January 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0112-1: moderate: Recommended update for zabbix
by maintenance＠opensuse.org 27 Jan '20

27 Jan '20

openSUSE Recommended Update: Recommended update for zabbix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0112-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for zabbix fixes the following issues: zabbix was upated to the latest release 3.0.29 Bug Fixes: + ZBX-17101 Fixed url validation before output + ZBX-16750 Fixed broken validation of peer certificate issuer and subject strings in tls connect, fixed logging + ZBX-16178 Fixed distributive can contain untracked backup file include/config.h.in~ Updated to latest release 3.0.28: + ZBX-15915 Fixed linking error if round() is undefined + ZBX-16074 Added file revision number generation for compilation on ms windows + ZBX-11284 Removed sid url argument for form cancel buttons + ZBX-15416 Fixed locale validation in user create and update api methods This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-112=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): zabbix-agent-3.0.29-bp151.4.3.1 zabbix-java-gateway-3.0.29-bp151.4.3.1 zabbix-phpfrontend-3.0.29-bp151.4.3.1 zabbix-proxy-3.0.29-bp151.4.3.1 zabbix-proxy-mysql-3.0.29-bp151.4.3.1 zabbix-proxy-postgresql-3.0.29-bp151.4.3.1 zabbix-proxy-sqlite-3.0.29-bp151.4.3.1 zabbix-server-3.0.29-bp151.4.3.1 zabbix-server-mysql-3.0.29-bp151.4.3.1 zabbix-server-postgresql-3.0.29-bp151.4.3.1 zabbix-server-sqlite-3.0.29-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): zabbix-bash-completion-3.0.29-bp151.4.3.1 References:

1 0

openSUSE-RU-2020:0110-1: moderate: Recommended update for pcsc-tools
by maintenance＠opensuse.org 27 Jan '20

27 Jan '20

openSUSE Recommended Update: Recommended update for pcsc-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0110-1 Rating: moderate References: #1145779 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pcsc-tools fixes the following issues: - added missing dependencies for gscriptor (boo#1145779) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-110=1 Package List: - openSUSE Leap 15.1 (x86_64): pcsc-tools-1.5.4-lp151.2.3.1 pcsc-tools-debuginfo-1.5.4-lp151.2.3.1 pcsc-tools-debugsource-1.5.4-lp151.2.3.1 References: https://bugzilla.suse.com/1145779

1 0

openSUSE-RU-2020:0109-1: moderate: Recommended update for python-Sphinx
by maintenance＠opensuse.org 27 Jan '20

27 Jan '20

openSUSE Recommended Update: Recommended update for python-Sphinx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0109-1 Rating: moderate References: #1157793 #1158158 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-Sphinx fixes the following issues: - Add patch to produce output that solves compatibliy issues with current Qt. (bsc#1157793, bsc#1158158) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-109=1 Package List: - openSUSE Leap 15.1 (noarch): python-Sphinx-doc-html-1.7.6-lp151.2.3.1 python-Sphinx-doc-man-common-1.7.6-lp151.2.3.1 python2-Sphinx-1.7.6-lp151.2.3.1 python2-Sphinx-doc-1.7.6-lp151.2.3.1 python2-Sphinx-doc-man-1.7.6-lp151.2.3.1 python2-Sphinx-latex-1.7.6-lp151.2.3.1 python3-Sphinx-1.7.6-lp151.2.3.1 python3-Sphinx-doc-1.7.6-lp151.2.3.1 python3-Sphinx-doc-man-1.7.6-lp151.2.3.1 python3-Sphinx-latex-1.7.6-lp151.2.3.1 References: https://bugzilla.suse.com/1157793 https://bugzilla.suse.com/1158158

1 0

openSUSE-RU-2020:0108-1: moderate: Recommended update for zstd
by maintenance＠opensuse.org 26 Jan '20

26 Jan '20

openSUSE Recommended Update: Recommended update for zstd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0108-1 Rating: moderate References: #1161432 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for zstd fixes the following issues: Update to version 1.4.4 (boo#1161432): * perf: Improved decompression speed, by > 10% * perf: Better compression speed when re-using a context * perf: Fix compression ratio when compressing large files with small dictionary * perf: zstd reference encoder can generate RLE blocks * perf: minor generic speed optimization * api: new ability to extract sequences from the parser for analysis * api: fixed decoding of magic-less frames * api: fixed ZSTD_initCStream_advanced() performance with fast modes * cli: Named pipes support * cli: short tar's extension support * cli: command --output-dir-flat=DIE , generates target files into requested directory * cli: commands --stream-size=# and --size-hint=# * cli: command --exclude-compressed * cli: faster -t test mode * cli: improved some error messages * cli: fix rare deadlock condition within dictionary builder * misc: Improved documentation : ZSTD_CLEVEL, DYNAMIC_BMI2, ZSTD_CDict, function deprecation, zstd format * misc: fixed educational decoder : accept larger literals section, and removed UNALIGNED() macro Update to version 1.4.3 * bug: Fix Dictionary Compression Ratio Regression (#1709) * bug: Fix Buffer Overflow in v0.3 Decompression (#1722) * build: Add support for IAR C/C++ Compiler for Arm (#1705) * misc: Add NULL pointer check in util.c (#1706) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-108=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libzstd-devel-1.4.4-lp151.3.6.1 libzstd-devel-static-1.4.4-lp151.3.6.1 libzstd1-1.4.4-lp151.3.6.1 libzstd1-debuginfo-1.4.4-lp151.3.6.1 zstd-1.4.4-lp151.3.6.1 zstd-debuginfo-1.4.4-lp151.3.6.1 zstd-debugsource-1.4.4-lp151.3.6.1 - openSUSE Leap 15.1 (x86_64): libzstd1-32bit-1.4.4-lp151.3.6.1 libzstd1-32bit-debuginfo-1.4.4-lp151.3.6.1 References: https://bugzilla.suse.com/1161432

1 0

openSUSE-RU-2020:0107-1: moderate: Recommended update for yast2-firstboot
by maintenance＠opensuse.org 26 Jan '20

26 Jan '20

openSUSE Recommended Update: Recommended update for yast2-firstboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0107-1 Rating: moderate References: #1154708 #1156905 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-firstboot fixes the following issues: - Improve the "firstboot_licenses" client to give precedence to the directory argument, allowing to use it multiple times to show different licenses (bsc#1154708). - Add firstboot.rnc to the desktop file (related to bsc#1156905). - Remove the references to the already dropped automatic configuration feature (FATE#314695). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-107=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-firstboot-4.1.9-lp151.2.9.1 References: https://bugzilla.suse.com/1154708 https://bugzilla.suse.com/1156905

1 0

openSUSE-RU-2020:0106-1: moderate: Recommended update for yast2-configuration-management
by maintenance＠opensuse.org 26 Jan '20

26 Jan '20

openSUSE Recommended Update: Recommended update for yast2-configuration-management ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0106-1 Rating: moderate References: #1159434 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-configuration-management fixes the following issues: - Remove the AutoYaST User Interface menu entry for the module because, for the time being, it is not supported (bsc#1159434). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-106=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-configuration-management-4.1.7-lp151.2.3.1 References: https://bugzilla.suse.com/1159434

1 0

openSUSE-SU-2020:0105-1: important: Security update for libvpx
by opensuse-security＠opensuse.org 26 Jan '20

26 Jan '20

openSUSE Security Update: Security update for libvpx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0105-1 Rating: important References: #1160611 #1160612 #1160613 #1160614 #1160615 Cross-References: CVE-2019-2126 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611). - CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612). - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613). - CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614). - CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-105=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libvpx-debugsource-1.6.1-lp151.5.3.1 libvpx-devel-1.6.1-lp151.5.3.1 libvpx4-1.6.1-lp151.5.3.1 libvpx4-debuginfo-1.6.1-lp151.5.3.1 vpx-tools-1.6.1-lp151.5.3.1 vpx-tools-debuginfo-1.6.1-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libvpx4-32bit-1.6.1-lp151.5.3.1 libvpx4-32bit-debuginfo-1.6.1-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-2126.html https://www.suse.com/security/cve/CVE-2019-9232.html https://www.suse.com/security/cve/CVE-2019-9325.html https://www.suse.com/security/cve/CVE-2019-9371.html https://www.suse.com/security/cve/CVE-2019-9433.html https://bugzilla.suse.com/1160611 https://bugzilla.suse.com/1160612 https://bugzilla.suse.com/1160613 https://bugzilla.suse.com/1160614 https://bugzilla.suse.com/1160615

1 0

openSUSE-SU-2020:0103-1: moderate: Security update for arc
by opensuse-security＠opensuse.org 25 Jan '20

25 Jan '20

openSUSE Security Update: Security update for arc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0103-1 Rating: moderate References: #1121032 Cross-References: CVE-2015-9275 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for arc fixes the following issues: - CVE-2015-9275: Fixed a directory traversal vulnerability (boo#1121032). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-103=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-103=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-103=1 Package List: - openSUSE Leap 15.1 (x86_64): arc-5.21q-lp151.3.3.1 arc-debuginfo-5.21q-lp151.3.3.1 arc-debugsource-5.21q-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): arc-5.21q-bp151.4.3.1 arc-debuginfo-5.21q-bp151.4.3.1 arc-debugsource-5.21q-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): arc-5.21q-bp150.2.3.1 arc-debuginfo-5.21q-bp150.2.3.1 arc-debugsource-5.21q-bp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2015-9275.html https://bugzilla.suse.com/1121032

1 0

openSUSE-RU-2020:0101-1: moderate: Recommended update for kscreenlocker
by maintenance＠opensuse.org 25 Jan '20

25 Jan '20

openSUSE Recommended Update: Recommended update for kscreenlocker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0101-1 Rating: moderate References: #1160995 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kscreenlocker fixes the following issues: - Fixed a crash in certain setups (boo#1160995): Update to 5.12.9: * New bugfix release * For more details please see: * https://www.kde.org/announcements/plasma-5.12.9.php Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-101=1 Package List: - openSUSE Leap 15.1 (noarch): kscreenlocker-lang-5.12.9-lp151.2.4.1 - openSUSE Leap 15.1 (x86_64): kscreenlocker-5.12.9-lp151.2.4.1 kscreenlocker-debuginfo-5.12.9-lp151.2.4.1 kscreenlocker-debugsource-5.12.9-lp151.2.4.1 kscreenlocker-devel-5.12.9-lp151.2.4.1 libKScreenLocker5-5.12.9-lp151.2.4.1 libKScreenLocker5-debuginfo-5.12.9-lp151.2.4.1 References: https://bugzilla.suse.com/1160995

1 0

openSUSE-RU-2020:0104-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 25 Jan '20

25 Jan '20

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0104-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: - Update to version 2.5.3: * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-104=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-104=1 Package List: - openSUSE Leap 15.1 (noarch): keepassxc-lang-2.5.3-lp151.2.12.1 - openSUSE Leap 15.1 (x86_64): keepassxc-2.5.3-lp151.2.12.1 keepassxc-debuginfo-2.5.3-lp151.2.12.1 keepassxc-debugsource-2.5.3-lp151.2.12.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): keepassxc-2.5.3-bp151.3.9.1 - openSUSE Backports SLE-15-SP1 (noarch): keepassxc-lang-2.5.3-bp151.3.9.1 References:

1 0