October 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1609-1: moderate: Recommended update for python-shaptools, salt-shaptools, habootstrap-formula, saphanabootstrap-formula, sapnwbootstrap-formula
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for python-shaptools, salt-shaptools, habootstrap-formula, saphanabootstrap-formula, sapnwbootstrap-formula ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1609-1 Rating: moderate References: #1174994 #1175709 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-shaptools fixes the following issues: - Fix how HANA database is started and stopped to work in multi host environment. sapcontrol commands are used instead of HDB now. (jsc#SLE-4047) - Fix issue when secondary registration fails after a successful 'SSFS' files copy process. Now the registration return code will be checked in the new call. (bsc#1175709) This update for salt-shaptools fixes the following issues: - Fix how HANA database is started and stopped to work in multi host environment. sapcontrol commands are used instead of HDB now. (jsc#SLE-4047) This update for habootstrap-formula fixes the following issues: - Include the pillar example file in package. (bsc#1174994) - Fix how HANA database is started and stopped to work in multi host environment. sapcontrol commands are used instead of HDB now. (jsc#SLE-4047) This update for saphanabootstrap-formula fixes the following issues: - Include the pillar example file in package. (bsc#1174994) - Fix how HANA database is started and stopped to work in multi host environment. sapcontrol commands are used instead of HDB now. (jsc#SLE-4047) This update for sapnwbootstrap-formula fixes the following issues: - Include the pillar example file in package. (bsc#1174994) - Fix how HANA database is started and stopped to work in multi host environment. sapcontrol commands are used instead of HDB now. (jsc#SLE-4047) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1609=1 Package List: - openSUSE Leap 15.2 (noarch): habootstrap-formula-0.3.9+git.1600700065.14360cc-lp152.2.3.1 python2-shaptools-0.3.10+git.1600699158.46fca28-lp152.2.3.1 python3-shaptools-0.3.10+git.1600699158.46fca28-lp152.2.3.1 salt-shaptools-0.3.10+git.1600699854.f5950bc-lp152.2.3.1 saphanabootstrap-formula-0.6.0+git.1600699862.f34e262-lp152.2.3.1 sapnwbootstrap-formula-0.5.1+git.1600700160.9b359fd-lp152.2.3.1 References: https://bugzilla.suse.com/1174994 https://bugzilla.suse.com/1175709

1 0

openSUSE-SU-2020:1608-1: important: Security update for xen
by opensuse-security＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1608-1 Rating: important References: #1027519 #1176339 #1176341 #1176343 #1176344 #1176345 #1176346 #1176347 #1176348 #1176349 #1176350 Cross-References: CVE-2020-25595 CVE-2020-25596 CVE-2020-25597 CVE-2020-25598 CVE-2020-25599 CVE-2020-25600 CVE-2020-25601 CVE-2020-25602 CVE-2020-25603 CVE-2020-25604 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has one errata is now available. Description: This update for xen fixes the following issues: - CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333) - CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path (bsc#1176341,XSA-334) - CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336) - CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337) - CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338) - CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339) - CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340) - CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342) - CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343) - CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344) - Various other fixes (bsc#1027519) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1608=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): xen-debugsource-4.13.1_08-lp152.2.9.1 xen-devel-4.13.1_08-lp152.2.9.1 xen-libs-4.13.1_08-lp152.2.9.1 xen-libs-debuginfo-4.13.1_08-lp152.2.9.1 xen-tools-domU-4.13.1_08-lp152.2.9.1 xen-tools-domU-debuginfo-4.13.1_08-lp152.2.9.1 - openSUSE Leap 15.2 (x86_64): xen-4.13.1_08-lp152.2.9.1 xen-doc-html-4.13.1_08-lp152.2.9.1 xen-libs-32bit-4.13.1_08-lp152.2.9.1 xen-libs-32bit-debuginfo-4.13.1_08-lp152.2.9.1 xen-tools-4.13.1_08-lp152.2.9.1 xen-tools-debuginfo-4.13.1_08-lp152.2.9.1 - openSUSE Leap 15.2 (noarch): xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-25595.html https://www.suse.com/security/cve/CVE-2020-25596.html https://www.suse.com/security/cve/CVE-2020-25597.html https://www.suse.com/security/cve/CVE-2020-25598.html https://www.suse.com/security/cve/CVE-2020-25599.html https://www.suse.com/security/cve/CVE-2020-25600.html https://www.suse.com/security/cve/CVE-2020-25601.html https://www.suse.com/security/cve/CVE-2020-25602.html https://www.suse.com/security/cve/CVE-2020-25603.html https://www.suse.com/security/cve/CVE-2020-25604.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1176339 https://bugzilla.suse.com/1176341 https://bugzilla.suse.com/1176343 https://bugzilla.suse.com/1176344 https://bugzilla.suse.com/1176345 https://bugzilla.suse.com/1176346 https://bugzilla.suse.com/1176347 https://bugzilla.suse.com/1176348 https://bugzilla.suse.com/1176349 https://bugzilla.suse.com/1176350

1 0

openSUSE-RU-2020:1606-1: moderate: Recommended update for rsyslog
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1606-1 Rating: moderate References: #1173433 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rsyslog fixes the following issues: - Fix the URL for bug reporting. (bsc#1173433) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1606=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): rsyslog-8.39.0-lp152.3.3.1 rsyslog-debuginfo-8.39.0-lp152.3.3.1 rsyslog-debugsource-8.39.0-lp152.3.3.1 rsyslog-diag-tools-8.39.0-lp152.3.3.1 rsyslog-diag-tools-debuginfo-8.39.0-lp152.3.3.1 rsyslog-doc-8.39.0-lp152.3.3.1 rsyslog-module-dbi-8.39.0-lp152.3.3.1 rsyslog-module-dbi-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-elasticsearch-8.39.0-lp152.3.3.1 rsyslog-module-elasticsearch-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-gcrypt-8.39.0-lp152.3.3.1 rsyslog-module-gcrypt-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-gssapi-8.39.0-lp152.3.3.1 rsyslog-module-gssapi-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-gtls-8.39.0-lp152.3.3.1 rsyslog-module-gtls-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-mmnormalize-8.39.0-lp152.3.3.1 rsyslog-module-mmnormalize-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-mysql-8.39.0-lp152.3.3.1 rsyslog-module-mysql-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-omamqp1-8.39.0-lp152.3.3.1 rsyslog-module-omamqp1-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-omhttpfs-8.39.0-lp152.3.3.1 rsyslog-module-omhttpfs-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-omtcl-8.39.0-lp152.3.3.1 rsyslog-module-omtcl-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-ossl-8.39.0-lp152.3.3.1 rsyslog-module-ossl-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-pgsql-8.39.0-lp152.3.3.1 rsyslog-module-pgsql-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-relp-8.39.0-lp152.3.3.1 rsyslog-module-relp-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-snmp-8.39.0-lp152.3.3.1 rsyslog-module-snmp-debuginfo-8.39.0-lp152.3.3.1 rsyslog-module-udpspoof-8.39.0-lp152.3.3.1 rsyslog-module-udpspoof-debuginfo-8.39.0-lp152.3.3.1 References: https://bugzilla.suse.com/1173433

1 0

openSUSE-RU-2020:1605-1: moderate: Recommended update for hyper-v
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for hyper-v ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1605-1 Rating: moderate References: #1116957 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hyper-v fixes the following issues: - Fixes an issue when hyper-v services not running after booting from SLES12SP3 ISO. (bsc#1116957) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1605=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): hyper-v-8-lp152.9.6.1 hyper-v-debuginfo-8-lp152.9.6.1 hyper-v-debugsource-8-lp152.9.6.1 References: https://bugzilla.suse.com/1116957

1 0

openSUSE-SU-2020:1604-1: moderate: Security update for zabbix
by opensuse-security＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Security Update: Security update for zabbix ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1604-1 Rating: moderate References: #1174253 Cross-References: CVE-2020-11800 CVE-2020-15803 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for zabbix fixes the following issues: Updated to version 3.0.31. + CVE-2020-15803: Fixed an XSS in the URL Widget (boo#1174253). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1604=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1604=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1604=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1604=1 Package List: - openSUSE Leap 15.2 (noarch): zabbix-bash-completion-3.0.31-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): zabbix-agent-3.0.31-lp152.2.3.1 zabbix-agent-debuginfo-3.0.31-lp152.2.3.1 zabbix-debuginfo-3.0.31-lp152.2.3.1 zabbix-debugsource-3.0.31-lp152.2.3.1 zabbix-java-gateway-3.0.31-lp152.2.3.1 zabbix-phpfrontend-3.0.31-lp152.2.3.1 zabbix-proxy-3.0.31-lp152.2.3.1 zabbix-proxy-mysql-3.0.31-lp152.2.3.1 zabbix-proxy-mysql-debuginfo-3.0.31-lp152.2.3.1 zabbix-proxy-postgresql-3.0.31-lp152.2.3.1 zabbix-proxy-postgresql-debuginfo-3.0.31-lp152.2.3.1 zabbix-proxy-sqlite-3.0.31-lp152.2.3.1 zabbix-proxy-sqlite-debuginfo-3.0.31-lp152.2.3.1 zabbix-server-3.0.31-lp152.2.3.1 zabbix-server-debuginfo-3.0.31-lp152.2.3.1 zabbix-server-mysql-3.0.31-lp152.2.3.1 zabbix-server-mysql-debuginfo-3.0.31-lp152.2.3.1 zabbix-server-postgresql-3.0.31-lp152.2.3.1 zabbix-server-postgresql-debuginfo-3.0.31-lp152.2.3.1 zabbix-server-sqlite-3.0.31-lp152.2.3.1 zabbix-server-sqlite-debuginfo-3.0.31-lp152.2.3.1 - openSUSE Leap 15.1 (x86_64): zabbix-agent-3.0.31-lp151.2.6.1 zabbix-agent-debuginfo-3.0.31-lp151.2.6.1 zabbix-debuginfo-3.0.31-lp151.2.6.1 zabbix-debugsource-3.0.31-lp151.2.6.1 zabbix-java-gateway-3.0.31-lp151.2.6.1 zabbix-phpfrontend-3.0.31-lp151.2.6.1 zabbix-proxy-3.0.31-lp151.2.6.1 zabbix-proxy-mysql-3.0.31-lp151.2.6.1 zabbix-proxy-mysql-debuginfo-3.0.31-lp151.2.6.1 zabbix-proxy-postgresql-3.0.31-lp151.2.6.1 zabbix-proxy-postgresql-debuginfo-3.0.31-lp151.2.6.1 zabbix-proxy-sqlite-3.0.31-lp151.2.6.1 zabbix-proxy-sqlite-debuginfo-3.0.31-lp151.2.6.1 zabbix-server-3.0.31-lp151.2.6.1 zabbix-server-debuginfo-3.0.31-lp151.2.6.1 zabbix-server-mysql-3.0.31-lp151.2.6.1 zabbix-server-mysql-debuginfo-3.0.31-lp151.2.6.1 zabbix-server-postgresql-3.0.31-lp151.2.6.1 zabbix-server-postgresql-debuginfo-3.0.31-lp151.2.6.1 zabbix-server-sqlite-3.0.31-lp151.2.6.1 zabbix-server-sqlite-debuginfo-3.0.31-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): zabbix-bash-completion-3.0.31-lp151.2.6.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): zabbix-agent-3.0.31-bp152.2.3.1 zabbix-agent-debuginfo-3.0.31-bp152.2.3.1 zabbix-debuginfo-3.0.31-bp152.2.3.1 zabbix-debugsource-3.0.31-bp152.2.3.1 zabbix-java-gateway-3.0.31-bp152.2.3.1 zabbix-phpfrontend-3.0.31-bp152.2.3.1 zabbix-proxy-3.0.31-bp152.2.3.1 zabbix-proxy-mysql-3.0.31-bp152.2.3.1 zabbix-proxy-mysql-debuginfo-3.0.31-bp152.2.3.1 zabbix-proxy-postgresql-3.0.31-bp152.2.3.1 zabbix-proxy-postgresql-debuginfo-3.0.31-bp152.2.3.1 zabbix-proxy-sqlite-3.0.31-bp152.2.3.1 zabbix-proxy-sqlite-debuginfo-3.0.31-bp152.2.3.1 zabbix-server-3.0.31-bp152.2.3.1 zabbix-server-debuginfo-3.0.31-bp152.2.3.1 zabbix-server-mysql-3.0.31-bp152.2.3.1 zabbix-server-mysql-debuginfo-3.0.31-bp152.2.3.1 zabbix-server-postgresql-3.0.31-bp152.2.3.1 zabbix-server-postgresql-debuginfo-3.0.31-bp152.2.3.1 zabbix-server-sqlite-3.0.31-bp152.2.3.1 zabbix-server-sqlite-debuginfo-3.0.31-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): zabbix-bash-completion-3.0.31-bp152.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): zabbix-agent-3.0.31-bp151.4.6.1 zabbix-java-gateway-3.0.31-bp151.4.6.1 zabbix-phpfrontend-3.0.31-bp151.4.6.1 zabbix-proxy-3.0.31-bp151.4.6.1 zabbix-proxy-mysql-3.0.31-bp151.4.6.1 zabbix-proxy-postgresql-3.0.31-bp151.4.6.1 zabbix-proxy-sqlite-3.0.31-bp151.4.6.1 zabbix-server-3.0.31-bp151.4.6.1 zabbix-server-mysql-3.0.31-bp151.4.6.1 zabbix-server-postgresql-3.0.31-bp151.4.6.1 zabbix-server-sqlite-3.0.31-bp151.4.6.1 - openSUSE Backports SLE-15-SP1 (noarch): zabbix-bash-completion-3.0.31-bp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-11800.html https://www.suse.com/security/cve/CVE-2020-15803.html https://bugzilla.suse.com/1174253

1 0

openSUSE-RU-2020:1602-1: important: Recommended update for systemd-rpm-macros
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for systemd-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1602-1 Rating: important References: #1176932 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemd-rpm-macros fixes the following issues: - Backport missing macros of directory paths from upstream + %_environmentdir + %_modulesloaddir + %_modprobedir - Make sure %_restart_on_update_never and %_stop_on_removal_never don't expand to the empty string. (bsc#1176932) Otherwise sequences like the following code: if [ ... ]; then %_restart_on_update_never fi would result in the following incorrect shell syntax: if [ ... ]; then fi This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1602=1 Package List: - openSUSE Leap 15.2 (noarch): systemd-rpm-macros-4.1-lp152.8.4.1 References: https://bugzilla.suse.com/1176932

1 0

openSUSE-RU-2020:1600-1: moderate: Recommended update for gnome-tweaks
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for gnome-tweaks ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1600-1 Rating: moderate References: #1162080 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-tweaks fixes the following issues: - Fix for Gnome-tweaks as titlebar starts flickering when setting button placement to left. (bsc#1162080, glgo#GNOME/gnome-tweaks#245) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1600=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-tweaks-3.34.0-lp152.2.3.1 gnome-tweaks-lang-3.34.0-lp152.2.3.1 References: https://bugzilla.suse.com/1162080

1 0

openSUSE-RU-2020:1603-1: moderate: Recommended update for xiterm
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for xiterm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1603-1 Rating: moderate References: #1158271 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xiterm fixes the following issues: - Fix for not enabled application keypad mode. (bsc#1158271) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1603=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): fbiterm-0.5.20040304-lp152.5.3.1 fbiterm-debuginfo-0.5.20040304-lp152.5.3.1 gtkiterm-0.5.20040304-lp152.5.3.1 gtkiterm-debuginfo-0.5.20040304-lp152.5.3.1 libXiterm-devel-0.5.20040304-lp152.5.3.1 libXiterm1-0.5.20040304-lp152.5.3.1 libXiterm1-debuginfo-0.5.20040304-lp152.5.3.1 libiterm-devel-0.5.20040304-lp152.5.3.1 libiterm1-0.5.20040304-lp152.5.3.1 libiterm1-debuginfo-0.5.20040304-lp152.5.3.1 xiterm-0.5.20040304-lp152.5.3.1 xiterm-debuginfo-0.5.20040304-lp152.5.3.1 xiterm-debugsource-0.5.20040304-lp152.5.3.1 References: https://bugzilla.suse.com/1158271

1 0

openSUSE-SU-2020:1599-1: critical: Security update for dpdk
by opensuse-security＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Security Update: Security update for dpdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1599-1 Rating: critical References: #1176590 Cross-References: CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14377 CVE-2020-14378 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for dpdk fixes the following issues: - dpdk was updated to 19.11.4 - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest and causing partially denial of service in the host(bsc#1176590). - For a list of fixes check: https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8 denial of service in the host (bsc#1176590). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1599=1 Package List: - openSUSE Leap 15.2 (x86_64): dpdk-19.11.4-lp152.2.8.1 dpdk-debuginfo-19.11.4-lp152.2.8.1 dpdk-debugsource-19.11.4-lp152.2.8.1 dpdk-devel-19.11.4-lp152.2.8.1 dpdk-devel-debuginfo-19.11.4-lp152.2.8.1 dpdk-examples-19.11.4-lp152.2.8.1 dpdk-examples-debuginfo-19.11.4-lp152.2.8.1 dpdk-kmp-default-19.11.4_k5.3.18_lp152.41-lp152.2.8.1 dpdk-kmp-default-debuginfo-19.11.4_k5.3.18_lp152.41-lp152.2.8.1 dpdk-kmp-preempt-19.11.4_k5.3.18_lp152.41-lp152.2.8.1 dpdk-kmp-preempt-debuginfo-19.11.4_k5.3.18_lp152.41-lp152.2.8.1 dpdk-tools-19.11.4-lp152.2.8.1 dpdk-tools-debuginfo-19.11.4-lp152.2.8.1 libdpdk-20_0-19.11.4-lp152.2.8.1 libdpdk-20_0-debuginfo-19.11.4-lp152.2.8.1 - openSUSE Leap 15.2 (noarch): dpdk-doc-19.11.4-lp152.2.8.1 References: https://www.suse.com/security/cve/CVE-2020-14374.html https://www.suse.com/security/cve/CVE-2020-14375.html https://www.suse.com/security/cve/CVE-2020-14376.html https://www.suse.com/security/cve/CVE-2020-14377.html https://www.suse.com/security/cve/CVE-2020-14378.html https://bugzilla.suse.com/1176590

1 0

openSUSE-RU-2020:1601-1: moderate: Recommended update for drbd-utils
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for drbd-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1601-1 Rating: moderate References: #1176065 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd-utils fixes the following issues: - Fixed an issue when 'drbd-fencing' could not determine the master id of 'drbd' resource. (bsc#1176065) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1601=1 Package List: - openSUSE Leap 15.2 (x86_64): drbd-utils-9.13.0-lp152.2.3.1 drbd-utils-debuginfo-9.13.0-lp152.2.3.1 drbd-utils-debugsource-9.13.0-lp152.2.3.1 References: https://bugzilla.suse.com/1176065

1 0