October 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:1743-1: moderate: Security update for gnutls
by opensuse-security＠opensuse.org 26 Oct '20

26 Oct '20

openSUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1743-1 Rating: moderate References: #1176086 #1176181 #1176671 Cross-References: CVE-2020-24659 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gnutls fixes the following issues: - Fix heap buffer overflow in handshake with no_renegotiation alert sent (CVE-2020-24659 bsc#1176181) - FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086) - FIPS: Use 2048 bit prime in DH selftest (bsc#1176086) - FIPS: Add TLS KDF selftest (bsc#1176671) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1743=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gnutls-3.6.7-lp152.9.3.2 gnutls-debuginfo-3.6.7-lp152.9.3.2 gnutls-debugsource-3.6.7-lp152.9.3.2 gnutls-guile-3.6.7-lp152.9.3.2 gnutls-guile-debuginfo-3.6.7-lp152.9.3.2 libgnutls-dane-devel-3.6.7-lp152.9.3.2 libgnutls-dane0-3.6.7-lp152.9.3.2 libgnutls-dane0-debuginfo-3.6.7-lp152.9.3.2 libgnutls-devel-3.6.7-lp152.9.3.2 libgnutls30-3.6.7-lp152.9.3.2 libgnutls30-debuginfo-3.6.7-lp152.9.3.2 libgnutls30-hmac-3.6.7-lp152.9.3.2 libgnutlsxx-devel-3.6.7-lp152.9.3.2 libgnutlsxx28-3.6.7-lp152.9.3.2 libgnutlsxx28-debuginfo-3.6.7-lp152.9.3.2 - openSUSE Leap 15.2 (x86_64): libgnutls-devel-32bit-3.6.7-lp152.9.3.2 libgnutls30-32bit-3.6.7-lp152.9.3.2 libgnutls30-32bit-debuginfo-3.6.7-lp152.9.3.2 libgnutls30-hmac-32bit-3.6.7-lp152.9.3.2 References: https://www.suse.com/security/cve/CVE-2020-24659.html https://bugzilla.suse.com/1176086 https://bugzilla.suse.com/1176181 https://bugzilla.suse.com/1176671

1 0

openSUSE-RU-2020:1741-1: moderate: Recommended update for tboot
by maintenance＠opensuse.org 26 Oct '20

26 Oct '20

openSUSE Recommended Update: Recommended update for tboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1741-1 Rating: moderate References: #1176378 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tboot fixes the following issues: - Fix for 'tboot' issues on platform coming with preloaded 'SINIT' modules with padding. (bsc#1176378) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1741=1 Package List: - openSUSE Leap 15.2 (x86_64): tboot-20170711_1.9.8-lp152.5.3.1 tboot-debuginfo-20170711_1.9.8-lp152.5.3.1 tboot-debugsource-20170711_1.9.8-lp152.5.3.1 References: https://bugzilla.suse.com/1176378

1 0

openSUSE-RU-2020:1742-1: moderate: Recommended update for prometheus-hanadb_exporter
by maintenance＠opensuse.org 26 Oct '20

26 Oct '20

openSUSE Recommended Update: Recommended update for prometheus-hanadb_exporter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1742-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for prometheus-hanadb_exporter fixes the following issue: Release 0.7.2 - lookup for `/usr/etc` and the fallback `/etc` directory for config files. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1742=1 Package List: - openSUSE Leap 15.2 (noarch): prometheus-hanadb_exporter-0.7.2+git.1600770990.726a4fe-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1740-1: moderate: Recommended update for habootstrap-formula, saphanabootstrap-formula, sapnwbootstrap-formula
by maintenance＠opensuse.org 26 Oct '20

26 Oct '20

openSUSE Recommended Update: Recommended update for habootstrap-formula, saphanabootstrap-formula, sapnwbootstrap-formula ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1740-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for habootstrap-formula, saphanabootstrap-formula, sapnwbootstrap-formula fixes the following issues: saphanabootstrap-formula: - Version 0.6.2: - Update the package version after SUMA form update and extraction logic update (jsc#SLE-4047) - Fix the hana media extraction and installation logics when using exe archives - Update the SUMA hana form metadata, to show hana form under SAP deployment group - Update SUMA form.yml file and prevalidation state with latest changes in formula - Change the default 'hana_extract_dir' hana media extraction location - Remove copy of config files for exporters since we use /usr/etc habootstrap-formula: - Version 0.3.11 - Update the prevalidation logic to check for valid sbd entries (jsc#SLE-4047) - Improve Formula with form description (jsc#SLE-4047) - Update the SUMA form.yml file and prevalidation state with latest changes in project sapnwbootstrap-formula: - Version 0.5.2 - Create SUMA form based on latest pillar and formula data (jsc#SLE-4047) - Implement the differences between ENSA1 and ENSA2 versions - Add the keepalive configuration changes This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1740=1 Package List: - openSUSE Leap 15.2 (noarch): habootstrap-formula-0.3.11+git.1602831614.0f63599-lp152.2.6.1 saphanabootstrap-formula-0.6.2+git.1602608396.b2b12f7-lp152.2.6.1 sapnwbootstrap-formula-0.5.2+git.1602610350.43801ea-lp152.2.6.1 References:

1 0

openSUSE-RU-2020:1739-1: important: Recommended update for phpMyAdmin
by maintenance＠opensuse.org 26 Oct '20

26 Oct '20

openSUSE Recommended Update: Recommended update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1739-1 Rating: important References: #1177842 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for phpMyAdmin fixes the following issues: phpMyAdmin 4.9.7 (boo#1177842): * Fix two factor authentication that was broken in 4.9.6 * Fix incompatibilities with older PHP versions This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1739=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): phpMyAdmin-4.9.7-bp152.2.6.1 References: https://bugzilla.suse.com/1177842

1 0

openSUSE-RU-2020:1738-1: important: Recommended update for phpMyAdmin
by maintenance＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Recommended Update: Recommended update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1738-1 Rating: important References: #1177842 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for phpMyAdmin fixes the following issues: phpMyAdmin 4.9.7 (boo#1177842): * Fix two factor authentication that was broken in 4.9.6 * Fix incompatibilities with older PHP versions This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1738=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): phpMyAdmin-4.9.7-bp151.3.21.1 References: https://bugzilla.suse.com/1177842

1 0

openSUSE-SU-2020:1737-1: important: Security update for chromium
by opensuse-security＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1737-1 Rating: important References: #1177936 Cross-References: CVE-2020-15999 CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-16003 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 86.0.4240.111 boo#1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap buffer overflow in Freetype. - CVE-2020-16003: Use after free in printing. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1737=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-86.0.4240.111-lp152.2.42.1 chromedriver-debuginfo-86.0.4240.111-lp152.2.42.1 chromium-86.0.4240.111-lp152.2.42.1 chromium-debuginfo-86.0.4240.111-lp152.2.42.1 References: https://www.suse.com/security/cve/CVE-2020-15999.html https://www.suse.com/security/cve/CVE-2020-16000.html https://www.suse.com/security/cve/CVE-2020-16001.html https://www.suse.com/security/cve/CVE-2020-16002.html https://www.suse.com/security/cve/CVE-2020-16003.html https://bugzilla.suse.com/1177936

1 0

openSUSE-RU-2020:1735-1: moderate: Recommended update for gettext-runtime
by maintenance＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Recommended Update: Recommended update for gettext-runtime ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1735-1 Rating: moderate References: #1176142 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gettext-runtime fixes the following issues: - Fix for an issue when 'xgettext' crashes during creating a 'POT' file. (bsc#1176142) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1735=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gettext-runtime-0.19.8.1-lp151.5.7.1 gettext-runtime-debuginfo-0.19.8.1-lp151.5.7.1 gettext-runtime-debugsource-0.19.8.1-lp151.5.7.1 gettext-runtime-mini-0.19.8.1-lp151.5.7.1 gettext-runtime-mini-debuginfo-0.19.8.1-lp151.5.7.1 gettext-runtime-mini-debugsource-0.19.8.1-lp151.5.7.1 gettext-tools-0.19.8.1-lp151.5.7.1 gettext-tools-debuginfo-0.19.8.1-lp151.5.7.1 gettext-tools-mini-0.19.8.1-lp151.5.7.1 gettext-tools-mini-debuginfo-0.19.8.1-lp151.5.7.1 - openSUSE Leap 15.1 (noarch): gettext-runtime-mini-tools-doc-0.19.8.1-lp151.5.7.1 gettext-runtime-tools-doc-0.19.8.1-lp151.5.7.1 - openSUSE Leap 15.1 (x86_64): gettext-csharp-0.19.8.1-lp151.5.7.1 gettext-java-0.19.8.1-lp151.5.7.1 gettext-runtime-32bit-0.19.8.1-lp151.5.7.1 gettext-runtime-32bit-debuginfo-0.19.8.1-lp151.5.7.1 References: https://bugzilla.suse.com/1176142

1 0

openSUSE-SU-2020:1736-1: important: Security update for atftp
by opensuse-security＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Security Update: Security update for atftp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1736-1 Rating: important References: #1176437 Cross-References: CVE-2020-6097 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for atftp fixes the following issues: - [boo#1176437, CVE-2020-6097] A specially crafted sequence of RRQ-Multicast requests can trigger an assert() call resulting denial-of-service. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1736=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): atftp-0.7.2-lp152.2.3.1 atftp-debuginfo-0.7.2-lp152.2.3.1 atftp-debugsource-0.7.2-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-6097.html https://bugzilla.suse.com/1176437

1 0

openSUSE-SU-2020:1732-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1732-1 Rating: important References: #1176756 #1177872 Cross-References: CVE-2020-15683 CVE-2020-15969 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.4.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2020-46 (bsc#1177872, bsc#1176756) * CVE-2020-15969 Use-after-free in usersctp * CVE-2020-15683 Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 * Fixed: Fixed legacy preferences not being properly applied when set via GPO This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1732=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-78.4.0-lp151.2.73.1 MozillaFirefox-branding-upstream-78.4.0-lp151.2.73.1 MozillaFirefox-buildsymbols-78.4.0-lp151.2.73.1 MozillaFirefox-debuginfo-78.4.0-lp151.2.73.1 MozillaFirefox-debugsource-78.4.0-lp151.2.73.1 MozillaFirefox-devel-78.4.0-lp151.2.73.1 MozillaFirefox-translations-common-78.4.0-lp151.2.73.1 MozillaFirefox-translations-other-78.4.0-lp151.2.73.1 References: https://www.suse.com/security/cve/CVE-2020-15683.html https://www.suse.com/security/cve/CVE-2020-15969.html https://bugzilla.suse.com/1176756 https://bugzilla.suse.com/1177872

1 0

openSUSE-SU-2020:1734-1: important: Security update for freetype2
by opensuse-security＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Security Update: Security update for freetype2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1734-1 Rating: important References: #1177914 Cross-References: CVE-2020-15999 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for freetype2 fixes the following issues: - CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps (bsc#1177914). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1734=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): freetype2-debugsource-2.10.1-lp151.4.6.1 freetype2-devel-2.10.1-lp151.4.6.1 libfreetype6-2.10.1-lp151.4.6.1 libfreetype6-debuginfo-2.10.1-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): freetype2-devel-32bit-2.10.1-lp151.4.6.1 ft2demos-2.10.1-lp151.4.6.1 ftbench-2.10.1-lp151.4.6.1 ftdiff-2.10.1-lp151.4.6.1 ftdump-2.10.1-lp151.4.6.1 ftgamma-2.10.1-lp151.4.6.1 ftgrid-2.10.1-lp151.4.6.1 ftinspect-2.10.1-lp151.4.6.1 ftlint-2.10.1-lp151.4.6.1 ftmulti-2.10.1-lp151.4.6.1 ftstring-2.10.1-lp151.4.6.1 ftvalid-2.10.1-lp151.4.6.1 ftview-2.10.1-lp151.4.6.1 libfreetype6-32bit-2.10.1-lp151.4.6.1 libfreetype6-32bit-debuginfo-2.10.1-lp151.4.6.1 - openSUSE Leap 15.1 (noarch): freetype2-profile-tti35-2.10.1-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2020-15999.html https://bugzilla.suse.com/1177914

1 0

openSUSE-SU-2020:1731-1: important: Security update for chromium
by opensuse-security＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1731-1 Rating: important References: #1177936 Cross-References: CVE-2020-15999 CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-16003 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 86.0.4240.111 boo#1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap buffer overflow in Freetype. - CVE-2020-16003: Use after free in printing. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1731=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-86.0.4240.111-bp151.3.116.1 chromium-86.0.4240.111-bp151.3.116.1 References: https://www.suse.com/security/cve/CVE-2020-15999.html https://www.suse.com/security/cve/CVE-2020-16000.html https://www.suse.com/security/cve/CVE-2020-16001.html https://www.suse.com/security/cve/CVE-2020-16002.html https://www.suse.com/security/cve/CVE-2020-16003.html https://bugzilla.suse.com/1177936

1 0

openSUSE-RU-2020:1733-1: Recommended update for apache2
by maintenance＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1733-1 Rating: low References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for apache2 fixes the following issues: - Added -a argument to 'gensslcert' to allow to override the default SAN value This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1733=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-2.4.33-lp151.8.18.1 apache2-debuginfo-2.4.33-lp151.8.18.1 apache2-debugsource-2.4.33-lp151.8.18.1 apache2-devel-2.4.33-lp151.8.18.1 apache2-event-2.4.33-lp151.8.18.1 apache2-event-debuginfo-2.4.33-lp151.8.18.1 apache2-example-pages-2.4.33-lp151.8.18.1 apache2-prefork-2.4.33-lp151.8.18.1 apache2-prefork-debuginfo-2.4.33-lp151.8.18.1 apache2-utils-2.4.33-lp151.8.18.1 apache2-utils-debuginfo-2.4.33-lp151.8.18.1 apache2-worker-2.4.33-lp151.8.18.1 apache2-worker-debuginfo-2.4.33-lp151.8.18.1 - openSUSE Leap 15.1 (noarch): apache2-doc-2.4.33-lp151.8.18.1 References:

1 0

openSUSE-RU-2020:1730-1: moderate: Recommended update for vlc
by maintenance＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Recommended Update: Recommended update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1730-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for vlc fixes the following issues: vlc was updated to 3.0.11.1: * Fixed HLS playlist update mechanism, unable to start in some cases. * Because of broken HLS servers, adaptive no longer considers Content-Type as authoritative. * Fixed handling of WEBM WebVTT subtitles * Workaround invalid ADTS in TS from Makito encoders * Fixed Opus when using avformat demuxer * Fixed inverted explicit start/end positioning * Fix listing of media on certain Panasonic recorders discovered via UPnP Update to version 3.0.11: + Access: rtp descriptor leak on error fix. + Demux: * Fixed regression with some encrypted HLS streams. * Live HLS delay until first update fix. * HLS rendition switch regression fix. * Fix imprecise m4a seek. + Decoder: Fixed missing captions with some capture cards. + Audio filters: soxr resampling fixes. + Audio Output: Fix sound not coming back after a pause with CoreAudio (macOS/iOS). + Misc: Update Youtube script. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1730=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): libvlc5-3.0.11.1-bp152.2.6.1 libvlccore9-3.0.11.1-bp152.2.6.1 vlc-3.0.11.1-bp152.2.6.1 vlc-codec-gstreamer-3.0.11.1-bp152.2.6.1 vlc-devel-3.0.11.1-bp152.2.6.1 vlc-jack-3.0.11.1-bp152.2.6.1 vlc-noX-3.0.11.1-bp152.2.6.1 vlc-opencv-3.0.11.1-bp152.2.6.1 vlc-qt-3.0.11.1-bp152.2.6.1 vlc-vdpau-3.0.11.1-bp152.2.6.1 - openSUSE Backports SLE-15-SP2 (noarch): vlc-lang-3.0.11.1-bp152.2.6.1 References:

1 0

openSUSE-RU-2020:1728-1: moderate: Recommended update for file
by maintenance＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Recommended Update: Recommended update for file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1728-1 Rating: moderate References: #1176123 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for file fixes the following issues: - Fixes an issue when file displays broken 'ELF' interpreter. (bsc#1176123) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1728=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): file-5.32-lp151.8.6.1 file-debuginfo-5.32-lp151.8.6.1 file-debugsource-5.32-lp151.8.6.1 file-devel-5.32-lp151.8.6.1 libmagic1-5.32-lp151.8.6.1 libmagic1-debuginfo-5.32-lp151.8.6.1 python2-magic-5.32-lp151.8.6.1 python3-magic-5.32-lp151.8.6.1 - openSUSE Leap 15.1 (noarch): file-magic-5.32-lp151.8.6.1 - openSUSE Leap 15.1 (x86_64): file-devel-32bit-5.32-lp151.8.6.1 libmagic1-32bit-5.32-lp151.8.6.1 libmagic1-32bit-debuginfo-5.32-lp151.8.6.1 References: https://bugzilla.suse.com/1176123

1 0

openSUSE-RU-2020:1729-1: moderate: Recommended update for file
by maintenance＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Recommended Update: Recommended update for file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1729-1 Rating: moderate References: #1176123 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for file fixes the following issues: - Fixes an issue when file displays broken 'ELF' interpreter. (bsc#1176123) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1729=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): file-5.32-lp152.10.3.1 file-debuginfo-5.32-lp152.10.3.1 file-debugsource-5.32-lp152.10.3.1 file-devel-5.32-lp152.10.3.1 libmagic1-5.32-lp152.10.3.1 libmagic1-debuginfo-5.32-lp152.10.3.1 python2-magic-5.32-lp152.10.3.1 python3-magic-5.32-lp152.10.3.1 - openSUSE Leap 15.2 (x86_64): file-devel-32bit-5.32-lp152.10.3.1 libmagic1-32bit-5.32-lp152.10.3.1 libmagic1-32bit-debuginfo-5.32-lp152.10.3.1 - openSUSE Leap 15.2 (noarch): file-magic-5.32-lp152.10.3.1 References: https://bugzilla.suse.com/1176123

1 0

openSUSE-RU-2020:1727-1: moderate: Recommended update for procps
by maintenance＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1727-1 Rating: moderate References: #1158830 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for procps fixes the following issues: - Fixes an issue when command 'ps -C' does not allow anymore an argument longer than 15 characters. (bsc#1158830) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1727=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libprocps7-3.3.15-lp151.6.9.1 libprocps7-debuginfo-3.3.15-lp151.6.9.1 procps-3.3.15-lp151.6.9.1 procps-debuginfo-3.3.15-lp151.6.9.1 procps-debugsource-3.3.15-lp151.6.9.1 procps-devel-3.3.15-lp151.6.9.1 References: https://bugzilla.suse.com/1158830

1 0

openSUSE-RU-2020:1725-1: moderate: Recommended update for prometheus-ha_cluster_exporter
by maintenance＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Recommended Update: Recommended update for prometheus-ha_cluster_exporter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1725-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for prometheus-ha_cluster_exporter fixes the following issues: - Implement SBD watchdog and msgwait timeout metrics. - Handle correctly corosync membership parsing with qdevice enabled. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1725=1 Package List: - openSUSE Leap 15.2 (x86_64): prometheus-ha_cluster_exporter-1.2.0+git.1599131770.8912739-lp152.2.6.1 References:

1 0

openSUSE-RU-2020:1726-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1726-1 Rating: moderate References: #1174969 #1175052 #1175851 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Suppress 'ENXIO' when processing all namespaces. (jsc#SLE-13321, bsc#1175851, ltc#187867) - Update to v69. (jsc#SLE-13824, jsc#SLE-12770, jsc#SLE-15065, jsc#SLE-15484, jsc#SLE-15485, bsc#1175052, ltc#186863, bsc#1174969, ltc#185845): - Set the default alignment to the platform alignment. - Add support for reporting 'life_used_percentage' metric. - Skip region filtering if numa_node attribute is not present. - Implement support for 'PAPR_PDSM_HEALTH'. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1726=1 Package List: - openSUSE Leap 15.2 (x86_64): libndctl-devel-69-lp152.7.9.1 libndctl6-69-lp152.7.9.1 libndctl6-debuginfo-69-lp152.7.9.1 ndctl-69-lp152.7.9.1 ndctl-debuginfo-69-lp152.7.9.1 ndctl-debugsource-69-lp152.7.9.1 References: https://bugzilla.suse.com/1174969 https://bugzilla.suse.com/1175052 https://bugzilla.suse.com/1175851

1 0

openSUSE-SU-2020:1724-1: moderate: Security update for gnutls
by opensuse-security＠opensuse.org 25 Oct '20

25 Oct '20

openSUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1724-1 Rating: moderate References: #1176086 #1176181 #1176671 Cross-References: CVE-2020-24659 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for gnutls fixes the following issues: - Fix heap buffer overflow in handshake with no_renegotiation alert sent (CVE-2020-24659 bsc#1176181) - FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086) - FIPS: Use 2048 bit prime in DH selftest (bsc#1176086) - FIPS: Add TLS KDF selftest (bsc#1176671) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1724=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): gnutls-3.6.7-lp151.2.21.1 gnutls-debuginfo-3.6.7-lp151.2.21.1 gnutls-debugsource-3.6.7-lp151.2.21.1 gnutls-guile-3.6.7-lp151.2.21.1 gnutls-guile-debuginfo-3.6.7-lp151.2.21.1 libgnutls-dane-devel-3.6.7-lp151.2.21.1 libgnutls-dane0-3.6.7-lp151.2.21.1 libgnutls-dane0-debuginfo-3.6.7-lp151.2.21.1 libgnutls-devel-3.6.7-lp151.2.21.1 libgnutls30-3.6.7-lp151.2.21.1 libgnutls30-debuginfo-3.6.7-lp151.2.21.1 libgnutls30-hmac-3.6.7-lp151.2.21.1 libgnutlsxx-devel-3.6.7-lp151.2.21.1 libgnutlsxx28-3.6.7-lp151.2.21.1 libgnutlsxx28-debuginfo-3.6.7-lp151.2.21.1 - openSUSE Leap 15.1 (x86_64): libgnutls-devel-32bit-3.6.7-lp151.2.21.1 libgnutls30-32bit-3.6.7-lp151.2.21.1 libgnutls30-32bit-debuginfo-3.6.7-lp151.2.21.1 libgnutls30-hmac-32bit-3.6.7-lp151.2.21.1 References: https://www.suse.com/security/cve/CVE-2020-24659.html https://bugzilla.suse.com/1176086 https://bugzilla.suse.com/1176181 https://bugzilla.suse.com/1176671

1 0

openSUSE-RU-2020:1722-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1722-1 Rating: moderate References: #1174969 #1175052 #1175851 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Suppress 'ENXIO' when processing all namespaces. (jsc#SLE-13321, bsc#1175851, ltc#187867) - Update to v69. (jsc#SLE-13824, jsc#SLE-12770, jsc#SLE-15065, jsc#SLE-15484, jsc#SLE-15485, bsc#1175052, ltc#186863, bsc#1174969, ltc#185845): - Set the default alignment to the platform alignment. - Add support for reporting 'life_used_percentage' metric. - Skip region filtering if numa_node attribute is not present. - Implement support for 'PAPR_PDSM_HEALTH'. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1722=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-69-lp151.2.25.1 libndctl6-69-lp151.2.25.1 libndctl6-debuginfo-69-lp151.2.25.1 ndctl-69-lp151.2.25.1 ndctl-debuginfo-69-lp151.2.25.1 ndctl-debugsource-69-lp151.2.25.1 References: https://bugzilla.suse.com/1174969 https://bugzilla.suse.com/1175052 https://bugzilla.suse.com/1175851

1 0

openSUSE-SU-2020:1723-1: moderate: Security update for kleopatra
by opensuse-security＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Security Update: Security update for kleopatra ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1723-1 Rating: moderate References: #1177932 Cross-References: CVE-2020-24972 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kleopatra fixes the following issues: - CVE-2020-24972: Add upstream patch to prevent potential arbitrary code execution (boo#1177932): Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1723=1 Package List: - openSUSE Leap 15.1 (noarch): kleopatra-lang-18.12.3-lp151.2.4.1 - openSUSE Leap 15.1 (x86_64): kleopatra-18.12.3-lp151.2.4.1 kleopatra-debuginfo-18.12.3-lp151.2.4.1 kleopatra-debugsource-18.12.3-lp151.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-24972.html https://bugzilla.suse.com/1177932

1 0

openSUSE-RU-2020:1721-1: moderate: Recommended update for trytond, trytond_account, trytond_account_invoice
by maintenance＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Recommended Update: Recommended update for trytond, trytond_account, trytond_account_invoice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1721-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for trytond, trytond_account, trytond_account_invoice fixes the following issues: Changes in trytond_account_invoice: - Version 5.0.10 - Bugfix Release Changes in trytond_account: - Version 5.0.15 - Bugfix Release Changes in trytond: - Version 5.0.28 - Bugfix Release - Version 5.0.27 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1721=1 Package List: - openSUSE Leap 15.2 (noarch): trytond-5.0.28-lp152.2.8.1 trytond_account-5.0.15-lp152.2.6.1 trytond_account_invoice-5.0.10-lp152.2.6.1 References:

1 0

openSUSE-RU-2020:1720-1: moderate: Recommended update for libdfp
by maintenance＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Recommended Update: Recommended update for libdfp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1720-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for libdfp fixes the following issues: libdfp was upgraded to version 1.0.15 (jsc#SLE-13839, jsc#SLE-14885, jsc#IBM-704, jsc#SLE-15622, jsc#SLE-14722, jsc#IBM-703, jsc#ECO-2376) * Add support for arch13/z15 s390 CPUs * Integrate libdecnumber into build * Fix spurious integer overflow warnings * sin/cos: more correctly compute the requested value * Fix and test ldexp * Add native expd128, logd128 * Add fminmagN function as TS18661 recommends This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1720=1 Package List: - openSUSE Leap 15.2 (x86_64): libdfp-debugsource-1.0.15-lp152.2.3.1 libdfp-devel-1.0.15-lp152.2.3.1 libdfp-devel-static-1.0.15-lp152.2.3.1 libdfp1-1.0.15-lp152.2.3.1 libdfp1-debuginfo-1.0.15-lp152.2.3.1 References:

1 0

openSUSE-SU-2020:1719-1: Security update for hunspell
by opensuse-security＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Security Update: Security update for hunspell ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1719-1 Rating: low References: #1151867 Cross-References: CVE-2019-16707 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hunspell fixes the following issues: - CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring (bsc#1151867). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1719=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): hunspell-1.6.2-lp152.4.3.1 hunspell-debuginfo-1.6.2-lp152.4.3.1 hunspell-debugsource-1.6.2-lp152.4.3.1 hunspell-devel-1.6.2-lp152.4.3.1 hunspell-tools-1.6.2-lp152.4.3.1 hunspell-tools-debuginfo-1.6.2-lp152.4.3.1 libhunspell-1_6-0-1.6.2-lp152.4.3.1 libhunspell-1_6-0-debuginfo-1.6.2-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): hunspell-devel-32bit-1.6.2-lp152.4.3.1 libhunspell-1_6-0-32bit-1.6.2-lp152.4.3.1 libhunspell-1_6-0-32bit-debuginfo-1.6.2-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-16707.html https://bugzilla.suse.com/1151867

1 0