scores: CVE-2022-23648 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-23648 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-28946 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-28946 (SUSE): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for trivy fixes the following issues: trivy was updated to version 0.28.0 (boo#1199760, CVE-2022-28946): * fix: remove Highlighted from json output (#2131) * fix: remove trivy-kubernetes replace (#2132) * docs: Add Operator docs under Kubernetes section (#2111) * fix(k8s): security-checks panic (#2127) * ci: added k8s scope (#2130) * docs: Update misconfig output in examples (#2128) * fix(misconf): Fix coloured output in Goland terminal (#2126) * docs(secret): Fix default value of --security-checks in docs (#2107) * refactor(report): move colorize function from trivy-db (#2122) * feat: k8s resource scanning (#2118) * chore: add CODEOWNERS (#2121) * feat(image): add `--server` option for remote scans (#1871) * refactor: k8s (#2116) * refactor: export useful APIs (#2108) * docs: fix k8s doc (#2114) * feat(kubernetes): Add report flag for summary (#2112) * fix: Remove problematic advanced rego policies (#2113) * feat(misconf): Add special output format for misconfigurations (#2100) * feat: add k8s subcommand (#2065) * chore: fix make lint version (#2102) * fix(java): handle relative pom modules (#2101) * fix(misconf): Add missing links for non-rego misconfig results (#2094) * feat(misconf): Added fs.FS based scanning via latest defsec (#2084) * chore(deps): bump trivy-issue-action to v0.0.4 (#2091) * chore(deps): bump github.com/twitchtv/twirp (#2077) * chore(deps): bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 (#2074) * chore(os): updated fanal version and alpine distroless test (#2086) * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.1 to 0.5.2 (#2075) * chore(deps): bump github.com/samber/lo from 1.16.0 to 1.19.0 (#2076) * feat(report): add support for SPDX (#2059) * chore(deps): bump actions/setup-go from 2 to 3 (#2073) * chore(deps): bump actions/cache from 3.0.1 to 3.0.2 (#2071) * chore(deps): bump golang from 1.18.0 to 1.18.1 (#2069) * chore(deps): bump actions/stale from 4 to 5 (#2070) * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.3.0 (#2072) * chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079) * chore: app version 0.27.0 (#2046) * fix(misconf): added to skip conf files if their scanning is not enabled (#2066) * docs(secret) fix rule path in docs (#2061) * docs: change from go.sum to go.mod (#2056) Update to version 0.27.1: * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.5.0 to 0.5.1 (#1926) * refactor(fs): scanner options (#2050) * feat(secret): truncate long line (#2052) * docs: fix a broken bullets (#2042) * feat(ubuntu): add 22.04 approx eol date (#2044) * docs: update installation.md (#2027) * docs: add Containerfile (#2032) Update to version 0.27.0: * fix(go): fixed panic to scan gomod without version (#2038) * docs(mariner): confirm it works with Mariner 2.0 VM (#2036) * feat(secret): support enable rules (#2035) * chore: app version 26.0 (#2030) * docs(secret): add a demo movie (#2031) * feat: support cache TTL in Redis (#2021) * fix(go): skip system installed binaries (#2028) * fix(go): check if go.sum is nil (#2029) * feat: add secret scanning (#1901) * chore: gh publish only with push the tag release (#2025) * fix(fs): ignore permission errors (#2022) * test(mod): using correct module inside test go.mod (#2020) * feat(server): re-add proxy support for client/server communications (#1995) * fix(report): truncate a description before escaping in ASFF template (#2004) * fix(cloudformation): correct margin removal for empty lines (#2002) * fix(template): correct check of old sarif template files (#2003) Update to version 0.26.0: * feat(alpine): warn mixing versions (#2000) * Update ASFF template (#1914) * chore(deps): replace `containerd/containerd` version to fix CVE-2022-23648 (#1994) * chore(deps): bump alpine from 3.15.3 to 3.15.4 (#1993) * test(go): add integration tests for gomod (#1989) * fix(python): fixed panic when scan .egg archive (#1992) * fix(go): set correct go modules type (#1990) * feat(alpine): support apk repositories (#1987) * docs: add CBL-Mariner (#1982) * docs(go): fix version (#1986) * feat(go): support go.mod in Go 1.17+ (#1985) * ci: fix URLs in the PR template (#1972) * ci: add semantic pull requests check (#1968) * docs(issue): added docs for wrong detection issues (#1961) Update to version 0.25.4: * docs: move CONTRIBUTING.md to docs (#1971) * refactor(table): use file name instead package path (#1966) * fix(sbom): add --db-repository (#1964) * feat(table): add PkgPath in table result (#1960) * fix(pom): merge multiple pom imports in a good manner (#1959) Update to version 0.25.3: * fix(downloadDB): add dbRepositoryFlag to repository and rootfs commands (#1956) * fix(misconf): update BurntSushi/toml for fix runtime error (#1948) * fix(misconf): Update fanal/defsec to resolve missing metadata issues (#1947) * feat(jar): allow setting Maven Central URL using environment variable (#1939) * chore(chart): update Trivy version in HelmChart to 0.25.0 (#1931) * chore(chart): remove version comments (#1933) Update to version 0.25.2: * fix(downloadDB): add flag to server command (#1942) Update to version 0.25.1: * fix(misconf): update defsec to resolve panics (#1935) * chore(deps): bump github.com/docker/docker (#1924) * docs: restructure the documentation (#1887) * chore(deps): bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 (#1923) * chore(deps): bump actions/cache from 2 to 3.0.1 (#1920) * chore(deps): bump actions/checkout from 2 to 3 (#1916) * chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921) * chore(deps): bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (#1919) * chore(deps): bump helm/chart-testing-action from 2.2.0 to 2.2.1 (#1918) * chore(deps): bump golang from 1.17 to 1.18.0 (#1915) * Add trivy horizontal logo (#1932) * chore(deps): bump alpine from 3.15.0 to 3.15.3 (#1917) * chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925) * chore(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1927) * feat(db): Add dbRepository flag to get advisory database from OCI registry (#1873) Update to version 0.25.0: * docs(filter vulnerabilities): fix link (#1880) * feat(template) Add misconfigurations to gitlab codequality report (#1756) * fix(rpc): add PkgPath field to client / server mode (#1643) * fix(vulnerabilities): fixed trivy-db vulns (#1883) * feat(cache): remove temporary cache after filesystem scanning (#1868) * feat(sbom): add a dedicated sbom command (#1799) * feat(cyclonedx): add vulnerabilities (#1832) * fix(option): hide false warning about remote options (#1865) * chore: bump up Go to 1.18 (#1862) * feat(filesystem): scan in client/server mode (#1829) * refactor(template): remove unused test (#1861) * fix(cli): json format for trivy version (#1854) * docs: change URL for tfsec-checks (#1857) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10022=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 s390x x86_64): trivy-0.28.0-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-23648.html https://www.suse.com/security/cve/CVE-2022-28946.html https://bugzilla.suse.com/1199760

1 0

openSUSE-SU-2022:10020-1: moderate: Security update for neomutt
by opensuse-security＠opensuse.org 21 Jun '22

21 Jun '22

openSUSE Security Update: Security update for neomutt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10020-1 Rating: moderate References: #1184787 #1185705 Cross-References: CVE-2021-32055 CVE-2022-1328 CVSS scores: CVE-2021-32055 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2021-32055 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-1328 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-1328 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for neomutt fixes the following issues: neomutt was updated to 20220429: * Bug Fixes * Do not crash on an invalid use_threads/sort combination * Fix: stuck browser cursor * Resolve (move) the cursor after <edit-label> * Index: fix menu size on new mail * Don't overlimit LMDB mmap size * OpenBSD y/n translation fix * Generic: split out OP_EXIT binding * Fix parsing of sendmail cmd * Fix: crash with menu_move_off=no * Newsrc: bugfix; nntp_user and nntp_pass ignored * Menu: ensure config changes cause a repaint * Mbox: fix sync duplicates * Make sure the index redraws all that's needed * Translations * 100% Chinese (Simplified) * 100% Czech * 100% German * 100% Hungarian * 100% Lithuanian * 100% Serbian * 100% Turkish * Docs * add missing pattern modifier ~I for external_search_command * Code * menu: eliminate custom_redraw() * modernise mixmaster * Kill global and Propagate display attach status through State- neomutt was updated to 20220415: * Security * Fix uudecode buffer overflow (CVE-2022-1328) * Features * Colours, colours, colours * Bug Fixes * Pager: fix pager_stop * Merge colours with normal * Color: disable mono command * Fix forwarding text attachments when honor_disposition is set * Pager: drop the nntp change-group bindings * Use mailbox_check flags coherently, add IMMEDIATE flag * Fix: tagging in attachment list * Fix: misalignment of mini-index * Make sure to update the menu size after a resort * Translations * 100% Hungarian * Build * Update acutest * Code * Unify pipe functions * Index: notify if navigation fails * Gui: set colour to be merged with normal * Fix: leak in tls_check_one_certificate() * Upstream * Flush iconv() in mutt_convert_string() * Fix integer overflow in mutt_convert_string() * Fix uudecode cleanup on unexpected eof update to 20220408: * Compose multipart emails * Fix screen mode after attempting decryption * imap: increase max size of oauth2 token * Fix autocrypt * Unify Alias/Query workflow * Fix colours * Say which file exists when saving attachments * Force SMTP authentication if `smtp_user` is set * Fix selecting the right email after limiting * Make sure we have enough memory for a new email * Don't overwrite with zeroes after unlinking the file * Fix crash when forwarding attachments * Fix help reformatting on window resize * Fix poll to use PollFdsCount and not PollFdsLen * regex: range check arrays strictly * Fix Coverity defects * Fix out of bounds write with long log lines * Apply `fast_reply` to 'to', 'cc', or 'bcc' * Prevent warning on empty emails * New default: `set rfc2047_parameters = yes` * 100% German * 100% Lithuanian * 100% Serbian * 100% Czech * 100% Turkish * 72% Hungarian * Improve header cache explanation * Improve description of some notmuch variables * Explain how timezones and `!`s work inside `%{}`, `%[]` and `%()` * Document config synonyms and deprecations * Create lots of GitHub Actions * Drop TravisCI * Add automated Fuzzing tests * Add automated ASAN tests * Create Dockers for building Centos/Fedora * Build fixes for Solaris 10 * New libraries: browser, enter, envelope * New configure options: `--fuzzing` `--debug-color` `--debug-queue` * Split Index/Pager GUIs/functions * Add lots of function dispatchers * Eliminate `menu_loop()` * Refactor function opcodes * Refactor cursor setting * Unify Alias/Query functions * Refactor Compose/Envelope functions * Modernise the Colour handling * Refactor the Attachment View * Eliminate the global `Context` * Upgrade `mutt_get_field()` * Refactor the `color quoted` code * Fix lots of memory leaks * Refactor Index resolve code * Refactor PatternList parsing * Refactor Mailbox freeing * Improve key mapping * Factor out charset hooks * Expose mutt_file_seek API * Improve API of `strto*` wrappers * imap QRESYNC fixes * Allow an empty To: address prompt * Fix argc==0 handling * Don't queue IMAP close commands * Fix IMAP UTF-7 for code points >= U+10000 * Don't include inactive messages in msgset generation update to 20211029 (boo#1185705, CVE-2021-32055): * Notmuch: support separate database and mail roots without .notmuch * fix notmuch crash on open failure * fix crypto crash handling pgp keys * fix ncrypt/pgp file_get_size return check * fix restore case-insensitive header sort * fix pager redrawing of long lines * fix notmuch: check database dir for xapian dir * fix notmuch: update index count after <entire-thread> * fix protect hash table against empty keys * fix prevent real_subj being set but empty * fix leak when saving fcc * fix leak after <edit-or-view-raw-message> * fix leak after trash to hidden mailbox * fix leak restoring postponed emails * fix new mail notifications * fix pattern compilation error for ( !>(~P) ) * fix menu display on window resize * Stop batch mode emails with no argument or recipients * Add sanitize call in print mailcap function * fix hdr_order to use the longest match * fix (un)setenv to not return an error with unset env vars * fix Imap sync when closing a mailbox * fix segfault on OpenBSD current * sidebar: restore sidebar_spoolfile colour * fix assert when displaying a file from the browser * fix exec command in compose * fix check_stats for Notmuch mailboxes * Fallback: Open Notmuch database without config * fix gui hook commands on startup * threads: implement the $use_threads feature * https://neomutt.org/feature/use-threads * hooks: allow a -noregex param to folder and mbox hooks * mailing lists: implement list-(un)subscribe using RFC2369 headers * mailcap: implement x-neomutt-nowrap flag * pager: add $local_date_header option * imap, smtp: add support for authenticating using XOAUTH2 * Allow <sync-mailbox> to fail quietly * imap: speed up server-side searches * pager: improve skip-quoted and skip-headers * notmuch: open database with user's configuration * notmuch: implement <vfolder-window-reset> * config: allow += modification of my_ variables * notmuch: tolerate file renames behind neomutt's back * pager: implement $pager_read_delay * notmuch: validate nm_query_window_timebase * notmuch: make $nm_record work in non-notmuch mailboxes * compose: add $greeting - a welcome message on top of emails * notmuch: show additional mail in query windows * imap: fix crash on external IMAP events * notmuch: handle missing libnotmuch version bumps * imap: add sanity check for qresync * notmuch: allow windows with 0 duration * index: fix index selection on <collapse-all> * imap: fix crash when sync'ing labels * search: fix searching by Message-Id in <mark-message> * threads: fix double sorting of threads * stats: don't check mailbox stats unless told * alias: fix crash on empty query * pager: honor mid-message config changes * mailbox: don't propagate read-only state across reopens * hcache: fix caching new labels in the header cache * crypto: set invalidity flags for gpgme/smime keys * notmuch: fix parsing of multiple type= * notmuch: validate $nm_default_url * messages: avoid unnecessary opening of messages * imap: fix seqset iterator when it ends in a comma * build: refuse to build without pcre2 when pcre2 is linked in ncurses Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10020=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le s390x x86_64): neomutt-20220429-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): neomutt-doc-20220429-bp154.2.3.1 neomutt-lang-20220429-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2021-32055.html https://www.suse.com/security/cve/CVE-2022-1328.html https://bugzilla.suse.com/1184787 https://bugzilla.suse.com/1185705

1 0

openSUSE-RU-2022:10021-1: moderate: Recommended update for AusweisApp2
by maintenance＠opensuse.org 21 Jun '22

21 Jun '22

openSUSE Recommended Update: Recommended update for AusweisApp2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10021-1 Rating: moderate References: Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for AusweisApp2 fixes the following issues: New upstream release 1.22.7: * Fixed a crash with the new system notifications on macOS 10.14+. New upstream release 1.22.6: * Problems with card communication when using the "Smartphone as card reader" function in Comfort mode have been fixed. * Starting with macOS 10.14, system notifications are now being used. * On macOS, the tray icon is now disabled by default. This can be re-enabled in the preferences. * On iOS, a new NFC scan was not possible under certain circumstances. This has been fixed. * When canceling an authentication, the app sometimes crashed on iOS. This has been fixed. * Minor bug fixes and optimizations. * Updated OpenSSL to version 1.1.1o. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-10021=1 Package List: - openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64): AusweisApp2-1.22.7-lp153.2.9.1 AusweisApp2-debuginfo-1.22.7-lp153.2.9.1 AusweisApp2-debugsource-1.22.7-lp153.2.9.1 References:

1 0

openSUSE-SU-2022:10019-1: important: Security update for atheme
by opensuse-security＠opensuse.org 20 Jun '22

20 Jun '22

1 0

openSUSE-SU-2022:10018-1: important: Security update for atheme
by opensuse-security＠opensuse.org 20 Jun '22

20 Jun '22

openSUSE Security Update: Security update for atheme ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10018-1 Rating: important References: #1174075 #1195989 Cross-References: CVE-2022-24976 CVSS scores: CVE-2022-24976 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for atheme fixes the following issues: atheme was updated to release 7.2.12: * CVE-2022-24976: Fixed General authentication bypass in Atheme IRC services with InspIRCd 3 [boo#1195989] * Track SASL login EID Update to release 7.2.11 * Add a preliminary Turkish translation * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2 * modules/chanserv/akick: fix unload crash with akicks that have timeouts * modules/nickserv/multimark: use IRC case canonicalisation for restored nicks * modules/nickserv/multimark: forbid unloading due to the potential for data loss * CA_ constants: include CA_EXEMPT (+e) where appropriate Update to new upstream release 7.2.10.r2 * Fix potential NULL dereference in modules/crypto/posix. * Bump E-Mail address maximum length to 254 characters. * Use flags setter information in modules/chanserv/access & modules/chanserv/flags. * Fix issue where modules/misc/httpd was not closing its listening socket on deinit. * Fix GroupServ data loss issue when a group was the founder of another group. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10018=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): atheme-7.2.12-bp153.2.3.1 atheme-devel-7.2.12-bp153.2.3.1 libathemecore1-7.2.12-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-24976.html https://bugzilla.suse.com/1174075 https://bugzilla.suse.com/1195989

1 0

SUSE-FU-2022:2124-1: important: Feature update for salt
by maintenance＠opensuse.org 20 Jun '22

20 Jun '22

SUSE Feature Update: Feature update for salt ______________________________________________________________________________ Announcement ID: SUSE-FU-2022:2124-1 Rating: important References: #1195625 #1199149 SLE-23672 SLE-24223 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Transactional Server 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that has two feature fixes and contains two features can now be installed. Description: This update for salt fixes the following issues: - Make sure SaltCacheLoader use correct fileclient (bsc#1199149) - Update to version 3004 (jsc#SLE-24223) (jsc#SLE-23672) * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html - Expose missing "ansible" module functions in Salt 3004 (bsc#1195625) - Fixes for Python 3.10 - Fix issues found around pre_flight_script_args - Fix salt-call event.send with pillar or grains - Fix exception in batch_async caused by a bad function call - Fix print regression for yumnotify plugin - Fix issues with salt-ssh's extra-filerefs - Fix crash when calling manage.not_alive runners Patch Instructions: To install this SUSE Feature Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2124=1 - SUSE Linux Enterprise Module for Transactional Server 15-SP3: zypper in -t patch SUSE-SLE-Module-Transactional-Server-15-SP3-2022-2124=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-2124=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2124=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2124=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2124=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python3-salt-3004-150300.53.21.1 salt-3004-150300.53.21.1 salt-api-3004-150300.53.21.1 salt-cloud-3004-150300.53.21.1 salt-doc-3004-150300.53.21.1 salt-master-3004-150300.53.21.1 salt-minion-3004-150300.53.21.1 salt-proxy-3004-150300.53.21.1 salt-ssh-3004-150300.53.21.1 salt-standalone-formulas-configuration-3004-150300.53.21.1 salt-syndic-3004-150300.53.21.1 salt-transactional-update-3004-150300.53.21.1 - openSUSE Leap 15.3 (noarch): salt-bash-completion-3004-150300.53.21.1 salt-fish-completion-3004-150300.53.21.1 salt-zsh-completion-3004-150300.53.21.1 - SUSE Linux Enterprise Module for Transactional Server 15-SP3 (aarch64 ppc64le s390x x86_64): salt-transactional-update-3004-150300.53.21.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): salt-api-3004-150300.53.21.1 salt-cloud-3004-150300.53.21.1 salt-master-3004-150300.53.21.1 salt-proxy-3004-150300.53.21.1 salt-ssh-3004-150300.53.21.1 salt-standalone-formulas-configuration-3004-150300.53.21.1 salt-syndic-3004-150300.53.21.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (noarch): salt-fish-completion-3004-150300.53.21.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): python3-salt-3004-150300.53.21.1 salt-3004-150300.53.21.1 salt-doc-3004-150300.53.21.1 salt-minion-3004-150300.53.21.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): salt-bash-completion-3004-150300.53.21.1 salt-zsh-completion-3004-150300.53.21.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): python3-salt-3004-150300.53.21.1 salt-3004-150300.53.21.1 salt-minion-3004-150300.53.21.1 salt-transactional-update-3004-150300.53.21.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): python3-salt-3004-150300.53.21.1 salt-3004-150300.53.21.1 salt-minion-3004-150300.53.21.1 salt-transactional-update-3004-150300.53.21.1 References: https://bugzilla.suse.com/1195625 https://bugzilla.suse.com/1199149

1 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

openSUSE Updates June 2022