October 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1618-1: moderate: Recommended update for aspell-dictionaries
by maintenance＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Recommended Update: Recommended update for aspell-dictionaries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1618-1 Rating: moderate References: #1076219 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aspell-dictionaries fixes the following issues: aspell-dictionaries was updated rto: - de -> 20161207-7-0 - pt_BR -> 20131030-12-0 - da 1.6.36 - pt_PT 20190329 This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1618=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): aspell-af-0.50.0-bp152.4.3.1 aspell-agal-0.50.0-bp152.4.3.1 aspell-am-0.03.1-bp152.4.3.1 aspell-ar-1.2.0-bp152.4.3.1 aspell-ast-0.01-bp152.4.3.1 aspell-az-0.02-bp152.4.3.1 aspell-be-0.01-bp152.4.3.1 aspell-bg-4.1-bp152.4.3.1 aspell-bn-0.01.1-bp152.4.3.1 aspell-br-0.50.2-bp152.4.3.1 aspell-ca-0.60.1.20090722-bp152.4.3.1 aspell-cs-0.60.0.20040614-bp152.4.3.1 aspell-csb-0.02.0-bp152.4.3.1 aspell-cy-0.50.3-bp152.4.3.1 aspell-da-1.6.20-bp152.4.3.1 aspell-de-20161207.7.0-bp152.4.3.1 aspell-el-0.50.3+0.08-bp152.4.3.1 aspell-eo-2.1.20000225-bp152.4.3.1 aspell-es-1.11.2-bp152.4.3.1 aspell-et-0.1.21-bp152.4.3.1 aspell-fa-0.11.0-bp152.4.3.1 aspell-fi-0.7-bp152.4.3.1 aspell-fo-0.2.16-bp152.4.3.1 aspell-fr-0.50.3-bp152.4.3.1 aspell-fy-0.12-bp152.4.3.1 aspell-ga-4.5.0-bp152.4.3.1 aspell-gd-0.7.1.1.1-bp152.4.3.1 aspell-gl-0.50a-bp152.4.3.1 aspell-grc-0.02.0-bp152.4.3.1 aspell-gu-0.03-bp152.4.3.1 aspell-gv-0.50-bp152.4.3.1 aspell-he-1.0.0-bp152.4.3.1 aspell-hi-0.02-bp152.4.3.1 aspell-hil-0.11-bp152.4.3.1 aspell-hr-0.51.0-bp152.4.3.1 aspell-hsb-0.02.0-bp152.4.3.1 aspell-hu-0.99.4.2-bp152.4.3.1 aspell-hus-0.03.1-bp152.4.3.1 aspell-hy-0.10.0-bp152.4.3.1 aspell-ia-0.50-bp152.4.3.1 aspell-id-1.2-bp152.4.3.1 aspell-is-0.51.10-bp152.4.3.1 aspell-it-2.2_20050523-bp152.4.3.1 aspell-kn-0.01.1-bp152.4.3.1 aspell-ku-0.20.1-bp152.4.3.1 aspell-ky-0.01.0-bp152.4.3.1 aspell-la-20020503-bp152.4.3.1 aspell-lt-1.2.1-bp152.4.3.1 aspell-lv-1.2.1-bp152.4.3.1 aspell-mg-20040807-bp152.4.3.1 aspell-mi-0.50-bp152.4.3.1 aspell-mk-0.50-bp152.4.3.1 aspell-ml-0.03-bp152.4.3.1 aspell-mn-0.06.2-bp152.4.3.1 aspell-mr-0.10-bp152.4.3.1 aspell-ms-0.50-bp152.4.3.1 aspell-mt-0.50-bp152.4.3.1 aspell-nb-0.50.10-bp152.4.3.1 aspell-nds-0.01-bp152.4.3.1 aspell-nl-1.00.7-bp152.4.3.1 aspell-nn-0.50.11-bp152.4.3.1 aspell-ny-0.01-bp152.4.3.1 aspell-or-0.03-bp152.4.3.1 aspell-pa-0.01-bp152.4.3.1 aspell-pl-0.60.2015.04.28-bp152.4.3.1 aspell-pt_BR-20131030.12.0-bp152.4.3.1 aspell-pt_PT-20190329-bp152.4.3.1 aspell-qu-0.02-bp152.4.3.1 aspell-ro-3.3.2-bp152.4.3.1 aspell-ru-0.99.f7.1-bp152.4.3.1 aspell-rw-0.50-bp152.4.3.1 aspell-sc-1.0-bp152.4.3.1 aspell-sk-2.01-bp152.4.3.1 aspell-sl-0.50-bp152.4.3.1 aspell-sr-0.02-bp152.4.3.1 aspell-sv-0.51.0-bp152.4.3.1 aspell-sw-1.0-bp152.4.3.1 aspell-ta-20040424-bp152.4.3.1 aspell-te-0.01.2-bp152.4.3.1 aspell-tet-0.1.1-bp152.4.3.1 aspell-tk-0.01-bp152.4.3.1 aspell-tl-0.02-bp152.4.3.1 aspell-tn-1.0.1-bp152.4.3.1 aspell-tr-0.50-bp152.4.3.1 aspell-uk-1.4.0-bp152.4.3.1 aspell-uz-0.6.0-bp152.4.3.1 aspell-vi-0.01.1-bp152.4.3.1 aspell-wa-0.50-bp152.4.3.1 aspell-yi-0.01.1-bp152.4.3.1 aspell-zu-0.50-bp152.4.3.1 References: https://bugzilla.suse.com/1076219

1 0

openSUSE-RU-2020:1617-1: moderate: Recommended update for torbrowser-launcher
by maintenance＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Recommended Update: Recommended update for torbrowser-launcher ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1617-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for torbrowser-launcher fixes the following issues: - Add new key from upstream tor-browser as source and overwrite bundled key in tarball with this (gh#micahflee/torbrowser-launcher#481). - Fixed version checking with torbrowser 10.0+; patch taken from upstream PR (not yet merged) [gh#micahflee/torbrowser-launcher#499]. - Add further fixes to torbrowser-launcher-apparmor-fixes.patch to enable bundled libstdc++ to be mapped; fixes taken from pending upstream PR (gh#micahflee/torbrowser-launcher#503). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1617=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): torbrowser-apparmor-profile-0.3.2-bp152.4.3.1 torbrowser-launcher-0.3.2-bp152.4.3.1 torbrowser-launcher-lang-0.3.2-bp152.4.3.1 References:

1 0

openSUSE-RU-2020:1615-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1615-1 Rating: moderate References: #1165424 #1173273 #1173529 #1174240 #1174561 #1174918 #1175342 #1175592 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for libzypp, zypper provides the following fixes: Changes in libzypp: - VendorAttr: Const-correct API and let Target provide its settings. (bsc#1174918) - Support buildnr with commit hash in purge-kernels. This adds special behaviour for when a kernel version has the rebuild counter before the kernel commit hash. (bsc#1175342) - Improve Italian translation of the "breaking dependencies" message. (bsc#1173529) - Make sure reading from lsof does not block forever. (bsc#1174240) - Just collect details for the signatures found. Changes in zypper: - man: Enhance description of the global package cache. (bsc#1175592) - man: Point out that plain rpm packages are not downloaded to the global package cache. (bsc#1173273) - Directly list subcommands in 'zypper help'. (bsc#1165424) - Remove extern C block wrapping augeas.h as it breaks the build on Arch Linux. - Point out that plaindir repos do not follow symlinks. (bsc#1174561) - Fix help command for list-patches. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1615=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libzypp-17.24.2-lp152.2.10.1 libzypp-debuginfo-17.24.2-lp152.2.10.1 libzypp-debugsource-17.24.2-lp152.2.10.1 libzypp-devel-17.24.2-lp152.2.10.1 libzypp-devel-doc-17.24.2-lp152.2.10.1 zypper-1.14.38-lp152.2.6.1 zypper-debuginfo-1.14.38-lp152.2.6.1 zypper-debugsource-1.14.38-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): zypper-aptitude-1.14.38-lp152.2.6.1 zypper-log-1.14.38-lp152.2.6.1 zypper-needs-restarting-1.14.38-lp152.2.6.1 References: https://bugzilla.suse.com/1165424 https://bugzilla.suse.com/1173273 https://bugzilla.suse.com/1173529 https://bugzilla.suse.com/1174240 https://bugzilla.suse.com/1174561 https://bugzilla.suse.com/1174918 https://bugzilla.suse.com/1175342 https://bugzilla.suse.com/1175592

1 0

openSUSE-SU-2020:1616-1: important: Security update for nodejs12
by opensuse-security＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Security Update: Security update for nodejs12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1616-1 Rating: important References: #1172686 #1173937 #1176589 #1176605 Cross-References: CVE-2020-15095 CVE-2020-8201 CVE-2020-8252 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for nodejs12 fixes the following issues: - nodejs12 was updated to 12.18.4 LTS: - CVE-2020-8201: Fixed an HTTP Request Smuggling due to CR-to-Hyphen conversion (bsc#1176605). - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589). - CVE-2020-15095: Fixed an information leak through log files (bsc#1173937). - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation on Aarch64 with gcc10 (bsc#1172686) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1616=1 Package List: - openSUSE Leap 15.2 (x86_64): nodejs12-12.18.4-lp152.3.6.1 nodejs12-debuginfo-12.18.4-lp152.3.6.1 nodejs12-debugsource-12.18.4-lp152.3.6.1 nodejs12-devel-12.18.4-lp152.3.6.1 npm12-12.18.4-lp152.3.6.1 - openSUSE Leap 15.2 (noarch): nodejs12-docs-12.18.4-lp152.3.6.1 References: https://www.suse.com/security/cve/CVE-2020-15095.html https://www.suse.com/security/cve/CVE-2020-8201.html https://www.suse.com/security/cve/CVE-2020-8252.html https://bugzilla.suse.com/1172686 https://bugzilla.suse.com/1173937 https://bugzilla.suse.com/1176589 https://bugzilla.suse.com/1176605

1 0

openSUSE-RU-2020:1614-1: important: Recommended update for resource-agents
by maintenance＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1614-1 Rating: important References: #1175435 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for resource-agents fixes the following issues: - Fixed an issue when the last commit of galera cluster is not saved in 'grastate.dat'. (bsc#1175435) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1614=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ldirectord-4.4.0+git57.70549516-lp152.2.9.1 resource-agents-4.4.0+git57.70549516-lp152.2.9.1 resource-agents-debuginfo-4.4.0+git57.70549516-lp152.2.9.1 resource-agents-debugsource-4.4.0+git57.70549516-lp152.2.9.1 - openSUSE Leap 15.2 (noarch): monitoring-plugins-metadata-4.4.0+git57.70549516-lp152.2.9.1 References: https://bugzilla.suse.com/1175435

1 0

openSUSE-SU-2020:1613-1: moderate: Security update for python-pip
by opensuse-security＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Security Update: Security update for python-pip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1613-1 Rating: moderate References: #1176262 Cross-References: CVE-2019-20916 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in _download_http_url (bsc#1176262) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1613=1 Package List: - openSUSE Leap 15.1 (noarch): python2-pip-10.0.1-lp151.3.3.1 python3-pip-10.0.1-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-20916.html https://bugzilla.suse.com/1176262

1 0

openSUSE-RU-2020:1610-1: moderate: Recommended update for gnome-sound-recorder
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for gnome-sound-recorder ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1610-1 Rating: moderate References: #1177168 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-sound-recorder fixes the following issues: - Fix javascript error during startup (boo#1177168) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1610=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-sound-recorder-3.24.0.1-lp152.4.3.1 gnome-sound-recorder-lang-3.24.0.1-lp152.4.3.1 References: https://bugzilla.suse.com/1177168

1 0

openSUSE-SU-2020:1611-1: moderate: Security update for grafana
by opensuse-security＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Security Update: Security update for grafana ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1611-1 Rating: moderate References: #1044444 #1044933 #1115960 #1170557 Cross-References: CVE-2018-19039 CVE-2019-15043 CVE-2020-12245 CVE-2020-13379 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for grafana fixes the following issues: grafana was updated to version 7.1.5: * Features / Enhancements - Stats: Stop counting the same user multiple times. - Field overrides: Filter by field name using regex. - AzureMonitor: map more units. - Explore: Don't run queries on datasource change. - Graph: Support setting field unit & override data source (automatic) unit. - Explore: Unification of logs/metrics/traces user interface - Table: JSON Cell should try to convert strings to JSON - Variables: enables cancel for slow query variables queries. - TimeZone: unify the time zone pickers to one that can rule them all. - Search: support URL query params. - Grafana-UI: Add FileUpload. - TablePanel: Sort numbers correctly. * Bug fixes - Alerting: remove LongToWide call in alerting. - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used. - Variables: Fixes issue with All variable not being resolved. - Templating: Fixes so texts show in picker not the values. - Templating: Templating: Fix undefined result when using raw interpolation format - TextPanel: Fix content overflowing panel boundaries. - StatPanel: Fix stat panel display name not showing when explicitly set. - Query history: Fix search filtering if null value. - Flux: Ensure connections to InfluxDB are closed. - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything). - Prometheus: Fix prom links in mixed mode. - Sign In Use correct url for the Sign In button. - StatPanel: Fixes issue with name showing for single series / field results - BarGauge: Fix space bug in single series mode. - Auth: Fix POST request failures with anonymous access - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable - Templating: Fixed recursive queries triggered when switching dashboard settings view - GraphPanel: Fix annotations overflowing panels. - Prometheus: Fix performance issue in processing of histogram labels. - Datasources: Handle URL parsing error. - Security: Use Header.Set and Header.Del for X-Grafana-User header. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1611=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): grafana-7.1.5-bp151.2.1 References: https://www.suse.com/security/cve/CVE-2018-19039.html https://www.suse.com/security/cve/CVE-2019-15043.html https://www.suse.com/security/cve/CVE-2020-12245.html https://www.suse.com/security/cve/CVE-2020-13379.html https://bugzilla.suse.com/1044444 https://bugzilla.suse.com/1044933 https://bugzilla.suse.com/1115960 https://bugzilla.suse.com/1170557

1 0

openSUSE-RU-2020:1612-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1612-1 Rating: moderate References: #1170154 #1171546 #1171995 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for cloud-init contains the following fixes: - rsyslog warning, '~' is deprecated: (bsc#1170154) + replace deprecated syntax '& ~' by '& stop' for more information please see https://www.rsyslog.com/rsyslog-error-2307/. + Explicitly test for netconfig version 1 as well as 2. + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1612=1 Package List: - openSUSE Leap 15.2 (x86_64): cloud-init-19.4-lp152.5.3.1 cloud-init-config-suse-19.4-lp152.5.3.1 cloud-init-doc-19.4-lp152.5.3.1 References: https://bugzilla.suse.com/1170154 https://bugzilla.suse.com/1171546 https://bugzilla.suse.com/1171995

1 0

openSUSE-RU-2020:1607-1: moderate: Recommended update for fwupd
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for fwupd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1607-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fwupd fixes the following issues: - Fix the existing differences for 'efidir' for opensuse Leap and SLE. (jsc#SLE-11766) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1607=1 Package List: - openSUSE Leap 15.2 (x86_64): dfu-tool-1.2.11-lp152.3.6.1 dfu-tool-debuginfo-1.2.11-lp152.3.6.1 fwupd-1.2.11-lp152.3.6.1 fwupd-debuginfo-1.2.11-lp152.3.6.1 fwupd-debugsource-1.2.11-lp152.3.6.1 fwupd-devel-1.2.11-lp152.3.6.1 libfwupd2-1.2.11-lp152.3.6.1 libfwupd2-debuginfo-1.2.11-lp152.3.6.1 typelib-1_0-Fwupd-2_0-1.2.11-lp152.3.6.1 - openSUSE Leap 15.2 (noarch): fwupd-lang-1.2.11-lp152.3.6.1 References:

1 0