October 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1597-1: moderate: Recommended update for openssh
by maintenance＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1597-1 Rating: moderate References: #1173799 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openssh fixes the following issues: - This uses OpenSSL's RAND_bytes() directly instead of the internal ChaCha20-based implementation to obtain random bytes for Ed25519 curve computations. This is required for FIPS compliance. (bsc#1173799). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1597=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): openssh-8.1p1-lp152.4.3.1 openssh-cavs-8.1p1-lp152.4.3.1 openssh-cavs-debuginfo-8.1p1-lp152.4.3.1 openssh-debuginfo-8.1p1-lp152.4.3.1 openssh-debugsource-8.1p1-lp152.4.3.1 openssh-fips-8.1p1-lp152.4.3.1 openssh-helpers-8.1p1-lp152.4.3.1 openssh-helpers-debuginfo-8.1p1-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): openssh-askpass-gnome-8.1p1-lp152.4.3.1 openssh-askpass-gnome-debuginfo-8.1p1-lp152.4.3.1 openssh-askpass-gnome-debugsource-8.1p1-lp152.4.3.1 References: https://bugzilla.suse.com/1173799

1 0

openSUSE-SU-2020:1598-1: moderate: Security update for python-pip
by opensuse-security＠opensuse.org 04 Oct '20

04 Oct '20

openSUSE Security Update: Security update for python-pip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1598-1 Rating: moderate References: #1176262 Cross-References: CVE-2019-20916 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in _download_http_url (bsc#1176262) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1598=1 Package List: - openSUSE Leap 15.2 (noarch): python2-pip-10.0.1-lp152.4.3.1 python3-pip-10.0.1-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-20916.html https://bugzilla.suse.com/1176262

1 0

openSUSE-RU-2020:1596-1: moderate: Recommended update for hyper-v
by maintenance＠opensuse.org 03 Oct '20

03 Oct '20

openSUSE Recommended Update: Recommended update for hyper-v ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1596-1 Rating: moderate References: #1116957 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hyper-v fixes the following issues: - Fixes an issue when hyper-v services not running after booting from SLES12SP3 ISO. (bsc#1116957) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1596=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): hyper-v-8-lp151.6.6.1 hyper-v-debuginfo-8-lp151.6.6.1 hyper-v-debugsource-8-lp151.6.6.1 References: https://bugzilla.suse.com/1116957

1 0

openSUSE-RU-2020:1595-1: moderate: Recommended update for pcm
by maintenance＠opensuse.org 03 Oct '20

03 Oct '20

openSUSE Recommended Update: Recommended update for pcm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1595-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for pcm fixes the following issues: opcm was update to 202007: * no upstream changelog - Build only for %ix86 x86_64 as it targets Intel CPU only Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1595=1 Package List: - openSUSE Leap 15.2 (x86_64): pcm-202007-lp152.2.3.1 References:

1 0

openSUSE-RU-2020:1594-1: moderate: Recommended update for aspell-dictionaries
by maintenance＠opensuse.org 03 Oct '20

03 Oct '20

openSUSE Recommended Update: Recommended update for aspell-dictionaries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1594-1 Rating: moderate References: #1076219 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aspell-dictionaries fixes the following issues: aspell-dictionaries was updated rto: - de -> 20161207-7-0 - pt_BR -> 20131030-12-0 - da 1.6.36 - pt_PT 20190329 This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1594=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): aspell-af-0.50.0-bp151.3.3.1 aspell-agal-0.50.0-bp151.3.3.1 aspell-am-0.03.1-bp151.3.3.1 aspell-ar-1.2.0-bp151.3.3.1 aspell-ast-0.01-bp151.3.3.1 aspell-az-0.02-bp151.3.3.1 aspell-be-0.01-bp151.3.3.1 aspell-bg-4.1-bp151.3.3.1 aspell-bn-0.01.1-bp151.3.3.1 aspell-br-0.50.2-bp151.3.3.1 aspell-ca-0.60.1.20090722-bp151.3.3.1 aspell-cs-0.60.0.20040614-bp151.3.3.1 aspell-csb-0.02.0-bp151.3.3.1 aspell-cy-0.50.3-bp151.3.3.1 aspell-da-1.6.20-bp151.3.3.1 aspell-de-20161207.7.0-bp151.3.3.1 aspell-el-0.50.3+0.08-bp151.3.3.1 aspell-eo-2.1.20000225-bp151.3.3.1 aspell-es-1.11.2-bp151.3.3.1 aspell-et-0.1.21-bp151.3.3.1 aspell-fa-0.11.0-bp151.3.3.1 aspell-fi-0.7-bp151.3.3.1 aspell-fo-0.2.16-bp151.3.3.1 aspell-fr-0.50.3-bp151.3.3.1 aspell-fy-0.12-bp151.3.3.1 aspell-ga-4.5.0-bp151.3.3.1 aspell-gd-0.7.1.1.1-bp151.3.3.1 aspell-gl-0.50a-bp151.3.3.1 aspell-grc-0.02.0-bp151.3.3.1 aspell-gu-0.03-bp151.3.3.1 aspell-gv-0.50-bp151.3.3.1 aspell-he-1.0.0-bp151.3.3.1 aspell-hi-0.02-bp151.3.3.1 aspell-hil-0.11-bp151.3.3.1 aspell-hr-0.51.0-bp151.3.3.1 aspell-hsb-0.02.0-bp151.3.3.1 aspell-hu-0.99.4.2-bp151.3.3.1 aspell-hus-0.03.1-bp151.3.3.1 aspell-hy-0.10.0-bp151.3.3.1 aspell-ia-0.50-bp151.3.3.1 aspell-id-1.2-bp151.3.3.1 aspell-is-0.51.10-bp151.3.3.1 aspell-it-2.2_20050523-bp151.3.3.1 aspell-kn-0.01.1-bp151.3.3.1 aspell-ku-0.20.1-bp151.3.3.1 aspell-ky-0.01.0-bp151.3.3.1 aspell-la-20020503-bp151.3.3.1 aspell-lt-1.2.1-bp151.3.3.1 aspell-lv-1.2.1-bp151.3.3.1 aspell-mg-20040807-bp151.3.3.1 aspell-mi-0.50-bp151.3.3.1 aspell-mk-0.50-bp151.3.3.1 aspell-ml-0.03-bp151.3.3.1 aspell-mn-0.06.2-bp151.3.3.1 aspell-mr-0.10-bp151.3.3.1 aspell-ms-0.50-bp151.3.3.1 aspell-mt-0.50-bp151.3.3.1 aspell-nb-0.50.10-bp151.3.3.1 aspell-nds-0.01-bp151.3.3.1 aspell-nl-1.00.7-bp151.3.3.1 aspell-nn-0.50.11-bp151.3.3.1 aspell-ny-0.01-bp151.3.3.1 aspell-or-0.03-bp151.3.3.1 aspell-pa-0.01-bp151.3.3.1 aspell-pl-0.60.2015.04.28-bp151.3.3.1 aspell-pt_BR-20131030.12.0-bp151.3.3.1 aspell-pt_PT-20190329-bp151.3.3.1 aspell-qu-0.02-bp151.3.3.1 aspell-ro-3.3.2-bp151.3.3.1 aspell-ru-0.99.f7.1-bp151.3.3.1 aspell-rw-0.50-bp151.3.3.1 aspell-sc-1.0-bp151.3.3.1 aspell-sk-2.01-bp151.3.3.1 aspell-sl-0.50-bp151.3.3.1 aspell-sr-0.02-bp151.3.3.1 aspell-sv-0.51.0-bp151.3.3.1 aspell-sw-1.0-bp151.3.3.1 aspell-ta-20040424-bp151.3.3.1 aspell-te-0.01.2-bp151.3.3.1 aspell-tet-0.1.1-bp151.3.3.1 aspell-tk-0.01-bp151.3.3.1 aspell-tl-0.02-bp151.3.3.1 aspell-tn-1.0.1-bp151.3.3.1 aspell-tr-0.50-bp151.3.3.1 aspell-uk-1.4.0-bp151.3.3.1 aspell-uz-0.6.0-bp151.3.3.1 aspell-vi-0.01.1-bp151.3.3.1 aspell-wa-0.50-bp151.3.3.1 aspell-yi-0.01.1-bp151.3.3.1 aspell-zu-0.50-bp151.3.3.1 References: https://bugzilla.suse.com/1076219

1 0

openSUSE-SU-2020:1593-1: critical: Security update for dpdk
by opensuse-security＠opensuse.org 03 Oct '20

03 Oct '20

openSUSE Security Update: Security update for dpdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1593-1 Rating: critical References: #1176590 Cross-References: CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14377 CVE-2020-14378 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for dpdk fixes the following issues: - dpdk was updated to 18.11.9. For a list of fixes check: - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest and causing partially denial of service in the host(bsc#1176590). For a list of fixes check: https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1593=1 Package List: - openSUSE Leap 15.1 (x86_64): dpdk-18.11.9-lp151.3.8.1 dpdk-debuginfo-18.11.9-lp151.3.8.1 dpdk-debugsource-18.11.9-lp151.3.8.1 dpdk-devel-18.11.9-lp151.3.8.1 dpdk-devel-debuginfo-18.11.9-lp151.3.8.1 dpdk-examples-18.11.9-lp151.3.8.1 dpdk-examples-debuginfo-18.11.9-lp151.3.8.1 dpdk-kmp-default-18.11.9_k4.12.14_lp151.28.67-lp151.3.8.1 dpdk-kmp-default-debuginfo-18.11.9_k4.12.14_lp151.28.67-lp151.3.8.1 dpdk-tools-18.11.9-lp151.3.8.1 dpdk-tools-debuginfo-18.11.9-lp151.3.8.1 libdpdk-18_11-18.11.9-lp151.3.8.1 libdpdk-18_11-debuginfo-18.11.9-lp151.3.8.1 - openSUSE Leap 15.1 (noarch): dpdk-doc-18.11.9-lp151.3.8.1 References: https://www.suse.com/security/cve/CVE-2020-14374.html https://www.suse.com/security/cve/CVE-2020-14375.html https://www.suse.com/security/cve/CVE-2020-14376.html https://www.suse.com/security/cve/CVE-2020-14377.html https://www.suse.com/security/cve/CVE-2020-14378.html https://bugzilla.suse.com/1176590

1 0

openSUSE-RU-2020:1592-1: moderate: Recommended update for python3-susepubliccloudinfo
by maintenance＠opensuse.org 03 Oct '20

03 Oct '20

openSUSE Recommended Update: Recommended update for python3-susepubliccloudinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1592-1 Rating: moderate References: #1176102 #1176103 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3-susepubliccloudinfo contains the following fixes: - Update to version 1.2.2: (bsc#1176102, bsc#1176103) + Support query for providers/frameworks, regions, and image states. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1592=1 Package List: - openSUSE Leap 15.2 (noarch): python3-susepubliccloudinfo-1.2.2-lp152.2.3.1 References: https://bugzilla.suse.com/1176102 https://bugzilla.suse.com/1176103

1 0

openSUSE-SU-2020:1591-1: moderate: Security update for bcm43xx-firmware
by opensuse-security＠opensuse.org 03 Oct '20

03 Oct '20

openSUSE Security Update: Security update for bcm43xx-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1591-1 Rating: moderate References: #1176631 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for bcm43xx-firmware fixes the following issues: - Update bluetooth firmware to address Sweyntooth and Spectra issues (bsc#1176631): This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1591=1 Package List: - openSUSE Leap 15.1 (noarch): bcm43xx-firmware-20180314-lp151.6.3.1 References: https://bugzilla.suse.com/1176631

1 0

openSUSE-RU-2020:1590-1: moderate: Recommended update for krb5
by maintenance＠opensuse.org 02 Oct '20

02 Oct '20

openSUSE Recommended Update: Recommended update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1590-1 Rating: moderate References: #1174079 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krb5 fixes the following issue: - Fix prefix reported by krb5-config, libraries and headers are not installed under /usr/lib/mit prefix. (bsc#1174079) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1590=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): krb5-1.16.3-lp152.5.10.1 krb5-client-1.16.3-lp152.5.10.1 krb5-client-debuginfo-1.16.3-lp152.5.10.1 krb5-debuginfo-1.16.3-lp152.5.10.1 krb5-debugsource-1.16.3-lp152.5.10.1 krb5-devel-1.16.3-lp152.5.10.1 krb5-mini-1.16.3-lp152.5.10.1 krb5-mini-debuginfo-1.16.3-lp152.5.10.1 krb5-mini-debugsource-1.16.3-lp152.5.10.1 krb5-mini-devel-1.16.3-lp152.5.10.1 krb5-plugin-kdb-ldap-1.16.3-lp152.5.10.1 krb5-plugin-kdb-ldap-debuginfo-1.16.3-lp152.5.10.1 krb5-plugin-preauth-otp-1.16.3-lp152.5.10.1 krb5-plugin-preauth-otp-debuginfo-1.16.3-lp152.5.10.1 krb5-plugin-preauth-pkinit-1.16.3-lp152.5.10.1 krb5-plugin-preauth-pkinit-debuginfo-1.16.3-lp152.5.10.1 krb5-server-1.16.3-lp152.5.10.1 krb5-server-debuginfo-1.16.3-lp152.5.10.1 - openSUSE Leap 15.2 (x86_64): krb5-32bit-1.16.3-lp152.5.10.1 krb5-32bit-debuginfo-1.16.3-lp152.5.10.1 krb5-devel-32bit-1.16.3-lp152.5.10.1 References: https://bugzilla.suse.com/1174079

1 0

openSUSE-RU-2020:1588-1: moderate: Recommended update for yast2-security
by maintenance＠opensuse.org 02 Oct '20

02 Oct '20

openSUSE Recommended Update: Recommended update for yast2-security ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1588-1 Rating: moderate References: #1174619 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-security fixes the following issue: Update from version 4.2.12 to version 4.2.13 for setting the cracklib dictionary path correctly. (bsc#1174619) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1588=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-security-4.2.13-lp152.2.3.1 References: https://bugzilla.suse.com/1174619

1 0