January 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0151-1: important: Recommended update for tomcat
by maintenance＠opensuse.org 31 Jan '20

31 Jan '20

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0151-1 Rating: important References: #1161025 #1162081 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tomcat fixes the following issues: - Fixes an issue that led to a crash during the last upgrade, which was caused by a wrong typecast (bsc#1161025, bsc#1162081) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-151=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.30-lp151.3.9.1 tomcat-admin-webapps-9.0.30-lp151.3.9.1 tomcat-docs-webapp-9.0.30-lp151.3.9.1 tomcat-el-3_0-api-9.0.30-lp151.3.9.1 tomcat-embed-9.0.30-lp151.3.9.1 tomcat-javadoc-9.0.30-lp151.3.9.1 tomcat-jsp-2_3-api-9.0.30-lp151.3.9.1 tomcat-jsvc-9.0.30-lp151.3.9.1 tomcat-lib-9.0.30-lp151.3.9.1 tomcat-servlet-4_0-api-9.0.30-lp151.3.9.1 tomcat-webapps-9.0.30-lp151.3.9.1 References: https://bugzilla.suse.com/1161025 https://bugzilla.suse.com/1162081

1 0

openSUSE-RU-2020:0150-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 30 Jan '20

30 Jan '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0150-1 Rating: moderate References: #1161615 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 3.19 (boo#1161615). The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-3-19-has-been-released/6529 + Virtual machine support + Reworked storage layer + Routed networking mode + Custom mount options for disk devices + Interception of the mount system call + Multi-architecture clustering - Rework package handling to fake Go module builds. - Support older SLE systems which don't have "usermod -w -v". Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-150=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-3.19-lp151.14.1 - openSUSE Leap 15.1 (x86_64): lxd-3.19-lp151.14.1 References: https://bugzilla.suse.com/1161615

1 0

openSUSE-RU-2020:0149-1: Recommended update for brotli
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for brotli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0149-1 Rating: low References: #1161104 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for brotli fixes the following issues: - Added missing libbrotlicommon1 and libbrotlidec1 Requires to devel subpackage (bsc#1161104). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-149=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): brotli-1.0.2-lp151.3.3.1 brotli-debuginfo-1.0.2-lp151.3.3.1 brotli-debugsource-1.0.2-lp151.3.3.1 libbrotli-devel-1.0.2-lp151.3.3.1 libbrotlicommon1-1.0.2-lp151.3.3.1 libbrotlicommon1-debuginfo-1.0.2-lp151.3.3.1 libbrotlidec1-1.0.2-lp151.3.3.1 libbrotlidec1-debuginfo-1.0.2-lp151.3.3.1 libbrotlienc1-1.0.2-lp151.3.3.1 libbrotlienc1-debuginfo-1.0.2-lp151.3.3.1 References: https://bugzilla.suse.com/1161104

1 0

openSUSE-RU-2020:0127-1: moderate: Recommended update for live-net-installer
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for live-net-installer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0127-1 Rating: moderate References: #1155687 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for live-net-installer fixes the following issues: - Stop nscd before starting the installation (boo#1155687) - Fix URL for aarch64 - URL is arch specific, so drop noarch This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-127=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): live-net-installer-1.0-bp151.2.3.6 References: https://bugzilla.suse.com/1155687

1 0

openSUSE-RU-2020:0130-1: moderate: Recommended update for apache2-mod_auth_kerb
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for apache2-mod_auth_kerb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0130-1 Rating: moderate References: #1142545 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2-mod_auth_kerb fixes the following issues: - Fix a segmentation fault in function authenticate_user_krb5pwd() when credentials were supplied using basic authentication [boo#1142545] This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-130=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): apache2-mod_auth_kerb-5.4-bp151.4.6.1 References: https://bugzilla.suse.com/1142545

1 0

openSUSE-RU-2020:0143-1: moderate: Recommended update for synergy
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for synergy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0143-1 Rating: moderate References: #1158470 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for synergy fixes the following issues: - Added BuildRequires on xrandr and xinerama (boo#1158470) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-143=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): qsynergy-1.8.8-bp151.4.3.1 synergy-1.8.8-bp151.4.3.1 References: https://bugzilla.suse.com/1158470

1 0

openSUSE-RU-2020:0136-1: moderate: Recommended update for mate-terminal
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for mate-terminal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0136-1 Rating: moderate References: #1160686 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mate-terminal fixes the following issues: Update to version 1.20.1: * terminal-window: Fix Session dbus daemon saturated (fixes boo#1160686) * Translation updates. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-136=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): mate-terminal-1.20.1-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): mate-terminal-lang-1.20.1-bp151.4.3.1 References: https://bugzilla.suse.com/1160686

1 0

openSUSE-SU-2020:0146-1: important: Security update for apt-cacher-ng
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for apt-cacher-ng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0146-1 Rating: important References: #1157703 #1157706 Cross-References: CVE-2019-18899 CVE-2020-5202 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for apt-cacher-ng fixes the following issues: - CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data (boo#1157703). - CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localhost:3142 (boo#1157706). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-146=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): apt-cacher-ng-3.1-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-18899.html https://www.suse.com/security/cve/CVE-2020-5202.html https://bugzilla.suse.com/1157703 https://bugzilla.suse.com/1157706

1 0

openSUSE-RU-2020:0129-1: moderate: Recommended update for amanda
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for amanda ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0129-1 Rating: moderate References: #1110797 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for amanda fixes the following issues: Updated the list of suid binaries [boo#1110797] - added: ambind, ambsdtar, amgtar, amstar - removed: amcheck, planner, dumper Updated README.SUSE and add a note about setuid binaries and the fact that user amanda and members of the group amanda should be considered privileged users This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-129=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): amanda-3.5.1-bp151.4.3.7 References: https://bugzilla.suse.com/1110797

1 0

openSUSE-SU-2020:0145-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0145-1 Rating: moderate References: #1159852 #1160321 #1160364 Cross-References: CVE-2019-19950 CVE-2019-19951 CVE-2019-19953 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-19950: Fixed a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. (boo#1159852) - CVE-2019-19951: Fixed a heap-based buffer overflow in ImportRLEPixels() (boo#1160321). - CVE-2019-19953: Fixed a heap-based buffer overflow in EncodeImage() (boo#1160364). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-145=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): GraphicsMagick-1.3.29-bp151.5.9.1 GraphicsMagick-devel-1.3.29-bp151.5.9.1 libGraphicsMagick++-Q16-12-1.3.29-bp151.5.9.1 libGraphicsMagick++-devel-1.3.29-bp151.5.9.1 libGraphicsMagick-Q16-3-1.3.29-bp151.5.9.1 libGraphicsMagick3-config-1.3.29-bp151.5.9.1 libGraphicsMagickWand-Q16-2-1.3.29-bp151.5.9.1 perl-GraphicsMagick-1.3.29-bp151.5.9.1 References: https://www.suse.com/security/cve/CVE-2019-19950.html https://www.suse.com/security/cve/CVE-2019-19951.html https://www.suse.com/security/cve/CVE-2019-19953.html https://bugzilla.suse.com/1159852 https://bugzilla.suse.com/1160321 https://bugzilla.suse.com/1160364

1 0