October 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1667-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 14 Oct '20

14 Oct '20

openSUSE Recommended Update: Recommended update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1667-1 Rating: moderate References: #1173268 #1175889 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues: POS_Image-Graphical7: - Set wicked to use plain mac address for computing DHCP DUID (bsc#1173268) POS_Image-JeOS7: - Set wicked to use plain mac address for computing DHCP DUID (bsc#1173268) dracut-saltboot: - Set wicked to use plain mac address for computing DHCP DUID - Copy wicked lease xml file to prevent query for second IP address (bsc#1173268) golang-github-QubitProducts-exporter_exporter: - Pin Golang version to 1.14 mgr-daemon: - Remove duplicate languages and update translation strings spacecmd: - Fix softwarechannel_listlatestpackages throwing error on empty channels (bsc#1175889) spacewalk-client-tools: - Remove duplicated languages and update translation strings This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1667=1 Package List: - openSUSE Leap 15.2 (noarch): dracut-saltboot-0.1.1599461997.6ce3693-lp152.2.17.1 References: https://bugzilla.suse.com/1173268 https://bugzilla.suse.com/1175889

1 0

openSUSE-SU-2020:1666-1: critical: Security update for tigervnc
by opensuse-security＠opensuse.org 13 Oct '20

13 Oct '20

openSUSE Security Update: Security update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1666-1 Rating: critical References: #1176733 Cross-References: CVE-2020-26117 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tigervnc fixes the following issues: - CVE-2020-26117: Server certificates were stored as certiticate authorities, allowing malicious owners of these certificates to impersonate any server after a client had added an exception (bsc#1176733) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1666=1 Package List: - openSUSE Leap 15.2 (noarch): tigervnc-x11vnc-1.9.0-lp152.7.3.1 xorg-x11-Xvnc-java-1.9.0-lp152.7.3.1 xorg-x11-Xvnc-novnc-1.9.0-lp152.7.3.1 - openSUSE Leap 15.2 (x86_64): libXvnc-devel-1.9.0-lp152.7.3.1 libXvnc1-1.9.0-lp152.7.3.1 libXvnc1-debuginfo-1.9.0-lp152.7.3.1 tigervnc-1.9.0-lp152.7.3.1 tigervnc-debuginfo-1.9.0-lp152.7.3.1 tigervnc-debugsource-1.9.0-lp152.7.3.1 xorg-x11-Xvnc-1.9.0-lp152.7.3.1 xorg-x11-Xvnc-debuginfo-1.9.0-lp152.7.3.1 xorg-x11-Xvnc-module-1.9.0-lp152.7.3.1 xorg-x11-Xvnc-module-debuginfo-1.9.0-lp152.7.3.1 References: https://www.suse.com/security/cve/CVE-2020-26117.html https://bugzilla.suse.com/1176733

1 0

openSUSE-RU-2020:1665-1: moderate: Recommended update for icewm
by maintenance＠opensuse.org 13 Oct '20

13 Oct '20

openSUSE Recommended Update: Recommended update for icewm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1665-1 Rating: moderate References: #1170420 #1173441 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for icewm fixes the following issues: - Fixes an issue where icewm updates could no longer be installed (bsc#1173441, bsc#1170420) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1665=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): icewm-1.4.2-lp151.8.14.1 icewm-debuginfo-1.4.2-lp151.8.14.1 icewm-debugsource-1.4.2-lp151.8.14.1 icewm-default-1.4.2-lp151.8.14.1 icewm-default-debuginfo-1.4.2-lp151.8.14.1 icewm-lite-1.4.2-lp151.8.14.1 icewm-lite-debuginfo-1.4.2-lp151.8.14.1 - openSUSE Leap 15.1 (noarch): icewm-config-upstream-1.4.2-lp151.8.14.1 icewm-lang-1.4.2-lp151.8.14.1 References: https://bugzilla.suse.com/1170420 https://bugzilla.suse.com/1173441

1 0

openSUSE-SU-2020:1664-1: important: Security update for qemu
by opensuse-security＠opensuse.org 13 Oct '20

13 Oct '20

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1664-1 Rating: important References: #1174386 #1174641 #1174863 #1175370 #1175441 #1176494 Cross-References: CVE-2020-14364 CVE-2020-15863 CVE-2020-16092 CVE-2020-24352 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for qemu fixes the following issues: - CVE-2020-14364: Fixed an OOB access while processing USB packets (bsc#1175441,bsc#1176494). - CVE-2020-16092: Fixed a denial of service in packet processing of various emulated NICs (bsc#1174641). - CVE-2020-15863: Fixed a buffer overflow in the XGMAC device (bsc#1174386). - CVE-2020-24352: Fixed an out-of-bounds read/write in ati-vga device emulation in ati_2d_blt (bsc#1175370). - Allow to IPL secure guests with -no-reboot (bsc#1174863) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1664=1 Package List: - openSUSE Leap 15.2 (x86_64): qemu-4.2.1-lp152.9.6.1 qemu-arm-4.2.1-lp152.9.6.1 qemu-arm-debuginfo-4.2.1-lp152.9.6.1 qemu-audio-alsa-4.2.1-lp152.9.6.1 qemu-audio-alsa-debuginfo-4.2.1-lp152.9.6.1 qemu-audio-pa-4.2.1-lp152.9.6.1 qemu-audio-pa-debuginfo-4.2.1-lp152.9.6.1 qemu-audio-sdl-4.2.1-lp152.9.6.1 qemu-audio-sdl-debuginfo-4.2.1-lp152.9.6.1 qemu-block-curl-4.2.1-lp152.9.6.1 qemu-block-curl-debuginfo-4.2.1-lp152.9.6.1 qemu-block-dmg-4.2.1-lp152.9.6.1 qemu-block-dmg-debuginfo-4.2.1-lp152.9.6.1 qemu-block-gluster-4.2.1-lp152.9.6.1 qemu-block-gluster-debuginfo-4.2.1-lp152.9.6.1 qemu-block-iscsi-4.2.1-lp152.9.6.1 qemu-block-iscsi-debuginfo-4.2.1-lp152.9.6.1 qemu-block-nfs-4.2.1-lp152.9.6.1 qemu-block-nfs-debuginfo-4.2.1-lp152.9.6.1 qemu-block-rbd-4.2.1-lp152.9.6.1 qemu-block-rbd-debuginfo-4.2.1-lp152.9.6.1 qemu-block-ssh-4.2.1-lp152.9.6.1 qemu-block-ssh-debuginfo-4.2.1-lp152.9.6.1 qemu-debuginfo-4.2.1-lp152.9.6.1 qemu-debugsource-4.2.1-lp152.9.6.1 qemu-extra-4.2.1-lp152.9.6.1 qemu-extra-debuginfo-4.2.1-lp152.9.6.1 qemu-guest-agent-4.2.1-lp152.9.6.1 qemu-guest-agent-debuginfo-4.2.1-lp152.9.6.1 qemu-ksm-4.2.1-lp152.9.6.1 qemu-kvm-4.2.1-lp152.9.6.1 qemu-lang-4.2.1-lp152.9.6.1 qemu-linux-user-4.2.1-lp152.9.6.1 qemu-linux-user-debuginfo-4.2.1-lp152.9.6.1 qemu-linux-user-debugsource-4.2.1-lp152.9.6.1 qemu-ppc-4.2.1-lp152.9.6.1 qemu-ppc-debuginfo-4.2.1-lp152.9.6.1 qemu-s390-4.2.1-lp152.9.6.1 qemu-s390-debuginfo-4.2.1-lp152.9.6.1 qemu-testsuite-4.2.1-lp152.9.6.1 qemu-tools-4.2.1-lp152.9.6.1 qemu-tools-debuginfo-4.2.1-lp152.9.6.1 qemu-ui-curses-4.2.1-lp152.9.6.1 qemu-ui-curses-debuginfo-4.2.1-lp152.9.6.1 qemu-ui-gtk-4.2.1-lp152.9.6.1 qemu-ui-gtk-debuginfo-4.2.1-lp152.9.6.1 qemu-ui-sdl-4.2.1-lp152.9.6.1 qemu-ui-sdl-debuginfo-4.2.1-lp152.9.6.1 qemu-ui-spice-app-4.2.1-lp152.9.6.1 qemu-ui-spice-app-debuginfo-4.2.1-lp152.9.6.1 qemu-vhost-user-gpu-4.2.1-lp152.9.6.1 qemu-vhost-user-gpu-debuginfo-4.2.1-lp152.9.6.1 qemu-x86-4.2.1-lp152.9.6.1 qemu-x86-debuginfo-4.2.1-lp152.9.6.1 - openSUSE Leap 15.2 (noarch): qemu-ipxe-1.0.0+-lp152.9.6.1 qemu-microvm-4.2.1-lp152.9.6.1 qemu-seabios-1.12.1+-lp152.9.6.1 qemu-sgabios-8-lp152.9.6.1 qemu-vgabios-1.12.1+-lp152.9.6.1 References: https://www.suse.com/security/cve/CVE-2020-14364.html https://www.suse.com/security/cve/CVE-2020-15863.html https://www.suse.com/security/cve/CVE-2020-16092.html https://www.suse.com/security/cve/CVE-2020-24352.html https://bugzilla.suse.com/1174386 https://bugzilla.suse.com/1174641 https://bugzilla.suse.com/1174863 https://bugzilla.suse.com/1175370 https://bugzilla.suse.com/1175441 https://bugzilla.suse.com/1176494

1 0

openSUSE-RU-2020:1663-1: moderate: Recommended update for krename
by maintenance＠opensuse.org 12 Oct '20

12 Oct '20

openSUSE Recommended Update: Recommended update for krename ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1663-1 Rating: moderate References: #1177221 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krename fixes the following issues: Changes in krename: - fixed krename not terminating after renaming (boo#1177221, kde#395084) - Add support for exiv2-0.27: Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1663=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1663=1 Package List: - openSUSE Leap 15.2 (x86_64): krename-5.0.0-lp152.4.3.1 krename-debuginfo-5.0.0-lp152.4.3.1 krename-debugsource-5.0.0-lp152.4.3.1 - openSUSE Leap 15.1 (x86_64): krename-5.0.0-lp151.3.3.1 krename-debuginfo-5.0.0-lp151.3.3.1 krename-debugsource-5.0.0-lp151.3.3.1 References: https://bugzilla.suse.com/1177221

1 0

openSUSE-RU-2020:1661-1: moderate: Recommended update for yast2-gpmc
by maintenance＠opensuse.org 12 Oct '20

12 Oct '20

openSUSE Recommended Update: Recommended update for yast2-gpmc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1661-1 Rating: moderate References: #1084864 #1146898 #1150614 #1150616 #1151733 #1151738 #1152357 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for yast2-gpmc fixes the following issues: yast2-gpmc was updated to 1.5.0. - Create a stub smb.conf for s3_lp if no smb.conf exists. - Fix broken gpo creation by reusing samba code; (boo#1152357); - Use samba-tool code to delete links/gpos. - Fix copy/paste typo in fix for bug 1151733; (boo#1151738); - Use the domain name stored in the samba Credentials object; (boo#1151733); - Remove ldap module use of MOD_DELETE and MOD_ADD; (boo#1150616); - Ignore directory listing if directory doesn't exist; (boo#1150614); - SamDB interface now allows gpmc to use krb5 auth; (boo#1146898); - GPO Editor tree open immediate on navigate. - Enable user management settings. - Catch file not found on delete sysvol file. - Handle multiple links when parsing a gpLink. - Use new schema of desktop files (boo#1084864) - Move module to Network Services - Use samba preg file pack/unpack (Requires samba 4.10) - Unconfigured/Enable/Disable policy states - Use common adcommon password prompt (Requires yast2-adcommon-python) - Add a unified file/actions menu, instead of various buttons - Allow switching domains Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1661=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-gpmc-1.5.0-lp152.3.3.1 References: https://bugzilla.suse.com/1084864 https://bugzilla.suse.com/1146898 https://bugzilla.suse.com/1150614 https://bugzilla.suse.com/1150616 https://bugzilla.suse.com/1151733 https://bugzilla.suse.com/1151738 https://bugzilla.suse.com/1152357

1 0

openSUSE-SU-2020:1660-1: important: Security update for nodejs10
by opensuse-security＠opensuse.org 12 Oct '20

12 Oct '20

openSUSE Security Update: Security update for nodejs10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1660-1 Rating: important References: #1172686 #1173937 #1176589 Cross-References: CVE-2020-15095 CVE-2020-8252 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for nodejs10 fixes the following issues: - nodejs10 was updated to 10.22.1 LTS: - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589). - CVE-2020-15095: Fixed an information leak through log files (bsc#1173937). - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation on Aarch64 with gcc10 (bsc#1172686) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1660=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): nodejs10-10.22.1-lp152.2.6.1 nodejs10-debuginfo-10.22.1-lp152.2.6.1 nodejs10-debugsource-10.22.1-lp152.2.6.1 nodejs10-devel-10.22.1-lp152.2.6.1 npm10-10.22.1-lp152.2.6.1 - openSUSE Leap 15.2 (noarch): nodejs10-docs-10.22.1-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-15095.html https://www.suse.com/security/cve/CVE-2020-8252.html https://bugzilla.suse.com/1172686 https://bugzilla.suse.com/1173937 https://bugzilla.suse.com/1176589

1 0

openSUSE-RU-2020:1662-1: critical: Recommended update for python-azure-agent
by maintenance＠opensuse.org 12 Oct '20

12 Oct '20

openSUSE Recommended Update: Recommended update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1662-1 Rating: critical References: #1177161 #1177257 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-azure-agent fixes the following issues: - Fixes an issue when the 'python-azure-agent' fails to initialize Azure instances. (bsc#1177161, bsc#1177257) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1662=1 Package List: - openSUSE Leap 15.2 (noarch): python-azure-agent-2.2.49.2-lp152.3.12.1 python-azure-agent-test-2.2.49.2-lp152.3.12.1 References: https://bugzilla.suse.com/1177161 https://bugzilla.suse.com/1177257

1 0

openSUSE-RU-2020:1659-1: moderate: Recommended update for budgie-desktop, budgie-desktop-branding
by maintenance＠opensuse.org 11 Oct '20

11 Oct '20

openSUSE Recommended Update: Recommended update for budgie-desktop, budgie-desktop-branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1659-1 Rating: moderate References: #1176016 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for budgie-desktop, budgie-desktop-branding fixes the following issues: Update to git version 10.5.1+1ed6276b: * Prevents keeping a load of patches, 10.5.2 might be ages away * Added support for GNOME 3.38 * Removed support for GNOME 3.34 and below - Update to version 20201004.2: * Add upstream branding settings * Change archive structure - Add upstream branding package This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1659=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): budgie-desktop-10.5.1+1ed6276b-bp152.5.1 budgie-desktop-debuginfo-10.5.1+1ed6276b-bp152.5.1 budgie-desktop-debugsource-10.5.1+1ed6276b-bp152.5.1 budgie-desktop-devel-10.5.1+1ed6276b-bp152.5.1 budgie-desktop-doc-10.5.1+1ed6276b-bp152.5.1 libbudgie-plugin0-10.5.1+1ed6276b-bp152.5.1 libbudgie-plugin0-debuginfo-10.5.1+1ed6276b-bp152.5.1 libbudgie-private0-10.5.1+1ed6276b-bp152.5.1 libbudgie-private0-debuginfo-10.5.1+1ed6276b-bp152.5.1 libbudgietheme0-10.5.1+1ed6276b-bp152.5.1 libbudgietheme0-debuginfo-10.5.1+1ed6276b-bp152.5.1 libraven0-10.5.1+1ed6276b-bp152.5.1 libraven0-debuginfo-10.5.1+1ed6276b-bp152.5.1 typelib-1_0-Budgie-1_0-10.5.1+1ed6276b-bp152.5.1 - openSUSE Backports SLE-15-SP2 (noarch): budgie-desktop-branding-SLE-20201004.2-bp152.5.1 budgie-desktop-branding-upstream-20201004.2-bp152.5.1 budgie-desktop-lang-10.5.1+1ed6276b-bp152.5.1 References: https://bugzilla.suse.com/1176016

1 0

openSUSE-RU-2020:1656-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 11 Oct '20

11 Oct '20

openSUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1656-1 Rating: moderate References: #1165424 #1173273 #1173529 #1174240 #1174561 #1174918 #1175342 #1175592 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for libzypp, zypper provides the following fixes: Changes in libzypp: - VendorAttr: Const-correct API and let Target provide its settings. (bsc#1174918) - Support buildnr with commit hash in purge-kernels. This adds special behaviour for when a kernel version has the rebuild counter before the kernel commit hash. (bsc#1175342) - Improve Italian translation of the "breaking dependencies" message. (bsc#1173529) - Make sure reading from lsof does not block forever. (bsc#1174240) - Just collect details for the signatures found. Changes in zypper: - man: Enhance description of the global package cache. (bsc#1175592) - man: Point out that plain rpm packages are not downloaded to the global package cache. (bsc#1173273) - Directly list subcommands in 'zypper help'. (bsc#1165424) - Remove extern C block wrapping augeas.h as it breaks the build on Arch Linux. - Point out that plaindir repos do not follow symlinks. (bsc#1174561) - Fix help command for list-patches. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1656=1 Package List: - openSUSE Leap 15.1 (x86_64): libzypp-17.24.2-lp151.2.22.1 libzypp-debuginfo-17.24.2-lp151.2.22.1 libzypp-debugsource-17.24.2-lp151.2.22.1 libzypp-devel-17.24.2-lp151.2.22.1 libzypp-devel-doc-17.24.2-lp151.2.22.1 zypper-1.14.38-lp151.2.17.1 zypper-debuginfo-1.14.38-lp151.2.17.1 zypper-debugsource-1.14.38-lp151.2.17.1 - openSUSE Leap 15.1 (noarch): zypper-aptitude-1.14.38-lp151.2.17.1 zypper-log-1.14.38-lp151.2.17.1 zypper-needs-restarting-1.14.38-lp151.2.17.1 References: https://bugzilla.suse.com/1165424 https://bugzilla.suse.com/1173273 https://bugzilla.suse.com/1173529 https://bugzilla.suse.com/1174240 https://bugzilla.suse.com/1174561 https://bugzilla.suse.com/1174918 https://bugzilla.suse.com/1175342 https://bugzilla.suse.com/1175592

1 0