October 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2020:1628-1: important: Security update for perl-DBI
by opensuse-security＠opensuse.org 06 Oct '20

06 Oct '20

openSUSE Security Update: Security update for perl-DBI ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1628-1 Rating: important References: #1176764 Cross-References: CVE-2019-20919 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbi_profile (bsc#1176764). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1628=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): perl-DBI-1.642-lp152.2.6.1 perl-DBI-debuginfo-1.642-lp152.2.6.1 perl-DBI-debugsource-1.642-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-20919.html https://bugzilla.suse.com/1176764

1 0

openSUSE-RU-2020:1626-1: moderate: Recommended update for golang-github-prometheus-node_exporter
by maintenance＠opensuse.org 06 Oct '20

06 Oct '20

openSUSE Recommended Update: Recommended update for golang-github-prometheus-node_exporter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1626-1 Rating: moderate References: #1151557 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-github-prometheus-node_exporter fixes the following issues: - Add missing sysconfig file in rpm. (bsc#1151557) - Changes in 1.0.1 * Changes to build specification + Modify spec: update golang version to 1.14 + Remove update tarball script + Add _service file to allow for updates via `osc service disabledrun` * Bug fixes + [BUGFIX] filesystem_freebsd: Fix label values #1728 + [BUGFIX] Update prometheus/procfs to fix log noise #1735 + [BUGFIX] Fix build tags for collectors #1745 + [BUGFIX] Handle no data from powersupplyclass #1747, #1749 - Changes in 1.0.0 * Bug fixes + [BUGFIX] Read /proc/net files with a single read syscall #1380 + [BUGFIX] Renamed label state to name on node_systemd_service_restart_total. #1393 + [BUGFIX] Fix netdev nil reference on Darwin #1414 + [BUGFIX] Strip path.rootfs from mountpoint labels #1421 + [BUGFIX] Fix seconds reported by schedstat #1426 + [BUGFIX] Fix empty string in path.rootfs #1464 + [BUGFIX] Fix typo in cpufreq metric names #1510 + [BUGFIX] Read /proc/stat in one syscall #1538 + [BUGFIX] Fix OpenBSD cache memory information #1542 + [BUGFIX] Refactor textfile collector to avoid looping defer #1549 + [BUGFIX] Fix network speed math #1580 + [BUGFIX] collector/systemd: use regexp to extract systemd version #1647 + [BUGFIX] Fix initialization in perf collector when using multiple CPUs #1665 + [BUGFIX] Fix accidentally empty lines in meminfo_linux #1671 * Several enhancements + See https://github.com/prometheus/node_exporter/releases/tag/v1.0.0 - Changes in 1.0.0-rc.0 Breaking changes * The netdev collector CLI argument --collector.netdev.ignored-devices was renamed to --collector.netdev.device-blacklist in order to conform with the systemd collector. #1279 * The label named state on node_systemd_service_restart_total metrics was changed to name to better describe the metric. #1393 * Refactoring of the mdadm collector changes several metrics node_md_disks_active is removed node_md_disks now has a state label for "fail", "spare", "active" disks. node_md_is_active is replaced by node_md_state with a state set of "active", "inactive", "recovering", "resync". * Additional label mountaddr added to NFS device metrics to distinguish mounts from the same URL, but different IP addresses. #1417 * Metrics node_cpu_scaling_frequency_min_hrts and node_cpu_scaling_frequency_max_hrts of the cpufreq collector were renamed to node_cpu_scaling_frequency_min_hertz and node_cpu_scaling_frequency_max_hertz. #1510 * Collectors that are enabled, but are unable to find data to collect, now return 0 for node_scrape_collector_success. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1626=1 Package List: - openSUSE Leap 15.2 (x86_64): golang-github-prometheus-node_exporter-1.0.1-lp152.3.6.1 References: https://bugzilla.suse.com/1151557

1 0

openSUSE-RU-2020:1624-1: moderate: Recommended update for openssl-1_1
by maintenance＠opensuse.org 06 Oct '20

06 Oct '20

openSUSE Recommended Update: Recommended update for openssl-1_1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1624-1 Rating: moderate References: #1173470 #1175844 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openssl-1_1 fixes the following issues: FIPS: * Include ECDH/DH Requirements from SP800-56Arev3 (bsc#1175844, bsc#1173470). * Add shared secret KAT to FIPS DH selftest (bsc#1175844). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1624=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libopenssl-1_1-devel-1.1.1d-lp152.7.3.1 libopenssl1_1-1.1.1d-lp152.7.3.1 libopenssl1_1-debuginfo-1.1.1d-lp152.7.3.1 libopenssl1_1-hmac-1.1.1d-lp152.7.3.1 openssl-1_1-1.1.1d-lp152.7.3.1 openssl-1_1-debuginfo-1.1.1d-lp152.7.3.1 openssl-1_1-debugsource-1.1.1d-lp152.7.3.1 - openSUSE Leap 15.2 (x86_64): libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.3.1 libopenssl1_1-32bit-1.1.1d-lp152.7.3.1 libopenssl1_1-32bit-debuginfo-1.1.1d-lp152.7.3.1 libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.3.1 - openSUSE Leap 15.2 (noarch): openssl-1_1-doc-1.1.1d-lp152.7.3.1 References: https://bugzilla.suse.com/1173470 https://bugzilla.suse.com/1175844

1 0

openSUSE-RU-2020:1627-1: moderate: Recommended update for suse-build-key
by maintenance＠opensuse.org 06 Oct '20

06 Oct '20

openSUSE Recommended Update: Recommended update for suse-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1627-1 Rating: moderate References: #1170347 #1176759 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for suse-build-key fixes the following issues: - The SUSE Notary Container key is different from the build signing key, include this key instead as suse-container-key. (PM-1845 bsc#1170347) - The SUSE build key for SUSE Linux Enterprise 12 and 15 is extended by 4 more years. (bsc#1176759) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1627=1 Package List: - openSUSE Leap 15.2 (noarch): suse-build-key-12.0-lp152.8.3.1 References: https://bugzilla.suse.com/1170347 https://bugzilla.suse.com/1176759

1 0

openSUSE-RU-2020:1625-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 06 Oct '20

06 Oct '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1625-1 Rating: moderate References: #1173909 #1173911 #1175549 #1176480 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Fix virt.update with CPU defined. - Fix virt issues and invalid input errors from 'salt.utils.data'. (bsc#1176480) - Do not raise StreamClosedError traceback but only log it. (bsc#1175549) - Various fixes to the mysql module to break out the handling of user. - Take care of failed, skipped and unreachable tasks and propagate "retcode". (bsc#1173911, bsc#1173909) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1625=1 Package List: - openSUSE Leap 15.2 (noarch): salt-bash-completion-3000-lp152.3.12.1 salt-fish-completion-3000-lp152.3.12.1 salt-zsh-completion-3000-lp152.3.12.1 - openSUSE Leap 15.2 (x86_64): python2-salt-3000-lp152.3.12.1 python3-salt-3000-lp152.3.12.1 salt-3000-lp152.3.12.1 salt-api-3000-lp152.3.12.1 salt-cloud-3000-lp152.3.12.1 salt-doc-3000-lp152.3.12.1 salt-master-3000-lp152.3.12.1 salt-minion-3000-lp152.3.12.1 salt-proxy-3000-lp152.3.12.1 salt-ssh-3000-lp152.3.12.1 salt-standalone-formulas-configuration-3000-lp152.3.12.1 salt-syndic-3000-lp152.3.12.1 References: https://bugzilla.suse.com/1173909 https://bugzilla.suse.com/1173911 https://bugzilla.suse.com/1175549 https://bugzilla.suse.com/1176480

1 0

openSUSE-RU-2020:1623-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1623-1 Rating: moderate References: #1173909 #1173911 #1175549 #1176480 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for salt fixes the following issues: - Fix virt.update with CPU defined. - Fix virt issues and invalid input errors from 'salt.utils.data'. (bsc#1176480) - Do not raise StreamClosedError traceback but only log it. (bsc#1175549) - Various fixes to the mysql module to break out the handling of user. - Take care of failed, skipped and unreachable tasks and propagate "retcode". (bsc#1173911, bsc#1173909) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1623=1 Package List: - openSUSE Leap 15.1 (noarch): salt-bash-completion-3000-lp151.5.27.1 salt-fish-completion-3000-lp151.5.27.1 salt-zsh-completion-3000-lp151.5.27.1 - openSUSE Leap 15.1 (x86_64): python2-salt-3000-lp151.5.27.1 python3-salt-3000-lp151.5.27.1 salt-3000-lp151.5.27.1 salt-api-3000-lp151.5.27.1 salt-cloud-3000-lp151.5.27.1 salt-doc-3000-lp151.5.27.1 salt-master-3000-lp151.5.27.1 salt-minion-3000-lp151.5.27.1 salt-proxy-3000-lp151.5.27.1 salt-ssh-3000-lp151.5.27.1 salt-standalone-formulas-configuration-3000-lp151.5.27.1 salt-syndic-3000-lp151.5.27.1 References: https://bugzilla.suse.com/1173909 https://bugzilla.suse.com/1173911 https://bugzilla.suse.com/1175549 https://bugzilla.suse.com/1176480

1 0

openSUSE-RU-2020:1621-1: moderate: Recommended update for golang-github-prometheus-node_exporter
by maintenance＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Recommended Update: Recommended update for golang-github-prometheus-node_exporter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1621-1 Rating: moderate References: #1151557 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-github-prometheus-node_exporter fixes the following issues: - Add missing sysconfig file in rpm bsc#1151557 - Changes from 1.0.1 * Changes to build specification + Modify spec: update golang version to 1.14 + Remove update tarball script + Add _service file to allow for updates via `osc service disabledrun` * Bug fixes + [BUGFIX] filesystem_freebsd: Fix label values #1728 + [BUGFIX] Update prometheus/procfs to fix log noise #1735 + [BUGFIX] Fix build tags for collectors #1745 + [BUGFIX] Handle no data from powersupplyclass #1747, #1749 - Changes from 1.0.0 * Bug fixes + [BUGFIX] Read /proc/net files with a single read syscall #1380 + [BUGFIX] Renamed label state to name on node_systemd_service_restart_total. #1393 + [BUGFIX] Fix netdev nil reference on Darwin #1414 + [BUGFIX] Strip path.rootfs from mountpoint labels #1421 + [BUGFIX] Fix seconds reported by schedstat #1426 + [BUGFIX] Fix empty string in path.rootfs #1464 + [BUGFIX] Fix typo in cpufreq metric names #1510 + [BUGFIX] Read /proc/stat in one syscall #1538 + [BUGFIX] Fix OpenBSD cache memory information #1542 + [BUGFIX] Refactor textfile collector to avoid looping defer #1549 + [BUGFIX] Fix network speed math #1580 + [BUGFIX] collector/systemd: use regexp to extract systemd version #1647 + [BUGFIX] Fix initialization in perf collector when using multiple CPUs #1665 + [BUGFIX] Fix accidentally empty lines in meminfo_linux #1671 * Several enhancements + See https://github.com/prometheus/node_exporter/releases/tag/v1.0.0 - Changes from 1.0.0-rc.0 Breaking changes * The netdev collector CLI argument --collector.netdev.ignored-devices was renamed to --collector.netdev.device-blacklist in order to conform with the systemd collector. #1279 * The label named state on node_systemd_service_restart_total metrics was changed to name to better describe the metric. #1393 * Refactoring of the mdadm collector changes several metrics node_md_disks_active is removed node_md_disks now has a state label for "fail", "spare", "active" disks. node_md_is_active is replaced by node_md_state with a state set of "active", "inactive", "recovering", "resync". * Additional label mountaddr added to NFS device metrics to distinguish mounts from the same URL, but different IP addresses. #1417 * Metrics node_cpu_scaling_frequency_min_hrts and node_cpu_scaling_frequency_max_hrts of the cpufreq collector were renamed to node_cpu_scaling_frequency_min_hertz and node_cpu_scaling_frequency_max_hertz. #1510 * Collectors that are enabled, but are unable to find data to collect, now return 0 for node_scrape_collector_success. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1621=1 Package List: - openSUSE Leap 15.1 (x86_64): golang-github-prometheus-node_exporter-1.0.1-lp151.2.6.1 References: https://bugzilla.suse.com/1151557

1 0

openSUSE-RU-2020:1622-1: moderate: Recommended update for libdlm
by maintenance＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Recommended Update: Recommended update for libdlm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1622-1 Rating: moderate References: #1121380 #1175812 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libdlm fixes the following issues: - Add dependency relationship between 'libdlm' and 'dlm-kmp'. (bsc#1121380) - Add notes in 'dlm.conf' man page. (bsc#1175812) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1622=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libdlm-4.0.7-lp151.5.3.1 libdlm-debuginfo-4.0.7-lp151.5.3.1 libdlm-debugsource-4.0.7-lp151.5.3.1 libdlm-devel-4.0.7-lp151.5.3.1 libdlm3-4.0.7-lp151.5.3.1 libdlm3-debuginfo-4.0.7-lp151.5.3.1 References: https://bugzilla.suse.com/1121380 https://bugzilla.suse.com/1175812

1 0

openSUSE-RU-2020:1619-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1619-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: spec-cleaner was updated to 1.2.1 (boo#1099674): * Use Leap 15.2 as a base for data files * Use %{_prefix}/lib instead of %{_libexecdir}: obs services are explicitly looked for at this location. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1619=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1619=1 Package List: - openSUSE Leap 15.2 (noarch): spec-cleaner-1.2.1-lp152.2.3.1 spec-cleaner-format_spec_file-1.2.1-lp152.2.3.1 - openSUSE Leap 15.1 (noarch): spec-cleaner-1.2.1-lp151.2.24.1 spec-cleaner-format_spec_file-1.2.1-lp151.2.24.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-SU-2020:1620-1: important: Security update for perl-DBI
by opensuse-security＠opensuse.org 05 Oct '20

05 Oct '20

openSUSE Security Update: Security update for perl-DBI ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1620-1 Rating: important References: #1176764 Cross-References: CVE-2019-20919 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-DBI fixes the following issues: - CVE-2019-20919: Fixed a NULL profile dereference in dbi_profile (bsc#1176764). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1620=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): perl-DBI-1.639-lp151.3.13.1 perl-DBI-debuginfo-1.639-lp151.3.13.1 perl-DBI-debugsource-1.639-lp151.3.13.1 References: https://www.suse.com/security/cve/CVE-2019-20919.html https://bugzilla.suse.com/1176764

1 0