January 2021 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2021:0184-1: moderate: Recommended update for python-websockify
by maintenance＠opensuse.org 28 Jan '21

28 Jan '21

openSUSE Recommended Update: Recommended update for python-websockify ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0184-1 Rating: moderate References: #1163513 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-websockify fixes the following issues: - Add 'python-numpy' as requirement. (bsc#1163513) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-184=1 Package List: - openSUSE Leap 15.1 (noarch): python-websockify-common-0.8.0-lp151.4.3.1 python2-websockify-0.8.0-lp151.4.3.1 python3-websockify-0.8.0-lp151.4.3.1 References: https://bugzilla.suse.com/1163513

1 0

openSUSE-RU-2021:0185-1: moderate: Recommended update for python-websockify
by maintenance＠opensuse.org 28 Jan '21

28 Jan '21

openSUSE Recommended Update: Recommended update for python-websockify ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0185-1 Rating: moderate References: #1163513 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-websockify fixes the following issues: - Add 'python-numpy' as requirement. (bsc#1163513) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-185=1 Package List: - openSUSE Leap 15.2 (noarch): python-websockify-common-0.8.0-lp152.5.3.1 python2-websockify-0.8.0-lp152.5.3.1 python3-websockify-0.8.0-lp152.5.3.1 References: https://bugzilla.suse.com/1163513

1 0

openSUSE-RU-2021:0182-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 28 Jan '21

28 Jan '21

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0182-1 Rating: moderate References: #1179773 #1180858 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 fixes the following issues: - Keep the libzypp target open to verify other packages and avoid to brake the installation. (bsc#1180858, bsc#1179773) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-182=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-4.2.90-lp152.2.15.1 yast2-logs-4.2.90-lp152.2.15.1 References: https://bugzilla.suse.com/1179773 https://bugzilla.suse.com/1180858

1 0

openSUSE-RU-2021:0183-1: moderate: Recommended update for google-poppins-fonts
by maintenance＠opensuse.org 28 Jan '21

28 Jan '21

openSUSE Recommended Update: Recommended update for google-poppins-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0183-1 Rating: moderate References: ECO-3169 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes and contains one feature can now be installed. Description: This update for google-poppins-fonts fixes the following issues: - Fix copyright attribution and other cleaning on specfile. (jsc#ECO-3169) - Fix url to download archive. - Create initial version. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-183=1 Package List: - openSUSE Leap 15.2 (noarch): google-poppins-fonts-4.003-lp152.2.1 References:

1 0

openSUSE-SU-2021:0180-1: moderate: Security update for python-autobahn
by opensuse-security＠opensuse.org 28 Jan '21

28 Jan '21

openSUSE Security Update: Security update for python-autobahn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0180-1 Rating: moderate References: #1180570 Cross-References: CVE-2020-35678 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection (boo#1180570). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-180=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-autobahn-17.10.1-bp151.4.3.1 python3-autobahn-17.10.1-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-35678.html https://bugzilla.suse.com/1180570

1 0

openSUSE-RU-2021:0181-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 28 Jan '21

28 Jan '21

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0181-1 Rating: moderate References: #1177023 #1180149 #1180421 #1180424 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: - Fix for an issue when 'cluster-init' fails due to wrong declaration of netmask. (bsc#1180421) - Fix for crmsh and yast2-cluster by adding '/etc/modules-load.d/watchdog.conf' into corosync config. (bsc#1180424) - Fix for bootstrap to return more specific error messages. (bsc#1177023) - Fix for a bootstrap isue when cluster init process not protected by lock and exclude other not joinging. (bsc#1180149) - Implement to use ping to test host is reachable before joining. - Check cluster was running on init node This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-181=1 Package List: - openSUSE Leap 15.2 (noarch): crmsh-4.2.0+git.1609987436.0d3a9bf5-lp152.4.43.1 crmsh-scripts-4.2.0+git.1609987436.0d3a9bf5-lp152.4.43.1 crmsh-test-4.2.0+git.1609987436.0d3a9bf5-lp152.4.43.1 References: https://bugzilla.suse.com/1177023 https://bugzilla.suse.com/1180149 https://bugzilla.suse.com/1180421 https://bugzilla.suse.com/1180424

1 0

openSUSE-RU-2021:0178-1: important: Recommended update for fence-agents
by maintenance＠opensuse.org 28 Jan '21

28 Jan '21

openSUSE Recommended Update: Recommended update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0178-1 Rating: important References: #1178343 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fence-agents fixes the following issues: - Fixes a regression which broke fencing in GCE. [bsc#1178343] This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2021-178=1 Package List: - openSUSE Leap 15.1 (x86_64): fence-agents-4.7.0+git.1607346448.17bd8552-lp151.2.15.1 fence-agents-amt_ws-4.7.0+git.1607346448.17bd8552-lp151.2.15.1 fence-agents-debuginfo-4.7.0+git.1607346448.17bd8552-lp151.2.15.1 fence-agents-debugsource-4.7.0+git.1607346448.17bd8552-lp151.2.15.1 fence-agents-devel-4.7.0+git.1607346448.17bd8552-lp151.2.15.1 References: https://bugzilla.suse.com/1178343

1 0

openSUSE-RU-2021:0179-1: important: Recommended update for fence-agents
by maintenance＠opensuse.org 28 Jan '21

28 Jan '21

openSUSE Recommended Update: Recommended update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2021:0179-1 Rating: important References: #1178343 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fence-agents fixes the following issues: - Fixes a regression which broke fencing in GCE. [bsc#1178343] This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-179=1 Package List: - openSUSE Leap 15.2 (x86_64): fence-agents-4.7.0+git.1607346448.17bd8552-lp152.3.9.1 fence-agents-amt_ws-4.7.0+git.1607346448.17bd8552-lp152.3.9.1 fence-agents-debuginfo-4.7.0+git.1607346448.17bd8552-lp152.3.9.1 fence-agents-debugsource-4.7.0+git.1607346448.17bd8552-lp152.3.9.1 fence-agents-devel-4.7.0+git.1607346448.17bd8552-lp152.3.9.1 References: https://bugzilla.suse.com/1178343

1 0

openSUSE-SU-2021:0176-1: moderate: Security update for python-autobahn
by opensuse-security＠opensuse.org 27 Jan '21

27 Jan '21

openSUSE Security Update: Security update for python-autobahn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0176-1 Rating: moderate References: #1180570 Cross-References: CVE-2020-35678 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection (boo#1180570). This update was imported from the openSUSE:Leap:15.1:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-176=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): python2-autobahn-17.10.1-bp152.4.3.1 python3-autobahn-17.10.1-bp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-35678.html https://bugzilla.suse.com/1180570

1 0

openSUSE-SU-2021:0177-1: important: Security update for chromium
by opensuse-security＠opensuse.org 27 Jan '21

27 Jan '21

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0177-1 Rating: important References: #1181137 Cross-References: CVE-2020-16044 CVE-2021-21117 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-21123 CVE-2021-21124 CVE-2021-21125 CVE-2021-21126 CVE-2021-21127 CVE-2021-21128 CVE-2021-21129 CVE-2021-21130 CVE-2021-21131 CVE-2021-21132 CVE-2021-21133 CVE-2021-21134 CVE-2021-21135 CVE-2021-21136 CVE-2021-21137 CVE-2021-21138 CVE-2021-21139 CVE-2021-21140 CVE-2021-21141 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium was updated to 88.0.4324.96 boo#1181137 - CVE-2021-21117: Insufficient policy enforcement in Cryptohome - CVE-2021-21118: Insufficient data validation in V8 - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free in WebSQL - CVE-2021-21121: Use after free in Omnibox - CVE-2021-21122: Use after free in Blink - CVE-2021-21123: Insufficient data validation in File System API - CVE-2021-21124: Potential user after free in Speech Recognizer - CVE-2021-21125: Insufficient policy enforcement in File System API - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21126: Insufficient policy enforcement in extensions - CVE-2021-21127: Insufficient policy enforcement in extensions - CVE-2021-21128: Heap buffer overflow in Blink - CVE-2021-21129: Insufficient policy enforcement in File System API - CVE-2021-21130: Insufficient policy enforcement in File System API - CVE-2021-21131: Insufficient policy enforcement in File System API - CVE-2021-21132: Inappropriate implementation in DevTools - CVE-2021-21133: Insufficient policy enforcement in Downloads - CVE-2021-21134: Incorrect security UI in Page Info - CVE-2021-21135: Inappropriate implementation in Performance API - CVE-2021-21136: Insufficient policy enforcement in WebView - CVE-2021-21137: Inappropriate implementation in DevTools - CVE-2021-21138: Use after free in DevTools - CVE-2021-21139: Inappropriate implementation in iframe sandbox - CVE-2021-21140: Uninitialized Use in USB - CVE-2021-21141: Insufficient policy enforcement in File System API This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2021-177=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-88.0.4324.96-bp151.3.156.1 chromium-88.0.4324.96-bp151.3.156.1 References: https://www.suse.com/security/cve/CVE-2020-16044.html https://www.suse.com/security/cve/CVE-2021-21117.html https://www.suse.com/security/cve/CVE-2021-21118.html https://www.suse.com/security/cve/CVE-2021-21119.html https://www.suse.com/security/cve/CVE-2021-21120.html https://www.suse.com/security/cve/CVE-2021-21121.html https://www.suse.com/security/cve/CVE-2021-21122.html https://www.suse.com/security/cve/CVE-2021-21123.html https://www.suse.com/security/cve/CVE-2021-21124.html https://www.suse.com/security/cve/CVE-2021-21125.html https://www.suse.com/security/cve/CVE-2021-21126.html https://www.suse.com/security/cve/CVE-2021-21127.html https://www.suse.com/security/cve/CVE-2021-21128.html https://www.suse.com/security/cve/CVE-2021-21129.html https://www.suse.com/security/cve/CVE-2021-21130.html https://www.suse.com/security/cve/CVE-2021-21131.html https://www.suse.com/security/cve/CVE-2021-21132.html https://www.suse.com/security/cve/CVE-2021-21133.html https://www.suse.com/security/cve/CVE-2021-21134.html https://www.suse.com/security/cve/CVE-2021-21135.html https://www.suse.com/security/cve/CVE-2021-21136.html https://www.suse.com/security/cve/CVE-2021-21137.html https://www.suse.com/security/cve/CVE-2021-21138.html https://www.suse.com/security/cve/CVE-2021-21139.html https://www.suse.com/security/cve/CVE-2021-21140.html https://www.suse.com/security/cve/CVE-2021-21141.html https://bugzilla.suse.com/1181137

1 0