July 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1084-1: moderate: Recommended update for python-importlib_resources
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for python-importlib_resources ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1084-1 Rating: moderate References: #1172933 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-importlib_resources fixes the following issues: Update from version 1.0.2 to 1.1.0 (jsc#ECO-2153, bsc#1172933) - Add support for retrieving resources from subdirectories of packages through the new files() function, which returns a Traversable object with joinpath and read_* interfaces matching those of pathlib.Path objects. This new function supersedes all of the previous functionality as it provides a more general-purpose access to a package’s resources. - With this function, subdirectories are supported. - The documentation has been updated to reflect that this function is now the preferred interface for loading package resources. It does not, however, support resources from arbitrary loaders. It currently only supports resources from file system path and zipfile packages (a consequence of the ResourceReader interface only operating on Python packages). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1084=1 Package List: - openSUSE Leap 15.2 (noarch): python2-importlib_resources-1.1.0-lp152.2.4.1 python3-importlib_resources-1.1.0-lp152.2.4.1 References: https://bugzilla.suse.com/1172933

1 0

openSUSE-RU-2020:1080-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1080-1 Rating: moderate References: #1167256 #1168479 #1169663 #1172444 #1172922 #1173213 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Do not remove automatically aliases from /etc/hosts during an autoinstallation. (bsc#1173213) - Avoid error when accessing to Bond Slaves in s390. (bsc#1172444). - AutoYaST: Udev rules are written or copied to the target system properly when defined in the profile. (bsc#1169663) - AutoYaST: Fixed the copy or merge of the linuxrc interfaces configuration when the installation network configuration is selected to be kept. - Do not export interfaces <aliases> section when there are no aliases to export. (bsc#1172922) - Try to install the wireless-tools package when the package is not installed and the wifi networks are scanned. (bsc#1168479) - Fix for parse the udev rules keys correctly using underscores. (bsc#1167256) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1080=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-network-4.2.72-lp152.2.3.1 References: https://bugzilla.suse.com/1167256 https://bugzilla.suse.com/1168479 https://bugzilla.suse.com/1169663 https://bugzilla.suse.com/1172444 https://bugzilla.suse.com/1172922 https://bugzilla.suse.com/1173213

1 0

openSUSE-SU-2020:1085-1: moderate: Security update for knot
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for knot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1085-1 Rating: moderate References: #1047841 Cross-References: CVE-2017-11104 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for knot fixes the following issues: - CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication (boo#1047841). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1085=1 Package List: - openSUSE Leap 15.1 (x86_64): knot-1.6.8-lp151.4.3.1 knot-debuginfo-1.6.8-lp151.4.3.1 knot-debugsource-1.6.8-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-11104.html https://bugzilla.suse.com/1047841

1 0

openSUSE-SU-2020:1088-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1088-1 Rating: moderate References: #1173674 Cross-References: CVE-2020-15503 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libraw fixes the following issues: - security update - added patches fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow + libraw-CVE-2020-15503.patch This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1088=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libraw-debuginfo-0.18.9-lp151.4.3.1 libraw-debugsource-0.18.9-lp151.4.3.1 libraw-devel-0.18.9-lp151.4.3.1 libraw-devel-static-0.18.9-lp151.4.3.1 libraw-tools-0.18.9-lp151.4.3.1 libraw-tools-debuginfo-0.18.9-lp151.4.3.1 libraw16-0.18.9-lp151.4.3.1 libraw16-debuginfo-0.18.9-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-15503.html https://bugzilla.suse.com/1173674

1 0

openSUSE-RU-2020:1076-1: Recommended update for go1.11
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1076-1 Rating: low References: #1169832 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for go1.11 fixes the following issues: - Fix for an issue when installing on Raspberry Pi causes illegal instruction due to unproper ARM arch set. (bsc#1169832) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1076=1 Package List: - openSUSE Leap 15.1 (x86_64): go1.11-1.11.13-lp151.2.21.1 go1.11-doc-1.11.13-lp151.2.21.1 go1.11-race-1.11.13-lp151.2.21.1 References: https://bugzilla.suse.com/1169832

1 0

openSUSE-RU-2020:1066-1: moderate: Recommended update for openvswitch
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1066-1 Rating: moderate References: #1172861 #1172929 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openvswitch fixes the following issues: - Preserve the old default OVS_USER_ID for users that removed the override at /etc/sysconfig/openvswitch. (bsc#1172861) - Fix possible changes of openvswitch configuration during upgrades. (bsc#1172929) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1066=1 Package List: - openSUSE Leap 15.2 (noarch): openvswitch-doc-2.13.0-lp152.3.3.1 ovn-doc-20.03.0-lp152.3.3.1 - openSUSE Leap 15.2 (x86_64): libopenvswitch-2_13-0-2.13.0-lp152.3.3.1 libopenvswitch-2_13-0-debuginfo-2.13.0-lp152.3.3.1 libovn-20_03-0-20.03.0-lp152.3.3.1 libovn-20_03-0-debuginfo-20.03.0-lp152.3.3.1 openvswitch-2.13.0-lp152.3.3.1 openvswitch-debuginfo-2.13.0-lp152.3.3.1 openvswitch-debugsource-2.13.0-lp152.3.3.1 openvswitch-devel-2.13.0-lp152.3.3.1 openvswitch-ipsec-2.13.0-lp152.3.3.1 openvswitch-pki-2.13.0-lp152.3.3.1 openvswitch-test-2.13.0-lp152.3.3.1 openvswitch-test-debuginfo-2.13.0-lp152.3.3.1 openvswitch-vtep-2.13.0-lp152.3.3.1 openvswitch-vtep-debuginfo-2.13.0-lp152.3.3.1 ovn-20.03.0-lp152.3.3.1 ovn-central-20.03.0-lp152.3.3.1 ovn-central-debuginfo-20.03.0-lp152.3.3.1 ovn-debuginfo-20.03.0-lp152.3.3.1 ovn-devel-20.03.0-lp152.3.3.1 ovn-docker-20.03.0-lp152.3.3.1 ovn-host-20.03.0-lp152.3.3.1 ovn-host-debuginfo-20.03.0-lp152.3.3.1 ovn-vtep-20.03.0-lp152.3.3.1 ovn-vtep-debuginfo-20.03.0-lp152.3.3.1 python3-ovs-2.13.0-lp152.3.3.1 References: https://bugzilla.suse.com/1172861 https://bugzilla.suse.com/1172929

1 0

openSUSE-RU-2020:1067-1: moderate: Recommended update for alsa
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1067-1 Rating: moderate References: #1171246 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for alsa fixes the following issues: - Add UCM profile for ASUS Chromebook C300. (bsc#1171246) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1067=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): alsa-1.1.5-lp151.8.3.1 alsa-debugsource-1.1.5-lp151.8.3.1 alsa-devel-1.1.5-lp151.8.3.1 libasound2-1.1.5-lp151.8.3.1 libasound2-debuginfo-1.1.5-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): alsa-docs-1.1.5-lp151.8.3.1 - openSUSE Leap 15.1 (x86_64): alsa-devel-32bit-1.1.5-lp151.8.3.1 libasound2-32bit-1.1.5-lp151.8.3.1 libasound2-32bit-debuginfo-1.1.5-lp151.8.3.1 References: https://bugzilla.suse.com/1171246

1 0

openSUSE-RU-2020:1065-1: important: Recommended update for libsolv, libzypp, yast2-packager, yast2-pkg-bindings
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for libsolv, libzypp, yast2-packager, yast2-pkg-bindings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1065-1 Rating: important References: #1172477 #1173336 #1174011 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for libsolv, libzypp, yast2-packager, yast2-pkg-bindings fixes the following issues: libsolv: - No source changes, just shipping it as an installer update (required by yast2-pkg-bindings). libzypp: - Proactively send credentials if the URL specifes '?auth=basic' and a username. (bsc#1174011) - ZYPP_MEDIA_CURL_DEBUG: Strip credentials in header log. (bsc#1174011) yast2-packager: - Handle variable expansion in repository name. (bsc#1172477) - Improve medium type detection, do not report Online medium when the /media.1/products file is missing in the repository, SMT does not mirror this file. (bsc#1173336) yast2-pkg-bindings: - Extensions to handle raw repository name. (bsc#1172477) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1065=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsolv-debuginfo-0.7.14-lp152.2.7.1 libsolv-debugsource-0.7.14-lp152.2.7.1 libsolv-demo-0.7.14-lp152.2.7.1 libsolv-demo-debuginfo-0.7.14-lp152.2.7.1 libsolv-devel-0.7.14-lp152.2.7.1 libsolv-devel-debuginfo-0.7.14-lp152.2.7.1 libsolv-tools-0.7.14-lp152.2.7.1 libsolv-tools-debuginfo-0.7.14-lp152.2.7.1 libzypp-17.24.1-lp152.2.7.1 libzypp-debuginfo-17.24.1-lp152.2.7.1 libzypp-debugsource-17.24.1-lp152.2.7.1 libzypp-devel-17.24.1-lp152.2.7.1 libzypp-devel-doc-17.24.1-lp152.2.7.1 perl-solv-0.7.14-lp152.2.7.1 perl-solv-debuginfo-0.7.14-lp152.2.7.1 python-solv-0.7.14-lp152.2.7.1 python-solv-debuginfo-0.7.14-lp152.2.7.1 python3-solv-0.7.14-lp152.2.7.1 python3-solv-debuginfo-0.7.14-lp152.2.7.1 ruby-solv-0.7.14-lp152.2.7.1 ruby-solv-debuginfo-0.7.14-lp152.2.7.1 yast2-packager-4.2.64-lp152.2.3.1 yast2-pkg-bindings-4.2.8-lp152.2.3.1 yast2-pkg-bindings-debuginfo-4.2.8-lp152.2.3.1 yast2-pkg-bindings-debugsource-4.2.8-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): yast2-pkg-bindings-devel-doc-4.2.8-lp152.2.3.1 References: https://bugzilla.suse.com/1172477 https://bugzilla.suse.com/1173336 https://bugzilla.suse.com/1174011

1 0

openSUSE-RU-2020:1073-1: important: Recommended update for efivar
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for efivar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1073-1 Rating: important References: #1100077 #1101023 #1120862 #1127544 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for efivar fixes the following issues: - fix logic that checks for UCS-2 string termination (bsc#1127544) - fix casting of IPv4 addresses - Don't require an EUI for NVMe (bsc#1100077) - Add support for ACPI Generic Container and Embedded Controller root nodes (bsc#1101023) - fix for compilation failures bsc#1120862 This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1073=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): efivar-37-lp152.3.3.1 efivar-debuginfo-37-lp152.3.3.1 efivar-debugsource-37-lp152.3.3.1 efivar-devel-37-lp152.3.3.1 libefivar1-37-lp152.3.3.1 libefivar1-debuginfo-37-lp152.3.3.1 References: https://bugzilla.suse.com/1100077 https://bugzilla.suse.com/1101023 https://bugzilla.suse.com/1120862 https://bugzilla.suse.com/1127544

1 0

openSUSE-RU-2020:1072-1: important: Recommended update for crmsh
by maintenance＠opensuse.org 26 Jul '20

26 Jul '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1072-1 Rating: important References: #1166644 #1166962 #1167220 #1169581 #1170037 #1170999 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Fix for collecting of binary data to avoid CRC error in report. (bsc#1166962) - Implement ssh key configuration improvement to avoid security issues. (bsc#1169581, ECO-2035) - Fix for using class 'SBDManager' for sbd configuration and management. (bsc#1170037, bsc#1170999) - Fix for 'crm' resource refresh to complete. (bsc#1167220) - Update man page about completion example of 'crm' resource. (bsc#1166644) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1072=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1594286044.7a596d12-lp152.4.3.1 crmsh-scripts-4.2.0+git.1594286044.7a596d12-lp152.4.3.1 crmsh-test-4.2.0+git.1594286044.7a596d12-lp152.4.3.1 References: https://bugzilla.suse.com/1166644 https://bugzilla.suse.com/1166962 https://bugzilla.suse.com/1167220 https://bugzilla.suse.com/1169581 https://bugzilla.suse.com/1170037 https://bugzilla.suse.com/1170999

1 0