October 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:1722-1: moderate: Recommended update for ndctl
by maintenance＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Recommended Update: Recommended update for ndctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1722-1 Rating: moderate References: #1174969 #1175052 #1175851 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for ndctl fixes the following issues: - Suppress 'ENXIO' when processing all namespaces. (jsc#SLE-13321, bsc#1175851, ltc#187867) - Update to v69. (jsc#SLE-13824, jsc#SLE-12770, jsc#SLE-15065, jsc#SLE-15484, jsc#SLE-15485, bsc#1175052, ltc#186863, bsc#1174969, ltc#185845): - Set the default alignment to the platform alignment. - Add support for reporting 'life_used_percentage' metric. - Skip region filtering if numa_node attribute is not present. - Implement support for 'PAPR_PDSM_HEALTH'. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1722=1 Package List: - openSUSE Leap 15.1 (x86_64): libndctl-devel-69-lp151.2.25.1 libndctl6-69-lp151.2.25.1 libndctl6-debuginfo-69-lp151.2.25.1 ndctl-69-lp151.2.25.1 ndctl-debuginfo-69-lp151.2.25.1 ndctl-debugsource-69-lp151.2.25.1 References: https://bugzilla.suse.com/1174969 https://bugzilla.suse.com/1175052 https://bugzilla.suse.com/1175851

1 0

openSUSE-SU-2020:1723-1: moderate: Security update for kleopatra
by opensuse-security＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Security Update: Security update for kleopatra ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1723-1 Rating: moderate References: #1177932 Cross-References: CVE-2020-24972 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kleopatra fixes the following issues: - CVE-2020-24972: Add upstream patch to prevent potential arbitrary code execution (boo#1177932): Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1723=1 Package List: - openSUSE Leap 15.1 (noarch): kleopatra-lang-18.12.3-lp151.2.4.1 - openSUSE Leap 15.1 (x86_64): kleopatra-18.12.3-lp151.2.4.1 kleopatra-debuginfo-18.12.3-lp151.2.4.1 kleopatra-debugsource-18.12.3-lp151.2.4.1 References: https://www.suse.com/security/cve/CVE-2020-24972.html https://bugzilla.suse.com/1177932

1 0

openSUSE-RU-2020:1721-1: moderate: Recommended update for trytond, trytond_account, trytond_account_invoice
by maintenance＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Recommended Update: Recommended update for trytond, trytond_account, trytond_account_invoice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1721-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for trytond, trytond_account, trytond_account_invoice fixes the following issues: Changes in trytond_account_invoice: - Version 5.0.10 - Bugfix Release Changes in trytond_account: - Version 5.0.15 - Bugfix Release Changes in trytond: - Version 5.0.28 - Bugfix Release - Version 5.0.27 - Bugfix Release Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1721=1 Package List: - openSUSE Leap 15.2 (noarch): trytond-5.0.28-lp152.2.8.1 trytond_account-5.0.15-lp152.2.6.1 trytond_account_invoice-5.0.10-lp152.2.6.1 References:

1 0

openSUSE-RU-2020:1720-1: moderate: Recommended update for libdfp
by maintenance＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Recommended Update: Recommended update for libdfp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1720-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for libdfp fixes the following issues: libdfp was upgraded to version 1.0.15 (jsc#SLE-13839, jsc#SLE-14885, jsc#IBM-704, jsc#SLE-15622, jsc#SLE-14722, jsc#IBM-703, jsc#ECO-2376) * Add support for arch13/z15 s390 CPUs * Integrate libdecnumber into build * Fix spurious integer overflow warnings * sin/cos: more correctly compute the requested value * Fix and test ldexp * Add native expd128, logd128 * Add fminmagN function as TS18661 recommends This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1720=1 Package List: - openSUSE Leap 15.2 (x86_64): libdfp-debugsource-1.0.15-lp152.2.3.1 libdfp-devel-1.0.15-lp152.2.3.1 libdfp-devel-static-1.0.15-lp152.2.3.1 libdfp1-1.0.15-lp152.2.3.1 libdfp1-debuginfo-1.0.15-lp152.2.3.1 References:

1 0

openSUSE-SU-2020:1719-1: Security update for hunspell
by opensuse-security＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Security Update: Security update for hunspell ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1719-1 Rating: low References: #1151867 Cross-References: CVE-2019-16707 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hunspell fixes the following issues: - CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring (bsc#1151867). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1719=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): hunspell-1.6.2-lp152.4.3.1 hunspell-debuginfo-1.6.2-lp152.4.3.1 hunspell-debugsource-1.6.2-lp152.4.3.1 hunspell-devel-1.6.2-lp152.4.3.1 hunspell-tools-1.6.2-lp152.4.3.1 hunspell-tools-debuginfo-1.6.2-lp152.4.3.1 libhunspell-1_6-0-1.6.2-lp152.4.3.1 libhunspell-1_6-0-debuginfo-1.6.2-lp152.4.3.1 - openSUSE Leap 15.2 (x86_64): hunspell-devel-32bit-1.6.2-lp152.4.3.1 libhunspell-1_6-0-32bit-1.6.2-lp152.4.3.1 libhunspell-1_6-0-32bit-debuginfo-1.6.2-lp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-16707.html https://bugzilla.suse.com/1151867

1 0

openSUSE-SU-2020:1718-1: important: Security update for chromium
by opensuse-security＠opensuse.org 24 Oct '20

24 Oct '20

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1718-1 Rating: important References: #1177936 Cross-References: CVE-2020-15999 CVE-2020-16000 CVE-2020-16001 CVE-2020-16002 CVE-2020-16003 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 86.0.4240.111 boo#1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap buffer overflow in Freetype. - CVE-2020-16003: Use after free in printing. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1718=1 Package List: - openSUSE Leap 15.1 (x86_64): chromedriver-86.0.4240.111-lp151.2.147.1 chromedriver-debuginfo-86.0.4240.111-lp151.2.147.1 chromium-86.0.4240.111-lp151.2.147.1 chromium-debuginfo-86.0.4240.111-lp151.2.147.1 References: https://www.suse.com/security/cve/CVE-2020-15999.html https://www.suse.com/security/cve/CVE-2020-16000.html https://www.suse.com/security/cve/CVE-2020-16001.html https://www.suse.com/security/cve/CVE-2020-16002.html https://www.suse.com/security/cve/CVE-2020-16003.html https://bugzilla.suse.com/1177936

1 0

openSUSE-SU-2020:1717-1: Security update for hunspell
by opensuse-security＠opensuse.org 23 Oct '20

23 Oct '20

openSUSE Security Update: Security update for hunspell ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1717-1 Rating: low References: #1151867 Cross-References: CVE-2019-16707 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hunspell fixes the following issues: - CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring (bsc#1151867). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1717=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): hunspell-1.6.2-lp151.3.3.1 hunspell-debuginfo-1.6.2-lp151.3.3.1 hunspell-debugsource-1.6.2-lp151.3.3.1 hunspell-devel-1.6.2-lp151.3.3.1 hunspell-tools-1.6.2-lp151.3.3.1 hunspell-tools-debuginfo-1.6.2-lp151.3.3.1 libhunspell-1_6-0-1.6.2-lp151.3.3.1 libhunspell-1_6-0-debuginfo-1.6.2-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): hunspell-devel-32bit-1.6.2-lp151.3.3.1 libhunspell-1_6-0-32bit-1.6.2-lp151.3.3.1 libhunspell-1_6-0-32bit-debuginfo-1.6.2-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-16707.html https://bugzilla.suse.com/1151867

1 0

openSUSE-RU-2020:1716-1: moderate: Recommended update for torbrowser-launcher
by maintenance＠opensuse.org 23 Oct '20

23 Oct '20

openSUSE Recommended Update: Recommended update for torbrowser-launcher ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1716-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for torbrowser-launcher fixes the following issues: torbrowser-launcher was updated to version 0.3.3: * Switch to Web Key Directory to refresh signing key from torproject.org, because everything is broken. * Use proper version comparison now that Tor Browser 10.0 is out. * Fix DNS leak when downloading over Tor. * Various bug fixes, as well as AppData and AppArmor fixes. - New Requires: xmessage: one of zenity, kdialog, or xmessage is required and we choose xmessage as a minimal requirement in case neither of the first two are installed in the system already. - Update Tor Browser public key from upstream (again). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1716=1 Package List: - openSUSE Leap 15.2 (noarch): torbrowser-apparmor-profile-0.3.3-lp152.4.6.1 torbrowser-launcher-0.3.3-lp152.4.6.1 torbrowser-launcher-lang-0.3.3-lp152.4.6.1 References:

1 0

openSUSE-SU-2020:1713-1: important: Security update for opera
by opensuse-security＠opensuse.org 23 Oct '20

23 Oct '20

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1713-1 Rating: important References: Cross-References: CVE-2020-15959 CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 CVE-2020-6556 CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 Affected Products: openSUSE Leap 15.2:NonFree openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for opera fixes the following issues: opera was updated to version 71.0.3770.228 - DNA-87466 Hide extensions icon is black in dark theme - DNA-88580 Implement search_in_tabs telemetry benchmark - DNA-88591 Allow to scroll down the Keyboards Shortcuts section with URL - DNA-88693 Random crash in SmartFilesBrowserTest - DNA-88793 change VPN disclaimer modal layout - DNA-88799 Only active workspaces and active messengers should be listed in keyboard shortcuts settings - DNA-88838 add automatic VPN connection preference setting - DNA-88870 Align VPN popup to new design - DNA-88900 Turn off Tutorials in Opera GX – implementation - DNA-88931 Add info about channel and product (OPR, OPRGX) to rollout requests - DNA-88940 Allow continue-shopping|booking-host-override switch to handle host and path - DNA-88946 Auto-connect VPN after browser startup only for existing VPN users - DNA-89009 Change URL for search-suggestions - DNA-89021 Make RH test driver pack to a separate archive - DNA-89150 Unhardcode ‘From’ and ‘To’ strings in Advanced History Search - DNA-89175 Desktop without a flow paring should not initialize in browser startup Opera was updated to version 71.0.3770.198 - CHR-8106 Update chromium on desktop-stable-85-3770 to 85.0.4183.121 - DNA-85648 Reconnecting Flow with iOS is unstable - DNA-87130 Spinner is stretched instead of clipped - DNA-87989 In Find in Page, “No matches” doesn’t go away after deleting all text - DNA-88098 Data URLs entries should not open new tab after click on new history page - DNA-88267 Extra semicolon in Russian BABE translation - DNA-88312 [Win] Downloads file drag and drop doesn’t work in Opera - DNA-88363 Add premium extension functionality - DNA-88580 Implement search_in_tabs telemetry benchmark - DNA-88611 Black font on a dark background in sync login dialog - DNA-88626 Disable #easy-files on desktop-stable-85-xxxx - DNA-88701 String “Type a shortcut” is hardcoded - DNA-88755 Crash at extensions::WebstoreOneClickInstallerUIImpl:: RemoveAllInfobarsExcept(opera::ExtensionInstallInfoBarDelegate*) - DNA-88797 Change ‘Register’ to ‘Tab’ in German - DNA-88851 [History][Resized window] Button and date input look bad - DNA-88958 Crash at net::`anonymous namespace”::Escape - The update to chromium 85.0.4183.121 fixes following issues: - CVE-2020-15960, CVE-2020-15961, CVE-2020-15962, CVE-2020-15963, CVE-2020-15965, CVE-2020-15966, CVE-2020-15964 - Update to version 71.0.3770.148 - CHR-8091 Update chromium on desktop-stable-85-3770 to 85.0.4183.102 - DNA-87785 [Mac] “Alitools” text in extension toolbar overlaps Install button - DNA-87935 Make SSD smaller by 25% - DNA-87963 Hidden Avira extension in avira_2 edition - DNA-88015 [MyFlow] Desktop doesn’t show itself in devices list - DNA-88469 Add context menu options to configure shortcuts - DNA-88496 Define a/b test in ab_tests.json - DNA-88537 Don’t filter out hashes from feature reference groups coming from rollout - DNA-88580 Implement search_in_tabs telemetry benchmark - DNA-88604 [History panel] Search bar covers the “Clear browsing data” button - DNA-88619 String ‘Download complete’ is cut on download popup - DNA-88645 Remove option should not be available for last workspace - DNA-88718 [History panel] fix delete button overflow issue - The update to chromium 85.0.4183.102 fixes following issues: - CVE-2020-6573, CVE-2020-6574, CVE-2020-6575, CVE-2020-6576, CVE-2020-15959 - Complete Opera 71.0 changelog at: https://blogs.opera.com/desktop/changelog-for-71/ - Update to version 70.0.3728.144 - CHR-8057 Update chromium on desktop-stable-84-3728 to 84.0.4147.135 - DNA-88027 [Mac] Downloads icon disappears when downloads popup is shown - DNA-88204 Crash at opera::DownloadItemView::OnMousePressed (ui::MouseEvent const&) - The update to chromium 84.0.4147.135 fixes following issues: - CVE-2020-6556 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2:NonFree: zypper in -t patch openSUSE-2020-1713=1 - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2020-1713=1 Package List: - openSUSE Leap 15.2:NonFree (x86_64): opera-71.0.3770.228-lp152.2.18.1 - openSUSE Leap 15.1:NonFree (x86_64): opera-71.0.3770.228-lp151.2.30.1 References: https://www.suse.com/security/cve/CVE-2020-15959.html https://www.suse.com/security/cve/CVE-2020-15960.html https://www.suse.com/security/cve/CVE-2020-15961.html https://www.suse.com/security/cve/CVE-2020-15962.html https://www.suse.com/security/cve/CVE-2020-15963.html https://www.suse.com/security/cve/CVE-2020-15964.html https://www.suse.com/security/cve/CVE-2020-15965.html https://www.suse.com/security/cve/CVE-2020-15966.html https://www.suse.com/security/cve/CVE-2020-6556.html https://www.suse.com/security/cve/CVE-2020-6573.html https://www.suse.com/security/cve/CVE-2020-6574.html https://www.suse.com/security/cve/CVE-2020-6575.html https://www.suse.com/security/cve/CVE-2020-6576.html

1 0

openSUSE-RU-2020:1714-1: moderate: Recommended update for hylafax+
by maintenance＠opensuse.org 23 Oct '20

23 Oct '20

openSUSE Recommended Update: Recommended update for hylafax+ ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1714-1 Rating: moderate References: #1172731 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hylafax+ fixes the following issues: Changes in hylafax+: - CVE-2020-8024: Fixed problematic permissions that allowed escalation from uucp to other users (boo#1172731) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1714=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): hylafax+-7.0.3-bp152.3.8.1 hylafax+-client-7.0.3-bp152.3.8.1 libfaxutil7_0_3-7.0.3-bp152.3.8.1 References: https://www.suse.com/security/cve/CVE-2020-8024.html https://bugzilla.suse.com/1172731

1 0