November 2020 - openSUSE Updates - openSUSE Mailing Lists

[opensuse-updates] openSUSE-SU-2020:1961-1: important: Security update for gdm
by opensuse-security＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Security Update: Security update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1961-1 Rating: important References: #1178150 Cross-References: CVE-2020-16125 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gdm fixes the following issues: - Exit with failure if loading existing users fails (bsc#1178150 CVE-2020-16125). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1961=1 Package List: - openSUSE Leap 15.2 (x86_64): gdm-3.34.1-lp152.6.9.1 gdm-debuginfo-3.34.1-lp152.6.9.1 gdm-debugsource-3.34.1-lp152.6.9.1 gdm-devel-3.34.1-lp152.6.9.1 libgdm1-3.34.1-lp152.6.9.1 libgdm1-debuginfo-3.34.1-lp152.6.9.1 typelib-1_0-Gdm-1_0-3.34.1-lp152.6.9.1 - openSUSE Leap 15.2 (noarch): gdm-branding-upstream-3.34.1-lp152.6.9.1 gdm-lang-3.34.1-lp152.6.9.1 gdm-systemd-3.34.1-lp152.6.9.1 gdmflexiserver-3.34.1-lp152.6.9.1 References: https://www.suse.com/security/cve/CVE-2020-16125.html https://bugzilla.suse.com/1178150

1 0

[opensuse-updates] openSUSE-RU-2020:1965-1: moderate: Recommended update for sddm
by maintenance＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Recommended Update: Recommended update for sddm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1965-1 Rating: moderate References: #1178543 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sddm fixes the following issues: Use a consistent hostname for xauth (boo#1178543): * Make DaemonApp::hostName() return a consistent value * Use it for adding the cookie as well * Also set XAUTHLOCALHOSTNAME for the display setup script and xsetcursor This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1965=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): sddm-0.18.0-bp152.5.6.1 sddm-branding-SLE-0.18.0-bp152.5.6.1 sddm-branding-openSUSE-0.18.0-bp152.5.6.1 sddm-branding-upstream-0.18.0-bp152.5.6.1 References: https://bugzilla.suse.com/1178543

1 0

[opensuse-updates] openSUSE-RU-2020:1963-1: moderate: Recommended update for sddm
by maintenance＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Recommended Update: Recommended update for sddm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1963-1 Rating: moderate References: #1178543 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sddm fixes the following issues: Use a consistent hostname for xauth (boo#1178543): * Make DaemonApp::hostName() return a consistent value * Use it for adding the cookie as well * Also set XAUTHLOCALHOSTNAME for the display setup script and xsetcursor This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1963=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): sddm-0.18.0-bp151.4.9.1 sddm-branding-SLE-0.18.0-bp151.4.9.1 sddm-branding-openSUSE-0.18.0-bp151.4.9.1 sddm-branding-upstream-0.18.0-bp151.4.9.1 References: https://bugzilla.suse.com/1178543

1 0

[opensuse-updates] openSUSE-RU-2020:1964-1: moderate: Recommended update for proteus, trytond, trytond_account
by maintenance＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Recommended Update: Recommended update for proteus, trytond, trytond_account ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1964-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for proteus, trytond, trytond_account fixes the following issues: - trytond was updated to version 5.0.29 - Bugfix Release - trytond_account was updated to version 5.0.16 - Bugfix Release - proteus was updated to version 5.0.8 - Bugfix Release This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1964=1 Package List: - openSUSE Backports SLE-15-SP2 (noarch): proteus-5.0.8-bp152.2.4.1 References:

1 0

[opensuse-updates] openSUSE-SU-2020:1962-1: important: Security update for kernel-firmware
by opensuse-security＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1962-1 Rating: important References: #1178671 Cross-References: CVE-2020-12321 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kernel-firmware fixes the following issue: - CVE-2020-12321: Updated the Intel Bluetooth firmware for buffer overflow security bugs (bsc#1178671). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1962=1 Package List: - openSUSE Leap 15.2 (noarch): kernel-firmware-20200107-lp152.2.3.1 ucode-amd-20200107-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-12321.html https://bugzilla.suse.com/1178671

1 0

[opensuse-updates] openSUSE-SU-2020:1966-1: important: Security update for moinmoin-wiki
by opensuse-security＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Security Update: Security update for moinmoin-wiki ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1966-1 Rating: important References: #1178744 #1178745 Cross-References: CVE-2020-15275 CVE-2020-25074 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for moinmoin-wiki fixes the following issues: - update to version 1.9.11: CVE-2020-25074 (boo#1178744): fix remote code execution via cache action CVE-2020-15275 (boo#1178745): fix malicious SVG attachment causing stored XSS vulnerability Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1966=1 Package List: - openSUSE Leap 15.2 (noarch): moinmoin-wiki-1.9.11-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-15275.html https://www.suse.com/security/cve/CVE-2020-25074.html https://bugzilla.suse.com/1178744 https://bugzilla.suse.com/1178745

1 0

[opensuse-updates] openSUSE-SU-2020:1960-1: important: Security update for kernel-firmware
by opensuse-security＠opensuse.org 19 Nov '20

19 Nov '20

openSUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1960-1 Rating: important References: #1178671 Cross-References: CVE-2020-12321 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kernel-firmware fixes the following issue: - CVE-2020-12321: Updated the Intel Bluetooth firmware for buffer overflow security bugs (bsc#1178671). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1960=1 Package List: - openSUSE Leap 15.1 (noarch): kernel-firmware-20200107-lp151.2.15.1 ucode-amd-20200107-lp151.2.15.1 References: https://www.suse.com/security/cve/CVE-2020-12321.html https://bugzilla.suse.com/1178671

1 0

[opensuse-updates] openSUSE-RU-2020:1958-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 18 Nov '20

18 Nov '20

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1958-1 Rating: moderate References: #1178248 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocfs2-tools fixes the following issues: - Fix for pointing out the default value of mount options. (bsc#1178248) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1958=1 Package List: - openSUSE Leap 15.2 (x86_64): ocfs2-tools-1.8.5-lp152.7.6.1 ocfs2-tools-debuginfo-1.8.5-lp152.7.6.1 ocfs2-tools-debugsource-1.8.5-lp152.7.6.1 ocfs2-tools-devel-1.8.5-lp152.7.6.1 ocfs2-tools-devel-static-1.8.5-lp152.7.6.1 ocfs2-tools-o2cb-1.8.5-lp152.7.6.1 ocfs2-tools-o2cb-debuginfo-1.8.5-lp152.7.6.1 References: https://bugzilla.suse.com/1178248

1 0

[opensuse-updates] openSUSE-SU-2020:1959-1: important: Security update for raptor
by opensuse-security＠opensuse.org 18 Nov '20

18 Nov '20

openSUSE Security Update: Security update for raptor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1959-1 Rating: important References: #1178593 Cross-References: CVE-2017-18926 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for raptor fixes the following issues: - Fixed a heap overflow vulnerability (bsc#1178593, CVE-2017-18926). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1959=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libraptor-devel-2.0.15-lp151.3.3.1 libraptor2-0-2.0.15-lp151.3.3.1 libraptor2-0-debuginfo-2.0.15-lp151.3.3.1 raptor-2.0.15-lp151.3.3.1 raptor-debuginfo-2.0.15-lp151.3.3.1 raptor-debugsource-2.0.15-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libraptor2-0-32bit-2.0.15-lp151.3.3.1 libraptor2-0-32bit-debuginfo-2.0.15-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2017-18926.html https://bugzilla.suse.com/1178593

1 0

[opensuse-updates] openSUSE-RU-2020:1956-1: moderate: Recommended update for findutils
by maintenance＠opensuse.org 18 Nov '20

18 Nov '20

openSUSE Recommended Update: Recommended update for findutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1956-1 Rating: moderate References: #1174232 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for findutils fixes the following issues: - Do not unconditionally use leaf optimization for NFS. (bsc#1174232) NFS st_nlink are not accurate on all implementations, leading to aborts() if that assumption is made. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1956=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): findutils-4.6.0-lp152.5.3.1 findutils-debuginfo-4.6.0-lp152.5.3.1 findutils-debugsource-4.6.0-lp152.5.3.1 - openSUSE Leap 15.2 (noarch): findutils-lang-4.6.0-lp152.5.3.1 References: https://bugzilla.suse.com/1174232

1 0