July 2022 - openSUSE Updates - openSUSE Mailing Lists

SUSE-SU-2022:2348-1: important: Security update for crash
by opensuse-security＠opensuse.org 11 Jul '22

11 Jul '22

SUSE Security Update: Security update for crash ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2348-1 Rating: important References: #1198581 Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of crash fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2348=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-2348=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): crash-7.2.9-150300.23.10.1 crash-debuginfo-7.2.9-150300.23.10.1 crash-debugsource-7.2.9-150300.23.10.1 crash-devel-7.2.9-150300.23.10.1 crash-doc-7.2.9-150300.23.10.1 crash-eppic-7.2.9-150300.23.10.1 crash-eppic-debuginfo-7.2.9-150300.23.10.1 crash-kmp-default-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 crash-kmp-default-debuginfo-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 - openSUSE Leap 15.3 (aarch64 x86_64): crash-kmp-preempt-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 crash-kmp-preempt-debuginfo-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 - openSUSE Leap 15.3 (aarch64): crash-kmp-64kb-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 crash-kmp-64kb-debuginfo-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 - openSUSE Leap 15.3 (x86_64): crash-gcore-7.2.9-150300.23.10.1 crash-gcore-debuginfo-7.2.9-150300.23.10.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): crash-7.2.9-150300.23.10.1 crash-debuginfo-7.2.9-150300.23.10.1 crash-debugsource-7.2.9-150300.23.10.1 crash-devel-7.2.9-150300.23.10.1 crash-kmp-default-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 crash-kmp-default-debuginfo-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64): crash-kmp-64kb-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 crash-kmp-64kb-debuginfo-7.2.9_k5.3.18_150300.59.76-150300.23.10.1 References: https://bugzilla.suse.com/1198581

1 0

openSUSE-RU-2022:10053-1: moderate: Recommended update for plasma5-desktop, plasma5-workspace
by maintenance＠opensuse.org 10 Jul '22

10 Jul '22

openSUSE Recommended Update: Recommended update for plasma5-desktop, plasma5-workspace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10053-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for plasma5-desktop, plasma5-workspace fixes the following issues: - Disable reuseItems to avoid a crash in plasmashell (kde#452660) - Fix a potential crash when deleting a panel with a system tray applet (kde#453726) - Fix a potential crash on logout (kde#454159) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10053=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le x86_64): gmenudbusmenuproxy-5.24.4-bp154.2.3.1 gmenudbusmenuproxy-debuginfo-5.24.4-bp154.2.3.1 plasma5-desktop-5.24.4-bp154.2.3.2 plasma5-desktop-emojier-5.24.4-bp154.2.3.2 plasma5-session-wayland-5.24.4-bp154.2.3.1 plasma5-workspace-5.24.4-bp154.2.3.1 plasma5-workspace-debuginfo-5.24.4-bp154.2.3.1 plasma5-workspace-debugsource-5.24.4-bp154.2.3.1 plasma5-workspace-devel-5.24.4-bp154.2.3.1 plasma5-workspace-libs-5.24.4-bp154.2.3.1 plasma5-workspace-libs-debuginfo-5.24.4-bp154.2.3.1 xembedsniproxy-5.24.4-bp154.2.3.1 xembedsniproxy-debuginfo-5.24.4-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): plasma5-desktop-lang-5.24.4-bp154.2.3.2 plasma5-session-5.24.4-bp154.2.3.1 plasma5-workspace-lang-5.24.4-bp154.2.3.1 References:

1 0

openSUSE-RU-2022:10050-1: moderate: Recommended update for amarok
by maintenance＠opensuse.org 10 Jul '22

10 Jul '22

openSUSE Recommended Update: Recommended update for amarok ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10050-1 Rating: moderate References: #1200767 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for amarok fixes the following issues: - Update to version 2.9.75git.20220614T014846~dc55a00143: * Mark Amarok as a single main window program - Update to version 2.9.75git.20220224T114455~9300034c57: * Add DBus service file to actually make it activatable (boo#1200767) * No need to link to KF5::KIONTLM Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10050=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): amarok-2.9.75git.20220614T014846~dc55a00143-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): amarok-lang-2.9.75git.20220614T014846~dc55a00143-bp154.2.3.1 References: https://bugzilla.suse.com/1200767

1 0

openSUSE-RU-2022:10052-1: moderate: Recommended update for trytond, trytond_stock
by maintenance＠opensuse.org 10 Jul '22

10 Jul '22

openSUSE Recommended Update: Recommended update for trytond, trytond_stock ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10052-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for trytond, trytond_stock fixes the following issues: Changes in trytond_stock: - Version 6.0.15 - Bugfix Release Changes in trytond: - Version 6.0.20 - Bugfix Release Changes in trytond: - Version 5.0.49 - Bugfix Release - Version 5.0.48 - Bugfix Release - Version 5.0.47 - Bugfix Release - Version 5.0.46 - Bugfix Release - Version 5.0.45 - Bugfix Release - Version 5.0.44 - Bugfix Release - Version 5.0.43 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10052=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10052=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): trytond-6.0.20-bp154.2.6.1 trytond_stock-6.0.15-bp154.2.6.1 - openSUSE Backports SLE-15-SP3 (noarch): trytond-5.0.49-bp153.2.13.1 References:

1 0

openSUSE-SU-2022:10049-1: moderate: Security update for libqt5-qtwebengine
by opensuse-security＠opensuse.org 10 Jul '22

10 Jul '22

openSUSE Security Update: Security update for libqt5-qtwebengine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10049-1 Rating: moderate References: Cross-References: CVE-2022-0797 CVE-2022-1125 CVE-2022-1138 CVE-2022-1305 CVE-2022-1310 CVE-2022-1314 CVE-2022-1493 CVSS scores: CVE-2022-0797 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.10: * Fix top level build with no widget * Fix read-after-free on EGL extensions * Update Chromium * Add workaround for unstable gn on macOS in ci * Pass archiver to gn build * Fix navigation to non-local URLs * Add support for universal builds for qtwebengine and qtpdf * Enable Apple Silicon support * Fix cross compilation x86_64->arm64 on mac * Bump version to 5.15.10 * CustomDialogs: Make custom input fields readable in dark mode * CookieBrowser: Make alternating rows readable in dark mode * Update Chromium: * Bump V8_PATCH_LEVEL * Fix clang set-but-unused-variable warning * Fix mac toolchain python linker script call * Fix missing dependency for gpu sources * Fix python calls * Fix undefined symbol for universal link * Quick fix for regression in service workers by reverting backports * [Backport] CVE-2022-0797: Out of bounds memory access in Mojo * [Backport] CVE-2022-1125 * [Backport] CVE-2022-1138: Inappropriate implementation in Web Cursor. * [Backport] CVE-2022-1305: Use after free in storage * [Backport] CVE-2022-1310: Use after free in regular expressions * [Backport] CVE-2022-1314: Type Confusion in V8 * [Backport] CVE-2022-1493: Use after free in Dev Tools * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm' * [Backport] Security Bug 1296876 * [Backport] Security bug 1269999 * [Backport] Security bug 1280852 * [Backport] Security bug 1292905 * [Backport] Security bug 1304659 * [Backport] Security bug 1306507 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10049=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 x86_64): libQt5Pdf5-5.15.10-bp154.2.3.2 libQt5PdfWidgets5-5.15.10-bp154.2.3.2 libqt5-qtpdf-devel-5.15.10-bp154.2.3.2 libqt5-qtpdf-examples-5.15.10-bp154.2.3.2 libqt5-qtpdf-imports-5.15.10-bp154.2.3.2 libqt5-qtwebengine-5.15.10-bp154.2.3.2 libqt5-qtwebengine-devel-5.15.10-bp154.2.3.2 libqt5-qtwebengine-examples-5.15.10-bp154.2.3.2 - openSUSE Backports SLE-15-SP4 (noarch): libqt5-qtpdf-private-headers-devel-5.15.10-bp154.2.3.2 libqt5-qtwebengine-private-headers-devel-5.15.10-bp154.2.3.2 References: https://www.suse.com/security/cve/CVE-2022-0797.html https://www.suse.com/security/cve/CVE-2022-1125.html https://www.suse.com/security/cve/CVE-2022-1138.html https://www.suse.com/security/cve/CVE-2022-1305.html https://www.suse.com/security/cve/CVE-2022-1310.html https://www.suse.com/security/cve/CVE-2022-1314.html https://www.suse.com/security/cve/CVE-2022-1493.html

1 0

openSUSE-RU-2022:10048-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 10 Jul '22

10 Jul '22

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10048-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fwts fixes the following issues: fwts was updated to version 22.05.00: * lib: fwts_version.h - update to V22.05.00 * debian: update changelog * fwts-test: sync up IORT test with specification version E.d * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space * auto-packager:mkpackage.sh: add kinetic * acpi: iort: update IORT test to specification version E.d * Update copyright year to 2022 * acpi: iort: update the IORT node dump * acpi: iort: update IORT node revision check * ACPICA: Update to version 20220331 Update to version 22.03.00: * lib: fwts_version.h - update to V22.03.00 * debian: update changelog * fwts-test: sync up the sdev checking secure access components * acpi: sdev: add checking secure access components * acpi: macf: report failures instead of just logging the errors * acpi/time: skip a number of TAD methods when _GCP[0] is clear * acpi:dmar: update the link of DMAR table * fwts-tests: update acpi dump data to be in sync with latest ACPICA * ACPICA: Update to version 20211217 Update to version 22.01.00: * fwts-test: sync up the adding option for get next high monotonic count * uefirtmisc: add option to specify iterations get next high monitonic count * uefirtmisc: add checking the resources for testing * lib: fwts_version.h - update to V22.01.00 * debian: update changelog * fwts_acpica: skip unneccessary null check * s3: use system suspend default if --s3-sleep-type is not used * tpmevlogdump: add supporting several new types for event log dumping * auto-packager: mkpackage.sh: remove hirsute * tpmevlog: add supporting several new types for event log checking * lib: fwts_tpm.h: add new type definition Update build dependencies (add zlib) Update to version 21.12.00: * lib: fwts_version.h - update to V21.12.00 * debian: update changelog * dmicheck: skip scanning smbios in /dev/mem on aarch64 * s3: increase s2idle_residency to u64 to avoid overflows * s3: fix incorrect error messages for s2idle_residency * acpi: uniqueid: clean up pedantic static analysis warnings * s4: clean up pedantic static analysis warnings Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10048=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10048=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 x86_64): fwts-22.05.00-bp154.2.3.5 fwts-debuginfo-22.05.00-bp154.2.3.5 fwts-debugsource-22.05.00-bp154.2.3.5 - openSUSE Backports SLE-15-SP3 (aarch64 i586 x86_64): fwts-22.05.00-bp153.2.18.1 References:

1 0

openSUSE-RU-2022:10047-1: Recommended update for gnuhealth-client
by maintenance＠opensuse.org 10 Jul '22

10 Jul '22

openSUSE Recommended Update: Recommended update for gnuhealth-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10047-1 Rating: low References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: gnuhealth-client was updated to fix plugins. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10047=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): gnuhealth-client-3.8.1-bp153.3.3.1 References:

1 0

openSUSE-RU-2022:10051-1: moderate: Recommended update for translate-toolkit
by maintenance＠opensuse.org 10 Jul '22

10 Jul '22

openSUSE Recommended Update: Recommended update for translate-toolkit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10051-1 Rating: moderate References: #1172650 #1195269 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for translate-toolkit fixes the following issues: - We need full python interpreter boo#1172650, boo#1195269 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10051=1 Package List: - openSUSE Backports SLE-15-SP4 (noarch): python3-translate-toolkit-2.5.0-bp154.2.3.1 translate-toolkit-devel-doc-2.5.0-bp154.2.3.1 References: https://bugzilla.suse.com/1172650 https://bugzilla.suse.com/1195269

1 0

openSUSE-RU-2022:10046-1: moderate: Recommended update for unoconv
by maintenance＠opensuse.org 10 Jul '22

10 Jul '22

openSUSE Recommended Update: Recommended update for unoconv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10046-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for unoconv fixes the following issues: - required python3 instead of python Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10046=1 Package List: - openSUSE Backports SLE-15-SP3 (noarch): unoconv-0.7-bp153.2.3.1 References:

1 0

openSUSE-SU-2022:10045-1: moderate: Security update for chafa
by opensuse-security＠opensuse.org 08 Jul '22

08 Jul '22

openSUSE Security Update: Security update for chafa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10045-1 Rating: moderate References: #1201211 Cross-References: CVE-2022-2301 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chafa fixes the following issues: - CVE-2022-2301: Fixed buffer over-read (boo#1201211) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10045=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): chafa-1.8.0-bp154.3.8.1 chafa-debuginfo-1.8.0-bp154.3.8.1 chafa-debugsource-1.8.0-bp154.3.8.1 chafa-devel-1.8.0-bp154.3.8.1 libchafa0-1.8.0-bp154.3.8.1 libchafa0-debuginfo-1.8.0-bp154.3.8.1 - openSUSE Backports SLE-15-SP4 (noarch): chafa-doc-1.8.0-bp154.3.8.1 References: https://www.suse.com/security/cve/CVE-2022-2301.html https://bugzilla.suse.com/1201211

1 0