October 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1768-1: moderate: Recommended update for sysstat
by maintenance＠opensuse.org 29 Oct '20

29 Oct '20

openSUSE Recommended Update: Recommended update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1768-1 Rating: moderate References: #1174227 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysstat fixes the following issues: - Fix for an issue when 'iowait' output of 'sar' can also decrement as a result of inaccurate tracking. (bsc#1174227) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1768=1 Package List: - openSUSE Leap 15.2 (x86_64): sysstat-12.0.2-lp152.9.4.1 sysstat-debuginfo-12.0.2-lp152.9.4.1 sysstat-debugsource-12.0.2-lp152.9.4.1 sysstat-isag-12.0.2-lp152.9.4.1 References: https://bugzilla.suse.com/1174227

1 0

openSUSE-SU-2020:1767-1: important: Security update for php7
by opensuse-security＠opensuse.org 29 Oct '20

29 Oct '20

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1767-1 Rating: important References: #1173786 #1177351 #1177352 Cross-References: CVE-2020-7069 CVE-2020-7070 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for php7 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352). - Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1767=1 Package List: - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.36.7 php7-pear-Archive_Tar-7.2.5-lp151.6.36.7 - openSUSE Leap 15.1 (x86_64): apache2-mod_php7-7.2.5-lp151.6.36.7 apache2-mod_php7-debuginfo-7.2.5-lp151.6.36.7 php7-7.2.5-lp151.6.36.7 php7-bcmath-7.2.5-lp151.6.36.7 php7-bcmath-debuginfo-7.2.5-lp151.6.36.7 php7-bz2-7.2.5-lp151.6.36.7 php7-bz2-debuginfo-7.2.5-lp151.6.36.7 php7-calendar-7.2.5-lp151.6.36.7 php7-calendar-debuginfo-7.2.5-lp151.6.36.7 php7-ctype-7.2.5-lp151.6.36.7 php7-ctype-debuginfo-7.2.5-lp151.6.36.7 php7-curl-7.2.5-lp151.6.36.7 php7-curl-debuginfo-7.2.5-lp151.6.36.7 php7-dba-7.2.5-lp151.6.36.7 php7-dba-debuginfo-7.2.5-lp151.6.36.7 php7-debuginfo-7.2.5-lp151.6.36.7 php7-debugsource-7.2.5-lp151.6.36.7 php7-devel-7.2.5-lp151.6.36.7 php7-dom-7.2.5-lp151.6.36.7 php7-dom-debuginfo-7.2.5-lp151.6.36.7 php7-embed-7.2.5-lp151.6.36.7 php7-embed-debuginfo-7.2.5-lp151.6.36.7 php7-enchant-7.2.5-lp151.6.36.7 php7-enchant-debuginfo-7.2.5-lp151.6.36.7 php7-exif-7.2.5-lp151.6.36.7 php7-exif-debuginfo-7.2.5-lp151.6.36.7 php7-fastcgi-7.2.5-lp151.6.36.7 php7-fastcgi-debuginfo-7.2.5-lp151.6.36.7 php7-fileinfo-7.2.5-lp151.6.36.7 php7-fileinfo-debuginfo-7.2.5-lp151.6.36.7 php7-firebird-7.2.5-lp151.6.36.7 php7-firebird-debuginfo-7.2.5-lp151.6.36.7 php7-fpm-7.2.5-lp151.6.36.7 php7-fpm-debuginfo-7.2.5-lp151.6.36.7 php7-ftp-7.2.5-lp151.6.36.7 php7-ftp-debuginfo-7.2.5-lp151.6.36.7 php7-gd-7.2.5-lp151.6.36.7 php7-gd-debuginfo-7.2.5-lp151.6.36.7 php7-gettext-7.2.5-lp151.6.36.7 php7-gettext-debuginfo-7.2.5-lp151.6.36.7 php7-gmp-7.2.5-lp151.6.36.7 php7-gmp-debuginfo-7.2.5-lp151.6.36.7 php7-iconv-7.2.5-lp151.6.36.7 php7-iconv-debuginfo-7.2.5-lp151.6.36.7 php7-intl-7.2.5-lp151.6.36.7 php7-intl-debuginfo-7.2.5-lp151.6.36.7 php7-json-7.2.5-lp151.6.36.7 php7-json-debuginfo-7.2.5-lp151.6.36.7 php7-ldap-7.2.5-lp151.6.36.7 php7-ldap-debuginfo-7.2.5-lp151.6.36.7 php7-mbstring-7.2.5-lp151.6.36.7 php7-mbstring-debuginfo-7.2.5-lp151.6.36.7 php7-mysql-7.2.5-lp151.6.36.7 php7-mysql-debuginfo-7.2.5-lp151.6.36.7 php7-odbc-7.2.5-lp151.6.36.7 php7-odbc-debuginfo-7.2.5-lp151.6.36.7 php7-opcache-7.2.5-lp151.6.36.7 php7-opcache-debuginfo-7.2.5-lp151.6.36.7 php7-openssl-7.2.5-lp151.6.36.7 php7-openssl-debuginfo-7.2.5-lp151.6.36.7 php7-pcntl-7.2.5-lp151.6.36.7 php7-pcntl-debuginfo-7.2.5-lp151.6.36.7 php7-pdo-7.2.5-lp151.6.36.7 php7-pdo-debuginfo-7.2.5-lp151.6.36.7 php7-pgsql-7.2.5-lp151.6.36.7 php7-pgsql-debuginfo-7.2.5-lp151.6.36.7 php7-phar-7.2.5-lp151.6.36.7 php7-phar-debuginfo-7.2.5-lp151.6.36.7 php7-posix-7.2.5-lp151.6.36.7 php7-posix-debuginfo-7.2.5-lp151.6.36.7 php7-readline-7.2.5-lp151.6.36.7 php7-readline-debuginfo-7.2.5-lp151.6.36.7 php7-shmop-7.2.5-lp151.6.36.7 php7-shmop-debuginfo-7.2.5-lp151.6.36.7 php7-snmp-7.2.5-lp151.6.36.7 php7-snmp-debuginfo-7.2.5-lp151.6.36.7 php7-soap-7.2.5-lp151.6.36.7 php7-soap-debuginfo-7.2.5-lp151.6.36.7 php7-sockets-7.2.5-lp151.6.36.7 php7-sockets-debuginfo-7.2.5-lp151.6.36.7 php7-sodium-7.2.5-lp151.6.36.7 php7-sodium-debuginfo-7.2.5-lp151.6.36.7 php7-sqlite-7.2.5-lp151.6.36.7 php7-sqlite-debuginfo-7.2.5-lp151.6.36.7 php7-sysvmsg-7.2.5-lp151.6.36.7 php7-sysvmsg-debuginfo-7.2.5-lp151.6.36.7 php7-sysvsem-7.2.5-lp151.6.36.7 php7-sysvsem-debuginfo-7.2.5-lp151.6.36.7 php7-sysvshm-7.2.5-lp151.6.36.7 php7-sysvshm-debuginfo-7.2.5-lp151.6.36.7 php7-test-7.2.5-lp151.6.36.7 php7-tidy-7.2.5-lp151.6.36.7 php7-tidy-debuginfo-7.2.5-lp151.6.36.7 php7-tokenizer-7.2.5-lp151.6.36.7 php7-tokenizer-debuginfo-7.2.5-lp151.6.36.7 php7-wddx-7.2.5-lp151.6.36.7 php7-wddx-debuginfo-7.2.5-lp151.6.36.7 php7-xmlreader-7.2.5-lp151.6.36.7 php7-xmlreader-debuginfo-7.2.5-lp151.6.36.7 php7-xmlrpc-7.2.5-lp151.6.36.7 php7-xmlrpc-debuginfo-7.2.5-lp151.6.36.7 php7-xmlwriter-7.2.5-lp151.6.36.7 php7-xmlwriter-debuginfo-7.2.5-lp151.6.36.7 php7-xsl-7.2.5-lp151.6.36.7 php7-xsl-debuginfo-7.2.5-lp151.6.36.7 php7-zip-7.2.5-lp151.6.36.7 php7-zip-debuginfo-7.2.5-lp151.6.36.7 php7-zlib-7.2.5-lp151.6.36.7 php7-zlib-debuginfo-7.2.5-lp151.6.36.7 References: https://www.suse.com/security/cve/CVE-2020-7069.html https://www.suse.com/security/cve/CVE-2020-7070.html https://bugzilla.suse.com/1173786 https://bugzilla.suse.com/1177351 https://bugzilla.suse.com/1177352

1 0

openSUSE-SU-2020:1765-1: moderate: Security update for pagure
by opensuse-security＠opensuse.org 29 Oct '20

29 Oct '20

openSUSE Security Update: Security update for pagure ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1765-1 Rating: moderate References: #1176987 Cross-References: CVE-2019-11556 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pagure fixes the following issues: - CVE-2019-11556: Fixed XSS via the templates/blame.html blame view (boo#1176987) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1765=1 Package List: - openSUSE Leap 15.1 (noarch): pagure-5.5-lp151.2.3.1 pagure-ci-5.5-lp151.2.3.1 pagure-ev-5.5-lp151.2.3.1 pagure-loadjson-5.5-lp151.2.3.1 pagure-logcom-5.5-lp151.2.3.1 pagure-milters-5.5-lp151.2.3.1 pagure-mirror-5.5-lp151.2.3.1 pagure-theme-chameleon-5.5-lp151.2.3.1 pagure-theme-default-openSUSE-5.5-lp151.2.3.1 pagure-theme-default-upstream-5.5-lp151.2.3.1 pagure-theme-pagureio-5.5-lp151.2.3.1 pagure-theme-srcfpo-5.5-lp151.2.3.1 pagure-theme-upstream-5.5-lp151.2.3.1 pagure-webhook-5.5-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-11556.html https://bugzilla.suse.com/1176987

1 0

openSUSE-RU-2020:1764-1: moderate: Recommended update for rshim
by maintenance＠opensuse.org 29 Oct '20

29 Oct '20

openSUSE Recommended Update: Recommended update for rshim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1764-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rshim fixes the following issues: rshim is shipped in version 2.0.4 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1764=1 Package List: - openSUSE Leap 15.2 (x86_64): rshim-2.0.4.15-lp152.2.1 rshim-debuginfo-2.0.4.15-lp152.2.1 rshim-debugsource-2.0.4.15-lp152.2.1 References:

1 0

openSUSE-SU-2020:1766-1: moderate: Security update for tensorflow2
by opensuse-security＠opensuse.org 29 Oct '20

29 Oct '20

openSUSE Security Update: Security update for tensorflow2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1766-1 Rating: moderate References: #1173314 #1175099 #1175789 #1177022 Cross-References: CVE-2020-15190 CVE-2020-15191 CVE-2020-15192 CVE-2020-15193 CVE-2020-15194 CVE-2020-15195 CVE-2020-15202 CVE-2020-15203 CVE-2020-15204 CVE-2020-15205 CVE-2020-15206 CVE-2020-15207 CVE-2020-15208 CVE-2020-15209 CVE-2020-15210 CVE-2020-15211 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update for tensorflow2 fixes the following issues: - updated to 2.1.2 with following fixes (boo#1177022): * Fixes an undefined behavior causing a segfault in tf.raw_ops.Switch (CVE-2020-15190) * Fixes three vulnerabilities in conversion to DLPack format (CVE-2020-15191, CVE-2020-15192, CVE-2020-15193) * Fixes two vulnerabilities in SparseFillEmptyRowsGrad (CVE-2020-15194, CVE-2020-15195) * Fixes an integer truncation vulnerability in code using the work sharder API (CVE-2020-15202) * Fixes a format string vulnerability in tf.strings.as_string (CVE-2020-15203) * Fixes segfault raised by calling session-only ops in eager mode (CVE-2020-15204) * Fixes data leak and potential ASLR violation from tf.raw_ops.StringNGrams (CVE-2020-15205) * Fixes segfaults caused by incomplete SavedModel validation (CVE-2020-15206) * Fixes a data corruption due to a bug in negative indexing support in TFLite (CVE-2020-15207) * Fixes a data corruption due to dimension mismatch in TFLite (CVE-2020-15208) * Fixes several vulnerabilities in TFLite saved model format (CVE-2020-15209, CVE-2020-15210, CVE-2020-15211) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1766=1 Package List: - openSUSE Leap 15.2 (x86_64): libtensorflow2-2.1.2-lp152.7.3.1 libtensorflow2-debuginfo-2.1.2-lp152.7.3.1 libtensorflow2-gnu-hpc-2.1.2-lp152.7.3.1 libtensorflow2-gnu-hpc-debuginfo-2.1.2-lp152.7.3.1 libtensorflow2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 libtensorflow2-gnu-openmpi2-hpc-debuginfo-2.1.2-lp152.7.3.1 libtensorflow_cc2-2.1.2-lp152.7.3.1 libtensorflow_cc2-debuginfo-2.1.2-lp152.7.3.1 libtensorflow_cc2-gnu-hpc-2.1.2-lp152.7.3.1 libtensorflow_cc2-gnu-hpc-debuginfo-2.1.2-lp152.7.3.1 libtensorflow_cc2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 libtensorflow_cc2-gnu-openmpi2-hpc-debuginfo-2.1.2-lp152.7.3.1 libtensorflow_framework2-2.1.2-lp152.7.3.1 libtensorflow_framework2-debuginfo-2.1.2-lp152.7.3.1 libtensorflow_framework2-gnu-hpc-2.1.2-lp152.7.3.1 libtensorflow_framework2-gnu-hpc-debuginfo-2.1.2-lp152.7.3.1 libtensorflow_framework2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 libtensorflow_framework2-gnu-openmpi2-hpc-debuginfo-2.1.2-lp152.7.3.1 tensorflow2-2.1.2-lp152.7.3.1 tensorflow2-debuginfo-2.1.2-lp152.7.3.1 tensorflow2-debugsource-2.1.2-lp152.7.3.1 tensorflow2-devel-2.1.2-lp152.7.3.1 tensorflow2-doc-2.1.2-lp152.7.3.1 tensorflow2-gnu-hpc-2.1.2-lp152.7.3.1 tensorflow2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 tensorflow2-lite-2.1.2-lp152.7.3.1 tensorflow2-lite-debuginfo-2.1.2-lp152.7.3.1 tensorflow2-lite-debugsource-2.1.2-lp152.7.3.1 tensorflow2-lite-devel-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-hpc-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-hpc-debuginfo-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-hpc-debugsource-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-hpc-devel-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-hpc-doc-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-openmpi2-hpc-debuginfo-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-openmpi2-hpc-debugsource-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-openmpi2-hpc-devel-2.1.2-lp152.7.3.1 tensorflow2_2_1_2-gnu-openmpi2-hpc-doc-2.1.2-lp152.7.3.1 References: https://www.suse.com/security/cve/CVE-2020-15190.html https://www.suse.com/security/cve/CVE-2020-15191.html https://www.suse.com/security/cve/CVE-2020-15192.html https://www.suse.com/security/cve/CVE-2020-15193.html https://www.suse.com/security/cve/CVE-2020-15194.html https://www.suse.com/security/cve/CVE-2020-15195.html https://www.suse.com/security/cve/CVE-2020-15202.html https://www.suse.com/security/cve/CVE-2020-15203.html https://www.suse.com/security/cve/CVE-2020-15204.html https://www.suse.com/security/cve/CVE-2020-15205.html https://www.suse.com/security/cve/CVE-2020-15206.html https://www.suse.com/security/cve/CVE-2020-15207.html https://www.suse.com/security/cve/CVE-2020-15208.html https://www.suse.com/security/cve/CVE-2020-15209.html https://www.suse.com/security/cve/CVE-2020-15210.html https://www.suse.com/security/cve/CVE-2020-15211.html https://bugzilla.suse.com/1173314 https://bugzilla.suse.com/1175099 https://bugzilla.suse.com/1175789 https://bugzilla.suse.com/1177022

1 0

openSUSE-RU-2020:1763-1: moderate: Recommended update for python-parallax
by maintenance＠opensuse.org 29 Oct '20

29 Oct '20

openSUSE Recommended Update: Recommended update for python-parallax ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1763-1 Rating: moderate References: #1099514 #1103832 #1131136 #1146748 #1169581 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for python-parallax fixes the following issues: - Fix for using ssh key and avoid failures in clusters requesting passwords. (bsc#1169581) - Surpress warning messages when needed. (bsc#1146748) - Fix for conflicting python-parallax with python3-parallax. (bsc#1103832, bsc#1131136) - Fix openQA tests. (bsc#1099514) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1763=1 Package List: - openSUSE Leap 15.1 (noarch): python2-parallax-1.0.6-lp151.3.3.1 python3-parallax-1.0.6-lp151.3.3.1 References: https://bugzilla.suse.com/1099514 https://bugzilla.suse.com/1103832 https://bugzilla.suse.com/1131136 https://bugzilla.suse.com/1146748 https://bugzilla.suse.com/1169581

1 0

openSUSE-RU-2020:1762-1: moderate: Recommended update for subversion
by maintenance＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Recommended Update: Recommended update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1762-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for subversion fixes the following issues: - Add patch to remove dependency on 'kdelibs4support' just to run kf5-config pointing the headers and libraries. (jsc#SLE-11901): This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1762=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.10.6-lp152.2.3.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.10.6-lp152.2.3.1 libsvn_auth_kwallet-1-0-1.10.6-lp152.2.3.1 libsvn_auth_kwallet-1-0-debuginfo-1.10.6-lp152.2.3.1 subversion-1.10.6-lp152.2.3.1 subversion-debuginfo-1.10.6-lp152.2.3.1 subversion-debugsource-1.10.6-lp152.2.3.1 subversion-devel-1.10.6-lp152.2.3.1 subversion-perl-1.10.6-lp152.2.3.1 subversion-perl-debuginfo-1.10.6-lp152.2.3.1 subversion-python-1.10.6-lp152.2.3.1 subversion-python-ctypes-1.10.6-lp152.2.3.1 subversion-python-debuginfo-1.10.6-lp152.2.3.1 subversion-ruby-1.10.6-lp152.2.3.1 subversion-ruby-debuginfo-1.10.6-lp152.2.3.1 subversion-server-1.10.6-lp152.2.3.1 subversion-server-debuginfo-1.10.6-lp152.2.3.1 subversion-tools-1.10.6-lp152.2.3.1 subversion-tools-debuginfo-1.10.6-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): subversion-bash-completion-1.10.6-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1761-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1761-1 Rating: moderate References: #1176737 #1177825 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 4.7. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-7-has-been-released/9213 boo#1177825 + Backup (export/import) of custom storage volumes + Import of instances with alternative name + Virtual machine memory shrinking (and re-grow) + USB device passthrough for virtual machines + Configurable rsync compression in migration + Restrict available uplinks for project networks + Add new physical managed network type + Support for external routed addresses/subnets on OVN Update to LXD 4.6. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-4-6-has-been-released/8981 boo#1176737 + Networks in projects + AppArmor profiles for qemu - Removal of custom sqlite fork. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1761=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1761=1 Package List: - openSUSE Leap 15.2 (noarch): lxd-bash-completion-4.7-lp152.2.12.1 - openSUSE Leap 15.2 (x86_64): lxd-4.7-lp152.2.12.1 - openSUSE Leap 15.1 (noarch): lxd-bash-completion-4.7-lp151.51.1 - openSUSE Leap 15.1 (x86_64): lxd-4.7-lp151.51.1 References: https://bugzilla.suse.com/1176737 https://bugzilla.suse.com/1177825

1 0

openSUSE-RU-2020:1758-1: moderate: Recommended update for procps
by maintenance＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1758-1 Rating: moderate References: #1158830 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for procps fixes the following issues: - Fixes an issue when command 'ps -C' does not allow anymore an argument longer than 15 characters. (bsc#1158830) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1758=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libprocps7-3.3.15-lp152.3.3.1 libprocps7-debuginfo-3.3.15-lp152.3.3.1 procps-3.3.15-lp152.3.3.1 procps-debuginfo-3.3.15-lp152.3.3.1 procps-debugsource-3.3.15-lp152.3.3.1 procps-devel-3.3.15-lp152.3.3.1 References: https://bugzilla.suse.com/1158830

1 0

openSUSE-RU-2020:1757-1: moderate: Recommended update for biosdevname
by maintenance＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Recommended Update: Recommended update for biosdevname ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1757-1 Rating: moderate References: #1174491 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for biosdevname fixes the following issues: - Read DMI info rom sysfs. (bsc#1174491) A kernel with Secure Boot lockdown may prohibit reading the contents of /dev/mem, hence biosdevname fails. The recent kernel provides the DMI byte contents in /sys/firmware/dmi/tables/*. - Add buffer read helper using read explicitly. mmap can't work well with a sysfs file and it's required to read the contents explicitly via read, even if USE_MMAP is enabled. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1757=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): biosdevname-0.7.3-lp152.6.3.1 biosdevname-debuginfo-0.7.3-lp152.6.3.1 biosdevname-debugsource-0.7.3-lp152.6.3.1 References: https://bugzilla.suse.com/1174491

1 0

openSUSE-RU-2020:1756-1: moderate: Recommended update for strawberry
by maintenance＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Recommended Update: Recommended update for strawberry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1756-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for strawberry fixes the following issues: Update to version 0.6.13: * Bugfixes: + Fixed cut-off text in about dialog. + Fixed increasing play count when stop after track is enabled. + Fixed showing/hiding playing widget when playback is started while window is hidden. + Fixed "Show in file browser" to also work on local songs that are not in the collection. + Fixed "Show in file browser" to work with PCManFM file manager. + Fixed audio analyzer to work with S24LE and F32LE audio formats. + Fixed playlist background image not loading. + Fixed a memory leak when switching between playlists. + Removed use of HTML in systemtray tooltip on KDE, since KDE no longer renders HTML in the systemtray. * Enhancements: + Replaced use of C style casts. + Adapted use of C++11 override. + Improved CMake build files. + Added new on startup options to show maximized or minimized. + Builtin TagLib code is updated and improved. + Made most icon sizes configurable in the settings, and increased default sizes for icons. + Improved fancy tabbar to use font sizes from the theme instead of fixed sizes. + Moving the currently playing song to the top when the playlist is manually shuffled. + Added "a taste of Strawbs" background image. + Fixed unit test for testing playlist model. + Added new unit tests for tagreader. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1756=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): strawberry-0.6.13-bp152.2.4.1 References:

1 0

openSUSE-RU-2020:1755-1: moderate: Recommended update for python-mailman
by maintenance＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Recommended Update: Recommended update for python-mailman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1755-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-mailman fixes the following issues: Mailman was updated to 3.3.1: * No obvious changelog Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1755=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): python-zope.interface-debuginfo-5.1.0-lp152.4.3.1 python-zope.interface-debugsource-5.1.0-lp152.4.3.1 python2-zope.interface-5.1.0-lp152.4.3.1 python2-zope.interface-debuginfo-5.1.0-lp152.4.3.1 python3-zope.interface-5.1.0-lp152.4.3.1 python3-zope.interface-debuginfo-5.1.0-lp152.4.3.1 - openSUSE Leap 15.2 (noarch): python3-mailman-3.3.1-lp152.2.5.1 References:

1 0

openSUSE-RU-2020:1759-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1759-1 Rating: moderate References: #1171806 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chrony fixes the following issues: - Integrate three upstream patches to fix an infinite loop in chronyc. (bsc#1171806) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1759=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): chrony-3.2-lp151.9.12.2 chrony-debuginfo-3.2-lp151.9.12.2 chrony-debugsource-3.2-lp151.9.12.2 - openSUSE Leap 15.1 (noarch): chrony-pool-empty-3.2-lp151.9.12.2 chrony-pool-openSUSE-3.2-lp151.9.12.2 chrony-pool-suse-3.2-lp151.9.12.2 References: https://bugzilla.suse.com/1171806

1 0

openSUSE-RU-2020:1760-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1760-1 Rating: moderate References: #1171806 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chrony fixes the following issues: - Integrate three upstream patches to fix an infinite loop in chronyc. (bsc#1171806) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1760=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): chrony-3.2-lp152.13.3.2 chrony-debuginfo-3.2-lp152.13.3.2 chrony-debugsource-3.2-lp152.13.3.2 - openSUSE Leap 15.2 (noarch): chrony-pool-empty-3.2-lp152.13.3.2 chrony-pool-openSUSE-3.2-lp152.13.3.2 chrony-pool-suse-3.2-lp152.13.3.2 References: https://bugzilla.suse.com/1171806

1 0

openSUSE-SU-2020:1754-1: moderate: Security update for kleopatra
by opensuse-security＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Security Update: Security update for kleopatra ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1754-1 Rating: moderate References: #1177932 Cross-References: CVE-2020-24972 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kleopatra fixes the following issues: - CVE-2020-24972: Add upstream patch to prevent potential arbitrary code execution (boo#1177932): This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1754=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): kleopatra-18.12.3-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (noarch): kleopatra-lang-18.12.3-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-24972.html https://bugzilla.suse.com/1177932

1 0

openSUSE-RU-2020:1753-1: moderate: Recommended update for trytond, trytond_account, trytond_account_invoice
by maintenance＠opensuse.org 28 Oct '20

28 Oct '20

openSUSE Recommended Update: Recommended update for trytond, trytond_account, trytond_account_invoice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1753-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for trytond, trytond_account, trytond_account_invoice fixes the following issues: Changes in trytond_account_invoice: - Version 5.0.10 - Bugfix Release Changes in trytond_account: - Version 5.0.15 - Bugfix Release Changes in trytond: - Version 5.0.28 - Bugfix Release - Version 5.0.27 - Bugfix Release This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1753=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): trytond_account_invoice-5.0.10-bp152.2.6.1 References:

1 0

openSUSE-SU-2020:1752-1: moderate: Recommended update for mailman
by opensuse-security＠opensuse.org 27 Oct '20

27 Oct '20

openSUSE Security Update: Recommended update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1752-1 Rating: moderate References: #1171363 #1173369 Cross-References: CVE-2020-12108 CVE-2020-12137 CVE-2020-15011 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for mailman to version 2.1.34 fixes the following issues: - The fix for lp#1859104 can result in ValueError being thrown on attempts to subscribe to a list. This is fixed and extended to apply REFUSE_SECOND_PENDING to unsubscription as well. (lp#1878458) - DMARC mitigation no longer misses if the domain name returned by DNS contains upper case. (lp#1881035) - A new WARN_MEMBER_OF_SUBSCRIBE setting can be set to No to prevent mailbombing of a member of a list with private rosters by repeated subscribe attempts. (lp#1883017) - Very long filenames for scrubbed attachments are now truncated. (lp#1884456) - A content injection vulnerability via the private login page has been fixed. CVE-2020-15011 (lp#1877379, bsc#1173369) - A content injection vulnerability via the options login page has been discovered and reported by Vishal Singh. CVE-2020-12108 (lp#1873722, bsc#1171363) - Bounce recognition for a non-compliant Yahoo format is added. - Archiving workaround for non-ascii in string.lowercase in some Python packages is added. - Thanks to Jim Popovitch, there is now a dmarc_moderation_addresses list setting that can be used to apply dmarc_moderation_action to mail From: addresses listed or matching listed regexps. This can be used to modify mail to addresses that don't accept external mail From: themselves. - There is a new MAX_LISTNAME_LENGTH setting. The fix for lp#1780874 obtains a list of the names of all the all the lists in the installation in order to determine the maximum length of a legitimate list name. It does this on every web access and on sites with a very large number of lists, this can have performance implications. See the description in Defaults.py for more information. - Thanks to Ralf Jung there is now the ability to add text based captchas (aka textchas) to the listinfo subscribe form. See the documentation for the new CAPTCHA setting in Defaults.py for how to enable this. Also note that if you have custom listinfo.html templates, you will have to add a <mm-captcha-ui> tag to those templates to make this work. This feature can be used in combination with or instead of the Google reCAPTCHA feature added in 2.1.26. - Thanks to Ralf Hildebrandt the web admin Membership Management section now has a feature to sync the list's membership with a list of email addresses as with the bin/sync_members command. - There is a new drop_cc list attribute set from DEFAULT_DROP_CC. This controls the dropping of addresses from the Cc: header in delivered messages by the duplicate avoidance process. (lp#1845751) - There is a new REFUSE_SECOND_PENDING mm_cfg.py setting that will cause a second request to subscribe to a list when there is already a pending confirmation for that user. This can be set to Yes to prevent mailbombing of a third party by repeatedly posting the subscribe form. (lp#1859104) - Fixed the confirm CGI to catch a rare TypeError on simultaneous confirmations of the same token. (lp#1785854) - Scrubbed application/octet-stream MIME parts will now be given a .bin extension instead of .obj. CVE-2020-12137 (lp#1886117) - Added bounce recognition for a non-compliant opensmtpd DSN with Action: error. (lp#1805137) - Corrected and augmented some security log messages. (lp#1810098) - Implemented use of QRUNNER_SLEEP_TIME for bin/qrunner --runner=All. (lp#1818205) - Leading/trailing spaces in provided email addresses for login to private archives and the user options page are now ignored. (lp#1818872) - Fixed the spelling of the --no-restart option for mailmanctl. - Fixed an issue where certain combinations of charset and invalid characters in a list's description could produce a List-ID header without angle brackets. (lp#1831321) - With the Postfix MTA and virtual domains, mappings for the site list -bounces and -request addresses in each virtual domain are now added to data/virtual-mailman (-owner was done in 2.1.24). (lp#1831777) - The paths.py module now extends sys.path with the result of site.getsitepackages() if available. (lp#1838866) - A bug causing a UnicodeDecodeError in preparing to send the confirmation request message to a new subscriber has been fixed. (lp#1851442) - The SimpleMatch heuristic bounce recognizer has been improved to not return most invalid email addresses. (lp#1859011) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1752=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): mailman-2.1.34-bp152.7.3.1 References: https://www.suse.com/security/cve/CVE-2020-12108.html https://www.suse.com/security/cve/CVE-2020-12137.html https://www.suse.com/security/cve/CVE-2020-15011.html https://bugzilla.suse.com/1171363 https://bugzilla.suse.com/1173369

1 0

openSUSE-RU-2020:1751-1: moderate: Recommended update for netcdf-fortran
by maintenance＠opensuse.org 27 Oct '20

27 Oct '20

openSUSE Recommended Update: Recommended update for netcdf-fortran ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1751-1 Rating: moderate References: #1173598 #1174177 #1174291 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for netcdf-fortran fixes the following issues: - The convention is to use the module name 'pnetcdf' for Parallel-NetCDF (called PnetCDF now). - Fix ldconfig args for HPC packages: no caching should be done as the libs are made available via LD_LIBRARY_PATH. - Add serial HPC build flavor. (bsc#1174177) - For loading serial module, run 'module load netcdf-fortran' for an MPI variant use 'module load pnetcdf-fortran'. - Gfortran from gcc-10 requires -std=legacy to build the Fortran code in netcdf-fortran. (bsc#1173598) This update for netcdf fixes the following issues: - Make environment module name conform standards: NetCDF modules should be called 'netcdf' - regardless whether they are 'serial' or use MPI. (bsc#1174291) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1751=1 Package List: - openSUSE Leap 15.1 (x86_64): libnetcdf-fortran-gnu-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran-gnu-mpich-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran-gnu-openmpi1-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran-gnu-openmpi2-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran-gnu-openmpi3-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-hpc-debuginfo-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-mpich-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-mpich-hpc-debuginfo-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-openmpi1-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-openmpi1-hpc-debuginfo-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-openmpi2-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-openmpi2-hpc-debuginfo-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-openmpi3-hpc-4.4.4-lp151.9.3.1 libnetcdf-fortran_4_4_4-gnu-openmpi3-hpc-debuginfo-4.4.4-lp151.9.3.1 libnetcdf-gnu-hpc-4.6.1-lp151.6.6.1 libnetcdf-gnu-mpich-hpc-4.6.1-lp151.6.6.1 libnetcdf-gnu-mvapich2-hpc-4.6.1-lp151.6.6.1 libnetcdf-gnu-openmpi1-hpc-4.6.1-lp151.6.6.1 libnetcdf-gnu-openmpi2-hpc-4.6.1-lp151.6.6.1 libnetcdf-gnu-openmpi3-hpc-4.6.1-lp151.6.6.1 libnetcdf13-4.6.1-lp151.6.6.1 libnetcdf13-debuginfo-4.6.1-lp151.6.6.1 libnetcdf13-openmpi-4.6.1-lp151.6.6.1 libnetcdf13-openmpi-debuginfo-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-hpc-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-hpc-debuginfo-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-mpich-hpc-debuginfo-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-mvapich2-hpc-debuginfo-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-openmpi1-hpc-debuginfo-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-openmpi2-hpc-debuginfo-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-openmpi3-hpc-4.6.1-lp151.6.6.1 libnetcdf_4_6_1-gnu-openmpi3-hpc-debuginfo-4.6.1-lp151.6.6.1 netcdf-4.6.1-lp151.6.6.1 netcdf-debuginfo-4.6.1-lp151.6.6.1 netcdf-devel-4.6.1-lp151.6.6.1 netcdf-devel-data-4.6.1-lp151.6.6.1 netcdf-devel-debuginfo-4.6.1-lp151.6.6.1 netcdf-devel-static-4.6.1-lp151.6.6.1 netcdf-fortran_4_4_4-gnu-hpc-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-hpc-debugsource-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-hpc-devel-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-hpc-devel-static-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-mpich-hpc-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-mpich-hpc-debugsource-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-mpich-hpc-devel-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-mpich-hpc-devel-static-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi1-hpc-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi1-hpc-debugsource-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi1-hpc-devel-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi1-hpc-devel-static-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi2-hpc-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi2-hpc-debugsource-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi2-hpc-devel-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi2-hpc-devel-static-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi3-hpc-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi3-hpc-debugsource-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi3-hpc-devel-4.4.4-lp151.9.3.1 netcdf-fortran_4_4_4-gnu-openmpi3-hpc-devel-static-4.4.4-lp151.9.3.1 netcdf-openmpi-4.6.1-lp151.6.6.1 netcdf-openmpi-debuginfo-4.6.1-lp151.6.6.1 netcdf-openmpi-devel-4.6.1-lp151.6.6.1 netcdf-openmpi-devel-data-4.6.1-lp151.6.6.1 netcdf-openmpi-devel-debuginfo-4.6.1-lp151.6.6.1 netcdf-openmpi-devel-static-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-hpc-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-hpc-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-hpc-devel-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-hpc-devel-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mpich-hpc-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mpich-hpc-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mpich-hpc-debugsource-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mpich-hpc-devel-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mvapich2-hpc-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mvapich2-hpc-debugsource-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mvapich2-hpc-devel-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi1-hpc-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi1-hpc-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi1-hpc-devel-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi1-hpc-devel-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi1-hpc-devel-static-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi2-hpc-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi2-hpc-devel-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi3-hpc-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi3-hpc-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi3-hpc-devel-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi3-hpc-devel-debuginfo-4.6.1-lp151.6.6.1 netcdf_4_6_1-gnu-openmpi3-hpc-devel-static-4.6.1-lp151.6.6.1 - openSUSE Leap 15.1 (noarch): netcdf-fortran-gnu-hpc-4.4.4-lp151.9.3.1 netcdf-fortran-gnu-hpc-devel-4.4.4-lp151.9.3.1 netcdf-fortran-gnu-mpich-hpc-4.4.4-lp151.9.3.1 netcdf-fortran-gnu-mpich-hpc-devel-4.4.4-lp151.9.3.1 netcdf-fortran-gnu-openmpi1-hpc-4.4.4-lp151.9.3.1 netcdf-fortran-gnu-openmpi1-hpc-devel-4.4.4-lp151.9.3.1 netcdf-fortran-gnu-openmpi2-hpc-4.4.4-lp151.9.3.1 netcdf-fortran-gnu-openmpi2-hpc-devel-4.4.4-lp151.9.3.1 netcdf-fortran-gnu-openmpi3-hpc-4.4.4-lp151.9.3.1 netcdf-fortran-gnu-openmpi3-hpc-devel-4.4.4-lp151.9.3.1 netcdf-gnu-hpc-4.6.1-lp151.6.6.1 netcdf-gnu-hpc-devel-4.6.1-lp151.6.6.1 netcdf-gnu-mpich-hpc-4.6.1-lp151.6.6.1 netcdf-gnu-mpich-hpc-devel-4.6.1-lp151.6.6.1 netcdf-gnu-mvapich2-hpc-4.6.1-lp151.6.6.1 netcdf-gnu-mvapich2-hpc-devel-4.6.1-lp151.6.6.1 netcdf-gnu-openmpi1-hpc-4.6.1-lp151.6.6.1 netcdf-gnu-openmpi1-hpc-devel-4.6.1-lp151.6.6.1 netcdf-gnu-openmpi2-hpc-4.6.1-lp151.6.6.1 netcdf-gnu-openmpi2-hpc-devel-4.6.1-lp151.6.6.1 netcdf-gnu-openmpi3-hpc-4.6.1-lp151.6.6.1 netcdf-gnu-openmpi3-hpc-devel-4.6.1-lp151.6.6.1 References: https://bugzilla.suse.com/1173598 https://bugzilla.suse.com/1174177 https://bugzilla.suse.com/1174291

1 0

openSUSE-OU-2020:1750-1: moderate: Optional update for the Public Cloud Module
by maintenance＠opensuse.org 27 Oct '20

27 Oct '20

openSUSE Optional Update: Optional update for the Public Cloud Module ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:1750-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds the Google Cloud Storage packages to the Public Cloud module (jsc#ECO-2398). The following packages were included: - python3-grpcio - python3-protobuf - python3-google-api-core - python3-google-cloud-core - python3-google-cloud-storage - python3-google-resumable-media - python3-googleapis-common-protos - python3-grpcio-gcp - python3-mock (updated to version 3.0.5) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1750=1 Package List: - openSUSE Leap 15.2 (noarch): python2-mock-3.0.5-lp152.6.3.1 python3-mock-3.0.5-lp152.6.3.1 References:

1 0

openSUSE-RU-2020:1749-1: moderate: Recommended update for torbrowser-launcher
by maintenance＠opensuse.org 27 Oct '20

27 Oct '20

openSUSE Recommended Update: Recommended update for torbrowser-launcher ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1749-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for torbrowser-launcher fixes the following issues: torbrowser-launcher was updated to version 0.3.3: * Switch to Web Key Directory to refresh signing key from torproject.org, because everything is broken. * Use proper version comparison now that Tor Browser 10.0 is out. * Fix DNS leak when downloading over Tor. * Various bug fixes, as well as AppData and AppArmor fixes. - New Requires: xmessage: one of zenity, kdialog, or xmessage is required and we choose xmessage as a minimal requirement in case neither of the first two are installed in the system already. - Update Tor Browser public key from upstream (again). This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1749=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): torbrowser-apparmor-profile-0.3.3-bp152.4.6.1 torbrowser-launcher-0.3.3-bp152.4.6.1 torbrowser-launcher-lang-0.3.3-bp152.4.6.1 References:

1 0

openSUSE-SU-2020:1748-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 27 Oct '20

27 Oct '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1748-1 Rating: important References: #1176756 #1177872 Cross-References: CVE-2020-15683 CVE-2020-15969 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.4.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2020-46 (bsc#1177872, bsc#1176756) * CVE-2020-15969 Use-after-free in usersctp * CVE-2020-15683 Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 * Fixed: Fixed legacy preferences not being properly applied when set via GPO This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1748=1 Package List: - openSUSE Leap 15.2 (x86_64): MozillaFirefox-78.4.0-lp152.2.24.1 MozillaFirefox-branding-upstream-78.4.0-lp152.2.24.1 MozillaFirefox-buildsymbols-78.4.0-lp152.2.24.1 MozillaFirefox-debuginfo-78.4.0-lp152.2.24.1 MozillaFirefox-debugsource-78.4.0-lp152.2.24.1 MozillaFirefox-devel-78.4.0-lp152.2.24.1 MozillaFirefox-translations-common-78.4.0-lp152.2.24.1 MozillaFirefox-translations-other-78.4.0-lp152.2.24.1 References: https://www.suse.com/security/cve/CVE-2020-15683.html https://www.suse.com/security/cve/CVE-2020-15969.html https://bugzilla.suse.com/1176756 https://bugzilla.suse.com/1177872

1 0

openSUSE-OU-2020:1747-1: moderate: Optional update for the Public Cloud Module
by maintenance＠opensuse.org 26 Oct '20

26 Oct '20

openSUSE Optional Update: Optional update for the Public Cloud Module ______________________________________________________________________________ Announcement ID: openSUSE-OU-2020:1747-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds the Google Cloud Storage packages to the Public Cloud module (jsc#ECO-2398). The following packages were included: - python3-grpcio - python3-protobuf - python3-google-api-core - python3-google-cloud-core - python3-google-cloud-storage - python3-google-resumable-media - python3-googleapis-common-protos - python3-grpcio-gcp - python3-mock (updated to version 3.0.5) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1747=1 Package List: - openSUSE Leap 15.1 (noarch): python2-mock-3.0.5-lp151.5.3.1 python3-mock-3.0.5-lp151.5.3.1 References:

1 0

openSUSE-RU-2020:1746-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 26 Oct '20

26 Oct '20

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1746-1 Rating: moderate References: #1174385 #1174588 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for crmsh fixes the following issues: WILL BE EDITED. - Update to version 4.2.0+git.1602225426.5f84efb5: * Upgrade crmsh version to 4.2.0(jsc#ECO-1745) * Low: bootstrap: Improve qdevice configure process - More reasonable naming for variables - More function docstrings - Move function to more reasonable location - Create functions to integrate similar functions inside one - Change big function to small one, more easier for unit test * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588) * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385) * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status * Low: corosync: Improve qdevice configure process * Dev: ui_cluster: replace --qdevice as --qnetd-hostname * Dev: ui_cluster: change qdevice related option's help message * Dev: bootstrap: support qdevice heuristics * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration * Dev: ui_corosync: improve corosync status sub-command * Dev: bootstrap: when removing qdevice, remove qdevice database * Dev: bootstrap: qdevice certification process when cluster join * Dev: ui_cluster: change option info for qdevice/qnetd * Dev: bootstrap: qdevice certification process when cluster init * Dev: bootstrap: interface for removing qdevice * Dev: corosync: check tie-breaker is a valid nodeid * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr * Dev: bootstrap: improve init_qdevice function * Dev: bootstrap: write qdevice config section when configuring qdevice in stage * dev: bootstrap: adjust corosync configuration for qdevice * dev: bootstrap: make qdevice process as a bootstrap stage * dev: bootstrap: manage qnetd node * dev: bootstrap: valid qdevice parameters This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1746=1 Package List: - openSUSE Leap 15.1 (noarch): crmsh-4.2.0+git.1602225426.5f84efb5-lp151.2.36.1 crmsh-scripts-4.2.0+git.1602225426.5f84efb5-lp151.2.36.1 crmsh-test-4.2.0+git.1602225426.5f84efb5-lp151.2.36.1 References: https://bugzilla.suse.com/1174385 https://bugzilla.suse.com/1174588

1 0

openSUSE-SU-2020:1744-1: important: Security update for freetype2
by opensuse-security＠opensuse.org 26 Oct '20

26 Oct '20

openSUSE Security Update: Security update for freetype2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1744-1 Rating: important References: #1177914 Cross-References: CVE-2020-15999 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for freetype2 fixes the following issues: - CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps (bsc#1177914). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1744=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): freetype2-debugsource-2.10.1-lp152.2.5.1 freetype2-devel-2.10.1-lp152.2.5.1 ft2demos-2.10.1-lp152.2.5.1 ftbench-2.10.1-lp152.2.5.1 ftdiff-2.10.1-lp152.2.5.1 ftdump-2.10.1-lp152.2.5.1 ftgamma-2.10.1-lp152.2.5.1 ftgrid-2.10.1-lp152.2.5.1 ftinspect-2.10.1-lp152.2.5.1 ftlint-2.10.1-lp152.2.5.1 ftmulti-2.10.1-lp152.2.5.1 ftstring-2.10.1-lp152.2.5.1 ftvalid-2.10.1-lp152.2.5.1 ftview-2.10.1-lp152.2.5.1 libfreetype6-2.10.1-lp152.2.5.1 libfreetype6-debuginfo-2.10.1-lp152.2.5.1 - openSUSE Leap 15.2 (noarch): freetype2-profile-tti35-2.10.1-lp152.2.5.1 - openSUSE Leap 15.2 (x86_64): freetype2-devel-32bit-2.10.1-lp152.2.5.1 libfreetype6-32bit-2.10.1-lp152.2.5.1 libfreetype6-32bit-debuginfo-2.10.1-lp152.2.5.1 References: https://www.suse.com/security/cve/CVE-2020-15999.html https://bugzilla.suse.com/1177914

1 0

openSUSE-RU-2020:1745-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 26 Oct '20

26 Oct '20

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1745-1 Rating: moderate References: #1173915 #1176820 #1177025 #1177191 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Fixes an issue when initializing the bridge STP configuration. (bsc#1176820) - Write hostname changes when modified through the 'dns' client. (bsc#1177191) - Do not crash when there are more than one parsing hostnames obtained by wicked through DHCP. (bsc#1173915) - Write the virtualization network configuration properly during an autoinstallation. (bsc#1177025) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1745=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-network-4.2.82-lp152.2.12.1 References: https://bugzilla.suse.com/1173915 https://bugzilla.suse.com/1176820 https://bugzilla.suse.com/1177025 https://bugzilla.suse.com/1177191

1 0