November 2020 - openSUSE Updates - openSUSE Mailing Lists

[opensuse-updates] openSUSE-RU-2020:1973-1: moderate: Recommended update for yast2-pam
by maintenance＠opensuse.org 20 Nov '20

20 Nov '20

openSUSE Recommended Update: Recommended update for yast2-pam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1973-1 Rating: moderate References: #1177632 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-pam fixes the following issues: - Fix initialize of packager to not break command line. (bsc#1177632) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1973=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-pam-4.2.5-lp152.2.3.1 References: https://bugzilla.suse.com/1177632

1 0

[opensuse-updates] openSUSE-RU-2020:1972-1: moderate: Recommended update for yast2-storage-ng
by maintenance＠opensuse.org 20 Nov '20

20 Nov '20

openSUSE Recommended Update: Recommended update for yast2-storage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1972-1 Rating: moderate References: #1177332 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-storage-ng fixes the following issues: - Fixes an issue when YaST Partitioner does not recognize partitions on Veritas disks. (bsc#1177332) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1972=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libstorage-ng-debuginfo-4.2.76-lp152.2.9.1 libstorage-ng-debugsource-4.2.76-lp152.2.9.1 libstorage-ng-devel-4.2.76-lp152.2.9.1 libstorage-ng-integration-tests-4.2.76-lp152.2.9.1 libstorage-ng-python3-4.2.76-lp152.2.9.1 libstorage-ng-python3-debuginfo-4.2.76-lp152.2.9.1 libstorage-ng-ruby-4.2.76-lp152.2.9.1 libstorage-ng-ruby-debuginfo-4.2.76-lp152.2.9.1 libstorage-ng-utils-4.2.76-lp152.2.9.1 libstorage-ng-utils-debuginfo-4.2.76-lp152.2.9.1 libstorage-ng1-4.2.76-lp152.2.9.1 libstorage-ng1-debuginfo-4.2.76-lp152.2.9.1 yast2-storage-ng-4.2.114-lp152.2.9.1 - openSUSE Leap 15.2 (noarch): libstorage-ng-lang-4.2.76-lp152.2.9.1 References: https://bugzilla.suse.com/1177332

1 0

[opensuse-updates] openSUSE-RU-2020:1974-1: moderate: Recommended update for yast2-security
by maintenance＠opensuse.org 20 Nov '20

20 Nov '20

openSUSE Recommended Update: Recommended update for yast2-security ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1974-1 Rating: moderate References: #1177720 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-security fixes the following issues: - Fixed an issue that caused the AutoYaST installation to fail on the security module (bsc#1177720) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1974=1 Package List: - openSUSE Leap 15.2 (noarch): yast2-security-4.2.14-lp152.2.6.1 References: https://bugzilla.suse.com/1177720

1 0

[opensuse-updates] openSUSE-RU-2020:1975-1: moderate: Recommended update for yast2-ruby-bindings
by maintenance＠opensuse.org 20 Nov '20

20 Nov '20

openSUSE Recommended Update: Recommended update for yast2-ruby-bindings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1975-1 Rating: moderate References: #1174198 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-ruby-bindings fixes the following issues: - Fixed an issue that caused yast2 network settings to hang (bsc#1174198) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1975=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): yast2-ruby-bindings-4.2.9-lp152.2.3.1 yast2-ruby-bindings-debuginfo-4.2.9-lp152.2.3.1 yast2-ruby-bindings-debugsource-4.2.9-lp152.2.3.1 References: https://bugzilla.suse.com/1174198

1 0

[opensuse-updates] openSUSE-RU-2020:1971-1: moderate: Recommended update for seamonkey
by maintenance＠opensuse.org 20 Nov '20

20 Nov '20

openSUSE Recommended Update: Recommended update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1971-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for seamonkey fixes the following issues: Seamonkey requested to be included in Leap 15.1 and 15.2: https://bugzilla.opensuse.org/show_bug.cgi?id=1174300 update appdata files (Bug 1174192): * correct metadata licensing information (most of the application descriptions had been taken from https://www.seamonkey-project.org/doc/features which according to the page footer is licensed under CC-BY-SA-3.0) * update the metadata summary and the introduction in the metadata description to more accurately reflect what SeaMonkey is, giving less prominence to the long-discontinued Mozilla Application Suite that many users may no longer be familiar with * update the metadata name to more accurately reflect the name or purpose of the application * update the metadata URL with the current SeaMonkey website update to SeaMonkey 2.53.3 * The LaTex tool TexZilla, used for inserting Math, has been upgraded to 1.0.2. * It is now possible to customize the toolbars in Composer and the formatting toolbar in Mailnews composition. * All folders of an account can now be marked as read. * There is now an option for not advertizing SeaMonkey at all in the user agent. * The preference for hiding the toolbar and menubar grippies can now be changed from "Preferences->Appearance". * The preference "browser.tabs.autoHide" which autohides the tab bar when there is only one tab in a browser window open has been flipped in bug 1634879. SeaMonkey will now show the tab bar as the default. You can change it back by checking "Hide the tab bar when only one tab is open" in "Preferences->Browser->Tabbed Browsing" * Update of help page content and links. * SeaMonkey language packs are now version specific and will be disabled as part of the profile upgrade following the installation of a later version. * Search Engines have been centralized and updated in bug 1300198. * Address book now has updated IM fields, improved layout for card view pane, improved multi-word search, ability to search across multiple address books, more granular prompts when deleting items, print on the context menus and print button on the toolbar. * Multimedia support has been updated in preparation of supporting more audio video formats in the next releases. For enhanced security the Rust multimedia parser is now used for this and the libstagefright package has been removed. * SeaMonkey 2.53.3 uses the same backend as Firefox and contains the relevant Firefox 60.4 security fixes. * SeaMonkey 2.53.3 shares most parts of the mail and news code with Thunderbird. Please read the Thunderbird 60.0 release notes for specific changes and security fixes in this release. * Additional important security fixes up to Current Firefox 77 and a few enhancements have been backported. This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1971=1 Package List: - openSUSE Backports SLE-15-SP2 (x86_64): seamonkey-2.53.3-bp152.4.3.1 seamonkey-translations-common-2.53.3-bp152.4.3.1 seamonkey-translations-other-2.53.3-bp152.4.3.1 References:

1 0

[opensuse-updates] openSUSE-SU-2020:1970-1: important: Security update for tor
by opensuse-security＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1970-1 Rating: important References: #1164275 #1167013 #1167014 #1173979 #1178741 Cross-References: CVE-2020-10592 CVE-2020-10593 CVE-2020-15572 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for tor fixes the following issues: Updating tor to a newer version in the respective codestream. - tor 0.3.5.12: * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741) * Not affected by out-of-bound memory access (CVE-2020-15572, boo#1173979) * Fix DoS defenses on bridges with a pluggable transport * CVE-2020-10592: CPU consumption DoS and timing patterns (boo#1167013) * CVE-2020-10593: circuit padding memory leak (boo#1167014) - tor 0.4.4.6 * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741) * Fix a crash due to an out-of-bound memory access (CVE-2020-15572, boo#1173979) * Fix logrotate to not fail when tor is stopped (boo#1164275) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1970=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1970=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1970=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1970=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1970=1 Package List: - openSUSE Leap 15.2 (x86_64): tor-0.4.4.6-lp152.2.3.1 tor-debuginfo-0.4.4.6-lp152.2.3.1 tor-debugsource-0.4.4.6-lp152.2.3.1 - openSUSE Leap 15.1 (x86_64): tor-0.3.5.12-lp151.2.6.1 tor-debuginfo-0.3.5.12-lp151.2.6.1 tor-debugsource-0.3.5.12-lp151.2.6.1 - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): tor-0.4.4.6-bp152.2.3.1 tor-debuginfo-0.4.4.6-bp152.2.3.1 tor-debugsource-0.4.4.6-bp152.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): tor-0.3.5.12-bp151.3.6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tor-0.3.5.12-25.1 References: https://www.suse.com/security/cve/CVE-2020-10592.html https://www.suse.com/security/cve/CVE-2020-10593.html https://www.suse.com/security/cve/CVE-2020-15572.html https://bugzilla.suse.com/1164275 https://bugzilla.suse.com/1167013 https://bugzilla.suse.com/1167014 https://bugzilla.suse.com/1173979 https://bugzilla.suse.com/1178741

1 0

[opensuse-updates] openSUSE-SU-2020:1970-1: important: Security update for tor
by opensuse-security＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1970-1 Rating: important References: #1164275 #1167013 #1167014 #1173979 #1178741 Cross-References: CVE-2020-10592 CVE-2020-10593 CVE-2020-15572 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for tor fixes the following issues: Updating tor to a newer version in the respective codestream. - tor 0.3.5.12: * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741) * Not affected by out-of-bound memory access (CVE-2020-15572, boo#1173979) * Fix DoS defenses on bridges with a pluggable transport * CVE-2020-10592: CPU consumption DoS and timing patterns (boo#1167013) * CVE-2020-10593: circuit padding memory leak (boo#1167014) - tor 0.4.4.6 * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741) * Fix a crash due to an out-of-bound memory access (CVE-2020-15572, boo#1173979) * Fix logrotate to not fail when tor is stopped (boo#1164275) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2020-1970=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tor-0.3.5.12-25.1 References: https://www.suse.com/security/cve/CVE-2020-10592.html https://www.suse.com/security/cve/CVE-2020-10593.html https://www.suse.com/security/cve/CVE-2020-15572.html https://bugzilla.suse.com/1164275 https://bugzilla.suse.com/1167013 https://bugzilla.suse.com/1167014 https://bugzilla.suse.com/1173979 https://bugzilla.suse.com/1178741

1 0

[opensuse-updates] openSUSE-SU-2020:1969-1: moderate: Security update for slurm_18_08
by opensuse-security＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Security Update: Security update for slurm_18_08 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1969-1 Rating: moderate References: #1172004 Cross-References: CVE-2020-12693 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slurm_18_08 fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to launch a process as an arbitrary user. (CVE-2020-12693, bsc#1172004). Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-1269 3.patch - Remove unneeded build dependency to postgresql-devel. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1969=1 Package List: - openSUSE Leap 15.1 (x86_64): libpmi0-18.08.9-lp151.2.1 libpmi0-debuginfo-18.08.9-lp151.2.1 libslurm33-18.08.9-lp151.2.1 libslurm33-debuginfo-18.08.9-lp151.2.1 perl-slurm-18.08.9-lp151.2.1 perl-slurm-debuginfo-18.08.9-lp151.2.1 slurm-18.08.9-lp151.2.1 slurm-auth-none-18.08.9-lp151.2.1 slurm-auth-none-debuginfo-18.08.9-lp151.2.1 slurm-config-18.08.9-lp151.2.1 slurm-config-man-18.08.9-lp151.2.1 slurm-cray-18.08.9-lp151.2.1 slurm-cray-debuginfo-18.08.9-lp151.2.1 slurm-debuginfo-18.08.9-lp151.2.1 slurm-debugsource-18.08.9-lp151.2.1 slurm-devel-18.08.9-lp151.2.1 slurm-doc-18.08.9-lp151.2.1 slurm-hdf5-18.08.9-lp151.2.1 slurm-hdf5-debuginfo-18.08.9-lp151.2.1 slurm-lua-18.08.9-lp151.2.1 slurm-lua-debuginfo-18.08.9-lp151.2.1 slurm-munge-18.08.9-lp151.2.1 slurm-munge-debuginfo-18.08.9-lp151.2.1 slurm-node-18.08.9-lp151.2.1 slurm-node-debuginfo-18.08.9-lp151.2.1 slurm-openlava-18.08.9-lp151.2.1 slurm-pam_slurm-18.08.9-lp151.2.1 slurm-pam_slurm-debuginfo-18.08.9-lp151.2.1 slurm-plugins-18.08.9-lp151.2.1 slurm-plugins-debuginfo-18.08.9-lp151.2.1 slurm-seff-18.08.9-lp151.2.1 slurm-sjstat-18.08.9-lp151.2.1 slurm-slurmdbd-18.08.9-lp151.2.1 slurm-slurmdbd-debuginfo-18.08.9-lp151.2.1 slurm-sql-18.08.9-lp151.2.1 slurm-sql-debuginfo-18.08.9-lp151.2.1 slurm-sview-18.08.9-lp151.2.1 slurm-sview-debuginfo-18.08.9-lp151.2.1 slurm-torque-18.08.9-lp151.2.1 slurm-torque-debuginfo-18.08.9-lp151.2.1 slurm-webdoc-18.08.9-lp151.2.1 References: https://www.suse.com/security/cve/CVE-2020-12693.html https://bugzilla.suse.com/1172004

1 0

[opensuse-updates] openSUSE-RU-2020:1968-1: moderate: Recommended update for libkgapi
by maintenance＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Recommended Update: Recommended update for libkgapi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1968-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for libkgapi fixes the following issues: - Accept HTTP status 307 as a redirect; otherwise Google document download fails with an unknown error. (kde#425261) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1968=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): libKPimGAPIBlogger5-20.04.2-bp152.2.3.1 libKPimGAPICalendar5-20.04.2-bp152.2.3.1 libKPimGAPIContacts5-20.04.2-bp152.2.3.1 libKPimGAPICore5-20.04.2-bp152.2.3.1 libKPimGAPIDrive5-20.04.2-bp152.2.3.1 libKPimGAPILatitude5-20.04.2-bp152.2.3.1 libKPimGAPIMaps5-20.04.2-bp152.2.3.1 libKPimGAPITasks5-20.04.2-bp152.2.3.1 libkgapi-devel-20.04.2-bp152.2.3.1 sasl2-kdexoauth2-20.04.2-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): libkgapi-lang-20.04.2-bp152.2.3.1 References:

1 0

[opensuse-updates] openSUSE-RU-2020:1967-1: moderate: Recommended update for pgaudit
by maintenance＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Recommended Update: Recommended update for pgaudit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1967-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for pgaudit fixes the following issues: Version update of pgaudit: - 1.0.8: https://github.com/pgaudit/pgaudit/releases/tag/1.0.8 - 1.1.3: https://github.com/pgaudit/pgaudit/releases/tag/1.1.3 - 1.2.2: https://github.com/pgaudit/pgaudit/releases/tag/1.2.2 - 1.3.3: https://github.com/pgaudit/pgaudit/releases/tag/1.3.2 - 1.4.1: https://github.com/pgaudit/pgaudit/releases/tag/1.4.1 - added pg 13 support by adding 1.5.0 https://github.com/pgaudit/pgaudit/releases/tag/1.5.0 - bump package for existing versions and add support for newer pg versions: - 1.0.7: https://github.com/pgaudit/pgaudit/releases/tag/1.0.7 - 1.1.2: https://github.com/pgaudit/pgaudit/releases/tag/1.1.2 - 1.2.1: https://github.com/pgaudit/pgaudit/releases/tag/1.2.1 - 1.3.1: https://github.com/pgaudit/pgaudit/releases/tag/1.3.1 - 1.4.0: https://github.com/pgaudit/pgaudit/releases/tag/1.4.0 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1967=1 Package List: - openSUSE Leap 15.2 (x86_64): postgresql10-pgaudit-1.2.2-lp152.5.1 postgresql10-pgaudit-debuginfo-1.2.2-lp152.5.1 postgresql10-pgaudit-debugsource-1.2.2-lp152.5.1 postgresql11-pgaudit-1.3.2-lp152.5.1 postgresql11-pgaudit-debuginfo-1.3.2-lp152.5.1 postgresql11-pgaudit-debugsource-1.3.2-lp152.5.1 postgresql11-pgaudit-llvmjit-1.3.2-lp152.5.1 postgresql12-pgaudit-1.4.1-lp152.5.1 postgresql12-pgaudit-debuginfo-1.4.1-lp152.5.1 postgresql12-pgaudit-debugsource-1.4.1-lp152.5.1 postgresql12-pgaudit-llvmjit-1.4.1-lp152.5.1 postgresql96-pgaudit-1.1.3-lp152.5.1 postgresql96-pgaudit-debuginfo-1.1.3-lp152.5.1 postgresql96-pgaudit-debugsource-1.1.3-lp152.5.1 References:

1 0