January 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0151-1: important: Recommended update for tomcat
by maintenance＠opensuse.org 31 Jan '20

31 Jan '20

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0151-1 Rating: important References: #1161025 #1162081 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tomcat fixes the following issues: - Fixes an issue that led to a crash during the last upgrade, which was caused by a wrong typecast (bsc#1161025, bsc#1162081) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-151=1 Package List: - openSUSE Leap 15.1 (noarch): tomcat-9.0.30-lp151.3.9.1 tomcat-admin-webapps-9.0.30-lp151.3.9.1 tomcat-docs-webapp-9.0.30-lp151.3.9.1 tomcat-el-3_0-api-9.0.30-lp151.3.9.1 tomcat-embed-9.0.30-lp151.3.9.1 tomcat-javadoc-9.0.30-lp151.3.9.1 tomcat-jsp-2_3-api-9.0.30-lp151.3.9.1 tomcat-jsvc-9.0.30-lp151.3.9.1 tomcat-lib-9.0.30-lp151.3.9.1 tomcat-servlet-4_0-api-9.0.30-lp151.3.9.1 tomcat-webapps-9.0.30-lp151.3.9.1 References: https://bugzilla.suse.com/1161025 https://bugzilla.suse.com/1162081

1 0

openSUSE-RU-2020:0150-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 30 Jan '20

30 Jan '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0150-1 Rating: moderate References: #1161615 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 3.19 (boo#1161615). The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-3-19-has-been-released/6529 + Virtual machine support + Reworked storage layer + Routed networking mode + Custom mount options for disk devices + Interception of the mount system call + Multi-architecture clustering - Rework package handling to fake Go module builds. - Support older SLE systems which don't have "usermod -w -v". Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-150=1 Package List: - openSUSE Leap 15.1 (noarch): lxd-bash-completion-3.19-lp151.14.1 - openSUSE Leap 15.1 (x86_64): lxd-3.19-lp151.14.1 References: https://bugzilla.suse.com/1161615

1 0

openSUSE-RU-2020:0149-1: Recommended update for brotli
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for brotli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0149-1 Rating: low References: #1161104 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for brotli fixes the following issues: - Added missing libbrotlicommon1 and libbrotlidec1 Requires to devel subpackage (bsc#1161104). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-149=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): brotli-1.0.2-lp151.3.3.1 brotli-debuginfo-1.0.2-lp151.3.3.1 brotli-debugsource-1.0.2-lp151.3.3.1 libbrotli-devel-1.0.2-lp151.3.3.1 libbrotlicommon1-1.0.2-lp151.3.3.1 libbrotlicommon1-debuginfo-1.0.2-lp151.3.3.1 libbrotlidec1-1.0.2-lp151.3.3.1 libbrotlidec1-debuginfo-1.0.2-lp151.3.3.1 libbrotlienc1-1.0.2-lp151.3.3.1 libbrotlienc1-debuginfo-1.0.2-lp151.3.3.1 References: https://bugzilla.suse.com/1161104

1 0

openSUSE-RU-2020:0127-1: moderate: Recommended update for live-net-installer
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for live-net-installer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0127-1 Rating: moderate References: #1155687 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for live-net-installer fixes the following issues: - Stop nscd before starting the installation (boo#1155687) - Fix URL for aarch64 - URL is arch specific, so drop noarch This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-127=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): live-net-installer-1.0-bp151.2.3.6 References: https://bugzilla.suse.com/1155687

1 0

openSUSE-RU-2020:0130-1: moderate: Recommended update for apache2-mod_auth_kerb
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for apache2-mod_auth_kerb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0130-1 Rating: moderate References: #1142545 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2-mod_auth_kerb fixes the following issues: - Fix a segmentation fault in function authenticate_user_krb5pwd() when credentials were supplied using basic authentication [boo#1142545] This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-130=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): apache2-mod_auth_kerb-5.4-bp151.4.6.1 References: https://bugzilla.suse.com/1142545

1 0

openSUSE-RU-2020:0143-1: moderate: Recommended update for synergy
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for synergy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0143-1 Rating: moderate References: #1158470 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for synergy fixes the following issues: - Added BuildRequires on xrandr and xinerama (boo#1158470) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-143=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): qsynergy-1.8.8-bp151.4.3.1 synergy-1.8.8-bp151.4.3.1 References: https://bugzilla.suse.com/1158470

1 0

openSUSE-RU-2020:0136-1: moderate: Recommended update for mate-terminal
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for mate-terminal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0136-1 Rating: moderate References: #1160686 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mate-terminal fixes the following issues: Update to version 1.20.1: * terminal-window: Fix Session dbus daemon saturated (fixes boo#1160686) * Translation updates. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-136=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): mate-terminal-1.20.1-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): mate-terminal-lang-1.20.1-bp151.4.3.1 References: https://bugzilla.suse.com/1160686

1 0

openSUSE-SU-2020:0146-1: important: Security update for apt-cacher-ng
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for apt-cacher-ng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0146-1 Rating: important References: #1157703 #1157706 Cross-References: CVE-2019-18899 CVE-2020-5202 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for apt-cacher-ng fixes the following issues: - CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data (boo#1157703). - CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localhost:3142 (boo#1157706). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-146=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): apt-cacher-ng-3.1-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-18899.html https://www.suse.com/security/cve/CVE-2020-5202.html https://bugzilla.suse.com/1157703 https://bugzilla.suse.com/1157706

1 0

openSUSE-RU-2020:0129-1: moderate: Recommended update for amanda
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for amanda ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0129-1 Rating: moderate References: #1110797 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for amanda fixes the following issues: Updated the list of suid binaries [boo#1110797] - added: ambind, ambsdtar, amgtar, amstar - removed: amcheck, planner, dumper Updated README.SUSE and add a note about setuid binaries and the fact that user amanda and members of the group amanda should be considered privileged users This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-129=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): amanda-3.5.1-bp151.4.3.7 References: https://bugzilla.suse.com/1110797

1 0

openSUSE-SU-2020:0145-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0145-1 Rating: moderate References: #1159852 #1160321 #1160364 Cross-References: CVE-2019-19950 CVE-2019-19951 CVE-2019-19953 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-19950: Fixed a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. (boo#1159852) - CVE-2019-19951: Fixed a heap-based buffer overflow in ImportRLEPixels() (boo#1160321). - CVE-2019-19953: Fixed a heap-based buffer overflow in EncodeImage() (boo#1160364). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-145=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): GraphicsMagick-1.3.29-bp151.5.9.1 GraphicsMagick-devel-1.3.29-bp151.5.9.1 libGraphicsMagick++-Q16-12-1.3.29-bp151.5.9.1 libGraphicsMagick++-devel-1.3.29-bp151.5.9.1 libGraphicsMagick-Q16-3-1.3.29-bp151.5.9.1 libGraphicsMagick3-config-1.3.29-bp151.5.9.1 libGraphicsMagickWand-Q16-2-1.3.29-bp151.5.9.1 perl-GraphicsMagick-1.3.29-bp151.5.9.1 References: https://www.suse.com/security/cve/CVE-2019-19950.html https://www.suse.com/security/cve/CVE-2019-19951.html https://www.suse.com/security/cve/CVE-2019-19953.html https://bugzilla.suse.com/1159852 https://bugzilla.suse.com/1160321 https://bugzilla.suse.com/1160364

1 0

openSUSE-SU-2020:0140-1: important: Security update for sarg
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for sarg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0140-1 Rating: important References: #1156643 Cross-References: CVE-2019-18932 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sarg fixes the following issues: - CVE-2019-18932: Fixed insecure usage of /tmp/sarg which potentially allowed privilege escalation or denial of service (boo#1156643). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-140=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): sarg-2.3.10-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-18932.html https://bugzilla.suse.com/1156643

1 0

openSUSE-SU-2020:0139-1: moderate: Security update for rubygem-excon
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for rubygem-excon ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0139-1 Rating: moderate References: #1159342 Cross-References: CVE-2019-16779 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-excon fixes the following issues: CVE-2019-16779 (boo#1159342): Fix a race condition around persistent connections, where a connection, which was interrupted, would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-139=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): ruby2.5-rubygem-excon-0.59.0-bp151.4.3.1 ruby2.5-rubygem-excon-doc-0.59.0-bp151.4.3.1 ruby2.5-rubygem-excon-testsuite-0.59.0-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-16779.html https://bugzilla.suse.com/1159342

1 0

openSUSE-RU-2020:0144-1: moderate: Recommended update for zstd
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for zstd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0144-1 Rating: moderate References: #1161432 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for zstd fixes the following issues: Update to version 1.4.4 (boo#1161432): * perf: Improved decompression speed, by > 10% * perf: Better compression speed when re-using a context * perf: Fix compression ratio when compressing large files with small dictionary * perf: zstd reference encoder can generate RLE blocks * perf: minor generic speed optimization * api: new ability to extract sequences from the parser for analysis * api: fixed decoding of magic-less frames * api: fixed ZSTD_initCStream_advanced() performance with fast modes * cli: Named pipes support * cli: short tar's extension support * cli: command --output-dir-flat=DIE , generates target files into requested directory * cli: commands --stream-size=# and --size-hint=# * cli: command --exclude-compressed * cli: faster -t test mode * cli: improved some error messages * cli: fix rare deadlock condition within dictionary builder * misc: Improved documentation : ZSTD_CLEVEL, DYNAMIC_BMI2, ZSTD_CDict, function deprecation, zstd format * misc: fixed educational decoder : accept larger literals section, and removed UNALIGNED() macro Update to version 1.4.3 * bug: Fix Dictionary Compression Ratio Regression (#1709) * bug: Fix Buffer Overflow in v0.3 Decompression (#1722) * build: Add support for IAR C/C++ Compiler for Arm (#1705) * misc: Add NULL pointer check in util.c (#1706) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-144=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libzstd-devel-1.4.4-bp151.4.6.1 libzstd-devel-static-1.4.4-bp151.4.6.1 libzstd1-1.4.4-bp151.4.6.1 zstd-1.4.4-bp151.4.6.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): libzstd1-64bit-1.4.4-bp151.4.6.1 References: https://bugzilla.suse.com/1161432

1 0

openSUSE-RU-2020:0141-1: moderate: Recommended update for scap-workbench
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for scap-workbench ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0141-1 Rating: moderate References: #1084706 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for scap-workbench fixes the following issues: * security hardening for pk-exec usage (boo#1084706). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-141=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): scap-workbench-1.1.5-bp151.4.3.1 scap-workbench-doc-1.1.5-bp151.4.3.1 References: https://bugzilla.suse.com/1084706

1 0

openSUSE-RU-2020:0133-1: moderate: Recommended update for gitlint
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for gitlint ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0133-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gitlint fixes the following issues: Update to v0.11.0: * make it work with openSUSE This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-133=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-gitlint-0.11.0-bp151.4.3.1 python3-gitlint-0.11.0-bp151.4.3.1 References:

1 0

openSUSE-RU-2020:0128-1: moderate: Recommended update for DisplayCAL
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for DisplayCAL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0128-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for DisplayCAL fixes the following issues: - Added dependency on python-xml. Without it, DisplayCAL won't start. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-128=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): DisplayCAL-3.5.3.0-bp151.4.3.1 References:

1 0

openSUSE-SU-2020:0142-1: moderate: Security update for shadowsocks-libev
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for shadowsocks-libev ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0142-1 Rating: moderate References: #1158251 #1158365 Cross-References: CVE-2019-5163 CVE-2019-5164 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for shadowsocks-libev fixes the following issues: - Update version to 3.3.3 * Refine the handling of suspicious connections. * Fix exploitable denial-of-service vulnerability exists in the UDPRelay functionality (boo#1158251, CVE-2019-5163) * Fix code execution vulnerability in the ss-manager binary (boo#1158365, CVE-2019-5164) * Refine the handling of fragment request. * Fix a high CPU bug introduced in 3.3.0. (#2449) * Enlarge the socket buffer size to 16KB. * Fix the empty list bug in ss-manager. * Fix the IPv6 address parser. * Fix a bug of port parser. * Fix a crash with MinGW. * Refine SIP003 plugin interface. * Remove connection timeout from all clients. * Fix the alignment bug again. * Fix a bug on 32-bit arch. * Add TCP fast open support to ss-tunnel by @PantherJohn. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-142=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libshadowsocks-libev2-3.3.3-bp151.5.3.1 shadowsocks-libev-3.3.3-bp151.5.3.1 shadowsocks-libev-devel-3.3.3-bp151.5.3.1 - openSUSE Backports SLE-15-SP1 (noarch): shadowsocks-libev-doc-3.3.3-bp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-5163.html https://www.suse.com/security/cve/CVE-2019-5164.html https://bugzilla.suse.com/1158251 https://bugzilla.suse.com/1158365

1 0

openSUSE-RU-2020:0135-1: moderate: Recommended update for kmozillahelper
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for kmozillahelper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0135-1 Rating: moderate References: #1037806 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kmozillahelper fixes the following issues: - Update to 5.0.5: * Recognize if started from Thunderbird * Cache helper protocols (boo#1037806) * Use new style connect * Don't use deprecated KRun:runUrl without flags, use with flags * Improve HiDPI support - Add %license This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-135=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): kmozillahelper-5.0.5-bp151.4.3.1 References: https://bugzilla.suse.com/1037806

1 0

openSUSE-SU-2020:0147-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0147-1 Rating: important References: #1160968 Cross-References: CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for java-1_8_0-openjdk fixes the following issues: Update java-1_8_0-openjdk to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU, bsc#1160968): - CVE-2020-2583: Unlink Set of LinkedHashSets - CVE-2020-2590: Improve Kerberos interop capabilities - CVE-2020-2593: Normalize normalization for all - CVE-2020-2601: Better Ticket Granting Services - CVE-2020-2604: Better serial filter handling - CVE-2020-2659: Enhance datagram socket support - CVE-2020-2654: Improve Object Identifier Processing This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-147=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): java-1_8_0-openjdk-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-accessibility-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-debuginfo-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-debugsource-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-demo-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-devel-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-headless-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.242-lp151.2.9.1 java-1_8_0-openjdk-src-1.8.0.242-lp151.2.9.1 - openSUSE Leap 15.1 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.242-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-2583.html https://www.suse.com/security/cve/CVE-2020-2590.html https://www.suse.com/security/cve/CVE-2020-2593.html https://www.suse.com/security/cve/CVE-2020-2601.html https://www.suse.com/security/cve/CVE-2020-2604.html https://www.suse.com/security/cve/CVE-2020-2654.html https://www.suse.com/security/cve/CVE-2020-2659.html https://bugzilla.suse.com/1160968

1 0

openSUSE-RU-2020:0126-1: moderate: Recommended update for procps
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0126-1 Rating: moderate References: #1158830 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for procps fixes the following issues: - Fix for "ps -C" allowing to accept any arguments longer than 15 characters anymore. (bsc#1158830) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-126=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libprocps7-3.3.15-lp151.6.6.1 libprocps7-debuginfo-3.3.15-lp151.6.6.1 procps-3.3.15-lp151.6.6.1 procps-debuginfo-3.3.15-lp151.6.6.1 procps-debugsource-3.3.15-lp151.6.6.1 procps-devel-3.3.15-lp151.6.6.1 References: https://bugzilla.suse.com/1158830

1 0

openSUSE-RU-2020:0138-1: moderate: Recommended update for python-virtualenvwrapper
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for python-virtualenvwrapper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0138-1 Rating: moderate References: #1159243 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-virtualenvwrapper fixes the following issues: - Update to 4.8.4: * various typo / docu fixes * Support for python 3.7 - Use python3 instead of python2 boo#1159243 This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-138=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-virtualenvwrapper-4.8.4-bp151.4.3.1 python3-virtualenvwrapper-4.8.4-bp151.4.3.1 References: https://bugzilla.suse.com/1159243

1 0

openSUSE-RU-2020:0134-1: moderate: Recommended update for imap
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for imap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0134-1 Rating: moderate References: #1145195 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for imap fixes the following issues: - read certificates from /etc/imap/certs ([boo#1145195]) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-134=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): imap-2007e_suse-bp151.4.3.1 imap-devel-2007e_suse-bp151.4.3.1 libc-client2007e_suse-2007e_suse-bp151.4.3.1 References: https://bugzilla.suse.com/1145195

1 0

openSUSE-SU-2020:0148-1: moderate: Security update for mailman
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0148-1 Rating: moderate References: #1154328 Cross-References: CVE-2019-3693 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mailman fixes the following issues: - CVE-2019-3693: Fixed a privilege escalation during package install. Could be exploited by a local users who is members of the the mailman group. (boo#1154328) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-148=1 Package List: - openSUSE Leap 15.1 (x86_64): mailman-2.1.29-lp151.3.3.1 mailman-debuginfo-2.1.29-lp151.3.3.1 mailman-debugsource-2.1.29-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-3693.html https://bugzilla.suse.com/1154328

1 0

openSUSE-RU-2020:0132-1: Recommended update for fcitx-qt5
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for fcitx-qt5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0132-1 Rating: low References: #1152412 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fcitx-qt5 fixes the following issue: - QOwnNotes always crash at close with fcitx-qt5 installed. (boo#1152412) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-132=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): fcitx-qt5-1.2.2-bp151.4.9.1 fcitx-qt5-devel-1.2.2-bp151.4.9.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): fcitx-qt5-64bit-1.2.2-bp151.4.9.1 References: https://bugzilla.suse.com/1152412

1 0

openSUSE-SU-2020:0137-1: moderate: Security update for mumble
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for mumble ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0137-1 Rating: moderate References: #1123334 Cross-References: CVE-2018-20743 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mumble fixes the following issues: CVE-2018-20743: murmur mishandled multiple concurrent requests that were persisted in the database, which allowed remote attackers to cause a denial of service (daemon hang or crash) via a message flood. (boo#1123334) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-137=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): mumble-1.2.19-bp151.6.6.1 mumble-server-1.2.19-bp151.6.6.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): mumble-64bit-1.2.19-bp151.6.6.1 References: https://www.suse.com/security/cve/CVE-2018-20743.html https://bugzilla.suse.com/1123334

1 0

openSUSE-RU-2020:0131-1: moderate: Recommended update for calamaris
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for calamaris ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0131-1 Rating: moderate References: #1145328 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for calamaris fixes the following issues: - Fix generation of reports with Perl 5.12 (boo#1145328) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-131=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): calamaris-2.59-bp151.4.3.1 References: https://bugzilla.suse.com/1145328

1 0

openSUSE-SU-2020:0124-1: important: Security update for apt-cacher-ng
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for apt-cacher-ng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0124-1 Rating: important References: #1157703 #1157706 Cross-References: CVE-2019-18899 CVE-2020-5202 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for apt-cacher-ng fixes the following issues: - CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data (boo#1157703). - CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localhost:3142 (boo#1157706). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-124=1 Package List: - openSUSE Leap 15.1 (x86_64): apt-cacher-ng-3.1-lp151.3.3.1 apt-cacher-ng-debuginfo-3.1-lp151.3.3.1 apt-cacher-ng-debugsource-3.1-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-18899.html https://www.suse.com/security/cve/CVE-2020-5202.html https://bugzilla.suse.com/1157703 https://bugzilla.suse.com/1157706

1 0

openSUSE-RU-2020:0125-1: moderate: Recommended update for gimp-help
by maintenance＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Recommended Update: Recommended update for gimp-help ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0125-1 Rating: moderate References: #1158656 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gimp-help fixes the following issues: - Add _constraints for ppc64/ppc64le as build failed with 3.5G disk (bsc#1158656). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-125=1 Package List: - openSUSE Leap 15.1 (noarch): gimp-help-2.8.2-lp151.3.3.1 gimp-help-ca-2.8.2-lp151.3.3.1 gimp-help-da-2.8.2-lp151.3.3.1 gimp-help-de-2.8.2-lp151.3.3.1 gimp-help-el-2.8.2-lp151.3.3.1 gimp-help-en_GB-2.8.2-lp151.3.3.1 gimp-help-es-2.8.2-lp151.3.3.1 gimp-help-fi-2.8.2-lp151.3.3.1 gimp-help-fr-2.8.2-lp151.3.3.1 gimp-help-hr-2.8.2-lp151.3.3.1 gimp-help-it-2.8.2-lp151.3.3.1 gimp-help-ja-2.8.2-lp151.3.3.1 gimp-help-ko-2.8.2-lp151.3.3.1 gimp-help-lt-2.8.2-lp151.3.3.1 gimp-help-nl-2.8.2-lp151.3.3.1 gimp-help-nn-2.8.2-lp151.3.3.1 gimp-help-pl-2.8.2-lp151.3.3.1 gimp-help-pt_BR-2.8.2-lp151.3.3.1 gimp-help-ru-2.8.2-lp151.3.3.1 gimp-help-sl-2.8.2-lp151.3.3.1 gimp-help-sv-2.8.2-lp151.3.3.1 gimp-help-zh-2.8.2-lp151.3.3.1 References: https://bugzilla.suse.com/1158656

1 0

openSUSE-SU-2020:0123-1: important: Security update for git
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0123-1 Rating: important References: #1082023 #1149792 #1158785 #1158787 #1158788 #1158789 #1158790 #1158791 #1158792 #1158793 #1158795 Cross-References: CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2019-19604 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has two fixes is now available. Description: This update for git fixes the following issues: Security issues fixed: - CVE-2019-1349: Fixed issue on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice (bsc#1158787). - CVE-2019-19604: Fixed a recursive clone followed by a submodule update could execute code contained within the repository without the user explicitly having asked for that (bsc#1158795). - CVE-2019-1387: Fixed recursive clones that are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones (bsc#1158793). - CVE-2019-1354: Fixed issue on Windows that refuses to write tracked files with filenames that contain backslashes (bsc#1158792). - CVE-2019-1353: Fixed issue when run in the Windows Subsystem for Linux while accessing a working directory on a regular Windows drive, none of the NTFS protections were active (bsc#1158791). - CVE-2019-1352: Fixed issue on Windows was unaware of NTFS Alternate Data Streams (bsc#1158790). - CVE-2019-1351: Fixed issue on Windows mistakes drive letters outside of the US-English alphabet as relative paths (bsc#1158789). - CVE-2019-1350: Fixed incorrect quoting of command-line arguments allowed remote code execution during a recursive clone in conjunction with SSH URLs (bsc#1158788). - CVE-2019-1348: Fixed the --export-marks option of fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths (bsc#1158785). - Fixes an issue where git send-email failed to authenticate with SMTP server (bsc#1082023) Bug fixes: - Add zlib dependency, which used to be provided by openssl-devel, so that package can compile successfully after openssl upgrade to 1.1.1. (bsc#1149792). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-123=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): git-2.16.4-lp151.4.3.1 git-arch-2.16.4-lp151.4.3.1 git-core-2.16.4-lp151.4.3.1 git-core-debuginfo-2.16.4-lp151.4.3.1 git-credential-gnome-keyring-2.16.4-lp151.4.3.1 git-credential-gnome-keyring-debuginfo-2.16.4-lp151.4.3.1 git-credential-libsecret-2.16.4-lp151.4.3.1 git-credential-libsecret-debuginfo-2.16.4-lp151.4.3.1 git-cvs-2.16.4-lp151.4.3.1 git-daemon-2.16.4-lp151.4.3.1 git-daemon-debuginfo-2.16.4-lp151.4.3.1 git-debuginfo-2.16.4-lp151.4.3.1 git-debugsource-2.16.4-lp151.4.3.1 git-email-2.16.4-lp151.4.3.1 git-gui-2.16.4-lp151.4.3.1 git-p4-2.16.4-lp151.4.3.1 git-svn-2.16.4-lp151.4.3.1 git-svn-debuginfo-2.16.4-lp151.4.3.1 git-web-2.16.4-lp151.4.3.1 gitk-2.16.4-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): git-doc-2.16.4-lp151.4.3.1 perl-Authen-SASL-2.16-lp151.3.3.1 perl-Net-SMTP-SSL-1.04-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-1348.html https://www.suse.com/security/cve/CVE-2019-1349.html https://www.suse.com/security/cve/CVE-2019-1350.html https://www.suse.com/security/cve/CVE-2019-1351.html https://www.suse.com/security/cve/CVE-2019-1352.html https://www.suse.com/security/cve/CVE-2019-1353.html https://www.suse.com/security/cve/CVE-2019-1354.html https://www.suse.com/security/cve/CVE-2019-1387.html https://www.suse.com/security/cve/CVE-2019-19604.html https://bugzilla.suse.com/1082023 https://bugzilla.suse.com/1149792 https://bugzilla.suse.com/1158785 https://bugzilla.suse.com/1158787 https://bugzilla.suse.com/1158788 https://bugzilla.suse.com/1158789 https://bugzilla.suse.com/1158790 https://bugzilla.suse.com/1158791 https://bugzilla.suse.com/1158792 https://bugzilla.suse.com/1158793 https://bugzilla.suse.com/1158795

1 0

openSUSE-SU-2020:0122-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 29 Jan '20

29 Jan '20

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0122-1 Rating: moderate References: #1141320 #1160850 #1160852 #1160888 Cross-References: CVE-2019-14902 CVE-2019-14907 CVE-2019-19344 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850). - CVE-2019-19344: Fixed a server crash when using dns zone scavenging = yes (bsc#1160852). Non-security issue fixed: - Fixed Ceph snapshot path handling relative to root (bsc#1141320). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-122=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ctdb-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 ctdb-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 ctdb-pcp-pmda-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 ctdb-pcp-pmda-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 ctdb-tests-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 ctdb-tests-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc-binding0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc-binding0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc-samr-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc-samr0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc-samr0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-krb5pac-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-krb5pac0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-krb5pac0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-nbt-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-nbt0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-nbt0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-standard-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-standard0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-standard0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libnetapi-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libnetapi0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libnetapi0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-credentials-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-credentials0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-credentials0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-errors-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-errors0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-errors0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-hostconfig-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-hostconfig0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-hostconfig0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-passdb-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-passdb0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-passdb0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy-python-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy-python3-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy0-python3-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy0-python3-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-util-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-util0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-util0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamdb-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamdb0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamdb0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbclient-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbclient0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbclient0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbconf-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbconf0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbconf0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbldap-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbldap2-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbldap2-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libtevent-util-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libtevent-util0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libtevent-util0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libwbclient-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libwbclient0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libwbclient0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-ad-dc-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-ad-dc-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-client-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-client-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-core-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-debugsource-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-dsdb-modules-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-dsdb-modules-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-python-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-python-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-python3-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-python3-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-pidl-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-python-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-python-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-python3-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-python3-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-test-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-test-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-winbind-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-winbind-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 - openSUSE Leap 15.1 (noarch): samba-doc-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 - openSUSE Leap 15.1 (x86_64): libdcerpc-binding0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc-binding0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc-samr0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc-samr0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libdcerpc0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-krb5pac0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-krb5pac0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-nbt0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-nbt0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-standard0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr-standard0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libndr0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libnetapi0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libnetapi0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-credentials0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-credentials0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-errors0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-errors0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-hostconfig0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-passdb0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-passdb0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy0-python3-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-util0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamba-util0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamdb0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsamdb0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbclient0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbclient0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbconf0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbconf0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbldap2-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libsmbldap2-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libtevent-util0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libtevent-util0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libwbclient0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 libwbclient0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-ad-dc-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-ad-dc-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-ceph-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-ceph-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-client-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-client-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-python-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-python-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-python3-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-libs-python3-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-winbind-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 samba-winbind-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2019-14902.html https://www.suse.com/security/cve/CVE-2019-14907.html https://www.suse.com/security/cve/CVE-2019-19344.html https://bugzilla.suse.com/1141320 https://bugzilla.suse.com/1160850 https://bugzilla.suse.com/1160852 https://bugzilla.suse.com/1160888

1 0

openSUSE-RU-2020:0120-1: moderate: Recommended update for perl-Crypt-SSLeay
by maintenance＠opensuse.org 28 Jan '20

28 Jan '20

openSUSE Recommended Update: Recommended update for perl-Crypt-SSLeay ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0120-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-Crypt-SSLeay fixes the following issues: - Fix build not testing content of returned version strings - Add missing zlib build dependency, which used to be pulled in by libopenssl-devel. (bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-120=1 Package List: - openSUSE Leap 15.1 (x86_64): perl-Crypt-SSLeay-0.72-lp151.4.3.1 perl-Crypt-SSLeay-debuginfo-0.72-lp151.4.3.1 perl-Crypt-SSLeay-debugsource-0.72-lp151.4.3.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-SU-2020:0119-1: moderate: Security update for storeBackup
by opensuse-security＠opensuse.org 28 Jan '20

28 Jan '20

openSUSE Security Update: Security update for storeBackup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0119-1 Rating: moderate References: #1156767 Cross-References: CVE-2020-7040 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for storeBackup fixes the following issues: - CVE-2020-7040: Fixed a symlink attack which could lead to denial of service (boo#1156767). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-119=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-119=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-119=1 Package List: - openSUSE Leap 15.1 (noarch): storeBackup-3.5-lp151.5.3.1 - openSUSE Backports SLE-15-SP1 (noarch): storeBackup-3.5-bp151.4.3.1 - openSUSE Backports SLE-15 (noarch): storeBackup-3.5-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-7040.html https://bugzilla.suse.com/1156767

1 0

openSUSE-SU-2020:0121-1: moderate: Security update for sarg
by opensuse-security＠opensuse.org 28 Jan '20

28 Jan '20

openSUSE Security Update: Security update for sarg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0121-1 Rating: moderate References: #1142433 #1142435 #1142436 Cross-References: CVE-2019-1010222 CVE-2019-1010223 CVE-2019-1010224 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for aubio fixes the following issues: - CVE-2019-1010224: Fixed a denial of service caused by null pointer dereference (boo#1142435). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-121=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): aubio-debugsource-0.4.6-lp151.6.7.1 aubio-tools-0.4.6-lp151.6.7.1 aubio-tools-debuginfo-0.4.6-lp151.6.7.1 libaubio-devel-0.4.6-lp151.6.7.1 libaubio5-0.4.6-lp151.6.7.1 libaubio5-debuginfo-0.4.6-lp151.6.7.1 - openSUSE Leap 15.1 (x86_64): libaubio5-32bit-0.4.6-lp151.6.7.1 libaubio5-32bit-debuginfo-0.4.6-lp151.6.7.1 python-aubio-debugsource-0.4.6-lp151.6.7.1 python2-aubio-0.4.6-lp151.6.7.1 python2-aubio-debuginfo-0.4.6-lp151.6.7.1 python3-aubio-0.4.6-lp151.6.7.1 python3-aubio-debuginfo-0.4.6-lp151.6.7.1 References: https://www.suse.com/security/cve/CVE-2019-1010222.html https://www.suse.com/security/cve/CVE-2019-1010223.html https://www.suse.com/security/cve/CVE-2019-1010224.html https://bugzilla.suse.com/1142433 https://bugzilla.suse.com/1142435 https://bugzilla.suse.com/1142436

1 0

openSUSE-RU-2020:0118-1: moderate: Recommended update for live-net-installer
by maintenance＠opensuse.org 28 Jan '20

28 Jan '20

openSUSE Recommended Update: Recommended update for live-net-installer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0118-1 Rating: moderate References: #1155687 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for live-net-installer fixes the following issues: - Stop nscd before starting the installation (boo#1155687) - Fix URL for aarch64 - URL is arch specific, so drop noarch Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-118=1 Package List: - openSUSE Leap 15.1 (x86_64): live-net-installer-1.0-lp151.8.3.1 References: https://bugzilla.suse.com/1155687

1 0

openSUSE-SU-2020:0115-1: moderate: Security update for libredwg
by opensuse-security＠opensuse.org 28 Jan '20

28 Jan '20

openSUSE Security Update: Security update for libredwg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0115-1 Rating: moderate References: #1160520 #1160522 #1160523 #1160524 #1160525 #1160526 #1160527 Cross-References: CVE-2020-6609 CVE-2020-6610 CVE-2020-6611 CVE-2020-6612 CVE-2020-6613 CVE-2020-6614 CVE-2020-6615 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for libredwg fixes the following issues: libredwg was updated to release 0.10: API breaking changes: * Added a new int *isnewp argument to all dynapi utf8text getters, if the returned string is freshly malloced or not. * removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and UNKNOWN_ENT left, with common_entity_data. * renamed BLOCK_HEADER.preview_data to preview, preview_data_size to preview_size. * renamed SHAPE.shape_no to style_id. * renamed CLASS.wasazombie to is_zombie. Bugfixes: * Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c. * Fixed encoding of added r2000 AUXHEADER address. * Fixed EED encoding from dwgrewrite. * Add several checks against [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522], [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524], [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526], [CVE-2020-6615, boo#1160527] This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-115=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libredwg-devel-0.10-bp151.2.6.1 libredwg-tools-0.10-bp151.2.6.1 libredwg0-0.10-bp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-6609.html https://www.suse.com/security/cve/CVE-2020-6610.html https://www.suse.com/security/cve/CVE-2020-6611.html https://www.suse.com/security/cve/CVE-2020-6612.html https://www.suse.com/security/cve/CVE-2020-6613.html https://www.suse.com/security/cve/CVE-2020-6614.html https://www.suse.com/security/cve/CVE-2020-6615.html https://bugzilla.suse.com/1160520 https://bugzilla.suse.com/1160522 https://bugzilla.suse.com/1160523 https://bugzilla.suse.com/1160524 https://bugzilla.suse.com/1160525 https://bugzilla.suse.com/1160526 https://bugzilla.suse.com/1160527

1 0

openSUSE-SU-2020:0117-1: important: Security update for sarg
by opensuse-security＠opensuse.org 28 Jan '20

28 Jan '20

openSUSE Security Update: Security update for sarg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0117-1 Rating: important References: #1156643 Cross-References: CVE-2019-18932 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sarg fixes the following issues: - CVE-2019-18932: Fixed insecure usage of /tmp/sarg which potentially allowed privilege escalation or denial of service (boo#1156643). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-117=1 Package List: - openSUSE Leap 15.1 (x86_64): sarg-2.3.10-lp151.3.3.1 sarg-debuginfo-2.3.10-lp151.3.3.1 sarg-debugsource-2.3.10-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-18932.html https://bugzilla.suse.com/1156643

1 0

openSUSE-RU-2020:0116-1: moderate: Recommended update for mate-terminal
by maintenance＠opensuse.org 28 Jan '20

28 Jan '20

openSUSE Recommended Update: Recommended update for mate-terminal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0116-1 Rating: moderate References: #1160686 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mate-terminal fixes the following issues: Update to version 1.20.1: * terminal-window: Fix Session dbus daemon saturated (fixes boo#1160686) * Translation updates. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-116=1 Package List: - openSUSE Leap 15.1 (x86_64): mate-terminal-1.20.1-lp151.3.3.1 mate-terminal-debuginfo-1.20.1-lp151.3.3.1 mate-terminal-debugsource-1.20.1-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): mate-terminal-lang-1.20.1-lp151.3.3.1 References: https://bugzilla.suse.com/1160686

1 0

openSUSE-RU-2020:0114-1: moderate: Recommended update for znc
by maintenance＠opensuse.org 28 Jan '20

28 Jan '20

openSUSE Recommended Update: Recommended update for znc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0114-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for znc fixes the following issues: - Update to version 1.7.5. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-114=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-114=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-114=1 Package List: - openSUSE Leap 15.1 (noarch): znc-lang-1.7.5-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): znc-1.7.5-lp151.2.6.1 znc-debuginfo-1.7.5-lp151.2.6.1 znc-debugsource-1.7.5-lp151.2.6.1 znc-devel-1.7.5-lp151.2.6.1 znc-perl-1.7.5-lp151.2.6.1 znc-perl-debuginfo-1.7.5-lp151.2.6.1 znc-python3-1.7.5-lp151.2.6.1 znc-python3-debuginfo-1.7.5-lp151.2.6.1 znc-tcl-1.7.5-lp151.2.6.1 znc-tcl-debuginfo-1.7.5-lp151.2.6.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): znc-1.7.5-bp151.4.6.1 znc-devel-1.7.5-bp151.4.6.1 znc-perl-1.7.5-bp151.4.6.1 znc-python3-1.7.5-bp151.4.6.1 znc-tcl-1.7.5-bp151.4.6.1 - openSUSE Backports SLE-15-SP1 (noarch): znc-lang-1.7.5-bp151.4.6.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): znc-1.7.5-bp150.2.9.1 znc-debuginfo-1.7.5-bp150.2.9.1 znc-debugsource-1.7.5-bp150.2.9.1 znc-devel-1.7.5-bp150.2.9.1 znc-perl-1.7.5-bp150.2.9.1 znc-perl-debuginfo-1.7.5-bp150.2.9.1 znc-python3-1.7.5-bp150.2.9.1 znc-python3-debuginfo-1.7.5-bp150.2.9.1 znc-tcl-1.7.5-bp150.2.9.1 znc-tcl-debuginfo-1.7.5-bp150.2.9.1 - openSUSE Backports SLE-15 (noarch): znc-lang-1.7.5-bp150.2.9.1 References:

1 0

openSUSE-SU-2020:0113-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 28 Jan '20

28 Jan '20

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0113-1 Rating: important References: #1160968 Cross-References: CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2655 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for java-11-openjdk fixes the following issues: Update to version jdk-11.0.6-10 (January 2020 CPU, bsc#1160968) Fixing these security related issues: - CVE-2020-2583: Unlink Set of LinkedHashSets - CVE-2020-2590: Improve Kerberos interop capabilities - CVE-2020-2593: Normalize normalization for all - CVE-2020-2601: Better Ticket Granting Services - CVE-2020-2604: Better serial filter handling - CVE-2020-2655: Better TLS messaging support - CVE-2020-2654: Improve Object Identifier Processing This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-113=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): java-11-openjdk-11.0.6.0-lp151.3.12.1 java-11-openjdk-accessibility-11.0.6.0-lp151.3.12.1 java-11-openjdk-accessibility-debuginfo-11.0.6.0-lp151.3.12.1 java-11-openjdk-debuginfo-11.0.6.0-lp151.3.12.1 java-11-openjdk-debugsource-11.0.6.0-lp151.3.12.1 java-11-openjdk-demo-11.0.6.0-lp151.3.12.1 java-11-openjdk-devel-11.0.6.0-lp151.3.12.1 java-11-openjdk-headless-11.0.6.0-lp151.3.12.1 java-11-openjdk-jmods-11.0.6.0-lp151.3.12.1 java-11-openjdk-src-11.0.6.0-lp151.3.12.1 - openSUSE Leap 15.1 (noarch): java-11-openjdk-javadoc-11.0.6.0-lp151.3.12.1 References: https://www.suse.com/security/cve/CVE-2020-2583.html https://www.suse.com/security/cve/CVE-2020-2590.html https://www.suse.com/security/cve/CVE-2020-2593.html https://www.suse.com/security/cve/CVE-2020-2601.html https://www.suse.com/security/cve/CVE-2020-2604.html https://www.suse.com/security/cve/CVE-2020-2654.html https://www.suse.com/security/cve/CVE-2020-2655.html https://bugzilla.suse.com/1160968

1 0

openSUSE-RU-2020:0111-1: moderate: Recommended update for ceph
by maintenance＠opensuse.org 27 Jan '20

27 Jan '20

openSUSE Recommended Update: Recommended update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0111-1 Rating: moderate References: #1124556 #1131817 #1132337 #1134365 #1137227 #1140504 #1140879 #1141203 #1145571 #1145756 #1148360 #1148498 #1153876 #1154230 #1155045 #1155463 #1155655 #1155950 #1156571 #1157611 #1158923 #1158925 #1158926 #1158927 #1158929 #1158930 #1158931 #1158932 #1158933 #1160920 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 30 recommended fixes can now be installed. Description: This update for ceph fixes the following issues: Ceph was updated to 14.2.5-371-g3551250731: This is the upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/ * health warnings will be issued if daemons have recently crashed (bsc#1158923) * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925) * pool size must be > 1, otherwise HEALTH_WARN (bsc#1158926) * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927) * changes in the telemetry MGR module (bsc#1158929) * new OSD daemon command dump_recovery_reservations (bsc#1158930) * new OSD daemon command dump_scrub_reservations (bsc#1158931) * RGW now supports S3 Object Lock set of APIs (bsc#1158932) * RGW now supports List Objects V2 (bsc#1158933) * mon: keep v1 address type when explicitly (bsc#1140879) * doc: mention --namespace option in rados manpage (bsc#1157611) * mgr/dashboard: Remove env_build from e2e:ci * ceph-volume: check if we run in an selinux environment * qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950) * rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645 * rgw: add S3 object lock feature to support object worm (jsc#SES-582) * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556) * doc: update bluestore cache settings and clarify data fraction (bsc#1131817) * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337) * core: Improve health status for backfill_toofull and recovery_toofull and fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365) * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227) * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504) * rgw: dns name is not case sensitive (bsc#1141203) * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571) * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756) * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360) * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498) * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876) * mgr/balancer: python3 compatibility issue (bsc#1154230) * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045) * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463) * core: Improve health status for backfill_toofull and recovery_toofull and fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655) * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571) * mgr/dashboard: Automatically use correct chromedriver version + Revert "rgw_file: introduce fast S3 Unix stats (immutable)" because it is incompatible with NFS-Ganesha 2.8 * include hotfix from upstream v14.2.6 release (bsc#1160920): * mon/PGMap.h: disable network stats in dump_osd_stats * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-111=1 Package List: - openSUSE Leap 15.1 (noarch): ceph-dashboard-e2e-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-grafana-dashboards-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mgr-dashboard-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mgr-diskprediction-cloud-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mgr-diskprediction-local-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mgr-k8sevents-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mgr-rook-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mgr-ssh-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-prometheus-alerts-14.2.5.380+g1387ceaf78-lp151.2.7.1 - openSUSE Leap 15.1 (x86_64): ceph-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-base-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-base-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-common-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-common-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-debugsource-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-fuse-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-fuse-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mds-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mds-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mgr-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mgr-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mon-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-mon-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-osd-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-osd-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-radosgw-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-radosgw-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-resource-agents-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-test-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-test-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 ceph-test-debugsource-14.2.5.380+g1387ceaf78-lp151.2.7.1 cephfs-shell-14.2.5.380+g1387ceaf78-lp151.2.7.1 libcephfs-devel-14.2.5.380+g1387ceaf78-lp151.2.7.1 libcephfs2-14.2.5.380+g1387ceaf78-lp151.2.7.1 libcephfs2-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 librados-devel-14.2.5.380+g1387ceaf78-lp151.2.7.1 librados-devel-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 librados2-14.2.5.380+g1387ceaf78-lp151.2.7.1 librados2-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 libradospp-devel-14.2.5.380+g1387ceaf78-lp151.2.7.1 libradosstriper-devel-14.2.5.380+g1387ceaf78-lp151.2.7.1 libradosstriper1-14.2.5.380+g1387ceaf78-lp151.2.7.1 libradosstriper1-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 librbd-devel-14.2.5.380+g1387ceaf78-lp151.2.7.1 librbd1-14.2.5.380+g1387ceaf78-lp151.2.7.1 librbd1-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 librgw-devel-14.2.5.380+g1387ceaf78-lp151.2.7.1 librgw2-14.2.5.380+g1387ceaf78-lp151.2.7.1 librgw2-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 python3-ceph-argparse-14.2.5.380+g1387ceaf78-lp151.2.7.1 python3-cephfs-14.2.5.380+g1387ceaf78-lp151.2.7.1 python3-cephfs-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 python3-rados-14.2.5.380+g1387ceaf78-lp151.2.7.1 python3-rados-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 python3-rbd-14.2.5.380+g1387ceaf78-lp151.2.7.1 python3-rbd-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 python3-rgw-14.2.5.380+g1387ceaf78-lp151.2.7.1 python3-rgw-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 rados-objclass-devel-14.2.5.380+g1387ceaf78-lp151.2.7.1 rbd-fuse-14.2.5.380+g1387ceaf78-lp151.2.7.1 rbd-fuse-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 rbd-mirror-14.2.5.380+g1387ceaf78-lp151.2.7.1 rbd-mirror-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 rbd-nbd-14.2.5.380+g1387ceaf78-lp151.2.7.1 rbd-nbd-debuginfo-14.2.5.380+g1387ceaf78-lp151.2.7.1 References: https://bugzilla.suse.com/1124556 https://bugzilla.suse.com/1131817 https://bugzilla.suse.com/1132337 https://bugzilla.suse.com/1134365 https://bugzilla.suse.com/1137227 https://bugzilla.suse.com/1140504 https://bugzilla.suse.com/1140879 https://bugzilla.suse.com/1141203 https://bugzilla.suse.com/1145571 https://bugzilla.suse.com/1145756 https://bugzilla.suse.com/1148360 https://bugzilla.suse.com/1148498 https://bugzilla.suse.com/1153876 https://bugzilla.suse.com/1154230 https://bugzilla.suse.com/1155045 https://bugzilla.suse.com/1155463 https://bugzilla.suse.com/1155655 https://bugzilla.suse.com/1155950 https://bugzilla.suse.com/1156571 https://bugzilla.suse.com/1157611 https://bugzilla.suse.com/1158923 https://bugzilla.suse.com/1158925 https://bugzilla.suse.com/1158926 https://bugzilla.suse.com/1158927 https://bugzilla.suse.com/1158929 https://bugzilla.suse.com/1158930 https://bugzilla.suse.com/1158931 https://bugzilla.suse.com/1158932 https://bugzilla.suse.com/1158933 https://bugzilla.suse.com/1160920

1 0

openSUSE-RU-2020:0112-1: moderate: Recommended update for zabbix
by maintenance＠opensuse.org 27 Jan '20

27 Jan '20

openSUSE Recommended Update: Recommended update for zabbix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0112-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for zabbix fixes the following issues: zabbix was upated to the latest release 3.0.29 Bug Fixes: + ZBX-17101 Fixed url validation before output + ZBX-16750 Fixed broken validation of peer certificate issuer and subject strings in tls connect, fixed logging + ZBX-16178 Fixed distributive can contain untracked backup file include/config.h.in~ Updated to latest release 3.0.28: + ZBX-15915 Fixed linking error if round() is undefined + ZBX-16074 Added file revision number generation for compilation on ms windows + ZBX-11284 Removed sid url argument for form cancel buttons + ZBX-15416 Fixed locale validation in user create and update api methods This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-112=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): zabbix-agent-3.0.29-bp151.4.3.1 zabbix-java-gateway-3.0.29-bp151.4.3.1 zabbix-phpfrontend-3.0.29-bp151.4.3.1 zabbix-proxy-3.0.29-bp151.4.3.1 zabbix-proxy-mysql-3.0.29-bp151.4.3.1 zabbix-proxy-postgresql-3.0.29-bp151.4.3.1 zabbix-proxy-sqlite-3.0.29-bp151.4.3.1 zabbix-server-3.0.29-bp151.4.3.1 zabbix-server-mysql-3.0.29-bp151.4.3.1 zabbix-server-postgresql-3.0.29-bp151.4.3.1 zabbix-server-sqlite-3.0.29-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): zabbix-bash-completion-3.0.29-bp151.4.3.1 References:

1 0

openSUSE-RU-2020:0110-1: moderate: Recommended update for pcsc-tools
by maintenance＠opensuse.org 27 Jan '20

27 Jan '20

openSUSE Recommended Update: Recommended update for pcsc-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0110-1 Rating: moderate References: #1145779 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pcsc-tools fixes the following issues: - added missing dependencies for gscriptor (boo#1145779) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-110=1 Package List: - openSUSE Leap 15.1 (x86_64): pcsc-tools-1.5.4-lp151.2.3.1 pcsc-tools-debuginfo-1.5.4-lp151.2.3.1 pcsc-tools-debugsource-1.5.4-lp151.2.3.1 References: https://bugzilla.suse.com/1145779

1 0

openSUSE-RU-2020:0109-1: moderate: Recommended update for python-Sphinx
by maintenance＠opensuse.org 27 Jan '20

27 Jan '20

openSUSE Recommended Update: Recommended update for python-Sphinx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0109-1 Rating: moderate References: #1157793 #1158158 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-Sphinx fixes the following issues: - Add patch to produce output that solves compatibliy issues with current Qt. (bsc#1157793, bsc#1158158) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-109=1 Package List: - openSUSE Leap 15.1 (noarch): python-Sphinx-doc-html-1.7.6-lp151.2.3.1 python-Sphinx-doc-man-common-1.7.6-lp151.2.3.1 python2-Sphinx-1.7.6-lp151.2.3.1 python2-Sphinx-doc-1.7.6-lp151.2.3.1 python2-Sphinx-doc-man-1.7.6-lp151.2.3.1 python2-Sphinx-latex-1.7.6-lp151.2.3.1 python3-Sphinx-1.7.6-lp151.2.3.1 python3-Sphinx-doc-1.7.6-lp151.2.3.1 python3-Sphinx-doc-man-1.7.6-lp151.2.3.1 python3-Sphinx-latex-1.7.6-lp151.2.3.1 References: https://bugzilla.suse.com/1157793 https://bugzilla.suse.com/1158158

1 0

openSUSE-RU-2020:0108-1: moderate: Recommended update for zstd
by maintenance＠opensuse.org 26 Jan '20

26 Jan '20

openSUSE Recommended Update: Recommended update for zstd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0108-1 Rating: moderate References: #1161432 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for zstd fixes the following issues: Update to version 1.4.4 (boo#1161432): * perf: Improved decompression speed, by > 10% * perf: Better compression speed when re-using a context * perf: Fix compression ratio when compressing large files with small dictionary * perf: zstd reference encoder can generate RLE blocks * perf: minor generic speed optimization * api: new ability to extract sequences from the parser for analysis * api: fixed decoding of magic-less frames * api: fixed ZSTD_initCStream_advanced() performance with fast modes * cli: Named pipes support * cli: short tar's extension support * cli: command --output-dir-flat=DIE , generates target files into requested directory * cli: commands --stream-size=# and --size-hint=# * cli: command --exclude-compressed * cli: faster -t test mode * cli: improved some error messages * cli: fix rare deadlock condition within dictionary builder * misc: Improved documentation : ZSTD_CLEVEL, DYNAMIC_BMI2, ZSTD_CDict, function deprecation, zstd format * misc: fixed educational decoder : accept larger literals section, and removed UNALIGNED() macro Update to version 1.4.3 * bug: Fix Dictionary Compression Ratio Regression (#1709) * bug: Fix Buffer Overflow in v0.3 Decompression (#1722) * build: Add support for IAR C/C++ Compiler for Arm (#1705) * misc: Add NULL pointer check in util.c (#1706) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-108=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libzstd-devel-1.4.4-lp151.3.6.1 libzstd-devel-static-1.4.4-lp151.3.6.1 libzstd1-1.4.4-lp151.3.6.1 libzstd1-debuginfo-1.4.4-lp151.3.6.1 zstd-1.4.4-lp151.3.6.1 zstd-debuginfo-1.4.4-lp151.3.6.1 zstd-debugsource-1.4.4-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): libzstd1-32bit-1.4.4-lp151.3.6.1 libzstd1-32bit-debuginfo-1.4.4-lp151.3.6.1 References: https://bugzilla.suse.com/1161432

1 0

openSUSE-RU-2020:0107-1: moderate: Recommended update for yast2-firstboot
by maintenance＠opensuse.org 26 Jan '20

26 Jan '20

openSUSE Recommended Update: Recommended update for yast2-firstboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0107-1 Rating: moderate References: #1154708 #1156905 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-firstboot fixes the following issues: - Improve the "firstboot_licenses" client to give precedence to the directory argument, allowing to use it multiple times to show different licenses (bsc#1154708). - Add firstboot.rnc to the desktop file (related to bsc#1156905). - Remove the references to the already dropped automatic configuration feature (FATE#314695). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-107=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-firstboot-4.1.9-lp151.2.9.1 References: https://bugzilla.suse.com/1154708 https://bugzilla.suse.com/1156905

1 0

openSUSE-RU-2020:0106-1: moderate: Recommended update for yast2-configuration-management
by maintenance＠opensuse.org 26 Jan '20

26 Jan '20

openSUSE Recommended Update: Recommended update for yast2-configuration-management ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0106-1 Rating: moderate References: #1159434 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-configuration-management fixes the following issues: - Remove the AutoYaST User Interface menu entry for the module because, for the time being, it is not supported (bsc#1159434). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-106=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-configuration-management-4.1.7-lp151.2.3.1 References: https://bugzilla.suse.com/1159434

1 0

openSUSE-SU-2020:0105-1: important: Security update for libvpx
by opensuse-security＠opensuse.org 26 Jan '20

26 Jan '20

openSUSE Security Update: Security update for libvpx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0105-1 Rating: important References: #1160611 #1160612 #1160613 #1160614 #1160615 Cross-References: CVE-2019-2126 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611). - CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612). - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613). - CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614). - CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-105=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libvpx-debugsource-1.6.1-lp151.5.3.1 libvpx-devel-1.6.1-lp151.5.3.1 libvpx4-1.6.1-lp151.5.3.1 libvpx4-debuginfo-1.6.1-lp151.5.3.1 vpx-tools-1.6.1-lp151.5.3.1 vpx-tools-debuginfo-1.6.1-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libvpx4-32bit-1.6.1-lp151.5.3.1 libvpx4-32bit-debuginfo-1.6.1-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-2126.html https://www.suse.com/security/cve/CVE-2019-9232.html https://www.suse.com/security/cve/CVE-2019-9325.html https://www.suse.com/security/cve/CVE-2019-9371.html https://www.suse.com/security/cve/CVE-2019-9433.html https://bugzilla.suse.com/1160611 https://bugzilla.suse.com/1160612 https://bugzilla.suse.com/1160613 https://bugzilla.suse.com/1160614 https://bugzilla.suse.com/1160615

1 0

openSUSE-SU-2020:0103-1: moderate: Security update for arc
by opensuse-security＠opensuse.org 25 Jan '20

25 Jan '20

openSUSE Security Update: Security update for arc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0103-1 Rating: moderate References: #1121032 Cross-References: CVE-2015-9275 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for arc fixes the following issues: - CVE-2015-9275: Fixed a directory traversal vulnerability (boo#1121032). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-103=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-103=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-103=1 Package List: - openSUSE Leap 15.1 (x86_64): arc-5.21q-lp151.3.3.1 arc-debuginfo-5.21q-lp151.3.3.1 arc-debugsource-5.21q-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): arc-5.21q-bp151.4.3.1 arc-debuginfo-5.21q-bp151.4.3.1 arc-debugsource-5.21q-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): arc-5.21q-bp150.2.3.1 arc-debuginfo-5.21q-bp150.2.3.1 arc-debugsource-5.21q-bp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2015-9275.html https://bugzilla.suse.com/1121032

1 0

openSUSE-RU-2020:0101-1: moderate: Recommended update for kscreenlocker
by maintenance＠opensuse.org 25 Jan '20

25 Jan '20

openSUSE Recommended Update: Recommended update for kscreenlocker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0101-1 Rating: moderate References: #1160995 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kscreenlocker fixes the following issues: - Fixed a crash in certain setups (boo#1160995): Update to 5.12.9: * New bugfix release * For more details please see: * https://www.kde.org/announcements/plasma-5.12.9.php Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-101=1 Package List: - openSUSE Leap 15.1 (noarch): kscreenlocker-lang-5.12.9-lp151.2.4.1 - openSUSE Leap 15.1 (x86_64): kscreenlocker-5.12.9-lp151.2.4.1 kscreenlocker-debuginfo-5.12.9-lp151.2.4.1 kscreenlocker-debugsource-5.12.9-lp151.2.4.1 kscreenlocker-devel-5.12.9-lp151.2.4.1 libKScreenLocker5-5.12.9-lp151.2.4.1 libKScreenLocker5-debuginfo-5.12.9-lp151.2.4.1 References: https://bugzilla.suse.com/1160995

1 0

openSUSE-RU-2020:0104-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 25 Jan '20

25 Jan '20

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0104-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: - Update to version 2.5.3: * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-104=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-104=1 Package List: - openSUSE Leap 15.1 (noarch): keepassxc-lang-2.5.3-lp151.2.12.1 - openSUSE Leap 15.1 (x86_64): keepassxc-2.5.3-lp151.2.12.1 keepassxc-debuginfo-2.5.3-lp151.2.12.1 keepassxc-debugsource-2.5.3-lp151.2.12.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): keepassxc-2.5.3-bp151.3.9.1 - openSUSE Backports SLE-15-SP1 (noarch): keepassxc-lang-2.5.3-bp151.3.9.1 References:

1 0