May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0579-1: important: Recommended update for pacemaker
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0579-1 Rating: important References: #1154881 #1155290 #1160410 #1168771 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for pacemaker fixes the following issues: - libcrmcluster: use uint64_t type for corosync ringid (membership id) when updating node state (bsc#1168771) - get ready for implicit -fno-common with upcoming GCC 10 (bsc#1160410) - attrd: properly declare global variables as extern in header (bsc#1160410) - scheduler: make sure cluster-wide maintenance-mode=true overrides per-resource settings (bsc#1154881) - tools: Clear all prefer constraints when performing a move (bsc#1155290) - tools: Fix moving a resource with a lifetime constraint (bsc#1155290) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-579=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpacemaker-devel-2.0.1+20190417.13d370ca9-lp151.2.9.2 libpacemaker3-2.0.1+20190417.13d370ca9-lp151.2.9.2 libpacemaker3-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-cli-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-cli-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-debugsource-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-remote-2.0.1+20190417.13d370ca9-lp151.2.9.2 pacemaker-remote-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.9.2 - openSUSE Leap 15.1 (noarch): pacemaker-cts-2.0.1+20190417.13d370ca9-lp151.2.9.2 References: https://bugzilla.suse.com/1154881 https://bugzilla.suse.com/1155290 https://bugzilla.suse.com/1160410 https://bugzilla.suse.com/1168771

1 0

openSUSE-SU-2020:0599-1: important: Security update for xen
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0599-1 Rating: important References: #1027519 #1134506 #1155200 #1157490 #1160932 #1165206 #1167007 #1167152 #1168140 #1168142 #1168143 #1169392 Cross-References: CVE-2020-11739 CVE-2020-11740 CVE-2020-11741 CVE-2020-11742 CVE-2020-11743 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 7 fixes is now available. Description: This update for xen fixes the following issues: Security issues fixed: - CVE-2020-11742: Bad continuation handling in GNTTABOP_copy (bsc#1169392). - CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues (bsc#1168140). - CVE-2020-11739: Missing memory barriers in read-write unlock paths (bsc#1168142). - CVE-2020-11743: Bad error path in GNTTABOP_map_grant (bsc#1168143). - arm: a CPU may speculate past the ERET instruction (bsc#1160932). Non-security issues fixed: - Xenstored Crashed during VM install (bsc#1167152) - DomU hang: soft lockup CPU #0 stuck under high load (bsc#1165206, bsc#1134506) - Update API compatibility versions, fixes issues for libvirt. (bsc#1167007, bsc#1157490) - aacraid blocks xen commands (bsc#1155200) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-599=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xen-debugsource-4.12.2_04-lp151.2.15.1 xen-devel-4.12.2_04-lp151.2.15.1 xen-libs-4.12.2_04-lp151.2.15.1 xen-libs-debuginfo-4.12.2_04-lp151.2.15.1 xen-tools-domU-4.12.2_04-lp151.2.15.1 xen-tools-domU-debuginfo-4.12.2_04-lp151.2.15.1 - openSUSE Leap 15.1 (x86_64): xen-4.12.2_04-lp151.2.15.1 xen-doc-html-4.12.2_04-lp151.2.15.1 xen-libs-32bit-4.12.2_04-lp151.2.15.1 xen-libs-32bit-debuginfo-4.12.2_04-lp151.2.15.1 xen-tools-4.12.2_04-lp151.2.15.1 xen-tools-debuginfo-4.12.2_04-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-11739.html https://www.suse.com/security/cve/CVE-2020-11740.html https://www.suse.com/security/cve/CVE-2020-11741.html https://www.suse.com/security/cve/CVE-2020-11742.html https://www.suse.com/security/cve/CVE-2020-11743.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1134506 https://bugzilla.suse.com/1155200 https://bugzilla.suse.com/1157490 https://bugzilla.suse.com/1160932 https://bugzilla.suse.com/1165206 https://bugzilla.suse.com/1167007 https://bugzilla.suse.com/1167152 https://bugzilla.suse.com/1168140 https://bugzilla.suse.com/1168142 https://bugzilla.suse.com/1168143 https://bugzilla.suse.com/1169392

1 0

openSUSE-RU-2020:0584-1: moderate: Recommended update for python-scandir
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for python-scandir ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0584-1 Rating: moderate References: #1122668 #1167207 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-scandir fixes the following issues: - Include the package in SLE-12 (fate#326950, bsc#1122668, jsc#PM-1447) - Replace %fdupes -s with plain %fdupes using hardlinks instead of softlinks. - Update to 1.10.0: * remove support for pyton 2.6 and <3.3 - Allow building on Python 3.5+. (bsc#1167207) It is useful for testing and it should exist when packages list it as a runtime dependency, and it will add backports of enhancements to scandir since Python 3.5. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-584=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-scandir-debuginfo-1.10.0-lp151.2.3.1 python-scandir-debugsource-1.10.0-lp151.2.3.1 python2-scandir-1.10.0-lp151.2.3.1 python2-scandir-debuginfo-1.10.0-lp151.2.3.1 python3-scandir-1.10.0-lp151.2.3.1 python3-scandir-debuginfo-1.10.0-lp151.2.3.1 References: https://bugzilla.suse.com/1122668 https://bugzilla.suse.com/1167207

1 0

openSUSE-SU-2020:0585-1: important: Security update for resource-agents
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0585-1 Rating: important References: #1021689 #1146687 #1146690 #1146691 #1146692 #1146766 #1146776 #1146784 #1146785 #1146787 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. (bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776 bsc#1146784 bsc#1146785 bsc#1146787) - Fixed issues where the ocfmon user was created with a default password (bsc#1021689, bsc#1146687). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-585=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldirectord-4.3.0184.6ee15eb2-lp151.3.18.1 resource-agents-4.3.0184.6ee15eb2-lp151.3.18.1 resource-agents-debuginfo-4.3.0184.6ee15eb2-lp151.3.18.1 resource-agents-debugsource-4.3.0184.6ee15eb2-lp151.3.18.1 - openSUSE Leap 15.1 (noarch): monitoring-plugins-metadata-4.3.0184.6ee15eb2-lp151.3.18.1 References: https://bugzilla.suse.com/1021689 https://bugzilla.suse.com/1146687 https://bugzilla.suse.com/1146690 https://bugzilla.suse.com/1146691 https://bugzilla.suse.com/1146692 https://bugzilla.suse.com/1146766 https://bugzilla.suse.com/1146776 https://bugzilla.suse.com/1146784 https://bugzilla.suse.com/1146785 https://bugzilla.suse.com/1146787

1 0

openSUSE-RU-2020:0588-1: moderate: Recommended update for strongswan
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0588-1 Rating: moderate References: #1164493 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for strongswan fixes the following issue: - Resolve multiple definition of swanctl_dir (bsc#1164493) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-588=1 Package List: - openSUSE Leap 15.1 (noarch): strongswan-doc-5.8.2-lp151.4.9.1 - openSUSE Leap 15.1 (x86_64): strongswan-5.8.2-lp151.4.9.1 strongswan-debuginfo-5.8.2-lp151.4.9.1 strongswan-debugsource-5.8.2-lp151.4.9.1 strongswan-hmac-5.8.2-lp151.4.9.1 strongswan-ipsec-5.8.2-lp151.4.9.1 strongswan-ipsec-debuginfo-5.8.2-lp151.4.9.1 strongswan-libs0-5.8.2-lp151.4.9.1 strongswan-libs0-debuginfo-5.8.2-lp151.4.9.1 strongswan-mysql-5.8.2-lp151.4.9.1 strongswan-mysql-debuginfo-5.8.2-lp151.4.9.1 strongswan-nm-5.8.2-lp151.4.9.1 strongswan-nm-debuginfo-5.8.2-lp151.4.9.1 strongswan-sqlite-5.8.2-lp151.4.9.1 strongswan-sqlite-debuginfo-5.8.2-lp151.4.9.1 References: https://bugzilla.suse.com/1164493

1 0

openSUSE-SU-2020:0586-1: moderate: Security update for ruby2.5
by opensuse-security＠opensuse.org 01 May '20

01 May '20

openSUSE Security Update: Security update for ruby2.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0586-1 Rating: moderate References: #1167244 #1168938 Cross-References: CVE-2020-10663 CVE-2020-10933 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ruby2.5 to version 2.5.8 fixes the following issues: - CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (bsc#1167244). - CVE-2020-10933: Heap exposure vulnerability in the socket library (bsc#1168938). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-586=1 Package List: - openSUSE Leap 15.1 (x86_64): libruby2_5-2_5-2.5.8-lp151.4.9.1 libruby2_5-2_5-debuginfo-2.5.8-lp151.4.9.1 ruby2.5-2.5.8-lp151.4.9.1 ruby2.5-debuginfo-2.5.8-lp151.4.9.1 ruby2.5-debugsource-2.5.8-lp151.4.9.1 ruby2.5-devel-2.5.8-lp151.4.9.1 ruby2.5-devel-extra-2.5.8-lp151.4.9.1 ruby2.5-doc-2.5.8-lp151.4.9.1 ruby2.5-stdlib-2.5.8-lp151.4.9.1 ruby2.5-stdlib-debuginfo-2.5.8-lp151.4.9.1 - openSUSE Leap 15.1 (noarch): ruby2.5-doc-ri-2.5.8-lp151.4.9.1 References: https://www.suse.com/security/cve/CVE-2020-10663.html https://www.suse.com/security/cve/CVE-2020-10933.html https://bugzilla.suse.com/1167244 https://bugzilla.suse.com/1168938

1 0

openSUSE-RU-2020:0568-1: moderate: Recommended update for go1.11
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0568-1 Rating: moderate References: #1167874 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.11 fixes the following issue: - ARMv7 build hangs with gcc7-go on Leap 15.2, so use go1.4 (bsc#1167874) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-568=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.11-1.11.13-lp151.2.15.1 go1.11-doc-1.11.13-lp151.2.15.1 go1.11-race-1.11.13-lp151.2.15.1 References: https://bugzilla.suse.com/1167874

1 0

openSUSE-RU-2020:0592-1: moderate: Recommended update for ucode-intel
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0592-1 Rating: moderate References: #1169570 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ucode-intel fixes the following issues: - updated Intel Skylake microcode to the current version. (bsc#1169570) - 02000064->02006901 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-592=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20191115-lp151.2.21.1 References: https://bugzilla.suse.com/1169570

1 0

openSUSE-RU-2020:0589-1: important: Recommended update for supportutils
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for supportutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0589-1 Rating: important References: #1162539 #1165475 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for supportutils fixes the following issues: - Replaced Novell with SUSE FTP servers (bsc#1165475) - Added missed Power collection (bsc#1162539) - Added core file validation (bsc#1166126) - Changed filename prefixes from nts_ to scc_ referencing the SUSE Customer Center (SLE-8702, SLE-6762) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-589=1 Package List: - openSUSE Leap 15.1 (noarch): supportutils-3.1.9-lp151.2.12.1 References: https://bugzilla.suse.com/1162539 https://bugzilla.suse.com/1165475

1 0

openSUSE-RU-2020:0595-1: moderate: Recommended update for inxi
by maintenance＠opensuse.org 01 May '20

01 May '20

openSUSE Recommended Update: Recommended update for inxi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0595-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for inxi fixes the following issues: inxi was update to version 3.1.00: * See /usr/share/doc/packages/inxi/inxi.changelog Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-595=1 Package List: - openSUSE Leap 15.1 (noarch): inxi-3.1.00-lp151.3.6.1 References:

1 0