January 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0092-1: moderate: Recommended update for zabbix
by maintenance＠opensuse.org 22 Jan '20

22 Jan '20

openSUSE Recommended Update: Recommended update for zabbix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0092-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for zabbix fixes the following issues: zabbix was upated to the latest release 3.0.29 Bug Fixes: + ZBX-17101 Fixed url validation before output + ZBX-16750 Fixed broken validation of peer certificate issuer and subject strings in tls connect, fixed logging + ZBX-16178 Fixed distributive can contain untracked backup file include/config.h.in~ Updated to latest release 3.0.28: + ZBX-15915 Fixed linking error if round() is undefined + ZBX-16074 Added file revision number generation for compilation on ms windows + ZBX-11284 Removed sid url argument for form cancel buttons + ZBX-15416 Fixed locale validation in user create and update api methods Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-92=1 Package List: - openSUSE Leap 15.1 (x86_64): zabbix-agent-3.0.29-lp151.2.3.1 zabbix-agent-debuginfo-3.0.29-lp151.2.3.1 zabbix-debuginfo-3.0.29-lp151.2.3.1 zabbix-debugsource-3.0.29-lp151.2.3.1 zabbix-java-gateway-3.0.29-lp151.2.3.1 zabbix-phpfrontend-3.0.29-lp151.2.3.1 zabbix-proxy-3.0.29-lp151.2.3.1 zabbix-proxy-mysql-3.0.29-lp151.2.3.1 zabbix-proxy-mysql-debuginfo-3.0.29-lp151.2.3.1 zabbix-proxy-postgresql-3.0.29-lp151.2.3.1 zabbix-proxy-postgresql-debuginfo-3.0.29-lp151.2.3.1 zabbix-proxy-sqlite-3.0.29-lp151.2.3.1 zabbix-proxy-sqlite-debuginfo-3.0.29-lp151.2.3.1 zabbix-server-3.0.29-lp151.2.3.1 zabbix-server-debuginfo-3.0.29-lp151.2.3.1 zabbix-server-mysql-3.0.29-lp151.2.3.1 zabbix-server-mysql-debuginfo-3.0.29-lp151.2.3.1 zabbix-server-postgresql-3.0.29-lp151.2.3.1 zabbix-server-postgresql-debuginfo-3.0.29-lp151.2.3.1 zabbix-server-sqlite-3.0.29-lp151.2.3.1 zabbix-server-sqlite-debuginfo-3.0.29-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): zabbix-bash-completion-3.0.29-lp151.2.3.1 References:

1 0

openSUSE-RU-2020:0090-1: moderate: Recommended update for sdcc
by maintenance＠opensuse.org 22 Jan '20

22 Jan '20

openSUSE Recommended Update: Recommended update for sdcc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0090-1 Rating: moderate References: #1109976 #1112433 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sdcc fixes the following issues: - Instead of including prebuilt MCS51_named.pdf build it during package build. Besides avoiding the ImageMagick problem with interpreting PS this also avoids rasterising the image. - Delete PowerPC embedspu script from sdbinutils which conflicts with binutils, fixes boo#1112433 - Add pre-converted MCS51_named.pdf to sources, to avoid the lossy SVG -> EPS (rasterized) -> PDF conversion of the distributed SVG. [boo#1109976] This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2020-90=1 Package List: - openSUSE Backports SLE-15 (x86_64): sdcc-3.6.0-bp150.3.6.37 sdcc-libc-sources-3.6.0-bp150.3.6.37 - openSUSE Backports SLE-15 (noarch): sdcc-doc-3.6.0-bp150.3.6.37 References: https://bugzilla.suse.com/1109976 https://bugzilla.suse.com/1112433

1 0

openSUSE-RU-2020:0091-1: moderate: Recommended update for nextcloud-client
by maintenance＠opensuse.org 22 Jan '20

22 Jan '20

openSUSE Recommended Update: Recommended update for nextcloud-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0091-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for nextcloud-client fixes the following issues: - Update to version 2.5.3: * See https://github.com/nextcloud/desktop/compare/v2.5.1...v2.5.3 This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-91=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): libnextcloudsync-devel-2.5.3-bp151.3.3.5 libnextcloudsync0-2.5.3-bp151.3.3.5 nextcloud-client-2.5.3-bp151.3.3.5 nextcloud-client-dolphin-2.5.3-bp151.3.3.5 - openSUSE Backports SLE-15-SP1 (noarch): caja-extension-nextcloud-2.5.3-bp151.3.3.5 nautilus-extension-nextcloud-2.5.3-bp151.3.3.5 nemo-extension-nextcloud-2.5.3-bp151.3.3.5 nextcloud-client-doc-2.5.3-bp151.3.3.5 nextcloud-client-lang-2.5.3-bp151.3.3.5 References:

1 0

openSUSE-SU-2020:0089-1: moderate: Security update for fontforge
by opensuse-security＠opensuse.org 21 Jan '20

21 Jan '20

openSUSE Security Update: Security update for fontforge ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0089-1 Rating: moderate References: #1160220 #1160236 Cross-References: CVE-2020-5395 CVE-2020-5496 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for fontforge fixes the following issues: - CVE-2020-5395: Fixed a use-after-free in SFD_GetFontMetaData() (bsc#1160220). - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines() (bsc#1160236). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-89=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): fontforge-20170731-lp151.4.3.1 fontforge-debuginfo-20170731-lp151.4.3.1 fontforge-debugsource-20170731-lp151.4.3.1 fontforge-devel-20170731-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): fontforge-doc-20170731-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2020-5395.html https://www.suse.com/security/cve/CVE-2020-5496.html https://bugzilla.suse.com/1160220 https://bugzilla.suse.com/1160236

1 0

openSUSE-RU-2020:0088-1: moderate: Recommended update for python-jsonpatch
by maintenance＠opensuse.org 21 Jan '20

21 Jan '20

openSUSE Recommended Update: Recommended update for python-jsonpatch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0088-1 Rating: moderate References: #1160978 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-jsonpatch fixes the following issues: - Drop jsondiff binary to avoid conflict with python-jsondiff package. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-88=1 Package List: - openSUSE Leap 15.1 (noarch): python2-jsonpatch-1.23-lp151.2.3.1 python3-jsonpatch-1.23-lp151.2.3.1 References: https://bugzilla.suse.com/1160978

1 0

openSUSE-SU-2020:0086-1: important: Security update for python3
by opensuse-security＠opensuse.org 21 Jan '20

21 Jan '20

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0086-1 Rating: important References: #1027282 #1029377 #1029902 #1040164 #1042670 #1070853 #1079761 #1081750 #1083507 #1086001 #1088004 #1088009 #1088573 #1094814 #1107030 #1109663 #1109847 #1120644 #1122191 #1129346 #1130840 #1133452 #1137942 #1138459 #1141853 #1149121 #1149792 #1149955 #1151490 #1153238 #1159035 #1159622 #637176 #658604 #673071 #709442 #743787 #747125 #751718 #754447 #754677 #787526 #809831 #831629 #834601 #871152 #885662 #885882 #917607 #942751 #951166 #983582 #984751 #985177 #985348 #989523 Cross-References: CVE-2011-3389 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2013-1752 CVE-2013-4238 CVE-2014-2667 CVE-2014-4650 CVE-2016-0772 CVE-2016-1000110 CVE-2016-5636 CVE-2016-5699 CVE-2017-18207 CVE-2018-1000802 CVE-2018-1060 CVE-2018-1061 CVE-2018-14647 CVE-2018-20406 CVE-2018-20852 CVE-2019-10160 CVE-2019-15903 CVE-2019-16056 CVE-2019-16935 CVE-2019-5010 CVE-2019-9636 CVE-2019-9947 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves 26 vulnerabilities and has 30 fixes is now available. Description: This update for python3 to version 3.6.10 fixes the following issues: - CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507). - CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955). - CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-86=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython3_6m1_0-3.6.10-lp151.6.7.1 libpython3_6m1_0-debuginfo-3.6.10-lp151.6.7.1 python3-3.6.10-lp151.6.7.1 python3-base-3.6.10-lp151.6.7.1 python3-base-debuginfo-3.6.10-lp151.6.7.1 python3-base-debugsource-3.6.10-lp151.6.7.1 python3-curses-3.6.10-lp151.6.7.1 python3-curses-debuginfo-3.6.10-lp151.6.7.1 python3-dbm-3.6.10-lp151.6.7.1 python3-dbm-debuginfo-3.6.10-lp151.6.7.1 python3-debuginfo-3.6.10-lp151.6.7.1 python3-debugsource-3.6.10-lp151.6.7.1 python3-devel-3.6.10-lp151.6.7.1 python3-devel-debuginfo-3.6.10-lp151.6.7.1 python3-idle-3.6.10-lp151.6.7.1 python3-testsuite-3.6.10-lp151.6.7.1 python3-testsuite-debuginfo-3.6.10-lp151.6.7.1 python3-tk-3.6.10-lp151.6.7.1 python3-tk-debuginfo-3.6.10-lp151.6.7.1 python3-tools-3.6.10-lp151.6.7.1 - openSUSE Leap 15.1 (x86_64): libpython3_6m1_0-32bit-3.6.10-lp151.6.7.1 libpython3_6m1_0-32bit-debuginfo-3.6.10-lp151.6.7.1 python3-32bit-3.6.10-lp151.6.7.1 python3-32bit-debuginfo-3.6.10-lp151.6.7.1 python3-base-32bit-3.6.10-lp151.6.7.1 python3-base-32bit-debuginfo-3.6.10-lp151.6.7.1 References: https://www.suse.com/security/cve/CVE-2011-3389.html https://www.suse.com/security/cve/CVE-2011-4944.html https://www.suse.com/security/cve/CVE-2012-0845.html https://www.suse.com/security/cve/CVE-2012-1150.html https://www.suse.com/security/cve/CVE-2013-1752.html https://www.suse.com/security/cve/CVE-2013-4238.html https://www.suse.com/security/cve/CVE-2014-2667.html https://www.suse.com/security/cve/CVE-2014-4650.html https://www.suse.com/security/cve/CVE-2016-0772.html https://www.suse.com/security/cve/CVE-2016-1000110.html https://www.suse.com/security/cve/CVE-2016-5636.html https://www.suse.com/security/cve/CVE-2016-5699.html https://www.suse.com/security/cve/CVE-2017-18207.html https://www.suse.com/security/cve/CVE-2018-1000802.html https://www.suse.com/security/cve/CVE-2018-1060.html https://www.suse.com/security/cve/CVE-2018-1061.html https://www.suse.com/security/cve/CVE-2018-14647.html https://www.suse.com/security/cve/CVE-2018-20406.html https://www.suse.com/security/cve/CVE-2018-20852.html https://www.suse.com/security/cve/CVE-2019-10160.html https://www.suse.com/security/cve/CVE-2019-15903.html https://www.suse.com/security/cve/CVE-2019-16056.html https://www.suse.com/security/cve/CVE-2019-16935.html https://www.suse.com/security/cve/CVE-2019-5010.html https://www.suse.com/security/cve/CVE-2019-9636.html https://www.suse.com/security/cve/CVE-2019-9947.html https://bugzilla.suse.com/1027282 https://bugzilla.suse.com/1029377 https://bugzilla.suse.com/1029902 https://bugzilla.suse.com/1040164 https://bugzilla.suse.com/1042670 https://bugzilla.suse.com/1070853 https://bugzilla.suse.com/1079761 https://bugzilla.suse.com/1081750 https://bugzilla.suse.com/1083507 https://bugzilla.suse.com/1086001 https://bugzilla.suse.com/1088004 https://bugzilla.suse.com/1088009 https://bugzilla.suse.com/1088573 https://bugzilla.suse.com/1094814 https://bugzilla.suse.com/1107030 https://bugzilla.suse.com/1109663 https://bugzilla.suse.com/1109847 https://bugzilla.suse.com/1120644 https://bugzilla.suse.com/1122191 https://bugzilla.suse.com/1129346 https://bugzilla.suse.com/1130840 https://bugzilla.suse.com/1133452 https://bugzilla.suse.com/1137942 https://bugzilla.suse.com/1138459 https://bugzilla.suse.com/1141853 https://bugzilla.suse.com/1149121 https://bugzilla.suse.com/1149792 https://bugzilla.suse.com/1149955 https://bugzilla.suse.com/1151490 https://bugzilla.suse.com/1153238 https://bugzilla.suse.com/1159035 https://bugzilla.suse.com/1159622 https://bugzilla.suse.com/637176 https://bugzilla.suse.com/658604 https://bugzilla.suse.com/673071 https://bugzilla.suse.com/709442 https://bugzilla.suse.com/743787 https://bugzilla.suse.com/747125 https://bugzilla.suse.com/751718 https://bugzilla.suse.com/754447 https://bugzilla.suse.com/754677 https://bugzilla.suse.com/787526 https://bugzilla.suse.com/809831 https://bugzilla.suse.com/831629 https://bugzilla.suse.com/834601 https://bugzilla.suse.com/871152 https://bugzilla.suse.com/885662 https://bugzilla.suse.com/885882 https://bugzilla.suse.com/917607 https://bugzilla.suse.com/942751 https://bugzilla.suse.com/951166 https://bugzilla.suse.com/983582 https://bugzilla.suse.com/984751 https://bugzilla.suse.com/985177 https://bugzilla.suse.com/985348 https://bugzilla.suse.com/989523

1 0

openSUSE-SU-2020:0087-1: important: Security update for tigervnc
by opensuse-security＠opensuse.org 21 Jan '20

21 Jan '20

openSUSE Security Update: Security update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0087-1 Rating: important References: #1159856 #1159858 #1159860 #1160250 #1160251 Cross-References: CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for tigervnc fixes the following issues: - CVE-2019-15691: Fixed a use-after-return due to incorrect usage of stack memory in ZRLEDecoder (bsc#1159856). - CVE-2019-15692: Fixed a heap-based buffer overflow in CopyRectDecode (bsc#1160250). - CVE-2019-15693: Fixed a heap-based buffer overflow in TightDecoder::FilterGradient (bsc#1159858). - CVE-2019-15694: Fixed a heap-based buffer overflow, caused by improper error handling in processing MemOutStream (bsc#1160251). - CVE-2019-15695: Fixed a stack-based buffer overflow, which could be triggered from CMsgReader::readSetCursor (bsc#1159860). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-87=1 Package List: - openSUSE Leap 15.1 (noarch): tigervnc-x11vnc-1.9.0-lp151.4.3.1 xorg-x11-Xvnc-java-1.9.0-lp151.4.3.1 xorg-x11-Xvnc-novnc-1.9.0-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libXvnc-devel-1.9.0-lp151.4.3.1 libXvnc1-1.9.0-lp151.4.3.1 libXvnc1-debuginfo-1.9.0-lp151.4.3.1 tigervnc-1.9.0-lp151.4.3.1 tigervnc-debuginfo-1.9.0-lp151.4.3.1 tigervnc-debugsource-1.9.0-lp151.4.3.1 xorg-x11-Xvnc-1.9.0-lp151.4.3.1 xorg-x11-Xvnc-debuginfo-1.9.0-lp151.4.3.1 xorg-x11-Xvnc-module-1.9.0-lp151.4.3.1 xorg-x11-Xvnc-module-debuginfo-1.9.0-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-15691.html https://www.suse.com/security/cve/CVE-2019-15692.html https://www.suse.com/security/cve/CVE-2019-15693.html https://www.suse.com/security/cve/CVE-2019-15694.html https://www.suse.com/security/cve/CVE-2019-15695.html https://bugzilla.suse.com/1159856 https://bugzilla.suse.com/1159858 https://bugzilla.suse.com/1159860 https://bugzilla.suse.com/1160250 https://bugzilla.suse.com/1160251

1 0

openSUSE-SU-2020:0085-1: important: Security update for slurm
by opensuse-security＠opensuse.org 21 Jan '20

21 Jan '20

openSUSE Security Update: Security update for slurm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0085-1 Rating: important References: #1140709 #1153095 #1153259 #1155784 #1158696 #1159692 Cross-References: CVE-2019-12838 CVE-2019-19727 CVE-2019-19728 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update for slurm to version 18.08.9 fixes the following issues: Security issues fixed: - CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects (bsc#1159692). - CVE-2019-12838: Fixed SchedMD Slurm SQL Injection issue (bnc#1140709). - CVE-2019-19727: Fixed permissions of slurmdbd.conf (bsc#1155784). Bug fixes: - Fix ownership of /var/spool/slurm on new installations and upgrade (bsc#1158696). - Fix %posttrans macro _res_update to cope with added newline (bsc#1153259). - Move srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work. 'slurm-node' is a requirement when 'slurm' is installed (bsc#1153095). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-85=1 Package List: - openSUSE Leap 15.1 (x86_64): libpmi0-18.08.9-lp151.2.6.1 libpmi0-debuginfo-18.08.9-lp151.2.6.1 libslurm33-18.08.9-lp151.2.6.1 libslurm33-debuginfo-18.08.9-lp151.2.6.1 perl-slurm-18.08.9-lp151.2.6.1 perl-slurm-debuginfo-18.08.9-lp151.2.6.1 slurm-18.08.9-lp151.2.6.1 slurm-auth-none-18.08.9-lp151.2.6.1 slurm-auth-none-debuginfo-18.08.9-lp151.2.6.1 slurm-config-18.08.9-lp151.2.6.1 slurm-config-man-18.08.9-lp151.2.6.1 slurm-cray-18.08.9-lp151.2.6.1 slurm-cray-debuginfo-18.08.9-lp151.2.6.1 slurm-debuginfo-18.08.9-lp151.2.6.1 slurm-debugsource-18.08.9-lp151.2.6.1 slurm-devel-18.08.9-lp151.2.6.1 slurm-doc-18.08.9-lp151.2.6.1 slurm-hdf5-18.08.9-lp151.2.6.1 slurm-hdf5-debuginfo-18.08.9-lp151.2.6.1 slurm-lua-18.08.9-lp151.2.6.1 slurm-lua-debuginfo-18.08.9-lp151.2.6.1 slurm-munge-18.08.9-lp151.2.6.1 slurm-munge-debuginfo-18.08.9-lp151.2.6.1 slurm-node-18.08.9-lp151.2.6.1 slurm-node-debuginfo-18.08.9-lp151.2.6.1 slurm-openlava-18.08.9-lp151.2.6.1 slurm-pam_slurm-18.08.9-lp151.2.6.1 slurm-pam_slurm-debuginfo-18.08.9-lp151.2.6.1 slurm-plugins-18.08.9-lp151.2.6.1 slurm-plugins-debuginfo-18.08.9-lp151.2.6.1 slurm-seff-18.08.9-lp151.2.6.1 slurm-sjstat-18.08.9-lp151.2.6.1 slurm-slurmdbd-18.08.9-lp151.2.6.1 slurm-slurmdbd-debuginfo-18.08.9-lp151.2.6.1 slurm-sql-18.08.9-lp151.2.6.1 slurm-sql-debuginfo-18.08.9-lp151.2.6.1 slurm-sview-18.08.9-lp151.2.6.1 slurm-sview-debuginfo-18.08.9-lp151.2.6.1 slurm-torque-18.08.9-lp151.2.6.1 slurm-torque-debuginfo-18.08.9-lp151.2.6.1 slurm-webdoc-18.08.9-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-12838.html https://www.suse.com/security/cve/CVE-2019-19727.html https://www.suse.com/security/cve/CVE-2019-19728.html https://bugzilla.suse.com/1140709 https://bugzilla.suse.com/1153095 https://bugzilla.suse.com/1153259 https://bugzilla.suse.com/1155784 https://bugzilla.suse.com/1158696 https://bugzilla.suse.com/1159692

1 0

openSUSE-SU-2020:0084-1: moderate: Security update for Mesa
by opensuse-security＠opensuse.org 21 Jan '20

21 Jan '20

openSUSE Security Update: Security update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0084-1 Rating: moderate References: #1156015 Cross-References: CVE-2019-5068 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-84=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): Mesa-18.3.2-lp151.23.9.1 Mesa-KHR-devel-18.3.2-lp151.23.9.1 Mesa-debugsource-18.3.2-lp151.23.9.1 Mesa-devel-18.3.2-lp151.23.9.1 Mesa-dri-18.3.2-lp151.23.9.1 Mesa-dri-debuginfo-18.3.2-lp151.23.9.1 Mesa-dri-devel-18.3.2-lp151.23.9.1 Mesa-dri-nouveau-18.3.2-lp151.23.9.1 Mesa-dri-nouveau-debuginfo-18.3.2-lp151.23.9.1 Mesa-drivers-debugsource-18.3.2-lp151.23.9.1 Mesa-gallium-18.3.2-lp151.23.9.1 Mesa-gallium-debuginfo-18.3.2-lp151.23.9.1 Mesa-libEGL-devel-18.3.2-lp151.23.9.1 Mesa-libEGL1-18.3.2-lp151.23.9.1 Mesa-libEGL1-debuginfo-18.3.2-lp151.23.9.1 Mesa-libGL-devel-18.3.2-lp151.23.9.1 Mesa-libGL1-18.3.2-lp151.23.9.1 Mesa-libGL1-debuginfo-18.3.2-lp151.23.9.1 Mesa-libGLESv1_CM-devel-18.3.2-lp151.23.9.1 Mesa-libGLESv1_CM1-18.3.2-lp151.23.9.1 Mesa-libGLESv2-2-18.3.2-lp151.23.9.1 Mesa-libGLESv2-devel-18.3.2-lp151.23.9.1 Mesa-libGLESv3-devel-18.3.2-lp151.23.9.1 Mesa-libOpenCL-18.3.2-lp151.23.9.1 Mesa-libOpenCL-debuginfo-18.3.2-lp151.23.9.1 Mesa-libVulkan-devel-18.3.2-lp151.23.9.1 Mesa-libd3d-18.3.2-lp151.23.9.1 Mesa-libd3d-debuginfo-18.3.2-lp151.23.9.1 Mesa-libd3d-devel-18.3.2-lp151.23.9.1 Mesa-libglapi-devel-18.3.2-lp151.23.9.1 Mesa-libglapi0-18.3.2-lp151.23.9.1 Mesa-libglapi0-debuginfo-18.3.2-lp151.23.9.1 Mesa-libva-18.3.2-lp151.23.9.1 Mesa-libva-debuginfo-18.3.2-lp151.23.9.1 libOSMesa-devel-18.3.2-lp151.23.9.1 libOSMesa8-18.3.2-lp151.23.9.1 libOSMesa8-debuginfo-18.3.2-lp151.23.9.1 libXvMC_nouveau-18.3.2-lp151.23.9.1 libXvMC_nouveau-debuginfo-18.3.2-lp151.23.9.1 libXvMC_r600-18.3.2-lp151.23.9.1 libXvMC_r600-debuginfo-18.3.2-lp151.23.9.1 libgbm-devel-18.3.2-lp151.23.9.1 libgbm1-18.3.2-lp151.23.9.1 libgbm1-debuginfo-18.3.2-lp151.23.9.1 libvdpau_nouveau-18.3.2-lp151.23.9.1 libvdpau_nouveau-debuginfo-18.3.2-lp151.23.9.1 libvdpau_r300-18.3.2-lp151.23.9.1 libvdpau_r300-debuginfo-18.3.2-lp151.23.9.1 libvdpau_r600-18.3.2-lp151.23.9.1 libvdpau_r600-debuginfo-18.3.2-lp151.23.9.1 libvdpau_radeonsi-18.3.2-lp151.23.9.1 libvdpau_radeonsi-debuginfo-18.3.2-lp151.23.9.1 libvulkan_intel-18.3.2-lp151.23.9.1 libvulkan_intel-debuginfo-18.3.2-lp151.23.9.1 libvulkan_radeon-18.3.2-lp151.23.9.1 libvulkan_radeon-debuginfo-18.3.2-lp151.23.9.1 libxatracker-devel-1.0.0-lp151.23.9.1 libxatracker2-1.0.0-lp151.23.9.1 libxatracker2-debuginfo-1.0.0-lp151.23.9.1 - openSUSE Leap 15.1 (x86_64): Mesa-32bit-18.3.2-lp151.23.9.1 Mesa-dri-32bit-18.3.2-lp151.23.9.1 Mesa-dri-32bit-debuginfo-18.3.2-lp151.23.9.1 Mesa-dri-nouveau-32bit-18.3.2-lp151.23.9.1 Mesa-dri-nouveau-32bit-debuginfo-18.3.2-lp151.23.9.1 Mesa-gallium-32bit-18.3.2-lp151.23.9.1 Mesa-gallium-32bit-debuginfo-18.3.2-lp151.23.9.1 Mesa-libEGL1-32bit-18.3.2-lp151.23.9.1 Mesa-libEGL1-32bit-debuginfo-18.3.2-lp151.23.9.1 Mesa-libGL1-32bit-18.3.2-lp151.23.9.1 Mesa-libGL1-32bit-debuginfo-18.3.2-lp151.23.9.1 Mesa-libd3d-32bit-18.3.2-lp151.23.9.1 Mesa-libd3d-32bit-debuginfo-18.3.2-lp151.23.9.1 Mesa-libd3d-devel-32bit-18.3.2-lp151.23.9.1 Mesa-libglapi-devel-32bit-18.3.2-lp151.23.9.1 Mesa-libglapi0-32bit-18.3.2-lp151.23.9.1 Mesa-libglapi0-32bit-debuginfo-18.3.2-lp151.23.9.1 libOSMesa-devel-32bit-18.3.2-lp151.23.9.1 libOSMesa8-32bit-18.3.2-lp151.23.9.1 libOSMesa8-32bit-debuginfo-18.3.2-lp151.23.9.1 libXvMC_nouveau-32bit-18.3.2-lp151.23.9.1 libXvMC_nouveau-32bit-debuginfo-18.3.2-lp151.23.9.1 libXvMC_r600-32bit-18.3.2-lp151.23.9.1 libXvMC_r600-32bit-debuginfo-18.3.2-lp151.23.9.1 libgbm-devel-32bit-18.3.2-lp151.23.9.1 libgbm1-32bit-18.3.2-lp151.23.9.1 libgbm1-32bit-debuginfo-18.3.2-lp151.23.9.1 libvdpau_nouveau-32bit-18.3.2-lp151.23.9.1 libvdpau_nouveau-32bit-debuginfo-18.3.2-lp151.23.9.1 libvdpau_r300-32bit-18.3.2-lp151.23.9.1 libvdpau_r300-32bit-debuginfo-18.3.2-lp151.23.9.1 libvdpau_r600-32bit-18.3.2-lp151.23.9.1 libvdpau_r600-32bit-debuginfo-18.3.2-lp151.23.9.1 libvdpau_radeonsi-32bit-18.3.2-lp151.23.9.1 libvdpau_radeonsi-32bit-debuginfo-18.3.2-lp151.23.9.1 libvulkan_intel-32bit-18.3.2-lp151.23.9.1 libvulkan_intel-32bit-debuginfo-18.3.2-lp151.23.9.1 libvulkan_radeon-32bit-18.3.2-lp151.23.9.1 libvulkan_radeon-32bit-debuginfo-18.3.2-lp151.23.9.1 References: https://www.suse.com/security/cve/CVE-2019-5068.html https://bugzilla.suse.com/1156015

1 0

openSUSE-RU-2020:0082-1: moderate: Recommended update for hawk2
by maintenance＠opensuse.org 20 Jan '20

20 Jan '20

openSUSE Recommended Update: Recommended update for hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0082-1 Rating: moderate References: #1158681 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hawk2 fixes the following issues: - Fix the 'acl_version' method when parsing the cib.xml avoid hanging of HAWK2 (bsc#1158681) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-82=1 Package List: - openSUSE Leap 15.1 (x86_64): hawk2-2.1.0+git.1526638315.05cdaf9d-lp151.2.6.1 hawk2-debuginfo-2.1.0+git.1526638315.05cdaf9d-lp151.2.6.1 hawk2-debugsource-2.1.0+git.1526638315.05cdaf9d-lp151.2.6.1 References: https://bugzilla.suse.com/1158681

1 0